<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4599"><package pkgid="063bf08cb884951645f3bb3ab209a11768d5fac9c7f03920836d363d9bc88bc3" name="389-ds" arch="src">
    <version epoch="0" ver="1.3.4.5" rel="8.1"/>

<changelog author="jengelh@inai.de" date="1347883200">- Initial package (version 1.2.11.12) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1348660800">- Update to new upstream release 1.2.11.15
  * This is a bugfix release to CLEANALLRUV, userpassword,
  schema reloading and others.</changelog>
<changelog author="jengelh@inai.de" date="1363003200">- Update to new upstream release 1.3.0.3
  * No NEWS file available; SCM changelog entries at
  http://port389.org/wiki/Releases/1.3.0.2#New_features_.2F_Fixed_bugs_in_1.3.0</changelog>
<changelog author="jengelh@inai.de" date="1375444800">- Update to new upstream release 1.3.1.5
  * Plug-in transaction support
  * Normalized DN cache
  * Configurable allowed SASL mechanisms
  * SASL mapping improvements
  * Configurable SASL buffer
  * Replication retry settings
  * Instance script improvements
  * Access log analyzer improvements
  * Performance improvements</changelog>
<changelog author="jengelh@inai.de" date="1388145600">- Update to new upstream release 1.3.2.10
  * Suffixes used in the memberof and referential integrity plug-ins
  are now configurable.
  * The hard-coded limit of 64 masters was removed.
  * Enhancements: plug-in library path validation, replication
  logging, changelog trimming interval, and referential integrity.</changelog>
<changelog author="aj@ajaissle.de" date="1392638400">- Update to new upstream release 1.3.2.11
  * Enhancement: ACL supports new keyword SELFDN as in "&lt;userattr&gt; =
  &lt;attribute&gt;#SELFDN" to allow users to create entries assigned to
  themselves. Also handling subtype in ACL is improved.
  * A dozen of bugs are fixed including a crash bug and a deadlock.
- Spec cleanup
  * enable init scripts for openSUSE &lt; 1220 (e.g. SLES)
  * dirsrv.target.wants goes into unitdir
  * Added a 389-ds-rpmlintrc
- Added 389-ds-base-1.3.2.11_init_fhs.patch
  * Make init scripts LSB conform</changelog>
<changelog author="aj@ajaissle.de" date="1395921600">- Update to new upstream release 1.3.2.16
  * Directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
  * Create a normalized dn cache
  * Replication retry time attributes cannot be added
  * Empty control list causes LDAP protocol error is thrown (dup 47361)
  * Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
  * Windows Sync group issues
  * Size returned by slapi_entry_size is not accurate
  * Single valued attribute replicated ADD does not work
  * Environment variables are not passed when DS is started via service
  * Propagate plugin precedence to all registered function types
  * Unresolved external symbol references break loading of the ACL plugin
  * Package issue in 389-ds-base
- Fix unresolveable 'Requires:'
  * perl(Mozilla:LDAP) -&gt; perl(Mozilla::LDAP::API), perl(Mozilla::LDAP::Conn),
  perl(Mozilla::LDAP::Entry), perl(Mozilla::LDAP::LDIF), perl(Mozilla::LDAP::Utils)
  * cyrus-sasl-md5 -&gt; cyrus-sasl-digestmd5
- Macros for dirsrv-snmp in pre/post/preun/postun</changelog>
<changelog author="aj@ajaissle.de" date="1409313600">- Update to new upstream release 1.3.2.23
  * Various bugs were fixed
- Highlights since 1.3.2.16:
  * Important bugs including memory leaks and crash bugs were fixed
  (1.3.2.17)
  * Various bugs were fixed (1.3.2.18)
  * Various bugs were fixed (1.3.2.19)
  * A security bug was fixed (1.3.2.22)</changelog>
<changelog author="aj@ajaissle.de" date="1410264000">- Update to new upstream release 1.3.3.0
  * First cut of 389-ds-base-1.3.3.x</changelog>
<changelog author="aj@ajaissle.de" date="1418126400">- Update to new upstream release 1.3.3.5
  * Several bugs are fixed.</changelog>
<changelog author="aj@ajaissle.de" date="1419422400">- Conflicts with atheme -- /usr/sbin/dbverify</changelog>
<changelog author="aj@ajaissle.de" date="1427544000">- Update to new upstream release 1.3.3.9
  * Several bugs are fixed including 2 security bugs
    Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
    Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
    Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config
    Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
    Ticket 47742 - 64bit problem on big endian: auth method not supported
    Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
    Ticket 47828 - DNA scope: allow to exlude some subtrees
    Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
    Ticket 47901 - After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
    Ticket 47936 - Create a global lock to serialize write operations over several backends
    Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
    Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
    Ticket 48003 - add template scripts
    Ticket 48003 - build "suite" framework
    Ticket 48005 - ns-slapd crash in shutdown phase
    Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
    Ticket 48027 - revise the rootdn plugin configuration validation
    Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
    Ticket 48048 - Fix coverity issues - 2015/2/24
    Ticket 48048 - Fix coverity issues - 2015/3/1
    Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)</changelog>
<changelog author="aj@ajaissle.de" date="1428926400">- Move bin/ and sbin/ to /usr/lib/389-ds/bin resp. sbin/
- Removed conflict with atheme</changelog>
<changelog author="jengelh@inai.de" date="1429099200">- Simplify filelist</changelog>
<changelog author="aj@ajaissle.de" date="1430308800">- Update to new upstream release 1.3.3.10
  * One important security bug was fixed:
    Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn</changelog>
<changelog author="aj@ajaissle.de" date="1434542400">- Update to new upstream release 1.3.3.11
- Added 389-ds-1.3.3.11-CVE-2015-3230.patch:
  nsSSL3Ciphers preference not enforced on server side
  [boo#934934] [CVE-2015-3230]</changelog>
<changelog author="aj@ajaissle.de" date="1441800000">- Update to new upstream release 1.3.3.13
- Removed 389-ds-1.3.3.11-CVE-2015-3230.patch (included upstream)</changelog>
<changelog author="hguo@suse.com" date="1442232000">- Upgrade from 1.3.3.13 to 1.3.4.4 with accumulated bugfixes.</changelog>
<changelog author="aj@ajaissle.de" date="1448020800">- Update to new upstream release 1.3.4.5
  * Various bugs are fixed</changelog>
<changelog author="hguo@suse.com" date="1512475200">- Cherry pick upstream CVE fixes:
  * 0001-Ticket-48375-SimplePagedResults-in-the-search-error-.patch
  * 0002-Ticket-48406-Avoid-self-deadlock-by-PR_Lock-conn-c_m.patch
  * 0003-Ticket-48924-Fixup-tombstone-task-needs-to-set-prope.patch
  * 0004-Subject-PATCH-1-2-Bug-1347760-CVE-2016-4992-389-ds-b.patch
  * 0005-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0006-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0007-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0008-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0009-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0010-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0011-Ticket-48986-47808-triggers-overflow-in-uiduniq.c.patch
  * 0012-Ticket-49336-SECURITY-1.3.5.x-Locked-account-provide.patch
  * 0013-Fix-for-cve-2017-2668-Remote-crash-via-crafted-LDAP-.patch
  * 0014-Ticket-48412-worker-threads-do-not-detect-abnormally.patch
  For bsc#1051997, bsc#1007004, bsc#1020670, bsc#1069074, bsc#1069067,
  bsc#997256 that correspond to CVE-2017-7551, CVE-2016-5405,
  CVE-2017-2668, CVE-2017-2668, CVE-2016-4992.</changelog>

</package>
<package pkgid="6e141875ce81e213d1e98d7f00bb722fb814ba06da043049f7a911a23882907e" name="389-ds" arch="x86_64">
    <version epoch="0" ver="1.3.4.5" rel="8.1"/>

<changelog author="jengelh@inai.de" date="1347883200">- Initial package (version 1.2.11.12) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1348660800">- Update to new upstream release 1.2.11.15
  * This is a bugfix release to CLEANALLRUV, userpassword,
  schema reloading and others.</changelog>
<changelog author="jengelh@inai.de" date="1363003200">- Update to new upstream release 1.3.0.3
  * No NEWS file available; SCM changelog entries at
  http://port389.org/wiki/Releases/1.3.0.2#New_features_.2F_Fixed_bugs_in_1.3.0</changelog>
<changelog author="jengelh@inai.de" date="1375444800">- Update to new upstream release 1.3.1.5
  * Plug-in transaction support
  * Normalized DN cache
  * Configurable allowed SASL mechanisms
  * SASL mapping improvements
  * Configurable SASL buffer
  * Replication retry settings
  * Instance script improvements
  * Access log analyzer improvements
  * Performance improvements</changelog>
<changelog author="jengelh@inai.de" date="1388145600">- Update to new upstream release 1.3.2.10
  * Suffixes used in the memberof and referential integrity plug-ins
  are now configurable.
  * The hard-coded limit of 64 masters was removed.
  * Enhancements: plug-in library path validation, replication
  logging, changelog trimming interval, and referential integrity.</changelog>
<changelog author="aj@ajaissle.de" date="1392638400">- Update to new upstream release 1.3.2.11
  * Enhancement: ACL supports new keyword SELFDN as in "&lt;userattr&gt; =
  &lt;attribute&gt;#SELFDN" to allow users to create entries assigned to
  themselves. Also handling subtype in ACL is improved.
  * A dozen of bugs are fixed including a crash bug and a deadlock.
- Spec cleanup
  * enable init scripts for openSUSE &lt; 1220 (e.g. SLES)
  * dirsrv.target.wants goes into unitdir
  * Added a 389-ds-rpmlintrc
- Added 389-ds-base-1.3.2.11_init_fhs.patch
  * Make init scripts LSB conform</changelog>
<changelog author="aj@ajaissle.de" date="1395921600">- Update to new upstream release 1.3.2.16
  * Directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
  * Create a normalized dn cache
  * Replication retry time attributes cannot be added
  * Empty control list causes LDAP protocol error is thrown (dup 47361)
  * Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
  * Windows Sync group issues
  * Size returned by slapi_entry_size is not accurate
  * Single valued attribute replicated ADD does not work
  * Environment variables are not passed when DS is started via service
  * Propagate plugin precedence to all registered function types
  * Unresolved external symbol references break loading of the ACL plugin
  * Package issue in 389-ds-base
- Fix unresolveable 'Requires:'
  * perl(Mozilla:LDAP) -&gt; perl(Mozilla::LDAP::API), perl(Mozilla::LDAP::Conn),
  perl(Mozilla::LDAP::Entry), perl(Mozilla::LDAP::LDIF), perl(Mozilla::LDAP::Utils)
  * cyrus-sasl-md5 -&gt; cyrus-sasl-digestmd5
- Macros for dirsrv-snmp in pre/post/preun/postun</changelog>
<changelog author="aj@ajaissle.de" date="1409313600">- Update to new upstream release 1.3.2.23
  * Various bugs were fixed
- Highlights since 1.3.2.16:
  * Important bugs including memory leaks and crash bugs were fixed
  (1.3.2.17)
  * Various bugs were fixed (1.3.2.18)
  * Various bugs were fixed (1.3.2.19)
  * A security bug was fixed (1.3.2.22)</changelog>
<changelog author="aj@ajaissle.de" date="1410264000">- Update to new upstream release 1.3.3.0
  * First cut of 389-ds-base-1.3.3.x</changelog>
<changelog author="aj@ajaissle.de" date="1418126400">- Update to new upstream release 1.3.3.5
  * Several bugs are fixed.</changelog>
<changelog author="aj@ajaissle.de" date="1419422400">- Conflicts with atheme -- /usr/sbin/dbverify</changelog>
<changelog author="aj@ajaissle.de" date="1427544000">- Update to new upstream release 1.3.3.9
  * Several bugs are fixed including 2 security bugs
    Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
    Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
    Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config
    Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
    Ticket 47742 - 64bit problem on big endian: auth method not supported
    Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
    Ticket 47828 - DNA scope: allow to exlude some subtrees
    Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
    Ticket 47901 - After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
    Ticket 47936 - Create a global lock to serialize write operations over several backends
    Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
    Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
    Ticket 48003 - add template scripts
    Ticket 48003 - build "suite" framework
    Ticket 48005 - ns-slapd crash in shutdown phase
    Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
    Ticket 48027 - revise the rootdn plugin configuration validation
    Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
    Ticket 48048 - Fix coverity issues - 2015/2/24
    Ticket 48048 - Fix coverity issues - 2015/3/1
    Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)</changelog>
<changelog author="aj@ajaissle.de" date="1428926400">- Move bin/ and sbin/ to /usr/lib/389-ds/bin resp. sbin/
- Removed conflict with atheme</changelog>
<changelog author="jengelh@inai.de" date="1429099200">- Simplify filelist</changelog>
<changelog author="aj@ajaissle.de" date="1430308800">- Update to new upstream release 1.3.3.10
  * One important security bug was fixed:
    Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn</changelog>
<changelog author="aj@ajaissle.de" date="1434542400">- Update to new upstream release 1.3.3.11
- Added 389-ds-1.3.3.11-CVE-2015-3230.patch:
  nsSSL3Ciphers preference not enforced on server side
  [boo#934934] [CVE-2015-3230]</changelog>
<changelog author="aj@ajaissle.de" date="1441800000">- Update to new upstream release 1.3.3.13
- Removed 389-ds-1.3.3.11-CVE-2015-3230.patch (included upstream)</changelog>
<changelog author="hguo@suse.com" date="1442232000">- Upgrade from 1.3.3.13 to 1.3.4.4 with accumulated bugfixes.</changelog>
<changelog author="aj@ajaissle.de" date="1448020800">- Update to new upstream release 1.3.4.5
  * Various bugs are fixed</changelog>
<changelog author="hguo@suse.com" date="1512475200">- Cherry pick upstream CVE fixes:
  * 0001-Ticket-48375-SimplePagedResults-in-the-search-error-.patch
  * 0002-Ticket-48406-Avoid-self-deadlock-by-PR_Lock-conn-c_m.patch
  * 0003-Ticket-48924-Fixup-tombstone-task-needs-to-set-prope.patch
  * 0004-Subject-PATCH-1-2-Bug-1347760-CVE-2016-4992-389-ds-b.patch
  * 0005-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0006-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0007-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0008-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0009-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0010-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0011-Ticket-48986-47808-triggers-overflow-in-uiduniq.c.patch
  * 0012-Ticket-49336-SECURITY-1.3.5.x-Locked-account-provide.patch
  * 0013-Fix-for-cve-2017-2668-Remote-crash-via-crafted-LDAP-.patch
  * 0014-Ticket-48412-worker-threads-do-not-detect-abnormally.patch
  For bsc#1051997, bsc#1007004, bsc#1020670, bsc#1069074, bsc#1069067,
  bsc#997256 that correspond to CVE-2017-7551, CVE-2016-5405,
  CVE-2017-2668, CVE-2017-2668, CVE-2016-4992.</changelog>

</package>
<package pkgid="e4a37fedfeddb49f86423c085930457f6e07c14f0600c977ffceb762bf16bbfb" name="389-ds-devel" arch="x86_64">
    <version epoch="0" ver="1.3.4.5" rel="8.1"/>

<changelog author="jengelh@inai.de" date="1347883200">- Initial package (version 1.2.11.12) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1348660800">- Update to new upstream release 1.2.11.15
  * This is a bugfix release to CLEANALLRUV, userpassword,
  schema reloading and others.</changelog>
<changelog author="jengelh@inai.de" date="1363003200">- Update to new upstream release 1.3.0.3
  * No NEWS file available; SCM changelog entries at
  http://port389.org/wiki/Releases/1.3.0.2#New_features_.2F_Fixed_bugs_in_1.3.0</changelog>
<changelog author="jengelh@inai.de" date="1375444800">- Update to new upstream release 1.3.1.5
  * Plug-in transaction support
  * Normalized DN cache
  * Configurable allowed SASL mechanisms
  * SASL mapping improvements
  * Configurable SASL buffer
  * Replication retry settings
  * Instance script improvements
  * Access log analyzer improvements
  * Performance improvements</changelog>
<changelog author="jengelh@inai.de" date="1388145600">- Update to new upstream release 1.3.2.10
  * Suffixes used in the memberof and referential integrity plug-ins
  are now configurable.
  * The hard-coded limit of 64 masters was removed.
  * Enhancements: plug-in library path validation, replication
  logging, changelog trimming interval, and referential integrity.</changelog>
<changelog author="aj@ajaissle.de" date="1392638400">- Update to new upstream release 1.3.2.11
  * Enhancement: ACL supports new keyword SELFDN as in "&lt;userattr&gt; =
  &lt;attribute&gt;#SELFDN" to allow users to create entries assigned to
  themselves. Also handling subtype in ACL is improved.
  * A dozen of bugs are fixed including a crash bug and a deadlock.
- Spec cleanup
  * enable init scripts for openSUSE &lt; 1220 (e.g. SLES)
  * dirsrv.target.wants goes into unitdir
  * Added a 389-ds-rpmlintrc
- Added 389-ds-base-1.3.2.11_init_fhs.patch
  * Make init scripts LSB conform</changelog>
<changelog author="aj@ajaissle.de" date="1395921600">- Update to new upstream release 1.3.2.16
  * Directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
  * Create a normalized dn cache
  * Replication retry time attributes cannot be added
  * Empty control list causes LDAP protocol error is thrown (dup 47361)
  * Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
  * Windows Sync group issues
  * Size returned by slapi_entry_size is not accurate
  * Single valued attribute replicated ADD does not work
  * Environment variables are not passed when DS is started via service
  * Propagate plugin precedence to all registered function types
  * Unresolved external symbol references break loading of the ACL plugin
  * Package issue in 389-ds-base
- Fix unresolveable 'Requires:'
  * perl(Mozilla:LDAP) -&gt; perl(Mozilla::LDAP::API), perl(Mozilla::LDAP::Conn),
  perl(Mozilla::LDAP::Entry), perl(Mozilla::LDAP::LDIF), perl(Mozilla::LDAP::Utils)
  * cyrus-sasl-md5 -&gt; cyrus-sasl-digestmd5
- Macros for dirsrv-snmp in pre/post/preun/postun</changelog>
<changelog author="aj@ajaissle.de" date="1409313600">- Update to new upstream release 1.3.2.23
  * Various bugs were fixed
- Highlights since 1.3.2.16:
  * Important bugs including memory leaks and crash bugs were fixed
  (1.3.2.17)
  * Various bugs were fixed (1.3.2.18)
  * Various bugs were fixed (1.3.2.19)
  * A security bug was fixed (1.3.2.22)</changelog>
<changelog author="aj@ajaissle.de" date="1410264000">- Update to new upstream release 1.3.3.0
  * First cut of 389-ds-base-1.3.3.x</changelog>
<changelog author="aj@ajaissle.de" date="1418126400">- Update to new upstream release 1.3.3.5
  * Several bugs are fixed.</changelog>
<changelog author="aj@ajaissle.de" date="1419422400">- Conflicts with atheme -- /usr/sbin/dbverify</changelog>
<changelog author="aj@ajaissle.de" date="1427544000">- Update to new upstream release 1.3.3.9
  * Several bugs are fixed including 2 security bugs
    Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
    Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
    Ticket 47451 - dynamic plugins - fix crash caused by invalid plugin config
    Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
    Ticket 47742 - 64bit problem on big endian: auth method not supported
    Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
    Ticket 47828 - DNA scope: allow to exlude some subtrees
    Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
    Ticket 47901 - After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
    Ticket 47936 - Create a global lock to serialize write operations over several backends
    Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
    Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
    Ticket 48003 - add template scripts
    Ticket 48003 - build "suite" framework
    Ticket 48005 - ns-slapd crash in shutdown phase
    Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
    Ticket 48027 - revise the rootdn plugin configuration validation
    Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
    Ticket 48048 - Fix coverity issues - 2015/2/24
    Ticket 48048 - Fix coverity issues - 2015/3/1
    Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)</changelog>
<changelog author="aj@ajaissle.de" date="1428926400">- Move bin/ and sbin/ to /usr/lib/389-ds/bin resp. sbin/
- Removed conflict with atheme</changelog>
<changelog author="jengelh@inai.de" date="1429099200">- Simplify filelist</changelog>
<changelog author="aj@ajaissle.de" date="1430308800">- Update to new upstream release 1.3.3.10
  * One important security bug was fixed:
    Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn</changelog>
<changelog author="aj@ajaissle.de" date="1434542400">- Update to new upstream release 1.3.3.11
- Added 389-ds-1.3.3.11-CVE-2015-3230.patch:
  nsSSL3Ciphers preference not enforced on server side
  [boo#934934] [CVE-2015-3230]</changelog>
<changelog author="aj@ajaissle.de" date="1441800000">- Update to new upstream release 1.3.3.13
- Removed 389-ds-1.3.3.11-CVE-2015-3230.patch (included upstream)</changelog>
<changelog author="hguo@suse.com" date="1442232000">- Upgrade from 1.3.3.13 to 1.3.4.4 with accumulated bugfixes.</changelog>
<changelog author="aj@ajaissle.de" date="1448020800">- Update to new upstream release 1.3.4.5
  * Various bugs are fixed</changelog>
<changelog author="hguo@suse.com" date="1512475200">- Cherry pick upstream CVE fixes:
  * 0001-Ticket-48375-SimplePagedResults-in-the-search-error-.patch
  * 0002-Ticket-48406-Avoid-self-deadlock-by-PR_Lock-conn-c_m.patch
  * 0003-Ticket-48924-Fixup-tombstone-task-needs-to-set-prope.patch
  * 0004-Subject-PATCH-1-2-Bug-1347760-CVE-2016-4992-389-ds-b.patch
  * 0005-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0006-Bug-1347760-CVE-2016-4992-389-ds-base-Information-di.patch
  * 0007-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0008-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0009-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0010-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch
  * 0011-Ticket-48986-47808-triggers-overflow-in-uiduniq.c.patch
  * 0012-Ticket-49336-SECURITY-1.3.5.x-Locked-account-provide.patch
  * 0013-Fix-for-cve-2017-2668-Remote-crash-via-crafted-LDAP-.patch
  * 0014-Ticket-48412-worker-threads-do-not-detect-abnormally.patch
  For bsc#1051997, bsc#1007004, bsc#1020670, bsc#1069074, bsc#1069067,
  bsc#997256 that correspond to CVE-2017-7551, CVE-2016-5405,
  CVE-2017-2668, CVE-2017-2668, CVE-2016-4992.</changelog>

</package>
<package pkgid="cf95b0e3d1aae3141bdaf7c26ca7b8fa42489e587c301a5129773eeef9bef658" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="1caf92b3c33654afe0a2f2161c289e88925ce7eb707d74133c7c300ed490740a" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="e2c3a7579bd86a60b5ba818ce97a47e7cab38e75d333017ac7ee9da4d2be7349" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="6c6adce88ed29b124b672fb75c6cf44229655c50b47792cb65beaaea122bc9ef" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="04ade38e8a8bcf24a2e8d4a70aa6cf7e8e59af6ae6c606ce59e1643814217ec8" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="c0ec566719ac3d966cfd373be7b2a81f77ec7f1718fe301b71bf9e330ee6db0a" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="3f0b10075fc82345bdd3587942a9ff66424c1e1a55274077c22209b6d9c30c5c" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="8d10c83b3cf1dc78e5ed20bdab5eeafef29ef37915ca99023298fa8933fad1a2" name="GraphicsMagick" arch="src">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="a26ce0f7e70f44a8d8f774e897c72ee180060a96dba6bd0753c0cd76cb43f94e" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="e85ededb899bd9b3513c4b16837ca82690057ac496f8f72c1060d580ab254b39" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="099b2977cd0546e46420317b9a834844f8877f0833d2cdc5d28e776363be4077" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="ac19df1233ce2f0f4512a41450968a22fa407156b68e4a3874a05a13ea7ce0ab" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="578d6a91b892bf75ac631db69ca74ff62ec797e00a284e8d17f1b07adc103fb2" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="ed82c39123251b6c1c6a86e37a1f46874648f0fd75906726056a7330f4ad7c44" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="020c82cb140d2de4170b1c793487cfdf33ad93c611a9b1431106a0fb5dd77255" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="3c8f1b1fd13e822c9166cff706db958e22fcde432efab879da1a6bd8ca9ff6b0" name="GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="24e95523d98033aad5d0a11f4d231a79040ccbbcfa26bca07231bae374e1bb3b" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="aef4fe72a5cd6a547317db79610108c98c6b9284a7464e5c5d1677873443a731" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="59df3dbcc5527d8d2c1eed0b74d60ddc8d7fd39fe3cb902a119b5627f6b034cd" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="37f0101f1c06d96a6a0b4aa1787112378a0ca19e5ed320868fb6ced848304a5f" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="c70f8f210b7ae62c1f12e5c382bd322f04429b13653a395092453a4cac4b7ca4" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="7c71821640e0e43fda4345676541bc0aef20354d4b9df5099ddca394ec4c150b" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="fe7ef882e9854786520f28a083cd1b4a173e44f12263f6cd62306477726fa30c" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="2f1eca43456804b1c321e697a7fbfcc36b4f505349416c6faa59aef05a541915" name="GraphicsMagick-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="7bb116c7e9c5ebba8e99e35fc2af2fe075c9f7e04ad9601b6745af0288b55e4f" name="ImageMagick" arch="src">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="bdc17b26b9d242020aad7c3e15625464603f2f1df253cef2e41c1d9886c6385a" name="ImageMagick" arch="src">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="795fd3801fa792611dbb12ccf5a76752ea5705d12514f0cdd8fdda8e5731c733" name="ImageMagick" arch="src">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="f3a9b4899c14520394a7a70faed74f8fca17f020a1aa9a5c82d5d6fc3b2aad65" name="ImageMagick" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="aa2a3b27a7ac6ce1fa0c9b1aff4ba1b1af7ef8064671b6aff3eb3cfe93d19524" name="ImageMagick" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="c9465b54ba362fcbf5c9ec08e66eb2c2170f0a77fd77a14742e1f59cb5f1fe60" name="ImageMagick" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="8cef65556b0e771d0734782ecae5dd3fe6c2d80e8638b8d53529553254dd30ff" name="ImageMagick-devel" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="1c718a80283fdbd3bfc3262c501c74cebbe31e95eddffafab3db6e2a00429f0a" name="ImageMagick-devel" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="e29fc49620b26d1700a794e1953744bf5911e5fdd0695f9953354d7d17ddb423" name="ImageMagick-devel" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="0d534def5a635e87239a1a88edb0f2d29321375103704ff6af91fc207bbac918" name="ImageMagick-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="1d40ad1163724e5ef8ecf261bdb9133e840738a65f15d7856f52eaaf195172e8" name="ImageMagick-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="ee0a4008cc7c2e59f0383a2d830e5cbd6def6ad84a193100187f53bcd4ce2a23" name="ImageMagick-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="f65492b62fad22a87e3b78905ea4b7d0535e5260c6ab8b2c0fd228de1dac4f53" name="ImageMagick-doc" arch="noarch">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="3837bf5c943fcff7ba248d2f51daba1dcde3ca6001d459a919e77575a301161c" name="ImageMagick-doc" arch="noarch">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="b796a01513785ba74720d8f3c327020afc3b2ca910bd8f67a63bcbc601617853" name="ImageMagick-doc" arch="noarch">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="a6623d6d4be5a226a207a54b1a498e183e17780b433802609b539f8184d7bcaf" name="ImageMagick-extra" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="b6bde1d33cb81351df04abfd70a944119cf98abf568c0a5a80a35e8b7408b422" name="ImageMagick-extra" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="7a6b5269b0226f395d9ee927ba768ac5753f345cd39aacafad96d8e83603c1c2" name="ImageMagick-extra" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="cccbe4f3b20a687a17c0298faa42376325213b529f84239f5c3378477bbaa248" name="Mesa" arch="src">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="13d6b878f4887c0dccb6003e61b260b3c1ad8985c792a531ff29f8134c2b1115" name="Mesa" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="bc6aeafb411bb478fe512333a0023f724dfd9582975481129b2d72e337dd0bfc" name="Mesa-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="2d1e98f17bf29e19a9ded92fe4fc13c840ebb8ca44634d946d5c8564032c3109" name="Mesa-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="503bc9c125340a041b4690224112028d3192653d21095426e1ea19fa3aad0268" name="Mesa-dri-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="b1e679d50082e513daa4373475aa7a944d55337c175e2f98c5a2637f88447019" name="Mesa-dri-nouveau" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="8a8cde9cc5167905978f498e11f79f6827ade6871b25d4ff7c6714c4a93c27e4" name="Mesa-dri-nouveau-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="3af4d3e8830876846566529b94a43b94f4b1eaa9b99564e8fcff9c2ae4c1670b" name="Mesa-libEGL-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="a14aa4618f7198587d5af268d70120e87d1f9f66c1848ad6720d199d3d2607f1" name="Mesa-libEGL-devel-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="ded08dcb231bd84cd91be9afec27e2e5de2dfcb368fa6b064905540eb6ed9e16" name="Mesa-libEGL1" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="87b3e2fd72de933d9ec56c949375b3d6c8bf1ccdbf1663d3b34823f5bbee60dc" name="Mesa-libEGL1-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="97d28f960a19b4104ed711b971282e4aa139fe6c1bb138c6cb5d8e847961962c" name="Mesa-libGL-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="6c1a0f584ea8988ec8d20e74527e5ac28e2c31be7dd7eaee8d14fe7b55ad7034" name="Mesa-libGL-devel-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="2db6c56a0e3ce72fef3ec5d5c36616bc7738fa9c057fb303338c53d34a9ef471" name="Mesa-libGL1" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="fed6380f5dd02c9f24e2ba74ebd28b58c42b3554f876425b43354e48dbb507e7" name="Mesa-libGL1-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="83132f6c80a7124abb71098fa7dedb35c07868ea6f9ce09069d9c071aef177ec" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="f14e3781b73717c7f00fa1086ad44cb1cbd7436f315a44d0721f44b53695f0b1" name="Mesa-libGLESv1_CM-devel-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="bcec9a6d3681c69098e4fecc63fac6c710494d273d1e661040d69ead78449faf" name="Mesa-libGLESv1_CM1" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="9adf27ede420c720554acc22ad502ea524416a626ad4ec1a87b9190d627175b1" name="Mesa-libGLESv1_CM1-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="17684bc4d52e6624345512249b6d3ae920a231aeada6118797c23929035f388f" name="Mesa-libGLESv2-2" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="26e569a9d4513431fc711cf676bc6f561562acb0caca7a5202192b4bc9f0464f" name="Mesa-libGLESv2-2-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="23696f7a01e24733516d6b51a9ded1888928168ec879e62559030c490b750dfd" name="Mesa-libGLESv2-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="3d0f90cbd48b6644e080bd01720f2f55e17b38a5d51a4086f6f3ad424640be44" name="Mesa-libGLESv2-devel-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="8b8e6b2e32907a0e0faf10e3b4d94147aec73016b22bfbca339d7fe66081fb8d" name="Mesa-libGLESv3-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="e498db5f3b0f70e5123db40b0a3b45891407a0a3eae076380651a0e81bbe844d" name="Mesa-libd3d" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="2178079a7ca5c6f42a3318d0b7951f4eecd4628eacd623f21b5e1faa1c07aa3d" name="Mesa-libd3d-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="7a618e5e961bc1514233581ac8a9b67130f62f53844079e6e2228e43cd60bba5" name="Mesa-libd3d-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="f7759f7d899e8503344e660dcaffa009f20dc94ead81ad3f951eecf6ab551f5a" name="Mesa-libd3d-devel-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="13ef6f0c0f0bbdbd911be4ec3f84a9ebce19e6f9132a64da992bd045e3c424c5" name="Mesa-libglapi-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="83868ee532213e68b35c2736e99b96ff9c01507126b14b3b4cf6dc3b097a6c96" name="Mesa-libglapi-devel-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="57094c239d1cea9d4def0f8f8e880cef8d90757f8f5fde5464b29a297f86ed67" name="Mesa-libglapi0" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="ff12dafde9cf732727787d9d0d7d84dc526be210201bedd5ebdfd5221196ff00" name="Mesa-libglapi0-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="2f30271f4707e85be62b9e75ff041c8579bcf18b766b4e1a2a90453708cf457b" name="Mesa-libva" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="79a80caad0d0aa101a2bc12e178e790ff8d8f829cc2cd29062bd808a20ff5461" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="52.3.0" rel="60.1"/>

<changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
<changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="b89932323c628406c737724260bc44f5ac9895dc38c83fb53efa2b23e5f16dad" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="52.4.0" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>

</package>
<package pkgid="cf06e1ca33c64dfabba74dce40e1b1a4274c13071ee1626e2ee963edafce3a05" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="52.4.0" rel="63.2"/>

<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>

</package>
<package pkgid="88ea3df26181092b809acd3b87638b16e16abb902262e5c85dcefc491fa4be2d" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="52.5.0" rel="66.1"/>

<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="fd675a47db0febc0fcd81d6cf0008eb8bdd8918e1bc6d490af013989fb75acc8" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="52.5.2" rel="69.1"/>

<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
<changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>

</package>
<package pkgid="c166d070ee4aed1a327e67cbef80fc5ea97199bc87b304a19ca59e6b3edc3861" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="60.1"/>

<changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
<changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="d1be674ec54505e3bd7d28ef2353c12d0301d8dc06f5c63a7babc49c22678ab6" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="63.2"/>

<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>

</package>
<package pkgid="8efacd725ca2e7e558fb02737097bab2f944a1cf39fd4c3b713dde3b0ec4bdf7" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="66.1"/>

<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="68a64bdb69777f197d7ee9759942d6a444088a31c004c85f75c19efef7343cd7" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="52.5.2" rel="69.1"/>

<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
<changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>

</package>
<package pkgid="ec00fc8d543a91a7fb0cf39690b8dc9a4b33884c0323e600c6fb1aa9694ea4a3" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="60.1"/>

<changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
<changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="d93830481df41f1bf9029ad7cd3e3c48f5e3ae3d209ffa068777d1db58fe6334" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="63.2"/>

<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>

</package>
<package pkgid="237302eb496ff64e3b3212269ba1acc0df110144a2f8373715ef7326a6bc4a20" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="66.1"/>

<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="ef5be4957fc77ca81d09c963d8de07959f982b271610bf357454f88af54a25d9" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="52.5.2" rel="69.1"/>

<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
<changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>

</package>
<package pkgid="5c957ce26b2b4ca9e7f76027fed7ad961c64a6e3dcf5ab8c53552fb968b32344" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="60.1"/>

<changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
<changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="070c745c4f580b1b128f9c618c02e220333c5b69d1ed96e7113b05fe339f08da" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="63.2"/>

<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>

</package>
<package pkgid="5fb1beaed30b76594677dc34c2db57f873740d203597e915e0a209c324141674" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="66.1"/>

<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="d13ce9820ec7dedb5e6692e927a27d96951261d4d571d1b2eb69e57f2b8e3d62" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="52.5.2" rel="69.1"/>

<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
<changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>

</package>
<package pkgid="062d68aa91ba08e792c966e923080bd1e98490281cb87e9a01cae41041c6415b" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="60.1"/>

<changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
<changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="b0d6ffafaa266da3936d9153384eb952a20b884d12c13d500486a00faf159ca3" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="63.2"/>

<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>

</package>
<package pkgid="af121e313a3316e7f24ad9053f6ea45ec700f6b24ae86b034bb1841ca7645fe8" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="66.1"/>

<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="6594d22f9709425c729f96fbf89861a46aed7a0070f77cf8b8047c9ba6a63843" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="52.5.2" rel="69.1"/>

<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
<changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>

</package>
<package pkgid="a6c7c439f6e74b589d2fcfb04b3037369c5291e4abd3f8c6321456d88fdd561e" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="60.1"/>

<changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
<changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="f914dbf2448a27fe3e6376515a48b43c2fb42780b646f79b416758ebe53de01d" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="63.2"/>

<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>

</package>
<package pkgid="f87d79693ae83e7c85363f126595562633c394e110d96ab0b0e28c184ea23d24" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="66.1"/>

<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="fd67700d148e2517a9249a0d5cde9200747ff46c0924f2c574f3e0df493e274e" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="52.5.2" rel="69.1"/>

<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
<changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>

</package>
<package pkgid="52de483e6f0ba0751dff6ba5ec4ca42ff106de2cc796dc00b93a2e35034f7d18" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="60.1"/>

<changelog author="badshah400@gmail.com" date="1476273600">- Drop mozilla-gtk3_20.patch; obsoleted by Firefox version 49.0
  and fixes have been incorporated by upstream.</changelog>
<changelog author="astieger@suse.com" date="1477310400">- Mozilla Firefox 49.0.2:
  * CVE-2016-5287: Crash in nsTArray_base (bsc#1006475)
  * CVE-2016-5288: Web content can read cache entries (bsc#1006476)
  * Asynchronous rendering of the Flash plugins is now enabled by
    default
  * Change D3D9 default fallback preference to prevent graphical
    artifacts
  * Network issue prevents some users from seeing the Firefox UI on
    startup
  * Web compatibility issue with file uploads
  * Web compatibility issue with Array.prototype.values
  * Diagnostic information on timing for tab switching
  * Fix a Canvas filters graphics issue affecting HTML5 apps</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="e20e9b30096752c4b46619fd68d7301d7f0bf3b0e35541575ad0a64d98ff2193" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="63.2"/>

<changelog author="wr@rosenauer.org" date="1479124800">- update to Firefox 50.0 (boo#1009026)
  * requires NSS 3.26.2
  new features
  * Updates to keyboard shortcuts
    Set a preference to have Ctrl+Tab cycle through tabs in recently
    used order
    View a page in Reader Mode by using Ctrl+Alt+R
  * Added option to Find in page that allows users to limit search to
    whole words only
  * Added download protection for a large number of executable file
    types on Windows, Mac and Linux
  * Fixed rendering of dashed and dotted borders with rounded corners
    (border-radius)
  * Added a built-in Emoji set for operating systems without native
    Emoji fonts (Windows 8.0 and lower and Linux)
  * Blocked versions of libavcodec older than 54.35.1
  * additional locale
  security fixes:
  * MFSA 2016-89
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bmo#1292443)
    CVE-2016-5292: URL parsing causes crash (bmo#1288482)
    CVE-2016-5293: Write to arbitrary file with updater and moz
    maintenance service using updater.log hardlink
  (Windows only) (bmo#1246945)
    CVE-2016-5294: Arbitrary target directory for result files of
    update process (Windows only) (bmo#1246972)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bmo#1303678)
    CVE-2016-9064: Addons update must verify IDs match between
    current and new versions (bmo#1303418)
    CVE-2016-9065: Firefox for Android location bar spoofing usingfullscreen
    (Android only) (bmo#1306696)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bmo#1299686)
    CVE-2016-9067: heap-use-after-free in nsINode::ReplaceOrInsertBefore
    (bmo#1301777, bmo#1308922 (CVE-2016-9069))
    CVE-2016-9068: heap-use-after-free in nsRefreshDriver (bmo#1302973)
    CVE-2016-9072: 64-bit NPAPI sandbox isn't enabled on fresh profile
    (bmo#1300083) (Windows only)
    CVE-2016-9075: WebExtensions can access the mozAddonManager API
    and use it to gain elevated privileges (bmo#1295324)
    CVE-2016-9077: Canvas filters allow feDisplacementMaps to be applied
    to cross-origin images, allowing timing attacks on them
  (bmo#1298552)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bmo#1292159)
    CVE-2016-5295: Mozilla Maintenance Service: Ability to read
    arbitrary files as SYSTEM (Windows only) (bmo#1247239)
    CVE-2016-5298: SSL indicator can mislead the user about the real
    URL visited (bmo#1227538) (Android only)
    CVE-2016-5299: Firefox AuthToken in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (bmo#1245791) (Android only)
    CVE-2016-9061: API Key (glocation) in broadcast protected with
    signature-level permission can be accessed by an
  application installed beforehand that defines the
  same permissions (Android only) (bmo#1245795)
    CVE-2016-9062: Private browsing browser traces (android) in
    browser.db and wal file (Android only) (bmo#1294438)
    CVE-2016-9070: Sidebar bookmark can have reference to chrome window
    (bmo#1281071)
    CVE-2016-9073: windows.create schema doesn't specify "format": "relativeUrl"
    (bmo#1289273)
    CVE-2016-9074: Insufficient timing side-channel resistance in
    divSpoiler (bmo#1293334) (fixed via NSS 3.26.1)
    CVE-2016-9076: select dropdown menu can be used for URL bar
    spoofing on e10s (bmo#1276976)
    CVE-2016-9063: Possible integer overflow to fix inside XML_Parse
    in expat (bmo#1274777)
    CVE-2016-9071: Probe browser history via HSTS/301 redirect + CSP
    (bmo#1285003)
    CVE-2016-5289: Memory safety bugs fixed in Firefox 50
    CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5
- make aarch64 build more similar to x86_64 build (remove conditionals
  that don't seem to be necessary anymore)</changelog>
<changelog author="wr@rosenauer.org" date="1480593600">- update to Firefox 50.0.2
  * Firefox crashes with 3rd party Chinese IME when using IME text
    (50.0.1)
  security fixes (in 50.0.1): (boo#1012807)
  * MFSA 2016-91
    CVE-2016-9078: data: URL can inherit wrong origin after an
    HTTP redirect (bmo#1317641)
  security fixes (in 50.0.2) (boo#1012964)
  * MFSA 2016-92
    CVE-2016-9079: Use-after-free in SVG Animation (bmo#1321066)</changelog>
<changelog author="cgrobertson@novell.com" date="1481284800">- added patch mozilla-aarch64-startup-crash.patch (bsc#1011922)</changelog>
<changelog author="wr@rosenauer.org" date="1481544000">- update to Firefox 50.1.0 (boo#1015422)
  * MFSA 2016-94
    CVE-2016-9894: Buffer overflow in SkiaGL (bmo#1306628)
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9896: Use-after-free with WebVR (bmo#1315543)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating
    DOM subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9901: Data from Pocket server improperly sanitized
    before execution (bmo#1320057)
    CVE-2016-9902: Pocket extension does not validate the origin
    of events (bmo#1320039)
    CVE-2016-9903: XSS injection vulnerability in add-ons SDK
    (bmo#1315435)
    CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1
    CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and
    Firefox ESR 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>

</package>
<package pkgid="3052d23dfcaf165e5bb92b008df022a0306d2da612558b5d660ff55b6d119d86" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="66.1"/>

<changelog author="wr@rosenauer.org" date="1484913600">- update to Firefox 51.0
  * requires NSPR &gt;= 4.13.1, NSS &gt;= 3.28.1
  * Added support for FLAC (Free Lossless Audio Codec) playback
  * Added support for WebGL 2
  * Added Georgian (ka) and Kabyle (kab) locales
  * Support saving passwords for forms without 'submit' events
  * Improved video performance for users without GPU acceleration
  * Zoom indicator is shown in the URL bar if the zoom level is not
    at default level
  * View passwords from the prompt before saving them
  * Remove Belarusian (be) locale
  * Use Skia for content rendering (Linux)
  * MFSA 2017-01
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5377: Memory corruption with transforms to create
    gradients in Skia (bmo#1306883, boo#1021826)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5379: Use-after-free in Web Animations
    (bmo#1309198,boo#1021827)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5389: WebExtensions can install additional add-ons via
    modified host requests (bmo#1308688, boo#1021828)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5381: Certificate Viewer exporting can be used to navigate
    and save to arbitrary filesystem locations
  (bmo#1017616, boo#1021830)
    CVE-2017-5382: Feed preview can expose privileged content errors
    and exceptions (bmo#1295322, boo#1021831)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5384: Information disclosure via Proxy Auto-Config (PAC)
    (bmo#1255474, boo#1021832)
    CVE-2017-5385: Data sent in multipart channels ignores referrer-policy
    response headers (bmo#1295945, boo#1021833)
    CVE-2017-5386: WebExtensions can use data: protocol to affect other
    extensions (bmo#1319070, boo#1021823)
    CVE-2017-5394: Android location bar spoofing using fullscreen and
    JavaScript events (bmo#1222798)
    CVE-2017-5391: Content about: pages can load privileged about: pages
    (bmo#1309310, boo#1021835)
    CVE-2017-5392: Weak references using multiple threads on weak proxy
    objects lead to unsafe memory usage (bmo#1293709)
  (Android only)
    CVE-2017-5393: Remove addons.mozilla.org CDN from whitelist for
    mozAddonManager (bmo#1309282, boo#1021837)
    CVE-2017-5395: Android location bar spoofing during scrolling
    (bmo#1293463) (Android only)
    CVE-2017-5387: Disclosure of local file existence through TRACK
    tag error messages (bmo#1295023, boo#1021839)
    CVE-2017-5388: WebRTC can be used to generate a large amount of
    UDP traffic for DDOS attacks
  (bmo#1281482, boo#1021840)
    CVE-2017-5374: Memory safety bugs fixed in Firefox 51 (boo#1021841)
    CVE-2017-5373: Memory safety bugs fixed in Firefox 51 and
    Firefox ESR 45.7 (boo#1021824)
- switch Firefox to Gtk3 for Tumbleweed
- removed obsolete patches
  * mozilla-flex_buffer_overrun.patch
- updated RPM locale support tag
- improve recognition of LANGUAGE env variable (boo#1017174)
- add upstream patch to fix PPC64LE (bmo#1319389)
  (mozilla-skia-ppc-endianess.patch)
- fix build without skia (big endian archs) (bmo#1319374)
  (mozilla-disable-skia-be.patch)</changelog>
<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="91cde03615063edace49189b280b89593b854ae2e641cf5df0b8fee1adcc91cd" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="52.5.2" rel="69.1"/>

<changelog author="astieger@suse.com" date="1485518400">- Mozilla Firefox 51.0.1:
  - Multiprocess incompatibility did not correctly register with
    some add-ons (bmo#1333423)</changelog>
<changelog author="wr@rosenauer.org" date="1488628800">- update to Firefox 52.0 (boo#1028391)
  * requires NSS &gt;= 3.28.3
  * Pages containing insecure password fields now display a warning
    directly within username and password fields.
  * Send and open a tab from one device to another with Sync
  * Removed NPAPI support for plugins other than Flash. Silverlight,
    Java, Acrobat and the like are no longer supported.
  * Removed Battery Status API to reduce fingerprinting of users by
    trackers
  * MFSA 2017-05
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5403: Use-after-free using addRange to add range to an
    incorrect root object (bmo#1340186)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5406: Segmentation fault in Skia with canvas operations
    (bmo#1306890)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
    CVE-2017-5413: Segmentation fault during bidirectional operations
    (bmo#1337504)
    CVE-2017-5414: File picker can choose incorrect default directory
    (bmo#1319370)
    CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719)
    CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
    CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
    (bmo#791597)
    CVE-2017-5426: Gecko Media Plugin sandbox is not started if
    seccomp-bpf filter is running (bmo#1257361)
    CVE-2017-5427: Non-existent chrome.manifest file loaded during
    startup (bmo#1295542)
    CVE-2017-5418: Out of bounds read when parsing HTTP digest
    authorization responses (bmo#1338876)
    CVE-2017-5419: Repeated authentication prompts lead to DOS
    attack (bmo#1312243)
    CVE-2017-5420: Javascript: URLs can obfuscate addressbar
    location (bmo#1284395)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5421: Print preview spoofing (bmo#1301876)
    CVE-2017-5422: DOS attack by using view-source: protocol
    repeatedly in one hyperlink (bmo#1295002)
    CVE-2017-5399: Memory safety bugs fixed in Firefox 52
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8
- removed obsolete patches
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-disable-skia-be.patch
  * mozilla-skia-overflow.patch
  * mozilla-skia-ppc-endianess.patch
- rebased patches
- enable rust usage for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1489060800">- reenable ALSA support which was removed by default upstream</changelog>
<changelog author="wr@rosenauer.org" date="1489752000">- update to Firefox 52.0.1 (boo#1029822)
  MFSA 2017-08
  CVE-2017-5428: integer overflow in createImageBitmap() (bmo#1348168)</changelog>
<changelog author="wr@rosenauer.org" date="1490011200">- disable rust usage for everything but x86(-64)
- explicitely add libffi build requirement</changelog>
<changelog author="wr@rosenauer.org" date="1491220800">- update to Firefox 52.0.2
  * Use Nirmala UI as fallback font for additional Indic languages (bmo#1342787)
  * Fix loading tab icons on session restore (bmo#1338009)
  * Fix a crash on startup on Linux (bmo#1345413)
  * Fix new installs erroneously not prompting to change the default
    browser setting (bmo#1343938)</changelog>
<changelog author="wr@rosenauer.org" date="1491220801">- switch package to use ESR52 branch
  * enables plugin support by default
  * service workers are disabled by default
  * push notifications are disabled by default
  * WebAssembly (wasm) is disabled
  * Less use of multiprocess architecture Electrolysis (e10s)
  +-------------------------------------------------------------------</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to Firefox 52.1.0esr (boo#1035082)
  MFSA 2017-12
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5448 (bmo#1346648)
    Out-of-bounds write in ClearKeyDecryptor
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5455 (bmo#1341191)
    Sandbox escape through internal feed reader APIs
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5456 (bmo#1344415)
    Sandbox escape allowing local file system access
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event
- requires NSS 3.28.4
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1494244800">- update to Firefox 52.1.1
  MFSA 2017-14
  * CVE-2017-5031: Use after free in ANGLE (bmo#1328762)
    (Windows only, Linux not affected)
- switch to Mozilla's geolocation service (boo#1026989)
- removed mozilla-preferences.patch obsoleted by overriding via
  firefox.js
- fixed KDE integration to avoid crash caused by filepicker
  (boo#1015998)</changelog>
<changelog author="wr@rosenauer.org" date="1495540800">- remove -fno-inline-small-functions and explicitely optimize with
  - O2 for openSUSE &gt; 13.2/Leap 42 to work with gcc7 (boo#1040105)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Firefox 52.2esr (boo#1043960)
  MFSA 2017-16
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7755 (bmo#1361326)
    Privilege escalation through Firefox Installer with same
    directory DLL files (Windows only)
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7760 (bmo#1348645)
    File manipulation and privilege escalation via callback parameter
    in Mozilla Windows Updater and Maintenance Service (Windows only)
  * CVE-2017-7761 (bmo#1215648)
    File deletion and privilege escalation through Mozilla Maintenance
    Service helper.exe application (Windows only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-7766 (bmo#1342742)
    File execution and privilege escalation through updater.ini,
    Mozilla Windows Updater, and Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-7767 (bmo#1336964)
    Privilege escalation and arbitrary file overwrites through Mozilla
    Windows Updater and Mozilla Maintenance Service (Windows only)
  * CVE-2017-7768 (bmo#1336979)
    32 byte arbitrary file read through Mozilla Maintenance Service
    (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="astieger@suse.com" date="1499256000">- Mozilla Firefox 52.2.1esr:
  * Printing text does not work on Windows when Direct2D is
    disabled (bmo#1318845)</changelog>
<changelog author="wr@rosenauer.org" date="1502193600">- update to Firefox 52.3esr (boo#1052829)
  MFSA 2017-19
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to Firefox 52.4esr (boo#1060445)
  * requires NSS &gt;= 3.28.6
  MFSA 2017-22
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
- fixed language accept header to use correct locale
  (mozilla-bmo1005640.patch, boo#1029917)</changelog>
<changelog author="zaitor@opensuse.org" date="1506772800">- Drop libgnomeui-devel, and replace it with pkgconfig(gconf-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires, align with what configure
  looks for.</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1506859200">- Correct plugin directory for aarch64 (boo#1061207). The wrapper
  script was not detecting aarch64 as a 64 bit architecture, thus
  used /usr/lib/browser-plugins/.</changelog>
<changelog author="wr@rosenauer.org" date="1510660800">- update to Firefox 52.5.0esr (boo#1068101)
  MFSA 2017-25
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
<changelog author="security@suse.com" date="1512820800">- update to Firefox 52.5.2esr (MFSA 2017-28):
  * CVE-2017-7843 (bsc#1072034, bmo#1410106)
    Web worker in Private Browsing mode can write IndexedDB data</changelog>

</package>
<package pkgid="4c86caa5ce5dd69710513062fe17b87353a8a37d390f0e798f5867b4060d4fdd" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="52.3.0" rel="44.1"/>

<changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
<changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="77481d61247b946fb31075a68ee4e8a9571b71189d90dbfed3b1acdd24de453c" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="52.4.0" rel="47.1"/>

<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>

</package>
<package pkgid="10b2428985450e7a52f9b4ae90672a2f68a79be27fd6198ff33f4c6f0fc93ef7" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="52.5.0" rel="50.1"/>

<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
<changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
<changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="0dd0c64698bb9653f6b87f7e71caccbdf5e4794cef149c5b7df6769547917208" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="44.1"/>

<changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
<changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="a45ad7004505621d6976d1213bfcc897db60331f4aa63c731565192833dc51fa" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="47.1"/>

<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>

</package>
<package pkgid="04604582d0add007bde8df47fbbc472c125f8515ef0adcecd6544f7eb77bf9dc" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="50.1"/>

<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
<changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
<changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="f6ed471410f15fea17c612e297c01a612bd06c99ed095f02db2edebca082c394" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="44.1"/>

<changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
<changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="238fc98b680fec17292d08f0ca506041f1711c36257aa80e3002fb0a46bd3ae2" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="47.1"/>

<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>

</package>
<package pkgid="69996ff6c0a249adf19aedb5e59addec1dbc68fabb9aa8afd1939f40de9a9c29" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="50.1"/>

<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
<changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
<changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="6cc7740de84d16a916f01aba1160e66d2645e534b0d29472d6fb27ae493e6c58" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="44.1"/>

<changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
<changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="0358b214958d8e9f43bfacabba8b83608102fc22cdce12793087b26c03509f3a" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="47.1"/>

<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>

</package>
<package pkgid="837f3583e48fc2822ac87d355f6e787c580769c086f7b54e8778babc2f582189" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="50.1"/>

<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
<changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
<changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="704375fb3ee0a86b0ec9cc92925046c0a27ebb3804e6f96be53f305164ef6ef2" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="44.1"/>

<changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
<changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="d318e0c633989ad4e7521800c0464199d52b2c7eb20966f876f03d675447b85d" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="47.1"/>

<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>

</package>
<package pkgid="505019949580f0af1a059c42ac3c01e436adcfbc77ae71be853fd9fb573bd829" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="50.1"/>

<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
<changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
<changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="de09e14287a4dc2f42eb44aca57e021bd5b68439f3035ada24c82e47c88ec0b6" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="52.3.0" rel="44.1"/>

<changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
<changelog author="wr@rosenauer.org" date="1472558400">- update to Thunderbird 45.3.0 (boo#991809)
  * Disposition-Notification-To could not be used in
    mail.compose.other.header
  * "edit as new message" on a received message pre-filled the sender
    as the composing identity.
  * Certain messages caused corruption of the drafts summary database.
  security fixes:
  * MFSA 2016-62/CVE-2016-2836
    Miscellaneous memory safety hazards
  * MFSA 2016-63/CVE-2016-2830 (bmo#1255270)
    Favicon network connection can persist when page is closed
  * MFSA 2016-64/CVE-2016-2838 (bmo#1279814)
    Buffer overflow rendering SVG with bidirectional content
  * MFSA 2016-65/CVE-2016-2839 (bmo#1275339)
    Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
  * MFSA 2016-67/CVE-2016-5252 (bmo#1268854)
    Stack underflow during 2D graphics rendering
  * MFSA 2016-70/CVE-2016-5254 (bmo#1266963)
    Use-after-free when using alt key and toplevel menus
  * MFSA 2016-72/CVE-2016-5258 (bmo#1279146)
    Use-after-free in DTLS during WebRTC session shutdown
  * MFSA 2016-73/CVE-2016-5259 (bmo#1282992)
    Use-after-free in service workers with nested sync events
  * MFSA 2016-76/CVE-2016-5262 (bmo#1277475)
    Scripts on marquee tag can execute in sandboxed iframes
  * MFSA 2016-77/CVE-2016-2837 (bmo#1274637)
    Buffer overflow in ClearKey Content Decryption Module (CDM)
    during video playback
  * MFSA 2016-78/CVE-2016-5263 (bmo#1276897)
    Type confusion in display transformation
  * MFSA 2016-79/CVE-2016-5264 (bmo#1286183)
    Use-after-free when applying SVG effects
  * MFSA 2016-80/CVE-2016-5265 (bmo#1278013)
    Same-origin policy violation using local HTML file and saved shortcut file</changelog>
<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>

</package>
<package pkgid="9fe28f2956d252ba2eeb8d9ad9625a014050b78b2f7458416eb2d5564ca4d6a2" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="52.4.0" rel="47.1"/>

<changelog author="wr@rosenauer.org" date="1475323200">- update to Thunderbird 45.4.0 (boo#999701)
  * Display name was truncated if no separating space before email
    address.
  * Recipient addresses were shown in wrong color in some circumstances.
  * Additional spaces were inserted when drafts were edited.
  * Mail saved as template copied In-Reply-To and References from
    original email.
  * Threading broken when editing message draft, due to loss of Message-ID
  * "Apply columns to..." did not honor special folders</changelog>
<changelog author="astieger@suse.com" date="1479556800">- Mozilla Thunderbird 45.5.0 (boo#1009026)
  * Fixes for security flaws that cannot be exploited through email
    because scripting is disabled when reading mail, but are
    potentially risks in browser or browser-like contexts:
    CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1
    (bsc#1010411)
    CVE-2016-5297: Incorrect argument length checking in Javascript
    (bsc#1010401)
    CVE-2016-9066: Integer overflow leading to a buffer overflow in
    nsScriptLoadHandler (bsc#1010404)
    CVE-2016-5291: Same-origin policy violation using local HTML file
    and saved shortcut file (bsc#1010410)
    CVE-2016-5290: Memory safety bugs fixed in Thunderbird ESR 45.5
    (bsc#1010427)
- Changed behavior:
  * Changed recipient address entry: Arrow-keys now copy the pop-up
    value to the input field. Mouse-hovered pop-up value can no
    longer be confirmed with tab or enter key. This restores the
    behavior of Thunderbird 24.
  * Support changes to character limit in Twitter
- Bugs fixed:
  * Reply with selected text containing quote resulted in wrong
    quoting level indication
  * Email invitation might not be displayed when description
    contains non-ASCII characters
  * Attempting to sort messages on the Date field whilst a quick
    filter is applied got stuck on sort descending
  * Mail address display at header pane displayed incorrectly if
    the address contains UTF-8 according to RFC 6532</changelog>
<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>

</package>
<package pkgid="604ecd77880a0c148c8701cc08f795005f01b09d45c36db510be8bdaea7f90e6" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="52.5.0" rel="50.1"/>

<changelog author="astieger@suse.com" date="1480593600">- Mozilla Thunderbird 45.5.1:
  * CVE-2016-9079: SVG Animation Remote Code Execution
    (MFSA 2016-92, bsc#1012964, bmo#1321066)</changelog>
<changelog author="wr@rosenauer.org" date="1483012800">- update to Thunderbird 45.6.0 (boo#1015422)
  * The system integration dialog was shown every time when starting
    Thunderbird
  * MFSA 2016-96
    CVE-2016-9899: Use-after-free while manipulating DOM events and
    audio elements (bmo#1317409)
    CVE-2016-9895: CSP bypass using marquee tag (bmo#1312272)
    CVE-2016-9897: Memory corruption in libGLES (bmo#1301381)
    CVE-2016-9898: Use-after-free in Editor while manipulating DOM
    subtrees (bmo#1314442)
    CVE-2016-9900: Restricted external resources can be loaded by
    SVG images through data URLs (bmo#1319122)
    CVE-2016-9904: Cross-origin information leak in shared atoms
    (bmo#1317936)
    CVE-2016-9905: Crash in EnumerateSubDocuments (bmo#1293985)
    CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6</changelog>
<changelog author="wr@rosenauer.org" date="1485259200">- update to Thunderbird 45.7.0
  * Message preview pane non-functional after IMAP folder was renamed
    or moved
  * "Move To" button on "Search Messages" panel not working
  * Message sent to "undisclosed recipients" shows no recipient
    (non-functional since Thunderbird version 38)
  * Security updates from MFSA 2017-03 (Gecko 45.7.0) boo#1021991.
    In general, these flaws cannot be exploited through email in
    Thunderbird because scripting is disabled when reading mail,
    but are potentially risks in browser or browser-like contexts:
    CVE-2017-5375: Excessive JIT code allocation allows bypass of
    ASLR and DEP (bmo#1325200, boo#1021814)
    CVE-2017-5376: Use-after-free in XSL (bmo#1311687, boo#1021817)
    CVE-2017-5378: Pointer and frame data leakage of Javascript objects
    (bmo#1312001, bmo#1330769, boo#1021818)
    CVE-2017-5380: Potential use-after-free during DOM manipulations
    (bmo#1322107, boo#1021819)
    CVE-2017-5390: Insecure communication methods in Developer Tools
    JSON viewer (bmo#1297361, boo#1021820)
    CVE-2017-5396: Use-after-free with Media Decoder
    (bmo#1329403, boo#1021821)
    CVE-2017-5383: Location bar spoofing with unicode characters
    (bmo#1323338, bmo#1324716, boo#1021822)
    CVE-2017-5373: Memory safety bugs fixed in Thunderbird 45.7
    (boo#1021824)</changelog>
<changelog author="wr@rosenauer.org" date="1486641600">- update to Thunderbird 45.7.1
  * fixed Crash when viewing certain IMAP messages (introduced in 45.7.0)</changelog>
<changelog author="wr@rosenauer.org" date="1488888000">- update to Thunderbird 45.8.0 (boo#1028391)
  * MFSA 2017-07
    CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
    (bmo#1334933)
    CVE-2017-5401: Memory Corruption when handling ErrorResult
    (bmo#1328861)
    CVE-2017-5402: Use-after-free working with events in FontFace
    objects (bmo#1334876)
    CVE-2017-5404: Use-after-free working with ranges in selections
    (bmo#1340138)
    CVE-2017-5407: Pixel and history stealing via floating-point
    timing side channel with SVG filters (bmo#1336622)
    CVE-2017-5410: Memory corruption during JavaScript garbage
    collection incremental sweeping (bmo#1330687)
    CVE-2017-5408: Cross-origin reading of video captions in violation
    of CORS (bmo#1313711)
    CVE-2017-5405: FTP response codes can cause use of
    uninitialized values for ports (bmo#1336699)
    CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and
    Firefox ESR 45.8</changelog>
<changelog author="wr@rosenauer.org" date="1489838400">- update to Thunderbird 52.0
  * Optionally remove corresponding data files when removing an account
  * Possibility to copy message filter
  * Calendar: Event can now be created and edited in a tab
  * Calendar: Processing of received invitation counter proposals
  * Chat: Support Twitter Direct Messages
  * Chat: Liking and favoriting in Twitter
  * Chat: Removed Yahoo! Messenger support
  * serveral bugfixes
- security fixes (bsc#1028391, MFSA 2017-09):
  In general, these flaws cannot be exploited through email because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts.
  * CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933)
  * CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861)
  * CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876)
  * CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186)
  * CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138)
  * CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890)
  * CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622)
  * CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687)
  * CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711)
  * CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323)
  * CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504)
  * CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370)
  * CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121)
  * CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361)
  * CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876)
  * CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243)
  * CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699)
  * CVE-2017-5421: Print preview spoofing (bmo#1301876)
  * CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002)
  * CVE-2017-5399: Memory safety bugs fixed in Thunderbird 52
  * CVE-2017-5398: Memory safety bugs fixed in Thunderbird 52 and Thunderbird 45.8
- removed obsolete patches
  * mozilla-aarch64-48bit-va.patch
  * mozilla-binutils-visibility.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-gcc6.patch
- added generic mozilla patches
  * mozilla-aarch64-startup-crash.patch
- require newer versions of NSPR and NSS
- use Gtk3 for Tumbleweed</changelog>
<changelog author="wr@rosenauer.org" date="1492430400">- update to Thunderbird 52.0.1
  * Clicking on a link in an email may not open this link in the
    external browser
  * addon blocklist updates
- enable ALSA for systems w/o PA
- require libffi explicitely to fix PPC64LE build where a system
  library is required</changelog>
<changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
<changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
<changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
<changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
<changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
<changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
<changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
<changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
<changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
<changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
<changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>

</package>
<package pkgid="b3e3cbd0b83b80bfd2957a8b7b995e70dc76ce8dca1d93d6d195995af2c8ed83" name="NetworkManager-l2tp" arch="src">
    <version epoch="0" ver="1.0.8" rel="2.1"/>

<changelog author="hillwood@linuxfans.org" date="1382011200">- Initial package, version 0.9.8:
  * Builds against the GNOME 3.8 versions of GLib and Gtk+.
  * Fix undefuned NM_L2TP_LOCALEDIR.
  * License file added.
  * Minor localization fixes.</changelog>
<changelog author="hillwood@linuxfans.org" date="1404475200">- Update to version 0.9.8.6:
  * Bugfix: (security) don't start l2tp if IPsec enabled, but
    failed to start.
  * Bugfix: typo in nm-l2tp-service.name.
  * noccp pppd option added.
  * Minor locales fixes.
  * Require new versions of gtk+ and glib.</changelog>
<changelog author="dimstar@opensuse.org" date="1414497600">- Update to version 0.9.8.7:
  * ipsec: missing curly braces led to always false return.
  * Updated translations.</changelog>
<changelog author="doug@uq.edu.au" date="1501416000">- Update to version 1.0.8:
  * Updated translations.
  * Stops strongSwan service when a connection cannot be
    established.
  * sets phase 1 (ike) and phase 2 (esp) ciphers for strongswan to
    the same as those used in version 1.0.4
- Changes from version 1.0.6:
  * If L2TP port 1701 is already in use, no longer writes
    "leftprotoport=udp/l2tp" (which is equivalent to
    "leftprotoport=udp/1701") to the ipsec config file. This was
    done to ensures L2TP is encapsulated in IPsec.
  * Uses UUID instead of PID for run-time generated filenames
  * No longer temporarily replaces system /etc/ipsec.secrets file
  * IPsec rekeying is now possible because the following file
    remains for the lifetime of the VPN connection :
    /etc/ipsec.d/nm-l2tp-ipsec-UUID.secrets
  * Following line is appended to /etc/ipsec.secrets if the include
    line is missing:
    include /etc/ipsec.d/*.secrets
  * Removed IPsec Group Name from user interface
  * Added IPsec Phase 1 (ike) &amp; Phase 2 (esp) to user interface.
  * New timeout code for IPsec connection up script.
- Changes from version 1.0.4:
  * xl2tpd-1.3.7 compatibility fix for unrecognized option 'lock'.
  * /usr/sbin/ipsec runtime IPsec stack detection improved so that
    Openswan is rejected and not treated the same as openSwan.
  * Explictly check strongSwan connection has been established.
- Changes from version 1.0.2:
  * runtime test for strongwan or libreswan no longer performed if
    IPsec tickbox not ticked.
- Changes from version 1.0.0:
  * auth-dialog ported to libnm-gtk's NMAVpnPasswordDialog.
  * migrated from deprecated libgnome-keyring to libsecret.
  * Requires strongSwan or Libreswan for IPsec support,
    no longer works with Openswan.
  * Added MTU and MRU setting to PPP settings dialog box.
  * IPsec Group Name is now optional in IPsec dialog box.
- Drop icon install: as there is no icon file in the source
  anymore, nor is there a .desktop file that can make use of the
  icon.
- Drop --disable-more-warnings from configure line: no longer
  needed.
- Added %%check section.
- Replaced Requires strongswan with weaker Recommends strongswan.
- Replaced plus characters to recommended asterisk characters in
  changes file.</changelog>

</package>
<package pkgid="4e5767049d30b7f99cb87320fd2850e88900ee4ebd53427e022b44a8bafec6ba" name="NetworkManager-l2tp" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="2.1"/>

<changelog author="hillwood@linuxfans.org" date="1382011200">- Initial package, version 0.9.8:
  * Builds against the GNOME 3.8 versions of GLib and Gtk+.
  * Fix undefuned NM_L2TP_LOCALEDIR.
  * License file added.
  * Minor localization fixes.</changelog>
<changelog author="hillwood@linuxfans.org" date="1404475200">- Update to version 0.9.8.6:
  * Bugfix: (security) don't start l2tp if IPsec enabled, but
    failed to start.
  * Bugfix: typo in nm-l2tp-service.name.
  * noccp pppd option added.
  * Minor locales fixes.
  * Require new versions of gtk+ and glib.</changelog>
<changelog author="dimstar@opensuse.org" date="1414497600">- Update to version 0.9.8.7:
  * ipsec: missing curly braces led to always false return.
  * Updated translations.</changelog>
<changelog author="doug@uq.edu.au" date="1501416000">- Update to version 1.0.8:
  * Updated translations.
  * Stops strongSwan service when a connection cannot be
    established.
  * sets phase 1 (ike) and phase 2 (esp) ciphers for strongswan to
    the same as those used in version 1.0.4
- Changes from version 1.0.6:
  * If L2TP port 1701 is already in use, no longer writes
    "leftprotoport=udp/l2tp" (which is equivalent to
    "leftprotoport=udp/1701") to the ipsec config file. This was
    done to ensures L2TP is encapsulated in IPsec.
  * Uses UUID instead of PID for run-time generated filenames
  * No longer temporarily replaces system /etc/ipsec.secrets file
  * IPsec rekeying is now possible because the following file
    remains for the lifetime of the VPN connection :
    /etc/ipsec.d/nm-l2tp-ipsec-UUID.secrets
  * Following line is appended to /etc/ipsec.secrets if the include
    line is missing:
    include /etc/ipsec.d/*.secrets
  * Removed IPsec Group Name from user interface
  * Added IPsec Phase 1 (ike) &amp; Phase 2 (esp) to user interface.
  * New timeout code for IPsec connection up script.
- Changes from version 1.0.4:
  * xl2tpd-1.3.7 compatibility fix for unrecognized option 'lock'.
  * /usr/sbin/ipsec runtime IPsec stack detection improved so that
    Openswan is rejected and not treated the same as openSwan.
  * Explictly check strongSwan connection has been established.
- Changes from version 1.0.2:
  * runtime test for strongwan or libreswan no longer performed if
    IPsec tickbox not ticked.
- Changes from version 1.0.0:
  * auth-dialog ported to libnm-gtk's NMAVpnPasswordDialog.
  * migrated from deprecated libgnome-keyring to libsecret.
  * Requires strongSwan or Libreswan for IPsec support,
    no longer works with Openswan.
  * Added MTU and MRU setting to PPP settings dialog box.
  * IPsec Group Name is now optional in IPsec dialog box.
- Drop icon install: as there is no icon file in the source
  anymore, nor is there a .desktop file that can make use of the
  icon.
- Drop --disable-more-warnings from configure line: no longer
  needed.
- Added %%check section.
- Replaced Requires strongswan with weaker Recommends strongswan.
- Replaced plus characters to recommended asterisk characters in
  changes file.</changelog>

</package>
<package pkgid="7a6c949f34291c6b78e7ba1759d547ab1b0e4c477fcc527a196e2ee6546945b3" name="NetworkManager-l2tp-gnome" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="2.1"/>

<changelog author="hillwood@linuxfans.org" date="1382011200">- Initial package, version 0.9.8:
  * Builds against the GNOME 3.8 versions of GLib and Gtk+.
  * Fix undefuned NM_L2TP_LOCALEDIR.
  * License file added.
  * Minor localization fixes.</changelog>
<changelog author="hillwood@linuxfans.org" date="1404475200">- Update to version 0.9.8.6:
  * Bugfix: (security) don't start l2tp if IPsec enabled, but
    failed to start.
  * Bugfix: typo in nm-l2tp-service.name.
  * noccp pppd option added.
  * Minor locales fixes.
  * Require new versions of gtk+ and glib.</changelog>
<changelog author="dimstar@opensuse.org" date="1414497600">- Update to version 0.9.8.7:
  * ipsec: missing curly braces led to always false return.
  * Updated translations.</changelog>
<changelog author="doug@uq.edu.au" date="1501416000">- Update to version 1.0.8:
  * Updated translations.
  * Stops strongSwan service when a connection cannot be
    established.
  * sets phase 1 (ike) and phase 2 (esp) ciphers for strongswan to
    the same as those used in version 1.0.4
- Changes from version 1.0.6:
  * If L2TP port 1701 is already in use, no longer writes
    "leftprotoport=udp/l2tp" (which is equivalent to
    "leftprotoport=udp/1701") to the ipsec config file. This was
    done to ensures L2TP is encapsulated in IPsec.
  * Uses UUID instead of PID for run-time generated filenames
  * No longer temporarily replaces system /etc/ipsec.secrets file
  * IPsec rekeying is now possible because the following file
    remains for the lifetime of the VPN connection :
    /etc/ipsec.d/nm-l2tp-ipsec-UUID.secrets
  * Following line is appended to /etc/ipsec.secrets if the include
    line is missing:
    include /etc/ipsec.d/*.secrets
  * Removed IPsec Group Name from user interface
  * Added IPsec Phase 1 (ike) &amp; Phase 2 (esp) to user interface.
  * New timeout code for IPsec connection up script.
- Changes from version 1.0.4:
  * xl2tpd-1.3.7 compatibility fix for unrecognized option 'lock'.
  * /usr/sbin/ipsec runtime IPsec stack detection improved so that
    Openswan is rejected and not treated the same as openSwan.
  * Explictly check strongSwan connection has been established.
- Changes from version 1.0.2:
  * runtime test for strongwan or libreswan no longer performed if
    IPsec tickbox not ticked.
- Changes from version 1.0.0:
  * auth-dialog ported to libnm-gtk's NMAVpnPasswordDialog.
  * migrated from deprecated libgnome-keyring to libsecret.
  * Requires strongSwan or Libreswan for IPsec support,
    no longer works with Openswan.
  * Added MTU and MRU setting to PPP settings dialog box.
  * IPsec Group Name is now optional in IPsec dialog box.
- Drop icon install: as there is no icon file in the source
  anymore, nor is there a .desktop file that can make use of the
  icon.
- Drop --disable-more-warnings from configure line: no longer
  needed.
- Added %%check section.
- Replaced Requires strongswan with weaker Recommends strongswan.
- Replaced plus characters to recommended asterisk characters in
  changes file.</changelog>

</package>
<package pkgid="a2da5923225955104a69de30d5edda0841387d1a6f8e673cda0e3cad138276db" name="NetworkManager-l2tp-lang" arch="noarch">
    <version epoch="0" ver="1.0.8" rel="2.1"/>

<changelog author="hillwood@linuxfans.org" date="1382011200">- Initial package, version 0.9.8:
  * Builds against the GNOME 3.8 versions of GLib and Gtk+.
  * Fix undefuned NM_L2TP_LOCALEDIR.
  * License file added.
  * Minor localization fixes.</changelog>
<changelog author="hillwood@linuxfans.org" date="1404475200">- Update to version 0.9.8.6:
  * Bugfix: (security) don't start l2tp if IPsec enabled, but
    failed to start.
  * Bugfix: typo in nm-l2tp-service.name.
  * noccp pppd option added.
  * Minor locales fixes.
  * Require new versions of gtk+ and glib.</changelog>
<changelog author="dimstar@opensuse.org" date="1414497600">- Update to version 0.9.8.7:
  * ipsec: missing curly braces led to always false return.
  * Updated translations.</changelog>
<changelog author="doug@uq.edu.au" date="1501416000">- Update to version 1.0.8:
  * Updated translations.
  * Stops strongSwan service when a connection cannot be
    established.
  * sets phase 1 (ike) and phase 2 (esp) ciphers for strongswan to
    the same as those used in version 1.0.4
- Changes from version 1.0.6:
  * If L2TP port 1701 is already in use, no longer writes
    "leftprotoport=udp/l2tp" (which is equivalent to
    "leftprotoport=udp/1701") to the ipsec config file. This was
    done to ensures L2TP is encapsulated in IPsec.
  * Uses UUID instead of PID for run-time generated filenames
  * No longer temporarily replaces system /etc/ipsec.secrets file
  * IPsec rekeying is now possible because the following file
    remains for the lifetime of the VPN connection :
    /etc/ipsec.d/nm-l2tp-ipsec-UUID.secrets
  * Following line is appended to /etc/ipsec.secrets if the include
    line is missing:
    include /etc/ipsec.d/*.secrets
  * Removed IPsec Group Name from user interface
  * Added IPsec Phase 1 (ike) &amp; Phase 2 (esp) to user interface.
  * New timeout code for IPsec connection up script.
- Changes from version 1.0.4:
  * xl2tpd-1.3.7 compatibility fix for unrecognized option 'lock'.
  * /usr/sbin/ipsec runtime IPsec stack detection improved so that
    Openswan is rejected and not treated the same as openSwan.
  * Explictly check strongSwan connection has been established.
- Changes from version 1.0.2:
  * runtime test for strongwan or libreswan no longer performed if
    IPsec tickbox not ticked.
- Changes from version 1.0.0:
  * auth-dialog ported to libnm-gtk's NMAVpnPasswordDialog.
  * migrated from deprecated libgnome-keyring to libsecret.
  * Requires strongSwan or Libreswan for IPsec support,
    no longer works with Openswan.
  * Added MTU and MRU setting to PPP settings dialog box.
  * IPsec Group Name is now optional in IPsec dialog box.
- Drop icon install: as there is no icon file in the source
  anymore, nor is there a .desktop file that can make use of the
  icon.
- Drop --disable-more-warnings from configure line: no longer
  needed.
- Added %%check section.
- Replaced Requires strongswan with weaker Recommends strongswan.
- Replaced plus characters to recommended asterisk characters in
  changes file.</changelog>

</package>
<package pkgid="aa48928c08c596f19eb5508a45c4ace11e2734078d4e5800fa68b919777a7ab4" name="SDL2" arch="src">
    <version epoch="0" ver="2.0.3" rel="14.1"/>

<changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL package</changelog>
<changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Reduce build dependencies
- Optional signature verification in local builds</changelog>
<changelog author="prusnak@opensuse.org" date="1382961600">- add SDL2 provides</changelog>
<changelog author="mailaender@opensuse.org" date="1383825600">- Update to version 2.0.1:
  * Added an API to get common filesystem paths in SDL_filesystem.h:
    SDL_GetBasePath(), SDL_GetPrefPath()
  * Added an API to do optimized YV12 and IYUV texture updates:
    SDL_UpdateYUVTexture()
  * Added an API to get the amount of RAM on the system:
    SDL_GetSystemRAM()
  * Added a macro to perform timestamp comparisons with SDL_GetTicks():
    SDL_TICKS_PASSED()
  * Dramatically improved OpenGL ES 2.0 rendering performance
  * Added OpenGL attribute SDL_GL_FRAMEBUFFER_SRGB_CAPABLE
  * Fixed float audio support with the PulseAudio driver
  * Fixed missing line endpoints in the OpenGL renderer on some drivers
  * X11 symbols are no longer defined to avoid collisions when linking statically</changelog>
<changelog author="mailaender@opensuse.org" date="1394712000">- Update to 2.0.2
  * Added SDL_GL_ResetAttributes() to reset OpenGL attributes to default values
  * Added an API to load a database of game controller mappings from a file:
    SDL_GameControllerAddMappingsFromFile(), SDL_GameControllerAddMappingsFromRW()
  * Added game controller mappings for the PS4 and OUYA controllers
  * Added SDL_GetDefaultAssertionHandler() and SDL_GetAssertionHandler()
  * Added SDL_DetachThread()
  * Added SDL_HasAVX() to determine if the CPU has AVX features
  * Added SDL_vsscanf(), SDL_acos(), and SDL_asin() to the stdlib routines
  * EGL can now create/manage OpenGL and OpenGL ES 1.x/2.x contexts, and share
    them using SDL_GL_SHARE_WITH_CURRENT_CONTEXT
  * Added a field "clicks" to the mouse button event which records whether the event is a single click, double click, etc.
  * The screensaver is now disabled by default, and there is a hint SDL_HINT_VIDEO_ALLOW_SCREENSAVER that can change that behavior.
  * Added a hint SDL_HINT_MOUSE_RELATIVE_MODE_WARP to specify whether mouse relative mode should be emulated using mouse warping.
  * testgl2 does not need to link with libGL anymore
  * Added testgles2 test program to demonstrate working with OpenGL ES 2.0
  * Added controllermap test program to visually map a game controller
  * Fixed fullscreen and focused behavior when receiving NotifyGrab events
  * Added experimental Wayland and Mir support, disabled by default
- Added SDL2-devel provides</changelog>
<changelog author="mailaender@opensuse.org" date="1401105600">- Use pkgconfig everywhere
- Fix the build on SLE using prjconf</changelog>
<changelog author="mailaender@opensuse.org" date="1401105601">- Added missing build dependencies
  * arts
  * dbus
  * udev
  * tslib
- Removed unrecognized options: --disable-video-svga, --disable-video-ps3</changelog>
<changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 2.0.3
  * This is a minor bugfix release to take care of creating an OpenGL
  context on Mac OS X.</changelog>
<changelog author="jengelh@inai.de" date="1418904000">- Remove SDL2 obsoletes (we never had packages of that name).
  Copy current Provides to baselibs.conf.</changelog>
<changelog author="jengelh@inai.de" date="1418990400">- Drop old arts/esound soundserver support.</changelog>
<changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
<changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch.
    Fix CVE-2017-2888, bnc#1062784</changelog>

</package>
<package pkgid="1a2ceeed3b5a9b93c9d95ed63e20b7a893316bbb141067a70e5f8265e7cf21c4" name="SuSEfirewall2" arch="noarch">
    <version epoch="0" ver="3.6.312.333" rel="4.1"/>

<changelog author="lnussel@suse.de" date="1342180800">- honor FW_IPv6 setting also in debug mode (bnc#769411)</changelog>
<changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
<changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
<changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
<changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
<changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
<changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
<changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
<changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
<changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
<changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
<changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
<changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
<changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
<changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
<changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
<changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
<changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
<changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
<changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>

</package>
<package pkgid="1a0de86454444acbf351159634c41df4da66532b45446e30d3784d1f826782ee" name="SuSEfirewall2" arch="noarch">
    <version epoch="0" ver="3.6.312.333" rel="7.1"/>

<changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
<changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
<changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
<changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
<changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
<changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
<changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
<changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
<changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
<changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
<changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
<changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
<changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
<changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
<changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
<changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
<changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
<changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
<changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>
<changelog author="matthias.gerstner@suse.com" date="1508414400">- rpcinfo: fixed security issue with too open implicit portmapper rules
  (bnc#1064127, CVE-2017-15638): A source net restriction for _rpc_ services
  was not taken into account for the implicitly added rules for port 111,
  making the portmap service accessible to everyone in the affected zone.
  0003-rpcinfo-improve-implicit-portmapper-rules-logic.patch</changelog>

</package>
<package pkgid="8d73e2d070558425309e8cc7a66c5b6676a46e98053c079bb90fcc66f38561fc" name="SuSEfirewall2" arch="src">
    <version epoch="0" ver="3.6.312.333" rel="4.1"/>

<changelog author="lnussel@suse.de" date="1342180800">- honor FW_IPv6 setting also in debug mode (bnc#769411)</changelog>
<changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
<changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
<changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
<changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
<changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
<changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
<changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
<changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
<changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
<changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
<changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
<changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
<changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
<changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
<changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
<changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
<changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
<changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
<changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>

</package>
<package pkgid="f63f172a5618bdfc74e96713e0a82e3ea18c82b89b6a90f1091e369dfece08ce" name="SuSEfirewall2" arch="src">
    <version epoch="0" ver="3.6.312.333" rel="7.1"/>

<changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
<changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
<changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
<changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
<changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
<changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
<changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
<changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
<changelog author="meissner@suse.com" date="1388145600">- add perl-Net-DNS requires for "SuSEfirewall2 log" (bnc#856705)</changelog>
<changelog author="meissner@suse.com" date="1401192000">- Allow incoming DHCPv6 replies, currently unlimited.
  bnc#867819,bnc#868031,bnc#783002,bnc#822959
- typo fix customary -&gt; custom bnc#835677</changelog>
<changelog author="mt@suse.com" date="1402488000">- Added ACCEPT to TEMPLATE using FW_SERVICES_ACCEPT</changelog>
<changelog author="meissner@suse.com" date="1406808000">- SuSEfirewall2, ACCEPT from services is a local variable, otherwise
  "ACCEPT" would be used a service name (bnc#889406 bnc#889555 bnc#887040)</changelog>
<changelog author="meissner@suse.com" date="1408104000">- hosting moved to github.com/opensuse/susefirewall2
- added a sysvinit -&gt; systemd conversion hack (bnc#891669)</changelog>
<changelog author="matthias.gerstner@suse.com" date="1492084800">Update to new version 3.6.312.330 from SLE12-SP3 branch:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)
- basic.target and SuSEfirewall2 have a loop, remove it bsc#961258
- ignore the bootlock when incremental updates for hotplugged or virtual
  devices are coming in during boot. This prevents lockups for example when
  drbd is used with FW_BOOT_FULL_INIT. (bnc#785299)
- support for IPv6 in FW_TRUSTED_NETS config variable. (bnc#841046)
- don't log dropped broadcast IPv6 broadcast/multicast packets by default to
  avoid cluttering the kernel log. (bnc#847193)
- only apply FW_KERNEL_SECURITY proc settings, if not overriden by the
  administrator in /etc/sysctl.conf (bnc#906136). This allows you to benefit
  from some of the kernel security settings, while overwriting others.
- fixed a race condition in systemd unit files that could cause the
  SuSEfirewall2_init unit to sporadically fail, because /tmp was not
  there/writable yet. (bnc#1014987)
- cooperate with libvirtd NAT guest networking (bsc#884398)
- refurbished the documentation in /usr/share/doc. (bnc#884037)
- allow mdns multicast packets input in unconfigured firewall setups (no zones
  configured) to make zeroconf setups (like avahi) work out of the box for
  typical desktops connecting via DSL/WiFi router scenarios. (bnc#959707)
- increase security when sourcing external script files by checking file
  ownership and permissions first (to avoid sourcing untrusted files owned by
  non-root or world-writable)
- don't enable FW_LO_NOTRACK by default any more, because it breaks expected
  behaviour in some scenarios (bnc#916771)
- fixed 'SuSEfirewall showlog' functionality to be compatible with journalctl</changelog>
<changelog author="matthias.gerstner@suse.com" date="1493121600">Update to new version 3.6.312.333 from SLE12-SP3 branch:
- implementation of feature FATE#316295: allow incremental update of rpc rules</changelog>
<changelog author="matthias.gerstner@suse.com" date="1493899200">Merged some lines from the factory spec file, to actually implement:
- Install symlink to SuSEfirewall2 with the updated SUSE spelling
  (bsc#938727, FATE#316521)</changelog>
<changelog author="matthias.gerstner@suse.com" date="1500292800">- improve/fix consideration of sysctl values in the system (bnc#1044523).
  SuSEfirewall2 will now also check for existing configuration in sysctl.d
  style directories in some default locations. Custom directories can be
  configured via the new configuration variable FW_SYSCTL_PATHS. This is a
  follow-up to (bnc#906136).
  0001-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch</changelog>
<changelog author="matthias.gerstner@suse.com" date="1500984000">- correct boot order between SuSEfirewall2 and nfs-server to fix
  bnc#946325, bsc#963740. Without this fix the NFS server ports might not have
  been correctly opened after boot when both SuSEfirewall2 and nfs-server have
  been enabled in systemd.
  0002-fix-nfs-server-dependency.patch</changelog>
<changelog author="matthias.gerstner@suse.com" date="1501243200">- follow-up bugfix for bnc#946325:
  Removed bogus nfs alias units, added correct nfs-client target in
  SuSEfirewall2.service.
  The nfs alias units are false friends, because they don't fix the startup
  ordering between nfs and SuSEfirewall2.
  The missing nfs-client target could cause nfs mounts for nfs versions &lt; 4.1
  to be unable to receive callbacks from the server, when the nfs client was
  started before the SuSEfirewall2 was started on boot.
  renamed 0002-fix-nfs-server-dependency.patch to
  0002-fix-nfs-dependencies.patch to fix both client and server issues</changelog>
<changelog author="matthias.gerstner@suse.com" date="1508414400">- rpcinfo: fixed security issue with too open implicit portmapper rules
  (bnc#1064127, CVE-2017-15638): A source net restriction for _rpc_ services
  was not taken into account for the implicitly added rules for port 111,
  making the portmap service accessible to everyone in the affected zone.
  0003-rpcinfo-improve-implicit-portmapper-rules-logic.patch</changelog>

</package>
<package pkgid="39473bbebe15150b3bd096bf2fea1c60e4f1306871c616653d1fb85c2aef50f3" name="WindowMaker-applets" arch="src">
    <version epoch="0" ver="1.0.1" rel="7.1"/>

<changelog author="nadvornik@suse.cz" date="1156161600">- changed prefix to /usr</changelog>
<changelog author="nadvornik@suse.cz" date="1169208000">- dropped wmbattery, as it depends on apmd
- fixed array subscript out of range [#233579] and other warnins</changelog>
<changelog author="nadvornik@suse.cz" date="1185278400">- dropped xmms dependent applets
- fixed wmtimer to compile</changelog>
<changelog author="nadvornik@suse.cz" date="1193227200">- fixed to build with new gcc
- used fdupes</changelog>
<changelog author="ro@suse.de" date="1209297600">- remove hermes-devel from buildreq</changelog>
<changelog author="nadvornik@novell.com" date="1244721600">- fixed to compile</changelog>
<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="vuntz@opensuse.org" date="1262088000">- Bump version to 1.0.1.
- Update wmcliphist to 1.0:
  + ported to GTK+ 2.0
  + confirmation dialogs supports Enter (Yes) and Esc (No) keys
  + wmcliphist now can run with almost invisible window (-s 0)
    which is usable on systems running windows manager without
    docking capabilities
  + some debug messages was removed, minor code tweaking and
    auto_take_up feature is now DISABLED by default due to problems
    with some GTK 2.x based applications
- Update wmcliphist-0.6-default.patch: some parts were applied
  upstream.
- Update wmtimer to 2.92:
  + Ported to GTK+ 2.0
  + Fixed a bug in the the command line parsing where the -color
    option would conflict with the -c option in some cases.
- Drop E-Notes: it's really old and not maintained, and it requires
  GTK+ 1.x which we want to remove.
- Remove imlib-devel BuildRequires.
- Add gtk2-devel BuildRequires.</changelog>
<changelog author="seife@opensuse.org" date="1266840000">- fix buffer overflow in wmgmon (detected by gcc-4.5) and minor
  packaging glitches</changelog>
<changelog author="ma@novell.com" date="1270728000">- wmSMPmon: Add options -c1/-c2 to define which CPUs data to show
  in case the system has more than two CPUs.</changelog>
<changelog author="idonmez@novell.com" date="1310040000">- Add wmtv-v4l-2.6.38.patch: use new v4l interface</changelog>
<changelog author="suse-tux@gmx.de" date="1316260800">- fixed build for factory:
  * added Patch47 wmfire-0.0.3.9pre4-configure_fix.diff (fixes x_includes
    and x_libraries handling in configure.in - this needs an autoreconf)
  * added Patch48: wmswallow-0.6.1-ld_fix.diff (add -lX11)
  * added Patch49: wmcliphist-1.0-ld_fix.diff (add -lX11)</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1335528000">- wmgmon and wmmail use proplist-compat.h there for disabled
  as they need to be fixed. Probably need quite a lof of rewriting
  proplist-compat.h has been removed from windowmaker 0.95.2
  See: http://lists.windowmaker.org/dev/msg02649.html</changelog>
<changelog author="coolo@suse.com" date="1346760000">- buildrequire xmessage to fix build on 12.2+</changelog>
<changelog author="schwab@suse.de" date="1363521600">- Build wmtune only on architectures that implement ioperm</changelog>
<changelog author="schwab@suse.de" date="1433851200">- Force gnu89 inline semantics</changelog>
<changelog author="mvetter@suse.com" date="1471435200">- Fix boo#707539: Adapt parameter change of ImageMagick convert
  tool. And also remove not used and deprecated requre ctime.pl.
- Add wmgrabimage-0.70-boo-707539-fix-GrabImage.patch</changelog>
<changelog author="kmroz@suse.com" date="1501934400">- Fix invalid XPM icon paths in /etc/wmmount
  bsc#1046193: wmmount doesn't start
- Modified: wmmount-1.0-beta2.dif</changelog>

</package>
<package pkgid="403606da48e6f4316d3da8322b23a12321d078462bc7ef32b33ed77d919dddc9" name="WindowMaker-applets" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="7.1"/>

<changelog author="nadvornik@novell.com" date="1244721600">- fixed to compile</changelog>
<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="vuntz@opensuse.org" date="1262088000">- Bump version to 1.0.1.
- Update wmcliphist to 1.0:
  + ported to GTK+ 2.0
  + confirmation dialogs supports Enter (Yes) and Esc (No) keys
  + wmcliphist now can run with almost invisible window (-s 0)
    which is usable on systems running windows manager without
    docking capabilities
  + some debug messages was removed, minor code tweaking and
    auto_take_up feature is now DISABLED by default due to problems
    with some GTK 2.x based applications
- Update wmcliphist-0.6-default.patch: some parts were applied
  upstream.
- Update wmtimer to 2.92:
  + Ported to GTK+ 2.0
  + Fixed a bug in the the command line parsing where the -color
    option would conflict with the -c option in some cases.
- Drop E-Notes: it's really old and not maintained, and it requires
  GTK+ 1.x which we want to remove.
- Remove imlib-devel BuildRequires.
- Add gtk2-devel BuildRequires.</changelog>
<changelog author="seife@opensuse.org" date="1266840000">- fix buffer overflow in wmgmon (detected by gcc-4.5) and minor
  packaging glitches</changelog>
<changelog author="ma@novell.com" date="1270728000">- wmSMPmon: Add options -c1/-c2 to define which CPUs data to show
  in case the system has more than two CPUs.</changelog>
<changelog author="idonmez@novell.com" date="1310040000">- Add wmtv-v4l-2.6.38.patch: use new v4l interface</changelog>
<changelog author="suse-tux@gmx.de" date="1316260800">- fixed build for factory:
  * added Patch47 wmfire-0.0.3.9pre4-configure_fix.diff (fixes x_includes
    and x_libraries handling in configure.in - this needs an autoreconf)
  * added Patch48: wmswallow-0.6.1-ld_fix.diff (add -lX11)
  * added Patch49: wmcliphist-1.0-ld_fix.diff (add -lX11)</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1335528000">- wmgmon and wmmail use proplist-compat.h there for disabled
  as they need to be fixed. Probably need quite a lof of rewriting
  proplist-compat.h has been removed from windowmaker 0.95.2
  See: http://lists.windowmaker.org/dev/msg02649.html</changelog>
<changelog author="coolo@suse.com" date="1346760000">- buildrequire xmessage to fix build on 12.2+</changelog>
<changelog author="schwab@suse.de" date="1363521600">- Build wmtune only on architectures that implement ioperm</changelog>
<changelog author="schwab@suse.de" date="1433851200">- Force gnu89 inline semantics</changelog>
<changelog author="mvetter@suse.com" date="1471435200">- Fix boo#707539: Adapt parameter change of ImageMagick convert
  tool. And also remove not used and deprecated requre ctime.pl.
- Add wmgrabimage-0.70-boo-707539-fix-GrabImage.patch</changelog>
<changelog author="kmroz@suse.com" date="1501934400">- Fix invalid XPM icon paths in /etc/wmmount
  bsc#1046193: wmmount doesn't start
- Modified: wmmount-1.0-beta2.dif</changelog>

</package>
<package pkgid="630c254f2a42cdc55ed37ac7b5140bc2626860d11744096a6d626670a4157be3" name="a52dec" arch="src">
    <version epoch="0" ver="0.7.5+svn613" rel="3.1"/>

<changelog author="waldemar@links2linux.de" date="1009627200">- first build</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1022760000">- update to Version 0.7.3</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1025697600">- update to Version 0.7.4</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1044446400">- added german description
- some changes I got from Philipp Thomas &lt;pthomas@suse.de&gt;</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1045915200">- added --enable-shared</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1048593600">- changes to use Packman upload-script</changelog>
<changelog author="detlef@dreichelt.de" date="1101211200">- changes for x86_64:
  - added CFLAGS= -fPIC</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1208692800">- splitted in different packages</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1221912000">- rename of the lib packages</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
<changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
<changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
<changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
<changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
<changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
<changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
<changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>

</package>
<package pkgid="364b52d7db58f6055721d106c11c6710a6b0e84868b6d4a0a29b8846333a915d" name="a52dec" arch="x86_64">
    <version epoch="0" ver="0.7.5+svn613" rel="3.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
<changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
<changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
<changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
<changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
<changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
<changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
<changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>

</package>
<package pkgid="670489d9c20c57e05e4cdef96e94c610093b690597ee2361e457b2bfa3c1cad1" name="abxtest" arch="x86_64">
    <version epoch="0" ver="0.15.2b" rel="2.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1321099200">- initial version (0.15.2b)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1361793600">- buildrequire zlib-devel to fix build on 12.3+</changelog>
<changelog author="mpluskal@suse.com" date="1487764800">- Cleanup spec file with spec-cleaner</changelog>

</package>
<package pkgid="ad3d917d18d8a93cfe43d653a99f127f60004796608e04b569649091abf25449" name="acct" arch="src">
    <version epoch="0" ver="6.6.2" rel="12.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc, %__cxx macros</changelog>
<changelog author="bart.vanassche@gmail.com" date="1327320000">- switch from acct-6.3.5 to acct-6.5.5. From the upstream acct ChangeLog:
  * Fix potential buffer-overflows.
  * UNIX 98 pty support.
  * Add Linux multiformat support.
  * lastcomm.c: integrated patch from Paul Jones which adds
  paging and swapping support to lastcomm and sa</changelog>
<changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- drop useless acct-axp.patch</changelog>
<changelog author="coolo@suse.com" date="1357992000">- remove suse_update_config</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added makeinfo BuildRequire to fix build with new automake</changelog>
<changelog author="schuetzm@gmx.net" date="1370520000">- Converted rc file to systemd unit file.
- Fixed a bug where the accounting file wasn't reopened after
  logrotate, because force-reload isn't implemented.</changelog>
<changelog author="p.drouand@gmail.com" date="1382184000">- Remove useless %inserv_prereq and fillup_prereq macro; acct package
  doesn't contain neither sysvinit script and sysconfig file</changelog>
<changelog author="vcizek@suse.com" date="1387627200">- update to 6.6.1
  * Fixed vulnabilities, due to autmake. Thanks to Karl Berry
    for pointing this out.
  * Update gnulib to latest git.
- dropped acct-stdio.h.patch (upstream)
- add gpg verification</changelog>
<changelog author="werner@suse.de" date="1395057600">- cleanup of acct
  * Add install section in service unit (bnc#867138)
  * Add a simple script to create pacct file</changelog>
<changelog author="vcizek@suse.com" date="1409227200">- fixed libexec path in acct.service (bnc#893980)</changelog>
<changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 6.6.2
  + Link with -lm.
  + Fix texi.
  + The rest of fixes from 6.5.5 to 6.6.1.
- Update Url to new project home
- Use download Url
- Remove dependency on gpg-offline and keyring files; let OBS handle
  source verification
- Adapt acct-hz.patch to upstream changes
  &gt; acct-6.6.2-hz.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1418990400">- Add back .keyring and .sig files; OBS verify them too</changelog>
<changelog author="p.drouand@gmail.com" date="1425211200">- Fixthe log path in service and logrotate files; fix bnc#915654</changelog>
<changelog author="meissner@suse.com" date="1431864000">- install deinstall needs to be in preun</changelog>
<changelog author="tchvatal@suse.com" date="1434974400">- Use try-restart not restart on logrotate update, otherwise we could
  suprisingly start the service for user, which is not desired
- Cleanup with spec-cleaner
- Use tmpfiles creation instead of hand-written shell script</changelog>
<changelog author="tchvatal@suse.com" date="1434974401">- Use just /var/log/account/pacct file and remove the tmpfiles creation
  completely</changelog>
<changelog author="tchvatal@suse.com" date="1435838400">- The previous commit ghosted the log file, but we need it empty
  and present to start with, so unghost it</changelog>
<changelog author="kstreitova@suse.com" date="1505822400">- acct.service: fix chmod command call to use an absolute path
  [bsc#1053528]</changelog>

</package>
<package pkgid="eedfaa4c40602e736608d552c97dad3f9105cb329b55e5c3c5d5e728625ab28b" name="acct" arch="x86_64">
    <version epoch="0" ver="6.6.2" rel="12.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc, %__cxx macros</changelog>
<changelog author="bart.vanassche@gmail.com" date="1327320000">- switch from acct-6.3.5 to acct-6.5.5. From the upstream acct ChangeLog:
  * Fix potential buffer-overflows.
  * UNIX 98 pty support.
  * Add Linux multiformat support.
  * lastcomm.c: integrated patch from Paul Jones which adds
  paging and swapping support to lastcomm and sa</changelog>
<changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- drop useless acct-axp.patch</changelog>
<changelog author="coolo@suse.com" date="1357992000">- remove suse_update_config</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added makeinfo BuildRequire to fix build with new automake</changelog>
<changelog author="schuetzm@gmx.net" date="1370520000">- Converted rc file to systemd unit file.
- Fixed a bug where the accounting file wasn't reopened after
  logrotate, because force-reload isn't implemented.</changelog>
<changelog author="p.drouand@gmail.com" date="1382184000">- Remove useless %inserv_prereq and fillup_prereq macro; acct package
  doesn't contain neither sysvinit script and sysconfig file</changelog>
<changelog author="vcizek@suse.com" date="1387627200">- update to 6.6.1
  * Fixed vulnabilities, due to autmake. Thanks to Karl Berry
    for pointing this out.
  * Update gnulib to latest git.
- dropped acct-stdio.h.patch (upstream)
- add gpg verification</changelog>
<changelog author="werner@suse.de" date="1395057600">- cleanup of acct
  * Add install section in service unit (bnc#867138)
  * Add a simple script to create pacct file</changelog>
<changelog author="vcizek@suse.com" date="1409227200">- fixed libexec path in acct.service (bnc#893980)</changelog>
<changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 6.6.2
  + Link with -lm.
  + Fix texi.
  + The rest of fixes from 6.5.5 to 6.6.1.
- Update Url to new project home
- Use download Url
- Remove dependency on gpg-offline and keyring files; let OBS handle
  source verification
- Adapt acct-hz.patch to upstream changes
  &gt; acct-6.6.2-hz.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1418990400">- Add back .keyring and .sig files; OBS verify them too</changelog>
<changelog author="p.drouand@gmail.com" date="1425211200">- Fixthe log path in service and logrotate files; fix bnc#915654</changelog>
<changelog author="meissner@suse.com" date="1431864000">- install deinstall needs to be in preun</changelog>
<changelog author="tchvatal@suse.com" date="1434974400">- Use try-restart not restart on logrotate update, otherwise we could
  suprisingly start the service for user, which is not desired
- Cleanup with spec-cleaner
- Use tmpfiles creation instead of hand-written shell script</changelog>
<changelog author="tchvatal@suse.com" date="1434974401">- Use just /var/log/account/pacct file and remove the tmpfiles creation
  completely</changelog>
<changelog author="tchvatal@suse.com" date="1435838400">- The previous commit ghosted the log file, but we need it empty
  and present to start with, so unghost it</changelog>
<changelog author="kstreitova@suse.com" date="1505822400">- acct.service: fix chmod command call to use an absolute path
  [bsc#1053528]</changelog>

</package>
<package pkgid="566c5ec49a0add1b2d4ea899c967dfb103aa20b68bbdcd8b47af88d52c590b07" name="amarok" arch="src">
    <version epoch="0" ver="2.8.0" rel="19.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
<changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
<changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
<changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
<changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
<changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
<changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
<changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
<changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
<changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>

</package>
<package pkgid="b1f22cc9d0ecf4adc2f113c6fecd10b43273921918d59f84b01660d42a09007c" name="amarok" arch="x86_64">
    <version epoch="0" ver="2.8.0" rel="19.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
<changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
<changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
<changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
<changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
<changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
<changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
<changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
<changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
<changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>

</package>
<package pkgid="2150312aafe2994073daf49e31c98e008b0f4c96a5b056615b0c1383ef729931" name="amarok-lang" arch="noarch">
    <version epoch="0" ver="2.8.0" rel="19.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
<changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
<changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>
<changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447848000">- Drop the recommends for moodbar. This would free us from
  gstreamer_0.10</changelog>
<changelog author="tchvatal@suse.com" date="1450440000">- Cleanup with spec-cleaner
- Do not conditionalize ffmpeg, we don't need to be in packman
  the factory ffmpeg is enough</changelog>
<changelog author="olaf@aepfle.de" date="1451995200">- Add amarok-taglib-compare.patch (kde#351013)</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1456488000">- Added amarok-ffmpeg3.0.patch to build against ffmpeg-3.0
  libraries on PMBS.</changelog>
<changelog author="wbauer@tmo.at" date="1460203200">- Add Fix-for-infinite-loop-with-some-Audio-CDs.patch to fix the
  infinite loop in case a home-burned or old audio CD (without
  CDTEXT) is inserted (kde#339190)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1460462400">- Copy download icon from Breeze on Leap 42.1 and Tumbleweed</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1463313600">- Use share-mime-info macros (boo#979301)</changelog>
<changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-workaround.patch to workaround an error seen by GCC,
  link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71273.</changelog>
<changelog author="cornelis@solcon.nl" date="1474200000">- Add Fix-MPRIS2-DesktopEntry-value.patch to get working media
  controls in plasma taskbar (kde#565275)</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="wbauer@tmo.at" date="1480766400">- Recommend kio_audiocd4 for playback of AudioCDs, the standard
  kio_audiocd package is KF5 based now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="wbauer@tmo.at" date="1503576000">- Add Fix-crash-during-musicbrainz-search.patch to fix a possible
  crash when looking up metadata on MusicBrainz (kde#328359)</changelog>
<changelog author="zaitor@opensuse.org" date="1505563200">- Add gstreamer-plugins-ugly Recommends: Provide mp3 playback by
  default for users. (boo#1049512)</changelog>

</package>
<package pkgid="15bc253a0fb171311f5ecbf0ee489f61f7478cec83514993c877e02e03203a78" name="amavisd-new" arch="src">
    <version epoch="0" ver="2.8.1" rel="11.1"/>

<changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
<changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
<changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
<changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
<changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
<changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
<changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
<changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
<changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
<changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
<changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
<changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
<changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
<changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
<changelog author="wr@rosenauer.org" date="1442491200">- require perl-Convert-BinHex as otherwise startup fails if the
  package is missing (bnc#942254)</changelog>
<changelog author="varkoly@suse.com" date="1485691200">- bnc#1014205 L3: /etc/sysconfig/amavis missing
- bnc#1014157 L3: amavisd-new needs sa-update</changelog>
<changelog author="wr@rosenauer.org" date="1501416000">- boo#1012969 IPv6: DENIED ACCESS due to INVALID PEER IP ADDRESS
  add amavisd-new-bug1012969.diff</changelog>

</package>
<package pkgid="debe364dde20b48d8622a67f3b6295a6cdd96b825f62aadacdd37041589d2613" name="amavisd-new" arch="x86_64">
    <version epoch="0" ver="2.8.1" rel="11.1"/>

<changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
<changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
<changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
<changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
<changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
<changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
<changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
<changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
<changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
<changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
<changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
<changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
<changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
<changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
<changelog author="wr@rosenauer.org" date="1442491200">- require perl-Convert-BinHex as otherwise startup fails if the
  package is missing (bnc#942254)</changelog>
<changelog author="varkoly@suse.com" date="1485691200">- bnc#1014205 L3: /etc/sysconfig/amavis missing
- bnc#1014157 L3: amavisd-new needs sa-update</changelog>
<changelog author="wr@rosenauer.org" date="1501416000">- boo#1012969 IPv6: DENIED ACCESS due to INVALID PEER IP ADDRESS
  add amavisd-new-bug1012969.diff</changelog>

</package>
<package pkgid="28e0cd4d0b40643f38d8f75dfde16a05250b51d169a0432b97ca74ba7152c977" name="amavisd-new-docs" arch="x86_64">
    <version epoch="0" ver="2.8.1" rel="11.1"/>

<changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
<changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
<changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
<changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
<changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
<changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
<changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
<changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
<changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
<changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
<changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
<changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
<changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
<changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
<changelog author="wr@rosenauer.org" date="1442491200">- require perl-Convert-BinHex as otherwise startup fails if the
  package is missing (bnc#942254)</changelog>
<changelog author="varkoly@suse.com" date="1485691200">- bnc#1014205 L3: /etc/sysconfig/amavis missing
- bnc#1014157 L3: amavisd-new needs sa-update</changelog>
<changelog author="wr@rosenauer.org" date="1501416000">- boo#1012969 IPv6: DENIED ACCESS due to INVALID PEER IP ADDRESS
  add amavisd-new-bug1012969.diff</changelog>

</package>
<package pkgid="0316ff10677e15928b9c6e684fcee18fdd005853f876c903e3cb1cc7ff9e9623" name="ansible" arch="noarch">
    <version epoch="0" ver="2.4.1.0" rel="6.1"/>

<changelog author="lars@linux-schulserver.de" date="1444478400">- update to 1.9.4
  This release addresses several bugs, most notably those related to
  the yum module (introduced in 1.9.3):
  + Fixes a bug where yum state=latest would error if there were no
    updates to install.
  + Fixes a bug where yum state=latest did not work with wildcard
    package names.
  + Fixes a bug in lineinfile relating to escape sequences.
  + Fixes a bug where vars_prompt was not keeping passwords private
    by default.
  + Fix ansible-galaxy and the hipchat callback plugin to check that
    the host it is contacting matches its TLS Certificate.</changelog>
<changelog author="lars@linux-schulserver.de" date="1444564800">- build again on SLE-11-SP4 by ignoring some dependencies that are
  not available in the official OBS repository: python-paramiko,
  python-Jinja2, python-PyYAML, python-pycrypto</changelog>
<changelog author="erwin.vandevelde@gmail.com" date="1455192000">- update to 2.0.0.2
  Version 2.0 is a new major version with a lot of changes, among which:
  + New modules for cloud-based services and many more
  + The new block/rescue/always directives allow for making task blocks and exception-like semantics
  + Many API changes
- more info at:
  https://github.com/ansible/ansible/blob/devel/CHANGELOG.md#20-over-the-hills-and-far-away</changelog>
<changelog author="eshmarnev@suse.com" date="1455537600">- fix_zypper_errorhandling.patch is being deleted</changelog>
<changelog author="lars@linux-schulserver.de" date="1457524800">- update to 2.0.1.0:
  * Fixes a major compatibility break in the synchronize module shipped
    with 2.0.0.x. That version of synchronize ran sudo on the controller
    prior to running rsync. In 1.9.x and previous, sudo was run on the
    host that rsync connected to. 2.0.1 restores the 1.9.x behaviour.
  * Additionally, several other problems with where synchronize chose
    to run when combined with delegate_to were fixed. In particular, if
    a playbook targetted localhost and then delegated_to a remote host
    the prior behavior (in 1.9.x and 2.0.0.x) was to copy files between
    the src and destination directories on the delegated host. This has
    now been fixed to copy between localhost and the delegated host.
  * Fix a regression where synchronize was unable to deal with unicode paths.
  * Fix a regression where synchronize deals with inventory hosts that
    use localhost but with an alternate port.
  * Fixes a regression where the retry files feature was not implemented.
  * Fixes a regression where the any_errors_fatal option was implemented
    in 2.0 incorrectly, and also adds a feature where any_errors_fatal
    can be set at the block level.
  * Fix tracebacks when playbooks or ansible itself were located in
    directories with unicode characters.
  * Fix bug when sending unicode characters to an external pager
    for display.
  * Fix a bug with squashing loops for special modules (mostly package
    managers). The optimization was squashing when the loop did not
    apply to the selection of packages. This has now been fixed.
  * Temp files created when using vault are now "shredded" using the
    unix shred program which overwrites the file with random data.
  * Some fixes to cloudstack modules for case sensitivity
  * Fix non-newstyle modules (non-python modules and old-style modules)
    to disabled pipelining.
  * Fix fetch module failing even if fail_on_missing is set to False
  * Fix for cornercase when local connections, sudo, and raw were
    used together.
  * Fix dnf module to remove dependent packages when state=absent is
    specified. This was a feature of the 1.9.x version that was left
    out by mistake when the module was rewritten for 2.0.
  * Fix bugs with non-english locales in yum, git, and apt modules
  * Fix a bug with the dnf module where state=latest could only
    upgrade, not install.</changelog>
<changelog author="michael@stroeder.com" date="1462622400">- update to 2.0.2.0:
  * Backport of the 2.1 feature to ensure per-item callbacks are sent as they occur,
    rather than all at once at the end of the task.
  * Fixed bugs related to the iteration of tasks when certain combinations of roles,
    blocks, and includes were used, especially when handling errors in rescue/always
    portions of blocks.
  * Fixed handling of redirects in our helper code, and ported the uri module to use
    this helper code. This removes the httplib dependency for this module while fixing
    some bugs related to redirects and SSL certs.
  * Fixed some bugs related to the incorrect creation of extra temp directories for
    uploading files, which were not cleaned up properly.
  * Improved error reporting in certain situations, to provide more information such as
    the playbook file/line.
  * Fixed a bug related to the variable precedence of role parameters, especially when
    a role may be used both as a dependency of a role and directly by itself within the
    same play.
  * Fixed some bugs in the 2.0 implementation of do/until.
  * Fixed some bugs related to run_once:
  - Ensure that all hosts are marked as failed if a task marked as run_once fails.
  - Show a warning when using the free strategy when a run_once task is encountered, as
    there is no way for the free strategy to guarantee the task is not run more than once.
  * Fixed a bug where the assemble module was not honoring check mode in some situations.
  * Fixed a bug related to delegate_to, where we were incorrectly using variables from
    the inventory host rather than the delegated-to host.
  * The 'package' meta-module now properly squashes items down to a single execution (as the
    apt/yum/other package modules do).
  * Fixed a bug related to the ansible-galaxy CLI command dealing with paged results from
    the Galaxy server.
  * Pipelining support is now available for the local and jail connection plugins, which is
    useful for users who do not wish to have temp files/directories created when running
    tasks with these connection types.
  * Improvements in support for additional shell types.
  * Improvements in the code which is used to calculate checksums for remote files.
  * Some speed ups and bug fixes related to the variable merging code.
  * Workaround bug in python subprocess on El Capitan that was making vault fail
    when attempting to encrypt a file
  * Fix lxc_container module having predictable temp file names and setting file
    permissions on the temporary file too leniently on a temporary file that was
    executed as a script.  Addresses CVE-2016-3096
  * Fix a bug in the uri module where setting headers via module params that
    start with HEADER_ were causing a traceback.
  * Fix bug in the free strategy that was causing it to synchronize its workers
    after every task (making it a lot more like linear than it should have been).</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 2.1.0.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)
- on SuSE platforms recommend package python-dnspython for
  DNS lookups in playbooks</changelog>
<changelog author="michael@stroeder.com" date="1467115200">- update to 2.1.1.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)
- changed download link to https://releases.ansible.com</changelog>
<changelog author="michael@stroeder.com" date="1473940800">- update to 2.1.2.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)</changelog>
<changelog author="michael@stroeder.com" date="1476705600">- update to 2.2.0.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)</changelog>
<changelog author="boris@steki.net" date="1484136000">- security update to rc4 of 2.2.1.0 version
  CVE-2016-9587, CVE-2016-8628 and CVE-2016-8614
  for full list of changes see
  /usr/share/doc/packages/ansible/CHANGELOG.md</changelog>
<changelog author="michael@stroeder.com" date="1484568000">- update to 2.2.1.0 (final)</changelog>
<changelog author="michael@stroeder.com" date="1490616000">- update to 2.2.2.0
  This release fixes a few bugs introduced in the previous version,
  as well as another small tweak to catch an additional way in
  which CVE-2016-9587 could be triggered.</changelog>
<changelog author="michael@stroeder.com" date="1490702400">- update to 2.3.0.0
  for full list of changes see
  /usr/share/doc/packages/ansible/CHANGELOG.md</changelog>
<changelog author="lars@linux-schulserver.de" date="1494417600">- update to 2.3.1 RC1 (package version 2.3.0.1):
  * SECURITY (MODERATE): fix for CVE-2017-7481, in which data for
    lookup plugins used as variables was not being correctly marked
    as "unsafe".</changelog>
<changelog author="matthias.eliasson@gmail.com" date="1496836800">- update to 2.3.1.0 (final)
- clean up of spec file with spec-cleaner</changelog>
<changelog author="michael@stroeder.com" date="1502193600">- update to 2.3.2.0 (final)
- replaced hard-coded version by var</changelog>
<changelog author="lars@linux-schulserver.de" date="1506168000">- update to 2.4.0.0 (final)
  Major Changes
  + Support for Python-2.4 and Python-2.5 on the managed system's side
    was dropped. If you need to manage a system that ships with Python-2.4
    or Python-2.5, you'll need to install Python-2.6 or better on the
    managed system or run Ansible-2.3 until you can upgrade the system.
  + New import/include keywords to replace the old bare include directives.
    The use of static: {yes|no} on such includes is now deprecated.
  ++ Using import_* (import_playbook, import_tasks, import_role) directives are static.
  ++ Using include_* (include_tasks, include_role) directives are dynamic.
    This is done to avoid collisions and possible security issues as
    facts come from the remote targets and they might be compromised.
  + New order play level keyword that allows the user to change the
    order in which Ansible processes hosts when dispatching tasks.
  + Users can now set group merge priority for groups of the same depth
    (parent child relationship), using the new ansible_group_priority variable,
    when values are the same or don't exist it will fallback to the previous
    sorting by name'.
  + Inventory has been revamped:
  ++ Inventory classes have been split to allow for better
    management and deduplication
  ++ Logic that each inventory source duplicated is now common and pushed
    up to reconciliation
  ++ VariableManager has been updated for better interaction with inventory
  ++ Updated CLI with helper method to initialize base objects for plays
  ++ New inventory plugins for creating inventory
  ++ Old inventory formats are still supported via plugins
  ++ Inline host_list is also an inventory plugin, an example alternative
    advanced_host_list is also provided (it supports ranges)
  ++ New configuration option to list enabled plugins and precedence
    order: whitelist_inventory in ansible.cfg
  ++ vars_plugins have been reworked, they are now run from Vars manager
    and API has changed (need docs)
  ++ Loading group_vars/host_vars is now a vars plugin and can be overridden
  ++ It is now possible to specify mulitple inventory sources in the
    command line (-i /etc/hosts1 -i /opt/hosts2)
  ++ Inventory plugins can use the cache plugin (i.e. virtualbox) and
    is affected by meta: refresh_inventory
  ++ Group variable precedence is now configurable via new 'precedence'
    option in ansible.cfg (needs docs)
  ++ Improved warnings and error messages across the board
  + Configuration has been changed from a hardcoded listing in the
    constants module to dynamically loaded from yaml definitions
  ++ Also added an ansible-config CLI to allow for listing config options
    and dumping current config (including origin)
  ++ TODO: build upon this to add many features detailed in ansible-config
    proposal https://github.com/ansible/proposals/issues/35
  + Windows modules now support the use of multiple shared module_utils
    files in the form of Powershell modules (.psm1), via
    [#]Requires -Module Ansible.ModuleUtils.Whatever.psm1
  + Python module argument_spec now supports custom validation logic
    by accepting a callable as the type argument.
  + Windows become_method: runas now works across all authtypes and
    will auto-elevate under UAC if WinRM user has "Act as part of the
    operating system" privilege
  - please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
    further changes
- added ansible-inventory and ansible-config binaries and manpages
- package contrib and examples directories in docdir
- package all *md files as documentation for now
- recommend the following new packages for (open)SUSE:
  + python-httplib2
  + python-keyczar
  + python-six
- enable/fix build for RHEL and Fedora by redefining __python2 and
  adding/enhancing the needed (build)requires if needed</changelog>
<changelog author="jengelh@inai.de" date="1507032000">- Remove radical wording from descriptions.
  Use improved find syntax.</changelog>
<changelog author="matthias.eliasson@gmail.com" date="1509105600">- Update to 2.4.1.0:
  * CVE-2017-7550: Prevent jenkins_plugin module from exposing
    passwords in remote host logs (bsc#1065872)
  * Various bug fixes and improvements</changelog>

</package>
<package pkgid="79836085c642eec32ca6400e31e7be7ecb32e16dfd39d018fb173af199ef5030" name="ansible" arch="src">
    <version epoch="0" ver="2.4.1.0" rel="6.1"/>

<changelog author="lars@linux-schulserver.de" date="1444478400">- update to 1.9.4
  This release addresses several bugs, most notably those related to
  the yum module (introduced in 1.9.3):
  + Fixes a bug where yum state=latest would error if there were no
    updates to install.
  + Fixes a bug where yum state=latest did not work with wildcard
    package names.
  + Fixes a bug in lineinfile relating to escape sequences.
  + Fixes a bug where vars_prompt was not keeping passwords private
    by default.
  + Fix ansible-galaxy and the hipchat callback plugin to check that
    the host it is contacting matches its TLS Certificate.</changelog>
<changelog author="lars@linux-schulserver.de" date="1444564800">- build again on SLE-11-SP4 by ignoring some dependencies that are
  not available in the official OBS repository: python-paramiko,
  python-Jinja2, python-PyYAML, python-pycrypto</changelog>
<changelog author="erwin.vandevelde@gmail.com" date="1455192000">- update to 2.0.0.2
  Version 2.0 is a new major version with a lot of changes, among which:
  + New modules for cloud-based services and many more
  + The new block/rescue/always directives allow for making task blocks and exception-like semantics
  + Many API changes
- more info at:
  https://github.com/ansible/ansible/blob/devel/CHANGELOG.md#20-over-the-hills-and-far-away</changelog>
<changelog author="eshmarnev@suse.com" date="1455537600">- fix_zypper_errorhandling.patch is being deleted</changelog>
<changelog author="lars@linux-schulserver.de" date="1457524800">- update to 2.0.1.0:
  * Fixes a major compatibility break in the synchronize module shipped
    with 2.0.0.x. That version of synchronize ran sudo on the controller
    prior to running rsync. In 1.9.x and previous, sudo was run on the
    host that rsync connected to. 2.0.1 restores the 1.9.x behaviour.
  * Additionally, several other problems with where synchronize chose
    to run when combined with delegate_to were fixed. In particular, if
    a playbook targetted localhost and then delegated_to a remote host
    the prior behavior (in 1.9.x and 2.0.0.x) was to copy files between
    the src and destination directories on the delegated host. This has
    now been fixed to copy between localhost and the delegated host.
  * Fix a regression where synchronize was unable to deal with unicode paths.
  * Fix a regression where synchronize deals with inventory hosts that
    use localhost but with an alternate port.
  * Fixes a regression where the retry files feature was not implemented.
  * Fixes a regression where the any_errors_fatal option was implemented
    in 2.0 incorrectly, and also adds a feature where any_errors_fatal
    can be set at the block level.
  * Fix tracebacks when playbooks or ansible itself were located in
    directories with unicode characters.
  * Fix bug when sending unicode characters to an external pager
    for display.
  * Fix a bug with squashing loops for special modules (mostly package
    managers). The optimization was squashing when the loop did not
    apply to the selection of packages. This has now been fixed.
  * Temp files created when using vault are now "shredded" using the
    unix shred program which overwrites the file with random data.
  * Some fixes to cloudstack modules for case sensitivity
  * Fix non-newstyle modules (non-python modules and old-style modules)
    to disabled pipelining.
  * Fix fetch module failing even if fail_on_missing is set to False
  * Fix for cornercase when local connections, sudo, and raw were
    used together.
  * Fix dnf module to remove dependent packages when state=absent is
    specified. This was a feature of the 1.9.x version that was left
    out by mistake when the module was rewritten for 2.0.
  * Fix bugs with non-english locales in yum, git, and apt modules
  * Fix a bug with the dnf module where state=latest could only
    upgrade, not install.</changelog>
<changelog author="michael@stroeder.com" date="1462622400">- update to 2.0.2.0:
  * Backport of the 2.1 feature to ensure per-item callbacks are sent as they occur,
    rather than all at once at the end of the task.
  * Fixed bugs related to the iteration of tasks when certain combinations of roles,
    blocks, and includes were used, especially when handling errors in rescue/always
    portions of blocks.
  * Fixed handling of redirects in our helper code, and ported the uri module to use
    this helper code. This removes the httplib dependency for this module while fixing
    some bugs related to redirects and SSL certs.
  * Fixed some bugs related to the incorrect creation of extra temp directories for
    uploading files, which were not cleaned up properly.
  * Improved error reporting in certain situations, to provide more information such as
    the playbook file/line.
  * Fixed a bug related to the variable precedence of role parameters, especially when
    a role may be used both as a dependency of a role and directly by itself within the
    same play.
  * Fixed some bugs in the 2.0 implementation of do/until.
  * Fixed some bugs related to run_once:
  - Ensure that all hosts are marked as failed if a task marked as run_once fails.
  - Show a warning when using the free strategy when a run_once task is encountered, as
    there is no way for the free strategy to guarantee the task is not run more than once.
  * Fixed a bug where the assemble module was not honoring check mode in some situations.
  * Fixed a bug related to delegate_to, where we were incorrectly using variables from
    the inventory host rather than the delegated-to host.
  * The 'package' meta-module now properly squashes items down to a single execution (as the
    apt/yum/other package modules do).
  * Fixed a bug related to the ansible-galaxy CLI command dealing with paged results from
    the Galaxy server.
  * Pipelining support is now available for the local and jail connection plugins, which is
    useful for users who do not wish to have temp files/directories created when running
    tasks with these connection types.
  * Improvements in support for additional shell types.
  * Improvements in the code which is used to calculate checksums for remote files.
  * Some speed ups and bug fixes related to the variable merging code.
  * Workaround bug in python subprocess on El Capitan that was making vault fail
    when attempting to encrypt a file
  * Fix lxc_container module having predictable temp file names and setting file
    permissions on the temporary file too leniently on a temporary file that was
    executed as a script.  Addresses CVE-2016-3096
  * Fix a bug in the uri module where setting headers via module params that
    start with HEADER_ were causing a traceback.
  * Fix bug in the free strategy that was causing it to synchronize its workers
    after every task (making it a lot more like linear than it should have been).</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 2.1.0.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)
- on SuSE platforms recommend package python-dnspython for
  DNS lookups in playbooks</changelog>
<changelog author="michael@stroeder.com" date="1467115200">- update to 2.1.1.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)
- changed download link to https://releases.ansible.com</changelog>
<changelog author="michael@stroeder.com" date="1473940800">- update to 2.1.2.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)</changelog>
<changelog author="michael@stroeder.com" date="1476705600">- update to 2.2.0.0
  (see /usr/share/doc/packages/ansible/CHANGELOG.md for details)</changelog>
<changelog author="boris@steki.net" date="1484136000">- security update to rc4 of 2.2.1.0 version
  CVE-2016-9587, CVE-2016-8628 and CVE-2016-8614
  for full list of changes see
  /usr/share/doc/packages/ansible/CHANGELOG.md</changelog>
<changelog author="michael@stroeder.com" date="1484568000">- update to 2.2.1.0 (final)</changelog>
<changelog author="michael@stroeder.com" date="1490616000">- update to 2.2.2.0
  This release fixes a few bugs introduced in the previous version,
  as well as another small tweak to catch an additional way in
  which CVE-2016-9587 could be triggered.</changelog>
<changelog author="michael@stroeder.com" date="1490702400">- update to 2.3.0.0
  for full list of changes see
  /usr/share/doc/packages/ansible/CHANGELOG.md</changelog>
<changelog author="lars@linux-schulserver.de" date="1494417600">- update to 2.3.1 RC1 (package version 2.3.0.1):
  * SECURITY (MODERATE): fix for CVE-2017-7481, in which data for
    lookup plugins used as variables was not being correctly marked
    as "unsafe".</changelog>
<changelog author="matthias.eliasson@gmail.com" date="1496836800">- update to 2.3.1.0 (final)
- clean up of spec file with spec-cleaner</changelog>
<changelog author="michael@stroeder.com" date="1502193600">- update to 2.3.2.0 (final)
- replaced hard-coded version by var</changelog>
<changelog author="lars@linux-schulserver.de" date="1506168000">- update to 2.4.0.0 (final)
  Major Changes
  + Support for Python-2.4 and Python-2.5 on the managed system's side
    was dropped. If you need to manage a system that ships with Python-2.4
    or Python-2.5, you'll need to install Python-2.6 or better on the
    managed system or run Ansible-2.3 until you can upgrade the system.
  + New import/include keywords to replace the old bare include directives.
    The use of static: {yes|no} on such includes is now deprecated.
  ++ Using import_* (import_playbook, import_tasks, import_role) directives are static.
  ++ Using include_* (include_tasks, include_role) directives are dynamic.
    This is done to avoid collisions and possible security issues as
    facts come from the remote targets and they might be compromised.
  + New order play level keyword that allows the user to change the
    order in which Ansible processes hosts when dispatching tasks.
  + Users can now set group merge priority for groups of the same depth
    (parent child relationship), using the new ansible_group_priority variable,
    when values are the same or don't exist it will fallback to the previous
    sorting by name'.
  + Inventory has been revamped:
  ++ Inventory classes have been split to allow for better
    management and deduplication
  ++ Logic that each inventory source duplicated is now common and pushed
    up to reconciliation
  ++ VariableManager has been updated for better interaction with inventory
  ++ Updated CLI with helper method to initialize base objects for plays
  ++ New inventory plugins for creating inventory
  ++ Old inventory formats are still supported via plugins
  ++ Inline host_list is also an inventory plugin, an example alternative
    advanced_host_list is also provided (it supports ranges)
  ++ New configuration option to list enabled plugins and precedence
    order: whitelist_inventory in ansible.cfg
  ++ vars_plugins have been reworked, they are now run from Vars manager
    and API has changed (need docs)
  ++ Loading group_vars/host_vars is now a vars plugin and can be overridden
  ++ It is now possible to specify mulitple inventory sources in the
    command line (-i /etc/hosts1 -i /opt/hosts2)
  ++ Inventory plugins can use the cache plugin (i.e. virtualbox) and
    is affected by meta: refresh_inventory
  ++ Group variable precedence is now configurable via new 'precedence'
    option in ansible.cfg (needs docs)
  ++ Improved warnings and error messages across the board
  + Configuration has been changed from a hardcoded listing in the
    constants module to dynamically loaded from yaml definitions
  ++ Also added an ansible-config CLI to allow for listing config options
    and dumping current config (including origin)
  ++ TODO: build upon this to add many features detailed in ansible-config
    proposal https://github.com/ansible/proposals/issues/35
  + Windows modules now support the use of multiple shared module_utils
    files in the form of Powershell modules (.psm1), via
    [#]Requires -Module Ansible.ModuleUtils.Whatever.psm1
  + Python module argument_spec now supports custom validation logic
    by accepting a callable as the type argument.
  + Windows become_method: runas now works across all authtypes and
    will auto-elevate under UAC if WinRM user has "Act as part of the
    operating system" privilege
  - please refer to /usr/share/doc/packages/ansible/CHANGELOG.md for
    further changes
- added ansible-inventory and ansible-config binaries and manpages
- package contrib and examples directories in docdir
- package all *md files as documentation for now
- recommend the following new packages for (open)SUSE:
  + python-httplib2
  + python-keyczar
  + python-six
- enable/fix build for RHEL and Fedora by redefining __python2 and
  adding/enhancing the needed (build)requires if needed</changelog>
<changelog author="jengelh@inai.de" date="1507032000">- Remove radical wording from descriptions.
  Use improved find syntax.</changelog>
<changelog author="matthias.eliasson@gmail.com" date="1509105600">- Update to 2.4.1.0:
  * CVE-2017-7550: Prevent jenkins_plugin module from exposing
    passwords in remote host logs (bsc#1065872)
  * Various bug fixes and improvements</changelog>

</package>
<package pkgid="3e9747aff114c43378e7b1e8f66cd4e1c30149310252e03e8b253ef13d2080bf" name="apache2" arch="src">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="6b3547962e631c08996cee4f00f312ec70796bc1262b37b3d2ae55222d436548" name="apache2" arch="src">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="7bc576b8e67d1e4756000679b27187696a269682e466c10d12289f97dee489cf" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="26475c87219de3b5aec8b5491b39bf0bc42f1eb0e7dc8c4ed961b7204f804ed7" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="743b8abeb6512b552e2bb627887e47c8f2f858375067563ae5f5fb3699b2bd54" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="5bd7b8aa1b151182a49e3beb6948fa44da784d13f08c9a8c7923947a58a00819" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="bc1ebfb5426d14e823d72ba84e0b3357e098f5bb37cb0c4cd8ca4a4d67c75d1e" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="75cf3c286ab113f2b62aaa23639d65bb0a4123a8de2d91fd7de09238683d5f33" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="812d06aaa33b33f4f8d7d88e7def5d02395efe119bb6150d5dfd16e9d5be003d" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="99189164f582b26727eff14c0d067bcf7c8d221c1b2180dac9e41bf072436058" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="ffc967e68c37d14201522c7725fce9dd0cbce3b4fb60f73d24add7cd5c815406" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="0835cba28d0e1efe57daf7a2498db3301c514d7fdda812280aa1ddff88d55547" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="e19baba0eb199414ac7db9cfc4516f42982da2aa5d488da91f1cea7d378d8310" name="apache2-mod_apparmor" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="bda78f48de275f9aab5073ed277298ae4f985ee7384c7193aca54c9010fdfb8a" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="bd89fcba53261fe702e422c343e1a86d92d19eb04507c336a1d6fa67121e5ef2" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="d35fcd2e5c5d000f44a06a4112fe8ea9564e4637a407886447c36c4b94aa7a81" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="44d5038c221ab6ad48180f5c14ce411b9bc3623c8faa347f36fc72de57ca8d3f" name="apache2-mod_php7" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="de9e58a93e805952aab00cdeb093996bc6ff53fd8e50694bdf9048d27ec60798" name="apache2-mod_php7" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="bf6973b4e1e1ec56053cd011018079d65ec07f919859a3a29ed7e4ae2809c48e" name="apache2-mod_php7" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="791bd823f2106c5281218b541319ff89bf0d8865043c1a7ac1cd28cf97f76147" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="de8722b4cda4298ceeab0e9f43e53945ea68c660f291a13f50e2c62bb14335b0" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="9b467870d3abce21cd825e4fb5d9b482f2684aa1b777a548888d3111a339bbc2" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="3644e3d8a1a860d034d3fddc95029f5065fb8c6a93d11f3bdd19b0b8f131d31d" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="ce5115a1f220c71b35968eb5785b95de8e673f3120aaf0ed6a5847a2357289af" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="13.1"/>

<changelog author="pgajdos@suse.com" date="1448280000">- add a note: FollowSymLinks or SymLinksIfOwnerMatch is neccessary
  for RewriteRule in given dir [bnc#955701]</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>

</package>
<package pkgid="6db3035a7c2c17004fa1abacd6f29e6c4924c92834d76a831a9c6ce63f675b74" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.23" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1449144000">- fix crash when for -X
  + httpd-2.4.17-debug-crash.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449489600">- systemd: Set TasksMax=infinity for current systemd releases.
  The default limit of 512 is too small and prevents the creation of
  new server processes. Apache has its own runtime/harcoded limits.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1449921600">- Update to version 2.4.18
  * drop 2.4.17-protocols.patch in upstream.
- Change list too long to mention here see:
  http://www.apache.org/dist/httpd/CHANGES_2.4.18 for details.</changelog>
<changelog author="pgajdos@suse.com" date="1450094400">- fix build for SLE_11_SP4:
  + httpd-2.4.18-missing-semicolon.patch</changelog>
<changelog author="pgajdos@suse.com" date="1453291200">- backport of HttpContentLengthHeadZero and HttpExpectStrict
  + httpd-2.4.x-fate317766-config-control-two-protocol-options.diff
  (needed to be refreshed against 2.4.18)</changelog>
<changelog author="pgajdos@suse.com" date="1462795200">- start apache services after remote-fs [bsc#978543]</changelog>
<changelog author="pgajdos@suse.com" date="1463572800">- updated to 2.4.20 to fix CVE-2016-1546 [bsc#980370]
  - removed httpd-2.4.18-missing-semicolon.patch (upstreamed)
  - removed httpd-2.4.17-debug-crash.patch (httpd -X does not crash
    anymore)</changelog>
<changelog author="pgajdos@suse.com" date="1464264000">- remove Alias= from [Install] of the template service
  [bsc#981541c#10]</changelog>
<changelog author="kstreitova@suse.com" date="1468238400">- update to 2.4.23 to fix CVE-2016-4979 [bsc#987365]
  - mod_proxy_fdpass needs explicit configure line now
  - mod_proxy_hcheck was missing due to upstream bug
- removed note about ulimits in sysconfig file [bsc#976711]
- enable authnz_fcgi module</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Add apache2-cve-2016-5387.patch to fix CVE-2016-5387. Prior to
  this patch, Apache would translate every header "Foo: ..."
  received in the HTTP request into an environment variable called
  $HTTP_FOO="...". While useful in general, this feature could be
  abused by sending specially crafted "Proxy" headers, which would
  result in server code running in an environment where $HTTP_PROXY
  points to an arbitrary, potentially hostile location. This update
  modifies Apache to ignore the non-standard "Proxy" header
  entirely so that HTTP_PROXY is never set by the server.
  [bnc#988488]</changelog>
<changelog author="pgajdos@suse.com" date="1470398400">- readd the support of multiple entries in APACHE_ACCESS_LOG
  [bsc#991032]</changelog>
<changelog author="pgajdos@suse.com" date="1473768000">- add NotifyAccess=all to service files [bsc#980663]</changelog>
<changelog author="pgajdos@suse.com" date="1481112000">- security update: CVE-2016-8740 [bsc#1013648]
  * apache2-CVE-2016-8740.patch</changelog>
<changelog author="pgajdos@suse.com" date="1487937600">- security update
  * CVE-2016-8743 [bsc#1016715]
    + apache2-CVE-2016-8743.patch
    + apache2-CVE-2016-8743-1.patch
  * CVE-2016-0736 [bsc#1016712]
    + apache2-CVE-2016-0736.patch
  * CVE-2016-2161 [bsc#1016714]
    + apache2-CVE-2016-2161.patch
- add missing copy of hcuri and hcexpr ftom the worker to the
  health check worker [bsc#1019380]</changelog>
<changelog author="pgajdos@suse.com" date="1496404800">- gensslcert: use hostname when fqdn is too long [bsc#1035829]</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- remove /usr/bin/http2 symlink only during apache2 package
  uninstall, not upgrade [bsc#1041830]</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- security update
  * CVE-2017-7679 [bsc#1045060]
    + apache2-CVE-2017-7679.patch
  * CVE-2017-3169 [bsc#1045062]
    + apache2-CVE-2017-3169.patch
  * CVE-2017-3167 [bsc#1045065]
    + apache2-CVE-2017-3167.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292800">- security update
  * CVE-2017-9788 [bsc#1048576]
    + apache2-CVE-2017-9788.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500292801">- start_apache2: include individual sysconfig.d files instead of
  sysconfig.d dir, include sysconfig.d/include.conf after httpd.conf
  is processed [bsc#1023616], [bsc#1043055]</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update
  * CVE-2017-9798 [bsc#1058058]
    + apache2-CVE-2017-9798.patch</changelog>

</package>
<package pkgid="9637e320c2d45c7303fffd0ce8cca854f024ab8aebbf6582e59cc06139f1cd49" name="apparmor" arch="src">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="bb04bff112be1604b27a238c297bfb111b72dc006885b12f7ce47c900c1629c1" name="apparmor-abstractions" arch="noarch">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="1aadbaa7ef3b008559cc6811e8f9af5998c574b71f23721edeb9f2647cf20cfe" name="apparmor-docs" arch="noarch">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="c6a1f0624ee94f5c4afbf5895f7e6867a130b07e2a8413fa51045b728ef469f3" name="apparmor-parser" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="79a65667b908657d901b2524012a49ffbc9236246cca54ad34f8c2d26952fe78" name="apparmor-parser-lang" arch="noarch">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="d9d02495899488b3af116f0f1bbe231c9bb981b07f843a22f54390908dfdcaf4" name="apparmor-profiles" arch="noarch">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="d065690be8494574ebc2bcbeb3d56bff158bae97daa0195068a0bff57cc254b9" name="apparmor-utils" arch="noarch">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="3bc1bd5535ba5b307f793edb3390282d61006eb40df95b1008abbea0d445a8a1" name="apparmor-utils-lang" arch="noarch">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="2a5a36c673543451b6b1bb3e43c301053dfd2bfb9f79a18d0a8c02a23f9b4462" name="appengine" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20150702.e335b53" rel="6.1"/>

<changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150702.e335b53</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
<changelog author="tboerger@suse.com" date="1480939200">- Disabled tests for now to get it reliable built</changelog>
<changelog author="tboerger@suse.com" date="1481889600">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481889601">- Update to version 0.0.0+git20150702.e335b53:
  * appengine/delay: add error return value for delay.Call
  * Fix nested application of internal call overrides.
  * appengine/demo: Update samples.
  * appengine/internal: Split VersionID on "." instead of "_".
  * appengine/internal: Add unit test for BackgroundContext.
  * demos: rename "c" context variables to "ctx"
  * Update datastore.PropertyLoadSaver doc example.
  * Convert appengine_internal error types (APIError and CallError) to their appengine/internal equivalents.
  * Add internal/blobstore proto.
  * Add blobstore package.</changelog>

</package>
<package pkgid="f26f76b9513636cc45c5a1ba95379a76f95b3e697a8a90772301d9dd3af0038d" name="at" arch="src">
    <version epoch="0" ver="3.1.14" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1354104000">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="aj@ajaissle.de" date="1390478400">- Fixed leaking the exit code of systemctl in atd.sh. A change
  to at.sleep prevents leaking systemctl exit code as well as
  simplifies the script.</changelog>
<changelog author="aj@ajaissle.de" date="1393848000">- New upstream release 3.1.14
  + Add systemd service file. (deb#639634)
  + Initialize jobno before using it.
  + No longer try to compile and run a trivial C program. (deb#632301)
  + Add -M option to usage message.
  + Use LDFLAGS when linking programs.
- Rebased the following patches:
  * at-3.1.13.patch as at-3.1.14.patch
  * at-3.1.13-joblist.patch as at-3.1.14-joblist.patch
  * at-3.1.13-selinux.patch as at-3.1.14-selinux.patch
  * at-parse-suse-sysconfig.patch as at-3.1.14-parse-suse-sysconfig.patch
  * at-makefile-deps.patch as at-3.1.14-makefile-deps.patch
- Dropped at-3.1.13-pie.patch (obsolete, now using LDFLAGS)
- Changed systemd service file [Unit] -&gt; "Description" to match upstream
- Spec: cleanup + use some macros</changelog>
<changelog author="vdziewiecki@suse.com" date="1402920000">-Removed init script
-fix bnc#880364 - at pam file is not calling pam_loginuid</changelog>
<changelog author="lchiquitto@suse.de" date="1412596800">- Add at-3.1.14-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160)</changelog>
<changelog author="kstreitova@suse.com" date="1458043200">-  add at-3.1.14-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
<changelog author="mmarek@suse.cz" date="1473422400">- Rebuild with a fixed flex package to fix a buffer overflow
  (bsc#990856, CVE-2016-6354).</changelog>
<changelog author="kstreitova@suse.com" date="1504008000">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target
  [bsc#988890]</changelog>

</package>
<package pkgid="fde6c42043c43b7168933b05cf815b856447e0941969afb31157bb1dabdc6d94" name="at" arch="x86_64">
    <version epoch="0" ver="3.1.14" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1354104000">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="aj@ajaissle.de" date="1390478400">- Fixed leaking the exit code of systemctl in atd.sh. A change
  to at.sleep prevents leaking systemctl exit code as well as
  simplifies the script.</changelog>
<changelog author="aj@ajaissle.de" date="1393848000">- New upstream release 3.1.14
  + Add systemd service file. (deb#639634)
  + Initialize jobno before using it.
  + No longer try to compile and run a trivial C program. (deb#632301)
  + Add -M option to usage message.
  + Use LDFLAGS when linking programs.
- Rebased the following patches:
  * at-3.1.13.patch as at-3.1.14.patch
  * at-3.1.13-joblist.patch as at-3.1.14-joblist.patch
  * at-3.1.13-selinux.patch as at-3.1.14-selinux.patch
  * at-parse-suse-sysconfig.patch as at-3.1.14-parse-suse-sysconfig.patch
  * at-makefile-deps.patch as at-3.1.14-makefile-deps.patch
- Dropped at-3.1.13-pie.patch (obsolete, now using LDFLAGS)
- Changed systemd service file [Unit] -&gt; "Description" to match upstream
- Spec: cleanup + use some macros</changelog>
<changelog author="vdziewiecki@suse.com" date="1402920000">-Removed init script
-fix bnc#880364 - at pam file is not calling pam_loginuid</changelog>
<changelog author="lchiquitto@suse.de" date="1412596800">- Add at-3.1.14-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160)</changelog>
<changelog author="kstreitova@suse.com" date="1458043200">-  add at-3.1.14-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
<changelog author="mmarek@suse.cz" date="1473422400">- Rebuild with a fixed flex package to fix a buffer overflow
  (bsc#990856, CVE-2016-6354).</changelog>
<changelog author="kstreitova@suse.com" date="1504008000">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target
  [bsc#988890]</changelog>

</package>
<package pkgid="f122cb52f51ba55690cd47885624ed9bb3ac567879f0d70de29e76c6c2839ec0" name="atftp" arch="src">
    <version epoch="0" ver="0.7.0" rel="176.1"/>

<changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
<changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
<changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
<changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
<changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
<changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
<changelog author="chris@computersalat.de" date="1384257600">- rebase patches (p0)
- rename atftpd.init.d to atftpd.init
- fix spec
  * remove ghost /var/run/atftp (created by init)</changelog>
<changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
<changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
<changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>

</package>
<package pkgid="d17ecea02a54cee1113f780b5241d6f172c02026a64a255bd4d291f2388bd40d" name="atftp" arch="x86_64">
    <version epoch="0" ver="0.7.0" rel="176.1"/>

<changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
<changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
<changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
<changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
<changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
<changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
<changelog author="chris@computersalat.de" date="1384257600">- rebase patches (p0)
- rename atftpd.init.d to atftpd.init
- fix spec
  * remove ghost /var/run/atftp (created by init)</changelog>
<changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
<changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
<changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>

</package>
<package pkgid="5bf211c0d531e393c6577692f903dd06411e211032ff31a7d6b60598c77d593f" name="audacity" arch="src">
    <version epoch="0" ver="2.1.3" rel="3.2"/>

<changelog author="reddwarf@opensuse.org" date="1346328000">- Update to version 2.0.2
  * A significant bug that caused clicks on split lines has been fixed
  * There are improvements to several toolbars and to some Nyquist effects
- Update to version 2.0.1
  * Keyboard shortcuts can now be allocated to effects
  * Nyquist plug-ins can be added to Chains
- Run spec-cleaner
- Use pkgconfig() style BuildRequires
- Remove conditionals for unsupported openSUSE versions
- Remove taglib build dependency. Not used any more
- Remove libsamplerate dependency. Upstream prefers included libresample
- Remove custom icon. Upstream already has a transparent version.
- Add audacity-2.0.2-docdir.patch patch
- Don't delete MIME type icon. Instead put it in %{_datadir}/icons/hicolor/48x48/mimetypes/application-x-audacity-project.xpm
- Add %icon_theme_cache_post, %mime_database_post and %desktop_database_post to %post
- Recommend libmp3lame0, libavformat52, libavcodec52 and libavutil50</changelog>
<changelog author="uli@suse.de" date="1350907200">- explicitly disable SSE on non-x86 architectures (fixes ARM,
  probably others)</changelog>
<changelog author="kkaempf@suse.com" date="1364558400">- Update to version 2.0.3
  Bug fixes
  * General
  - Crash using Undo whilst time-shifting a track.
  - Crash using Repair if the selection extended into an empty track.
  - Export Multiple didn't prevent export if there was no audio or all
    audio was muted. This allowed export of small invalid files.
  * Time Track
  - Loop Play of a speeded-up track inserted silence.
  - Playback and rendering was significantly inaccurate, creating audible
    and visual glitches.
  * Accessibility
  - The mnemonics character "&amp;" was read out by screen readers in most of
    the Preferences choices.
  - NVDA did not read static text in most dialogs. Text can now be read by
    using INSERT + B.
  - JAWS and Window-eyes misread the "Duration" control in Silence
    Generator.
  - Toolbar buttons could not be pressed by ENTER
  - Other interface bug fixes.
  Changes and Improvements
  * Resampling
  - The SoX Resampler library (libsoxr) has replaced libresample in
    Audacity releases, offering both higher quality and greater speed.
  * Time Tracks new features
  - "Set Range" now changes only the range of the Time Track, preserving
    the pitch/speed set by any existing warp points.
  - Vertical scale added with options for linear and logarithmic display
    and interpolation.
  - Upper and lower speed limits will now be remembered when saving and
    reopening a project in 2.0.3. Warp points in projects saved by
    previous Audacity versions will be correctly restored in 2.0.3.
  - Warp points saved in a 2.0.3 project will be preserved if opened in
    previous versions but playback and display will be incorrect.
  * New effects
  - Studio Fade Out (uses a filtered "S" curve).
  - Adjustable Fade (accessible effect for creating partial fades and
    adjustable fade shapes).
  - Bass and Treble (replaces Bass Boost).
  * General
  - Real sample rates up to 384000 Hz are now supported for playback and
    recording in high resolution devices (the maximum is up to 192000 Hz
    for Windows DirectSound host).
  - Labeled Regions in Edit Menu is renamed to "Labeled Audio" and now
    allows splits to be placed at point labels. Labeled audio regions that
    touch without overlapping are treated as separate regions. Overlapping
    labeled audio regions are treated as a single region.
  - New Croatian translation of Audacity.
  * Compilation
  - CMake is required in order to build libsoxr.
- removed audacity-implicit.patch and audacity-2.0.2-docdir.patch
  both included in 2.0.3</changelog>
<changelog author="fisiu@opensuse.org" date="1378814400">- Update to 2.0.4:
  * New "Reverb" effect to replace GVerb, based on the original "Freeverb".
  * New View &gt; Go to Selection Start and Go to Selection End commands.
  * New Tracks &gt; Align End to End command to append existing tracks to each other.
  * Change Tempo now supports fractional BPM.
  * Plot Spectrum now supports FFT sizes up to 65536.
  * WAV files now support "Album Title", "Track Number" and "Genre"
    LIST INFO tags and also support ID3 tags.
  * Handle a bug in older iPods or some OS X applications that cause them
    to refuse AIFF files whose metadata contains an uneven number of characters,
  * CTRL + ALT can now be used to smooth samples in Draw Tool.
  * Modules Preferences replaced with a dialog on launch of Audacity enabling
    you to choose which modules to load.
  * Many bug fixes.</changelog>
<changelog author="dap.darkness@gmail.com" date="1393070400">- Update to 2.0.5:
  * Audacity 2.0.4 to hang or the computer to crash. WDM-KS has
    been removed from Audacity 2.0.5 while we work on safely
    enabling this host.
  * You can now navigate through an effect or other dialog using
    keyboard TAB.
  * See more at
    http://wiki.audacityteam.org/wiki/Release_Notes_2.0.5</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1414152000">- Update to 2.0.6:
  Bug fixes for:
  * Interface:
  * Region Restore did not restore the region after using Preferences.
  * Dragging selections with the keyboard or Selection Toolbar digits
    was very slow.
  * (Windows) Help &gt; About Audacity crashed when run in Magyar language.
  * (OS X) Some full and reduced Menu Bar items were not translated.
  * (OS X and Linux) Fixed various interface crashes.
  * Effects:
  * Reverb and Paulstretch were missing from Chains.
  * Analyze &gt; Contrast could report very inaccurate rms levels.
  * Noise Removal: Attack and decay times were half as long as set.
  * (OS X and Linux) Nyquist effects ran much more slowly than on Windows.
  * Click or drag on the Timeline after Loop Play continued to loop.
  * Transcription Toolbar did not play slower than 0.1x speed.
  * (Linux) Audacity did not build if python 2 was not available.
  Changes and Improvements:
  * Interface:
  * Redesigned, searchable Keyboard Preferences with Tree, Name and Key views.
  * Edit Menu: "Cut" and "Delete" are now in the top level of the menu.
  * Transport Menu now includes "Play/Stop" and "Play/Stop and Set Cursor"
    (use Keyboard Preferences to create shortcuts for "Play" and "Stop").
  * Tracks Menu now includes "Mix and Render to New Track".
  * Track Drop-Down Menu now has Move Track To Top and Move Track To Bottom.
  * New right-click menu choice "Delete Label" to remove single labels.
  * "Snap To" now offers choice of snap to the "closest" or "prior" position.
    Note: the previous "Snap To On" keyboard shortcut will no longer work.
  * "Snap To" settings are now independent for each project.
  * Effects:
  * Truncate Silence: redesigned with simpler option "Truncate Detected
    Silence" to shorten to the specified length without compressing silence.
  * VST effects: New "Settings" dialog lets you specify buffer size (for
    faster processing) and enable buffer delay compensation (to prevent
    inserted silence). Compensation may cause a crash in a few plug-ins.
  * VST effects now support standard FXP presets.
  * LV2 effects are now supported on all platforms (textual interface only).
  * Import or export using FFmpeg now requires FFmpeg 1.2 or later (or libav
    0.8 or later). For recommended downloads of recent FFmpeg please visit:
    http://manual.audacityteam.org/o/man/faq_installation_and_plug_ins.html#ffdown .
  * New Tamil translation (largely complete).
  * (Windows) FLAC exports can now exceed 2 GB in size.
  * (OS X) Easier Audacity installation using the DMG: drag the Audacity folder
    to the /Applications shortcut,
  * (OS X) Audacity 2.0.6 will not officially support OS X 10.10 Yosemite when
    released (in particular, Apple Audio Units may not open in Audacity).
  * (Linux) Self-compiled builds of Audacity now search for system LADSPA
    effects in /usr/lib/ladspa.
  - Added patch audacity-flac_assert.h.patch to build against flac 1.3.0.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1414411200">- Fix download url for source package</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1425384000">- Add patch audacity-ffmpeg.patch to build against current ffmpeg
  on PMBS.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1427716800">- Update to 2.1.0:
  + Changes and Improvements:
  * LADSPA and VST effects now support real-time preview,
    save/load of user presets and saving effect settings across
    sessions. Note: Real-time preview does not yet support
    latency compensation.
  * VST effects now support import/export of FXB preset banks.
  * Shell VST effects that host multiple plugins are now supported.
  * All Effect Menu items (built-in or plugin) can now be used in
    a Chain.
  * Items in the Effect, Generate or Analyze Menus can be sorted
    or grouped by name, publisher or class of effect.
  * Noise Removal is improved and renamed to "Noise Reduction".
  * Change Speed has new time controls for current and new length.
    You can now enter the speed change as a multiplier e.g. "2" is
    twice as fast.
  * New "Crossfade Tracks" effect can be used for crossfading two
    tracks. This replaces Cross Fade In and Cross Fade Out.
  * Nyquist Prompt and most shipped Nyquist effects now have
    Preview button.
  * Redesigned Meter Toolbars: The default shows separate Record
    and Playback Meters, half-height so they can be wider while
    docked, in gradient style.
  * A frequency selection can now be made (and spectral edit
    effects applied to those frequencies) when in a spectrogram
    view. You can also create or adjust frequency selections in a
    new "Spectral Selection Toolbar" (available at View &gt; Toolbars).
  * Transcription Toolbar (Play-at-speed) can now loop play and
    cut-preview.
  * Timer Record now saves recordings automatically into an
    existing project.
  * New Armenian translation.
  + Bug fixes:
  * Typing "j" or "k" in a label track activated the
    "move cursor" shortcut.
  * Spectrogram log (f) view displayed incorrectly until
    vertically zoomed.
  * Fixed crash after zooming out on vertical scale beyond +/-1.0.
  * Selections made with Selection Toolbar were not restored after
    Undo.
  * Undo could fail silently if a selection included/touched a
    clip boundary.
  * If there were invalid FFmpeg libs in system PATH this
    prevented Audacity recognising the installed FFmpeg or the
    FFmpeg specified in audacity.cfg.
  * Fix "Audacity already running" error when using the
    command-line or context menu to open multiple or further files.
  * Fix segfault exporting an FFmpeg format to an unwritable folder.
  * Fix silent failure exporting FFmpeg, MP2 or OGG to an
    unwritable directory.
  * Fix ENTER activated an effect when OK button was greyed out.
- Add audacity-lang package.
- Extend audacity-flac_assert.h.patch to versions until 1.4.0.
- Do not remove appdata.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
<changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
<changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
<changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
<changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
<changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Submit audacity to rebuild against updated wxWidgets-3_0-nostl to
  fix boo#1051717</changelog>

</package>
<package pkgid="0b775ce96f77181cedfb4b54b0ea1eae355c5508e0375c50aab578082409f5c7" name="audacity" arch="x86_64">
    <version epoch="0" ver="2.1.3" rel="3.2"/>

<changelog author="reddwarf@opensuse.org" date="1346328000">- Update to version 2.0.2
  * A significant bug that caused clicks on split lines has been fixed
  * There are improvements to several toolbars and to some Nyquist effects
- Update to version 2.0.1
  * Keyboard shortcuts can now be allocated to effects
  * Nyquist plug-ins can be added to Chains
- Run spec-cleaner
- Use pkgconfig() style BuildRequires
- Remove conditionals for unsupported openSUSE versions
- Remove taglib build dependency. Not used any more
- Remove libsamplerate dependency. Upstream prefers included libresample
- Remove custom icon. Upstream already has a transparent version.
- Add audacity-2.0.2-docdir.patch patch
- Don't delete MIME type icon. Instead put it in %{_datadir}/icons/hicolor/48x48/mimetypes/application-x-audacity-project.xpm
- Add %icon_theme_cache_post, %mime_database_post and %desktop_database_post to %post
- Recommend libmp3lame0, libavformat52, libavcodec52 and libavutil50</changelog>
<changelog author="uli@suse.de" date="1350907200">- explicitly disable SSE on non-x86 architectures (fixes ARM,
  probably others)</changelog>
<changelog author="kkaempf@suse.com" date="1364558400">- Update to version 2.0.3
  Bug fixes
  * General
  - Crash using Undo whilst time-shifting a track.
  - Crash using Repair if the selection extended into an empty track.
  - Export Multiple didn't prevent export if there was no audio or all
    audio was muted. This allowed export of small invalid files.
  * Time Track
  - Loop Play of a speeded-up track inserted silence.
  - Playback and rendering was significantly inaccurate, creating audible
    and visual glitches.
  * Accessibility
  - The mnemonics character "&amp;" was read out by screen readers in most of
    the Preferences choices.
  - NVDA did not read static text in most dialogs. Text can now be read by
    using INSERT + B.
  - JAWS and Window-eyes misread the "Duration" control in Silence
    Generator.
  - Toolbar buttons could not be pressed by ENTER
  - Other interface bug fixes.
  Changes and Improvements
  * Resampling
  - The SoX Resampler library (libsoxr) has replaced libresample in
    Audacity releases, offering both higher quality and greater speed.
  * Time Tracks new features
  - "Set Range" now changes only the range of the Time Track, preserving
    the pitch/speed set by any existing warp points.
  - Vertical scale added with options for linear and logarithmic display
    and interpolation.
  - Upper and lower speed limits will now be remembered when saving and
    reopening a project in 2.0.3. Warp points in projects saved by
    previous Audacity versions will be correctly restored in 2.0.3.
  - Warp points saved in a 2.0.3 project will be preserved if opened in
    previous versions but playback and display will be incorrect.
  * New effects
  - Studio Fade Out (uses a filtered "S" curve).
  - Adjustable Fade (accessible effect for creating partial fades and
    adjustable fade shapes).
  - Bass and Treble (replaces Bass Boost).
  * General
  - Real sample rates up to 384000 Hz are now supported for playback and
    recording in high resolution devices (the maximum is up to 192000 Hz
    for Windows DirectSound host).
  - Labeled Regions in Edit Menu is renamed to "Labeled Audio" and now
    allows splits to be placed at point labels. Labeled audio regions that
    touch without overlapping are treated as separate regions. Overlapping
    labeled audio regions are treated as a single region.
  - New Croatian translation of Audacity.
  * Compilation
  - CMake is required in order to build libsoxr.
- removed audacity-implicit.patch and audacity-2.0.2-docdir.patch
  both included in 2.0.3</changelog>
<changelog author="fisiu@opensuse.org" date="1378814400">- Update to 2.0.4:
  * New "Reverb" effect to replace GVerb, based on the original "Freeverb".
  * New View &gt; Go to Selection Start and Go to Selection End commands.
  * New Tracks &gt; Align End to End command to append existing tracks to each other.
  * Change Tempo now supports fractional BPM.
  * Plot Spectrum now supports FFT sizes up to 65536.
  * WAV files now support "Album Title", "Track Number" and "Genre"
    LIST INFO tags and also support ID3 tags.
  * Handle a bug in older iPods or some OS X applications that cause them
    to refuse AIFF files whose metadata contains an uneven number of characters,
  * CTRL + ALT can now be used to smooth samples in Draw Tool.
  * Modules Preferences replaced with a dialog on launch of Audacity enabling
    you to choose which modules to load.
  * Many bug fixes.</changelog>
<changelog author="dap.darkness@gmail.com" date="1393070400">- Update to 2.0.5:
  * Audacity 2.0.4 to hang or the computer to crash. WDM-KS has
    been removed from Audacity 2.0.5 while we work on safely
    enabling this host.
  * You can now navigate through an effect or other dialog using
    keyboard TAB.
  * See more at
    http://wiki.audacityteam.org/wiki/Release_Notes_2.0.5</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1414152000">- Update to 2.0.6:
  Bug fixes for:
  * Interface:
  * Region Restore did not restore the region after using Preferences.
  * Dragging selections with the keyboard or Selection Toolbar digits
    was very slow.
  * (Windows) Help &gt; About Audacity crashed when run in Magyar language.
  * (OS X) Some full and reduced Menu Bar items were not translated.
  * (OS X and Linux) Fixed various interface crashes.
  * Effects:
  * Reverb and Paulstretch were missing from Chains.
  * Analyze &gt; Contrast could report very inaccurate rms levels.
  * Noise Removal: Attack and decay times were half as long as set.
  * (OS X and Linux) Nyquist effects ran much more slowly than on Windows.
  * Click or drag on the Timeline after Loop Play continued to loop.
  * Transcription Toolbar did not play slower than 0.1x speed.
  * (Linux) Audacity did not build if python 2 was not available.
  Changes and Improvements:
  * Interface:
  * Redesigned, searchable Keyboard Preferences with Tree, Name and Key views.
  * Edit Menu: "Cut" and "Delete" are now in the top level of the menu.
  * Transport Menu now includes "Play/Stop" and "Play/Stop and Set Cursor"
    (use Keyboard Preferences to create shortcuts for "Play" and "Stop").
  * Tracks Menu now includes "Mix and Render to New Track".
  * Track Drop-Down Menu now has Move Track To Top and Move Track To Bottom.
  * New right-click menu choice "Delete Label" to remove single labels.
  * "Snap To" now offers choice of snap to the "closest" or "prior" position.
    Note: the previous "Snap To On" keyboard shortcut will no longer work.
  * "Snap To" settings are now independent for each project.
  * Effects:
  * Truncate Silence: redesigned with simpler option "Truncate Detected
    Silence" to shorten to the specified length without compressing silence.
  * VST effects: New "Settings" dialog lets you specify buffer size (for
    faster processing) and enable buffer delay compensation (to prevent
    inserted silence). Compensation may cause a crash in a few plug-ins.
  * VST effects now support standard FXP presets.
  * LV2 effects are now supported on all platforms (textual interface only).
  * Import or export using FFmpeg now requires FFmpeg 1.2 or later (or libav
    0.8 or later). For recommended downloads of recent FFmpeg please visit:
    http://manual.audacityteam.org/o/man/faq_installation_and_plug_ins.html#ffdown .
  * New Tamil translation (largely complete).
  * (Windows) FLAC exports can now exceed 2 GB in size.
  * (OS X) Easier Audacity installation using the DMG: drag the Audacity folder
    to the /Applications shortcut,
  * (OS X) Audacity 2.0.6 will not officially support OS X 10.10 Yosemite when
    released (in particular, Apple Audio Units may not open in Audacity).
  * (Linux) Self-compiled builds of Audacity now search for system LADSPA
    effects in /usr/lib/ladspa.
  - Added patch audacity-flac_assert.h.patch to build against flac 1.3.0.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1414411200">- Fix download url for source package</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1425384000">- Add patch audacity-ffmpeg.patch to build against current ffmpeg
  on PMBS.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1427716800">- Update to 2.1.0:
  + Changes and Improvements:
  * LADSPA and VST effects now support real-time preview,
    save/load of user presets and saving effect settings across
    sessions. Note: Real-time preview does not yet support
    latency compensation.
  * VST effects now support import/export of FXB preset banks.
  * Shell VST effects that host multiple plugins are now supported.
  * All Effect Menu items (built-in or plugin) can now be used in
    a Chain.
  * Items in the Effect, Generate or Analyze Menus can be sorted
    or grouped by name, publisher or class of effect.
  * Noise Removal is improved and renamed to "Noise Reduction".
  * Change Speed has new time controls for current and new length.
    You can now enter the speed change as a multiplier e.g. "2" is
    twice as fast.
  * New "Crossfade Tracks" effect can be used for crossfading two
    tracks. This replaces Cross Fade In and Cross Fade Out.
  * Nyquist Prompt and most shipped Nyquist effects now have
    Preview button.
  * Redesigned Meter Toolbars: The default shows separate Record
    and Playback Meters, half-height so they can be wider while
    docked, in gradient style.
  * A frequency selection can now be made (and spectral edit
    effects applied to those frequencies) when in a spectrogram
    view. You can also create or adjust frequency selections in a
    new "Spectral Selection Toolbar" (available at View &gt; Toolbars).
  * Transcription Toolbar (Play-at-speed) can now loop play and
    cut-preview.
  * Timer Record now saves recordings automatically into an
    existing project.
  * New Armenian translation.
  + Bug fixes:
  * Typing "j" or "k" in a label track activated the
    "move cursor" shortcut.
  * Spectrogram log (f) view displayed incorrectly until
    vertically zoomed.
  * Fixed crash after zooming out on vertical scale beyond +/-1.0.
  * Selections made with Selection Toolbar were not restored after
    Undo.
  * Undo could fail silently if a selection included/touched a
    clip boundary.
  * If there were invalid FFmpeg libs in system PATH this
    prevented Audacity recognising the installed FFmpeg or the
    FFmpeg specified in audacity.cfg.
  * Fix "Audacity already running" error when using the
    command-line or context menu to open multiple or further files.
  * Fix segfault exporting an FFmpeg format to an unwritable folder.
  * Fix silent failure exporting FFmpeg, MP2 or OGG to an
    unwritable directory.
  * Fix ENTER activated an effect when OK button was greyed out.
- Add audacity-lang package.
- Extend audacity-flac_assert.h.patch to versions until 1.4.0.
- Do not remove appdata.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
<changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
<changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
<changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
<changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
<changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Submit audacity to rebuild against updated wxWidgets-3_0-nostl to
  fix boo#1051717</changelog>

</package>
<package pkgid="17b077d756dd1d462dc3e1cae7ef46c67faad910202ee40a97c8e7474b7470a2" name="audacity-lang" arch="noarch">
    <version epoch="0" ver="2.1.3" rel="3.2"/>

<changelog author="reddwarf@opensuse.org" date="1346328000">- Update to version 2.0.2
  * A significant bug that caused clicks on split lines has been fixed
  * There are improvements to several toolbars and to some Nyquist effects
- Update to version 2.0.1
  * Keyboard shortcuts can now be allocated to effects
  * Nyquist plug-ins can be added to Chains
- Run spec-cleaner
- Use pkgconfig() style BuildRequires
- Remove conditionals for unsupported openSUSE versions
- Remove taglib build dependency. Not used any more
- Remove libsamplerate dependency. Upstream prefers included libresample
- Remove custom icon. Upstream already has a transparent version.
- Add audacity-2.0.2-docdir.patch patch
- Don't delete MIME type icon. Instead put it in %{_datadir}/icons/hicolor/48x48/mimetypes/application-x-audacity-project.xpm
- Add %icon_theme_cache_post, %mime_database_post and %desktop_database_post to %post
- Recommend libmp3lame0, libavformat52, libavcodec52 and libavutil50</changelog>
<changelog author="uli@suse.de" date="1350907200">- explicitly disable SSE on non-x86 architectures (fixes ARM,
  probably others)</changelog>
<changelog author="kkaempf@suse.com" date="1364558400">- Update to version 2.0.3
  Bug fixes
  * General
  - Crash using Undo whilst time-shifting a track.
  - Crash using Repair if the selection extended into an empty track.
  - Export Multiple didn't prevent export if there was no audio or all
    audio was muted. This allowed export of small invalid files.
  * Time Track
  - Loop Play of a speeded-up track inserted silence.
  - Playback and rendering was significantly inaccurate, creating audible
    and visual glitches.
  * Accessibility
  - The mnemonics character "&amp;" was read out by screen readers in most of
    the Preferences choices.
  - NVDA did not read static text in most dialogs. Text can now be read by
    using INSERT + B.
  - JAWS and Window-eyes misread the "Duration" control in Silence
    Generator.
  - Toolbar buttons could not be pressed by ENTER
  - Other interface bug fixes.
  Changes and Improvements
  * Resampling
  - The SoX Resampler library (libsoxr) has replaced libresample in
    Audacity releases, offering both higher quality and greater speed.
  * Time Tracks new features
  - "Set Range" now changes only the range of the Time Track, preserving
    the pitch/speed set by any existing warp points.
  - Vertical scale added with options for linear and logarithmic display
    and interpolation.
  - Upper and lower speed limits will now be remembered when saving and
    reopening a project in 2.0.3. Warp points in projects saved by
    previous Audacity versions will be correctly restored in 2.0.3.
  - Warp points saved in a 2.0.3 project will be preserved if opened in
    previous versions but playback and display will be incorrect.
  * New effects
  - Studio Fade Out (uses a filtered "S" curve).
  - Adjustable Fade (accessible effect for creating partial fades and
    adjustable fade shapes).
  - Bass and Treble (replaces Bass Boost).
  * General
  - Real sample rates up to 384000 Hz are now supported for playback and
    recording in high resolution devices (the maximum is up to 192000 Hz
    for Windows DirectSound host).
  - Labeled Regions in Edit Menu is renamed to "Labeled Audio" and now
    allows splits to be placed at point labels. Labeled audio regions that
    touch without overlapping are treated as separate regions. Overlapping
    labeled audio regions are treated as a single region.
  - New Croatian translation of Audacity.
  * Compilation
  - CMake is required in order to build libsoxr.
- removed audacity-implicit.patch and audacity-2.0.2-docdir.patch
  both included in 2.0.3</changelog>
<changelog author="fisiu@opensuse.org" date="1378814400">- Update to 2.0.4:
  * New "Reverb" effect to replace GVerb, based on the original "Freeverb".
  * New View &gt; Go to Selection Start and Go to Selection End commands.
  * New Tracks &gt; Align End to End command to append existing tracks to each other.
  * Change Tempo now supports fractional BPM.
  * Plot Spectrum now supports FFT sizes up to 65536.
  * WAV files now support "Album Title", "Track Number" and "Genre"
    LIST INFO tags and also support ID3 tags.
  * Handle a bug in older iPods or some OS X applications that cause them
    to refuse AIFF files whose metadata contains an uneven number of characters,
  * CTRL + ALT can now be used to smooth samples in Draw Tool.
  * Modules Preferences replaced with a dialog on launch of Audacity enabling
    you to choose which modules to load.
  * Many bug fixes.</changelog>
<changelog author="dap.darkness@gmail.com" date="1393070400">- Update to 2.0.5:
  * Audacity 2.0.4 to hang or the computer to crash. WDM-KS has
    been removed from Audacity 2.0.5 while we work on safely
    enabling this host.
  * You can now navigate through an effect or other dialog using
    keyboard TAB.
  * See more at
    http://wiki.audacityteam.org/wiki/Release_Notes_2.0.5</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1414152000">- Update to 2.0.6:
  Bug fixes for:
  * Interface:
  * Region Restore did not restore the region after using Preferences.
  * Dragging selections with the keyboard or Selection Toolbar digits
    was very slow.
  * (Windows) Help &gt; About Audacity crashed when run in Magyar language.
  * (OS X) Some full and reduced Menu Bar items were not translated.
  * (OS X and Linux) Fixed various interface crashes.
  * Effects:
  * Reverb and Paulstretch were missing from Chains.
  * Analyze &gt; Contrast could report very inaccurate rms levels.
  * Noise Removal: Attack and decay times were half as long as set.
  * (OS X and Linux) Nyquist effects ran much more slowly than on Windows.
  * Click or drag on the Timeline after Loop Play continued to loop.
  * Transcription Toolbar did not play slower than 0.1x speed.
  * (Linux) Audacity did not build if python 2 was not available.
  Changes and Improvements:
  * Interface:
  * Redesigned, searchable Keyboard Preferences with Tree, Name and Key views.
  * Edit Menu: "Cut" and "Delete" are now in the top level of the menu.
  * Transport Menu now includes "Play/Stop" and "Play/Stop and Set Cursor"
    (use Keyboard Preferences to create shortcuts for "Play" and "Stop").
  * Tracks Menu now includes "Mix and Render to New Track".
  * Track Drop-Down Menu now has Move Track To Top and Move Track To Bottom.
  * New right-click menu choice "Delete Label" to remove single labels.
  * "Snap To" now offers choice of snap to the "closest" or "prior" position.
    Note: the previous "Snap To On" keyboard shortcut will no longer work.
  * "Snap To" settings are now independent for each project.
  * Effects:
  * Truncate Silence: redesigned with simpler option "Truncate Detected
    Silence" to shorten to the specified length without compressing silence.
  * VST effects: New "Settings" dialog lets you specify buffer size (for
    faster processing) and enable buffer delay compensation (to prevent
    inserted silence). Compensation may cause a crash in a few plug-ins.
  * VST effects now support standard FXP presets.
  * LV2 effects are now supported on all platforms (textual interface only).
  * Import or export using FFmpeg now requires FFmpeg 1.2 or later (or libav
    0.8 or later). For recommended downloads of recent FFmpeg please visit:
    http://manual.audacityteam.org/o/man/faq_installation_and_plug_ins.html#ffdown .
  * New Tamil translation (largely complete).
  * (Windows) FLAC exports can now exceed 2 GB in size.
  * (OS X) Easier Audacity installation using the DMG: drag the Audacity folder
    to the /Applications shortcut,
  * (OS X) Audacity 2.0.6 will not officially support OS X 10.10 Yosemite when
    released (in particular, Apple Audio Units may not open in Audacity).
  * (Linux) Self-compiled builds of Audacity now search for system LADSPA
    effects in /usr/lib/ladspa.
  - Added patch audacity-flac_assert.h.patch to build against flac 1.3.0.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1414411200">- Fix download url for source package</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1425384000">- Add patch audacity-ffmpeg.patch to build against current ffmpeg
  on PMBS.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1427716800">- Update to 2.1.0:
  + Changes and Improvements:
  * LADSPA and VST effects now support real-time preview,
    save/load of user presets and saving effect settings across
    sessions. Note: Real-time preview does not yet support
    latency compensation.
  * VST effects now support import/export of FXB preset banks.
  * Shell VST effects that host multiple plugins are now supported.
  * All Effect Menu items (built-in or plugin) can now be used in
    a Chain.
  * Items in the Effect, Generate or Analyze Menus can be sorted
    or grouped by name, publisher or class of effect.
  * Noise Removal is improved and renamed to "Noise Reduction".
  * Change Speed has new time controls for current and new length.
    You can now enter the speed change as a multiplier e.g. "2" is
    twice as fast.
  * New "Crossfade Tracks" effect can be used for crossfading two
    tracks. This replaces Cross Fade In and Cross Fade Out.
  * Nyquist Prompt and most shipped Nyquist effects now have
    Preview button.
  * Redesigned Meter Toolbars: The default shows separate Record
    and Playback Meters, half-height so they can be wider while
    docked, in gradient style.
  * A frequency selection can now be made (and spectral edit
    effects applied to those frequencies) when in a spectrogram
    view. You can also create or adjust frequency selections in a
    new "Spectral Selection Toolbar" (available at View &gt; Toolbars).
  * Transcription Toolbar (Play-at-speed) can now loop play and
    cut-preview.
  * Timer Record now saves recordings automatically into an
    existing project.
  * New Armenian translation.
  + Bug fixes:
  * Typing "j" or "k" in a label track activated the
    "move cursor" shortcut.
  * Spectrogram log (f) view displayed incorrectly until
    vertically zoomed.
  * Fixed crash after zooming out on vertical scale beyond +/-1.0.
  * Selections made with Selection Toolbar were not restored after
    Undo.
  * Undo could fail silently if a selection included/touched a
    clip boundary.
  * If there were invalid FFmpeg libs in system PATH this
    prevented Audacity recognising the installed FFmpeg or the
    FFmpeg specified in audacity.cfg.
  * Fix "Audacity already running" error when using the
    command-line or context menu to open multiple or further files.
  * Fix segfault exporting an FFmpeg format to an unwritable folder.
  * Fix silent failure exporting FFmpeg, MP2 or OGG to an
    unwritable directory.
  * Fix ENTER activated an effect when OK button was greyed out.
- Add audacity-lang package.
- Extend audacity-flac_assert.h.patch to versions until 1.4.0.
- Do not remove appdata.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
<changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
<changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
<changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
<changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
<changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Submit audacity to rebuild against updated wxWidgets-3_0-nostl to
  fix boo#1051717</changelog>

</package>
<package pkgid="9f8d2c6707d6768d7b6b4138bcfe859cab35df852be2143ee2aa2b1f945cadc4" name="audit" arch="src">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
<changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
<changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
<changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
<changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>

</package>
<package pkgid="8039b12f9ca7b62fb90a78f20e995ea0240e6a0bee1208a22589219b21630a57" name="audit" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="cmorve69@yahoo.es" date="1245499200">- fixed build with --as-needed</changelog>
<changelog author="tonyj@suse.de" date="1272974400">- Upgrade to version 2.0.4 (see audit.changes for upstream change
  history)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="tonyj@novell.com" date="1285761600">- Upgrade to version 2.0.5 (see audit.changes for upstream change
  history)</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Upgrade to version 2.1.1 (see audit.changes for upstream change
  history)</changelog>
<changelog author="tonyj@novell.com" date="1305892800">- Adjust license of audit-libs-python to be LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3.  See audit.spec upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1350043200">- Update to version 2.2.1, see audit's changes</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Buildrequires cap-ng library</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
<changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
<changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
<changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
<changelog author="tonyj@suse.com" date="1500552000">- Make auditd start as forking systemd service (bsc#1042781)
  New patch: audit-modify-systemd-service-to-forking.patch</changelog>

</package>
<package pkgid="52af5508cb567d4f279a9ec9523bb5ae121e2d58284e2549bda7cb3d5556feeb" name="audit-audispd-plugins" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="cmorve69@yahoo.es" date="1245499200">- fixed build with --as-needed</changelog>
<changelog author="tonyj@suse.de" date="1272974400">- Upgrade to version 2.0.4 (see audit.changes for upstream change
  history)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="tonyj@novell.com" date="1285761600">- Upgrade to version 2.0.5 (see audit.changes for upstream change
  history)</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Upgrade to version 2.1.1 (see audit.changes for upstream change
  history)</changelog>
<changelog author="tonyj@novell.com" date="1305892800">- Adjust license of audit-libs-python to be LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3.  See audit.spec upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1350043200">- Update to version 2.2.1, see audit's changes</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Buildrequires cap-ng library</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
<changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
<changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
<changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
<changelog author="tonyj@suse.com" date="1500552000">- Make auditd start as forking systemd service (bsc#1042781)
  New patch: audit-modify-systemd-service-to-forking.patch</changelog>

</package>
<package pkgid="c9e258627815f50699142dd8b678e3df754263dad20d3971fe5f6d27a0c57500" name="audit-devel" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
<changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
<changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
<changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
<changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>

</package>
<package pkgid="cb7fce0d47fa9ea3fcab5b44432ac230a0b48a8ac39ab4c0e19902553e2a5139" name="audit-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
<changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
<changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
<changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
<changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>

</package>
<package pkgid="f834feb2f64268de6bce40b461d2003c37321f9a1b11f1ecede1eefd32249210" name="audit-libs-python" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="cmorve69@yahoo.es" date="1245499200">- fixed build with --as-needed</changelog>
<changelog author="tonyj@suse.de" date="1272974400">- Upgrade to version 2.0.4 (see audit.changes for upstream change
  history)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="tonyj@novell.com" date="1285761600">- Upgrade to version 2.0.5 (see audit.changes for upstream change
  history)</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Upgrade to version 2.1.1 (see audit.changes for upstream change
  history)</changelog>
<changelog author="tonyj@novell.com" date="1305892800">- Adjust license of audit-libs-python to be LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3.  See audit.spec upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1350043200">- Update to version 2.2.1, see audit's changes</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Buildrequires cap-ng library</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
<changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
<changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
<changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
<changelog author="tonyj@suse.com" date="1500552000">- Make auditd start as forking systemd service (bsc#1042781)
  New patch: audit-modify-systemd-service-to-forking.patch</changelog>

</package>
<package pkgid="32585e7661cf46276600c7cb31af9443830a5663b7fdc7e1dbf480a87eafca11" name="audit-secondary" arch="src">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="cmorve69@yahoo.es" date="1245499200">- fixed build with --as-needed</changelog>
<changelog author="tonyj@suse.de" date="1272974400">- Upgrade to version 2.0.4 (see audit.changes for upstream change
  history)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="tonyj@novell.com" date="1285761600">- Upgrade to version 2.0.5 (see audit.changes for upstream change
  history)</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Upgrade to version 2.1.1 (see audit.changes for upstream change
  history)</changelog>
<changelog author="tonyj@novell.com" date="1305892800">- Adjust license of audit-libs-python to be LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3.  See audit.spec upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1350043200">- Update to version 2.2.1, see audit's changes</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Buildrequires cap-ng library</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec
- Add patch 'audit-fix-implicit-defn.patch' to fix implicit definition
  warning.</changelog>
<changelog author="opensuse@cboltz.de" date="1380715200">- (re-)add rcauditd as symlink to /usr/sbin/service</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2. See audit.spec (libaudit1) for upstream
  changelog
- Drop patch 'audit-fix-implicit-defn.patch' (upstream)
- Add patch 'audit-allow-manual-stop.patch' to reinstate service
  stop/restart.
- /etc/sysconfig/audit still existed but was no longer referenced
  by systemd, so remove
- Delete audit-no_plugins.patch, it was stale (no longer referenced
  by specfiles) but had not been removed.</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3. See audit.spec (libaudit1) for upstream
  changelog</changelog>
<changelog author="tonyj@suse.com" date="1393502400">- Add systemd requires (bnc#865849)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1395835200">- fix systemd warning:
  "Configuration file /usr/lib/systemd/system/auditd.service
  is marked world-inaccessible.
  This has no effect as configuration data is accessible
  via APIs without restrictions"
  * indeed restricting access to unit files using filesystem
  permissions is non-sense.</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6. See audit.spec (libaudit1) for upstream
  changelog</changelog>
<changelog author="tonyj@suse.com" date="1404993600">- Do not require tclass field to be present when searching for AVC
  records (bnc#878687)
  add patch: audit-ausearch-do-not-require-tclass.patch</changelog>
<changelog author="tonyj@suse.com" date="1500552000">- Make auditd start as forking systemd service (bsc#1042781)
  New patch: audit-modify-systemd-service-to-forking.patch</changelog>

</package>
<package pkgid="ef587ec9dca0c35428b0324e4595fc8c0720b8829d4c12692727dc2bb0365a3d" name="autofs" arch="src">
    <version epoch="0" ver="5.0.9" rel="19.1"/>

<changelog author="lchiquitto@suse.de" date="1391774400">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.de" date="1393588800">- autofs-5.0.8-upstream-patches-20140225.bz2: update 5.0.8 upstream
  patches up to 2014-02-25, fixing the following bugs:
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno (former autofs-5.0.8-eaccess.patch)
  * extend fix for crash due to thread unsafe use of libldap (bnc#853469)
  * fix deadlock in init_ldap_connection (bnc#859969)
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
- remove patches that were merged upstream:
  * autofs-5.0.8-eaccess.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-serialize-libldap-unbind.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1395662400">- autofs-5.0.8-upstream-patches-20140324.bz2: update 5.0.8 upstream
  patches up to 2014-03-24, fixing the following bugs:
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup (bnc#869377)</changelog>
<changelog author="werner@suse.de" date="1395748800">- Avoid bad timings and timeouts if a shutdown was done by a remote
  user via su and with autofs based home directory</changelog>
<changelog author="lchiquitto@suse.de" date="1396008000">- update to version 5.0.9:
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
- rebase, refresh and rename all patches on top of 5.0.9
- switch to .xz compressed tarball instead of bzip2
- autofs-5.0.8-upstream-patches-20140324.bz2: remove</changelog>
<changelog author="lchiquitto@suse.de" date="1399896000">- autofs.spec: remove %with_systemd conditionals as systemd is
  required on SLE 12
- autofs.init: drop, replaced by systemd service (bnc#863970)</changelog>
<changelog author="mszeredi@suse.cz" date="1407153600">- add autofs-debuginfo-fix.patch to fix building of debuginfo
  package (bnc#889219)</changelog>
<changelog author="mszeredi@suse.cz" date="1421841600">- fix autofs.service so that multiple options passed through
  sysconfig AUTOFS_OPTIONS work correctly (bnc#909472)</changelog>
<changelog author="mszeredi@suse.cz" date="1422360000">- fix insserv warning at postinstall (bnc#913376)</changelog>
<changelog author="mszeredi@suse.cz" date="1424088000">- dont pass sloppy option for other than nfs mounts (bnc#901448)</changelog>
<changelog author="mszeredi@suse.cz" date="1425038400">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps (bnc#917977 CVE-2014-8169)</changelog>
<changelog author="mszeredi@suse.cz" date="1425297600">- add FORCE_STANDARD_PROGRAM_MAP_ENV option to sysconfig
  (bnc#917977)</changelog>
<changelog author="kukuk@suse.de" date="1453896000">- Don't overwrite tirpc version of auth_destroy, needed for
  [FATE#320393] (autofs-5.0.9-leave_auth_destroy.patch)</changelog>
<changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
<changelog author="jeffm@suse.com" date="1462190400">- With modified configure.in, autoreconf must be called (bsc#955477).</changelog>
<changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
  - autofs-5.0.6-fix-yp-map-age-not-updated-in-s-_-.-g-case.patch
  - autofs-5.0.6-properly-handle-errors-in-lookup_nss_mount.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1473076800">- Rebuild against SLE 12-SP2's libtirpc. (fate#320393)</changelog>
<changelog author="jeffm@suse.com" date="1478174400">- Fix typo in DEFAULT_AUTH_CONFIG_FILE definition (bsc#998078).</changelog>
<changelog author="nborisov@suse.com" date="1492603200">- Fix adding of the wildcard key to the negative cache (bsc#1031533)
  * Add autofs-5.1.0-dont-add-wildcard-to-negative-cache.patch
- Make interaction with negative cache more robust  (bsc#1031533)
  * Add autofs-5.1.0-make-negative-cache-update-consistent-for-all-lookup-modules.patch
  * Add autofs-5.1.0-ensure-negative-cache-isnt-updated-on-remount.patch</changelog>
<changelog author="jeffm@suse.com" date="1502280000">- Switch to using monotonic time for timeouts (bsc#1046493).
  * Added patches:
  - autofs-5-1-0-fix-gcc5-complaints.patch
  - autofs-5-1-1-define-monotonic-clock-helper-functions.patch
  - autofs-5-1-1-use-monotonic-clock-for-alarm-thread-condition-wait.patch
  - autofs-5-1-1-define-pending-condition-init-helper-function.patch
  - autofs-5-1-1-use-monotonic-clock-for-direct-mount-condition.patch
  - autofs-5-1-1-use-monotonic-clock-for-indirect-mount-condition.patch
  - autofs-5-1-1-change-remaining-gettimeofday-to-use-clock_gettime.patch
  - autofs-5-1-1-change-time-to-use-monotonic_clock.patch
  - autofs-5-1-1-remove-unused-function-elapsed.patch
  - autofs-5-1-2-build-check-for-clock_gettime-in-librt.patch</changelog>

</package>
<package pkgid="19ff2b7a4e046e018ad744de14e62ee0c0fa4d110ef3f817af89ad888672f786" name="autofs" arch="x86_64">
    <version epoch="0" ver="5.0.9" rel="19.1"/>

<changelog author="lchiquitto@suse.de" date="1391774400">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.de" date="1393588800">- autofs-5.0.8-upstream-patches-20140225.bz2: update 5.0.8 upstream
  patches up to 2014-02-25, fixing the following bugs:
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno (former autofs-5.0.8-eaccess.patch)
  * extend fix for crash due to thread unsafe use of libldap (bnc#853469)
  * fix deadlock in init_ldap_connection (bnc#859969)
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
- remove patches that were merged upstream:
  * autofs-5.0.8-eaccess.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-serialize-libldap-unbind.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1395662400">- autofs-5.0.8-upstream-patches-20140324.bz2: update 5.0.8 upstream
  patches up to 2014-03-24, fixing the following bugs:
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup (bnc#869377)</changelog>
<changelog author="werner@suse.de" date="1395748800">- Avoid bad timings and timeouts if a shutdown was done by a remote
  user via su and with autofs based home directory</changelog>
<changelog author="lchiquitto@suse.de" date="1396008000">- update to version 5.0.9:
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
- rebase, refresh and rename all patches on top of 5.0.9
- switch to .xz compressed tarball instead of bzip2
- autofs-5.0.8-upstream-patches-20140324.bz2: remove</changelog>
<changelog author="lchiquitto@suse.de" date="1399896000">- autofs.spec: remove %with_systemd conditionals as systemd is
  required on SLE 12
- autofs.init: drop, replaced by systemd service (bnc#863970)</changelog>
<changelog author="mszeredi@suse.cz" date="1407153600">- add autofs-debuginfo-fix.patch to fix building of debuginfo
  package (bnc#889219)</changelog>
<changelog author="mszeredi@suse.cz" date="1421841600">- fix autofs.service so that multiple options passed through
  sysconfig AUTOFS_OPTIONS work correctly (bnc#909472)</changelog>
<changelog author="mszeredi@suse.cz" date="1422360000">- fix insserv warning at postinstall (bnc#913376)</changelog>
<changelog author="mszeredi@suse.cz" date="1424088000">- dont pass sloppy option for other than nfs mounts (bnc#901448)</changelog>
<changelog author="mszeredi@suse.cz" date="1425038400">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps (bnc#917977 CVE-2014-8169)</changelog>
<changelog author="mszeredi@suse.cz" date="1425297600">- add FORCE_STANDARD_PROGRAM_MAP_ENV option to sysconfig
  (bnc#917977)</changelog>
<changelog author="kukuk@suse.de" date="1453896000">- Don't overwrite tirpc version of auth_destroy, needed for
  [FATE#320393] (autofs-5.0.9-leave_auth_destroy.patch)</changelog>
<changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
<changelog author="jeffm@suse.com" date="1462190400">- With modified configure.in, autoreconf must be called (bsc#955477).</changelog>
<changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
  - autofs-5.0.6-fix-yp-map-age-not-updated-in-s-_-.-g-case.patch
  - autofs-5.0.6-properly-handle-errors-in-lookup_nss_mount.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1473076800">- Rebuild against SLE 12-SP2's libtirpc. (fate#320393)</changelog>
<changelog author="jeffm@suse.com" date="1478174400">- Fix typo in DEFAULT_AUTH_CONFIG_FILE definition (bsc#998078).</changelog>
<changelog author="nborisov@suse.com" date="1492603200">- Fix adding of the wildcard key to the negative cache (bsc#1031533)
  * Add autofs-5.1.0-dont-add-wildcard-to-negative-cache.patch
- Make interaction with negative cache more robust  (bsc#1031533)
  * Add autofs-5.1.0-make-negative-cache-update-consistent-for-all-lookup-modules.patch
  * Add autofs-5.1.0-ensure-negative-cache-isnt-updated-on-remount.patch</changelog>
<changelog author="jeffm@suse.com" date="1502280000">- Switch to using monotonic time for timeouts (bsc#1046493).
  * Added patches:
  - autofs-5-1-0-fix-gcc5-complaints.patch
  - autofs-5-1-1-define-monotonic-clock-helper-functions.patch
  - autofs-5-1-1-use-monotonic-clock-for-alarm-thread-condition-wait.patch
  - autofs-5-1-1-define-pending-condition-init-helper-function.patch
  - autofs-5-1-1-use-monotonic-clock-for-direct-mount-condition.patch
  - autofs-5-1-1-use-monotonic-clock-for-indirect-mount-condition.patch
  - autofs-5-1-1-change-remaining-gettimeofday-to-use-clock_gettime.patch
  - autofs-5-1-1-change-time-to-use-monotonic_clock.patch
  - autofs-5-1-1-remove-unused-function-elapsed.patch
  - autofs-5-1-2-build-check-for-clock_gettime-in-librt.patch</changelog>

</package>
<package pkgid="6a632bbb729fc1063829620fdb7b2e0157654a5f241237fb2a98bcbd688c4adf" name="autoyast2" arch="noarch">
    <version epoch="0" ver="3.2.22" rel="3.1"/>

<changelog author="igonzalezsosa@suse.com" date="1479816000">- Fix building on s390x (bsc#1011489)
- 3.2.4</changelog>
<changelog author="igonzalezsosa@suse.com" date="1480507200">- If Btrfs subvolumes are not specified, the default set
  is created (bsc#1012328)</changelog>
<changelog author="schubi@suse.de" date="1481716800">- Moved post-scripts download from second-stage to first-stage.
  (bnc#1014859)
- 3.2.5</changelog>
<changelog author="lslezak@suse.cz" date="1483617600">- Fixed tests to pass with the latest yast2-core and
  yast2-ruby-bindings packages (related to the bsc#932331 fix)
- 3.2.6</changelog>
<changelog author="schubi@suse.de" date="1484568000">- Cloning Software: install_recommended can be set by the
  control.xml file (clone_install_recommended_default)
  Default is true. (Fate#321764)
- 3.2.7</changelog>
<changelog author="igonzalezsosa@suse.com" date="1485345600">- Add an option to disable the self-update feature through the
  AutoYaST profile (FATE#319716)
- 3.2.8</changelog>
<changelog author="schubi@suse.de" date="1487160000">- Moved services-manager to first installation stage (FATE#321738).
- 3.2.9</changelog>
<changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
<changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
<changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
<changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
<changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
<changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
<changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
<changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
<changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
<changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
<changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
<changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
<changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>

</package>
<package pkgid="90b8548518709f4db68a58074f107ddef5203333e5f89f796f898d3ed69365ba" name="autoyast2" arch="src">
    <version epoch="0" ver="3.2.22" rel="3.1"/>

<changelog author="igonzalezsosa@suse.com" date="1479816000">- Fix building on s390x (bsc#1011489)
- 3.2.4</changelog>
<changelog author="igonzalezsosa@suse.com" date="1480507200">- If Btrfs subvolumes are not specified, the default set
  is created (bsc#1012328)</changelog>
<changelog author="schubi@suse.de" date="1481716800">- Moved post-scripts download from second-stage to first-stage.
  (bnc#1014859)
- 3.2.5</changelog>
<changelog author="lslezak@suse.cz" date="1483617600">- Fixed tests to pass with the latest yast2-core and
  yast2-ruby-bindings packages (related to the bsc#932331 fix)
- 3.2.6</changelog>
<changelog author="schubi@suse.de" date="1484568000">- Cloning Software: install_recommended can be set by the
  control.xml file (clone_install_recommended_default)
  Default is true. (Fate#321764)
- 3.2.7</changelog>
<changelog author="igonzalezsosa@suse.com" date="1485345600">- Add an option to disable the self-update feature through the
  AutoYaST profile (FATE#319716)
- 3.2.8</changelog>
<changelog author="schubi@suse.de" date="1487160000">- Moved services-manager to first installation stage (FATE#321738).
- 3.2.9</changelog>
<changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
<changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
<changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
<changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
<changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
<changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
<changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
<changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
<changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
<changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
<changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
<changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
<changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>

</package>
<package pkgid="1d3cabb6aa96c35f18def8df6eefd48501fd4a72e59a3621230fc42fd83a2d16" name="autoyast2-installation" arch="noarch">
    <version epoch="0" ver="3.2.22" rel="3.1"/>

<changelog author="igonzalezsosa@suse.com" date="1479816000">- Fix building on s390x (bsc#1011489)
- 3.2.4</changelog>
<changelog author="igonzalezsosa@suse.com" date="1480507200">- If Btrfs subvolumes are not specified, the default set
  is created (bsc#1012328)</changelog>
<changelog author="schubi@suse.de" date="1481716800">- Moved post-scripts download from second-stage to first-stage.
  (bnc#1014859)
- 3.2.5</changelog>
<changelog author="lslezak@suse.cz" date="1483617600">- Fixed tests to pass with the latest yast2-core and
  yast2-ruby-bindings packages (related to the bsc#932331 fix)
- 3.2.6</changelog>
<changelog author="schubi@suse.de" date="1484568000">- Cloning Software: install_recommended can be set by the
  control.xml file (clone_install_recommended_default)
  Default is true. (Fate#321764)
- 3.2.7</changelog>
<changelog author="igonzalezsosa@suse.com" date="1485345600">- Add an option to disable the self-update feature through the
  AutoYaST profile (FATE#319716)
- 3.2.8</changelog>
<changelog author="schubi@suse.de" date="1487160000">- Moved services-manager to first installation stage (FATE#321738).
- 3.2.9</changelog>
<changelog author="schubi@suse.de" date="1488888000">- Update: Product selection will be done by Packages.SelectProduct
  now (bnc#1014861).
- 3.2.10</changelog>
<changelog author="schubi@suse.de" date="1491393600">- Added configuration-management to first installation step.
  (FATE#319830)
- 3.2.11</changelog>
<changelog author="mfilka@suse.com" date="1491480000">- bnc#1026027
  - removed dependency on insserv
- 3.2.12</changelog>
<changelog author="igonzalezsosa@suse.com" date="1491480001">- Fix subvolumes schema definition (bsc#1013047)
- 3.2.13</changelog>
<changelog author="schubi@suse.de" date="1492084800">- Moved configuration management before software selection in
  order to select packages which are needed for CM. (FATE#319830)
- 3.2.14</changelog>
<changelog author="schubi@suse.de" date="1495108800">- clone system: Checking if snapshots have been enabled.
  (bnc#1039268)
- 3.2.15</changelog>
<changelog author="schubi@suse.de" date="1497009600">- Report shrinked partitions if there is not enough space.
  (bnc#1039528)
- 3.2.16</changelog>
<changelog author="schubi@suse.de" date="1499342400">- AutoYaST configuration module; Crash while writing settings to
  the system:
  As we are switching to "normal" mode and accessing to the target
  system we have to set StorageDevices flag disks_valid to true.
  So InitLibstorage can scan valid target disks. (bnc#1046738)
- 3.2.17</changelog>
<changelog author="schubi@suse.de" date="1499947200">- Crash while writing settings via the menue "File/Apply Profile
  to this System" in AutoYaST configuration module:
  As we are switching to "autoinstallation" mode and accessing to
  the target system we have to set StorageDevices flag disks_valid
  to true.  So InitLibstorage can scan valid target disks.
  (bnc#1047809)
- 3.2.18</changelog>
<changelog author="schubi@suse.de" date="1501588800">- Saving ask-scripts and corresponding log files
  to /var/adm/autoinstall. (bnc#1049473)
- 3.2.19</changelog>
<changelog author="schubi@suse.de" date="1502193600">- Classes/rules will be ignored: Due to self-update, the evaluation
  of classes/rules will be called twice. So we have to initialize
  the stack for each run again. (bnc#1051483)
- 3.2.20</changelog>
<changelog author="schubi@suse.de" date="1502798400">- AY runs in installed system: Writing init scripts again
  to /var/adm/autoinstall/init.d in order to initilaize init
  scripts correctly. This is needed for AY runs which do not
  have an first installation stage (e.g. AY run in KIWI,
  ayast_setup). (bnc#1052145)
- 3.2.21</changelog>
<changelog author="igonzalezsosa@suse.com" date="1503489600">- Handle packages that are missing a PGP signature although
  digests are valid (bsc#1054969)
- 3.2.22</changelog>

</package>
<package pkgid="67199f93ab3f76993e54cf1acd1047a60524842e2d97a5e848b16f0959db6b51" name="avrdude" arch="src">
    <version epoch="0" ver="6.1" rel="8.1"/>

<changelog author="jw@novell.com" date="1299499200">- Resurrected the changelog.
  /usr/lib/osc/source_validators/helpers/check_dates_in_changes
  misinterpretes timestamps 2010-01-01 within changelog entries as
  new changelog entries.</changelog>
<changelog author="jw@novell.com" date="1299499201">- bnc#676024, support for attiny4313 added according to
  http://savannah.nongnu.org/patch/?7393</changelog>
<changelog author="madworm_de.novell@spitzenpfeil.org" date="1308571200">- https://savannah.nongnu.org/patch/?7559
  DTR/RTS twiddling didn't match the Arduino 'auto-reset' hardware
  for the programmer type 'arduino'</changelog>
<changelog author="madworm_de.novell@spitzenpfeil.org" date="1314532800">- Version 5.11 from savannah</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="seife+obs@b1-systems.com" date="1317297600">- don't use download_files service - it breaks all the time
- remove builddate from binary to avoid unnecessary republising</changelog>
<changelog author="max@suse.com" date="1318939200">- Version 5.11.1 from savannah
- Add libftdi1-devel to BuildRequires to support additional
  programmers.</changelog>
<changelog author="jw@suse.com" date="1332331200">- Reverted to version 5.11 -- the 5.11.1 tarball was missing.</changelog>
<changelog author="jw@suse.com" date="1353499200">- retrying sr#110452, sr#141518, so that we can finally close bnc#736064
- merged a commit that was only made to o:F</changelog>
<changelog author="jw@suse.com" date="1353499201">- All this should have been part of my earlier submit sr#142228:
  * obsoleted upstreamed patches: tn4313.diff, avrdude_butterfly_mk.patch
  * pulled patch from o:F: avrdude-use-serial-device-for-serbb.patch
  * dropped dubious patch: avrdude-5.5.usbtiny.64bit.patch</changelog>
<changelog author="jw@suse.com" date="1354968000">- Did not build.
- 5.11 tar balls are now missing again. retrying with 5.11.1
- typo in spec file fixed.</changelog>
<changelog author="max@suse.com" date="1360238400">- Build from svn snapshot (last official release is too old).
- avrdude-use-serial-device-for-serbb.patch is no longer needed.
- Add UDB IDs for Arduino Leonardo and LUFA ACM bootloaders.
- Give access to programmer devices only to local users.
- Build documentation from source instead of importing pre-built
  html and pdf documentation.
- Disable documentation building on releases older than 12.3 due
  to texinfo problems.</changelog>
<changelog author="max@suse.com" date="1360929600">- Build the info file only, no PS/PDF documentation.
- Don't require libftdi for older SUSE versions.</changelog>
<changelog author="bugs@vdm-design.de" date="1389960000">- work around systemd-udev warnings, by moving comments in the
  udev rules file to the beginning of a line.</changelog>
<changelog author="coolo@suse.com" date="1391860800">- set the _service to localonly</changelog>
<changelog author="sndirsch@suse.com" date="1391860801">- no longer use an URL for the source, since the tarball is generated</changelog>
<changelog author="max@suse.com" date="1392033600">- Bump version number to 6.1 in _service to reflect upstream.
- Generate udev rules from avrdude-usbdevices, which has a simpler
  and easier to maintain format. This also simplifies following
  further upstream changes in udev rules syntax.
- IPv6-enable the "-P net:host:port" option (avrdude-ipv6.patch).</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1396526400">- include released tarball from upstream
- disable source service
- refresh patch avrdude-5.11-no-builddate.diff</changelog>
<changelog author="kkaempf@suse.com" date="1481544000">- drop parport from 50-avrdude.rules for udev (bsc#994883)
  limit to USB</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1504008000">- cherry-pick previos change to fix in Leap (boo#1049593)</changelog>

</package>
<package pkgid="1bcd3e077101bf9d6e4d9bb2f9169defa77d04b44c313534191c84132891e6eb" name="avrdude" arch="x86_64">
    <version epoch="0" ver="6.1" rel="8.1"/>

<changelog author="jw@novell.com" date="1299499200">- Resurrected the changelog.
  /usr/lib/osc/source_validators/helpers/check_dates_in_changes
  misinterpretes timestamps 2010-01-01 within changelog entries as
  new changelog entries.</changelog>
<changelog author="jw@novell.com" date="1299499201">- bnc#676024, support for attiny4313 added according to
  http://savannah.nongnu.org/patch/?7393</changelog>
<changelog author="madworm_de.novell@spitzenpfeil.org" date="1308571200">- https://savannah.nongnu.org/patch/?7559
  DTR/RTS twiddling didn't match the Arduino 'auto-reset' hardware
  for the programmer type 'arduino'</changelog>
<changelog author="madworm_de.novell@spitzenpfeil.org" date="1314532800">- Version 5.11 from savannah</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="seife+obs@b1-systems.com" date="1317297600">- don't use download_files service - it breaks all the time
- remove builddate from binary to avoid unnecessary republising</changelog>
<changelog author="max@suse.com" date="1318939200">- Version 5.11.1 from savannah
- Add libftdi1-devel to BuildRequires to support additional
  programmers.</changelog>
<changelog author="jw@suse.com" date="1332331200">- Reverted to version 5.11 -- the 5.11.1 tarball was missing.</changelog>
<changelog author="jw@suse.com" date="1353499200">- retrying sr#110452, sr#141518, so that we can finally close bnc#736064
- merged a commit that was only made to o:F</changelog>
<changelog author="jw@suse.com" date="1353499201">- All this should have been part of my earlier submit sr#142228:
  * obsoleted upstreamed patches: tn4313.diff, avrdude_butterfly_mk.patch
  * pulled patch from o:F: avrdude-use-serial-device-for-serbb.patch
  * dropped dubious patch: avrdude-5.5.usbtiny.64bit.patch</changelog>
<changelog author="jw@suse.com" date="1354968000">- Did not build.
- 5.11 tar balls are now missing again. retrying with 5.11.1
- typo in spec file fixed.</changelog>
<changelog author="max@suse.com" date="1360238400">- Build from svn snapshot (last official release is too old).
- avrdude-use-serial-device-for-serbb.patch is no longer needed.
- Add UDB IDs for Arduino Leonardo and LUFA ACM bootloaders.
- Give access to programmer devices only to local users.
- Build documentation from source instead of importing pre-built
  html and pdf documentation.
- Disable documentation building on releases older than 12.3 due
  to texinfo problems.</changelog>
<changelog author="max@suse.com" date="1360929600">- Build the info file only, no PS/PDF documentation.
- Don't require libftdi for older SUSE versions.</changelog>
<changelog author="bugs@vdm-design.de" date="1389960000">- work around systemd-udev warnings, by moving comments in the
  udev rules file to the beginning of a line.</changelog>
<changelog author="coolo@suse.com" date="1391860800">- set the _service to localonly</changelog>
<changelog author="sndirsch@suse.com" date="1391860801">- no longer use an URL for the source, since the tarball is generated</changelog>
<changelog author="max@suse.com" date="1392033600">- Bump version number to 6.1 in _service to reflect upstream.
- Generate udev rules from avrdude-usbdevices, which has a simpler
  and easier to maintain format. This also simplifies following
  further upstream changes in udev rules syntax.
- IPv6-enable the "-P net:host:port" option (avrdude-ipv6.patch).</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1396526400">- include released tarball from upstream
- disable source service
- refresh patch avrdude-5.11-no-builddate.diff</changelog>
<changelog author="kkaempf@suse.com" date="1481544000">- drop parport from 50-avrdude.rules for udev (bsc#994883)
  limit to USB</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1504008000">- cherry-pick previos change to fix in Leap (boo#1049593)</changelog>

</package>
<package pkgid="f6ad7cfc51de7e6f864b6eab355077da9845381faf4fd95dbc2edfe932157e84" name="aws-cli" arch="noarch">
    <version epoch="0" ver="1.11.104" rel="20.1"/>

<changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1393416000">- update to version 1.2.13
  + feature:aws route53: Update aws route53 command to support string-match
    health checks and the UPSERT action for the aws route53
    change-resource-record-sets command
  + bugfix:Command Completion: Don't show tracebacks on SIGINT (issue 628)
  + bugfix:Docs: Don't duplicate enum values in reference docs (issue 632)
  + bugfix:aws s3: Don't require s3:// prefix (issue 626)
  + feature:aws configure: Add support for configure get and configure set
    command which allow you to set and get configuration values from the AWS
    config file (`issue 602 &lt;https://github.com/aws/aws-cli/issues/602`__)
  + bugfix:aws s3: Fix issue with Amazon S3 downloads on certain OSes
    (`issue 619 &lt;https://github.com/aws/aws-cli/issues/619`__)
  + Add support for the --recursive option in the aws s3 ls command
    (issue 465 &lt;https://github.com/aws/aws-cli/issues/465)
  + Add support for the AWS_CA_BUNDLE environment variable so that users
    can specify an alternate path to a cert bundle (issue 586)
  + Add metadata_service_timeout and metadata_service_num_attempts config
    parameters to control behavior when retrieving credentials using an
    IAM role (issue 597)
  + Retry intermittent aws s3 download failures including socket timeouts
    and content length mismatches (issue 594)
  + Fix response parsing of aws s3api get-bucket-location (issue 345)
  + Fix response parsing of the aws elastictranscoder command (issue 207)
  + Update aws elasticache command to not require certain parameters</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #315990)</changelog>
<changelog author="rschweikert@suse.com" date="1414065600">- Update to version 1.5.3  (bnc#902598)
  + feature:aws ec2 describe-volumes: Add support for optional pagination.
  + feature:aws route53domains: Add support for auto-renew domains.
  + feature:aws cognito-identity: Add for Open-ID Connect.
  + feature:aws sts: Add support for Open-ID Connect
  + feature:aws iam: Add support for Open-ID Connect
  + bugfix:aws s3 sync: Fix issue when uploading with
  - -exact-timestamps (issue 964)
  + bugfix:Retry: Fix issue where certain error codes were not being
    retried (botocore issue 361)
  + bugfix:aws emr ssh: Fix issue when using waiter interface to wait on
    the cluster state (issue 954)
  + feature:aws cloudsearch: Add support for advance Japanese language
    processing.
  + feature:aws rds: Add support for gp2 which provides faster access than
    disk-based storage.
  + bugfix:aws s3 mv: Delete multi-part objects when transferring objects
    across regions using --source-region (issue 938)
  + bugfix:aws emr ssh: Fix issue with waiter configuration not being
    found (issue 937)
  + feature:aws dynamodb: Update aws dynamodb command to support storing
    and retrieving documents with full support for document models. New
    data types are fully compatible with the JSON standard and allow you
    to nest document elements within one another.
  + bugfix:aws configure: Fix bug where aws configure was not properly
    writing out to the shared credentials file
  + bugfix:S3 Response Parsing: Fix regression for parsing S3 responses
    containing a status code of 200 with an error response body (botocore
    issue 342)
  + bugfix:Shorthand Error Message: Ensure the error message for shorthand
    parsing always contains the CLI argument name (issue 935)
  + bugfix:Response Parsing: Fix response parsing so that leading and
    trailing spaces are preserved
  + feature:Shared Credentials File: The aws configure and aws configure set
    command now write out all credential variables to the shared
    credentials file ~/.aws/credentials (issue 847)
  + bugfix:aws s3: Write warnings and errors to standard error as opposed to
    standard output. (issue 919)
  + feature:aws s3: Add --only-show-errors option that displays errors and
    warnings but suppresses all other output.
  + feature:aws s3 cp: Added ability to upload local file streams from
    standard input to s3 and download s3 objects as local file streams to
    standard output. (issue 903)
  + feature:aws emr create-cluster: Add support for --emrfs.
  + feature:aws iam: Update aws iam command to latest version.
  + feature:aws cognito-sync: Update aws cognito-sync command to latest
    version.
  + feature:aws opsworks: Update aws opsworks command to latest version.
  + feature:aws elasticbeanstalk: Add support for bundling logs.
  + feature:aws kinesis: Add suport for tagging.
  + feature:Page Size: Add a --page-size option, that controls page size
    when perfoming an operation that uses pagination. (issue 889)
  + bugfix:aws s3: Added support for ignoring and warning about files that
    do not exist, user does not have read permissions, or are special
    files (i.e. sockets, FIFOs, character special devices, and block
    special devices) (issue 881)
  + feature:Parameter Shorthand: Added support for structure(list-scalar,
    scalar) parameter shorthand. (issue 882)
  + bugfix:aws s3: Fix bug when unknown options were passed to aws s3
    commands (issue 886)
  + bugfix:Endpoint URL: Provide a better error message when an invalid
  - -endpoint-url is provided (issue 899)
  + bugfix:aws s3: Fix issue when keys do not get properly url decoded when
    syncing from a bucket that requires pagination to a bucket that
    requires less pagination (issue 909)
  + feature:aws cloudsearchdomain: Added sigv4 support.
  + bugfix:Credentials: Raise an error if an incomplete profile is found
    (issue 690)
  + feature:Signing Requests: Add a --no-sign-request option that, when
    specified, will not sign any requests.
  + bugfix:aws s3: Added -source-region argument to allow transfer between
    non DNS compatible buckets that were located in different regions.
    (issue 872)
  + feature:aws elb: Add support for AWS Elastic Load Balancing tagging
  + feature: aws emr: Move emr out of preview mode.
  + bugfix: aws s3api: Fix serialization of several s3 api commands.
    (issue botocore 193)
  + bugfix: aws s3 sync: Fix issue for unnecessarily resyncing files on
    windows machines. (issue 843)
  + bugfix: aws s3 sync: Fix issue where keys were being decoded twice when
    syncing between buckets. (issue 862)
  + bugfix:aws ec2 describe-network-interface-attribute: Fix issue where
    the model for the aws ec2 describe-network-interface-attribute was
    incorrect (issue 558)
  + bugfix:aws s3: Add option to not follow symlinks via
  - -[no]-follow-symlinks. Note that the default behavior of following
    symlinks is left unchanged. (issue 854, issue 453, issue 781)
  + bugfix:aws route53 change-tags-for-resource: Fix serialization issue
    for aws route53 change-tags-for-resource (botocore issue 328)
  + bugfix:aws ec2 describe-network-interface-attribute: Update parameters
    to add the --attribute argument (botocore issue 327)
  + feature:aws autoscaling: Update command to the latest version
  + feature:aws elasticache: Update command to the latest version
  + feature:aws route53: Update command to the latest version
  + feature:aws route53domains: Add support for Amazon Route53 Domains
  + feature:aws elasticloadbalancing: Update to the latest service model.
  + bugfix:aws swf poll-for-decision-task: Fix issue where the default
    paginated response is missing output response keys (issue botocore 324)
  + bugfix:Connections: Fix issue where connections were hanging when
    network issues occurred issue botocore 325)
  + bugfix:aws s3/s3api: Fix issue where Deprecations were being written
    to stderr in Python 3.4.1 issue botocore 319)
  + feature:aws support: Update aws support command to the latest version
  + feature:aws iam: Update aws iam command to the latest version
  + feature:aws emr: Add --hive-site option to aws emr create-cluster and
    aws emr install-application commands
  + feature:aws s3 sync: Add an --exact-timestamps option to the aws s3
    sync command (issue 824)
  + bugfix:aws ec2 copy-snapshot: Fix bug when spaces in the description
    caused the copy request to fail (issue botocore 321)
  + feature:aws cwlogs: Add support for Amazon CloudWatch Logs
  + feature:aws cognito-sync: Add support for Amazon Cognito Service
  + feature:aws cognito-identity: Add support for Amazon Cognito Identity
    Service
  + feature:aws route53: Update aws route53 command to the latest version
  + feature:aws ec2: Update aws ec2 command to the latest version
  + bugfix:aws s3/s3api: Fix issue where --endpoint-url wasn't being used
    for aws s3/s3api commands (issue 549)
  + bugfix:aws s3 mv: Fix bug where using the aws s3 mv command to move a
    large file onto itself results in the file being deleted (issue 831)
  + bugfix:aws s3: Fix issue where parts in a multipart upload are stil being
    uploaded when a part has failed (issue 834)
  + bugfix:Windows: Fix issue where python.exe is on a path that contains
    spaces (issue 825)
  + feature:aws opsworks: Update the aws opsworks command to the latest version
  + bugfix:Shorthand JSON: Fix bug where shorthand lists with a single
    item (e.g. --arg Param=[item]) were not parsed correctly. (issue 830)
  + bugfix:Text output: Fix bug when rendering only scalars that are
    numbers in text output (issue 829)
  + bugfix:aws cloudsearchdomain: Fix bug where --endpoint-url is required
    even for help subcommands (issue 828)
  + feature:aws cloudsearchdomain: Add support for the Amazon CloudSearch
    Domain command.
  + feature:aws cloudfront: Update the Amazon CloudFront command to the
    latest version
  + feature:aws ses: Add support for delivery notifications
  + bugfix:Region Config: Fix issue for cn-north-1 region (issue botocore 314)
  + bugfix:Amazon EC2 Credential File: Fix regression for parsing EC2
    credential file (issue botocore 315)
  + bugfix:Signature Version 2: Fix timestamp format when calculating
    signature version 2 signatures (issue botocore 308)
  + feature:aws configure: Add support for setting nested attributes
    (issue 817)
  + bugfix:aws s3: Fix issue when uploading large files to newly created
    buckets in a non-standard region (issue 634)
  + feature:aws dynamodb: Add support for a local region for dynamodb
    (aws dynamodb --region local ...) (issue 608)
  + feature:aws elasticbeanstalk: Update aws elasticbeanstalk model to the
    latest version
  + feature:Documentation Examples: Add more documentatoin examples for
    many AWS CLI commands
  + feature:aws emr: Update model to the latest version
  + feature:aws elastictranscoder: Update model to the latest version
  + feature:aws s3api: Add support for server-side encryption with a
    customer-supplied encryption key.
  + feature:aws sns: Support for message attributes.
  + feature:aws redshift: Support for renaming clusters.
  + bugfix:aws s3: Fix bug related to retrying requests when 500 status
    codes are received (issue botocore 302)
  + bugfix:aws s3: Fix when when using S3 in the cn-north-1 region
    (issue botocore 301)
  + bugfix:aws kinesis: Fix pagination bug when using the get-records
    operation (issue botocore 304)
  + bugfix:Python 3.4.1: Add support for python 3.4.1 (issue 800)
  + feature:aws emr: Update preview commands for Amazon Elastic MapReduce
  + bugfix:aws s3: Add filename to error message when we're unable to stat
    local filename (issue 795)
  + bugfix:aws s3api get-bucket-policy: Fix response parsing for the aws
    s3api get-bucket-policy command (issue 678)
  + bugfix:Shared Credentials: Fix bug when specifying profiles that don't
    exist in the CLI config file (issue botocore 294)
  + bugfix:aws s3: Handle Amazon S3 error responses that have a 200 OK
    status code (issue botocore 298)
  + feature:aws sts: Update the aws sts command to the latest version
  + feature:aws cloudsearch: Update the aws cloudsearch command to the
    latest version
  + feature:Shorthand: Add support for surrounding list parameters with []
    chars in shorthand syntax (issue 788)
  + feature:Shared credential file: Add support for the ~/.aws/credentials file
  + feature:aws ec2: Add support for Amazon EBS encryption
  + bugfix:aws s3: Fix issue when --delete and --exclude filters are used
    together (issue 778)
  + feature:aws route53: Update aws route53 to the latest model
  + bugfix:aws emr: Fix issue with aws emr retry logic not being applied
    correctly (botocore issue 285)
  + feature:aws cloudtrail: Add support for eu-west-1, ap-southeast-2
  + bugfix:aws ec2: Fix issue when specifying user data from a file
    containing non-ascii characters (issue 765)
  + bugfix:aws cloudtrail: Fix a bug with python3 when creating a
    subscription (issue 773)
  + bugfix:Shorthand: Fix issue where certain shorthand parameters were
    not parsing to the correct types (issue 776)
  + bugfix:aws cloudformation: Fix issue with parameter casing for the
    NotificationARNs parameter (botocore issue 283)
  + feature:aws cloudformation: Add support for updated API
  + feature:aws sqs: Add support for message attributes
  + bugfix:aws s3api: Fix issue when setting metadata on an S3 object
    (issue 356)
  + feature:aws autoscaling: Add support for launching Dedicated Instances
    in Amazon Virtual Private Cloud
  + feature:aws elasticache: Add support to backup and restore for Redis
    clusters
  + feature:aws dynamodb: Update aws dynamodb command to the latest API
  + bugfix:Output Format: Fix issue with encoding errors when using text
    and table output and redirecting to a pipe or file (issue 742)
  + bugfix:aws s3: Fix issue with sync re-uploading certain files (issue 749)
  + bugfix:Text Output: Fix issue with inconsistent text output based on
    order (issue 751)
  + bugfix:aws datapipeline: Fix issue for aggregating keys into a list
    when calling aws datapipeline get-pipeline-definition (issue 750)
  + bugfix:aws s3: Fix issue when running out of disk space during aws s3
    transfers (issue 739)
  + feature:aws s3 sync: Add --size-only param to the aws s3 sync command
    (issue 472, issue 719)
  + bugfix:aws cloudtrail: Fix issue when using create-subscription
    command (issue botocore 268)
  + feature:aws cloudsearch: Amazon CloudSearch has moved out of preview
    (issue 730)
  + bugfix:aws s3 website: Fix issue where --error-document was being
    ignored in certain cases (issue 714)
  + feature:aws opsworks: Update aws opsworks model to the latest version
  + bugfix:Pagination: Fix issue with --max-items with aws route53, aws iam,
    and aws ses (issue 729)
  + bugfix:aws s3: Fix issue with fips-us-gov-west-1 endpoint (issue
    botocore 265)
  + bugfix:Table Output: Fix issue when displaying unicode characters in
    table output (issue 721)
  + bugfix:aws s3: Fix regression when syncing files with whitespace
    (issue 706, issue 718)
  + bugfix:aws ec2: Fix issue with EC2 model resulting in responses not
    being parsed.
  + feature:aws ec2: Add support for Amazon VPC peering
  + feature:aws redshift: Add support for the latest Amazon Redshift API
  + feature:aws cloudsearch: Add support for the latest Amazon CloudSearch API
  + bugfix:aws cloudformation: Documentation updates
  + bugfix:Argument Parsing: Fix issue when list arguments were not being
    decoded to unicode properly (issue 711)
  + bugfix:Output: Fix issue when invalid output type was provided in a
    config file or environment variable (issue 600)
  + bugfix:aws datapipeline: Fix issue when serializing pipeline definitions
    containing list elements (issue 705)
  + bugfix:aws s3: Fix issue when recursively removing keys containing
    control characters (issue 675)
  + bugfix:aws s3: Honor --no-verify-ssl in high level aws s3 commands
    (issue 696)
  + bugfix:Parameters: Fix issue parsing with CLI parameters of type long
    (issue 693)
  + bugfix:Pagination: Fix issue where --max-items in pagination was always
    assumed to be an integer (issue 689)
  + feature:aws elb: Add support for AccessLog
  + bugfix:Bundled Installer: Allow creation of bundled installer with pip
    1.5 (issue 691)
  + bugfix:aws s3: Fix issue when copying objects using aws s3 cp with key
    names containing + characters (issue #614)
  + bugfix:ec2 create-snapshot: Remove Tags key from output response
    (issue 247)
  + bugfix:aws s3: aws s3 commands should not be requiring regions (issue 681)
  + bugfix:CLI Arguments: Fix issue where unicode command line arguments
    were not being handled correctly (issue 679)
  + bugfix:aws s3: Fix issue where S3 downloads would hang in certain cases
    and could not be interrupted (issue 650, issue 657)
  + bugfix:aws s3: Support missing canned ACLs when using the --acl
    parameter (issue 663)
  + bugfix:aws rds describe-engine-default-parameters: Fix pagination issue
    when calling aws rds describe-engine-default-parameters (issue 607)
  + bugfix:aws cloudtrail: Merge existing SNS topic policy with the
    existing AWS CloudTrail policy instead of overwriting the default
    topic policy
  + bugfix:aws s3: Fix issue where streams were not being rewound when
    encountering 307 redirects with multipart uploads (issue 544)
  + bugfix:aws elb: Fix issue with documentation errors in aws elb help
    (issue 622)
  + bugfix:JSON Parameters: Add a more clear error message when parsing
    invalid JSON parameters (issue 639)
  + bugfix:aws s3api: Properly handle null inputs (issue 637)
  + bugfix:Argument Parsing: Handle files containing JSON with leading
    and trailing spaces (issue 640)</changelog>
<changelog author="rschweikert@suse.com" date="1421582400">- Update to version 1.7.1 (bnc#905354)
  + bugfix:``aws s3 cp``: Fix issue with parts of a file being
    downloaded more than once when streaming to stdout
    (`issue 1087 &lt;https://github.com/aws/aws-cli/pull/1087&gt;`__)
  + bugfix:``--no-sign-request``: Fix issue where requests were still trying to
    be signed even though user used the ``--no-sign-request`` flag.
    (`botocore issue 433 &lt;https://github.com/boto/botocore/pull/433&gt;`__)
  + bugfix:``aws cloudsearchdomain search``: Fix invalid signatures when
    using the ``aws cloudsearchdomain search`` command
    (`issue 976 &lt;https://github.com/aws/aws-cli/issues/976&gt;`__)
  + feature:``aws cloudhsm``: Add support for AWS CloudHSM.
  + feature:``aws ecs``: Add support for ``aws ecs``, the Amazon EC2
    Container Service (ECS)
  + feature:``aws rds``: Add Encryption at Rest and CloudHSM Support.
  + feature:``aws ec2``: Add Classic Link support
  + feature:``aws cloudsearch``: Update ``aws cloudsearch`` command
    to latest version
  + bugfix:``aws cloudfront wait``: Fix issue where wait commands did not
    stop waiting when a success state was reached.
    (`botocore issue 426 &lt;https://github.com/boto/botocore/pull/426&gt;`_)
  + bugfix:``aws ec2 run-instances``: Allow binary files to be passed to
    ``--user-data``
    (`botocore issue 416 &lt;https://github.com/boto/botocore/pull/416&gt;`_)
  + bugfix:``aws cloudsearchdomain suggest``: Add ``--suggest-query``
    option to fix the argument being shadowed by the top level
    ``--query`` option.
    (`issue 1068 &lt;https://github.com/aws/aws-cli/pull/1068&gt;`__)
  + bugfix:``aws emr``: Fix issue with endpoints for ``eu-central-1`` and
    ``cn-north-1``
    (`botocore issue 423 &lt;https://github.com/boto/botocore/pull/423&gt;`__)
  + bugfix:``aws s3``: Fix issue where empty XML nodes are now parsed
    as an empty string ``""`` instead of ``null``, which allows for
    round tripping ``aws s3 get/put-bucket-lifecycle``
    (`issue 1076 &lt;https://github.com/aws/aws-cli/issues/1076&gt;`__)
  + bugfix:AssumeRole: Fix issue with cache filenames when assuming a role
    on Windows
    (`issue 1063 &lt;https://github.com/aws/aws-cli/issues/1063&gt;`__)
  + bugfix:``aws s3 ls``: Fix issue when listing Amazon S3 objects containing
    non-ascii characters in eu-central-1
    (`issue 1046 &lt;https://github.com/aws/aws-cli/issues/1046&gt;`__)
  + feature:``aws storagegateway``: Update the ``aws storagegateway`` command
    to the latest version
  + feature:``aws emr``: Update the ``aws emr`` command to the latest
    version
  + bugfix:``aws emr create-cluster``: Fix script runnner jar to the current
    region location when ``--enable-debugging`` is specified in the
    ``aws emr create-cluster`` command
  + bugfix:``aws datapipeline get-pipeline-definition``: Rename operation
    parameter ``--version`` to ``--pipeline-version`` to avoid shadowing
    a built in parameter
    (`issue 1058 &lt;https://github.com/aws/aws-cli/pull/1058&gt;`__)
  + bugfix:pip installation: Fix issue where pip installations would cause
    an error due to the system's python configuration
    (`issue 1051 &lt;https://github.com/aws/aws-cli/issues/1051&gt;`__)
  + feature:``aws elastictranscoder``: Update the ``aws elastictranscoder``
    command to the latest version
  + bugfix:Non-ascii chars: Fix issue where escape sequences were being printed
    instead of the non-ascii chars
    (`issue 1048 &lt;https://github.com/aws/aws-cli/issues/1048&gt;`__)
  + bugfix:``aws iam create-virtual-mfa-device``:  Fix issue with ``--outfile``
    not supporting relative paths
    (`issue 1002 &lt;https://github.com/aws/aws-cli/pull/1002&gt;`__)
  + feature:``aws sqs``: Add support for Amazon Simple Queue Service purge queue
    which allows users to delete the messages in their queue.
  + feature:``aws opsworks``: Add AWS OpsWorks support for registering and
    assigning existing Amazon EC2 instances and on-premises servers.
  + feature:``aws opsworks register``: Registers an EC2 instance or machine with
    AWS OpsWorks. Registering a machine using this command will install the
    AWS OpsWorks agent on the target machine and register it with an existing
    OpsWorks stack.
  + bugfix:``aws s3``: Fix issue with expired signatures when retrying
    failed requests
    (`botocore issue 399 &lt;https://github.com/boto/botocore/pull/399&gt;`__)
  + bugfix:``aws cloudformation get-template``: Fix error message when
    template does not exist
    (`issue 1044 &lt;https://github.com/aws/aws-cli/issues/1044&gt;`__)
  + feature:``aws kinesis put-records``: Add support for PutRecord operation. It
    writes multiple data records from a producer into an Amazon Kinesis
    stream in a single call
  + feature:``aws iam get-account-authorization-details``: Add support for
    GetAccountAuthorizationDetails operation. It retrieves information about
    all IAM users, groups, and roles in your account, including their
    relationships to one another and their attached policies.
  + feature:``aws route53 update-hosted-zone-comment``: Add support for updating
    the comment of a hosted zone.
  + bugfix:Timestamp Arguments: Fix issue where certain timestamps were not
    being accepted as valid input
    (`botocore issue 389 &lt;https://github.com/boto/botocore/pull/389&gt;`__)
  + bugfix:``aws s3``: Skip files whose names cannot be properly decoded
    (`issue 1038 &lt;https://github.com/aws/aws-cli/pull/1038&gt;`__)
  + bugfix:``aws kinesis put-record``: Fix issue where ``--data`` argument
    was not being base64 encoded
    (`issue 1033 &lt;https://github.com/aws/aws-cli/issues/1033&gt;`__)
  + bugfix:``aws cloudwatch put-metric-data``: Fix issue where the
    values for ``--statistic-values`` were not being parsed properly
    (`issue 1036 &lt;https://github.com/aws/aws-cli/issues/1036&gt;`__)
  + feature:``aws datapipeline``: Add support for using AWS Data Pipeline
    templates to create pipelines and bind values to parameters in the pipeline
  + feature:``aws elastictranscoder``: Add support for encryption of files in
    Amazon S3
  + bugfix:``aws s3``: Fix issue where requests were not being
    resigned correctly when using Signature Version 4
    (`botocore issue 388 &lt;https://github.com/boto/botocore/pull/388&gt;`__)
  + bugfix:``aws s3``: Fix issue where KMS encrypted objects could not be
    downloaded
    (`issue 1026 &lt;https://github.com/aws/aws-cli/pull/1026&gt;`__)
  + bugfix:``aws s3``: Fix issue where datetime's were not being
    parsed properly when a profile was specified
    (`issue 1020 &lt;https://github.com/aws/aws-cli/issues/1020&gt;`__)
  + bugfix:Assume Role Credential Provider: Fix issue with parsing
    expiry time from assume role credential provider
    (`botocore issue 387 &lt;https://github.com/boto/botocore/pull/387&gt;`__)
  + feature:``aws redshift``: Add support for integration with KMS
  + bugfix:``aws cloudtrail create-subscription``: Set a bucket config
    location constraint on buckets created outside of us-east-1.
    (`issue 1013 &lt;https://github.com/aws/aws-cli/pull/1013&gt;`__)
  + bugfix:``aws deploy push``: Fix s3 multipart uploads
  + bugfix:``aws s3 ls``: Fix return codes for non existing objects
    (`issue 1008 &lt;https://github.com/aws/aws-cli/pull/1008&gt;`__)
  + bugfix:Retrying Signed Requests: Fix issue where requests using
    Signature Version 4 signed with temporary credentials were not
    being retried properly, resulting in auth errors
    (`botocore issue 379 &lt;https://github.com/boto/botocore/pull/379&gt;`__)
  + bugfix:``aws s3api get-bucket-location``: Fix issue where getting the
    bucket location for a bucket in eu-central-1 required specifying
    ``--region eu-central-1``
    (`botocore issue 380 &lt;https://github.com/boto/botocore/pull/380&gt;`__)
  + bugfix:Timestamp Input: Fix regression where timestamps without any timezone
    information were not being handled properly
    (`issue 982 &lt;https://github.com/aws/aws-cli/issues/982&gt;`__)
  + bugfix:Signature Version 4: You can enable Signature Version 4 for Amazon S3
    commands by running ``aws configure set default.s3.signature_version s3v4``
    (`issue 1006 &lt;https://github.com/aws/aws-cli/issues/1006&gt;`__,
    `botocore issue 382 &lt;https://github.com/boto/botocore/pull/382&gt;`__)
  + bugfix:``aws emr``: Fix issue where ``--ssh``, ``--get``, ``--put``
    would not work when the cluster was in a waiting state
    (`issue 1007 &lt;https://github.com/aws/aws-cli/issues/1007&gt;`__)
  + feature:Binary File Input: Add support for reading file contents as binary
    by prepending the filename with ``fileb://``
    (`issue 1010 &lt;https://github.com/aws/aws-cli/pull/1010&gt;`__)
  + bugfix:Streaming Output File: Fix issue when streaming a response to a file
    and an error response is returned
    (`issue 1012 &lt;https://github.com/aws/aws-cli/pull/1012&gt;`__)
  + bugfix:Binary Output: Fix regression where binary output was no longer
    being base64 encoded
    (`issue 1001 &lt;https://github.com/aws/aws-cli/pull/1001&gt;`__,
    `issue 970 &lt;https://github.com/aws/aws-cli/pull/970&gt;`__)
  + feature:``aws lambda``: Add support for Amazon Lambda
  + feature:``aws s3``: Add support for S3 notifications
  + bugfix:``aws configservice get-status``: Fix connecting to endpoint without
    using ssl.
    (`issue 998 &lt;https://github.com/aws/aws-cli/pull/998&gt;`__)
  + bugfix:``aws deploy push``: Fix some python compatibility issues
    (`issue 1000 &lt;https://github.com/aws/aws-cli/pull/1000&gt;`__)
  + feature:``aws deploy``: Adds support for AWS CodeDeploy
  + feature:``aws configservice``: Adds support for AWS Config
  + feature:``aws kms``: Adds support AWS Key Management Service
  + feature:``aws s3api``: Adds support for S3 server-side encryption using
    KMS
  + feature:``aws ec2``: Adds support for EBS encryption using KMS
  + feature:``aws cloudtrail``: Adds support for CloudWatch Logs delivery
  + feature:``aws cloudformation``: Adds support for template summary.
  + feature:AssumeRole Credential Provider: Add support for assuming a role
    by configuring a ``role_arn`` and a ``source_profile`` in the AWS
    config file
    (`issue 991 &lt;https://github.com/aws/aws-cli/pull/991&gt;`__,
    `issue 990 &lt;https://github.com/aws/aws-cli/pull/990&gt;`__)
  + feature:Waiters: Add a ``wait`` subcommand that allows for a command
    to block until an AWS resource reaches a given state
    (`issue 992 &lt;https://github.com/aws/aws-cli/pull/992&gt;`__,
    `issue 985 &lt;https://github.com/aws/aws-cli/pull/985&gt;`__)
  + bugfix:``aws s3``: Fix issue where request was not properly signed
    on retried requests for ``aws s3``
    (`issue 986 &lt;https://github.com/aws/aws-cli/issues/986&gt;`__,
    `botocore issue 375 &lt;https://github.com/boto/botocore/pull/375&gt;`__)
  + bugfix:``aws s3``: Fix issue where ``--exclude`` and ``--include`` were
    not being properly applied when a s3 prefix was provided.
    (`issue 993 &lt;https://github.com/aws/aws-cli/pull/993&gt;`__)
  + feature:``aws cloudfront``: Adds support for wildcard cookie names and
    options caching.
  + feature:``aws route53``: Add further support for private dns and sigv4.
  + feature:``aws cognito-sync``: Add support for push sync.
  + bugfix:Pagination: Only display ``--page-size`` when an operation can be
    paginated
    (`issue 956 &lt;https://github.com/aws/aws-cli/pull/956&gt;`__)
  + feature:``--generate-cli-skeleton``: Generates a JSON skeleton to fill out
    and be used as input to ``--cli-input-json``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``--cli-input-json``: Runs an operation using a global JSON file
    that supplies all of the operation's arguments. This JSON file can
    be generated by ``--generate-cli-skeleton``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``aws s3/s3api``: Show hint about using the correct region when
    the corresponding error occurs
    (`issue 968 &lt;https://github.com/aws/aws-cli/pull/968&gt;`__)</changelog>
<changelog author="rjschwei@suse.com" date="1432641600">- update to version 1.7.29 (bnc#905354)
  + Follow up to previous update to address compatibility with latest
    amazon-ecs-agent
  + From 1.7.28
  - feature:aws ec2: Add support for Spot Fleet.
  - feature:aws opsworks: Add support for custom AutoScaling.
  - feature:aws elasticbeanstalk: Update model to latest version.
  + From 1.7.27
  - feature:aws ds: Add support for AWS Directory Service.
  - feature:aws ec2: Add support for VPC endpoints for Amazon S3.
  - feature:aws ec2: Add support for EIP Migration.
  - feature:aws logs: Add support for filtering log events.
  + From 1.7.26
  - feature:aws glacier: Add support for vault policies.
  - bugfix:aws iam create-open-id-connect-provider: Fix issue where the
  - -url parameter would try to retrieve the contents from the url instead
    of use the url as its value. (issue 1317)
  - bugfix:aws workspaces: Fix issue where throttling errors were not
    being retried (botocore issue 529)
  + From 1.7.25
  - feature:aws dynamodb query: Add support for KeyConditonExpression.
  + From 1.7.24
  - feature:aws help topics: Add support for listing available help topics.
  - feature:aws help config-vars: Add help topic for configuration variables.
  - feature:aws help return-codes: Add help topic for return codes.
  - feature:aws help s3-config: Add help topic for configuration of s3
    commands.
  - bugfix:aws lambda create-function/update-function-code: Improve
    error message when invalid --zip-file values are provided (issue 1296)
  - feature:aws ec2: Add support for new VM Import APIs, including
    import-image. The new APIs provide support for importing multi-volume
    VMs to Amazon EC2 and other enhancements.
  - feature:aws iam: Update AWS IAM command to latest version
  + From 1.7.23
  - feature:aws cognito-sync: Add support for Amazon Cognito Events.
  - bugfix:Parsing: Treat empty XML nodes in a response as an empty
    string instead of None if the underlying structure member is a string.
    This fixes the broken password-data-available Amazon EC2 waiter. Note:
    this changes the output of the CLI and may affect filtering with the
  - -query parameter. (issue 1252, botocore issue 506)
  + From 1.7.22
  - bugfix:aws ecs: Minor documentation fixes.
  + From 1.7.21
  - feature:aws workspaces: Add support for Amazon WorkSpaces.
  - feature:aws machinelearning: Add support for Amazon Machine Learning.
  - feature:aws s3api: Add support for specifying Lambda bucket
    notifications without needing to specify an invocation role.
  - feature:aws lambda: Update to latest api.
  - feature:aws ecs: Add support for Amazon ECS Service scheduler.
  + From 1.7.20
  - feature:aws datapipeline: Add support for deactivating pipelines.
  - feature:aws elasticbeanstalk: Add support for cancelling in-progress
    environment updates or application version deployment.
  + From 1.7.19
  - feature:aws codedeploy: Add register, deregister, install, and
    uninstall commands and update to the latest AWS CodeDeploy API.
  - feature:aws rds: Add support for describe-certificates.
  - feature:aws elastictranscoder: Add support for PlayReady DRM.
  - feature:aws ec2: Add support for D2 instances.
  + From 1.7.18
  - bugfix:Pagination: Fix issue where disabling pagination did not work
    when shadowing arguments. Affects commands such as aws route53
    list-resource-record-sets.
  - feature:aws elastictranscoder: Add support for job timing and
    input/output metadata
  - feature:aws iam: Add NamedPolicy to GetAccountAuthorization details
  - feature:aws opsworks: Allow for BlockDeviceMapping on EC2 instances
    launched through OpsWorks
  + From 1.7.17
  - feature:aws emr: Adds support for Amazon S3 client-side encryption
    in Amazon EMR and setting configuration values for several variables
    in the create-cluster and ssh commands. Also, the create-default-roles
    command will now auto-populate the Service Role and Instance Profile
    variables in the configuration file with the default roles after they
    are created.
  + From 1.7.16
  - feature:aws ec2 wait image-available: Add support for polling until
    an EC2 image is available (issue 1105)
  - feature:aws ec2 wait: Add support for additional EC2 waiters including
    instance-status-ok, password-data-available,
    spot-instance-request-fulfilled, and system-status-ok
  - feature:aws s3api: Add support for Amazon S3 cross region replication
  - feature:aws s3api: Add support for Amazon S3 requester pays (issue 797)
  - bugfix:Tab Completion: Fix issue where tab completion could not handle
    an LC_CTYPE of UTF-8 (issue 1233)
  - bugfix:aws s3api put-bucket-notification: Fix issue where an empty
    notification configuration could not be specified (botocore issue 495)
  - bugfix:aws cloudfront: Fix issue when calling cloudfront commands
    (issue 1234)
  - bugfix:aws ec2 copy-snapshot: Fix issue with the aws ec2 copy-snapshot
    command not correctly generating the presigned url argument
    (botocore issue 498)
  + From 1.7.15
  - feature:aws elastictranscoder: Add support for Applied Color
    SpaceConversion.
  - bugfix:aws --profile: Fix issue where explicitly specifying profile
    did not override credential environment variables. (botocore issue 486)
  - bugfix:aws datapipeline list-runs: Fix issue with --schedule-interval
    parameter. (issue 1225)
  - bugfix:aws configservice subscribe: Fix issue where users could not
    subscribe to a s3 bucket that they had no HeadBucket permissions to.
    (issue 1223)
  - bugfix:aws cloudtrail create-subscription: Fix issue where command
    would try to fetch the contents at a url using the contents of the
    custom policy as the url. (issue 1216)
  + From 1.7.14
  - feature:aws logs: Update aws logs command to the latest model.
  - feature:aws ec2: Add paginators for the describe-snapshots sub-command.
  - feature:aws cloudtrail: Add support for the new lookup-events
    sub-command.
  - bugfix:aws configure set: Fix issue when setting nested configuration
    values
  - feature:aws s3: Add support for --metadata-directive that allows
    metadata to be copied or replaced for single part copies. (issue 1188)
  + From 1.7.13
  - feature:aws cloudsearch: Update aws cloudsearch command to the latest
    model
  - feature:aws cognito-sync: Update aws cognito-sync command to allow
    customers to receive near-realtime updates as their data changes as
    well as exporting historical data. Customers configure an Amazon
    Kinesis stream to receive the data which can then be processed and
    exported to other data stores such as Amazon Redshift.
  - bugfix:aws opsworks: Fix issue with platform detection on linux
    systems with python3.3 and higher (issue 1199)
  - feature:Help Paging: Support paging through more when running help
    commands on windows (issue 1195)
  - bugfix:aws s3: Fix issue where read timeouts were not retried.
    (issue 1191)
  - feature:aws cloudtrail: Add support for regionalized policy templates
    for the create-subscription and update-subscription commands.
    (issue 1167)
  - bugfix:parsing: Fix issue where if there is a square bracket inside
    one of the values of a list, the end character would get removed.
    (issue 1183)
  + From 1.7.12
  - feature:aws datapipeline: Add support for tagging.
  - feature:aws route53: Add support for listing hosted zones by name
    and getting the hosted zone count.
  - bugfix:aws s3 sync: Remove --recursive parameter. The sync command is
    always a recursive operation meaning the inclusion or exclusion of
  - -recursive had no effect on the sync command. (issue 1171)
  - bugfix:aws s3: Fix issue where --endpoint-url was being ignored
    (issue 1142)
  + From 1.7.11
  - bugfix:aws sts: Allow calling assume-role-with-saml without credentials.
  - bugfix:aws sts: Allow users to make regionalized STS calls by
    specifying the STS endpoint with --endpoint-url and the region with
  - -region. (botocore issue 464)
  + From 1.7.10
  - bugfix:aws sts: Fix regression where if a region was not activated
    for STS it would raise an error if call was made to that region.
  + From 1.7.9
  - feature:aws cloudfront: Update to latest API
  - feature:aws sts: Add support for STS regionalized calls
  - feature:aws ssm: Add support for Amazon Simple Systems Management
    Service (SSM)
  + From 1.7.8
  - bugfix:aws s3: Fix auth errors when uploading large files to the
    eu-central-1 and cn-north-1 regions (botocore issue 462)
  + From 1.7.7
  - bugfix:aws ec2 revoke-security-group-ingress: Fix parsing of a
  - -port value of ICMP echo request (issue 1075)
  - feature:aws iam: Add support for managed policies
  - feature:aws elasticache: Add support for tagging
  - feature:aws route53domains: Add support for tagging of domains
  + From 1.7.6
  - feature:aws dynamodb: Add support for index scan
  - bugfix:aws s3: Fix issue where literal value for --website-redirect
    was not being used. (issue 1137)
  - bugfix:aws sqs purge-queue: Fix issue with the processing of the
  - -queue-url parameter (issue 1126)
  - feature:aws s3: Add support for config variable for changing S3 runtime
    values (issue 1122)
  - bugfix:Proxies: Fix issue with SSL certificate validation when using
    proxies and python 2.7.9 (botocore issue 451)
  + From 1.7.5
  - bugfix:aws datapipeline list-runs: Fix issue where --status values
    where not being serialized correctly (issue 1110)
  - bugfix:Output Formatting: Handle broken pipe errors when piping the
    output to another program (issue 1113)
  - bugfix:HTTP Proxy: Fix issue where aws s3/s3api commands would hang
    when using an HTTP proxy (issue 1116)
  - feature:aws elasticache wait: Add waiters for the aws elasticache
    wait (botocore issue 443)
  - bugfix:Locale Settings: Fix issue when Mac OS X has an LC_CTYPE value
    of UTF-8 (issue 945)
  + From 1.7.4
  - feature:aws dynamodb: Add support for online indexing.
  - feature:aws importexport get-shipping-label: Add support for
    get-shipping-label.
  - feature:aws s3 ls: Add --human-readable and --summarize options
    (issue 1103)
  - bugfix:aws kinesis put-records: Fix issue with base64 encoding for
    blob types (botocore issue 413)
  + From 1.7.3
  - feature:aws emr: Add support for security groups.
  - feature:aws cognitio-identity: Enhance authentication flow by beingi
    able to save associations of IAM roles with identity pools.
  + From 1.7.2
  - feature:aws autoscaling: Add ClassicLink support.
  - bugfix:aws s3: Fix issue where mtime was set before file was finished
    downloading. (issue 1102)</changelog>
<changelog author="rjschwei@suse.com" date="1433160000">- update to version 1.7.31 (bnc#905354)
  - Follow up to previous update to address API compatibility issues
    with botocore
  - Improved lambda support
  - Add support for uploading code using Amazon S3
  - Preview services are now documented
    and will also show up in the list of available services
  + From 1.7.30
  - Add support for ``aws efs``
  - Add paginators and waiters for ``aws ecs``</changelog>
<changelog author="ms@suse.com" date="1438344000">- update to version 1.7.42 (fate#318337)
  - feature:``aws opsworks``: Add support for managing Amazon ECS
  - feature:``aws rds``: Add support for Amazon Aurora
  - feature:``aws s3api``: Add support for more types of event notifications.
  - feature:``aws s3api``: Add support for GET/HEAD storage class response
  - feature:``aws logs``: Add destination API support.
  - feature:``aws glacier``: Add support for Vault Lock.
  - feature:``aws emr``: Add support for release-based clusters.
  - feature:``aws ecs``: Update API</changelog>
<changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.8.12 (bsc#949877)
  + feature:aws iot: Add support for AWS IoT
  + feature:aws iot-data: Add support for AWS IoT Data Plane
  + feature:aws lambda: Add support for aliasing and function versioning
  + feature:aws ecs: Update commands
  + feature:aws marketplacecommerceanalytics: Add support for AWS
    Marketplace Commerce Analytics
  + feature:aws firehose: Add support for Amazon Kinesis Firehose
  + feature:aws inspector: Add support for Amazon Inspector
  + feature:aws kinesis: Add support for updating stream retention periods
  + feature:aws configservice: Add support for config rules
  + feature:aws waf: Add support for AWS WAF
  + feature:aws ec2: Add support for spot blocks
  + feature:aws cloudfront: Add support for adding Web ACLs to CloudFront
    distributions
  + feature:aws es: Adds support for the new Amazon Elasticsearch
  + feature:aws cloudtrail: Adds support for log file integrity validation,
    log encryption with AWS KMS-Managed Keys (SSE-KMS), and trail tagging.
  + feature:aws rds create-db-instance: --db-instance-class has a new value
    as db.t2.large
  + feature:aws workspaces: Adds support for volume encryption in Amazon
    WorkSpaces.
  + feature:aws ses: Adds 17 new operations for accepting incoming emails.
  + feature:aws cloudformation describe-account-limits: This is a new API.
  + feature:aws ec2 modify-spot-fleet-request: This is a new API.
  + bugfix:aws elasticbeanstalk: Documentation update.
  + feature:aws cognito-sync: Update API to latest version
  + feature:aws cognito-identity: Update API to latest version
  + bugfix:Assume Role Provider: Fix issue where profile does not exist
    errors were not being propogated back to the user (issue 1515)
  + bugfix:Shorthand Syntax: Fix parser regression when a key name has an
    underscore character (issue 1510)
  + feature:aws s3: Add support for STANDARD_IA storage class to the aws s3
    commands (issue 1511)
  + feature:aws logs: Add support for create-export-task, cancel-export-task,
    and describe-export-tasks.
  + bugfix:Output: Only omit printing response to stdout if the response is
    an empty dictionary (issue 1496)
  + feature:aws s3/s3api: Update Amazon S3 commands to the latest version
  + feature:aws ec2 request-spot-fleet: Add new Diversified bidding strategy
    parameter
  + feature:aws ec2 describe-snapshots: Add new dataEncryptionKeyId and
    StateMessage parameters
  + feature:aws efs describe-mount-targets: Add new optional MountTargetId
    parameter
  + feature:aws route53: Add calculated health checks and latency health checks
  + bugfix:StreamingBody: File-like object for HTTP response can now be
    properly closed
  + feature:aws iam: Add two new APIs that enable programmatic access to
    the IAM policy simulator
  + feature:aws importexport: Documentation update
  + bugfix:aws machinelearning: Remove a constraint
  + feature:aws kinesis get-records: Add a timestamp field to all Records
  + bugfix:aws cloudfront: Add paginators and waiters
  + feature:aws storagegateway: Add support for resource tagging.
  + feature:aws ec2 request-spot-fleet: Add support for new request config
    parameters
  + bugfix:Shorthand Parser: Fix regression where '-' character was not
    accepted as a key name in a shorthand value (issue 1470)
  + bugfix:Shorthand Parser: Fix regression where spaces in unquoted
    values were not being accepted (issue 1471)
  + feature:aws configservice: Add support for listing discovered resources
  + bugfix:aws emr create-default-roles: Fix the issue where the command
    would fail to honor an existing AWS_CA_BUNDLE environment setting and
    end up with "SSLError: object has no attribute" (issue 1468)
  + feature:Shorthand Syntax: Add support for nested hashes when using
    shorthand syntax (issue 1444)
  + feature:aws codepipeline: Add support for specification of an encryption
    key to use with the artifact bucket, when creating and updating a pipeline
  + feature:aws s3: Add support for event notification filters
  + bugfix:aws iam create-virtual-mfa-device: Fix issue when an error
    response is received from the create-virtual-mfa-device command (issue 1447)
  + feature:aws elasticbeanstalk: Add support for enhanced health reporting
    in aws elasticbeanstalk commands
  + feature:Shared Credentials File: Add support for changing the shared
    credentials file from the default location of ~/.aws/credentials
    by setting the AWS_SHARED_CREDENTIALS_FILE environment variable
    (botocore issue 623)
  + feature:Waiters: Add aws iam wait instance-profile-exists and aws
    iam wait user-exists commands (botocore issue)
  + feature:aws swf: Add support for Added support for invoking AWS
    Lambda tasks from an Amazon SWF workflow.
  + feature:aws devicefarm: Add support for testing iOS applications
    with AWS Device Farm.</changelog>
<changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.9.12 (bsc#958686)
  + feature:aws configure add-model: Added command for updating commands
    in the CLI and clients in boto3. (issue 1664)
  + feature:aws cloudfront create-invalidation: Add a new --paths option.
    (issue 1662)
  + feature:aws cloudfront sign: Add a new command to create a signed url.
    (issue 1668)
  + feature:aws autoscaling: Added support for protecting instances from
    scale-in events.
  + feature:aws rds: Added support for Aurora encryption at rest.
- From version 1.9.11
  + feature:aws rds: Added support for specifying port number.
  + feature:aws ds: Added support for Microsoft ActiveDirctory.
  + feature:aws route53: Added support for TrafficFlow, a new management
    and modeling layer for Route53.
  + feature:Timeouts: Added additonal options for configuring socket timeouts.
- From version 1.9.10
  + feature:aws config: Added support for dedicated hosts.
  + feature:aws s3: Added support for custom metadata in cp, mv, and sync.
- From version 1.9.9
  + feature:aws s3api: Added support for the aws-exec-read canned ACL on
    objects.
  + feature:aws elasticbeanstalk: Added support for composable web applications.
  + feature:aws ec2: Added support for EC2 dedicated hosts.
  + feature:aws ecs: Added support for task stopped reasons and task start
    and stop times.
- From version 1.9.8
  + feature:Read Timeouts: Add --cli-read-timeout to specify the number of
    seconds until a read times out.
  + bugfix:aws s3: Fix regression when downloading a restored Glacier object
    (issue 1650 &lt;https://github.com/aws/aws-cli/pull/1650&gt;__)
  + bugfix:aws s3: Fix issue when encountering "out of disk space" errors as
    well as permissions errors when downloading large files (issue 1645,
    issue 1442)
  + bugfix:aws opsworks register: Support --no-verify-ssl argument for the
    aws opsworks register command (issue 1632)
  + feature:s3: Add support for Server-Side Encryption with KMS and
    Server-Side Encryption with Customer-Provided Keys. (issue 1623)
- From version 1.9.7
  + feature:aws rds: Cross account snapshot sharing and Modify DB Instance
    Visibility features
  + bugfix:memory management: Resolve a potential memory leak when creating
    lots of clients on Python 2.6 and Linux 2.6
  + bugfix:presign url: Now generate_presigned_url() works correctly with
    different expiry time
- From version 1.9.6
  + bugfix:shorthand: Allow . as a valid key character. (issue 1628)
  + feature:aws apigateway: Support for stage variables to configure
    the different deployment stages
- From version 1.9.5
  + bugfix:aws help: Gracefully handle Ctrl-C interrupts. (issue 1619)
  + bugfix:aws datapipeline create-default-roles: Fix issue with error
    handling. (issue 1618)
  + bugfix:aws s3: Skip glacier objects when downloading from S3. (issue 1581)
  + feature:aws s3api: Auto-populate --copy-source-sse-customer-key-md5
    (botocore issue 709)
- From version 1.9.4
  + feature:aws datapipeline create-default-roles: Creates default IAM
    roles for creating EMR clusters. (issue 1616)
  + feature:aws devicefarm: Add commands for updating and deleting projects,
    device pools, uploads, and runs.
- From version 1.9.3
  + feature:aws iam: Add support for resource-level policy simulation
- From version 1.9.2
  + bugfix:aws s3: Fix some local path validation issues (issue 1575)
  + bugfix:aws storagegateway: Fix --tape-ar-ns, --volume-ar-ns, and
  - -vtl-device-ar-ns to --tape-arns, --volume-arns, and --vtl-device-arns,
    respectively. The old arguments are still supported for backwards
    compatibility, but are no longer documented. (issue 1599)
  + bugfix:aws configservice subscribe: Fix an issue when creating a new
    S3 bucket (issue 1593)
  + bugfix:aws apigateway put-integration: Fix issue with --uri and
  - -integration-http-method parameters (issue 1605)
- From version 1.9.1
  + feature:aws ssm: Add support for Amazon EC2 Run Command
  + feature:aws apigateway: Add support for Amazon API Gateway
- From version 1.9.0
  + feature:aws iam: Add policy simulator support
  + feature:aws autoscaling: Add support for launch configurations
    that include encrypted Amazon Elastic Block Store (EBS) volumes
  + feature:configure: Add support for ca_bundle config variable
  + feature:Assume Role: Add role_session_name config variable to control
    the RoleSessionName when assuming roles (issue 1389)
  + bug:Argument Parsing: Handle case when empty list parameter was
    specified with no value (issue 838)
- From version 1.8.13
  + feature:aws deploy: Compress zip files when using aws deploy push
    (issue 1534 &lt;https://github.com/aws/aws-cli/pull/1534&gt;--)
  + bugfix:Shorthand Parser: Fix issue when display error message for
    multiline shorthand syntax values (issue 1543)
  + bugfix:aws route53: Automatically retry Throttling and
    PriorRequestNotComplete errors (botocore issue 682)
  + feature:aws s3/s3api: Add support for changing the bucket addressing
    style (botocore issue 673)
  + bugfix:aws s3api: Add missing --server-side-encryption option to
    upload-part command
  + feature:aws kms: Add ability to delete customer master keys (CMKs)</changelog>
<changelog author="rjschwei@suse.com" date="1460376000">- Update to version 1.10.19 (bsc#974993)
  + forward port hide_py_pckgmgmt.patch
  + feature:lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:ds: Added support for Directory Service Conditional Forwarder APIs.
  + feature:elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting token
    format.
- From 1.10.18
  + feature:apigateway: Added support for API Import
  + feature:route53: Added support for metric-based health checks and
    regional health checks.
  + feature:sts: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include name
    and account, as well as the type of entity making the call, such as an
    IAM user vs. federated user.
  + feature:s3api: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:s3api: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
- From 1.10.17
  + feature:acm: Update command to latest version
  + feature:cloudformation: Update command to latest version
  + feature:codedeploy: Update command to latest version
  + feature:dms: Update command to latest version
  + feature:elasticache: Update command to latest version
  + feature:elasticbeanstalk: Update command to latest version
  + feature:redshift: Update command to latest version
  + feature:waf: Update command to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginated command (botocore issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (botocore issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4
    (botocore issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502
    (botocore issue 853)
  + bugfix:ec2 run-instances: Fix issue when providing
  - -secondary-private-ip-address-count argument (issue 1874)
- From 1.10.16
  + feature:elasticache: Update command to latest version
  + feature:rds: Update command to latest version
  + feature:storagegateway: Update command to latest version
- from 1.10.15
  + feature:aws devicefarm: Add support to pay a flat monthly fee for
    unlimited testing of your Android and iOS apps with AWS Device Farm
    device slots
  + feature:aws rds: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
- From 1.10.14
  + feature:meteringmarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:s3api: Added support for delete marker and abort multipart
    upload lifecycle configuration.
  + feature:iot: Added support for Amazon Elasticsearch Service and
    Amazon Cloudwatch actions for the AWS IoT rules engine.
  + feature:cloudhsm: Added support for tagging resources.
- From 1.10.13
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints to latest version
  + bugfix:groff: Fix groff command which was causing issues on some systems
  + bugfix:shorthand: Allow # in keys in the shorthand parser
- From 1.10.12
  + feature:gamelift: Update command to latest version
  + feature:iam: Update command to latest version
  + feature:redshift: Update command to latest version
- From 1.10.11
  + feature:acm: Update acm command to latest version
  + feature:codecommit: Update codecommit model to latest version
  + feature:config: Update config command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:events: Update events command to latest version
  + bugfix:aws s3 cp: Add error checking when attempting recursive copies
    or syncs with streaming output (issue 1771)
- From 1.10.10
  + feature:aws ec2: Add support for VPC peering with security groups.
  + feature:aws ds: Add support for SNS event notifications.
  + bugfix:aws s3 rb: Fix issue where bucket is still attempted to be
    removed when the preceding delete requests failed. (issue 1827)
  + bugfix:aws storagegateway: Fix issue in aliasing required args.
    (issue 1790)
- From 1.10.9
  + bugfix:aws s3: Avoid MD5 checksumming if unavailable. (issue 1812)
  + feature:aws dynamodb: Add support for describing limits.
  + feature:aws apigateway: Add support for testing invoke authorizers
    and flushing stage authorizers cache.
  + feature:aws cloudsearchdomain: Add support for new stat fields.
- From 1.10.8
  + bugfix:aws s3: Disable use of MD5 when SHA256 checksum is already
    calculated for the body (botocore issue 804)
  + bugfix:FIPS: Handle case where MD5 cipher is not available on FIPS
    compliant systems (botocore issue 807)
  + feature:aws cloudformation: Update AWS CloudFormation command to the
    latest version
  + feature:aws logs: Update Amazon CloudWatch Logs command to the latest
    version
  + feature:aws ses: Update Amazon SES to the latest version
  + feature:aws autoscaling: Update Auto Scaling to the latest version
- From 1.10.7
  + bug:aws configure set: Fix issue when adding entries to an empty
    profile section (issue 1806)
  + feature:aws route53: Add suport for SNI health checks
- From 1.10.6
  + feature:aws storagegateway: Added support for user-supplied barcodes.
  + feature:aws codedeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:aws emr: Fix missing dns name issue with private clusters.
    (issue 1749)
  + bugfix:aws emr: Fix issue where impala args were not joined with commas.
    (issue 1802)
- From 1.10.5
  + feature:aws rds: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:aws emr: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Fixed a bug that was causing non-string service
    tokens to fail on serialization
- From 1.10.4
  + feature:aws lambda: Add support for accessing resources in your VPC.
  + feature:aws apigateway: Add support for custom request authorizers.
- From 1.10.3
  + feature:aws cloudfront: Add support for new ACMCertificateARN parameter
  + feature:aws marketplacecommerceanalytics generate-data-set: Add support
    for --customer-defined-values parameter
- From 1.10.2
  + feature:aws gamelift: Add support for AWS GameLift
  + bugfix:Assume Role: Fix issue where temporary credentials from assuming
    a role were not being properly cached (issue 1684)
- From 1.10.1
  + feature:aws waf: Add support for blocking, allowing, or monitoring
    (count) requests based on the content in HTTP request bodies.
  + bugfix:aws ssm: Remove constraint on Amazon EC2 instance id's.
    (issue 1729)
- From 1.10.0
  + feature:aws acm: adds support for AWS Certificate Manager
  + feature:aws cloudfront: adds support for AWS Certificate Manager
    certificates
  + feature:aws cloudfront create-distribution: Adds support for
  - -origin-domain-name and --default-root-object
  + feature:aws cloudfront update-distribution: Adds support for
  - -default-root-object
  + feature:aws iot: adds support for topic rules
  + feature:aws cloudformation: adds suport for ContinueUpdateRollback
- From 1.9.21
  + feature:aws sts: now returns RegionDisabledException instead of
    AccessDenied when a user sends an API request to an STS regional
    endpoint that is not activated for that AWS account. This enables
    customers to more easily decide how to respond, such as by trying to
    call a different region instead of simply failing the call.
  + feature:aws opsworks: adds support for new enums.
  + feature:aws devicefarm: adds support running Appium tests written in
    Python against your native, hybrid and browser-based apps on AWS Device
    Farm.
- From 1.9.20
  + bugfix:aws cloudfront: Fix regression in waiters.
- From 1.9.19
  + feature:aws events: Initial support for Amazon CloudWatch Events.
    CloudWatch Events allows you to track changes to your AWS resources
    with less overhead and greater efficiency.
  + feature:aws ec2: Adds support for purchasing reserved capacity for
    specific blocks of time on a one-time of recurring basis.
  + feature:aws cloudfront: Adds support for HTTPS-only connections, and
    control of edge-to-origin request headers.
  + bugfix:aws s3: Gracefully handle encoding errors when printing S3
    keys (issue 1719)
- From 1.9.18
  + feature:aws ec2: Enables support for DNS resolution of public hostnames
    to private IP addresses when queried over ClassicLink. Additionally, you
    can now access private hosted zones associated with your VPC from a
    linked EC2-Classic instance. ClassicLink DNS support makes it easier
    for EC2-Classic instances to communicate with VPC resources using public
    DNS hostnames.
  + feature:aws ec2: Add support for the new 63-bit EC2 Instance and
    Reservation IDs.
- From 1.9.17
  + bugfix:aws ssm: Documentation update.
- From 1.9.16
  + feature:aws ec2: Add new EC2 instance type: t2.nano
  + feature:aws datapipeline list-runs: Add support for output format
- From 1.9.15
  + feature:aws ecr: Add aws ecr commands
  + feature:aws emr: Update aws emr create-cluster to accept Amazon EC2
    security group
  + feature:aws ecs: Update ecs command to include a new deployment option
- From 1.9.14
  + feature:aws rds: Adds Enhanced Monitoring support so that you can
    monitor operating system metrics for your RDS DB instances
  + feature:aws configservice: Support for IAM resource types
  + feature:aws cloudtrail: Adds isMultiRegion to some of the commands
  + feature:aws cloudfront: Adds support for gzip
  + feature:aws ec2: Adds new commands for VPC Managed NAT
- From 1.9.13
  + feature:aws ec2 copy-image: Adds two optional parameters to support
    launching EC2 instances with EBS encrypted boot volumes.
  + bugfix:aws: Fix regression when using AWS_DATA_PATH environment
    variable (issue 736)</changelog>
<changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.10.38 (bsc#985858)
  + forward port hide_py_pckgmgmt.patch
  + feature:acm: Update acm command to latest version
  + feature:ses: Update ses command to latest version
  + feature:rds: Update rds command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.37
  + feature:s3: Update s3 command to latest version
- From 1.10.36
  + feature:dynamodbstreams: Update dynamodbstreams command to latest version
  + feature:machinelearning: Update machinelearning command to latest version
  + feature:iot: Update iot command to latest version
  + bugfix:Pagination: Fix regression with --no-paginate introduced in
    [#1958] (fixes #1993)
- From 1.10.35
  + feature:ec2: Update ec2 command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.10.34
  + feature:elasticache: Update elasticache command to latest version
- From 1.10.33
  + feature:rds: Update rds command to latest version
  + feature:ec2: Update ec2 command to latest version
  + bugfix:help: Write help content to stdout if less is not installed.
    Fixes #1957
- From 1.10.32
  + feature:firehose: Update firehose command to latest version
  + bugfix:Table: Fix rendering of tables with double-width characters.
  + feature:ec2: Update ec2 command to latest version
  + feature:ecs: Update ecs command to latest version
- From 1.10.31
  + feature:application-autoscaling: Adds support for Application Auto Scaling.
    Application Auto Scaling is a general purpose Auto Scaling service for
    supported elastic AWS resources. With Application Auto Scaling, you can
    automatically scale your AWS resources, with an experience similar to
    that of Auto Scaling.
- From 1.10.29
  + feature:dynamodb: Update dynamodb command to latest version
  + bugfix:Shorthand: Remove back-compat shorthand features from new services.
  + bugfix:Paginator: Print a better error when pagination params are
    supplied along with no-paginate.
  + bugfix:ec2: Sets MaxResults to default value of 1000.
  + feature:workspaces: Update workspaces command to latest version
  + feature:discovery: Update discovery command to latest version
- From 1.10.28
  + feature:ec2: Update ec2 command to latest version
  + feature:ssm: Update ssm command to latest version
  + feature:discovery: Update discovery command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.10.27
  + feature:storagegateway: Update storagegateway command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:emr: Update emr command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:iam: Update iam command to latest version
- From 1.10.26
  + feature:kms: Update kms command to latest version
  + feature:sts: Update sts command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:ecs: Update ecs command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.25
  + feature:inspector: Update inspector command to latest version
  + feature:codepipeline: Update codepipeline command to latest version
  + bugfix:Configure: Fix issue causing prompts not to display on mintty.
    Fixes #1925
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
- From 1.10.24
  + feature:route53domains: Update route53domains command to latest version
  + feature:opsworks: Update opsworks command to latest version
- From 1.10.23
  + feature:ecr: Update ecr command to latest version
  + feature:acm: Update acm command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:sts: Update sts command to latest version
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.10.22
  + feature:emr: Add support for smart targeted resize feature
  + feature:iot: Add SQL RulesEngine version support
  + feature:acm: Add tagging support for ACM
- From 1.10.21
  + feature:aws ec2: Add support for two new EBS volume types
  + feature:aws cognito-idp: Add support for new service, aws cognito-idp
  + feature:aws kinesis: Update aws kinesis command to latest version
  + feature:aws elasticbeanstalk: Add support for automatic platform
    version upgrades with managed updates
  + feature:aws devicefarm: Update aws devicefarm command to latest version
  + feature:aws s3: Add support for Amazon S3 Transfer Acceleration
  + feature:aws firehose: Update firehose command to latest version
- From 1.10.20
  + feature:iot: Add commands for managing CA certificates.
  + bugfix:ec2 wait: Fix issues with waiting on incorrect error code.
  + bugfix:s3: Fix issue where multipart uploads were not being properly
    aborted after Cntrl-C. (issue 1905)</changelog>
<changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
<changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
<changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>

</package>
<package pkgid="636e03b23984008f5a87b372498cf153e61f170a79df27d018cf9fc3ed11c10e" name="aws-cli" arch="src">
    <version epoch="0" ver="1.11.104" rel="20.1"/>

<changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1393416000">- update to version 1.2.13
  + feature:aws route53: Update aws route53 command to support string-match
    health checks and the UPSERT action for the aws route53
    change-resource-record-sets command
  + bugfix:Command Completion: Don't show tracebacks on SIGINT (issue 628)
  + bugfix:Docs: Don't duplicate enum values in reference docs (issue 632)
  + bugfix:aws s3: Don't require s3:// prefix (issue 626)
  + feature:aws configure: Add support for configure get and configure set
    command which allow you to set and get configuration values from the AWS
    config file (`issue 602 &lt;https://github.com/aws/aws-cli/issues/602`__)
  + bugfix:aws s3: Fix issue with Amazon S3 downloads on certain OSes
    (`issue 619 &lt;https://github.com/aws/aws-cli/issues/619`__)
  + Add support for the --recursive option in the aws s3 ls command
    (issue 465 &lt;https://github.com/aws/aws-cli/issues/465)
  + Add support for the AWS_CA_BUNDLE environment variable so that users
    can specify an alternate path to a cert bundle (issue 586)
  + Add metadata_service_timeout and metadata_service_num_attempts config
    parameters to control behavior when retrieving credentials using an
    IAM role (issue 597)
  + Retry intermittent aws s3 download failures including socket timeouts
    and content length mismatches (issue 594)
  + Fix response parsing of aws s3api get-bucket-location (issue 345)
  + Fix response parsing of the aws elastictranscoder command (issue 207)
  + Update aws elasticache command to not require certain parameters</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #315990)</changelog>
<changelog author="rschweikert@suse.com" date="1414065600">- Update to version 1.5.3  (bnc#902598)
  + feature:aws ec2 describe-volumes: Add support for optional pagination.
  + feature:aws route53domains: Add support for auto-renew domains.
  + feature:aws cognito-identity: Add for Open-ID Connect.
  + feature:aws sts: Add support for Open-ID Connect
  + feature:aws iam: Add support for Open-ID Connect
  + bugfix:aws s3 sync: Fix issue when uploading with
  - -exact-timestamps (issue 964)
  + bugfix:Retry: Fix issue where certain error codes were not being
    retried (botocore issue 361)
  + bugfix:aws emr ssh: Fix issue when using waiter interface to wait on
    the cluster state (issue 954)
  + feature:aws cloudsearch: Add support for advance Japanese language
    processing.
  + feature:aws rds: Add support for gp2 which provides faster access than
    disk-based storage.
  + bugfix:aws s3 mv: Delete multi-part objects when transferring objects
    across regions using --source-region (issue 938)
  + bugfix:aws emr ssh: Fix issue with waiter configuration not being
    found (issue 937)
  + feature:aws dynamodb: Update aws dynamodb command to support storing
    and retrieving documents with full support for document models. New
    data types are fully compatible with the JSON standard and allow you
    to nest document elements within one another.
  + bugfix:aws configure: Fix bug where aws configure was not properly
    writing out to the shared credentials file
  + bugfix:S3 Response Parsing: Fix regression for parsing S3 responses
    containing a status code of 200 with an error response body (botocore
    issue 342)
  + bugfix:Shorthand Error Message: Ensure the error message for shorthand
    parsing always contains the CLI argument name (issue 935)
  + bugfix:Response Parsing: Fix response parsing so that leading and
    trailing spaces are preserved
  + feature:Shared Credentials File: The aws configure and aws configure set
    command now write out all credential variables to the shared
    credentials file ~/.aws/credentials (issue 847)
  + bugfix:aws s3: Write warnings and errors to standard error as opposed to
    standard output. (issue 919)
  + feature:aws s3: Add --only-show-errors option that displays errors and
    warnings but suppresses all other output.
  + feature:aws s3 cp: Added ability to upload local file streams from
    standard input to s3 and download s3 objects as local file streams to
    standard output. (issue 903)
  + feature:aws emr create-cluster: Add support for --emrfs.
  + feature:aws iam: Update aws iam command to latest version.
  + feature:aws cognito-sync: Update aws cognito-sync command to latest
    version.
  + feature:aws opsworks: Update aws opsworks command to latest version.
  + feature:aws elasticbeanstalk: Add support for bundling logs.
  + feature:aws kinesis: Add suport for tagging.
  + feature:Page Size: Add a --page-size option, that controls page size
    when perfoming an operation that uses pagination. (issue 889)
  + bugfix:aws s3: Added support for ignoring and warning about files that
    do not exist, user does not have read permissions, or are special
    files (i.e. sockets, FIFOs, character special devices, and block
    special devices) (issue 881)
  + feature:Parameter Shorthand: Added support for structure(list-scalar,
    scalar) parameter shorthand. (issue 882)
  + bugfix:aws s3: Fix bug when unknown options were passed to aws s3
    commands (issue 886)
  + bugfix:Endpoint URL: Provide a better error message when an invalid
  - -endpoint-url is provided (issue 899)
  + bugfix:aws s3: Fix issue when keys do not get properly url decoded when
    syncing from a bucket that requires pagination to a bucket that
    requires less pagination (issue 909)
  + feature:aws cloudsearchdomain: Added sigv4 support.
  + bugfix:Credentials: Raise an error if an incomplete profile is found
    (issue 690)
  + feature:Signing Requests: Add a --no-sign-request option that, when
    specified, will not sign any requests.
  + bugfix:aws s3: Added -source-region argument to allow transfer between
    non DNS compatible buckets that were located in different regions.
    (issue 872)
  + feature:aws elb: Add support for AWS Elastic Load Balancing tagging
  + feature: aws emr: Move emr out of preview mode.
  + bugfix: aws s3api: Fix serialization of several s3 api commands.
    (issue botocore 193)
  + bugfix: aws s3 sync: Fix issue for unnecessarily resyncing files on
    windows machines. (issue 843)
  + bugfix: aws s3 sync: Fix issue where keys were being decoded twice when
    syncing between buckets. (issue 862)
  + bugfix:aws ec2 describe-network-interface-attribute: Fix issue where
    the model for the aws ec2 describe-network-interface-attribute was
    incorrect (issue 558)
  + bugfix:aws s3: Add option to not follow symlinks via
  - -[no]-follow-symlinks. Note that the default behavior of following
    symlinks is left unchanged. (issue 854, issue 453, issue 781)
  + bugfix:aws route53 change-tags-for-resource: Fix serialization issue
    for aws route53 change-tags-for-resource (botocore issue 328)
  + bugfix:aws ec2 describe-network-interface-attribute: Update parameters
    to add the --attribute argument (botocore issue 327)
  + feature:aws autoscaling: Update command to the latest version
  + feature:aws elasticache: Update command to the latest version
  + feature:aws route53: Update command to the latest version
  + feature:aws route53domains: Add support for Amazon Route53 Domains
  + feature:aws elasticloadbalancing: Update to the latest service model.
  + bugfix:aws swf poll-for-decision-task: Fix issue where the default
    paginated response is missing output response keys (issue botocore 324)
  + bugfix:Connections: Fix issue where connections were hanging when
    network issues occurred issue botocore 325)
  + bugfix:aws s3/s3api: Fix issue where Deprecations were being written
    to stderr in Python 3.4.1 issue botocore 319)
  + feature:aws support: Update aws support command to the latest version
  + feature:aws iam: Update aws iam command to the latest version
  + feature:aws emr: Add --hive-site option to aws emr create-cluster and
    aws emr install-application commands
  + feature:aws s3 sync: Add an --exact-timestamps option to the aws s3
    sync command (issue 824)
  + bugfix:aws ec2 copy-snapshot: Fix bug when spaces in the description
    caused the copy request to fail (issue botocore 321)
  + feature:aws cwlogs: Add support for Amazon CloudWatch Logs
  + feature:aws cognito-sync: Add support for Amazon Cognito Service
  + feature:aws cognito-identity: Add support for Amazon Cognito Identity
    Service
  + feature:aws route53: Update aws route53 command to the latest version
  + feature:aws ec2: Update aws ec2 command to the latest version
  + bugfix:aws s3/s3api: Fix issue where --endpoint-url wasn't being used
    for aws s3/s3api commands (issue 549)
  + bugfix:aws s3 mv: Fix bug where using the aws s3 mv command to move a
    large file onto itself results in the file being deleted (issue 831)
  + bugfix:aws s3: Fix issue where parts in a multipart upload are stil being
    uploaded when a part has failed (issue 834)
  + bugfix:Windows: Fix issue where python.exe is on a path that contains
    spaces (issue 825)
  + feature:aws opsworks: Update the aws opsworks command to the latest version
  + bugfix:Shorthand JSON: Fix bug where shorthand lists with a single
    item (e.g. --arg Param=[item]) were not parsed correctly. (issue 830)
  + bugfix:Text output: Fix bug when rendering only scalars that are
    numbers in text output (issue 829)
  + bugfix:aws cloudsearchdomain: Fix bug where --endpoint-url is required
    even for help subcommands (issue 828)
  + feature:aws cloudsearchdomain: Add support for the Amazon CloudSearch
    Domain command.
  + feature:aws cloudfront: Update the Amazon CloudFront command to the
    latest version
  + feature:aws ses: Add support for delivery notifications
  + bugfix:Region Config: Fix issue for cn-north-1 region (issue botocore 314)
  + bugfix:Amazon EC2 Credential File: Fix regression for parsing EC2
    credential file (issue botocore 315)
  + bugfix:Signature Version 2: Fix timestamp format when calculating
    signature version 2 signatures (issue botocore 308)
  + feature:aws configure: Add support for setting nested attributes
    (issue 817)
  + bugfix:aws s3: Fix issue when uploading large files to newly created
    buckets in a non-standard region (issue 634)
  + feature:aws dynamodb: Add support for a local region for dynamodb
    (aws dynamodb --region local ...) (issue 608)
  + feature:aws elasticbeanstalk: Update aws elasticbeanstalk model to the
    latest version
  + feature:Documentation Examples: Add more documentatoin examples for
    many AWS CLI commands
  + feature:aws emr: Update model to the latest version
  + feature:aws elastictranscoder: Update model to the latest version
  + feature:aws s3api: Add support for server-side encryption with a
    customer-supplied encryption key.
  + feature:aws sns: Support for message attributes.
  + feature:aws redshift: Support for renaming clusters.
  + bugfix:aws s3: Fix bug related to retrying requests when 500 status
    codes are received (issue botocore 302)
  + bugfix:aws s3: Fix when when using S3 in the cn-north-1 region
    (issue botocore 301)
  + bugfix:aws kinesis: Fix pagination bug when using the get-records
    operation (issue botocore 304)
  + bugfix:Python 3.4.1: Add support for python 3.4.1 (issue 800)
  + feature:aws emr: Update preview commands for Amazon Elastic MapReduce
  + bugfix:aws s3: Add filename to error message when we're unable to stat
    local filename (issue 795)
  + bugfix:aws s3api get-bucket-policy: Fix response parsing for the aws
    s3api get-bucket-policy command (issue 678)
  + bugfix:Shared Credentials: Fix bug when specifying profiles that don't
    exist in the CLI config file (issue botocore 294)
  + bugfix:aws s3: Handle Amazon S3 error responses that have a 200 OK
    status code (issue botocore 298)
  + feature:aws sts: Update the aws sts command to the latest version
  + feature:aws cloudsearch: Update the aws cloudsearch command to the
    latest version
  + feature:Shorthand: Add support for surrounding list parameters with []
    chars in shorthand syntax (issue 788)
  + feature:Shared credential file: Add support for the ~/.aws/credentials file
  + feature:aws ec2: Add support for Amazon EBS encryption
  + bugfix:aws s3: Fix issue when --delete and --exclude filters are used
    together (issue 778)
  + feature:aws route53: Update aws route53 to the latest model
  + bugfix:aws emr: Fix issue with aws emr retry logic not being applied
    correctly (botocore issue 285)
  + feature:aws cloudtrail: Add support for eu-west-1, ap-southeast-2
  + bugfix:aws ec2: Fix issue when specifying user data from a file
    containing non-ascii characters (issue 765)
  + bugfix:aws cloudtrail: Fix a bug with python3 when creating a
    subscription (issue 773)
  + bugfix:Shorthand: Fix issue where certain shorthand parameters were
    not parsing to the correct types (issue 776)
  + bugfix:aws cloudformation: Fix issue with parameter casing for the
    NotificationARNs parameter (botocore issue 283)
  + feature:aws cloudformation: Add support for updated API
  + feature:aws sqs: Add support for message attributes
  + bugfix:aws s3api: Fix issue when setting metadata on an S3 object
    (issue 356)
  + feature:aws autoscaling: Add support for launching Dedicated Instances
    in Amazon Virtual Private Cloud
  + feature:aws elasticache: Add support to backup and restore for Redis
    clusters
  + feature:aws dynamodb: Update aws dynamodb command to the latest API
  + bugfix:Output Format: Fix issue with encoding errors when using text
    and table output and redirecting to a pipe or file (issue 742)
  + bugfix:aws s3: Fix issue with sync re-uploading certain files (issue 749)
  + bugfix:Text Output: Fix issue with inconsistent text output based on
    order (issue 751)
  + bugfix:aws datapipeline: Fix issue for aggregating keys into a list
    when calling aws datapipeline get-pipeline-definition (issue 750)
  + bugfix:aws s3: Fix issue when running out of disk space during aws s3
    transfers (issue 739)
  + feature:aws s3 sync: Add --size-only param to the aws s3 sync command
    (issue 472, issue 719)
  + bugfix:aws cloudtrail: Fix issue when using create-subscription
    command (issue botocore 268)
  + feature:aws cloudsearch: Amazon CloudSearch has moved out of preview
    (issue 730)
  + bugfix:aws s3 website: Fix issue where --error-document was being
    ignored in certain cases (issue 714)
  + feature:aws opsworks: Update aws opsworks model to the latest version
  + bugfix:Pagination: Fix issue with --max-items with aws route53, aws iam,
    and aws ses (issue 729)
  + bugfix:aws s3: Fix issue with fips-us-gov-west-1 endpoint (issue
    botocore 265)
  + bugfix:Table Output: Fix issue when displaying unicode characters in
    table output (issue 721)
  + bugfix:aws s3: Fix regression when syncing files with whitespace
    (issue 706, issue 718)
  + bugfix:aws ec2: Fix issue with EC2 model resulting in responses not
    being parsed.
  + feature:aws ec2: Add support for Amazon VPC peering
  + feature:aws redshift: Add support for the latest Amazon Redshift API
  + feature:aws cloudsearch: Add support for the latest Amazon CloudSearch API
  + bugfix:aws cloudformation: Documentation updates
  + bugfix:Argument Parsing: Fix issue when list arguments were not being
    decoded to unicode properly (issue 711)
  + bugfix:Output: Fix issue when invalid output type was provided in a
    config file or environment variable (issue 600)
  + bugfix:aws datapipeline: Fix issue when serializing pipeline definitions
    containing list elements (issue 705)
  + bugfix:aws s3: Fix issue when recursively removing keys containing
    control characters (issue 675)
  + bugfix:aws s3: Honor --no-verify-ssl in high level aws s3 commands
    (issue 696)
  + bugfix:Parameters: Fix issue parsing with CLI parameters of type long
    (issue 693)
  + bugfix:Pagination: Fix issue where --max-items in pagination was always
    assumed to be an integer (issue 689)
  + feature:aws elb: Add support for AccessLog
  + bugfix:Bundled Installer: Allow creation of bundled installer with pip
    1.5 (issue 691)
  + bugfix:aws s3: Fix issue when copying objects using aws s3 cp with key
    names containing + characters (issue #614)
  + bugfix:ec2 create-snapshot: Remove Tags key from output response
    (issue 247)
  + bugfix:aws s3: aws s3 commands should not be requiring regions (issue 681)
  + bugfix:CLI Arguments: Fix issue where unicode command line arguments
    were not being handled correctly (issue 679)
  + bugfix:aws s3: Fix issue where S3 downloads would hang in certain cases
    and could not be interrupted (issue 650, issue 657)
  + bugfix:aws s3: Support missing canned ACLs when using the --acl
    parameter (issue 663)
  + bugfix:aws rds describe-engine-default-parameters: Fix pagination issue
    when calling aws rds describe-engine-default-parameters (issue 607)
  + bugfix:aws cloudtrail: Merge existing SNS topic policy with the
    existing AWS CloudTrail policy instead of overwriting the default
    topic policy
  + bugfix:aws s3: Fix issue where streams were not being rewound when
    encountering 307 redirects with multipart uploads (issue 544)
  + bugfix:aws elb: Fix issue with documentation errors in aws elb help
    (issue 622)
  + bugfix:JSON Parameters: Add a more clear error message when parsing
    invalid JSON parameters (issue 639)
  + bugfix:aws s3api: Properly handle null inputs (issue 637)
  + bugfix:Argument Parsing: Handle files containing JSON with leading
    and trailing spaces (issue 640)</changelog>
<changelog author="rschweikert@suse.com" date="1421582400">- Update to version 1.7.1 (bnc#905354)
  + bugfix:``aws s3 cp``: Fix issue with parts of a file being
    downloaded more than once when streaming to stdout
    (`issue 1087 &lt;https://github.com/aws/aws-cli/pull/1087&gt;`__)
  + bugfix:``--no-sign-request``: Fix issue where requests were still trying to
    be signed even though user used the ``--no-sign-request`` flag.
    (`botocore issue 433 &lt;https://github.com/boto/botocore/pull/433&gt;`__)
  + bugfix:``aws cloudsearchdomain search``: Fix invalid signatures when
    using the ``aws cloudsearchdomain search`` command
    (`issue 976 &lt;https://github.com/aws/aws-cli/issues/976&gt;`__)
  + feature:``aws cloudhsm``: Add support for AWS CloudHSM.
  + feature:``aws ecs``: Add support for ``aws ecs``, the Amazon EC2
    Container Service (ECS)
  + feature:``aws rds``: Add Encryption at Rest and CloudHSM Support.
  + feature:``aws ec2``: Add Classic Link support
  + feature:``aws cloudsearch``: Update ``aws cloudsearch`` command
    to latest version
  + bugfix:``aws cloudfront wait``: Fix issue where wait commands did not
    stop waiting when a success state was reached.
    (`botocore issue 426 &lt;https://github.com/boto/botocore/pull/426&gt;`_)
  + bugfix:``aws ec2 run-instances``: Allow binary files to be passed to
    ``--user-data``
    (`botocore issue 416 &lt;https://github.com/boto/botocore/pull/416&gt;`_)
  + bugfix:``aws cloudsearchdomain suggest``: Add ``--suggest-query``
    option to fix the argument being shadowed by the top level
    ``--query`` option.
    (`issue 1068 &lt;https://github.com/aws/aws-cli/pull/1068&gt;`__)
  + bugfix:``aws emr``: Fix issue with endpoints for ``eu-central-1`` and
    ``cn-north-1``
    (`botocore issue 423 &lt;https://github.com/boto/botocore/pull/423&gt;`__)
  + bugfix:``aws s3``: Fix issue where empty XML nodes are now parsed
    as an empty string ``""`` instead of ``null``, which allows for
    round tripping ``aws s3 get/put-bucket-lifecycle``
    (`issue 1076 &lt;https://github.com/aws/aws-cli/issues/1076&gt;`__)
  + bugfix:AssumeRole: Fix issue with cache filenames when assuming a role
    on Windows
    (`issue 1063 &lt;https://github.com/aws/aws-cli/issues/1063&gt;`__)
  + bugfix:``aws s3 ls``: Fix issue when listing Amazon S3 objects containing
    non-ascii characters in eu-central-1
    (`issue 1046 &lt;https://github.com/aws/aws-cli/issues/1046&gt;`__)
  + feature:``aws storagegateway``: Update the ``aws storagegateway`` command
    to the latest version
  + feature:``aws emr``: Update the ``aws emr`` command to the latest
    version
  + bugfix:``aws emr create-cluster``: Fix script runnner jar to the current
    region location when ``--enable-debugging`` is specified in the
    ``aws emr create-cluster`` command
  + bugfix:``aws datapipeline get-pipeline-definition``: Rename operation
    parameter ``--version`` to ``--pipeline-version`` to avoid shadowing
    a built in parameter
    (`issue 1058 &lt;https://github.com/aws/aws-cli/pull/1058&gt;`__)
  + bugfix:pip installation: Fix issue where pip installations would cause
    an error due to the system's python configuration
    (`issue 1051 &lt;https://github.com/aws/aws-cli/issues/1051&gt;`__)
  + feature:``aws elastictranscoder``: Update the ``aws elastictranscoder``
    command to the latest version
  + bugfix:Non-ascii chars: Fix issue where escape sequences were being printed
    instead of the non-ascii chars
    (`issue 1048 &lt;https://github.com/aws/aws-cli/issues/1048&gt;`__)
  + bugfix:``aws iam create-virtual-mfa-device``:  Fix issue with ``--outfile``
    not supporting relative paths
    (`issue 1002 &lt;https://github.com/aws/aws-cli/pull/1002&gt;`__)
  + feature:``aws sqs``: Add support for Amazon Simple Queue Service purge queue
    which allows users to delete the messages in their queue.
  + feature:``aws opsworks``: Add AWS OpsWorks support for registering and
    assigning existing Amazon EC2 instances and on-premises servers.
  + feature:``aws opsworks register``: Registers an EC2 instance or machine with
    AWS OpsWorks. Registering a machine using this command will install the
    AWS OpsWorks agent on the target machine and register it with an existing
    OpsWorks stack.
  + bugfix:``aws s3``: Fix issue with expired signatures when retrying
    failed requests
    (`botocore issue 399 &lt;https://github.com/boto/botocore/pull/399&gt;`__)
  + bugfix:``aws cloudformation get-template``: Fix error message when
    template does not exist
    (`issue 1044 &lt;https://github.com/aws/aws-cli/issues/1044&gt;`__)
  + feature:``aws kinesis put-records``: Add support for PutRecord operation. It
    writes multiple data records from a producer into an Amazon Kinesis
    stream in a single call
  + feature:``aws iam get-account-authorization-details``: Add support for
    GetAccountAuthorizationDetails operation. It retrieves information about
    all IAM users, groups, and roles in your account, including their
    relationships to one another and their attached policies.
  + feature:``aws route53 update-hosted-zone-comment``: Add support for updating
    the comment of a hosted zone.
  + bugfix:Timestamp Arguments: Fix issue where certain timestamps were not
    being accepted as valid input
    (`botocore issue 389 &lt;https://github.com/boto/botocore/pull/389&gt;`__)
  + bugfix:``aws s3``: Skip files whose names cannot be properly decoded
    (`issue 1038 &lt;https://github.com/aws/aws-cli/pull/1038&gt;`__)
  + bugfix:``aws kinesis put-record``: Fix issue where ``--data`` argument
    was not being base64 encoded
    (`issue 1033 &lt;https://github.com/aws/aws-cli/issues/1033&gt;`__)
  + bugfix:``aws cloudwatch put-metric-data``: Fix issue where the
    values for ``--statistic-values`` were not being parsed properly
    (`issue 1036 &lt;https://github.com/aws/aws-cli/issues/1036&gt;`__)
  + feature:``aws datapipeline``: Add support for using AWS Data Pipeline
    templates to create pipelines and bind values to parameters in the pipeline
  + feature:``aws elastictranscoder``: Add support for encryption of files in
    Amazon S3
  + bugfix:``aws s3``: Fix issue where requests were not being
    resigned correctly when using Signature Version 4
    (`botocore issue 388 &lt;https://github.com/boto/botocore/pull/388&gt;`__)
  + bugfix:``aws s3``: Fix issue where KMS encrypted objects could not be
    downloaded
    (`issue 1026 &lt;https://github.com/aws/aws-cli/pull/1026&gt;`__)
  + bugfix:``aws s3``: Fix issue where datetime's were not being
    parsed properly when a profile was specified
    (`issue 1020 &lt;https://github.com/aws/aws-cli/issues/1020&gt;`__)
  + bugfix:Assume Role Credential Provider: Fix issue with parsing
    expiry time from assume role credential provider
    (`botocore issue 387 &lt;https://github.com/boto/botocore/pull/387&gt;`__)
  + feature:``aws redshift``: Add support for integration with KMS
  + bugfix:``aws cloudtrail create-subscription``: Set a bucket config
    location constraint on buckets created outside of us-east-1.
    (`issue 1013 &lt;https://github.com/aws/aws-cli/pull/1013&gt;`__)
  + bugfix:``aws deploy push``: Fix s3 multipart uploads
  + bugfix:``aws s3 ls``: Fix return codes for non existing objects
    (`issue 1008 &lt;https://github.com/aws/aws-cli/pull/1008&gt;`__)
  + bugfix:Retrying Signed Requests: Fix issue where requests using
    Signature Version 4 signed with temporary credentials were not
    being retried properly, resulting in auth errors
    (`botocore issue 379 &lt;https://github.com/boto/botocore/pull/379&gt;`__)
  + bugfix:``aws s3api get-bucket-location``: Fix issue where getting the
    bucket location for a bucket in eu-central-1 required specifying
    ``--region eu-central-1``
    (`botocore issue 380 &lt;https://github.com/boto/botocore/pull/380&gt;`__)
  + bugfix:Timestamp Input: Fix regression where timestamps without any timezone
    information were not being handled properly
    (`issue 982 &lt;https://github.com/aws/aws-cli/issues/982&gt;`__)
  + bugfix:Signature Version 4: You can enable Signature Version 4 for Amazon S3
    commands by running ``aws configure set default.s3.signature_version s3v4``
    (`issue 1006 &lt;https://github.com/aws/aws-cli/issues/1006&gt;`__,
    `botocore issue 382 &lt;https://github.com/boto/botocore/pull/382&gt;`__)
  + bugfix:``aws emr``: Fix issue where ``--ssh``, ``--get``, ``--put``
    would not work when the cluster was in a waiting state
    (`issue 1007 &lt;https://github.com/aws/aws-cli/issues/1007&gt;`__)
  + feature:Binary File Input: Add support for reading file contents as binary
    by prepending the filename with ``fileb://``
    (`issue 1010 &lt;https://github.com/aws/aws-cli/pull/1010&gt;`__)
  + bugfix:Streaming Output File: Fix issue when streaming a response to a file
    and an error response is returned
    (`issue 1012 &lt;https://github.com/aws/aws-cli/pull/1012&gt;`__)
  + bugfix:Binary Output: Fix regression where binary output was no longer
    being base64 encoded
    (`issue 1001 &lt;https://github.com/aws/aws-cli/pull/1001&gt;`__,
    `issue 970 &lt;https://github.com/aws/aws-cli/pull/970&gt;`__)
  + feature:``aws lambda``: Add support for Amazon Lambda
  + feature:``aws s3``: Add support for S3 notifications
  + bugfix:``aws configservice get-status``: Fix connecting to endpoint without
    using ssl.
    (`issue 998 &lt;https://github.com/aws/aws-cli/pull/998&gt;`__)
  + bugfix:``aws deploy push``: Fix some python compatibility issues
    (`issue 1000 &lt;https://github.com/aws/aws-cli/pull/1000&gt;`__)
  + feature:``aws deploy``: Adds support for AWS CodeDeploy
  + feature:``aws configservice``: Adds support for AWS Config
  + feature:``aws kms``: Adds support AWS Key Management Service
  + feature:``aws s3api``: Adds support for S3 server-side encryption using
    KMS
  + feature:``aws ec2``: Adds support for EBS encryption using KMS
  + feature:``aws cloudtrail``: Adds support for CloudWatch Logs delivery
  + feature:``aws cloudformation``: Adds support for template summary.
  + feature:AssumeRole Credential Provider: Add support for assuming a role
    by configuring a ``role_arn`` and a ``source_profile`` in the AWS
    config file
    (`issue 991 &lt;https://github.com/aws/aws-cli/pull/991&gt;`__,
    `issue 990 &lt;https://github.com/aws/aws-cli/pull/990&gt;`__)
  + feature:Waiters: Add a ``wait`` subcommand that allows for a command
    to block until an AWS resource reaches a given state
    (`issue 992 &lt;https://github.com/aws/aws-cli/pull/992&gt;`__,
    `issue 985 &lt;https://github.com/aws/aws-cli/pull/985&gt;`__)
  + bugfix:``aws s3``: Fix issue where request was not properly signed
    on retried requests for ``aws s3``
    (`issue 986 &lt;https://github.com/aws/aws-cli/issues/986&gt;`__,
    `botocore issue 375 &lt;https://github.com/boto/botocore/pull/375&gt;`__)
  + bugfix:``aws s3``: Fix issue where ``--exclude`` and ``--include`` were
    not being properly applied when a s3 prefix was provided.
    (`issue 993 &lt;https://github.com/aws/aws-cli/pull/993&gt;`__)
  + feature:``aws cloudfront``: Adds support for wildcard cookie names and
    options caching.
  + feature:``aws route53``: Add further support for private dns and sigv4.
  + feature:``aws cognito-sync``: Add support for push sync.
  + bugfix:Pagination: Only display ``--page-size`` when an operation can be
    paginated
    (`issue 956 &lt;https://github.com/aws/aws-cli/pull/956&gt;`__)
  + feature:``--generate-cli-skeleton``: Generates a JSON skeleton to fill out
    and be used as input to ``--cli-input-json``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``--cli-input-json``: Runs an operation using a global JSON file
    that supplies all of the operation's arguments. This JSON file can
    be generated by ``--generate-cli-skeleton``.
    (`issue 963 &lt;https://github.com/aws/aws-cli/pull/963&gt;`_)
  + feature:``aws s3/s3api``: Show hint about using the correct region when
    the corresponding error occurs
    (`issue 968 &lt;https://github.com/aws/aws-cli/pull/968&gt;`__)</changelog>
<changelog author="rjschwei@suse.com" date="1432641600">- update to version 1.7.29 (bnc#905354)
  + Follow up to previous update to address compatibility with latest
    amazon-ecs-agent
  + From 1.7.28
  - feature:aws ec2: Add support for Spot Fleet.
  - feature:aws opsworks: Add support for custom AutoScaling.
  - feature:aws elasticbeanstalk: Update model to latest version.
  + From 1.7.27
  - feature:aws ds: Add support for AWS Directory Service.
  - feature:aws ec2: Add support for VPC endpoints for Amazon S3.
  - feature:aws ec2: Add support for EIP Migration.
  - feature:aws logs: Add support for filtering log events.
  + From 1.7.26
  - feature:aws glacier: Add support for vault policies.
  - bugfix:aws iam create-open-id-connect-provider: Fix issue where the
  - -url parameter would try to retrieve the contents from the url instead
    of use the url as its value. (issue 1317)
  - bugfix:aws workspaces: Fix issue where throttling errors were not
    being retried (botocore issue 529)
  + From 1.7.25
  - feature:aws dynamodb query: Add support for KeyConditonExpression.
  + From 1.7.24
  - feature:aws help topics: Add support for listing available help topics.
  - feature:aws help config-vars: Add help topic for configuration variables.
  - feature:aws help return-codes: Add help topic for return codes.
  - feature:aws help s3-config: Add help topic for configuration of s3
    commands.
  - bugfix:aws lambda create-function/update-function-code: Improve
    error message when invalid --zip-file values are provided (issue 1296)
  - feature:aws ec2: Add support for new VM Import APIs, including
    import-image. The new APIs provide support for importing multi-volume
    VMs to Amazon EC2 and other enhancements.
  - feature:aws iam: Update AWS IAM command to latest version
  + From 1.7.23
  - feature:aws cognito-sync: Add support for Amazon Cognito Events.
  - bugfix:Parsing: Treat empty XML nodes in a response as an empty
    string instead of None if the underlying structure member is a string.
    This fixes the broken password-data-available Amazon EC2 waiter. Note:
    this changes the output of the CLI and may affect filtering with the
  - -query parameter. (issue 1252, botocore issue 506)
  + From 1.7.22
  - bugfix:aws ecs: Minor documentation fixes.
  + From 1.7.21
  - feature:aws workspaces: Add support for Amazon WorkSpaces.
  - feature:aws machinelearning: Add support for Amazon Machine Learning.
  - feature:aws s3api: Add support for specifying Lambda bucket
    notifications without needing to specify an invocation role.
  - feature:aws lambda: Update to latest api.
  - feature:aws ecs: Add support for Amazon ECS Service scheduler.
  + From 1.7.20
  - feature:aws datapipeline: Add support for deactivating pipelines.
  - feature:aws elasticbeanstalk: Add support for cancelling in-progress
    environment updates or application version deployment.
  + From 1.7.19
  - feature:aws codedeploy: Add register, deregister, install, and
    uninstall commands and update to the latest AWS CodeDeploy API.
  - feature:aws rds: Add support for describe-certificates.
  - feature:aws elastictranscoder: Add support for PlayReady DRM.
  - feature:aws ec2: Add support for D2 instances.
  + From 1.7.18
  - bugfix:Pagination: Fix issue where disabling pagination did not work
    when shadowing arguments. Affects commands such as aws route53
    list-resource-record-sets.
  - feature:aws elastictranscoder: Add support for job timing and
    input/output metadata
  - feature:aws iam: Add NamedPolicy to GetAccountAuthorization details
  - feature:aws opsworks: Allow for BlockDeviceMapping on EC2 instances
    launched through OpsWorks
  + From 1.7.17
  - feature:aws emr: Adds support for Amazon S3 client-side encryption
    in Amazon EMR and setting configuration values for several variables
    in the create-cluster and ssh commands. Also, the create-default-roles
    command will now auto-populate the Service Role and Instance Profile
    variables in the configuration file with the default roles after they
    are created.
  + From 1.7.16
  - feature:aws ec2 wait image-available: Add support for polling until
    an EC2 image is available (issue 1105)
  - feature:aws ec2 wait: Add support for additional EC2 waiters including
    instance-status-ok, password-data-available,
    spot-instance-request-fulfilled, and system-status-ok
  - feature:aws s3api: Add support for Amazon S3 cross region replication
  - feature:aws s3api: Add support for Amazon S3 requester pays (issue 797)
  - bugfix:Tab Completion: Fix issue where tab completion could not handle
    an LC_CTYPE of UTF-8 (issue 1233)
  - bugfix:aws s3api put-bucket-notification: Fix issue where an empty
    notification configuration could not be specified (botocore issue 495)
  - bugfix:aws cloudfront: Fix issue when calling cloudfront commands
    (issue 1234)
  - bugfix:aws ec2 copy-snapshot: Fix issue with the aws ec2 copy-snapshot
    command not correctly generating the presigned url argument
    (botocore issue 498)
  + From 1.7.15
  - feature:aws elastictranscoder: Add support for Applied Color
    SpaceConversion.
  - bugfix:aws --profile: Fix issue where explicitly specifying profile
    did not override credential environment variables. (botocore issue 486)
  - bugfix:aws datapipeline list-runs: Fix issue with --schedule-interval
    parameter. (issue 1225)
  - bugfix:aws configservice subscribe: Fix issue where users could not
    subscribe to a s3 bucket that they had no HeadBucket permissions to.
    (issue 1223)
  - bugfix:aws cloudtrail create-subscription: Fix issue where command
    would try to fetch the contents at a url using the contents of the
    custom policy as the url. (issue 1216)
  + From 1.7.14
  - feature:aws logs: Update aws logs command to the latest model.
  - feature:aws ec2: Add paginators for the describe-snapshots sub-command.
  - feature:aws cloudtrail: Add support for the new lookup-events
    sub-command.
  - bugfix:aws configure set: Fix issue when setting nested configuration
    values
  - feature:aws s3: Add support for --metadata-directive that allows
    metadata to be copied or replaced for single part copies. (issue 1188)
  + From 1.7.13
  - feature:aws cloudsearch: Update aws cloudsearch command to the latest
    model
  - feature:aws cognito-sync: Update aws cognito-sync command to allow
    customers to receive near-realtime updates as their data changes as
    well as exporting historical data. Customers configure an Amazon
    Kinesis stream to receive the data which can then be processed and
    exported to other data stores such as Amazon Redshift.
  - bugfix:aws opsworks: Fix issue with platform detection on linux
    systems with python3.3 and higher (issue 1199)
  - feature:Help Paging: Support paging through more when running help
    commands on windows (issue 1195)
  - bugfix:aws s3: Fix issue where read timeouts were not retried.
    (issue 1191)
  - feature:aws cloudtrail: Add support for regionalized policy templates
    for the create-subscription and update-subscription commands.
    (issue 1167)
  - bugfix:parsing: Fix issue where if there is a square bracket inside
    one of the values of a list, the end character would get removed.
    (issue 1183)
  + From 1.7.12
  - feature:aws datapipeline: Add support for tagging.
  - feature:aws route53: Add support for listing hosted zones by name
    and getting the hosted zone count.
  - bugfix:aws s3 sync: Remove --recursive parameter. The sync command is
    always a recursive operation meaning the inclusion or exclusion of
  - -recursive had no effect on the sync command. (issue 1171)
  - bugfix:aws s3: Fix issue where --endpoint-url was being ignored
    (issue 1142)
  + From 1.7.11
  - bugfix:aws sts: Allow calling assume-role-with-saml without credentials.
  - bugfix:aws sts: Allow users to make regionalized STS calls by
    specifying the STS endpoint with --endpoint-url and the region with
  - -region. (botocore issue 464)
  + From 1.7.10
  - bugfix:aws sts: Fix regression where if a region was not activated
    for STS it would raise an error if call was made to that region.
  + From 1.7.9
  - feature:aws cloudfront: Update to latest API
  - feature:aws sts: Add support for STS regionalized calls
  - feature:aws ssm: Add support for Amazon Simple Systems Management
    Service (SSM)
  + From 1.7.8
  - bugfix:aws s3: Fix auth errors when uploading large files to the
    eu-central-1 and cn-north-1 regions (botocore issue 462)
  + From 1.7.7
  - bugfix:aws ec2 revoke-security-group-ingress: Fix parsing of a
  - -port value of ICMP echo request (issue 1075)
  - feature:aws iam: Add support for managed policies
  - feature:aws elasticache: Add support for tagging
  - feature:aws route53domains: Add support for tagging of domains
  + From 1.7.6
  - feature:aws dynamodb: Add support for index scan
  - bugfix:aws s3: Fix issue where literal value for --website-redirect
    was not being used. (issue 1137)
  - bugfix:aws sqs purge-queue: Fix issue with the processing of the
  - -queue-url parameter (issue 1126)
  - feature:aws s3: Add support for config variable for changing S3 runtime
    values (issue 1122)
  - bugfix:Proxies: Fix issue with SSL certificate validation when using
    proxies and python 2.7.9 (botocore issue 451)
  + From 1.7.5
  - bugfix:aws datapipeline list-runs: Fix issue where --status values
    where not being serialized correctly (issue 1110)
  - bugfix:Output Formatting: Handle broken pipe errors when piping the
    output to another program (issue 1113)
  - bugfix:HTTP Proxy: Fix issue where aws s3/s3api commands would hang
    when using an HTTP proxy (issue 1116)
  - feature:aws elasticache wait: Add waiters for the aws elasticache
    wait (botocore issue 443)
  - bugfix:Locale Settings: Fix issue when Mac OS X has an LC_CTYPE value
    of UTF-8 (issue 945)
  + From 1.7.4
  - feature:aws dynamodb: Add support for online indexing.
  - feature:aws importexport get-shipping-label: Add support for
    get-shipping-label.
  - feature:aws s3 ls: Add --human-readable and --summarize options
    (issue 1103)
  - bugfix:aws kinesis put-records: Fix issue with base64 encoding for
    blob types (botocore issue 413)
  + From 1.7.3
  - feature:aws emr: Add support for security groups.
  - feature:aws cognitio-identity: Enhance authentication flow by beingi
    able to save associations of IAM roles with identity pools.
  + From 1.7.2
  - feature:aws autoscaling: Add ClassicLink support.
  - bugfix:aws s3: Fix issue where mtime was set before file was finished
    downloading. (issue 1102)</changelog>
<changelog author="rjschwei@suse.com" date="1433160000">- update to version 1.7.31 (bnc#905354)
  - Follow up to previous update to address API compatibility issues
    with botocore
  - Improved lambda support
  - Add support for uploading code using Amazon S3
  - Preview services are now documented
    and will also show up in the list of available services
  + From 1.7.30
  - Add support for ``aws efs``
  - Add paginators and waiters for ``aws ecs``</changelog>
<changelog author="ms@suse.com" date="1438344000">- update to version 1.7.42 (fate#318337)
  - feature:``aws opsworks``: Add support for managing Amazon ECS
  - feature:``aws rds``: Add support for Amazon Aurora
  - feature:``aws s3api``: Add support for more types of event notifications.
  - feature:``aws s3api``: Add support for GET/HEAD storage class response
  - feature:``aws logs``: Add destination API support.
  - feature:``aws glacier``: Add support for Vault Lock.
  - feature:``aws emr``: Add support for release-based clusters.
  - feature:``aws ecs``: Update API</changelog>
<changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.8.12 (bsc#949877)
  + feature:aws iot: Add support for AWS IoT
  + feature:aws iot-data: Add support for AWS IoT Data Plane
  + feature:aws lambda: Add support for aliasing and function versioning
  + feature:aws ecs: Update commands
  + feature:aws marketplacecommerceanalytics: Add support for AWS
    Marketplace Commerce Analytics
  + feature:aws firehose: Add support for Amazon Kinesis Firehose
  + feature:aws inspector: Add support for Amazon Inspector
  + feature:aws kinesis: Add support for updating stream retention periods
  + feature:aws configservice: Add support for config rules
  + feature:aws waf: Add support for AWS WAF
  + feature:aws ec2: Add support for spot blocks
  + feature:aws cloudfront: Add support for adding Web ACLs to CloudFront
    distributions
  + feature:aws es: Adds support for the new Amazon Elasticsearch
  + feature:aws cloudtrail: Adds support for log file integrity validation,
    log encryption with AWS KMS-Managed Keys (SSE-KMS), and trail tagging.
  + feature:aws rds create-db-instance: --db-instance-class has a new value
    as db.t2.large
  + feature:aws workspaces: Adds support for volume encryption in Amazon
    WorkSpaces.
  + feature:aws ses: Adds 17 new operations for accepting incoming emails.
  + feature:aws cloudformation describe-account-limits: This is a new API.
  + feature:aws ec2 modify-spot-fleet-request: This is a new API.
  + bugfix:aws elasticbeanstalk: Documentation update.
  + feature:aws cognito-sync: Update API to latest version
  + feature:aws cognito-identity: Update API to latest version
  + bugfix:Assume Role Provider: Fix issue where profile does not exist
    errors were not being propogated back to the user (issue 1515)
  + bugfix:Shorthand Syntax: Fix parser regression when a key name has an
    underscore character (issue 1510)
  + feature:aws s3: Add support for STANDARD_IA storage class to the aws s3
    commands (issue 1511)
  + feature:aws logs: Add support for create-export-task, cancel-export-task,
    and describe-export-tasks.
  + bugfix:Output: Only omit printing response to stdout if the response is
    an empty dictionary (issue 1496)
  + feature:aws s3/s3api: Update Amazon S3 commands to the latest version
  + feature:aws ec2 request-spot-fleet: Add new Diversified bidding strategy
    parameter
  + feature:aws ec2 describe-snapshots: Add new dataEncryptionKeyId and
    StateMessage parameters
  + feature:aws efs describe-mount-targets: Add new optional MountTargetId
    parameter
  + feature:aws route53: Add calculated health checks and latency health checks
  + bugfix:StreamingBody: File-like object for HTTP response can now be
    properly closed
  + feature:aws iam: Add two new APIs that enable programmatic access to
    the IAM policy simulator
  + feature:aws importexport: Documentation update
  + bugfix:aws machinelearning: Remove a constraint
  + feature:aws kinesis get-records: Add a timestamp field to all Records
  + bugfix:aws cloudfront: Add paginators and waiters
  + feature:aws storagegateway: Add support for resource tagging.
  + feature:aws ec2 request-spot-fleet: Add support for new request config
    parameters
  + bugfix:Shorthand Parser: Fix regression where '-' character was not
    accepted as a key name in a shorthand value (issue 1470)
  + bugfix:Shorthand Parser: Fix regression where spaces in unquoted
    values were not being accepted (issue 1471)
  + feature:aws configservice: Add support for listing discovered resources
  + bugfix:aws emr create-default-roles: Fix the issue where the command
    would fail to honor an existing AWS_CA_BUNDLE environment setting and
    end up with "SSLError: object has no attribute" (issue 1468)
  + feature:Shorthand Syntax: Add support for nested hashes when using
    shorthand syntax (issue 1444)
  + feature:aws codepipeline: Add support for specification of an encryption
    key to use with the artifact bucket, when creating and updating a pipeline
  + feature:aws s3: Add support for event notification filters
  + bugfix:aws iam create-virtual-mfa-device: Fix issue when an error
    response is received from the create-virtual-mfa-device command (issue 1447)
  + feature:aws elasticbeanstalk: Add support for enhanced health reporting
    in aws elasticbeanstalk commands
  + feature:Shared Credentials File: Add support for changing the shared
    credentials file from the default location of ~/.aws/credentials
    by setting the AWS_SHARED_CREDENTIALS_FILE environment variable
    (botocore issue 623)
  + feature:Waiters: Add aws iam wait instance-profile-exists and aws
    iam wait user-exists commands (botocore issue)
  + feature:aws swf: Add support for Added support for invoking AWS
    Lambda tasks from an Amazon SWF workflow.
  + feature:aws devicefarm: Add support for testing iOS applications
    with AWS Device Farm.</changelog>
<changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.9.12 (bsc#958686)
  + feature:aws configure add-model: Added command for updating commands
    in the CLI and clients in boto3. (issue 1664)
  + feature:aws cloudfront create-invalidation: Add a new --paths option.
    (issue 1662)
  + feature:aws cloudfront sign: Add a new command to create a signed url.
    (issue 1668)
  + feature:aws autoscaling: Added support for protecting instances from
    scale-in events.
  + feature:aws rds: Added support for Aurora encryption at rest.
- From version 1.9.11
  + feature:aws rds: Added support for specifying port number.
  + feature:aws ds: Added support for Microsoft ActiveDirctory.
  + feature:aws route53: Added support for TrafficFlow, a new management
    and modeling layer for Route53.
  + feature:Timeouts: Added additonal options for configuring socket timeouts.
- From version 1.9.10
  + feature:aws config: Added support for dedicated hosts.
  + feature:aws s3: Added support for custom metadata in cp, mv, and sync.
- From version 1.9.9
  + feature:aws s3api: Added support for the aws-exec-read canned ACL on
    objects.
  + feature:aws elasticbeanstalk: Added support for composable web applications.
  + feature:aws ec2: Added support for EC2 dedicated hosts.
  + feature:aws ecs: Added support for task stopped reasons and task start
    and stop times.
- From version 1.9.8
  + feature:Read Timeouts: Add --cli-read-timeout to specify the number of
    seconds until a read times out.
  + bugfix:aws s3: Fix regression when downloading a restored Glacier object
    (issue 1650 &lt;https://github.com/aws/aws-cli/pull/1650&gt;__)
  + bugfix:aws s3: Fix issue when encountering "out of disk space" errors as
    well as permissions errors when downloading large files (issue 1645,
    issue 1442)
  + bugfix:aws opsworks register: Support --no-verify-ssl argument for the
    aws opsworks register command (issue 1632)
  + feature:s3: Add support for Server-Side Encryption with KMS and
    Server-Side Encryption with Customer-Provided Keys. (issue 1623)
- From version 1.9.7
  + feature:aws rds: Cross account snapshot sharing and Modify DB Instance
    Visibility features
  + bugfix:memory management: Resolve a potential memory leak when creating
    lots of clients on Python 2.6 and Linux 2.6
  + bugfix:presign url: Now generate_presigned_url() works correctly with
    different expiry time
- From version 1.9.6
  + bugfix:shorthand: Allow . as a valid key character. (issue 1628)
  + feature:aws apigateway: Support for stage variables to configure
    the different deployment stages
- From version 1.9.5
  + bugfix:aws help: Gracefully handle Ctrl-C interrupts. (issue 1619)
  + bugfix:aws datapipeline create-default-roles: Fix issue with error
    handling. (issue 1618)
  + bugfix:aws s3: Skip glacier objects when downloading from S3. (issue 1581)
  + feature:aws s3api: Auto-populate --copy-source-sse-customer-key-md5
    (botocore issue 709)
- From version 1.9.4
  + feature:aws datapipeline create-default-roles: Creates default IAM
    roles for creating EMR clusters. (issue 1616)
  + feature:aws devicefarm: Add commands for updating and deleting projects,
    device pools, uploads, and runs.
- From version 1.9.3
  + feature:aws iam: Add support for resource-level policy simulation
- From version 1.9.2
  + bugfix:aws s3: Fix some local path validation issues (issue 1575)
  + bugfix:aws storagegateway: Fix --tape-ar-ns, --volume-ar-ns, and
  - -vtl-device-ar-ns to --tape-arns, --volume-arns, and --vtl-device-arns,
    respectively. The old arguments are still supported for backwards
    compatibility, but are no longer documented. (issue 1599)
  + bugfix:aws configservice subscribe: Fix an issue when creating a new
    S3 bucket (issue 1593)
  + bugfix:aws apigateway put-integration: Fix issue with --uri and
  - -integration-http-method parameters (issue 1605)
- From version 1.9.1
  + feature:aws ssm: Add support for Amazon EC2 Run Command
  + feature:aws apigateway: Add support for Amazon API Gateway
- From version 1.9.0
  + feature:aws iam: Add policy simulator support
  + feature:aws autoscaling: Add support for launch configurations
    that include encrypted Amazon Elastic Block Store (EBS) volumes
  + feature:configure: Add support for ca_bundle config variable
  + feature:Assume Role: Add role_session_name config variable to control
    the RoleSessionName when assuming roles (issue 1389)
  + bug:Argument Parsing: Handle case when empty list parameter was
    specified with no value (issue 838)
- From version 1.8.13
  + feature:aws deploy: Compress zip files when using aws deploy push
    (issue 1534 &lt;https://github.com/aws/aws-cli/pull/1534&gt;--)
  + bugfix:Shorthand Parser: Fix issue when display error message for
    multiline shorthand syntax values (issue 1543)
  + bugfix:aws route53: Automatically retry Throttling and
    PriorRequestNotComplete errors (botocore issue 682)
  + feature:aws s3/s3api: Add support for changing the bucket addressing
    style (botocore issue 673)
  + bugfix:aws s3api: Add missing --server-side-encryption option to
    upload-part command
  + feature:aws kms: Add ability to delete customer master keys (CMKs)</changelog>
<changelog author="rjschwei@suse.com" date="1460376000">- Update to version 1.10.19 (bsc#974993)
  + forward port hide_py_pckgmgmt.patch
  + feature:lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:ds: Added support for Directory Service Conditional Forwarder APIs.
  + feature:elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting token
    format.
- From 1.10.18
  + feature:apigateway: Added support for API Import
  + feature:route53: Added support for metric-based health checks and
    regional health checks.
  + feature:sts: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include name
    and account, as well as the type of entity making the call, such as an
    IAM user vs. federated user.
  + feature:s3api: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:s3api: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
- From 1.10.17
  + feature:acm: Update command to latest version
  + feature:cloudformation: Update command to latest version
  + feature:codedeploy: Update command to latest version
  + feature:dms: Update command to latest version
  + feature:elasticache: Update command to latest version
  + feature:elasticbeanstalk: Update command to latest version
  + feature:redshift: Update command to latest version
  + feature:waf: Update command to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginated command (botocore issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (botocore issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4
    (botocore issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502
    (botocore issue 853)
  + bugfix:ec2 run-instances: Fix issue when providing
  - -secondary-private-ip-address-count argument (issue 1874)
- From 1.10.16
  + feature:elasticache: Update command to latest version
  + feature:rds: Update command to latest version
  + feature:storagegateway: Update command to latest version
- from 1.10.15
  + feature:aws devicefarm: Add support to pay a flat monthly fee for
    unlimited testing of your Android and iOS apps with AWS Device Farm
    device slots
  + feature:aws rds: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
- From 1.10.14
  + feature:meteringmarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:s3api: Added support for delete marker and abort multipart
    upload lifecycle configuration.
  + feature:iot: Added support for Amazon Elasticsearch Service and
    Amazon Cloudwatch actions for the AWS IoT rules engine.
  + feature:cloudhsm: Added support for tagging resources.
- From 1.10.13
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints to latest version
  + bugfix:groff: Fix groff command which was causing issues on some systems
  + bugfix:shorthand: Allow # in keys in the shorthand parser
- From 1.10.12
  + feature:gamelift: Update command to latest version
  + feature:iam: Update command to latest version
  + feature:redshift: Update command to latest version
- From 1.10.11
  + feature:acm: Update acm command to latest version
  + feature:codecommit: Update codecommit model to latest version
  + feature:config: Update config command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:events: Update events command to latest version
  + bugfix:aws s3 cp: Add error checking when attempting recursive copies
    or syncs with streaming output (issue 1771)
- From 1.10.10
  + feature:aws ec2: Add support for VPC peering with security groups.
  + feature:aws ds: Add support for SNS event notifications.
  + bugfix:aws s3 rb: Fix issue where bucket is still attempted to be
    removed when the preceding delete requests failed. (issue 1827)
  + bugfix:aws storagegateway: Fix issue in aliasing required args.
    (issue 1790)
- From 1.10.9
  + bugfix:aws s3: Avoid MD5 checksumming if unavailable. (issue 1812)
  + feature:aws dynamodb: Add support for describing limits.
  + feature:aws apigateway: Add support for testing invoke authorizers
    and flushing stage authorizers cache.
  + feature:aws cloudsearchdomain: Add support for new stat fields.
- From 1.10.8
  + bugfix:aws s3: Disable use of MD5 when SHA256 checksum is already
    calculated for the body (botocore issue 804)
  + bugfix:FIPS: Handle case where MD5 cipher is not available on FIPS
    compliant systems (botocore issue 807)
  + feature:aws cloudformation: Update AWS CloudFormation command to the
    latest version
  + feature:aws logs: Update Amazon CloudWatch Logs command to the latest
    version
  + feature:aws ses: Update Amazon SES to the latest version
  + feature:aws autoscaling: Update Auto Scaling to the latest version
- From 1.10.7
  + bug:aws configure set: Fix issue when adding entries to an empty
    profile section (issue 1806)
  + feature:aws route53: Add suport for SNI health checks
- From 1.10.6
  + feature:aws storagegateway: Added support for user-supplied barcodes.
  + feature:aws codedeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:aws emr: Fix missing dns name issue with private clusters.
    (issue 1749)
  + bugfix:aws emr: Fix issue where impala args were not joined with commas.
    (issue 1802)
- From 1.10.5
  + feature:aws rds: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:aws emr: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Fixed a bug that was causing non-string service
    tokens to fail on serialization
- From 1.10.4
  + feature:aws lambda: Add support for accessing resources in your VPC.
  + feature:aws apigateway: Add support for custom request authorizers.
- From 1.10.3
  + feature:aws cloudfront: Add support for new ACMCertificateARN parameter
  + feature:aws marketplacecommerceanalytics generate-data-set: Add support
    for --customer-defined-values parameter
- From 1.10.2
  + feature:aws gamelift: Add support for AWS GameLift
  + bugfix:Assume Role: Fix issue where temporary credentials from assuming
    a role were not being properly cached (issue 1684)
- From 1.10.1
  + feature:aws waf: Add support for blocking, allowing, or monitoring
    (count) requests based on the content in HTTP request bodies.
  + bugfix:aws ssm: Remove constraint on Amazon EC2 instance id's.
    (issue 1729)
- From 1.10.0
  + feature:aws acm: adds support for AWS Certificate Manager
  + feature:aws cloudfront: adds support for AWS Certificate Manager
    certificates
  + feature:aws cloudfront create-distribution: Adds support for
  - -origin-domain-name and --default-root-object
  + feature:aws cloudfront update-distribution: Adds support for
  - -default-root-object
  + feature:aws iot: adds support for topic rules
  + feature:aws cloudformation: adds suport for ContinueUpdateRollback
- From 1.9.21
  + feature:aws sts: now returns RegionDisabledException instead of
    AccessDenied when a user sends an API request to an STS regional
    endpoint that is not activated for that AWS account. This enables
    customers to more easily decide how to respond, such as by trying to
    call a different region instead of simply failing the call.
  + feature:aws opsworks: adds support for new enums.
  + feature:aws devicefarm: adds support running Appium tests written in
    Python against your native, hybrid and browser-based apps on AWS Device
    Farm.
- From 1.9.20
  + bugfix:aws cloudfront: Fix regression in waiters.
- From 1.9.19
  + feature:aws events: Initial support for Amazon CloudWatch Events.
    CloudWatch Events allows you to track changes to your AWS resources
    with less overhead and greater efficiency.
  + feature:aws ec2: Adds support for purchasing reserved capacity for
    specific blocks of time on a one-time of recurring basis.
  + feature:aws cloudfront: Adds support for HTTPS-only connections, and
    control of edge-to-origin request headers.
  + bugfix:aws s3: Gracefully handle encoding errors when printing S3
    keys (issue 1719)
- From 1.9.18
  + feature:aws ec2: Enables support for DNS resolution of public hostnames
    to private IP addresses when queried over ClassicLink. Additionally, you
    can now access private hosted zones associated with your VPC from a
    linked EC2-Classic instance. ClassicLink DNS support makes it easier
    for EC2-Classic instances to communicate with VPC resources using public
    DNS hostnames.
  + feature:aws ec2: Add support for the new 63-bit EC2 Instance and
    Reservation IDs.
- From 1.9.17
  + bugfix:aws ssm: Documentation update.
- From 1.9.16
  + feature:aws ec2: Add new EC2 instance type: t2.nano
  + feature:aws datapipeline list-runs: Add support for output format
- From 1.9.15
  + feature:aws ecr: Add aws ecr commands
  + feature:aws emr: Update aws emr create-cluster to accept Amazon EC2
    security group
  + feature:aws ecs: Update ecs command to include a new deployment option
- From 1.9.14
  + feature:aws rds: Adds Enhanced Monitoring support so that you can
    monitor operating system metrics for your RDS DB instances
  + feature:aws configservice: Support for IAM resource types
  + feature:aws cloudtrail: Adds isMultiRegion to some of the commands
  + feature:aws cloudfront: Adds support for gzip
  + feature:aws ec2: Adds new commands for VPC Managed NAT
- From 1.9.13
  + feature:aws ec2 copy-image: Adds two optional parameters to support
    launching EC2 instances with EBS encrypted boot volumes.
  + bugfix:aws: Fix regression when using AWS_DATA_PATH environment
    variable (issue 736)</changelog>
<changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.10.38 (bsc#985858)
  + forward port hide_py_pckgmgmt.patch
  + feature:acm: Update acm command to latest version
  + feature:ses: Update ses command to latest version
  + feature:rds: Update rds command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.37
  + feature:s3: Update s3 command to latest version
- From 1.10.36
  + feature:dynamodbstreams: Update dynamodbstreams command to latest version
  + feature:machinelearning: Update machinelearning command to latest version
  + feature:iot: Update iot command to latest version
  + bugfix:Pagination: Fix regression with --no-paginate introduced in
    [#1958] (fixes #1993)
- From 1.10.35
  + feature:ec2: Update ec2 command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.10.34
  + feature:elasticache: Update elasticache command to latest version
- From 1.10.33
  + feature:rds: Update rds command to latest version
  + feature:ec2: Update ec2 command to latest version
  + bugfix:help: Write help content to stdout if less is not installed.
    Fixes #1957
- From 1.10.32
  + feature:firehose: Update firehose command to latest version
  + bugfix:Table: Fix rendering of tables with double-width characters.
  + feature:ec2: Update ec2 command to latest version
  + feature:ecs: Update ecs command to latest version
- From 1.10.31
  + feature:application-autoscaling: Adds support for Application Auto Scaling.
    Application Auto Scaling is a general purpose Auto Scaling service for
    supported elastic AWS resources. With Application Auto Scaling, you can
    automatically scale your AWS resources, with an experience similar to
    that of Auto Scaling.
- From 1.10.29
  + feature:dynamodb: Update dynamodb command to latest version
  + bugfix:Shorthand: Remove back-compat shorthand features from new services.
  + bugfix:Paginator: Print a better error when pagination params are
    supplied along with no-paginate.
  + bugfix:ec2: Sets MaxResults to default value of 1000.
  + feature:workspaces: Update workspaces command to latest version
  + feature:discovery: Update discovery command to latest version
- From 1.10.28
  + feature:ec2: Update ec2 command to latest version
  + feature:ssm: Update ssm command to latest version
  + feature:discovery: Update discovery command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.10.27
  + feature:storagegateway: Update storagegateway command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:emr: Update emr command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:iam: Update iam command to latest version
- From 1.10.26
  + feature:kms: Update kms command to latest version
  + feature:sts: Update sts command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:ecs: Update ecs command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.25
  + feature:inspector: Update inspector command to latest version
  + feature:codepipeline: Update codepipeline command to latest version
  + bugfix:Configure: Fix issue causing prompts not to display on mintty.
    Fixes #1925
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
- From 1.10.24
  + feature:route53domains: Update route53domains command to latest version
  + feature:opsworks: Update opsworks command to latest version
- From 1.10.23
  + feature:ecr: Update ecr command to latest version
  + feature:acm: Update acm command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:sts: Update sts command to latest version
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.10.22
  + feature:emr: Add support for smart targeted resize feature
  + feature:iot: Add SQL RulesEngine version support
  + feature:acm: Add tagging support for ACM
- From 1.10.21
  + feature:aws ec2: Add support for two new EBS volume types
  + feature:aws cognito-idp: Add support for new service, aws cognito-idp
  + feature:aws kinesis: Update aws kinesis command to latest version
  + feature:aws elasticbeanstalk: Add support for automatic platform
    version upgrades with managed updates
  + feature:aws devicefarm: Update aws devicefarm command to latest version
  + feature:aws s3: Add support for Amazon S3 Transfer Acceleration
  + feature:aws firehose: Update firehose command to latest version
- From 1.10.20
  + feature:iot: Add commands for managing CA certificates.
  + bugfix:ec2 wait: Fix issues with waiting on incorrect error code.
  + bugfix:s3: Fix issue where multipart uploads were not being properly
    aborted after Cntrl-C. (issue 1905)</changelog>
<changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
<changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
<changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>

</package>
<package pkgid="2ee8943bea0766411046cacf863a33fd4e727d630fda4cc1d8598871aec743a7" name="backintime" arch="noarch">
    <version epoch="0" ver="1.1.20" rel="6.1"/>

<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomá? Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>
<changelog author="ecsos@schirra.net" date="1388664000">- Update to upstream version 1.0.34
  * sync/flush all disks before shutdown (https://bugs.launchpad.net/bugs/1261031)
  * Fix bug: BIT running as root shutdown after snapshot, regardless of option checked (https://bugs.launchpad.net/bugs/1261022)
- Update to upstream version 1.0.32
  * Fix bug: cron scheduled snapshots won't start with 1.0.30
- Update to upstream version 1.0.30
  * scheduled and manual snapshots use --config
  * make configure scripts portable (https://bugs.launchpad.net/backintime/+bug/377429)
  * Fix bug: udev rule doesn't finish (https://bugs.launchpad.net/backintime/+bug/1249466)
  * add symlink last_snapshot (https://bugs.launchpad.net/backintime/+bug/787118)
  * add virtual package backintime-kde for PPA
  * Fix multiple errors in PPA build process; reorganise updateversion.sh
  * Fix bug: Mate and xfce desktop didn't show systray icon (https://bugs.launchpad.net/backintime/+bug/658424/comments/31)
  * add option to run rsync with 'nice' or 'ionice' on remote host (https://bugs.launchpad.net/backintime/+bug/1240301)
  * add Shutdown button to shutdown system after snapshot has finished (https://bugs.launchpad.net/backintime/+bug/838742)
  * Fix bug: Ubuntu Lucid dosn't provide SecretServiceKeyring (https://bugs.launchpad.net/backintime/+bug/1243911)
  * wrap long lines for syslog
  * Fix bug: 'gksu backintime-gnome' failed with dbus.exceptions.DBusException</changelog>
<changelog author="kdupke@suse.com" date="1390219200">- added backintime-ssh-agent_only_if_password.patch, does not connect
  ssh-agent if password isn't set. Allow passwordless ssh-key as root.</changelog>
<changelog author="ecsos@schirra.net" date="1413115200">- update to 1.0.38
  * Fix bug: 'Attempt to unlock mutex that was not locked' in
    gnomeplugin (https://answers.launchpad.net/questions/255225)
  * compare os.path.realpath instead of os.stat to get devices UUID
  * Fix bug: housekeeping by gnome-session-daemon might delete
    backup and original data
    (https://bugs.launchpad.net/bugs/1374343)
  * Fix bug: Type Error in 'backintime --decode'
    (https://bugs.launchpad.net/bugs/1365072)
  * Fix bug: take_snapshot didn't wait for snapshot folder come
    available if notifications are disabled
    (https://bugs.launchpad.net/bugs/1332979)
- update from 1.0.34
  * remove UbuntuOne from exclude
    (https://bugs.launchpad.net/bugs/1340131)
  * Gray out 'Add Profile' if 'Main Profile' isn't configured yet
    (https://bugs.launchpad.net/bugs/1335545)
  * Don't check for fuse group-membership if group doesn't exist
  * Fix bug: backintime-kde4 as root failed to load ssh-key
    (https://bugs.launchpad.net/bugs/1276348)
  * Fix bug: kdesystrayicon.py crashes because of missing environ
    (https://bugs.launchpad.net/bugs/1332126)
  * Fix bug: OSError if sshfs/encfs is not installed
    (https://bugs.launchpad.net/bugs/1316288)
  * Fix bug: TypeError in config.py check_config()
    (https://bugzilla.redhat.com/show_bug.cgi?id=1091644)
  * Fix bug: unhandled exception in create_last_snapshot_symlink()
    (https://bugs.launchpad.net/bugs/1269991)
  * disable keyring for root</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Update Source URL</changelog>
<changelog author="ronisbr@gmail.com" date="1442404800">-  Version bump to 1.1 branch (1.1.6), based on home:ecsos:Backup/backintime.
  * The 1.1 branch introduced a new QT4 GUI that replaced the
    old KDE and GNOME GUI. Therefore, the pacakges backintime-gnome and
    backintime-kde were replaced by the package backintime-qt4. Thus, both
    backintime and backintime-qt4 do not depend on any GNOME or KDE packages
    anymore.
  * The package now depends on python3 instead of python.
  * The patch `backintime-ssh-agent_only_if_password.patch` was
    updated to replace TABs with SPACEs for code indentation following the
    convention of `common/sshtools.py`.
- Upstream changelog from version 1.0.38 to version 1.1.6.
    Version 1.1.6
  * show Profile name in systrayicon menu
  * Fix bug: encrypted remote backup hangs on 'start
    encfsctl encode process'
    (https://launchpad.net/bugs/1455925)
  * make own Exceptions a childclass from
    BackInTimeException
  * Fix bug: Segmentation fault caused by two QApplication
  * Fix bug: no Changes [C] log entries with 'Check for
  * Fix bug: some changed options from Settingsdialog where
  * Fix bug: python version check fails on python 3.3
  * Specifying the SSH private key whenever ssh is called
  * add to in-/exclude directly from mainwindow
  * Fix bug: pw-cache didn't start on Mint KDE because of missing stdout
  * add option to run Smart Remove in background on remote host
  * Fix bug: failed to restore file names with white spaces using CLI
  * Fix bug: UnboundLocalError with 'last_snapshot' in _free_space
    (https://launchpad.net/bugs/1437623)
    Version 1.1.4
  * add option to keep new snapshot with 'full rsync mode' regardless of
    changes (https://launchpad.net/bugs/1434722)
  * Fix bug: wrong quote in 'Save config file'
  * Fix bug: Deleting the last snapshot does not update the last_snapshot
    symlink (https://launchpad.net/bugs/1434724)
  * remove base64 encoding for passwords as it doesn't add any security
    but broke the password process (https://launchpad.net/bugs/1431305)
  * add confirm dialog before restoring
    (https://launchpad.net/bugs/438079)
  * Fix bug: Wrong status text in the tray icon
    (https://launchpad.net/bugs/1429400)
  * add option to run only one snapshot at a time
  * Fix bug: restore permissions of lots of files made BackInTime
    unresposive (https://launchpad.net/bugs/1428423)
  * Fix bug: failed to restore file owner and group
  * cache uuid in config so it doesn't fail if the device isn't pluged in
    (https://launchpad.net/bugs/1426881)
  * add warning about wrong Python version in configure
  * prevent snapshots from being removed with restore and delete; show
    warning if restore and delete filesystem root
    (https://answers.launchpad.net/questions/262837)
  * Fix bug: OSError in free_space; add alternate method to get free space
  * add bash-completion
  * Fix bug: ugly theme while running as root on Gnome based DEs
    (https://launchpad.net/bugs/1418447)
  * Fix bug: filename with broken charset throwed UnicodeError exception
    (https://launchpad.net/bugs/1419694)
  * use 'crontab' instead of 'crontab -' to read from stdin
    (https://launchpad.net/bugs/1419466)
    Version 1.1.2
  * sort 'Backup folders' in main window
  * save in- and exclude sort order
  * use PolicyKit to install Udev rules
  * move compression from install to build in Makefiles
  * use pkexec to start backintime-qt4 as root
    Version 1.1.0
  * add tooltips for rsync options
  * make only one debian/control
  * multiselect files to restore (https://launchpad.net/bugs/1135886)
  * force run manual snapshots on battery
    (https://launchpad.net/bugs/861553)
  * backup encfs config to local config folder
  * apply 'install-docs-move.patch' from Debian package by Jonathan
    Wiltshire
  * add restore option to delete new files during restore
    (https://launchpad.net/bugs/1371951)
  * use flock to prevent two instances running at the same time
  * restore config dialog added (https://launchpad.net/bugs/480391)
  * inhibit suspend/hibernate while take_snapshot or restore
  * use more reliable code for get_user
  * implement anacrons functions inside BIT =&gt; more flexible schedules and
    no new timestamp if there was an error
  * automatically run in background if started with
    'backintime --backup-job'
  * fix typos and style warnings in manpages reported by Lintian
    (https://lintian.debian.org/full/jmw@debian.org.html#backintime_1.0.34-0.1)
  * add exclude files by size (https://launchpad.net/bugs/823719)
  * remove 'Auto Host/User/Profile-ID' as this is more confiusing than
    helping
  * Fix bug: check procname of pid-locks
    (https://launchpad.net/bugs/1341414)
  * optional run 'rsync' with 'nocache'
    (https://launchpad.net/bugs/1344528)
  * mark invalid exclude pattern with mode ssh-encrypted
  * make Settingsdialog tabs scrollable
  * remove colon (:) restriction in exclude pattern
  * prevent starting new snapshot if restore is running
  * Fix bug: Port check failed on IPv6
    (https://launchpad.net/bugs/1361634)
  * add top-level directory for tarball
    (https://launchpad.net/bugs/1359076)
  * add more user-callback events (on App start and exit, on mount and
    unmount)
  * add context menu to files view
  * remove snapshots from commandline
  * multi selection in timeline =&gt; remove multiple snapshots with one
    click
  * print warning if started with sudo
  * add more default exclude; remove [Cc]ache* from exclude
  * Fix bug: 'inotify_add_watch failed' while closing BIT
  * add option for custom rsync-options
  * add ProgressBar for rsync
  * add progress for smart-remove
  * remove old status-bar message after a snapshot crashed.
  * ask to include symlinks target instead link
    (https://launchpad.net/bugs/1117709)
  * port to Python 3.x
  * returncode &gt;0 if there was an error
    (https://launchpad.net/bugs/1040995)
  * Enable user-callback script to cancel a backup by returning a non-zero
    exit code.
  * merge backintime-notify into backintime-qt4
  * add --gksu/--gksudo arg to qt4/configure
  * remember last path for each profile
    (https://bugs.launchpad.net/bugs/1254870)
  * sort include and exclude list
    (https://bugs.launchpad.net/bugs/1193149)
  * Timeline show tooltip 'Last check'
  * Fix bug: systray icon didn't show up
    (https://bugs.launchpad.net/backintime/+bug/658424)
  * show hidden files in FileDialog
    (https://bugs.launchpad.net/backintime/+bug/995925)
  * add button text for all buttons
    (https://bugs.launchpad.net/backintime/+bug/992020)
  * add shortcuts (https://bugs.launchpad.net/backintime/+bug/686694)
  * add menubar (https://bugs.launchpad.net/backintime/+bug/528851)
  * port KDE4 GUI to pure Qt4 to replace both KDE4 and Gnome GUI
    Version 1.0.40
  * use fingerprint to check if ssh key was unlocked correctly
    (https://answers.launchpad.net/questions/256408)
  * add fallback method to get UUID
    (https://answers.launchpad.net/questions/254140)
  * Fix bug: 'Attempt to unlock mutex that was not locked'... this time
    for good</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1492689600">- Update to upstream version 1.1.20
  * backport security fix: polkit CheckAuthorization: race condition in privilege authorization [CVE-2017-7572, boo#1032717]
  * see CHANGES file for details
- Don't store passwords given to polkit helper
  * backintime-polkit_priv_downgrade.patch
- Backport security hardening measures [boo#1007723]
  * backintime-security_hardening_backport.patch
- Fix Requires and BuildRequires
  * No longer requires xterm
  * Note: backintime requires python3-keyring (not py2), but not available in openSUSE yet
- Delete udev configuration files on uninstall
- Merge doc subpackage into main package</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1511006400">- Backport security fix: shell injection in notify-send [CVE-2017-16667, boo#1067342]
  * backintime-cve2017-16667.patch</changelog>

</package>
<package pkgid="a19ef7f40134b7ee7c2a003aada7537235d88cc783f1da9e73d3a49c7ccabb07" name="backintime" arch="src">
    <version epoch="0" ver="1.1.20" rel="6.1"/>

<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomá? Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>
<changelog author="ecsos@schirra.net" date="1388664000">- Update to upstream version 1.0.34
  * sync/flush all disks before shutdown (https://bugs.launchpad.net/bugs/1261031)
  * Fix bug: BIT running as root shutdown after snapshot, regardless of option checked (https://bugs.launchpad.net/bugs/1261022)
- Update to upstream version 1.0.32
  * Fix bug: cron scheduled snapshots won't start with 1.0.30
- Update to upstream version 1.0.30
  * scheduled and manual snapshots use --config
  * make configure scripts portable (https://bugs.launchpad.net/backintime/+bug/377429)
  * Fix bug: udev rule doesn't finish (https://bugs.launchpad.net/backintime/+bug/1249466)
  * add symlink last_snapshot (https://bugs.launchpad.net/backintime/+bug/787118)
  * add virtual package backintime-kde for PPA
  * Fix multiple errors in PPA build process; reorganise updateversion.sh
  * Fix bug: Mate and xfce desktop didn't show systray icon (https://bugs.launchpad.net/backintime/+bug/658424/comments/31)
  * add option to run rsync with 'nice' or 'ionice' on remote host (https://bugs.launchpad.net/backintime/+bug/1240301)
  * add Shutdown button to shutdown system after snapshot has finished (https://bugs.launchpad.net/backintime/+bug/838742)
  * Fix bug: Ubuntu Lucid dosn't provide SecretServiceKeyring (https://bugs.launchpad.net/backintime/+bug/1243911)
  * wrap long lines for syslog
  * Fix bug: 'gksu backintime-gnome' failed with dbus.exceptions.DBusException</changelog>
<changelog author="kdupke@suse.com" date="1390219200">- added backintime-ssh-agent_only_if_password.patch, does not connect
  ssh-agent if password isn't set. Allow passwordless ssh-key as root.</changelog>
<changelog author="ecsos@schirra.net" date="1413115200">- update to 1.0.38
  * Fix bug: 'Attempt to unlock mutex that was not locked' in
    gnomeplugin (https://answers.launchpad.net/questions/255225)
  * compare os.path.realpath instead of os.stat to get devices UUID
  * Fix bug: housekeeping by gnome-session-daemon might delete
    backup and original data
    (https://bugs.launchpad.net/bugs/1374343)
  * Fix bug: Type Error in 'backintime --decode'
    (https://bugs.launchpad.net/bugs/1365072)
  * Fix bug: take_snapshot didn't wait for snapshot folder come
    available if notifications are disabled
    (https://bugs.launchpad.net/bugs/1332979)
- update from 1.0.34
  * remove UbuntuOne from exclude
    (https://bugs.launchpad.net/bugs/1340131)
  * Gray out 'Add Profile' if 'Main Profile' isn't configured yet
    (https://bugs.launchpad.net/bugs/1335545)
  * Don't check for fuse group-membership if group doesn't exist
  * Fix bug: backintime-kde4 as root failed to load ssh-key
    (https://bugs.launchpad.net/bugs/1276348)
  * Fix bug: kdesystrayicon.py crashes because of missing environ
    (https://bugs.launchpad.net/bugs/1332126)
  * Fix bug: OSError if sshfs/encfs is not installed
    (https://bugs.launchpad.net/bugs/1316288)
  * Fix bug: TypeError in config.py check_config()
    (https://bugzilla.redhat.com/show_bug.cgi?id=1091644)
  * Fix bug: unhandled exception in create_last_snapshot_symlink()
    (https://bugs.launchpad.net/bugs/1269991)
  * disable keyring for root</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Update Source URL</changelog>
<changelog author="ronisbr@gmail.com" date="1442404800">-  Version bump to 1.1 branch (1.1.6), based on home:ecsos:Backup/backintime.
  * The 1.1 branch introduced a new QT4 GUI that replaced the
    old KDE and GNOME GUI. Therefore, the pacakges backintime-gnome and
    backintime-kde were replaced by the package backintime-qt4. Thus, both
    backintime and backintime-qt4 do not depend on any GNOME or KDE packages
    anymore.
  * The package now depends on python3 instead of python.
  * The patch `backintime-ssh-agent_only_if_password.patch` was
    updated to replace TABs with SPACEs for code indentation following the
    convention of `common/sshtools.py`.
- Upstream changelog from version 1.0.38 to version 1.1.6.
    Version 1.1.6
  * show Profile name in systrayicon menu
  * Fix bug: encrypted remote backup hangs on 'start
    encfsctl encode process'
    (https://launchpad.net/bugs/1455925)
  * make own Exceptions a childclass from
    BackInTimeException
  * Fix bug: Segmentation fault caused by two QApplication
  * Fix bug: no Changes [C] log entries with 'Check for
  * Fix bug: some changed options from Settingsdialog where
  * Fix bug: python version check fails on python 3.3
  * Specifying the SSH private key whenever ssh is called
  * add to in-/exclude directly from mainwindow
  * Fix bug: pw-cache didn't start on Mint KDE because of missing stdout
  * add option to run Smart Remove in background on remote host
  * Fix bug: failed to restore file names with white spaces using CLI
  * Fix bug: UnboundLocalError with 'last_snapshot' in _free_space
    (https://launchpad.net/bugs/1437623)
    Version 1.1.4
  * add option to keep new snapshot with 'full rsync mode' regardless of
    changes (https://launchpad.net/bugs/1434722)
  * Fix bug: wrong quote in 'Save config file'
  * Fix bug: Deleting the last snapshot does not update the last_snapshot
    symlink (https://launchpad.net/bugs/1434724)
  * remove base64 encoding for passwords as it doesn't add any security
    but broke the password process (https://launchpad.net/bugs/1431305)
  * add confirm dialog before restoring
    (https://launchpad.net/bugs/438079)
  * Fix bug: Wrong status text in the tray icon
    (https://launchpad.net/bugs/1429400)
  * add option to run only one snapshot at a time
  * Fix bug: restore permissions of lots of files made BackInTime
    unresposive (https://launchpad.net/bugs/1428423)
  * Fix bug: failed to restore file owner and group
  * cache uuid in config so it doesn't fail if the device isn't pluged in
    (https://launchpad.net/bugs/1426881)
  * add warning about wrong Python version in configure
  * prevent snapshots from being removed with restore and delete; show
    warning if restore and delete filesystem root
    (https://answers.launchpad.net/questions/262837)
  * Fix bug: OSError in free_space; add alternate method to get free space
  * add bash-completion
  * Fix bug: ugly theme while running as root on Gnome based DEs
    (https://launchpad.net/bugs/1418447)
  * Fix bug: filename with broken charset throwed UnicodeError exception
    (https://launchpad.net/bugs/1419694)
  * use 'crontab' instead of 'crontab -' to read from stdin
    (https://launchpad.net/bugs/1419466)
    Version 1.1.2
  * sort 'Backup folders' in main window
  * save in- and exclude sort order
  * use PolicyKit to install Udev rules
  * move compression from install to build in Makefiles
  * use pkexec to start backintime-qt4 as root
    Version 1.1.0
  * add tooltips for rsync options
  * make only one debian/control
  * multiselect files to restore (https://launchpad.net/bugs/1135886)
  * force run manual snapshots on battery
    (https://launchpad.net/bugs/861553)
  * backup encfs config to local config folder
  * apply 'install-docs-move.patch' from Debian package by Jonathan
    Wiltshire
  * add restore option to delete new files during restore
    (https://launchpad.net/bugs/1371951)
  * use flock to prevent two instances running at the same time
  * restore config dialog added (https://launchpad.net/bugs/480391)
  * inhibit suspend/hibernate while take_snapshot or restore
  * use more reliable code for get_user
  * implement anacrons functions inside BIT =&gt; more flexible schedules and
    no new timestamp if there was an error
  * automatically run in background if started with
    'backintime --backup-job'
  * fix typos and style warnings in manpages reported by Lintian
    (https://lintian.debian.org/full/jmw@debian.org.html#backintime_1.0.34-0.1)
  * add exclude files by size (https://launchpad.net/bugs/823719)
  * remove 'Auto Host/User/Profile-ID' as this is more confiusing than
    helping
  * Fix bug: check procname of pid-locks
    (https://launchpad.net/bugs/1341414)
  * optional run 'rsync' with 'nocache'
    (https://launchpad.net/bugs/1344528)
  * mark invalid exclude pattern with mode ssh-encrypted
  * make Settingsdialog tabs scrollable
  * remove colon (:) restriction in exclude pattern
  * prevent starting new snapshot if restore is running
  * Fix bug: Port check failed on IPv6
    (https://launchpad.net/bugs/1361634)
  * add top-level directory for tarball
    (https://launchpad.net/bugs/1359076)
  * add more user-callback events (on App start and exit, on mount and
    unmount)
  * add context menu to files view
  * remove snapshots from commandline
  * multi selection in timeline =&gt; remove multiple snapshots with one
    click
  * print warning if started with sudo
  * add more default exclude; remove [Cc]ache* from exclude
  * Fix bug: 'inotify_add_watch failed' while closing BIT
  * add option for custom rsync-options
  * add ProgressBar for rsync
  * add progress for smart-remove
  * remove old status-bar message after a snapshot crashed.
  * ask to include symlinks target instead link
    (https://launchpad.net/bugs/1117709)
  * port to Python 3.x
  * returncode &gt;0 if there was an error
    (https://launchpad.net/bugs/1040995)
  * Enable user-callback script to cancel a backup by returning a non-zero
    exit code.
  * merge backintime-notify into backintime-qt4
  * add --gksu/--gksudo arg to qt4/configure
  * remember last path for each profile
    (https://bugs.launchpad.net/bugs/1254870)
  * sort include and exclude list
    (https://bugs.launchpad.net/bugs/1193149)
  * Timeline show tooltip 'Last check'
  * Fix bug: systray icon didn't show up
    (https://bugs.launchpad.net/backintime/+bug/658424)
  * show hidden files in FileDialog
    (https://bugs.launchpad.net/backintime/+bug/995925)
  * add button text for all buttons
    (https://bugs.launchpad.net/backintime/+bug/992020)
  * add shortcuts (https://bugs.launchpad.net/backintime/+bug/686694)
  * add menubar (https://bugs.launchpad.net/backintime/+bug/528851)
  * port KDE4 GUI to pure Qt4 to replace both KDE4 and Gnome GUI
    Version 1.0.40
  * use fingerprint to check if ssh key was unlocked correctly
    (https://answers.launchpad.net/questions/256408)
  * add fallback method to get UUID
    (https://answers.launchpad.net/questions/254140)
  * Fix bug: 'Attempt to unlock mutex that was not locked'... this time
    for good</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1492689600">- Update to upstream version 1.1.20
  * backport security fix: polkit CheckAuthorization: race condition in privilege authorization [CVE-2017-7572, boo#1032717]
  * see CHANGES file for details
- Don't store passwords given to polkit helper
  * backintime-polkit_priv_downgrade.patch
- Backport security hardening measures [boo#1007723]
  * backintime-security_hardening_backport.patch
- Fix Requires and BuildRequires
  * No longer requires xterm
  * Note: backintime requires python3-keyring (not py2), but not available in openSUSE yet
- Delete udev configuration files on uninstall
- Merge doc subpackage into main package</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1511006400">- Backport security fix: shell injection in notify-send [CVE-2017-16667, boo#1067342]
  * backintime-cve2017-16667.patch</changelog>

</package>
<package pkgid="0380cb1c20146f30fec5f659793d333963e8575560eadff88e631afccab8db1c" name="backintime-lang" arch="noarch">
    <version epoch="0" ver="1.1.20" rel="6.1"/>

<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomá? Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>
<changelog author="ecsos@schirra.net" date="1388664000">- Update to upstream version 1.0.34
  * sync/flush all disks before shutdown (https://bugs.launchpad.net/bugs/1261031)
  * Fix bug: BIT running as root shutdown after snapshot, regardless of option checked (https://bugs.launchpad.net/bugs/1261022)
- Update to upstream version 1.0.32
  * Fix bug: cron scheduled snapshots won't start with 1.0.30
- Update to upstream version 1.0.30
  * scheduled and manual snapshots use --config
  * make configure scripts portable (https://bugs.launchpad.net/backintime/+bug/377429)
  * Fix bug: udev rule doesn't finish (https://bugs.launchpad.net/backintime/+bug/1249466)
  * add symlink last_snapshot (https://bugs.launchpad.net/backintime/+bug/787118)
  * add virtual package backintime-kde for PPA
  * Fix multiple errors in PPA build process; reorganise updateversion.sh
  * Fix bug: Mate and xfce desktop didn't show systray icon (https://bugs.launchpad.net/backintime/+bug/658424/comments/31)
  * add option to run rsync with 'nice' or 'ionice' on remote host (https://bugs.launchpad.net/backintime/+bug/1240301)
  * add Shutdown button to shutdown system after snapshot has finished (https://bugs.launchpad.net/backintime/+bug/838742)
  * Fix bug: Ubuntu Lucid dosn't provide SecretServiceKeyring (https://bugs.launchpad.net/backintime/+bug/1243911)
  * wrap long lines for syslog
  * Fix bug: 'gksu backintime-gnome' failed with dbus.exceptions.DBusException</changelog>
<changelog author="kdupke@suse.com" date="1390219200">- added backintime-ssh-agent_only_if_password.patch, does not connect
  ssh-agent if password isn't set. Allow passwordless ssh-key as root.</changelog>
<changelog author="ecsos@schirra.net" date="1413115200">- update to 1.0.38
  * Fix bug: 'Attempt to unlock mutex that was not locked' in
    gnomeplugin (https://answers.launchpad.net/questions/255225)
  * compare os.path.realpath instead of os.stat to get devices UUID
  * Fix bug: housekeeping by gnome-session-daemon might delete
    backup and original data
    (https://bugs.launchpad.net/bugs/1374343)
  * Fix bug: Type Error in 'backintime --decode'
    (https://bugs.launchpad.net/bugs/1365072)
  * Fix bug: take_snapshot didn't wait for snapshot folder come
    available if notifications are disabled
    (https://bugs.launchpad.net/bugs/1332979)
- update from 1.0.34
  * remove UbuntuOne from exclude
    (https://bugs.launchpad.net/bugs/1340131)
  * Gray out 'Add Profile' if 'Main Profile' isn't configured yet
    (https://bugs.launchpad.net/bugs/1335545)
  * Don't check for fuse group-membership if group doesn't exist
  * Fix bug: backintime-kde4 as root failed to load ssh-key
    (https://bugs.launchpad.net/bugs/1276348)
  * Fix bug: kdesystrayicon.py crashes because of missing environ
    (https://bugs.launchpad.net/bugs/1332126)
  * Fix bug: OSError if sshfs/encfs is not installed
    (https://bugs.launchpad.net/bugs/1316288)
  * Fix bug: TypeError in config.py check_config()
    (https://bugzilla.redhat.com/show_bug.cgi?id=1091644)
  * Fix bug: unhandled exception in create_last_snapshot_symlink()
    (https://bugs.launchpad.net/bugs/1269991)
  * disable keyring for root</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Update Source URL</changelog>
<changelog author="ronisbr@gmail.com" date="1442404800">-  Version bump to 1.1 branch (1.1.6), based on home:ecsos:Backup/backintime.
  * The 1.1 branch introduced a new QT4 GUI that replaced the
    old KDE and GNOME GUI. Therefore, the pacakges backintime-gnome and
    backintime-kde were replaced by the package backintime-qt4. Thus, both
    backintime and backintime-qt4 do not depend on any GNOME or KDE packages
    anymore.
  * The package now depends on python3 instead of python.
  * The patch `backintime-ssh-agent_only_if_password.patch` was
    updated to replace TABs with SPACEs for code indentation following the
    convention of `common/sshtools.py`.
- Upstream changelog from version 1.0.38 to version 1.1.6.
    Version 1.1.6
  * show Profile name in systrayicon menu
  * Fix bug: encrypted remote backup hangs on 'start
    encfsctl encode process'
    (https://launchpad.net/bugs/1455925)
  * make own Exceptions a childclass from
    BackInTimeException
  * Fix bug: Segmentation fault caused by two QApplication
  * Fix bug: no Changes [C] log entries with 'Check for
  * Fix bug: some changed options from Settingsdialog where
  * Fix bug: python version check fails on python 3.3
  * Specifying the SSH private key whenever ssh is called
  * add to in-/exclude directly from mainwindow
  * Fix bug: pw-cache didn't start on Mint KDE because of missing stdout
  * add option to run Smart Remove in background on remote host
  * Fix bug: failed to restore file names with white spaces using CLI
  * Fix bug: UnboundLocalError with 'last_snapshot' in _free_space
    (https://launchpad.net/bugs/1437623)
    Version 1.1.4
  * add option to keep new snapshot with 'full rsync mode' regardless of
    changes (https://launchpad.net/bugs/1434722)
  * Fix bug: wrong quote in 'Save config file'
  * Fix bug: Deleting the last snapshot does not update the last_snapshot
    symlink (https://launchpad.net/bugs/1434724)
  * remove base64 encoding for passwords as it doesn't add any security
    but broke the password process (https://launchpad.net/bugs/1431305)
  * add confirm dialog before restoring
    (https://launchpad.net/bugs/438079)
  * Fix bug: Wrong status text in the tray icon
    (https://launchpad.net/bugs/1429400)
  * add option to run only one snapshot at a time
  * Fix bug: restore permissions of lots of files made BackInTime
    unresposive (https://launchpad.net/bugs/1428423)
  * Fix bug: failed to restore file owner and group
  * cache uuid in config so it doesn't fail if the device isn't pluged in
    (https://launchpad.net/bugs/1426881)
  * add warning about wrong Python version in configure
  * prevent snapshots from being removed with restore and delete; show
    warning if restore and delete filesystem root
    (https://answers.launchpad.net/questions/262837)
  * Fix bug: OSError in free_space; add alternate method to get free space
  * add bash-completion
  * Fix bug: ugly theme while running as root on Gnome based DEs
    (https://launchpad.net/bugs/1418447)
  * Fix bug: filename with broken charset throwed UnicodeError exception
    (https://launchpad.net/bugs/1419694)
  * use 'crontab' instead of 'crontab -' to read from stdin
    (https://launchpad.net/bugs/1419466)
    Version 1.1.2
  * sort 'Backup folders' in main window
  * save in- and exclude sort order
  * use PolicyKit to install Udev rules
  * move compression from install to build in Makefiles
  * use pkexec to start backintime-qt4 as root
    Version 1.1.0
  * add tooltips for rsync options
  * make only one debian/control
  * multiselect files to restore (https://launchpad.net/bugs/1135886)
  * force run manual snapshots on battery
    (https://launchpad.net/bugs/861553)
  * backup encfs config to local config folder
  * apply 'install-docs-move.patch' from Debian package by Jonathan
    Wiltshire
  * add restore option to delete new files during restore
    (https://launchpad.net/bugs/1371951)
  * use flock to prevent two instances running at the same time
  * restore config dialog added (https://launchpad.net/bugs/480391)
  * inhibit suspend/hibernate while take_snapshot or restore
  * use more reliable code for get_user
  * implement anacrons functions inside BIT =&gt; more flexible schedules and
    no new timestamp if there was an error
  * automatically run in background if started with
    'backintime --backup-job'
  * fix typos and style warnings in manpages reported by Lintian
    (https://lintian.debian.org/full/jmw@debian.org.html#backintime_1.0.34-0.1)
  * add exclude files by size (https://launchpad.net/bugs/823719)
  * remove 'Auto Host/User/Profile-ID' as this is more confiusing than
    helping
  * Fix bug: check procname of pid-locks
    (https://launchpad.net/bugs/1341414)
  * optional run 'rsync' with 'nocache'
    (https://launchpad.net/bugs/1344528)
  * mark invalid exclude pattern with mode ssh-encrypted
  * make Settingsdialog tabs scrollable
  * remove colon (:) restriction in exclude pattern
  * prevent starting new snapshot if restore is running
  * Fix bug: Port check failed on IPv6
    (https://launchpad.net/bugs/1361634)
  * add top-level directory for tarball
    (https://launchpad.net/bugs/1359076)
  * add more user-callback events (on App start and exit, on mount and
    unmount)
  * add context menu to files view
  * remove snapshots from commandline
  * multi selection in timeline =&gt; remove multiple snapshots with one
    click
  * print warning if started with sudo
  * add more default exclude; remove [Cc]ache* from exclude
  * Fix bug: 'inotify_add_watch failed' while closing BIT
  * add option for custom rsync-options
  * add ProgressBar for rsync
  * add progress for smart-remove
  * remove old status-bar message after a snapshot crashed.
  * ask to include symlinks target instead link
    (https://launchpad.net/bugs/1117709)
  * port to Python 3.x
  * returncode &gt;0 if there was an error
    (https://launchpad.net/bugs/1040995)
  * Enable user-callback script to cancel a backup by returning a non-zero
    exit code.
  * merge backintime-notify into backintime-qt4
  * add --gksu/--gksudo arg to qt4/configure
  * remember last path for each profile
    (https://bugs.launchpad.net/bugs/1254870)
  * sort include and exclude list
    (https://bugs.launchpad.net/bugs/1193149)
  * Timeline show tooltip 'Last check'
  * Fix bug: systray icon didn't show up
    (https://bugs.launchpad.net/backintime/+bug/658424)
  * show hidden files in FileDialog
    (https://bugs.launchpad.net/backintime/+bug/995925)
  * add button text for all buttons
    (https://bugs.launchpad.net/backintime/+bug/992020)
  * add shortcuts (https://bugs.launchpad.net/backintime/+bug/686694)
  * add menubar (https://bugs.launchpad.net/backintime/+bug/528851)
  * port KDE4 GUI to pure Qt4 to replace both KDE4 and Gnome GUI
    Version 1.0.40
  * use fingerprint to check if ssh key was unlocked correctly
    (https://answers.launchpad.net/questions/256408)
  * add fallback method to get UUID
    (https://answers.launchpad.net/questions/254140)
  * Fix bug: 'Attempt to unlock mutex that was not locked'... this time
    for good</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1492689600">- Update to upstream version 1.1.20
  * backport security fix: polkit CheckAuthorization: race condition in privilege authorization [CVE-2017-7572, boo#1032717]
  * see CHANGES file for details
- Don't store passwords given to polkit helper
  * backintime-polkit_priv_downgrade.patch
- Backport security hardening measures [boo#1007723]
  * backintime-security_hardening_backport.patch
- Fix Requires and BuildRequires
  * No longer requires xterm
  * Note: backintime requires python3-keyring (not py2), but not available in openSUSE yet
- Delete udev configuration files on uninstall
- Merge doc subpackage into main package</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1511006400">- Backport security fix: shell injection in notify-send [CVE-2017-16667, boo#1067342]
  * backintime-cve2017-16667.patch</changelog>

</package>
<package pkgid="2b78b0359b1e56df2c3fc068e2cdd8ef862c7dae9373adb3a973d65dbd974c80" name="backintime-qt4" arch="noarch">
    <version epoch="0" ver="1.1.20" rel="6.1"/>

<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomá? Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>
<changelog author="ecsos@schirra.net" date="1388664000">- Update to upstream version 1.0.34
  * sync/flush all disks before shutdown (https://bugs.launchpad.net/bugs/1261031)
  * Fix bug: BIT running as root shutdown after snapshot, regardless of option checked (https://bugs.launchpad.net/bugs/1261022)
- Update to upstream version 1.0.32
  * Fix bug: cron scheduled snapshots won't start with 1.0.30
- Update to upstream version 1.0.30
  * scheduled and manual snapshots use --config
  * make configure scripts portable (https://bugs.launchpad.net/backintime/+bug/377429)
  * Fix bug: udev rule doesn't finish (https://bugs.launchpad.net/backintime/+bug/1249466)
  * add symlink last_snapshot (https://bugs.launchpad.net/backintime/+bug/787118)
  * add virtual package backintime-kde for PPA
  * Fix multiple errors in PPA build process; reorganise updateversion.sh
  * Fix bug: Mate and xfce desktop didn't show systray icon (https://bugs.launchpad.net/backintime/+bug/658424/comments/31)
  * add option to run rsync with 'nice' or 'ionice' on remote host (https://bugs.launchpad.net/backintime/+bug/1240301)
  * add Shutdown button to shutdown system after snapshot has finished (https://bugs.launchpad.net/backintime/+bug/838742)
  * Fix bug: Ubuntu Lucid dosn't provide SecretServiceKeyring (https://bugs.launchpad.net/backintime/+bug/1243911)
  * wrap long lines for syslog
  * Fix bug: 'gksu backintime-gnome' failed with dbus.exceptions.DBusException</changelog>
<changelog author="kdupke@suse.com" date="1390219200">- added backintime-ssh-agent_only_if_password.patch, does not connect
  ssh-agent if password isn't set. Allow passwordless ssh-key as root.</changelog>
<changelog author="ecsos@schirra.net" date="1413115200">- update to 1.0.38
  * Fix bug: 'Attempt to unlock mutex that was not locked' in
    gnomeplugin (https://answers.launchpad.net/questions/255225)
  * compare os.path.realpath instead of os.stat to get devices UUID
  * Fix bug: housekeeping by gnome-session-daemon might delete
    backup and original data
    (https://bugs.launchpad.net/bugs/1374343)
  * Fix bug: Type Error in 'backintime --decode'
    (https://bugs.launchpad.net/bugs/1365072)
  * Fix bug: take_snapshot didn't wait for snapshot folder come
    available if notifications are disabled
    (https://bugs.launchpad.net/bugs/1332979)
- update from 1.0.34
  * remove UbuntuOne from exclude
    (https://bugs.launchpad.net/bugs/1340131)
  * Gray out 'Add Profile' if 'Main Profile' isn't configured yet
    (https://bugs.launchpad.net/bugs/1335545)
  * Don't check for fuse group-membership if group doesn't exist
  * Fix bug: backintime-kde4 as root failed to load ssh-key
    (https://bugs.launchpad.net/bugs/1276348)
  * Fix bug: kdesystrayicon.py crashes because of missing environ
    (https://bugs.launchpad.net/bugs/1332126)
  * Fix bug: OSError if sshfs/encfs is not installed
    (https://bugs.launchpad.net/bugs/1316288)
  * Fix bug: TypeError in config.py check_config()
    (https://bugzilla.redhat.com/show_bug.cgi?id=1091644)
  * Fix bug: unhandled exception in create_last_snapshot_symlink()
    (https://bugs.launchpad.net/bugs/1269991)
  * disable keyring for root</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Update Source URL</changelog>
<changelog author="ronisbr@gmail.com" date="1442404800">-  Version bump to 1.1 branch (1.1.6), based on home:ecsos:Backup/backintime.
  * The 1.1 branch introduced a new QT4 GUI that replaced the
    old KDE and GNOME GUI. Therefore, the pacakges backintime-gnome and
    backintime-kde were replaced by the package backintime-qt4. Thus, both
    backintime and backintime-qt4 do not depend on any GNOME or KDE packages
    anymore.
  * The package now depends on python3 instead of python.
  * The patch `backintime-ssh-agent_only_if_password.patch` was
    updated to replace TABs with SPACEs for code indentation following the
    convention of `common/sshtools.py`.
- Upstream changelog from version 1.0.38 to version 1.1.6.
    Version 1.1.6
  * show Profile name in systrayicon menu
  * Fix bug: encrypted remote backup hangs on 'start
    encfsctl encode process'
    (https://launchpad.net/bugs/1455925)
  * make own Exceptions a childclass from
    BackInTimeException
  * Fix bug: Segmentation fault caused by two QApplication
  * Fix bug: no Changes [C] log entries with 'Check for
  * Fix bug: some changed options from Settingsdialog where
  * Fix bug: python version check fails on python 3.3
  * Specifying the SSH private key whenever ssh is called
  * add to in-/exclude directly from mainwindow
  * Fix bug: pw-cache didn't start on Mint KDE because of missing stdout
  * add option to run Smart Remove in background on remote host
  * Fix bug: failed to restore file names with white spaces using CLI
  * Fix bug: UnboundLocalError with 'last_snapshot' in _free_space
    (https://launchpad.net/bugs/1437623)
    Version 1.1.4
  * add option to keep new snapshot with 'full rsync mode' regardless of
    changes (https://launchpad.net/bugs/1434722)
  * Fix bug: wrong quote in 'Save config file'
  * Fix bug: Deleting the last snapshot does not update the last_snapshot
    symlink (https://launchpad.net/bugs/1434724)
  * remove base64 encoding for passwords as it doesn't add any security
    but broke the password process (https://launchpad.net/bugs/1431305)
  * add confirm dialog before restoring
    (https://launchpad.net/bugs/438079)
  * Fix bug: Wrong status text in the tray icon
    (https://launchpad.net/bugs/1429400)
  * add option to run only one snapshot at a time
  * Fix bug: restore permissions of lots of files made BackInTime
    unresposive (https://launchpad.net/bugs/1428423)
  * Fix bug: failed to restore file owner and group
  * cache uuid in config so it doesn't fail if the device isn't pluged in
    (https://launchpad.net/bugs/1426881)
  * add warning about wrong Python version in configure
  * prevent snapshots from being removed with restore and delete; show
    warning if restore and delete filesystem root
    (https://answers.launchpad.net/questions/262837)
  * Fix bug: OSError in free_space; add alternate method to get free space
  * add bash-completion
  * Fix bug: ugly theme while running as root on Gnome based DEs
    (https://launchpad.net/bugs/1418447)
  * Fix bug: filename with broken charset throwed UnicodeError exception
    (https://launchpad.net/bugs/1419694)
  * use 'crontab' instead of 'crontab -' to read from stdin
    (https://launchpad.net/bugs/1419466)
    Version 1.1.2
  * sort 'Backup folders' in main window
  * save in- and exclude sort order
  * use PolicyKit to install Udev rules
  * move compression from install to build in Makefiles
  * use pkexec to start backintime-qt4 as root
    Version 1.1.0
  * add tooltips for rsync options
  * make only one debian/control
  * multiselect files to restore (https://launchpad.net/bugs/1135886)
  * force run manual snapshots on battery
    (https://launchpad.net/bugs/861553)
  * backup encfs config to local config folder
  * apply 'install-docs-move.patch' from Debian package by Jonathan
    Wiltshire
  * add restore option to delete new files during restore
    (https://launchpad.net/bugs/1371951)
  * use flock to prevent two instances running at the same time
  * restore config dialog added (https://launchpad.net/bugs/480391)
  * inhibit suspend/hibernate while take_snapshot or restore
  * use more reliable code for get_user
  * implement anacrons functions inside BIT =&gt; more flexible schedules and
    no new timestamp if there was an error
  * automatically run in background if started with
    'backintime --backup-job'
  * fix typos and style warnings in manpages reported by Lintian
    (https://lintian.debian.org/full/jmw@debian.org.html#backintime_1.0.34-0.1)
  * add exclude files by size (https://launchpad.net/bugs/823719)
  * remove 'Auto Host/User/Profile-ID' as this is more confiusing than
    helping
  * Fix bug: check procname of pid-locks
    (https://launchpad.net/bugs/1341414)
  * optional run 'rsync' with 'nocache'
    (https://launchpad.net/bugs/1344528)
  * mark invalid exclude pattern with mode ssh-encrypted
  * make Settingsdialog tabs scrollable
  * remove colon (:) restriction in exclude pattern
  * prevent starting new snapshot if restore is running
  * Fix bug: Port check failed on IPv6
    (https://launchpad.net/bugs/1361634)
  * add top-level directory for tarball
    (https://launchpad.net/bugs/1359076)
  * add more user-callback events (on App start and exit, on mount and
    unmount)
  * add context menu to files view
  * remove snapshots from commandline
  * multi selection in timeline =&gt; remove multiple snapshots with one
    click
  * print warning if started with sudo
  * add more default exclude; remove [Cc]ache* from exclude
  * Fix bug: 'inotify_add_watch failed' while closing BIT
  * add option for custom rsync-options
  * add ProgressBar for rsync
  * add progress for smart-remove
  * remove old status-bar message after a snapshot crashed.
  * ask to include symlinks target instead link
    (https://launchpad.net/bugs/1117709)
  * port to Python 3.x
  * returncode &gt;0 if there was an error
    (https://launchpad.net/bugs/1040995)
  * Enable user-callback script to cancel a backup by returning a non-zero
    exit code.
  * merge backintime-notify into backintime-qt4
  * add --gksu/--gksudo arg to qt4/configure
  * remember last path for each profile
    (https://bugs.launchpad.net/bugs/1254870)
  * sort include and exclude list
    (https://bugs.launchpad.net/bugs/1193149)
  * Timeline show tooltip 'Last check'
  * Fix bug: systray icon didn't show up
    (https://bugs.launchpad.net/backintime/+bug/658424)
  * show hidden files in FileDialog
    (https://bugs.launchpad.net/backintime/+bug/995925)
  * add button text for all buttons
    (https://bugs.launchpad.net/backintime/+bug/992020)
  * add shortcuts (https://bugs.launchpad.net/backintime/+bug/686694)
  * add menubar (https://bugs.launchpad.net/backintime/+bug/528851)
  * port KDE4 GUI to pure Qt4 to replace both KDE4 and Gnome GUI
    Version 1.0.40
  * use fingerprint to check if ssh key was unlocked correctly
    (https://answers.launchpad.net/questions/256408)
  * add fallback method to get UUID
    (https://answers.launchpad.net/questions/254140)
  * Fix bug: 'Attempt to unlock mutex that was not locked'... this time
    for good</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1492689600">- Update to upstream version 1.1.20
  * backport security fix: polkit CheckAuthorization: race condition in privilege authorization [CVE-2017-7572, boo#1032717]
  * see CHANGES file for details
- Don't store passwords given to polkit helper
  * backintime-polkit_priv_downgrade.patch
- Backport security hardening measures [boo#1007723]
  * backintime-security_hardening_backport.patch
- Fix Requires and BuildRequires
  * No longer requires xterm
  * Note: backintime requires python3-keyring (not py2), but not available in openSUSE yet
- Delete udev configuration files on uninstall
- Merge doc subpackage into main package</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1511006400">- Backport security fix: shell injection in notify-send [CVE-2017-16667, boo#1067342]
  * backintime-cve2017-16667.patch</changelog>

</package>
<package pkgid="f342673957c2519fd74dba7465a9b3af89b7cf324182ef4e6ecd4aeab63d1915" name="binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="de76ebe9eee8ba410c5f27a5f45eadc9d9f96ea4555d487c34c154382a980852" name="binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="744761b5c8f598946525da46073c63f712b588b9ec9cf2d8608ae92ec93779dd" name="binutils-devel" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="27004ceb513d8bc5f8bfeb872cd5cf822be4280867af5b861e74e92f9478d541" name="binutils-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="7db898ab8690e854b1b4978f720469c463be5fe6005db1157cb07bd5e3a24d6c" name="binutils-gold" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="f1701e88e67de214bb10f2be51593ad9c985d203fe95fc4bd44516a9961aecd5" name="bitlbee-facebook" arch="src">
    <version epoch="0" ver="1.1.2" rel="5.1"/>

<changelog author="tampakrap@opensuse.org" date="1471003200">- Initial commit</changelog>
<changelog author="tampakrap@opensuse.org" date="1492689600">- Version bump 1.1.1
  Fixes one last issue to the server side changes from last week.
  - Send orca-formatted user agent for all HTTP requests too. Fixes "Failed
    to parse thread information" errors when joining channels.
  This is in addition to the connection error fixes mentioned in the previous
  release. Quoting from the previous release: "Fix connection errors after
  facebook discontinued support for old versions of facebook messenger for
  android. While most of the protocol implementation was already above that
  version, there was a subtle change that broke fetching of sync_sequence_id,
  and the previously empty MQTT user agent string is now considered an old
  version too (#138)"
  I waited a few days before releasing this to ensure things calm down,
  hopefully it continues like this.
- Version 1.1.0
  Long overdue release, with a year worth of changes. This is now the minimum
  required version.
  - Fix connection errors after facebook discontinued support for old versions
    of facebook messenger for android. While most of the protocol
    implementation was already above that version, there was a subtle change
    that broke fetching of sync_sequence_id, and the previously empty MQTT user
    agent string is now considered an old version too (#138)
  - Fix receiving topic/groupchat membership events (#119)
  - Fix creating channels, inviting, kicking members (#120)
  - Fix setting channel topics (#121)
  - Fix contacts pagination for accounts with more than 500 friends (#74)
  - Fix chats with only two members including self, like the Marketplace ones
  - Fix crash on some kinds of SSL connection failure (#82)
  - Fix crash when glib is compiled with G_ENABLE_DEBUG
  - Deduplicate echoes of sent messages (#76)
  - Set a non-empty HTTP user agent for api/graphql queries, since the empty
    user agent often gets flagged for suspicious activity (#108)
  - Prevent disconnections due to contacts with incomplete profiles (#89)
  - Prevent disconnections on invalid attachment errors (#73)
  - Prevent disconnections when trying to join a chat after being kicked (#244)
  - Use FetchContactsDeltaQuery to incrementally sync contacts. Uses less
    traffic, can be done more often and fixes issues with non-friends (#116)
  - Parse URL attachments generated by the android share feature (#97)
  - Add mark_read_reply setting to only mark messages as read on reply (#69)
  - Add support for the bitlbee 3.5 plugin information API (bitlbee 3.4 is
    still supported by this version, but will be dropped in the next one)
  - Improve url comparison to avoid showing urls twice on attachments</changelog>
<changelog author="tampakrap@opensuse.org" date="1505563200">- Version bump 1.1.2
  - Fix "Failed to read thrift" with unknown fields in /t_p payload
  - Fix rare login hang/timeout when the last page of contacts is empty</changelog>

</package>
<package pkgid="d908e012722041a7ac0787464c1b69da06060731c60008aa44349856b3a9ee10" name="bitlbee-facebook" arch="x86_64">
    <version epoch="0" ver="1.1.2" rel="5.1"/>

<changelog author="tampakrap@opensuse.org" date="1471003200">- Initial commit</changelog>
<changelog author="tampakrap@opensuse.org" date="1492689600">- Version bump 1.1.1
  Fixes one last issue to the server side changes from last week.
  - Send orca-formatted user agent for all HTTP requests too. Fixes "Failed
    to parse thread information" errors when joining channels.
  This is in addition to the connection error fixes mentioned in the previous
  release. Quoting from the previous release: "Fix connection errors after
  facebook discontinued support for old versions of facebook messenger for
  android. While most of the protocol implementation was already above that
  version, there was a subtle change that broke fetching of sync_sequence_id,
  and the previously empty MQTT user agent string is now considered an old
  version too (#138)"
  I waited a few days before releasing this to ensure things calm down,
  hopefully it continues like this.
- Version 1.1.0
  Long overdue release, with a year worth of changes. This is now the minimum
  required version.
  - Fix connection errors after facebook discontinued support for old versions
    of facebook messenger for android. While most of the protocol
    implementation was already above that version, there was a subtle change
    that broke fetching of sync_sequence_id, and the previously empty MQTT user
    agent string is now considered an old version too (#138)
  - Fix receiving topic/groupchat membership events (#119)
  - Fix creating channels, inviting, kicking members (#120)
  - Fix setting channel topics (#121)
  - Fix contacts pagination for accounts with more than 500 friends (#74)
  - Fix chats with only two members including self, like the Marketplace ones
  - Fix crash on some kinds of SSL connection failure (#82)
  - Fix crash when glib is compiled with G_ENABLE_DEBUG
  - Deduplicate echoes of sent messages (#76)
  - Set a non-empty HTTP user agent for api/graphql queries, since the empty
    user agent often gets flagged for suspicious activity (#108)
  - Prevent disconnections due to contacts with incomplete profiles (#89)
  - Prevent disconnections on invalid attachment errors (#73)
  - Prevent disconnections when trying to join a chat after being kicked (#244)
  - Use FetchContactsDeltaQuery to incrementally sync contacts. Uses less
    traffic, can be done more often and fixes issues with non-friends (#116)
  - Parse URL attachments generated by the android share feature (#97)
  - Add mark_read_reply setting to only mark messages as read on reply (#69)
  - Add support for the bitlbee 3.5 plugin information API (bitlbee 3.4 is
    still supported by this version, but will be dropped in the next one)
  - Improve url comparison to avoid showing urls twice on attachments</changelog>
<changelog author="tampakrap@opensuse.org" date="1505563200">- Version bump 1.1.2
  - Fix "Failed to read thrift" with unknown fields in /t_p payload
  - Fix rare login hang/timeout when the last page of contacts is empty</changelog>

</package>
<package pkgid="b6cd2ef1e0726bdbeb84b16ab5b287ad6924e768de7e325f7f74125ed47aa5e9" name="bluefish" arch="src">
    <version epoch="0" ver="2.2.10" rel="7.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="sbrabec@suse.cz" date="1140782400">- Improved Categories.</changelog>
<changelog author="schwab@suse.de" date="1148299200">- Use RPM_OPT_FLAGS.
- Don't strip binaries.</changelog>
<changelog author="aj@suse.de" date="1157457600">- Cleanup BuildRequires.</changelog>
<changelog author="lrupp@suse.de" date="1184673600">- use /usr for builds &gt; openSUSE 10.2
- Update to 1.0.7:
  + Updated translations: Finnish, French, German, Japanese,
    Norwegian, Polish, Swedish
  + Fixes Tcl highlighting
  + Fixes a bug when trying to save a file with a new install and
    a file has never been opened or a project is not open.
    Closes Bluefish bug #360401.
  + Fix a bug where Bluefish would crash when deleting
    multiple bookmarks.
  + Fix a bookmark memory leak
  + README: more complete README
  + Data filetypes: adds the .pm extension for Perl files.
    Closes Bluefish bug #343569.
  + Highlighting: small fix to XML highlighting (adding general
    support for namespaces). Highlight numbers in Java.
  + Adds XTHTM 1.1 DOCTYPE in creators. Closes Bluefish bug #338586
  + Fixes a bug in smart cursor positioning.
  + Fixes a bug where the old file was deleted before the new file
    was saved successfully.
  + Removes redundant show hidden checkbox from file chooser dialog.
    Closes Bluefish bug #316298
  + Fixes Definition list formatting
  + Fixes a bug where the backup file was not deleted after
    renaming it. Closes Bluefish bug #324788.
  + Fixes a critical bug where Bluefish crashed when closing and
    saving a project. Closes Bluefish bug #330544.
  + Fixes a critical bug where Bluefish crashed when pressing the
    Esc key in the Search:no match found dialog.
    Closes Bluefish bug #337739
  + Fixes a bug where undoing did not behave correctly for text
    pasted from the clipboard over other text.
    Closes Bluefish bug #340262.
  + Fixes a bug in python syntax highlighting.
    Closes Bluefish bug #349662.
  + Fixes a critical bug where Bluefish crashed when pressing the
    green info dialog button. Closes Bluefish bug #349743
  + ... (see NEWS file for more Changes)</changelog>
<changelog author="lars@linux-schulserver.de" date="1222084800">- moved to Education base repository</changelog>
<changelog author="lars@linux-schulserver.de" date="1273406400">- update to 2.0
- fix BuildRequires
- enable python and libgnomeui
- remove macros for old openSUSE versions</changelog>
<changelog author="lars@linux-schulserver.de" date="1273838400">- provide/obsolete older bluefish-unstable versions</changelog>
<changelog author="lars@linux-schulserver.de" date="1280577600">- update to 2.0.1:
  + minor bugfix and minor feature enhancement release
  + Enhancements include improved spell checking,
  + right margin display,
  + improved indenting functionality,
  + and CFML (cold fusion) support.
  + Bugfixes include fixes in a couple of HTML tag dialogs and
    two exotic segfault fixes.</changelog>
<changelog author="lars@linux-schulserver.de" date="1316347200">- update to 2.0.3:
  + improves syntax highlighting performance
  + improves performance when scrolling in large files
  + It adds a couple of features such as:
    a split view feature, Clojure syntax, Wordpress syntax,
    Pascal syntax, jQuery syntax, Processing syntax and R syntax
  + Various features have improved
  + a "jump to reference" feature has been added to quickly open
    a referenced filename
  + Finally, two new translations are added: Nynorsk and Hungarian</changelog>
<changelog author="lars@linux-schulserver.de" date="1349611200">- update to 2.2.3:
  + new feature: Zencoding support
  + works with gtk-3
  + faster syntax scanner
  + new search and replace function
  + support for new languages added: Google Go, Vala and Ada
  + some shortcut key combinations were added.
- small specfile cleanup</changelog>
<changelog author="cfarrell@suse.com" date="1358424000">- license update: GPL-3.0+
  See the COPYING file and the majority of the source code file headers</changelog>
<changelog author="lars@linux-schulserver.de" date="1360670400">- update to 2.2.4:
  + minor bugfix release
  + various fixes for the tab-width on gtk 3.6
  + improved auto-completion popup speed
  + more simple search options
  + paste improvements (to paste for example images from Libreoffice)
  + pylint, cssmin, jsmin, csstidy and php_beautifier integration
  + various language syntax definition files have also been improved</changelog>
<changelog author="lars@linux-schulserver.de" date="1392120000">- update to 2.2.5:
  + The syntax scanning engine is faster after small changes to the text.
  + The filebrowser is also much faster with less memory usage, with
    various fixes and new features.
  + Projects now store the active document and active line numbers.
  + Indenting is improved in auto-completion and the smart indenting.
  + Bookmarks and paste special also have been improved.
  + Furthermore almost all syntax highlighting has been improved, most
    notable jquery in javascript, HTML5, and HTML5 in PHP files.
  + There are also many bug fixes, such as in wrap text on right margin,
    in the replace engine, the jsmin licence, the split lines feature,
    the auto-recovery and many obscure bugs.</changelog>
<changelog author="lars@linux-schulserver.de" date="1403697600">- update to 2.2.6:
  + mostly a bug fix release. This release fixes a critical bug
    (segfault) in filebrowser that could be triggered if the root
    directory was set as basedir.
  + It also has a fix for a specific CSS-in-HTML-tag highlighting issue.
  + The filter code furthermore caused a segfault if the command did not exist. T
  + Next to these bugs many small issues have been resolved.
  + Various language files have small improvements, most notably C,
    Javascript and CSS.
  + Several translations have been updated.
  + A corner case for a new document from a template that does not exist
    was fixed.
  + The "open" submenu now opens SVG files from the filebrowser instead
    of inserting an image tag.
  +  The included cssmin and jsbeatify have been updated.
  + A syntax scanning issue when replacing large chunks of text was
    fixed.
  + the "Report bug" link was broken,
  + a new "conditional" option to the language file that makes re-using
    certain blocks of language files easier was added,
  +  and error reporting in outputbox was improved.
- recommend make and libxml2-tools (xmllint) for easier programming</changelog>
<changelog author="benoit.monin@gmx.fr" date="1431691200">- update to version 2.2.7:
    Bluefish 2.2.7 is mostly a bug fix release. It fixes rare
    crashes in the autocompletion, the filebrowser, the htmlbar
    plugin preferences, and in file-load-cancel, fixes a rare case
    of broken syntax highlighting after multiple search/replace
    actions.
  * It furthermore displays better error/warning output when
    parsing language files.
  * It also finally fixes javascript regex syntax highlighting.
  * The loading of files with corrupt encoding has been improved,
    and project loading over sftp has been improved.
  * Various HTML5 tags have been added, and HTML5 is the default
    now for php, cfml and other languages that can include html
    syntax.
  * Saving and loading of UTF-16 encoded files was broken and has
    been fixes.
  * Various languages have better support, such as javascript, css,
    html, pascal/deplhi, and html has improved autocompletion.
  * On OSX the keys for tab switching no longer confict with some
    keyboard layouts, and behavior at shutdown was improved.
  * The upload/download feature has a new option to ignore backup
    files.
  * The home/end keys now work better on wrapped tekst.
  * And finally the search and replace dialog correctly shows the
    number of results when searching in files on disk.
- point the source URL to the master download server
- add fix_ptr_from_int.patch: fix pointer from integer assignment,
  already upstream
- avoid aliasing warnings: add -fno-strict-aliasing to CFLAGS</changelog>
<changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror
  in openSUSE:Factory</changelog>
<changelog author="rpm@fthiessen.de" date="1490270400">- Update to version 2.2.10
  * Various language files have been improved
  * Various fixes for newer gtk versions and for gtk on wayland
  * New feature: Possibility to import/export syntax color styles,
    included are styles for a light and a dark theme.
  * Fixes for a few rare crashes.
  * Fixes incompatibility with Gtk 3.20.
  * Some small dialogs have been improved.
  * Some user interface parts have been polished.
  * Fixes a few serious but rarely occurring bugs.
  * Options defined in the language definition files
    are now translated.
  * Various default settings have been improved, most notably the
    command to launch Firefox for preview.
  * The looks on newer gtk versions have been restored.
  * CSS can now be compressed and decompressed.
  * Character encoding detection has been improved.
  * Auto-completion for HTML attributes has been improved.
  * The SASS style language has been added.
- Removed upstream merged fix_ptr_from_int.patch
- Added keyring / signature file for verification
- Added remove-python-class-shebang.patch to remove shebang from
  python class files (this ones get never executed as scripts).</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Remove aspell and rely on enchant for spellcheck
  * This means the bluefish will use hunspell now</changelog>
<changelog author="lars@linux-schulserver.de" date="1512216000">- submit to 42.2 and 42.3 as maintenance update for boo#1021312</changelog>

</package>
<package pkgid="6cda3589aa51261ab5bdb585d8713f16ba7e04fc58bde7722ac86d4a853a5aa4" name="bluefish" arch="x86_64">
    <version epoch="0" ver="2.2.10" rel="7.1"/>

<changelog author="lars@linux-schulserver.de" date="1273406400">- update to 2.0
- fix BuildRequires
- enable python and libgnomeui
- remove macros for old openSUSE versions</changelog>
<changelog author="lars@linux-schulserver.de" date="1273838400">- provide/obsolete older bluefish-unstable versions</changelog>
<changelog author="lars@linux-schulserver.de" date="1280577600">- update to 2.0.1:
  + minor bugfix and minor feature enhancement release
  + Enhancements include improved spell checking,
  + right margin display,
  + improved indenting functionality,
  + and CFML (cold fusion) support.
  + Bugfixes include fixes in a couple of HTML tag dialogs and
    two exotic segfault fixes.</changelog>
<changelog author="lars@linux-schulserver.de" date="1316347200">- update to 2.0.3:
  + improves syntax highlighting performance
  + improves performance when scrolling in large files
  + It adds a couple of features such as:
    a split view feature, Clojure syntax, Wordpress syntax,
    Pascal syntax, jQuery syntax, Processing syntax and R syntax
  + Various features have improved
  + a "jump to reference" feature has been added to quickly open
    a referenced filename
  + Finally, two new translations are added: Nynorsk and Hungarian</changelog>
<changelog author="lars@linux-schulserver.de" date="1349611200">- update to 2.2.3:
  + new feature: Zencoding support
  + works with gtk-3
  + faster syntax scanner
  + new search and replace function
  + support for new languages added: Google Go, Vala and Ada
  + some shortcut key combinations were added.
- small specfile cleanup</changelog>
<changelog author="cfarrell@suse.com" date="1358424000">- license update: GPL-3.0+
  See the COPYING file and the majority of the source code file headers</changelog>
<changelog author="lars@linux-schulserver.de" date="1360670400">- update to 2.2.4:
  + minor bugfix release
  + various fixes for the tab-width on gtk 3.6
  + improved auto-completion popup speed
  + more simple search options
  + paste improvements (to paste for example images from Libreoffice)
  + pylint, cssmin, jsmin, csstidy and php_beautifier integration
  + various language syntax definition files have also been improved</changelog>
<changelog author="lars@linux-schulserver.de" date="1392120000">- update to 2.2.5:
  + The syntax scanning engine is faster after small changes to the text.
  + The filebrowser is also much faster with less memory usage, with
    various fixes and new features.
  + Projects now store the active document and active line numbers.
  + Indenting is improved in auto-completion and the smart indenting.
  + Bookmarks and paste special also have been improved.
  + Furthermore almost all syntax highlighting has been improved, most
    notable jquery in javascript, HTML5, and HTML5 in PHP files.
  + There are also many bug fixes, such as in wrap text on right margin,
    in the replace engine, the jsmin licence, the split lines feature,
    the auto-recovery and many obscure bugs.</changelog>
<changelog author="lars@linux-schulserver.de" date="1403697600">- update to 2.2.6:
  + mostly a bug fix release. This release fixes a critical bug
    (segfault) in filebrowser that could be triggered if the root
    directory was set as basedir.
  + It also has a fix for a specific CSS-in-HTML-tag highlighting issue.
  + The filter code furthermore caused a segfault if the command did not exist. T
  + Next to these bugs many small issues have been resolved.
  + Various language files have small improvements, most notably C,
    Javascript and CSS.
  + Several translations have been updated.
  + A corner case for a new document from a template that does not exist
    was fixed.
  + The "open" submenu now opens SVG files from the filebrowser instead
    of inserting an image tag.
  +  The included cssmin and jsbeatify have been updated.
  + A syntax scanning issue when replacing large chunks of text was
    fixed.
  + the "Report bug" link was broken,
  + a new "conditional" option to the language file that makes re-using
    certain blocks of language files easier was added,
  +  and error reporting in outputbox was improved.
- recommend make and libxml2-tools (xmllint) for easier programming</changelog>
<changelog author="benoit.monin@gmx.fr" date="1431691200">- update to version 2.2.7:
    Bluefish 2.2.7 is mostly a bug fix release. It fixes rare
    crashes in the autocompletion, the filebrowser, the htmlbar
    plugin preferences, and in file-load-cancel, fixes a rare case
    of broken syntax highlighting after multiple search/replace
    actions.
  * It furthermore displays better error/warning output when
    parsing language files.
  * It also finally fixes javascript regex syntax highlighting.
  * The loading of files with corrupt encoding has been improved,
    and project loading over sftp has been improved.
  * Various HTML5 tags have been added, and HTML5 is the default
    now for php, cfml and other languages that can include html
    syntax.
  * Saving and loading of UTF-16 encoded files was broken and has
    been fixes.
  * Various languages have better support, such as javascript, css,
    html, pascal/deplhi, and html has improved autocompletion.
  * On OSX the keys for tab switching no longer confict with some
    keyboard layouts, and behavior at shutdown was improved.
  * The upload/download feature has a new option to ignore backup
    files.
  * The home/end keys now work better on wrapped tekst.
  * And finally the search and replace dialog correctly shows the
    number of results when searching in files on disk.
- point the source URL to the master download server
- add fix_ptr_from_int.patch: fix pointer from integer assignment,
  already upstream
- avoid aliasing warnings: add -fno-strict-aliasing to CFLAGS</changelog>
<changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror
  in openSUSE:Factory</changelog>
<changelog author="rpm@fthiessen.de" date="1490270400">- Update to version 2.2.10
  * Various language files have been improved
  * Various fixes for newer gtk versions and for gtk on wayland
  * New feature: Possibility to import/export syntax color styles,
    included are styles for a light and a dark theme.
  * Fixes for a few rare crashes.
  * Fixes incompatibility with Gtk 3.20.
  * Some small dialogs have been improved.
  * Some user interface parts have been polished.
  * Fixes a few serious but rarely occurring bugs.
  * Options defined in the language definition files
    are now translated.
  * Various default settings have been improved, most notably the
    command to launch Firefox for preview.
  * The looks on newer gtk versions have been restored.
  * CSS can now be compressed and decompressed.
  * Character encoding detection has been improved.
  * Auto-completion for HTML attributes has been improved.
  * The SASS style language has been added.
- Removed upstream merged fix_ptr_from_int.patch
- Added keyring / signature file for verification
- Added remove-python-class-shebang.patch to remove shebang from
  python class files (this ones get never executed as scripts).</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Remove aspell and rely on enchant for spellcheck
  * This means the bluefish will use hunspell now</changelog>
<changelog author="lars@linux-schulserver.de" date="1512216000">- submit to 42.2 and 42.3 as maintenance update for boo#1021312</changelog>

</package>
<package pkgid="c8f363b7ae8fb18f69903a927c9e7308595b9b7f0b71e5f4e782d1fd38b5b3d2" name="bluez" arch="src">
    <version epoch="0" ver="5.41" rel="6.1"/>

<changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
<changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
<changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
<changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
<changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
<changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
<changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
<changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
<changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>

</package>
<package pkgid="b292d9d7f8d109a9f73a263de64cd425d7e1a47e3b9d7f346ddf14d3848f8f92" name="bluez" arch="x86_64">
    <version epoch="0" ver="5.41" rel="6.1"/>

<changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
<changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
<changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
<changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
<changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
<changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
<changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
<changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
<changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>

</package>
<package pkgid="a318cedf008ccb743953263969a24f614fc183a340635add4209e33160e4f176" name="bluez-cups" arch="x86_64">
    <version epoch="0" ver="5.41" rel="6.1"/>

<changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
<changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
<changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
<changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
<changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
<changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
<changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
<changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
<changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>

</package>
<package pkgid="fde729edc6aa3b2c64bbfec28924e9ec242fc3b96d88bcb21da757d78307f1e3" name="bluez-devel" arch="x86_64">
    <version epoch="0" ver="5.41" rel="6.1"/>

<changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
<changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
<changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
<changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
<changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
<changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
<changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
<changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
<changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>

</package>
<package pkgid="8f4cac2fb88038237cbb3bf69371bc0579181ede4a6621b3ca3ea937fc4a3ce0" name="bluez-devel-32bit" arch="x86_64">
    <version epoch="0" ver="5.41" rel="6.1"/>

<changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
<changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
<changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
<changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
<changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
<changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
<changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
<changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
<changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>

</package>
<package pkgid="04f3761ff92506ce92f35f6c2d9a1cbb1be18d0d1e61266ec21b270400f60986" name="bluez-test" arch="x86_64">
    <version epoch="0" ver="5.41" rel="6.1"/>

<changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
<changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
<changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
<changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
<changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
<changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
<changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
<changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
<changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>

</package>
<package pkgid="753bc66acded9bce872d5207cb33e990db2bd19124add20f7887f02d753b73c9" name="build" arch="noarch">
    <version epoch="0" ver="20171128" rel="5.1"/>

<changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
<changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
<changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
<changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
<changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
<changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
<changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
<changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
<changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
<changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
<changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
<changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
<changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
<changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
<changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
<changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
<changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
<changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
<changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
<changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>

</package>
<package pkgid="9b0dfb7dbd071aefa0b7d34d42e166b81417989f00035d07693ec457f03e51d0" name="build" arch="src">
    <version epoch="0" ver="20171128" rel="5.1"/>

<changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
<changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
<changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
<changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
<changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
<changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
<changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
<changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
<changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
<changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
<changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
<changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
<changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
<changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
<changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
<changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
<changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
<changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
<changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
<changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>

</package>
<package pkgid="c8d0c3f5e142fd89c39b12d59a3e3f9ea167b1a58119a9d0d41ce87de9092e7c" name="build-initvm-i586" arch="noarch">
    <version epoch="0" ver="20171128" rel="5.1"/>

<changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
<changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
<changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
<changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
<changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
<changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
<changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
<changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
<changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
<changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
<changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
<changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
<changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
<changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
<changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
<changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
<changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
<changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
<changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
<changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>

</package>
<package pkgid="e2b012adaa89034a33c02f119a4a1a904ab767b841134475c21bee172e103343" name="build-initvm-x86_64" arch="noarch">
    <version epoch="0" ver="20171128" rel="5.1"/>

<changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
<changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
<changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
<changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
<changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
<changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
<changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
<changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
<changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
<changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
<changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
<changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
<changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
<changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
<changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
<changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
<changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
<changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
<changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
<changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>

</package>
<package pkgid="da4e5fcafa5e8fe2eddc3fd785651d1ca7a1152f9432dfa9e4d6bb0724319ed2" name="build-mkbaselibs" arch="noarch">
    <version epoch="0" ver="20171128" rel="5.1"/>

<changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
<changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
<changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
<changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
<changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
<changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
<changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
<changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
<changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
<changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
<changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
<changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
<changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
<changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
<changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
<changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
<changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
<changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
<changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
<changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>

</package>
<package pkgid="c191fff4196808ab01099a023f828ff837edee74639cdc0d74332a5634afce46" name="build-mkdrpms" arch="noarch">
    <version epoch="0" ver="20171128" rel="5.1"/>

<changelog author="adrian@suse.de" date="1460116800">- support unpacking of obscpio archives in source
- added DoD for aarch64 repositories on Debian
- aarch64_ilp32 support
- KVM: telnet feature fixes and documentation
- KVM: run qemu as user
- fail when space allocation is not successful (on supported FS)</changelog>
<changelog author="adrian@suse.de" date="1461758400">- run debtransform after buildtime source services
- Handle also aarch32* and armv8 cases for kvm cpu switches
- add support for LXC 1.0.8
- added DoD for aarch64 repositories on Debian</changelog>
<changelog author="adrian@suse.de" date="1461758401">- fix build on armv7hl</changelog>
<changelog author="adrian@suse.de" date="1467288000">- adding first snapcraft support</changelog>
<changelog author="adrian@suse.de" date="1470744000">- first version of Leap 42.2 configuration
- provide loop devices in docker VM
- support lxc 2.0
- Add architecture-specific sources extract for Arch Linux
- snapcraft improvements</changelog>
<changelog author="lnussel@suse.de" date="1470830400">- calculate leap version for default config</changelog>
<changelog author="adrian@suse.de" date="1477396800">- Add clang binaries to ccache symlinking
- Fix a probable tabs to spaces bug
- Kiwi: allow to specify ExclusiveArch and ExcludeArch
- build-vm-kvm: use virtio-rng-device also on aarch64
- Add support for LXC as libvirt driver
- support multiple image builds for multiple profiles
- Add optional whitelisting for allowed buildroots and parameters
- build-vm-xen: use xvd devices for disks and hvc0 for console for recent xen
- build-vm-kvm: fix vm_enable_console also for kvm_serial_console case
- sl13.3.conf: Prepare for bash 4.4, using libreadline7
- Add and clarify licenses</changelog>
<changelog author="adrian@suse.de" date="1480420800">- speed up build (for preinstall and keeping packages)
- Recognize Recommends and Supplements relations of RPMs.
- fix build against susetags repos</changelog>
<changelog author="adrian@suse.de" date="1481025600">- add config for openSUSE Leap 42.3 (alpha, non-final)
- handle Fedora 25 special cases
- Improve /proc mount behaviour
- fix dependency on CentOS (build#2415)
- Use weak dependencies as 3rd choice breaker
- support statistics from xvda devices
- build env wipe support (--wipe command)</changelog>
<changelog author="adrian@suse.de" date="1485345600">- fix haskell builds (bsc#1018895)
- fix multi type kiwi profile handling
- minor distribution config and bug fixes</changelog>
<changelog author="adrian@suse.de" date="1486641600">- updated confguration for tumbleweed
- Arch linux fixes
- mount swap by label
- allow custom qemu options
- allow to override hostname
- fix build with vm-type lxc</changelog>
<changelog author="adrian@suse.de" date="1489752000">- fix usage of the right service generated files.
- debootstrap: Also mount sysfs
- Fileprovides should only match package names, not provides
- avoid export of build results of sym links pointing to external files
- support build of different flavors via multibuild
- experimental AppImage build support
- reworked openstack support (still experimental)</changelog>
<changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
<changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
<changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
<changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
<changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
<changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
<changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
<changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>

</package>
<package pkgid="50839d26397821113bfd2d83f6f9fffe035becfca4837ebef31f9dd805d4f0f6" name="cacti" arch="noarch">
    <version epoch="0" ver="1.1.16" rel="19.1"/>

<changelog author="astieger@suse.com" date="1487505600">- cacti 1.0.3:
  * Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
  * Added missing template import hash for 1.0.2</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1488196800">- cacti 1.0.4:
  * feature: Javascript: make menu movement smooth and use
    localStorage
  * feature: Added cacti_snmp_get_raw() for plugin developers
  * issue#288: Function cacti_snmp_get bad handling of wierd value
    into snmp_value
  * issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
  * issue#301: Unresolvable DNS hostname causing backtraces
  * issue#302: spikekill memory leak
  * issue#303: Error when creating tree items with "&amp;" in the name
  * issue#307: Aggregate graph gives CMDPHP errors
  * issue#308: UI resize issue
  * issue#309: Show "Save Successful" notification permanently
  * issue#311: Graph thumbnail settings in profile setting does not work
  * issue#320: Users can not change their own password
  * issue#324: Aggregate template graph template JavaScript error
  * issue#352: Add configurable auto-logout and page-reload options
  * issue#329: Customize the favicon
  * issue#334: primary key on poller output boost table not efficient/not being
    used correctly
  * issue: Fixed issues with Dark theme
  * issue: Fixed issues with Paw theme
  * issue: Fix timespan calculation
  * issue: Added misplaced join condition when generating RRDTool graphs
  * issue: Fix the selection of timestan based on local_graph_id and rra_id
  * issue: Correct error in discovery not adding devices
  * issue: Action message did not always display
  * issue: fix regex to use Domains like www.t-online.de
  * issue: Properly align Order columns.
  * issue: address renaming issues with tree items.
  * issue: Add device snmp --version is ambiguous
  * issue: SNMP Availability failed to report down devices - This only was occuring
    for cmd.php collector.
  * issue: i18n remove embedded HTML syntax
  * issue: Wrap menu items to avoid scrolling</changelog>
<changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>

</package>
<package pkgid="266e9b12486e0118effbb2e782c3b5e6cecffba95bc96810cf95bc8f3d7725c4" name="cacti" arch="noarch">
    <version epoch="0" ver="1.1.19" rel="22.1"/>

<changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>

</package>
<package pkgid="1bd863f917bb8d44f506ae34c7eaa8356bc52a8916150d414a92364dfdace469" name="cacti" arch="noarch">
    <version epoch="0" ver="1.1.26" rel="25.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations
- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache
- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations
- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>

</package>
<package pkgid="86d3e0b7cc984042c123dd0d0207cfab57bdff10b273b93b6c3491cb7fc17eaf" name="cacti" arch="noarch">
    <version epoch="0" ver="1.1.28" rel="29.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>

</package>
<package pkgid="e557ae5c5b5913b9dabf41f29155bc846ecb19554c13138f5d8559d267862aad" name="cacti" arch="src">
    <version epoch="0" ver="1.1.16" rel="19.1"/>

<changelog author="astieger@suse.com" date="1487505600">- cacti 1.0.3:
  * Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
  * Added missing template import hash for 1.0.2</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1488196800">- cacti 1.0.4:
  * feature: Javascript: make menu movement smooth and use
    localStorage
  * feature: Added cacti_snmp_get_raw() for plugin developers
  * issue#288: Function cacti_snmp_get bad handling of wierd value
    into snmp_value
  * issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
  * issue#301: Unresolvable DNS hostname causing backtraces
  * issue#302: spikekill memory leak
  * issue#303: Error when creating tree items with "&amp;" in the name
  * issue#307: Aggregate graph gives CMDPHP errors
  * issue#308: UI resize issue
  * issue#309: Show "Save Successful" notification permanently
  * issue#311: Graph thumbnail settings in profile setting does not work
  * issue#320: Users can not change their own password
  * issue#324: Aggregate template graph template JavaScript error
  * issue#352: Add configurable auto-logout and page-reload options
  * issue#329: Customize the favicon
  * issue#334: primary key on poller output boost table not efficient/not being
    used correctly
  * issue: Fixed issues with Dark theme
  * issue: Fixed issues with Paw theme
  * issue: Fix timespan calculation
  * issue: Added misplaced join condition when generating RRDTool graphs
  * issue: Fix the selection of timestan based on local_graph_id and rra_id
  * issue: Correct error in discovery not adding devices
  * issue: Action message did not always display
  * issue: fix regex to use Domains like www.t-online.de
  * issue: Properly align Order columns.
  * issue: address renaming issues with tree items.
  * issue: Add device snmp --version is ambiguous
  * issue: SNMP Availability failed to report down devices - This only was occuring
    for cmd.php collector.
  * issue: i18n remove embedded HTML syntax
  * issue: Wrap menu items to avoid scrolling</changelog>
<changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>

</package>
<package pkgid="d28a68b9c82f95220fdf019b810700831d00329b21d592c01425b64f5f9d2dbe" name="cacti" arch="src">
    <version epoch="0" ver="1.1.19" rel="22.1"/>

<changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>

</package>
<package pkgid="96f8e37ff9ecc1711b58e928e2ac91d778e242bc01a762a27a6e657ad7ec02a2" name="cacti" arch="src">
    <version epoch="0" ver="1.1.26" rel="25.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations
- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache
- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations
- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>

</package>
<package pkgid="22fbd5680b2015747bfddc3fc5e5c3f71e40d784c6fe26c41a028ed366122ad5" name="cacti" arch="src">
    <version epoch="0" ver="1.1.28" rel="29.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>

</package>
<package pkgid="ba36605407335d8b031724bb7ad2df723adbdc767690672f47ff5c230b05aab4" name="cacti-doc" arch="noarch">
    <version epoch="0" ver="1.1.16" rel="19.1"/>

<changelog author="astieger@suse.com" date="1487505600">- cacti 1.0.3:
  * Upgrade 0.8.8h to 1.0.0 fails to create poller_output_boost table
  * Added missing template import hash for 1.0.2</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1488196800">- cacti 1.0.4:
  * feature: Javascript: make menu movement smooth and use
    localStorage
  * feature: Added cacti_snmp_get_raw() for plugin developers
  * issue#288: Function cacti_snmp_get bad handling of wierd value
    into snmp_value
  * issue#298: Graph generation issue with SNMP - Bits/Sec + Total Bandwith
  * issue#301: Unresolvable DNS hostname causing backtraces
  * issue#302: spikekill memory leak
  * issue#303: Error when creating tree items with "&amp;" in the name
  * issue#307: Aggregate graph gives CMDPHP errors
  * issue#308: UI resize issue
  * issue#309: Show "Save Successful" notification permanently
  * issue#311: Graph thumbnail settings in profile setting does not work
  * issue#320: Users can not change their own password
  * issue#324: Aggregate template graph template JavaScript error
  * issue#352: Add configurable auto-logout and page-reload options
  * issue#329: Customize the favicon
  * issue#334: primary key on poller output boost table not efficient/not being
    used correctly
  * issue: Fixed issues with Dark theme
  * issue: Fixed issues with Paw theme
  * issue: Fix timespan calculation
  * issue: Added misplaced join condition when generating RRDTool graphs
  * issue: Fix the selection of timestan based on local_graph_id and rra_id
  * issue: Correct error in discovery not adding devices
  * issue: Action message did not always display
  * issue: fix regex to use Domains like www.t-online.de
  * issue: Properly align Order columns.
  * issue: address renaming issues with tree items.
  * issue: Add device snmp --version is ambiguous
  * issue: SNMP Availability failed to report down devices - This only was occuring
    for cmd.php collector.
  * issue: i18n remove embedded HTML syntax
  * issue: Wrap menu items to avoid scrolling</changelog>
<changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>

</package>
<package pkgid="1bad0ba0068ae56fb0385abf9974be9051dbc53122111f424a024a17ac0d57d1" name="cacti-doc" arch="noarch">
    <version epoch="0" ver="1.1.19" rel="22.1"/>

<changelog author="joop.boonen@opensuse.org" date="1488283200">- Only allow to use the same spine version as the cacti version</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>

</package>
<package pkgid="ca9cece49e231e06b9c5abe274a45cf1043e4cd97cb882621cf90ace63fd3455" name="cacti-doc" arch="noarch">
    <version epoch="0" ver="1.1.26" rel="25.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- cacti 1.0.5:
  * issue#296: Poller warning for Non-SNMP device
  * issue#319: Add default 'High Collection Rate' data source profile
    to new installs to demonstrate concept of multiple rates
  * issue#330: Import templates to non-default Data Profile
  * issue#337: Error when try create new graph - SNMP - Generic OID
  issue#342:  Infinite loop in poller_automation.php with invalid
    schedule
  * issue#343: Device discovery cannot handle dots in device name
  * issue#344: Unable to upgrade to latest Cacti on FreeBSD
  * issue#353: Legacy broadcast &amp; multicast packet counters missing in
    interface.xml
  * issue#354: Place on tree dashes / ordering is not correct
  * issue#355: Replace table rows with count when using InnoDB tables
  * issue#357: If recovery mode runs longer than a polling interval, a
    second is spawned
  * issue#358: Sending test e-mail results in warning
  * issue#360: Issue importing cacti.sql with some charsets
  * issue#364: Moving graph item causes page render issue
  * issue#365: ss_host_disk.php and ss_host_cpu.php should use return
  * issue#367: Upgrade chart.js to version 2.5
  * issue#368: Issue with device automation ip vs. ip_address
  * issue#369: Interface bits/second total Bandwidth wrong CDEF
  * issue#375: Drag and Drop of Devices and Graphs allows dropping
    onto self
  * issue#380: Ignores a non-standard SNMP port
  * issue#382: When using php5.5+ new users unable to change their
    password
  * issue#384: graph_view.php backtrace errors
  * issue#385: Unable to place an aggregate grapn on a subtree
  * issue#390: Display graphs from this aggregate icon next to graph not
    displaying
  * issue#392: cdef.php missing sql where for system cdef's
  * issue#398: checkbox is not honored when creating tree
  * issue#399: External link configuration: Order buttons don't work
  * issue#400: SNMP Engine ID (v3) field too short
  * issue#401: Graphs -&gt; Apply Automation Rules fails
  * issue#404: Success even when test mail fails
  * issue#406: HRULE text format special characters not escaped
  * issue#408: Suppress SNMP units suffix from cacti_snmp_get() output
  * issue: Improve is_ipaddress functions
  * issue: Drag &amp; drop showing when disabled on page
    automation_templates.php
  * issue: Output messages displayed incorrectly in
    automation_templates.php and automation_snmp.php
  * issue: Importing template from old Cacti would not show data templates
  * issue: Handle snmp error exceptions better
  * issue: Update Apache .htaccess files to support multiple version
  * issue: When executing a full sync, if the table structured has
    changed, recreate the remote table
  * issue: Multiple domains not working as expected
  * feature#197: Add external_id to Cacti for linking Cacti to other
    monitoring systems
  * feature#332: Support copy user groups
  * feature: Log proper IP address if logging in behind a NAT
  * feature: New qquery parsing rules: VALUE/TEST, VALUE/TABLE,
    VALUE/HEX2IP</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- cacti 1.0.6:
  * issue#386: Allow special characters in graph title
  * issue#414: Install Wizard check path for spine
  * issue#415: SNMP session handling broken
  * issue#418: LDAP create user from template not working</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Build version 1.1.0
  * issue#337: Generic SNMP OID Graph Template damanged
  * issue#338: Extremely slow new graph/DS creation
  * issue#353: Broadcast &amp; Multicast Packet counters missing
  * issue#376: Structured RRD path permission issues
  * issue#389: Manual template based graph creation not working
  * issue#407: The RRDfile does not exist message is misleading
  * issue#410: Select character data was interpreted as hex by
    cacti_snmp_walk()
  * issue#422: additional issues with LDAP authentication
  * issue#424: Automation does not discover devices w/o resolvable
    hostnames
  * issue#427: undefined index TotalVisibleMemorySize on FreeBSD
  * issue#432: SpikeKill menu wonky on Paw Theme
  * issue#434: password_verify not compatible in php5.4-
  * issue#435: urlPath missing from paw theme links
  * issue#436: Restricted user does not see graphs in tree view
  * issue#443: Allow remote_agent.php through a NAT
  * issue#446: No local admin when using multiple LDAP configuration
  * issue#447: Creating another non data query graph from same template
    reuses first data source
  * issue#449: exec_poll_php does not flush pipes when using script server
  * issue#450: Graph list view - No Graphs Found
  * issue: Improve email test exception errors and change default timeout
    to 10 seconds
  * issue: When on links page, breadcrumbs would become corrupted
  * issue: When upgrading from any version of Cacti to 1.0.5, SQL's
    relative to poller_reindex might appear
  * issue: Color page performance poor
  * issue: The Device dropdown on the Graph View page was unreliable
  * issue: Aggregate and non-Device Graphs in list view had not Device or
    Title description
  * issue: Re-engineer back button design to accomocate ajax and native
    navigation
  * issue: Make Graph Template filter wider
  * issue: Resolve some visual issues in Classic theme
  * feature: Add page refresh API to make page refreshing in Ajax easier
    to accomplish
  * feature: Update fontawesome to version 4.7
  * feature: Use fontawesome glyphs for menu items
  * feature: Support multiple column sort in table library
  * feature: Add glyphs to main Cacti console menu</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Build version 1.1.1
  * issue#457: Continued LDAP issues with initial user creation
  * issue#461: The function escapeshell arg not appropriate on Windows
  * issue#462: LDAP authorization issues: group membership check broken
    for 'Group Member Type' = 'Username'
  * issue#464: Change default batch spike removal limits for standard
    deviation and variance
  * issue#465: Less than sign inside items and labels of graph break graph
  * issue#466: Call to member function row() on a non-object in
    lib/snmpagent.php
  * issue#467: Reduce the number of queries in log function
  * issue#472: Schema changes to improve performance
  issue#485:  When editing a device, the ping status was not always
    returned
  * issue: Back button issues due to syntax problems in JavaScript
  * issue: Zoom periodically would loose it's crosshairs after zooming
  * issue: Zoom would zoom out into the future even when disabled
  * issue: Fixing lite corruption in graph_templates_item table
  * feature: Make SpikeKill options more consistent
  * feature#459: Add variable date time option to report mail subject
  * feature#460: Add external_id to host variables
  * feature#469: Change re-index method of Data Query from Device edit
  * feature: Support generalized date format approach in the GUI
  * feature: Use localStorage over a Cookie for Zoom setting storage
  * feature: Fully implement 'Remove Orphans' from Package import process</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Build version 1.1.2
  * issue#492: Error while adding non data query (cg) graphs
  * issue#494: CLI error while importing template
  * issue#499: SQL error in graph automation resulting in no graphs
    on tree
  * issue#500: Generic SNMP device package damaged - Unix Ping Host
  * issue#505: Log rotation does not work in some cases
  * issue#506: Undefined index: cactiStatsDeviceFailedPolls
  * issue#507: Nextwork discovery 'export' produces no results
  * issue#509: Minor bug with device ownership selection
  * feature: Add new legend type that includes Current/Average/
    Minimum/Maximum
  * feature: Update d3.js to latest version 4.7.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations
- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache
- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations
- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>

</package>
<package pkgid="f7f441da0808c27e1fdf546078c4f57ccf4e85f889e5ec0414b0b06f07503da1" name="cacti-doc" arch="noarch">
    <version epoch="0" ver="1.1.28" rel="29.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Build version 1.1.3
  * issue#515: Unable to import color CSV file
  * issue#519: In non-classic themes its not possible to remove Cacti
    log or reporting tabs
  * issue#520: SQL error in graph automation
  * issue#521: Cacti allows removal of Data Query Graph Template
    associations when they are in use
  * issue#525: LAST GPRINT type not rendered correctly due to lack of
    escaping
  * issue#530: Undefined function get_vdef in lib/rrd.php
  * issue#531: Issues with TextAlign and Tick graph items
  * issue#532: Unreliable scroll height causes issues in Chrome
  * issue#533: User settings not cleared after saving profile
  * issue#534: Automation issue with AS clause
  * issue#538: Unable to rename tree folder
  * issue#541: Issues with mobile graph viewing
  * issue#555: DSStats SQL insert errors due to data collection issues
  * issue#563: Division by zero in removespikes.php
  * issue: Fixed rendering issues with HRULE's on graphs
  * issue: Update jsTree to 3.3.4 version
  * feature: Improved responsiveness UI tables, filters, and menus</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Build version 1.1.4
  * issue#524: Reporting not working when Tree branch is device
  * issue#560: Add 'Duplicate' and 'Convert to Graph Template' back
    to Graph Management page for Advanced mode
  * issue#573: Missing Graph Template dropdown items
  * issue#575: Very large hex strings result in scientific notation
    that RRDtool rejects
  * issue#579: Problems logging in using nginx web server
  * issue#581: session_start() warnings when manually sending reports
  * issue#584: Issues reporting memory recommendation on utilities page
  * issue#586: Overrunning pollers can cause system load spikes
  * issue#587: Data Collector setting under Network Discovery is not
    being used
  * issue#588: Devices with blank sysDescr are added to the first
    Device Template in error
  * issue#589: Automation discovery does not allow site association
  * issue#590: Unable to create a plugin based menu
  * issue#591: Row selection in Device Automation Templates not sane
    with drag-n-drop enabled
  * issue#601: Resolving some translation issues
  * issue#604: Unexpected backtrace on regular expression filters
  * issue#605: Remove Spikes non-numeric data causes warnings
  * issue: Ping email does not use a from email address
  * issue: Automation does not recognize default size or poller
  * issue: Unable to drag-n-drop on automation templates pages when
    enabled
  * issue: Fixed number of hosts in poller stats for first poller
  * issue: Fixed screenwidth issue in tab PHP-Info of Utilities module
  * issue: Recovery poller could get stuck in some situations
  * issue: Fix JavaScript errors when managing Aggregate Graphs
  * feature: Reorganize defaults to place more on device defaults page
  * feature: Update jQuery tableDnD to version 0.9
  * feature: More tolerant of empty PHP_SELF found with some web servers</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Build version 1.1.5
  * issue#580: Data collection warnings when using cmd.php
  * issue#592: Incorrectly formatted HTML
  * issue#606: Replace &lt;path_php_binary&gt; in data input methods
  * issue#607: Allow draw_menu to specify multiple actions for the same
    URL
  * issue#608: Spaces adjacent to double quotes are eliminated during
    data input method import
  * issue#609: Honor the column setting in graph tree view mode
  * issue#610: Change Graph Template action not available
  * issue#611: Cacti Installation Wizard - Spine page incorrect on
    Windows
  * issue#612: Uncaught Error: Call to a member function row() on a
    string
  * issue#613: Network Automation, now requires a site or your are
    unable to save rules
  * issue#615: Data Input field length too short for longer scripts
  * issue#619: Export logging option in settings no longer used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Build version 1.1.6
  * issue#620: The table poller_data_template_field_mappings can get
    out of sync when manipulating data templates
  * issue#622: Can not connect to MySQL over a socket
  * issue#628: Cacti upgrade process is complex and error pront for
    developers
  * issue#635: Error when saving change to data template
  * issue#637: When displaying tree graphs, use the same layout as
    preview mode
  * issue#646: When a plugin is disabled during page operations,
    warnings can appear
  * issue#651: Unable to view cacti log (because of allowed memory size
    exhausted)
  * issue#657: Error in log when host is down, using icmp and using
    cmd.php on FreeBSD
  * issue: List for creating a Graph type shows already added Graph
    Templates
  * issue: Fix and undefined variable on data source page when first
    creating a manual data source
  * issue: Remove tabindex and other non-required manual aria controls
    from pages
  * issue: Table type and column type in poller_output table wrong
  * issue: FILTER_VALIDATE_MAC not defined on PHP less than 5.5
  * issue: When changing your language Cacti would not do a full page
    refresh
  * feature#106: Paginated CLOG and log administration
  * feature: Dutch translations
  * feature: Responsive Graphs page
  * feature: Convert forms from table based to div based for responsive
    design
  * feature: Better support for phones and tablets
  * feature: Simplified installation code to facilitate easier release
    cycle
  * feature: Updating Tablesorter to v2.28.9, adding widgets and pager</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Build version 1.1.7
  * issue#470: Enhance Cacti's SNMP function and Data Query XML, add
    &lt;output_format&gt;hex|string|guess&lt;/output_format&gt;
  * issue#653: Devices with empty sysNames are not added to discovered
    devices
  * issue#655: Data source not displaying device name
  * issue#658: Scheduled Reports (type "tree") not working
  * issue#662: Sending test Email should optionally bypass ping
  * issue#667: In Classic theme initial view of Tree view broken
  * issue#669: Invalid SQL Messages when upgrading to Cacti 1.0.5
  * issue#670: Validation error when you do "Change Graph Template" in
    Cacti
  * issue#672: Cacti unable to enable snmp notification receiver mibs
  * issue#680: Sort order in Time Graph View
  * issue#687: Cacti DB access not compatible with PHP 7
  * issue#696: Multiple issues with snmpagent notification UI
  * issue#699: Add custom error handler for ping functions
  * issue#704: Fix GUI issues for Graphs not belonging to a device
  * issue#707: Back button not working
  * issue#708: Issues finding lib/snmp.php in host disk functions
  * issue#712: Change Graph Template dropdown invalid
  * issue#717: Allow ajax callbacks when adding non-templated graph
    items
  * issue: Reports were not using Cacti's permission system for checking
    access
  * issue: User Admin page reported wrong permissions at Tree level
    missing some i18n as well
  * issue: Short data_name can cause data collection issues
  * feature: Updated Dutch language
  * feature: Updating PHPMailer to 5.2.23
  * feature: Support input-output Data Query types
  * feature: Introduce new get_cacti_version() to reduce database calls
    on pages</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Build version 1.1.9
  * issue#788: Fails on PHP Fatal error if LDAP auth enabled
- Build version 1.1.8
  * issue#529: Issue on Graph New page with checkbox unselected
  * issue#552: Minor selectable row checkbox issue
  * issue#577: Dragging multiple items causes the tree to refresh too
    early
  * issue#617: Correct poller timeouts when no devices are associated with
    active data collector
  * issue#706: Classic external link template images missing
  * issue#726: Undefined variable in upgrade script
  * issue#728: Resolve issues with jQueryUI empty dialogs
  * issue#731: Add class to radio button labels to correct display issue
  * issue#736: Sequence numbers not visible when editing templates using
    modern theme
  * issue#739: Graph Titles missing on aggregate graphs
  * issue#740: Spacer manipulation broken after update to responsive forms
  * issue#741: Errors in dsstats with very large RRDfiles with more than 60
    data sources
  * issue#748: Search results are not cleared on Aggregates
  * issue#754: Default Language for user and system are not set on new
    installation
  * issue#755: RRDtool Graph Watermark is incorrect
  * issue#756: Resolving some translation issues
  * issue#763: Template Export not functional
  * issue#765: Validation error when viewing Utility View
  * issue#771: Editing a report renders no options after creation
  * issue#780: Preview always shows thumbnails in reports interface
  * issue: Hide Aggregate system cdefs when editing graphs and graph templates
  * issue: Updating Utility View zoom was not updating table data
  * feature#723: Convert Data Source dropdown to autocomplete when editing
    standalone graphs
  * feature#735: Allow color selection in graphs and templates to be autocomplete
  * feature#753: Preliminary support for RRDtool 1.7.
  * feature: Add function to obtain the current execution user
  * feature: Implement Site timezones as autocomplete for performance
  * feature: For themes other than classic, make color id selection autocomplete
  * feature: CLOG timestamp is now formatted as defined in settings
  * feature: CLOG can show loginformation from rotated logfiles</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Build version 1.1.10
  - issue#779: Resolve random apache segfault due to recursion
  - issue#786: Unable to create second RRA for a Data Source Profile
  with collection rate less than 5 minutes
  - issue#789: Unable to Clear Filter due to JavaScrpt name space
    collision
  - issue#791: cacti 1.1.9 and clog_webapi.php permission issue
  - issue#794: SQL Error when creating graphs manually
  - issue#798: Cosmetic issue when checking checkboxes in Cacti
  - issue#800: Unchecked loop in lib/html_utility.php causing race
    condition
  - issue#802: Issue updating device hostname with SNMP data queries
  - issue#803: Issues with utf8mb4 introduced via optimization
  - issue: If the device is down and snmp_sysUpTimeInstance is 0, time
    in state can be wrong
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Build version 1.1.12
  - issue#822: Aggregate Graph Items are incorrectly editable
  - issue#823: Allow Filters to be hidden
  - issue#834: Add spacing on graphs pages
  - issue: Uninstalled plugins can not install
  - issue: Location of filter functions in host.php prevent full
    responsive filter implementation
  - feature: Implement first phase of responsive search filters
- Build version 1.1.11
  - issue#642: RRA not written or WARNING: Poller Output Table not Empty
  - issue#779: PHP running out of memory due to date format issues
  - issue#791: SeLinux causing problems due to recent enhancement of the
    Cacti log
  - issue#818: Unable to unselect all SpikeKill templates under settings
  - issue#831: Unable to add devices from automation devices that don't have
    a snmpSysname
  - issue: incorrect version of pace: fix progess bar
  - issue: date_format(): fix date separator character
  - issue: host.php: fix itemCount en rowCount when result = null
  - issue: clog: fix scandir for systems with limited permissions to log
    directory
  - issue: clog: fix listing of logfiles
  - issue: Stop New Graphs filter interface from taking too much space
  - issue: Pagination of clog is not done via ajax
  - issue: Unable to dry run spikekill's from Graphs page
  - issue: Default sort order does not highlight on Aggregate Template page
  - issue: Correct display issue with Graph Templates when editing Device
  - issue: External Data Sources show as having poller interval on Data
    Source page
  - issue: Allow Selecting 'External' as the Data Source Profile when creating
    non-templated Data Source
  - issue: Remove Field Order on Data Input output data as it's not required
  - issue: Data Templates not using Ajax callbacks to switch Data Sources
  - issue: Visual issue when creating non-templated Aggregate Graphs
  - feature: new skin: Sunrise
  - feature: Provide Non Compatible explanation when a plugin is not compatible
  - feature: Updated Dutch translations
  - feature: Allow Graph Templates with multiple flag to be created repeatedly
    from Graphs New interface
  - feature: Allow plugins to exclude files and directories from their remote
    poller synchronization process
  - feature: Add Device Description to View Poller Cache UI</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Build version 1.1.13
  issue#605: Remove Spikes feature not fully functional
  issue#814: Allow 'Save' feature from New Graphs
  issue#837: Using the add_device.php CLI script, you can not
    'default' the device threads to other than 1
  issue#838: CVE-2017-10970: XSS Issue in link.php bsc#1047512
  issue#839: The Database column name 'rows' is a reserved word
    in MariaDB 10.2+
  issue#845: External links tabs should appear at the end of the tab
    view
  issue#846: Web crawl of Cacti site shows errors in the log
  issue#847: CVE-2017-11163: XSS Issue in lib/html_form.php
    bsc#1048102
  issue#853: Go and Clear buttons do not work in all cases on Graph
    Rules pages
  issue: Up/Down arrow titles labeled incorrectly on Tree
    Management page
  issue: Make the default Export Type a Device Template
  issue: Fix SNMPagent MIB cache issues
  issue: Realtime cache cleanup now only removes rrd and png
  issue: When redirected from reports, you can receive a
    validation error
  feature: updated Dutch language</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Build version 1.1.14
  - issue#849: Unable to select host in Graph Item pick
  - issue#850: Reporting not allowing Non-templated Graphs
  - issue#858: Pagination on SNMP Options wrong
  - issue#860: Network Discovery Subnet Range character limit too small
  - issue#861: The search filter does not support Cyrillic
  - issue#862: Automation - When editing Graph Rules, unable to
    Change Data Query
  - issue#863: Typo error in auth_login.php for LDAP authentication
  - issue#867: Cross-site scripting (XSS) vulnerability in auth_profile.php
  CVE-2017-11691 bsc#1050950
  - issue: Link's not showing in Automation Graph and Tree rules on
    Sunshine theme
  - issue: Make Templates Export responsive
  - issue: Don't wrap menu glyphs and menuitems
  - issue: The function get_order_string() can fail when encountering
    reserved word columns
  - issue: Data Query Delete is not using callback
  - feature: Resize Graphs on Graph page to be responsive
  - feature: Make import text a hidden field as it is likely
    seldom used</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Build version 1.1.15
  - issue: PHP Fatal Exception on upgrade from 1.1.11 or earlier
  - feature: Added test to detect install upgrade code problems</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Build version 1.1.16
  issue#865: Escape Data Query arguments to prevent issues with
    special characters
  issue#872: Can't add device items to graphs generated with no
    device and no template
  issue#875: When modifying Realm permissions, realms that are
    listed multiple times don't stay in sync
  issue#877: Improving resolution to issue#847 and one additional
    vulnerability
    CVE-2017-12065 bsc#1051633
  issue#878: Ambiguous language in purge log function
  issue#879: SQL Error when adding a report item to a report
  issue#880: Device drop down is limited to 20 devices and lacks
    a scroll bar
  issue#885: Graph generated with no device and no graph template
    forgets device definitions
  issue#886: Unable to export templates other than Device templates
  issue: Address additional corner cases around get_order_string usage
  issue: Data Queries sharing a Data Source can result in poller
    output table not empty errors
  issue: Fix Sunrise theme to properly theme multiselect widgets
  issue: Increase height of multiselects so that more options are
    visible
  issue: When a graph is locked, anchor tags are still functional</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Build version 1.1.17
  issue#450: List View to Preview shows no results
  issue#486: Export Device table results to CSV
  issue#544: Allow Log Rotation to be other than Daily
  issue#673: Downtime/Recovery time/date is set incorrectly
  issue#819: Customized timespans for graphs
  issue#888: Rebuilding Poller Cache when External data sources are
    present results in false positive warnings in the log
  issue#891: Database.php unable to connect to MySQL when using port
    different than 3306
  issue#893: Warning messages when duplicating CDEF objects
  issue#897: Due to browser use of special key, deprecate ctrl-shift-x
    for clearing filter
  issue#898: Issue with tcp and udp ping due to file description
    allocation changes
  issue: Unable use ipv6 ip addresses for snmp ping in the Cacti GUI
  issue: Update language of the Rebuild Poller Cache menu pick
  issue: Broken design for input controls with Sunrise theme
  issue: Timespan switching not switching to Custom in Preview Mode
  issue: Log rotation would not occur under certain conditions.
    Provide more control over log functions
  issue: Purge log file always purged the cacti.log, not the selected
    log
  issue: Unable to view graphs for errored data sources from Cacti log</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Build version 1.1.19
  issue#810: Scripts in packages don't match distribution
  issue#919: Unable to upgrade to 1.1.18
  issue: Update documentation for minimum PHP 5.4
- Build version 1.1.18
  issue#902: Correcting some issues with Console and External Links
  issue#903: Upgrade pace.js to v0.7.8
  issue#904: Allow user to hide Graphs from disabled Devices
  issue#906: Create a separate Realm for Realtime Graphs
  issue#907: XSS issue in spikekill.php
    CVE-2017-12927 bsc#1054390
  issue#910: Boost last run duration generates an error on new install
  issue#914: Unable to purge Cacti logfile from System Utilities
  issue#915: Non-numeric data in ss_host_disk.php
  issue#916: Resolve display of errors when encountering ldap issues
  issue#918: Minor XSS and create generalized escape function
    CVE-2017-12978 bsc#1054742
  issue: Resolve JavaScript errors on Login page
  issue: Resolve JavaScript errors on Permission Denied pages
  issue: Graphs tab would appear in non-classic even if you did not
    have permissions
  feature: Updated dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Build version 1.1.21
  issue#938: Problems upgrading to 1.1.20 with one table alter
    statement
  issue#952: CSV Export not rendering chinese characters correctly
  issue: Minor alignment issue on tables
- Build version 1.1.20
  issue#920: Issue with scrollbars after update to 1.1.19 related
    to #902
  issue#921: Tree Mode no longer expands to accomodate full tree
    item names
  issue#922: When using LDAP domains some setings are not passed
    correctly to the Cacti LDAP library
  issue#923: Warninga in cacti.log are displayed incorrectly
  issue#926: Update Utilities page to provide more information on
    rebuilding poller cache
  issue#927: Minor schema change to support XtraDB Cluster
  issue#929: Overlapping frames on certain themes
  issue#931: Aggregate graphs missing from list view
  issue#933: Aggregate graphs page counter off
  issue#935: Support utf8 printable in data query inserts
  issue#936: TimeZone query failure undefined function
  issue: Taking actions on users does not use callbacks
  issue: Undefined constant in lib/snmp.php on RHEL7
  issue: Human readable socket errno's not defined
  issue: Audit of ping methods tcp, udp, and icmp ping. IPv6 will still
    not work till php 5.5.4</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Build version 1.1.23
  issue#963: SQL Errors with snmpagent and MariaDB 10.2
  issue#964: SQL Mode optimization failing in 1.1.22
- Build version 1.1.22
  issue#950: Automation - New graph rule looses name on change
  issue#952: CSV Export not rendering chinese characters correctly
    (Second attempt)
  issue#955: Validation error trying to view graph debug syntax
  issue: MySQL/MariaDB database sql_mode NO_AUTO_VALUE_ON_ZERO
    corrupts Cacti database
  issue: When creating a data source, the data source profile does
    not default to the system default
  feature: Enhance table filters to support new Cycle plugin
  feature: Updated Dutch Translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Build version 1.1.24
  - issue#932: Zoom positioning breaks when you scroll the graph page
  - issue#970: Remote Data Collector Cache Synchronization missing
    plugin sub-directories
  - issue#980: Resolve issue where a new tree branches refreshs before
    you have a chance to name it
  - issue#982: Data Source Profile size information not showing properly
  - issue: Long sysDescriptions on automation page cause columns to
    be hidden
  - issue: Resolve visual issues in Classic theme
  - feature: Allow Resynchronization of Poller Resource Cache</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Build version 1.1.26
  - issue#841: --input-fields variable not working with add_graphs.php
    cli
  - issue#986: Resolve minor appearance problem on Modern theme
  - issue#989: Resolve issue with data input method commands loosing
    spaces on import
  - issue#1000: add_graphs.php not recognizing input fields
  - issue#1003: Reversing resolution to Issue#995 due to adverse impact
    to polling times
  - issue#1008: Remove developer debug warning about thumbnail validation
  - issue#1009: Resolving minor issue with cmd_realtime.php and a changing
    hostname
  - issue#1010: CVE-2017-15194 - Path-Based Cross-Site Scripting (XSS)
  - issue#1027: Confirm that the PHP date.timezone setting is properly set
    during install
  - issue: Fixed database session handling for PHP 7.1
  - issue: Fixed some missing i18n
  - issue: Fixed typo's
  - feature: Updated Dutch translations
  - feature: Schema changes; Examined queries without key usage and
    added/changed some keys
  - feature: Some small improvements
- Build version 1.1.25
  - issue#966: Email still using SMTP security even though set to none
  - issue#995: Redirecting exec_background() to dev null breaks some
    functions
  - issue#998: Allow removal of external data template and prevent their
    creation
  - issue: Remove spikes uses wrong variance value from WebGUI
  - issue: Changing filters on log page does not reset to first page
  - issue: Allow manual creation of external data sources once again
  - feature: Updated Dutch translations</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Build version 1.1.27
  - issue#1033: Issues inserting into dsstats table due to legacy data
  - issue#1039: Using html_escape still double escapes.  Use strip_tags
    instead
  - issue#1040: Resolving compatibility issue with PHP7.2</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Build version 1.1.28
  - issue#958: User Group Tree permissions not calculated fully
  - issue#959: Issue viewing email reports due to email client
    decoding problems
  - issue#992: RRDfile naming issues that result from random sorting
    during export
  - issue#1012: Issue where disabled devices will not appear in
    Tree editor
  - issue#1044: Handle invalid exclusion regex properly when viewing
    the log
  - issue#1045: Issue with multiple pages and confirmation dialogs
  - issue#1048: Problem importing vdefs from templates
  - issue#1053: Remote Data Collector now works with https and self
    signed certificates
  - issue#1055: Errors in data source statistics inserts when invalid
    output is encountered
  - issue#1057: CVE-2017-16641 - Potential vulnerability in RRDtool
    functions boo#1067166
  - issue#1058: ICMP Ping to and IPv6 address fails to gather data for
    ping latency
  - issue#1059: Aggregate item filter should use regular expressions to
    avoid SQL errors due to flawed filter logic
  - issue#1064: When a Device Template is removed, Automation Templates
    for that Device Template remain
  - issue#1066: CVE-2017-16660 in remote_agent.php logging function
    boo#1067164
  - issue#1066: CVE-2017-16661 in view log file boo#1067163
  - issue#1071: CVE-2017-16785 in global_session.php Reflection XSS
    boo#1068028
  - issue#1074: Boost records get stuck in archive
  - issue#1079: Undefined index in lib/snmpagent.php
  - issue#1085: Undefined function html_log_input_error
  - issue#1086: Rerun data queries in automation process has no effect
  - issue#1087: cli/add_device.php --proxy option does not work with non-snmp
    devices
  - issue#1088: Set timeout for remote data collector context
  - issue: Minor performance increase in boost processing
  - issue: Poller output not empty not processed correctly on Log tab
  - feature: Timeout to the remote agent for realtime graphs
  - feature: Updated Dutch translations
  - feature: Database update adding additional indexes for increased
    performance
  - feature: Updated PHPMailer to version 5.2.26
  - feature: Updated phpseclib to version 2.0.7</changelog>

</package>
<package pkgid="696fdd30a3775c67dc7e5d3f5b7590ba1e8efb4e27390ec9c691d68200d600fd" name="cacti-spine" arch="src">
    <version epoch="0" ver="1.1.16" rel="10.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1462795200">- Update to version 0.8.8h
  * bug:0002659: wrong information about spine setup for icmps
  * bug: Removed requirement for building man page, deferred to 1.0
- Update to version 0.8.8g
  * bug:0002380: please build man page for spine
  * bug:0002610: Spine is trying to use mysql results after data
    being freed
  * bug:0002639: Spine does not respect snmp_retries from the
    database
  * bug:0002640: Spine crashes randomly while polling using
    multiple threads on one device
  * bug:0002549: Spine: hasCaps() always returns FALSE
  * bug:0002638: Spine: ping_udp() uses uninitialised socket timeout
  * bug:0002654: On RHEL 6.5, spine ./configure builds Makefile
    without crypto support</changelog>
<changelog author="joop.boonen@opensuse.org" date="1487937600">- Update to version 1.0.3
  * issue#6: Spine accepts arbitrary polling modes
- Update to version 1.0.2
  * feature: release to match Cacti release
- Update to version 1.0.1
  * bug:With enough make jobs, help2man will fail if help2man is run before spine has been built
- Update to version 1.0.0
  * feature: Track per host polling time
  * feature: Collect System Mib Information
  * feature: Place collection timing into host table
  * feature: Support snmpContextEngineID
  * feature: Change all references of Host to Device
  * bug:0001415: spine does not handle log_perror
  * bug#0002220: spine/cacti patch to allow SNMP_polling decices' hostnames like user@host:port
  * bug#0002234: Wrong alphanumeric value got from Spine SNMP poller
  * bug#0002651: False Positive Down status with snmpv3
  * bug#0002674: Segmentation fault in Spine during polling host</changelog>
<changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 1.0.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>

</package>
<package pkgid="fff16d80d5eea2ab2062c4155340a5b54784c09712d24bd9a934c11ba73c2e0e" name="cacti-spine" arch="src">
    <version epoch="0" ver="1.1.19" rel="13.1"/>

<changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 1.0.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>

</package>
<package pkgid="628335ba44c2b94ab02c971a602150416f8a63cd72ee8523ba2d2cc4968485c5" name="cacti-spine" arch="src">
    <version epoch="0" ver="1.1.26" rel="16.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release
- Update to version 1.1.24
  * feature: release to match Cacti release
- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release
- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>

</package>
<package pkgid="f0067952512595b0ed93bf833e2bd69500c37d389ea61eb1dfa97471986215d7" name="cacti-spine" arch="src">
    <version epoch="0" ver="1.1.28" rel="20.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Update to version 1.1.24
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Update to version 1.1.27
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Update to version 1.1.28
  * feature: release to match Cacti release</changelog>

</package>
<package pkgid="4572b6c152f4a7c69e45aba82b94e191e82d9aea93b0cf8ef483df5f666957ba" name="cacti-spine" arch="x86_64">
    <version epoch="0" ver="1.1.16" rel="10.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1462795200">- Update to version 0.8.8h
  * bug:0002659: wrong information about spine setup for icmps
  * bug: Removed requirement for building man page, deferred to 1.0
- Update to version 0.8.8g
  * bug:0002380: please build man page for spine
  * bug:0002610: Spine is trying to use mysql results after data
    being freed
  * bug:0002639: Spine does not respect snmp_retries from the
    database
  * bug:0002640: Spine crashes randomly while polling using
    multiple threads on one device
  * bug:0002549: Spine: hasCaps() always returns FALSE
  * bug:0002638: Spine: ping_udp() uses uninitialised socket timeout
  * bug:0002654: On RHEL 6.5, spine ./configure builds Makefile
    without crypto support</changelog>
<changelog author="joop.boonen@opensuse.org" date="1487937600">- Update to version 1.0.3
  * issue#6: Spine accepts arbitrary polling modes
- Update to version 1.0.2
  * feature: release to match Cacti release
- Update to version 1.0.1
  * bug:With enough make jobs, help2man will fail if help2man is run before spine has been built
- Update to version 1.0.0
  * feature: Track per host polling time
  * feature: Collect System Mib Information
  * feature: Place collection timing into host table
  * feature: Support snmpContextEngineID
  * feature: Change all references of Host to Device
  * bug:0001415: spine does not handle log_perror
  * bug#0002220: spine/cacti patch to allow SNMP_polling decices' hostnames like user@host:port
  * bug#0002234: Wrong alphanumeric value got from Spine SNMP poller
  * bug#0002651: False Positive Down status with snmpv3
  * bug#0002674: Segmentation fault in Spine during polling host</changelog>
<changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 1.0.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>

</package>
<package pkgid="f607bc52a5c599e4f768fce421d96a9dbf7aabfc6fa1b144fed09c9e8ea94823" name="cacti-spine" arch="x86_64">
    <version epoch="0" ver="1.1.19" rel="13.1"/>

<changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 1.0.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>

</package>
<package pkgid="f6744bd0eff5e01dde49fc98cd074da4ea217c5c7356fbf2b6bb21e3c705e06c" name="cacti-spine" arch="x86_64">
    <version epoch="0" ver="1.1.26" rel="16.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1489406400">- Update to version 1.0.5
  * issue#7: remove database name not respected</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1489579200">- Update to version 1.0.6
  * feature: release to match Cacti release</changelog>
<changelog author="joop.boonen@opensuse.org" date="1490097600">- Update to version 1.1.0
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1490702400">- Update to version 1.1.1
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1491220800">- Update to version 1.1.2
  * issue#13: Spine does not compile with --enable-lcap
  * issue#16: Spine not handling debug devices correctly</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release
- Update to version 1.1.24
  * feature: release to match Cacti release
- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release
- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>

</package>
<package pkgid="975b2e1491ab379570e1104c96ef48842d382f0b7724dae26f5536a1038f3705" name="cacti-spine" arch="x86_64">
    <version epoch="0" ver="1.1.28" rel="20.1"/>

<changelog author="liedke@rz.uni-mannheim.de" date="1492344000">- Update to version 1.1.3
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493035200">- Update to version 1.1.4
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1493208000">- Update to version 1.1.5
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 1.1.6
  * issue#15: Spine can cause high CPU utilization due to
    semaphore implementation
  * issue#11: Spine reports SNMP timeouts in some cases when
    gathering multiple OID in one request</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1495454400">- Update to version 1.1.7
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1496664000">- Update to version 1.1.9
  * feature: release to match Cacti release
- Update to version 1.1.8
  * issue#21: Errors when snmp_sysLocation contains a single quote</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1497268800">- Update to version 1.1.10
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1499256000">- Update to version 1.1.12
  * feature: release to match Cacti release
- Update to version 1.1.11
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500033600">- Update to version 1.1.13
  * issue: Script timeout should start after semaphore releases
  * issue: Don't include line breaks in Syslog</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897600">- Update to version 1.1.14
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1500897601">- Update to version 1.1.15
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1501588800">- Update to version 1.1.16
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1502798400">- Update to version 1.1.17
  * issue: Increase logging level for POPEN timeouts</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1503316800">- Update to version 1.1.19
  * feature: release to match Cacti release
- Update to version 1.1.18
  * issue: Sort devices by polling time to allow long running
    devices to go first</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1504612800">- Update to version 1.1.21
  * feature: release to match Cacti release
- Update to version 1.1.20
  * issue#28: UDP and TCP ping issues</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505217600">- Update to version 1.1.23
  * feature: release to match Cacti release
- Update to version 1.1.22
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1505736000">- Update to version 1.1.24
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508155200">- Update to version 1.1.26
  * feature: release to match Cacti release
- Update to version 1.1.25
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1508760000">- Update to version 1.1.27
  * feature: release to match Cacti release</changelog>
<changelog author="liedke@rz.uni-mannheim.de" date="1511179200">- Update to version 1.1.28
  * feature: release to match Cacti release</changelog>

</package>
<package pkgid="f11c5b2c49fc898fd0874d30ea62a69a139d4a22481527100d83c8a0df56619a" name="catdoc" arch="src">
    <version epoch="0" ver="0.95" rel="10.1"/>

<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1" date="1134216000">- Initial package.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1.2" date="1144497600">- Rebuild for Fedora Core 5.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94.2-1" date="1145793600">- Updated to release 0.94.2.</changelog>
<changelog author="John Pye &lt;john@curioussymbols.com&gt; 0.94.2-2" date="1185969600">- Fixing 'makeinstall' macro for SUSE.
- Fixing install of man page(s).</changelog>
<changelog author="Raymond Wooninck &lt;tittiatcoke@gmail.com&gt; - 0.94.2" date="1237204800">- Moved package to KDE:KDE4:Community to support Recoll</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381838400">- Update to 0.94.4
-  Changes since 0.94.3:
  * Remove extra ';' in src/xlsparse.c which turned for loop in
    xlsparse into a buffer overflow
-  Changes since 0.94.2:
  * Fix codepage bugs
  * Fix charset bug
  * Handle negative numbers on 64bit architectures
  * Fix Macintosh MS1904 date bug in xlsparse reported ubuntu</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384689600">- Added dont_build_xls2csv.patch: xls2csv is provided by two other
  packages, so we don't need it built
- Added install.patch, for honoring installroot variable</changelog>
<changelog author="astieger@suse.com" date="1496232000">- catdoc 0.95:
  * Fix various issues found during fuzzing which may lead to an
    application crash or have unspecified further impact when
    the user is tricked into opening specially crafted files
    bsc#919228
  * Replace charset tables with new ones, published by Unicode
    Consortium with more permissive license
  * Fix some incompatibilities with CLang
  * Fix lot of segfaults on incorrect or corrupted data
  * Use stdint int types throughout the code
- drop install.patch</changelog>
<changelog author="astieger@suse.com" date="1499688000">- CVE-2017-11110: Attackers may have used specially crafted files
  to cause a denial of service through a heap-based buffer under-
  flow and application crash, or have unspecified other impact.
  Add CVE-2017-11110.patch bsc#1047877</changelog>

</package>
<package pkgid="7d377b4dc51db3874b495ea4e45c9921add905af8427cbf324552ea177ba5126" name="catdoc" arch="x86_64">
    <version epoch="0" ver="0.95" rel="10.1"/>

<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1" date="1134216000">- Initial package.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94-1.2" date="1144497600">- Rebuild for Fedora Core 5.</changelog>
<changelog author="Dries Verachtert &lt;dries@ulyssis.org&gt; - 0.94.2-1" date="1145793600">- Updated to release 0.94.2.</changelog>
<changelog author="John Pye &lt;john@curioussymbols.com&gt; 0.94.2-2" date="1185969600">- Fixing 'makeinstall' macro for SUSE.
- Fixing install of man page(s).</changelog>
<changelog author="Raymond Wooninck &lt;tittiatcoke@gmail.com&gt; - 0.94.2" date="1237204800">- Moved package to KDE:KDE4:Community to support Recoll</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381838400">- Update to 0.94.4
-  Changes since 0.94.3:
  * Remove extra ';' in src/xlsparse.c which turned for loop in
    xlsparse into a buffer overflow
-  Changes since 0.94.2:
  * Fix codepage bugs
  * Fix charset bug
  * Handle negative numbers on 64bit architectures
  * Fix Macintosh MS1904 date bug in xlsparse reported ubuntu</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384689600">- Added dont_build_xls2csv.patch: xls2csv is provided by two other
  packages, so we don't need it built
- Added install.patch, for honoring installroot variable</changelog>
<changelog author="astieger@suse.com" date="1496232000">- catdoc 0.95:
  * Fix various issues found during fuzzing which may lead to an
    application crash or have unspecified further impact when
    the user is tricked into opening specially crafted files
    bsc#919228
  * Replace charset tables with new ones, published by Unicode
    Consortium with more permissive license
  * Fix some incompatibilities with CLang
  * Fix lot of segfaults on incorrect or corrupted data
  * Use stdint int types throughout the code
- drop install.patch</changelog>
<changelog author="astieger@suse.com" date="1499688000">- CVE-2017-11110: Attackers may have used specially crafted files
  to cause a denial of service through a heap-based buffer under-
  flow and application crash, or have unspecified other impact.
  Add CVE-2017-11110.patch bsc#1047877</changelog>

</package>
<package pkgid="58be804721cccd73cca8d224f1ab3fc421a5a87b87e1559a9aa2f935c61e4cc9" name="ceph" arch="src">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="cc74b27365f01f5d7a7b2fda1bca91838062e889d97ca038eaa86dcee386ac00" name="ceph" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="0b229852dca189b5b49cf237ad97172342090ee83a87972efe9bac5c55cb3f09" name="ceph-base" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="98da3a21078ce8f5edfbcd4c4f5f9d2d1b0da895de6b532fb99cfec9863a7495" name="ceph-common" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="975ee736da8e312dbacca03a2c528821c8189a0ea4ac332add054d21cfccad9d" name="ceph-fuse" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="c566f80abeefde4e4bdce9281c7763746853bea7bea60ead55348ce1197a0f6d" name="ceph-mds" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="b63c5a5c625d160e2f7ae01f8ea204f4f35921ffd621d240c950391ef77f2453" name="ceph-mgr" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="4a9a3cc1b454c20995b5a9d657db68abbd9d6e9dcaf2a8d6f85dc783e53ffa9c" name="ceph-mon" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="7d327074b0b7f320f23169342331188d7f7b2a311d06bf4ad1a59d40f72f7217" name="ceph-osd" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="33ff0d5c016022a4fd4204cbced308395e0a1075e370824067e1c5fece0e50b8" name="ceph-radosgw" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="7c016221e15017159aa5cc274c3b42e294ab6e87f4ba05ee3771036add1a4c40" name="ceph-resource-agents" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="ac26bf80225ff00febcbbfd247770f1ce9309817ee524357eed73b3e00802277" name="ceph-test" arch="src">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="06434f0698c9c36aadfda89dcc0bf3cb276e6e9e7ef420cf85a8babd44094396" name="ceph-test" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="282d2ab69afa508e6f7a10efc341a85fad175fb2f8a8832d65c1597e01c3dbeb" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="60.0.3112.78" rel="107.1"/>

<changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
<changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
<changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
<changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
<changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
<changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="69ffa615c110c1f3023a54a4559bff35b0e186f234aa04e6059dc29413c663ce" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="61.0.3163.100" rel="113.1"/>

<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="3b6ba158aadc85898a2087f2b7b00bfa1d3df0c69a3e8db3d1c2a96fedd5e518" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="61.0.3163.79" rel="110.1"/>

<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>

</package>
<package pkgid="e70b12984f96cef89c679680c33297a7bb5436b027e85a677a771df06539eebf" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="62.0.3202.75" rel="118.1"/>

<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>

</package>
<package pkgid="338142d4c525dbde7e6c9c060eb2cfebc9692de4ed2c9820822d49d27de9bab6" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="62.0.3202.75" rel="121.1"/>

<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>

</package>
<package pkgid="1f894ba65ac044e1ff38ea610522ab87dffc7ae914164a1db0b8b0cca8adf911" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="62.0.3202.89" rel="124.1"/>

<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>

</package>
<package pkgid="f4555f73ffac5bfe5cfbdabb75c3c7c5e24de5cf15345647087322ec7b15038d" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="63.0.3239.108" rel="130.1"/>

<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
<changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
<changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
<changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
<changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>

</package>
<package pkgid="199dc06910bbc6ec88417d55898ca07d7c743ea1b1817803334a492935188519" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="63.0.3239.84" rel="127.1"/>

<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
<changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
<changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
<changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>

</package>
<package pkgid="d79737f8a32f2c95b4e3a0684fe6ffecdff5569f29e0e2841b9d8d83ce4b0802" name="chromium" arch="src">
    <version epoch="0" ver="60.0.3112.78" rel="107.1"/>

<changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
<changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
<changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
<changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
<changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
<changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="50bf43fc1e2b69bfe15dbaa840b37d0962a4ba724fbd36e88cbc564dd4d5a3bb" name="chromium" arch="src">
    <version epoch="0" ver="61.0.3163.100" rel="113.1"/>

<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="b3a7eb8d90d38d0518f8f8882c54af33e1aaa0c6bcc5699bb82e1ab87eb2f3c7" name="chromium" arch="src">
    <version epoch="0" ver="61.0.3163.79" rel="110.1"/>

<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>

</package>
<package pkgid="d17c5d9f4b7e0a97e5872288ba7b42b2b0124f386611dbe8187623a012fd2998" name="chromium" arch="src">
    <version epoch="0" ver="62.0.3202.75" rel="118.1"/>

<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>

</package>
<package pkgid="784506fd0bccb27c2843b311afc4be2044c2191f10ea07f24135894e21110959" name="chromium" arch="src">
    <version epoch="0" ver="62.0.3202.75" rel="121.1"/>

<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>

</package>
<package pkgid="d8e65427b49010a9b5bd771ed8ce4f71f58500f954c36fbb82944933d50a2b5a" name="chromium" arch="src">
    <version epoch="0" ver="62.0.3202.89" rel="124.1"/>

<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>

</package>
<package pkgid="1ad85e2e865a9a35582df1ff17918cb99b02615293e53fa04965940642efd68c" name="chromium" arch="src">
    <version epoch="0" ver="63.0.3239.108" rel="130.1"/>

<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
<changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
<changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
<changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
<changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>

</package>
<package pkgid="9b5b2be56e38f658ca6d78f6d405eaa554739f1ed5b5cf63aa43903f626ad497" name="chromium" arch="src">
    <version epoch="0" ver="63.0.3239.84" rel="127.1"/>

<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
<changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
<changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
<changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>

</package>
<package pkgid="fabb4636f0e86d8fcc4472d6d68382f42abbd0931b391d6cc9c6157ea0475bf9" name="chromium" arch="x86_64">
    <version epoch="0" ver="60.0.3112.78" rel="107.1"/>

<changelog author="tchvatal@suse.com" date="1486123200">- Version update to 56.0.2924.87:
  * Various small fixes
  * Disabled option to enable/disable plugins in the chrome://plugins</changelog>
<changelog author="qvoheagbfovvhubzdxfx@posteo.net" date="1486382400">- Fixed a typo in the build requirements for system minizip.</changelog>
<changelog author="tchvatal@suse.com" date="1486382401">- Add condition for system harfbuzz to be disabled on SLE</changelog>
<changelog author="idonmez@suse.com" date="1487160000">- Also add harfbuzz-ng to keeplibs for SLE</changelog>
<changelog author="tchvatal@suse.com" date="1489147200">- Version update to 57.0.2987.98 bsc#1028848:
  CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5029 CVE-2017-5034
  CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5039 CVE-2017-5040
  CVE-2017-5041 CVE-2017-5033 CVE-2017-5042 CVE-2017-5038 CVE-2017-5043
  CVE-2017-5044 CVE-2017-5045 CVE-2017-5046
- Refresh patches
  * fix-gn-bootstrap.diff
  * chromium-linker-memory.patch
- Remove obsolete patches:
  * chromium-sandbox.patch
  * chromium-54-ffmpeg2compat.patch
- Remove vaapi patch which broke rendering on non-intel cards:
  * chromium-enable-vaapi-on-suse.patch
- From this release onwards i586 build is disabled</changelog>
<changelog author="tchvatal@suse.com" date="1489665600">- Do not use gcc5 and newer as the compat was fixed again
- Update to 57.0.2987.110 with various other small tweaks</changelog>
<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="d472d658911d126c6863280a6c756ebdda6c2e231c9c4a2bd0cea429dc6cbf95" name="chromium" arch="x86_64">
    <version epoch="0" ver="61.0.3163.100" rel="113.1"/>

<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>

</package>
<package pkgid="0c86efe574907bf305b4dc91b25052fc43b854ffadb5259dc45b69579a7ed8b3" name="chromium" arch="x86_64">
    <version epoch="0" ver="61.0.3163.79" rel="110.1"/>

<changelog author="tchvatal@suse.com" date="1489924800">- Add patch to build with gcc4
  * chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1490356800">- Drop the browser(npapi) provide which is not true</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 57.0.2987.133 bsc#1031677:
  * Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar
  * High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs
  * High CVE-2017-5052: Bad cast in Blink. Credit to JeongHoon Shin
  * High CVE-2017-5056: Use after free in Blink. Credit to anonymous
  * High CVE-2017-5053: Out of bounds memory access in V8. Credit to Team Sniper (Keen Lab and PC Mgr) reported through ZDI (ZDI-CAN-4587)</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Version update to 58.0.3029.81 bsc#1035103:
  * High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360
  * High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani
  * High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative
  * Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng
  * Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah)
  * Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous
  * Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip
  * Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar
  * Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani
  * Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to chenchu
  * Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani
  * Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman
- Refresh patch fix-gn-bootstrap.diff
- Refresh patch chromium-system-jinja-r13.patch
- Remove obsolete patch chromium-57-gcc4.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493121600">- Use bundled jinja2, system one changed in 2.9 too much to work
  * It is at least used only during build</changelog>
<changelog author="tchvatal@suse.com" date="1493899200">- Version update to 58.0.3029.96:
  * Fixes bsc#1037594 CVE-2017-5068</changelog>
<changelog author="tchvatal@suse.com" date="1494417600">- Version update to 58.0.3029.110:
  * Various small bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>

</package>
<package pkgid="6f247fc3ae3c51477f56819169ebccf2a729807139d8f30aecdf98368bd02c5b" name="chromium" arch="x86_64">
    <version epoch="0" ver="62.0.3202.75" rel="118.1"/>

<changelog author="tchvatal@suse.com" date="1496664000">- Add patch to build with gcc7:
  * chromium-gcc7.patch
- Add patch for fpermissive build error:
  * chromium-fpermissive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>

</package>
<package pkgid="773e38528bc5427457a82ca1a5d0af5813cb7b3abf84858ad5426401a3040222" name="chromium" arch="x86_64">
    <version epoch="0" ver="62.0.3202.75" rel="121.1"/>

<changelog author="tchvatal@suse.com" date="1496750400">- Update to 59.0.3071.86 bsc#1042833:
  * CVE-2017-5070: Type confusion in V8. Reported by Zhao Qixun(@S0rryMybad) of Qihoo 360 Vulcan Team on 2017-05-16
  * CVE-2017-5071: Out of bounds read in V8. Reported by Choongwoo Han on 2017-04-26
  * CVE-2017-5072: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-04-07
  * CVE-2017-5073: Use after free in print preview. Reported by Khalil Zhani on 2017-04-28
  * CVE-2017-5074: Use after free in Apps Bluetooth. Reported by anonymous on 2017-03-09
  * CVE-2017-5075: Information leak in CSP reporting. Reported by Emmanuel Gil Peyrot on 2017-01-05
  * CVE-2017-5086: Address spoofing in Omnibox. Reported by Rayyan Bijoora on 2017-05-16
  * CVE-2017-5076: Address spoofing in Omnibox. Reported by Samuel Erb on 2017-05-06
  * CVE-2017-5077: Heap buffer overflow in Skia. Reported by Sweetchip on 2017-04-28
  * CVE-2017-5078: Possible command injection in mailto handling. Reported by Jose Carlos Exposito Bueno on 2017-04-12
  * CVE-2017-5079: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-20
  * CVE-2017-5080: Use after free in credit card autofill. Reported by Khalil Zhani on 2017-04-05
  * CVE-2017-5081: Extension verification bypass. Reported by Andrey Kovalev (@L1kvID) Yandex Security Team on 2016-12-07
  * CVE-2017-5082: Insufficient hardening in credit card editor. Reported by Nightwatch Cybersecurity Research on 2017-05-11
  * CVE-2017-5083: UI spoofing in Blink. Reported by Khalil Zhani on 2017-04-24
  * CVE-2017-5085: Inappropriate javascript execution on WebUI pages. Reported by Zhiyang Zeng of Tencent security platform department on 2017-02-15
- Add patch to fix build with system dma:
  * chromium-dma-buf.patch
- Drop no longer needed patches:
  * chromium-linker-memory.patch
  * chromium-system-jinja-r13.patch
- Refresh patches:
  * chromium-gcc7.patch
  * chromium-system-ffmpeg-r3.patch
  * fix-gn-bootstrap.diff
- Use bundled libxml
  * Upstream unfortunately uses git snapshot that is not api/abi compatible</changelog>
<changelog author="tchvatal@suse.com" date="1496923200">- Add patch chromium-buildname.patch bsc#1043420</changelog>
<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>

</package>
<package pkgid="6b8d6e7657d1f29a3b99fdccbab9c31a3146e6b9a2aaf40b4502de29ccf8fcd4" name="chromium" arch="x86_64">
    <version epoch="0" ver="62.0.3202.89" rel="124.1"/>

<changelog author="astieger@suse.com" date="1497614400">- Update to 59.0.3071.104 (bsc#1044690):
  * CVE-2017-5087: Sandbox Escape in IndexedDB
  * CVE-2017-5088: Out of bounds read in V8
  * CVE-2017-5089: Domain spoofing in Omnibox
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1498219200">- Update to 59.0.3071.109:
  * ozone/drm: Only reuse ScanoutBuffers with compatible modifiers
  * Fixing mouse focus on WebView
  * Remove gtk dependency from gles tests
  * Set build flag when using own FreeType
  * Revert of [scheduler] Move some task types to suspendable task runner
  * Fix an incorrect method name on the chrome://site-engagement WebUI page
  * Linux/Windows: Removing Guest menu item for supervised profile</changelog>
<changelog author="tchvatal@suse.com" date="1498651200">- Update to 59.0.3071.115:
  * Various small fixes all around</changelog>
<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>

</package>
<package pkgid="a8c480401bf8d6687a327d3008a4a2b0ed4855194e0a9691d006170cda92821e" name="chromium" arch="x86_64">
    <version epoch="0" ver="63.0.3239.108" rel="130.1"/>

<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
<changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
<changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
<changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>
<changelog author="tchvatal@suse.com" date="1513339200">- Version update to 63.0.3239.108 bsc#1072976:
  * CVE-2017-15429: UXSS in V8
  * Various fuzzing fixes</changelog>

</package>
<package pkgid="37e4159816e192c48cf978432ba92f52aff129042c7fb2898909119b25768638" name="chromium" arch="x86_64">
    <version epoch="0" ver="63.0.3239.84" rel="127.1"/>

<changelog author="tchvatal@suse.com" date="1500897600">- Recommend emoji fonts to make sure major web chats do not show
  questionmarks</changelog>
<changelog author="tchvatal@suse.com" date="1501070400">- Version update to 60.0.3112.78 bsc#1050537:
  * CVE-2017-5091: Use after free in IndexedDB
  * CVE-2017-5092: Use after free in PPAPI
  * CVE-2017-5093: UI spoofing in Blink
  * CVE-2017-5094: Type confusion in extensions
  * CVE-2017-5095: Out-of-bounds write in PDFium
  * CVE-2017-5096: User information leak via Android intents
  * CVE-2017-5097: Out-of-bounds read in Skia
  * CVE-2017-5098: Use after free in V8
  * CVE-2017-5099: Out-of-bounds write in PPAPI
  * CVE-2017-5100: Use after free in Chrome Apps
  * CVE-2017-5101: URL spoofing in OmniBox
  * CVE-2017-5102: Uninitialized use in Skia
  * CVE-2017-5103: Uninitialized use in Skia
  * CVE-2017-5104: UI spoofing in browser
  * CVE-2017-7000: Pointer disclosure in SQLite
  * CVE-2017-5105: URL spoofing in OmniBox
  * CVE-2017-5106: URL spoofing in OmniBox
  * CVE-2017-5107: User information leak via SVG
  * CVE-2017-5108: Type confusion in PDFium
  * CVE-2017-5109: UI spoofing in browser
  * CVE-2017-5110: UI spoofing in payments dialog
  * Various fixes from internal audits, fuzzing and other initiatives
- Add patch chromium-override.patch
- Remove patches chromium-fpermissive.patch chromium-system-ffmpeg-r3.patch
- Rebase patches:
  * chromium-dma-buf.patch
  * chromium-gcc7.patch
  * chromium-last-commit-position-r0.patch
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 60.0.3112.90:
  * Various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1502798400">- Version update to 60.0.3112.101:
  * various usability bugfixes</changelog>
<changelog author="tchvatal@suse.com" date="1503662400">- Version update to 60.0.3112.113:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1503921600">- fix build with Factory glibc:
  add chromium-60.0.3112.113-breakpad-ucontext.patch</changelog>
<changelog author="tchvatal@suse.com" date="1505131200">- Update to 61.0.3163.79 bsc#1057364:
  * CVE-2017-5111: Use after free in PDFium.
  * CVE-2017-5112: Heap buffer overflow in WebGL.
  * CVE-2017-5113: Heap buffer overflow in Skia.
  * CVE-2017-5114: Memory lifecycle issue in PDFium.
  * CVE-2017-5115: Type confusion in V8.
  * CVE-2017-5116: Type confusion in V8.
  * CVE-2017-5117: Use of uninitialized value in Skia.
  * CVE-2017-5118: Bypass of Content Security Policy in Blink.
  * CVE-2017-5119: Use of uninitialized value in Skia.
  * CVE-2017-5120: Potential HTTPS downgrade during redirect navigation.
- Rebase patch:
  * fix-gn-bootstrap.diff
- Remove patches:
  * chromium-gcc7.patch
  * chromium-override.patch
- Add new patches:
  * chromium-atk.patch
  * chromium-gcc5.patch
  * chromium-mojo-dep.patch
- Gtk3 is hard required from now on
- Version some of the required dependencies</changelog>
<changelog author="tchvatal@suse.com" date="1505563200">- Update to 61.0.3163.91:
  * Various bugfixes</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to 61.0.3163.100 (boo#1060019):
  * CVE-2017-5121: Out-of-bounds access in V8
  * CVE-2017-5122: Out-of-bounds access in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="tchvatal@suse.com" date="1508414400">- Update to 62.0.3202.62 bsc#1064066:
  * CVE-2017-5124: UXSS with MHTML.
  * CVE-2017-5125: Heap overflow in Skia.
  * CVE-2017-5126: Use after free in PDFium.
  * CVE-2017-5127: Use after free in PDFium.
  * CVE-2017-5128: Heap overflow in WebGL.
  * CVE-2017-5129: Use after free in WebAudio.
  * CVE-2017-5132: Incorrect stack manipulation in WebAssembly.
  * CVE-2017-5130: Heap overflow in libxml2.
  * CVE-2017-5131: Out of bounds write in Skia.
  * CVE-2017-5133: Out of bounds write in Skia.
  * CVE-2017-15386: UI spoofing in Blink.
  * CVE-2017-15387: Content security bypass.
  * CVE-2017-15388: Out of bounds read in Skia.
  * CVE-2017-15389: URL spoofing in OmniBox.
  * CVE-2017-15390: URL spoofing in OmniBox.
  * CVE-2017-15391: Extension limitation bypass in Extensions.
  * CVE-2017-15392: Incorrect registry key handling in PlatformIntegration.
  * CVE-2017-15393: Referrer leak in Devtools.
  * CVE-2017-15394: URL spoofing in extensions UI.
  * CVE-2017-15395: Null pointer dereference in ImageCapture.
- Drop unused patches:
  * arm-webrtc-fix.patch
  * arm_use_right_compiler.patch
  * chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  * chromium-atk.patch
  * chromium-mojo-dep.patch
  * gcc60-fixes.diff
- Refresh patches:
  * chromium-gcc5.patch
  * chromium-prop-codecs.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff</changelog>
<changelog author="tchvatal@suse.com" date="1508932800">- Apply patch to fix building crc32 with gcc7:
  * chromium-62.0.3202.62-correct-cplusplus-check.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509019200">- Try to export properly CXX/CC variable to fix leap builds</changelog>
<changelog author="astieger@suse.com" date="1509019201">- BuildRequire nodejs6 required for polymer-bundler.js</changelog>
<changelog author="tchvatal@suse.com" date="1509105600">- Version update to 62.0.3202.75 bsc#1065405 CVE-2017-15396
  * CVE-2017-15396: Stack overflow in V8</changelog>
<changelog author="tchvatal@suse.com" date="1509278400">- Add patch to fix sandbox crashes wrt bsc#1064298
  * chromium-sandbox.patch</changelog>
<changelog author="tchvatal@suse.com" date="1509710400">- Restrict the version on jpeg to not waste build power</changelog>
<changelog author="tchvatal@suse.com" date="1510056000">- Version update to 62.0.3202.89 bsc#1066851:
  * CVE-2017-15398: Stack buffer overflow in QUIC
  * CVE-2017-15399: Use after free in V8
- Drop upstream merged chromium-sandbox.patch</changelog>
<changelog author="astieger@suse.com" date="1510747200">- Update to 62.0.3202.94:
  * multiple minor rendering related fixes
- fix rebuilds in same chroot</changelog>
<changelog author="idonmez@suse.com" date="1511352000">- BuildRequire nodejs8 instead of nodejs6 for suse_version &gt;= 1330</changelog>
<changelog author="tchvatal@suse.com" date="1512648000">- Version update to 63.0.3239.84 bsc#1071691:
  * Critical CVE-2017-15407: Out of bounds write in QUIC.
  * High CVE-2017-15408: Heap buffer overflow in PDFium.
  * High CVE-2017-15409: Out of bounds write in Skia.
  * High CVE-2017-15410: Use after free in PDFium.
  * High CVE-2017-15411: Use after free in PDFium.
  * High CVE-2017-15412: Use after free in libXML.
  * High CVE-2017-15413: Type confusion in WebAssembly.
  * Medium CVE-2017-15415: Pointer information disclosure in IPC call.
  * Medium CVE-2017-15416: Out of bounds read in Blink.
  * Medium CVE-2017-15417: Cross origin information disclosure in Skia.
  * Medium CVE-2017-15418: Use of uninitialized value in Skia.
  * Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink.
  * Medium CVE-2017-15420: URL spoofing in Omnibox.
  * Medium CVE-2017-15422: Integer overflow in ICU.
  * Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL.
  * Low CVE-2017-15424: URL Spoof in Omnibox.
  * Low CVE-2017-15425: URL Spoof in Omnibox.
  * Low CVE-2017-15426: URL Spoof in Omnibox.
  * Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox.
- Rebase fix-gn-bootstrap.diff
- Drop merged patches:
  * chromium-gcc5.patch
  * chromium-60.0.3112.113-breakpad-ucontext.patch
  * chromium-62.0.3202.62-correct-cplusplus-check.patch
- Add new patches:
  * chromium-non-void-return.patch
  * chromium-gcc.patch</changelog>

</package>
<package pkgid="66e4b01140524f9063a8433b87805f555707ff386413d3bf3bbab3b9c11839ba" name="cifs-utils" arch="src">
    <version epoch="0" ver="6.5" rel="5.1"/>

<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="lmuelle@suse.com" date="1395316800">- Update to cifs-utils 6.3.
  + fixes for various bugs turned up by Coverity
  + clean unused cruft out of upcall binary
  + add new pam_cifscreds PAM module for establishing NTLM creds on login
    which BuildRequires the pam-devel package
- Make the PAM security directory configurable at compile time; (bso#10513).
  + Make_the_PAM_security_directory_configurable_at_compile_time.patch</changelog>
<changelog author="ro@suse.de" date="1399550400">- use _rundir macro</changelog>
<changelog author="lmuelle@suse.com" date="1403092800">- BuildIgnore libldb, libtevent, and samba4-libs to prevent a package conflict
  on CentOS, Fedora, and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1406548800">- Update to cifs-utils 6.4.
  + allow PAM directory to be configurable
  - Make_the_PAM_security_directory_configurable_at_compile_time.patch
  + better determination of default keytab file
  + better cifscreds error handling
  + uppercase devicename when retrying mount</changelog>
<changelog author="lmuelle@suse.com" date="1408449600">- Remove cifstab file; obsoleted by the more generic cifs credentials feature.</changelog>
<changelog author="ddiss@suse.com" date="1409486400">- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
  the corresponding module; (bnc#893575).</changelog>
<changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
<changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
<changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
<changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
<changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
<changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
<changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
<changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
<changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
<changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>

</package>
<package pkgid="4c57321ab8bdc4c0a09936f7ec9bdf4fa55f1a371927654a594c919e3fd3f734" name="cifs-utils" arch="x86_64">
    <version epoch="0" ver="6.5" rel="5.1"/>

<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="lmuelle@suse.com" date="1395316800">- Update to cifs-utils 6.3.
  + fixes for various bugs turned up by Coverity
  + clean unused cruft out of upcall binary
  + add new pam_cifscreds PAM module for establishing NTLM creds on login
    which BuildRequires the pam-devel package
- Make the PAM security directory configurable at compile time; (bso#10513).
  + Make_the_PAM_security_directory_configurable_at_compile_time.patch</changelog>
<changelog author="ro@suse.de" date="1399550400">- use _rundir macro</changelog>
<changelog author="lmuelle@suse.com" date="1403092800">- BuildIgnore libldb, libtevent, and samba4-libs to prevent a package conflict
  on CentOS, Fedora, and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1406548800">- Update to cifs-utils 6.4.
  + allow PAM directory to be configurable
  - Make_the_PAM_security_directory_configurable_at_compile_time.patch
  + better determination of default keytab file
  + better cifscreds error handling
  + uppercase devicename when retrying mount</changelog>
<changelog author="lmuelle@suse.com" date="1408449600">- Remove cifstab file; obsoleted by the more generic cifs credentials feature.</changelog>
<changelog author="ddiss@suse.com" date="1409486400">- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
  the corresponding module; (bnc#893575).</changelog>
<changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
<changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
<changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
<changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
<changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
<changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
<changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
<changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
<changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
<changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>

</package>
<package pkgid="974852192a702cc55a25baa882aa4ff698d8b542489b2579fbe1a21f446509af" name="cifs-utils-devel" arch="x86_64">
    <version epoch="0" ver="6.5" rel="5.1"/>

<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="lmuelle@suse.com" date="1395316800">- Update to cifs-utils 6.3.
  + fixes for various bugs turned up by Coverity
  + clean unused cruft out of upcall binary
  + add new pam_cifscreds PAM module for establishing NTLM creds on login
    which BuildRequires the pam-devel package
- Make the PAM security directory configurable at compile time; (bso#10513).
  + Make_the_PAM_security_directory_configurable_at_compile_time.patch</changelog>
<changelog author="ro@suse.de" date="1399550400">- use _rundir macro</changelog>
<changelog author="lmuelle@suse.com" date="1403092800">- BuildIgnore libldb, libtevent, and samba4-libs to prevent a package conflict
  on CentOS, Fedora, and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1406548800">- Update to cifs-utils 6.4.
  + allow PAM directory to be configurable
  - Make_the_PAM_security_directory_configurable_at_compile_time.patch
  + better determination of default keytab file
  + better cifscreds error handling
  + uppercase devicename when retrying mount</changelog>
<changelog author="lmuelle@suse.com" date="1408449600">- Remove cifstab file; obsoleted by the more generic cifs credentials feature.</changelog>
<changelog author="ddiss@suse.com" date="1409486400">- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
  the corresponding module; (bnc#893575).</changelog>
<changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
<changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
<changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
<changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
<changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
<changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
<changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
<changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
<changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
<changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>

</package>
<package pkgid="1f6335fe21157fc523e8e57528717e5012db84e644283a96b52898999cfc953a" name="cloud-init" arch="src">
    <version epoch="0" ver="0.7.8" rel="31.1"/>

<changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
<changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
<changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
<changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
<changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
<changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
<changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
<changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
<changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
<changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
<changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
<changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
<changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
<changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
<changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
<changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
<changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
<changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
<changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
<changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>

</package>
<package pkgid="31b73797f007ca2765d08f9f0b38d44d85bfa8dabb6470990967ee42ab3843f2" name="cloud-init" arch="x86_64">
    <version epoch="0" ver="0.7.8" rel="31.1"/>

<changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
<changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
<changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
<changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
<changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
<changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
<changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
<changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
<changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
<changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
<changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
<changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
<changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
<changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
<changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
<changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
<changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
<changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
<changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
<changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>

</package>
<package pkgid="c2c5d2fa5925341928d3ac84dfcbb1f14a591551bb59b6f1d255976e6d683606" name="cloud-init-config-suse" arch="x86_64">
    <version epoch="0" ver="0.7.8" rel="31.1"/>

<changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
<changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
<changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
<changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
<changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
<changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
<changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
<changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
<changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
<changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
<changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
<changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
<changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
<changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
<changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
<changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
<changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
<changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
<changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
<changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>

</package>
<package pkgid="c1dedd6fd4789e59be64a607016cd64613a14570a8223ac0a0f8d7144d56643b" name="cloud-init-doc" arch="x86_64">
    <version epoch="0" ver="0.7.8" rel="31.1"/>

<changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
<changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
<changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
<changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
<changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
<changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
<changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
<changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
<changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
<changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
<changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
<changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
<changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
<changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
<changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
<changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
<changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
<changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
<changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
<changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>

</package>
<package pkgid="3b75f793027245191b6c5bd44a40c8cb6eadf2bbfd43da2d886a27b1d83cf126" name="cloud-init-test" arch="x86_64">
    <version epoch="0" ver="0.7.8" rel="31.1"/>

<changelog author="rjschwei@suse.com" date="1477656000">- Update cloud-init-service.patch
  + Better match upstream intend Ubuntu networking.service is equivalent
    to SUSE wicked, thus we cannot translate networking to network, but need
    to translate it to wicked</changelog>
<changelog author="rjschwei@suse.com" date="1477742400">- Update cloud-init-service.patch
  + Break another cycle this one in -final</changelog>
<changelog author="rjschwei@suse.com" date="1477742401">- Update cloud-init-no-dmidecode-on-ppc64.patch (bsc#1005616)
  + aarch64 does support dmidecode</changelog>
<changelog author="rjschwei@suse.com" date="1477915200">- Add cloud-init-sysconfig-netpathfix.patch (bsc#1007529)
  + Fix the default path for network scripts
- Cosmetic changes to suseIntegratedHandler.patch</changelog>
<changelog author="rjschwei@suse.com" date="1478001600">- Modify suseIntegratedHandler.patch (bsc#1007529)
  + Fall back to the previous method of writing network information
    We have to work out upstream how to have distro specific renderer
    for sysconfig</changelog>
<changelog author="kukuk@suse.de" date="1479038400">- Add zypp_add_repos.diff to support repos for zypper [FATE#322038]</changelog>
<changelog author="kukuk@suse.de" date="1479816000">- Move cloud.cfg into an own sub-package, so that we can have
  a product specific version. [FATE#322039]</changelog>
<changelog author="kukuk@suse.de" date="1479902400">- Reworked zypp_add_repos.diff to behave similar to zypper ar</changelog>
<changelog author="kukuk@suse.com" date="1480334400">- Add LocalDisk datasource datasourceLocalDisk.patch [FATE#321107]</changelog>
<changelog author="kukuk@suse.com" date="1480507200">- Add Conflicts for otherproviders of cloud-init-config.
- Add require for python-six (used by several modules)</changelog>
<changelog author="kukuk@suse.de" date="1480593600">- add datasourceLocalDisk.patch:
  * Fix datasourceLocalDisk module in case directory exists but is
  empty.</changelog>
<changelog author="dmueller@suse.com" date="1481198400">- fix the cloud.cfg split, cyclic non-versioned dependencies are
  bad. also fix changelog entries</changelog>
<changelog author="jgleissner@suse.com" date="1481284800">- Modify suseIntegratedHandler.patch (bsc#998103)
  + Store previous hostname so update_hostname module does not
    overwrite manually set hostnames
- cloud-init-python26.patch
  + Compatibility fixes with Python 2.6</changelog>
<changelog author="dmueller@suse.com" date="1481544000">- fix unintentional edit in last change again</changelog>
<changelog author="dmueller@suse.com" date="1481544001">- adjust license (as of 0.7.8 AGPL-3.0 was added)</changelog>
<changelog author="kukuk@suse.de" date="1481630400">- fix syntax error in datasource LocalDisk (fix got somehow lost)</changelog>
<changelog author="rjschwei@suse.com" date="1481976000">- Configuration split (bsc#1016160)</changelog>
<changelog author="kukuk@suse.de" date="1485172800">- Require net-tools for network setup</changelog>
<changelog author="rjschwei@suse.com" date="1487246400">- Update fix-default-systemd-unit-dir.patch (bsc#1024709)
  + based on work by Thomas Abraham
- Add cloud-init-handle-not-implemented-query.patch (boo#1017832)</changelog>
<changelog author="rjschwei@suse.com" date="1487246401">- Do not set mount options for ephemeral drive, use the defaults
  that are built into the code (bsc#930524)</changelog>

</package>
<package pkgid="72659681e00d6681f8ed4f5d1d36dc39e01c01469f51135378b2f41979dfd634" name="clustershell" arch="noarch">
    <version epoch="0" ver="1.8" rel="2.1"/>

<changelog author="stephane.thiell@cea.fr" date="1284120000">- renamed Vim subpackage to vim-clustershell
- update to 1.3.2</changelog>
<changelog author="stephane.thiell@cea.fr" date="1287576000">- update to 1.3.3</changelog>
<changelog author="stephane.thiell@cea.fr" date="1295092800">- update to 1.4</changelog>
<changelog author="stephane.thiell@cea.fr" date="1297598400">- update to 1.4.1</changelog>
<changelog author="stephane.thiell@cea.fr" date="1300190400">- update to 1.4.2</changelog>
<changelog author="stephane.thiell@cea.fr" date="1300536000">- update to 1.4.3</changelog>
<changelog author="stephane.thiell@cea.fr" date="1307534400">- update to 1.5</changelog>
<changelog author="stephane.thiell@cea.fr" date="1307620800">- update to 1.5.1</changelog>
<changelog author="stephane.thiell@cea.fr" date="1333886400">- update to 1.6</changelog>
<changelog author="stephane.thiell@cea.fr" date="1438948800">- update to 1.6.96</changelog>
<changelog author="sthiell@stanford.edu" date="1447156800">- update to 1.7</changelog>
<changelog author="sthiell@stanford.edu" date="1456747200">- update to 1.7.1</changelog>
<changelog author="sthiell@stanford.edu" date="1466251200">- update to 1.7.2</changelog>
<changelog author="sthiell@stanford.edu" date="1482235200">- update to 1.7.3</changelog>
<changelog author="sthiell@stanford.edu" date="1504267200">- update to 1.7.81 (1.8 beta1)</changelog>
<changelog author="sthiell@stanford.edu" date="1504353600">- create separate packages for python2 and python3 modules</changelog>
<changelog author="sthiell@stanford.edu" date="1504440000">- move vim extensions into the clustershell package
- use Requires: vim-filesystem instead of vim-common
- define upgrade path for vim-clustershell</changelog>
<changelog author="sthiell@stanford.edu" date="1504699200">- fix condition for ghost groups symlink</changelog>
<changelog author="sthiell@stanford.edu" date="1505304000">- initial support for openSUSE</changelog>
<changelog author="sthiell@stanford.edu" date="1509019200">- Update to new upstream release 1.8:
  * added Python 3 support (3.4+)
  * support for Python 2.5 and below has been dropped
  * new EventHandler API (backward compatible)
  * task.shell() has a new stdin (boolean) argument
  * NodeSet/nodeset/cluset can now handle numeric node names
  * clush now use slightly different colors that are legible on
    dark backgrounds</changelog>

</package>
<package pkgid="74d70dc7f528cd22a0a0134bc9357bac3ca6c3cb70085e69e5ee03a58cba2ef2" name="clustershell" arch="src">
    <version epoch="0" ver="1.8" rel="2.1"/>

<changelog author="stephane.thiell@cea.fr" date="1284120000">- renamed Vim subpackage to vim-clustershell
- update to 1.3.2</changelog>
<changelog author="stephane.thiell@cea.fr" date="1287576000">- update to 1.3.3</changelog>
<changelog author="stephane.thiell@cea.fr" date="1295092800">- update to 1.4</changelog>
<changelog author="stephane.thiell@cea.fr" date="1297598400">- update to 1.4.1</changelog>
<changelog author="stephane.thiell@cea.fr" date="1300190400">- update to 1.4.2</changelog>
<changelog author="stephane.thiell@cea.fr" date="1300536000">- update to 1.4.3</changelog>
<changelog author="stephane.thiell@cea.fr" date="1307534400">- update to 1.5</changelog>
<changelog author="stephane.thiell@cea.fr" date="1307620800">- update to 1.5.1</changelog>
<changelog author="stephane.thiell@cea.fr" date="1333886400">- update to 1.6</changelog>
<changelog author="stephane.thiell@cea.fr" date="1438948800">- update to 1.6.96</changelog>
<changelog author="sthiell@stanford.edu" date="1447156800">- update to 1.7</changelog>
<changelog author="sthiell@stanford.edu" date="1456747200">- update to 1.7.1</changelog>
<changelog author="sthiell@stanford.edu" date="1466251200">- update to 1.7.2</changelog>
<changelog author="sthiell@stanford.edu" date="1482235200">- update to 1.7.3</changelog>
<changelog author="sthiell@stanford.edu" date="1504267200">- update to 1.7.81 (1.8 beta1)</changelog>
<changelog author="sthiell@stanford.edu" date="1504353600">- create separate packages for python2 and python3 modules</changelog>
<changelog author="sthiell@stanford.edu" date="1504440000">- move vim extensions into the clustershell package
- use Requires: vim-filesystem instead of vim-common
- define upgrade path for vim-clustershell</changelog>
<changelog author="sthiell@stanford.edu" date="1504699200">- fix condition for ghost groups symlink</changelog>
<changelog author="sthiell@stanford.edu" date="1505304000">- initial support for openSUSE</changelog>
<changelog author="sthiell@stanford.edu" date="1509019200">- Update to new upstream release 1.8:
  * added Python 3 support (3.4+)
  * support for Python 2.5 and below has been dropped
  * new EventHandler API (backward compatible)
  * task.shell() has a new stdin (boolean) argument
  * NodeSet/nodeset/cluset can now handle numeric node names
  * clush now use slightly different colors that are legible on
    dark backgrounds</changelog>

</package>
<package pkgid="0f1f8732b7a2fda40a07d7d5e069aa686feb636293b24b160463c8be77bb8837" name="cobbler" arch="noarch">
    <version epoch="0" ver="2.6.6" rel="11.1"/>

<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
<changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
<changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>

</package>
<package pkgid="8cbe07cf0a871ef09d641fae909f9ef7c4e220593af7a632316ac11ada8c1084" name="cobbler" arch="noarch">
    <version epoch="0" ver="2.6.6" rel="8.2"/>

<changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
<changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>

</package>
<package pkgid="09b5730ff64677ff0f7b99c1854196e6abaa83fd33000761861483953d4e8da5" name="cobbler" arch="src">
    <version epoch="0" ver="2.6.6" rel="11.1"/>

<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
<changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
<changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>

</package>
<package pkgid="180bd35e031c885df4d79c31c693a935c2fc5934a577b414cbb6d858523c1c40" name="cobbler" arch="src">
    <version epoch="0" ver="2.6.6" rel="8.2"/>

<changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
<changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>

</package>
<package pkgid="c6b5c6b1d27200ddfd02aeb1f70db0cf559613f80b80f74c0242e61db22a34be" name="cobbler-tests" arch="noarch">
    <version epoch="0" ver="2.6.6" rel="11.1"/>

<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
<changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
<changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>

</package>
<package pkgid="7621291f97d16f07108bd922c99eeda459cb04967f0f3bc9030b50da1cdd7af1" name="cobbler-tests" arch="noarch">
    <version epoch="0" ver="2.6.6" rel="8.2"/>

<changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
<changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>

</package>
<package pkgid="c37d53afd6bb4ddcbd1fce3edf4c26d1ef15212e4f222f825e0b42595fcff11c" name="cobbler-web" arch="noarch">
    <version epoch="0" ver="2.6.6" rel="11.1"/>

<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
<changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
<changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>

</package>
<package pkgid="f1b3b6f084cf21453e95d62d06696ecd77a8698b10e61ed84c4d1e389656346f" name="cobbler-web" arch="noarch">
    <version epoch="0" ver="2.6.6" rel="8.2"/>

<changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
<changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>

</package>
<package pkgid="21b0a40e84149bfe0f42deb2026ad815ac2f0e6d368c36ce7c1bc658490512c6" name="colcmp" arch="x86_64">
    <version epoch="0" ver="1.5.2+git20161209.47a200a" rel="11.1"/>

<changelog author="i@marguerite.su" date="1425816000">- initial version 1.4.2+git20150306.f3f2426</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1436270400">- rename golang-org-x-text
- update version 1.4.2+git20150710.7c0e16d
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151217.cf49866:
  + : added bidi and htmlindex packages to gen.go
  + encoding/charmap: don't map U+FFFD in encoder
  + : upgrade to CLDR 28 and necessary adjustments
  + encoding: encoders return errors on out-of-repertoire runes
  + encoding: added Replacement identifier and htmlindex tests
  + : added .gitignore
  + display: remove package
  + : run long tests after a generated package
  + display: remove completely
  + encoding/htmlindex: use UTF-8 encoding</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1471435201">- Added subpackage for colcmp command</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161209.47a200a:
  * secure/precis: reduce allocations for non-changing input
  * unicode/norm: remove unreachable code
  * secure/precis: new comparison API
  * internal/export/idna: sanitize errors
  * internal/export/idna: finalize API
  * internal/gen: remove a workaround for golang.org/issue/13145.
  * unicode/runenames: new package to look up rune names.
  * secure/precis: add ascii fast path to enforce
  * internal/gen: work around long string concatenation.
  * secure/precis: manually define built in profiles</changelog>
<changelog author="thipp@suse.de" date="1484222400">- Add subpackage for gotext command
- Extend rpmlintrc</changelog>

</package>
<package pkgid="ecc4073fe227621697f112b2c8bf3ab5b540480f690614ab723b577222388558" name="compat-openssl098" arch="src">
    <version epoch="0" ver="0.9.8j" rel="21.2"/>

<changelog author="vcizek@suse.com" date="1423051200">- fix a memory leak in ssl_lib.c (CVE-2009-5146) (bnc#915976)
  * added openssl-CVE-2009-5146.patch</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0292 (bnc#922501)
  - Base64 decode
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0292.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1429185600">- add ECC ciphersuites to DEFAULT (bnc#879179)
  * modified openssl-enable-ecdh.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1434369600">- disable EXPORT ciphers by default (bnc#931698, comment #3)
  * added openssl-disable_EXPORT_ciphers_by_default.patch</changelog>
<changelog author="vcizek@suse.com" date="1434369601">- remove libopenssl0_9_8-hmac from baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1445428800">- fix an ecdh negotiation bug (bsc#947833)
  * added openssl-fix-ecdh_negotiation_bug.patch</changelog>
<changelog author="vcizek@suse.com" date="1449230400">- prevent segfault in s_client with invalid options (bsc#952099)
  * added openssl-s_client-check-if-con-null-before-using-it.patch</changelog>
<changelog author="vcizek@suse.com" date="1449230401">- X509_ATTRIBUTE memory leak (CVE-2015-3195) (bsc#957812)
  * added openssl-CVE-2015-3195.patch</changelog>
<changelog author="vcizek@suse.com" date="1455278400">- fix CVE-2015-3197 (bsc#963415)
  * SSLv2 doesn't block disabled ciphers
  * add openssl-CVE-2015-3197.patch</changelog>
<changelog author="vcizek@suse.com" date="1456315200">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871, bsc#967787)
  * add openssl-avoid-config-twice.patch</changelog>
<changelog author="psimons@suse.com" date="1456488000">- Fix CVE-2016-0797 (bnc#968048) via "openssl-CVE-2016-0797.patch".
  The BN_hex2bn() and BN_dec2bn() functions had a bug that could
  result in an attempt to de-reference a NULL pointer. This could
  have security consequences if these functions were ever called by
  user applications with large untrusted hex/decimal data. Also,
  internal usage of these functions in OpenSSL uses data from config
  files or application command line arguments. If user developed
  applications generated config file data based on untrusted data,
  then this could have had security consequences as well.
- Fix CVE-2016-0799 (bnc#968374) via "openssl-CVE-2016-0799.patch".
  On many 64 bit systems, the internal fmtstr() and doapr_outch()
  functions could miscalculate the length of a string and attempt to
  access out-of-bounds memory locations. These problems could have
  enabled attacks where large amounts of untrusted data is passed to
  the BIO_*printf functions. If applications use these functions in
  this way then they could have been vulnerable. OpenSSL itself uses
  these functions when printing out human-readable dumps of ASN.1
  data. Therefore applications that print this data could have been
  vulnerable if the data is from untrusted sources. OpenSSL command
  line applications could also have been vulnerable when they print
  out ASN.1 data, or if untrusted data is passed as command line
  arguments. Libssl is not considered directly vulnerable.
- Fix CVE-2016-0800 (bnc#968046, "Drown"). OpenSSL used to be
  vulnerable to a cross-protocol attack that could lead to
  decryption of TLS sessions by using a server supporting SSLv2 and
  EXPORT cipher suites as a Bleichenbacher RSA padding oracle. The
  patch "openssl-CVE-2016-0800-DROWN-disable-ssl2.patch" remedies
  this issue by disabling the SSLv2 protocol (unless the environment
  variable $OPENSSL_ALLOW_SSL2 is defined) and all weak EXPORT
  ciphers (unless $OPENSSL_ALLOW_EXPORT is defined).</changelog>
<changelog author="vcizek@suse.com" date="1461844800">- OpenSSL Security Advisory [3rd May 2016]
  * Memory corruption in the ASN.1 encoder
  - bsc#977617 (CVE-2016-2108)
  * EVP_EncodeUpdate overflow
  - bsc#977614 (CVE-2016-2105)
  * EVP_EncryptUpdate overflow
  - bsc#977615 (CVE-2016-2106)
  * ASN.1 BIO excessive memory allocation
  - bsc#976942 (CVE-2016-2109)
  * add patches
    + openssl-CVE-2016-2105.patch
    + openssl-CVE-2016-2106.patch
    + openssl-CVE-2016-2108.patch
    + openssl-CVE-2016-2109.patch
- Fix side channel attack on modular exponentiation
  * "CacheBleed" (bsc#968050)
  * add openssl-CVE-2016-0702.patch
- Fix buffer overrun in ASN1_parse (bsc#976943)
  * add 0001-Fix-buffer-overrun-in-ASN1_parse.patch
- Rename README.SuSE to the new spelling (bsc#889013)</changelog>
<changelog author="vcizek@suse.com" date="1474545600">- update expired S/MIME certs (bsc#979475)
  * add openssl-update-expired-smime-certs.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1474545601">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch
  * openssl-CVE-2016-6304.patch
  * openssl-CVE-2016-6306.patch
  * 0001-PR-2506.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch</changelog>
<changelog author="vcizek@suse.com" date="1485864000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
- ECSDA P-256 timing attack key recovery (bsc#1019334, CVE-2016-7056)
- remote denial of service in SSL alert handling
  (bsc#1005878, CVE-2016-8610)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7056.patch
  * openssl-CVE-2016-8610.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- add missing commit for CVE-2016-2108 (bsc#1004499)
  * updated openssl-CVE-2016-2108.patch
- don't attempt session resumption if no ticket is present and session
  ID length is zero (bsc#984663)
  * add openssl-no_session_resumption_without_ticket.patch</changelog>
<changelog author="vcizek@suse.com" date="1492516800">- backport DEFAULT_SUSE cipher list (bsc#1034941)
  * add openssl-add_DEFAULT_SUSE_cipher_list.patch</changelog>
<changelog author="vcizek@suse.com" date="1509969600">- Backport alternative chain lookup patches (bsc#1032261)
  * openssl-1.0.1i-trusted-first.patch
  * openssl-1.0.1i-alt-chains.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="aa26d5a40a296779109d2a831e27db5c955e4d7978bb817c720400fc4567c654" name="conky" arch="src">
    <version epoch="0" ver="1.10.6" rel="12.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>
<changelog author="olaf@aepfle.de" date="1448107200">- Its always /usr/bin/lua5.1</changelog>
<changelog author="simon@simotek.net" date="1450440000">- Add conky-1.10.0-fix-upstream-issue-187-IPV6-crash.patch fixing
  upstream issue #187 and (boo#958897) patch taken from upstream
  https://github.com/brndnmtthws/conky/commit/ee08a9e1b045e8d2f4f13a0e60c2f603b66b0d69?diff=unified</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1452168000">- for suse_version after 1320
  add BuildRequires:	libtolua++-5_1-devel</changelog>
<changelog author="i@marguerite.su" date="1452168001">- update version 1.10.1
  * bugfix release
  * If BUILD_IPV6=ON (default), but the user has disabled ipv6
    support in the kernel using the parameter ipv6.disable=1,
    then conky fails to open /proc/net/if_inet6. This leads to
    a segfault when conky calls fclose(file) regardless. This
    fix simply moves the fclose call into the preceding if
    statement. (boo#958897)
- drop patch: conky-1.10.0-libdir.patch
- add patch: conky-libdir.patch
- add patch: conky-1.10.1-avoid-git.patch
- add patch: conky-1.10.1-check_include_file.patch
  * fix check_include_file not found
- enable builds for sles 12</changelog>
<changelog author="ronisbr@gmail.com" date="1464004800">- Update version 1.10.2.
  * Bugfix release.
- Drop patches already applied by upstream:
  * conky-libdir.patch
  * conky-1.10.1-check_include_file.patch</changelog>
<changelog author="aloisio@gmx.com" date="1474718400">- Update to version 1.10.4
- Enabled pulseaudio
- Added conky-1.10.4-ncurses.patch</changelog>
<changelog author="i@marguerite.su" date="1481976000">- update version 1.10.6
  * try more than one sysctl to get CPU temperature
  * cached versions of get_nvidia_value and get_nvidia_string_value
- changes in 1.10.5
  * check st_ctime to work with mutt MUA
  * update uri to get NOAA METAR data</changelog>
<changelog author="olaf@aepfle.de" date="1483531200">- Remove timestamp from binaries
- add conky.timestamp.patch</changelog>
<changelog author="olaf@aepfle.de" date="1488456000">- Add buildconditional for audacious, cmus, libXNVCtrl, xmms2
- Remove unused BuildRequires, convert to pkgconfig()</changelog>
<changelog author="olaf@aepfle.de" date="1490097600">- Remove more timestamps from binaries</changelog>
<changelog author="olaf@aepfle.de" date="1497960000">- Fix build with conky.luamm.patch</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501156800">- BuildRequires libtolua++-5_1-devel on Leap.</changelog>
<changelog author="zaitor@opensuse.org" date="1504267200">- Submit version and bugfix update for Leap 42.3 (boo#1056946).</changelog>

</package>
<package pkgid="48f2c9ed8afc6b2d335264170de65627198b0f57a2bbd50bd29f712c8b2f201b" name="conky" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="12.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>
<changelog author="olaf@aepfle.de" date="1448107200">- Its always /usr/bin/lua5.1</changelog>
<changelog author="simon@simotek.net" date="1450440000">- Add conky-1.10.0-fix-upstream-issue-187-IPV6-crash.patch fixing
  upstream issue #187 and (boo#958897) patch taken from upstream
  https://github.com/brndnmtthws/conky/commit/ee08a9e1b045e8d2f4f13a0e60c2f603b66b0d69?diff=unified</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1452168000">- for suse_version after 1320
  add BuildRequires:	libtolua++-5_1-devel</changelog>
<changelog author="i@marguerite.su" date="1452168001">- update version 1.10.1
  * bugfix release
  * If BUILD_IPV6=ON (default), but the user has disabled ipv6
    support in the kernel using the parameter ipv6.disable=1,
    then conky fails to open /proc/net/if_inet6. This leads to
    a segfault when conky calls fclose(file) regardless. This
    fix simply moves the fclose call into the preceding if
    statement. (boo#958897)
- drop patch: conky-1.10.0-libdir.patch
- add patch: conky-libdir.patch
- add patch: conky-1.10.1-avoid-git.patch
- add patch: conky-1.10.1-check_include_file.patch
  * fix check_include_file not found
- enable builds for sles 12</changelog>
<changelog author="ronisbr@gmail.com" date="1464004800">- Update version 1.10.2.
  * Bugfix release.
- Drop patches already applied by upstream:
  * conky-libdir.patch
  * conky-1.10.1-check_include_file.patch</changelog>
<changelog author="aloisio@gmx.com" date="1474718400">- Update to version 1.10.4
- Enabled pulseaudio
- Added conky-1.10.4-ncurses.patch</changelog>
<changelog author="i@marguerite.su" date="1481976000">- update version 1.10.6
  * try more than one sysctl to get CPU temperature
  * cached versions of get_nvidia_value and get_nvidia_string_value
- changes in 1.10.5
  * check st_ctime to work with mutt MUA
  * update uri to get NOAA METAR data</changelog>
<changelog author="olaf@aepfle.de" date="1483531200">- Remove timestamp from binaries
- add conky.timestamp.patch</changelog>
<changelog author="olaf@aepfle.de" date="1488456000">- Add buildconditional for audacious, cmus, libXNVCtrl, xmms2
- Remove unused BuildRequires, convert to pkgconfig()</changelog>
<changelog author="olaf@aepfle.de" date="1490097600">- Remove more timestamps from binaries</changelog>
<changelog author="olaf@aepfle.de" date="1497960000">- Fix build with conky.luamm.patch</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501156800">- BuildRequires libtolua++-5_1-devel on Leap.</changelog>
<changelog author="zaitor@opensuse.org" date="1504267200">- Submit version and bugfix update for Leap 42.3 (boo#1056946).</changelog>

</package>
<package pkgid="a3fdd2277d10d5d6e74db47f3c729beea2b6a9f682a039d8519e081c63ba5023" name="conky-doc" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="12.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>
<changelog author="olaf@aepfle.de" date="1448107200">- Its always /usr/bin/lua5.1</changelog>
<changelog author="simon@simotek.net" date="1450440000">- Add conky-1.10.0-fix-upstream-issue-187-IPV6-crash.patch fixing
  upstream issue #187 and (boo#958897) patch taken from upstream
  https://github.com/brndnmtthws/conky/commit/ee08a9e1b045e8d2f4f13a0e60c2f603b66b0d69?diff=unified</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1452168000">- for suse_version after 1320
  add BuildRequires:	libtolua++-5_1-devel</changelog>
<changelog author="i@marguerite.su" date="1452168001">- update version 1.10.1
  * bugfix release
  * If BUILD_IPV6=ON (default), but the user has disabled ipv6
    support in the kernel using the parameter ipv6.disable=1,
    then conky fails to open /proc/net/if_inet6. This leads to
    a segfault when conky calls fclose(file) regardless. This
    fix simply moves the fclose call into the preceding if
    statement. (boo#958897)
- drop patch: conky-1.10.0-libdir.patch
- add patch: conky-libdir.patch
- add patch: conky-1.10.1-avoid-git.patch
- add patch: conky-1.10.1-check_include_file.patch
  * fix check_include_file not found
- enable builds for sles 12</changelog>
<changelog author="ronisbr@gmail.com" date="1464004800">- Update version 1.10.2.
  * Bugfix release.
- Drop patches already applied by upstream:
  * conky-libdir.patch
  * conky-1.10.1-check_include_file.patch</changelog>
<changelog author="aloisio@gmx.com" date="1474718400">- Update to version 1.10.4
- Enabled pulseaudio
- Added conky-1.10.4-ncurses.patch</changelog>
<changelog author="i@marguerite.su" date="1481976000">- update version 1.10.6
  * try more than one sysctl to get CPU temperature
  * cached versions of get_nvidia_value and get_nvidia_string_value
- changes in 1.10.5
  * check st_ctime to work with mutt MUA
  * update uri to get NOAA METAR data</changelog>
<changelog author="olaf@aepfle.de" date="1483531200">- Remove timestamp from binaries
- add conky.timestamp.patch</changelog>
<changelog author="olaf@aepfle.de" date="1488456000">- Add buildconditional for audacious, cmus, libXNVCtrl, xmms2
- Remove unused BuildRequires, convert to pkgconfig()</changelog>
<changelog author="olaf@aepfle.de" date="1490097600">- Remove more timestamps from binaries</changelog>
<changelog author="olaf@aepfle.de" date="1497960000">- Fix build with conky.luamm.patch</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501156800">- BuildRequires libtolua++-5_1-devel on Leap.</changelog>
<changelog author="zaitor@opensuse.org" date="1504267200">- Submit version and bugfix update for Leap 42.3 (boo#1056946).</changelog>

</package>
<package pkgid="c6989480efc1e16af79f06366c7191d24e9d69593bebe1ee5ef9ff22e3f5f11f" name="containerd" arch="src">
    <version epoch="0" ver="0.2.5+gitr639_422e31c" rel="13.1"/>

<changelog author="jmassaguerpla@suse.com" date="1471521600">- use gcc6-go instead of gcc5-go (bsc#988408)
- build ppc64le with gc-go because this version builds with gc-go 1.6</changelog>
<changelog author="jmassaguerpla@suse.com" date="1471867200">- update to v2.3.0 (bsc#995058)
- Remove patches which were already merged upstream:
  * socket-activation-01-vendor.patch
  * socket-activation-02-daemon.patch
  * socket-activation-03-ctr.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
<changelog author="jmassaguerpla@suse.com" date="1476360000">- update to commit 0366d7e which is the one required for docker-1.12.2
  (bsc#1004490)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1477396800">- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f
  (see RUNC_COMMIT in Dockerfile)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1477396801">- fix bsc#1006368: docker/containerd is broken when installed by
  SuSE Studio in an appliance: We were missing the
    Requires(post): %fillup_prereq</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version so that it contains a sequence number and zypper does
  not think is a downgrade</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988801">- fix runc version
  fix bsc#1009961</changelog>
<changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
<changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
<changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>

</package>
<package pkgid="a4723ba96f4c51b85fa2c50a119ec8d6b22b49b35e1de9e71d1c43c00abcf272" name="containerd" arch="x86_64">
    <version epoch="0" ver="0.2.5+gitr639_422e31c" rel="13.1"/>

<changelog author="jmassaguerpla@suse.com" date="1471521600">- use gcc6-go instead of gcc5-go (bsc#988408)
- build ppc64le with gc-go because this version builds with gc-go 1.6</changelog>
<changelog author="jmassaguerpla@suse.com" date="1471867200">- update to v2.3.0 (bsc#995058)
- Remove patches which were already merged upstream:
  * socket-activation-01-vendor.patch
  * socket-activation-02-daemon.patch
  * socket-activation-03-ctr.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
<changelog author="jmassaguerpla@suse.com" date="1476360000">- update to commit 0366d7e which is the one required for docker-1.12.2
  (bsc#1004490)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1477396800">- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f
  (see RUNC_COMMIT in Dockerfile)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1477396801">- fix bsc#1006368: docker/containerd is broken when installed by
  SuSE Studio in an appliance: We were missing the
    Requires(post): %fillup_prereq</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version so that it contains a sequence number and zypper does
  not think is a downgrade</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988801">- fix runc version
  fix bsc#1009961</changelog>
<changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
<changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
<changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>

</package>
<package pkgid="f2ad5164e58bcf040f567f6891e810e50c9e1e50c3f7a26c1e3b746a58b4eb43" name="containerd-ctr" arch="x86_64">
    <version epoch="0" ver="0.2.5+gitr639_422e31c" rel="13.1"/>

<changelog author="jmassaguerpla@suse.com" date="1471521600">- use gcc6-go instead of gcc5-go (bsc#988408)
- build ppc64le with gc-go because this version builds with gc-go 1.6</changelog>
<changelog author="jmassaguerpla@suse.com" date="1471867200">- update to v2.3.0 (bsc#995058)
- Remove patches which were already merged upstream:
  * socket-activation-01-vendor.patch
  * socket-activation-02-daemon.patch
  * socket-activation-03-ctr.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
<changelog author="jmassaguerpla@suse.com" date="1476360000">- update to commit 0366d7e which is the one required for docker-1.12.2
  (bsc#1004490)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1477396800">- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f
  (see RUNC_COMMIT in Dockerfile)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1477396801">- fix bsc#1006368: docker/containerd is broken when installed by
  SuSE Studio in an appliance: We were missing the
    Requires(post): %fillup_prereq</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version so that it contains a sequence number and zypper does
  not think is a downgrade</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988801">- fix runc version
  fix bsc#1009961</changelog>
<changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
<changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
<changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>

</package>
<package pkgid="9a5670888febba965bd0929d57f20190a14b84e278a2803444eca566281a3964" name="containerd-test" arch="noarch">
    <version epoch="0" ver="0.2.5+gitr639_422e31c" rel="13.1"/>

<changelog author="jmassaguerpla@suse.com" date="1471521600">- use gcc6-go instead of gcc5-go (bsc#988408)
- build ppc64le with gc-go because this version builds with gc-go 1.6</changelog>
<changelog author="jmassaguerpla@suse.com" date="1471867200">- update to v2.3.0 (bsc#995058)
- Remove patches which were already merged upstream:
  * socket-activation-01-vendor.patch
  * socket-activation-02-daemon.patch
  * socket-activation-03-ctr.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
<changelog author="jmassaguerpla@suse.com" date="1476360000">- update to commit 0366d7e which is the one required for docker-1.12.2
  (bsc#1004490)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1477396800">- update runc requirement to 02f8fa7863dd3f82909a73e2061897828460d52f
  (see RUNC_COMMIT in Dockerfile)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1477396801">- fix bsc#1006368: docker/containerd is broken when installed by
  SuSE Studio in an appliance: We were missing the
    Requires(post): %fillup_prereq</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version so that it contains a sequence number and zypper does
  not think is a downgrade</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988801">- fix runc version
  fix bsc#1009961</changelog>
<changelog author="jmassaguerpla@suse.com" date="1482148800">- update containerd to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
<changelog author="asarai@suse.com" date="1484395200">- Update docker to the version used in Docker 1.12.6. This is necessary to fix
  CVE-2016-9962 (bsc#1012568).</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker 1.13.0 requirement</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Set TasksMax=infinity to make sure runC doesn't start failing randomly.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- make sure this package is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- update containerd to the commit version needed for
  docker-v17.04.0-ce (bsc#1034053)
  fix bsc#1032769: containerd spurious messages filling journal</changelog>
<changelog author="jengelh@inai.de" date="1493380800">- Replace %__-type macro indirections</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- fix golang requirement to 1.7 for the subpackages</changelog>

</package>
<package pkgid="ff41e2558d15d223939ed0d34c77a00c4659883385225afab7956d67f32a66f5" name="coolkey" arch="src">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="398adc2b5fdb6fbd1f2fac0dceb3747a67f1a1fa5d3e599dc77f76d9c34f0133" name="coolkey" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="440aa3d7d19e4ec95a1b03cc339b785f9b5b87e7611e646a701bda5205f8c08d" name="coolkey-32bit" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="ba365e459f5490a4e11116c3fd839d0e1f4ffa89883e00a0ced818ba41009323" name="coolkey-devel" arch="x86_64">
    <version epoch="0" ver="1.1.0" rel="156.1"/>

<changelog author="sbrabec@suse.cz" date="1186142400">- New SuSE package, version 1.1.0.</changelog>
<changelog author="jberkman@novell.com" date="1189080000">- install pk11install
- teach pk11install about evolution and openoffice</changelog>
<changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
<changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
<changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
<changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
<changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>

</package>
<package pkgid="7e2a95b436aad130fb8716b1726bcce48a2305c5dc7c7f305e094e6d05336f68" name="coreutils" arch="src">
    <version epoch="0" ver="8.25" rel="5.1"/>

<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
<changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
<changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
<changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
<changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
<changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
<changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
<changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
<changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
<changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
<changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
<changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
<changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
<changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>

</package>
<package pkgid="81d837ac64404bf5b41228e09de411c1837ec0ed201be6f2dd783129415d4c1b" name="coreutils" arch="x86_64">
    <version epoch="0" ver="8.25" rel="5.1"/>

<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
<changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
<changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
<changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
<changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
<changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
<changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
<changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
<changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
<changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
<changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
<changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
<changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
<changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>

</package>
<package pkgid="ea9b1a693e5ea69c3bd7b52cc02f34835b95514111a4a7fbf5eecdc4922b5da5" name="coreutils-lang" arch="noarch">
    <version epoch="0" ver="8.25" rel="5.1"/>

<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
<changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
<changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
<changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
<changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
<changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
<changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
<changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
<changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
<changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
<changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
<changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
<changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
<changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>

</package>
<package pkgid="b6fe0889bf555e6ec1d1ce2a053633e84553fc540cf80342c7d45f893048077d" name="coreutils-testsuite" arch="src">
    <version epoch="0" ver="8.25" rel="5.1"/>

<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
<changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
<changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
<changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
<changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
<changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
<changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
<changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
<changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
<changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
<changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
<changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
<changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
<changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>

</package>
<package pkgid="2f64dfd1910e972bc344fe3d8e6dd4814df263b7633cc111c86324d2e7c59868" name="coreutils-testsuite" arch="x86_64">
    <version epoch="0" ver="8.25" rel="5.1"/>

<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="uweigand@de.ibm.com" date="1387540800">- coreutils-gnulib-tests-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1388923200">- Refresh patches to match the new version.
  * coreutils-build-timeout-as-pie.patch: Update line number.
  * coreutils-gnulib-tests-ppc64le.patch: Likewise.
  * coreutils-invalid-ids.patch: Likewise.
  * coreutils-remove_hostname_documentation.patch: Likewise.
  * coreutils-remove_kill_documentation.patch: Likewise.
  * coreutils-sysinfo.patch: Likewise.
  * coreutils-i18n.patch: Likewise.
- Additional changes in coreutils-i18n.patch:
  * Accommodate to upstream changes in cut.c and uniq.c.
  * Fix some compiler warnings.
  * Fix 145-mb test in tests/misc/uniq.pl.
  * Skip sort's "2[01]a" test cases for now
    to avoid a test failure on i586/x86_64.
- Remove now-upstream and therefore obsolete patches.
  * coreutils-8.21.de.po.xz: Remove, upstream is latest.
  * coreutils-gnulib-tests-fix-nap-race-obs.patch:
    Remove, now upstream.
  * coreutils-gnulib-tests-fix-nap-race.patch: Likewise.
  * longlong-aarch64.patch: Likewise.
- Update to 8.22 (2013-12-13) [stable]
  * * Bug fixes
  df now processes the mount list correctly in the presence of unstatable
  mount points.  Previously it may have failed to output some mount points.
  [bug introduced in coreutils-8.21]
  df now processes symbolic links and relative paths to special files containing
  a mounted file system correctly.  Previously df displayed the statistics about
  the file system the file is stored on rather than the one inside.
  [This bug was present in "the beginning".]
  df now processes disk device nodes correctly in the presence of bind mounts.
  Now df shows the base mounted file system rather than the last one mounted.
  [This bug was present in "the beginning".]
  install now removes the target file if the strip program failed for any
  reason.  Before, that file was left behind, sometimes even with wrong
  permissions.
  [This bug was present in "the beginning".]
  ln --relative now updates existing symlinks correctly.  Previously it based
  the relative link on the dereferenced path of an existing link.
  [This bug was introduced when --relative was added in coreutils-8.16.]
  ls --recursive will no longer exit with "serious" exit code (2), if there
  is an error reading a directory not specified on the command line.
  [Bug introduced in coreutils-5.3.0]
  mkdir, mkfifo, and mknod now work better when creating a file in a directory
  with a default ACL whose umask disagrees with the process's umask, on a
  system such as GNU/Linux where directory ACL umasks override process umasks.
  [bug introduced in coreutils-6.0]
  mv will now replace empty directories in the destination with directories
  from the source, when copying across file systems.
  [This bug was present in "the beginning".]
  od -wN with N larger than 64K on a system with 32-bit size_t would
  print approximately 2*N bytes of extraneous padding.
  [Bug introduced in coreutils-7.0]
  rm -I now prompts for confirmation before removing a write protected file.
  [Bug introduced in coreutils-6.8]
  shred once again uses direct I/O on systems requiring aligned buffers.
  Also direct I/O failures for odd sized writes at end of file are now handled.
  [The "last write" bug was introduced in coreutils-5.3.0 but masked
  by the alignment bug introduced in coreutils-6.0]
  tail --retry -f now waits for the files specified to appear.  Before, tail
  would immediately exit when such a file is initially inaccessible.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  tail -F has improved handling of symlinks.  Previously tail didn't respond
  to the symlink target (re)appearing after being (re)created.
  [This bug was introduced when inotify support was added in coreutils-7.5]
  * * New features
  cp, install, mkdir, mknod, mkfifo and mv now support "restorecon"
  functionality through the -Z option, to set the SELinux context
  appropriate for the new item location in the file system.
  csplit accepts a new option: --suppressed-matched, to elide the lines
  used to identify the split points.
  df --output now accepts a 'file' field, to propagate a specified
  command line argument through to the output.
  du accepts a new option: --inodes to show the number of inodes instead
  of the blocks used.
  id accepts a new option: --zero (-z) to delimit the output entries by
  a NUL instead of a white space character.
  id and ls with -Z report the SMACK security context where available.
  mkdir, mkfifo and mknod with -Z set the SMACK context where available.
  id can now lookup by user ID, in addition to the existing name lookup.
  join accepts a new option: --zero-terminated (-z). As with the sort,uniq
  option of the same name, this makes join consume and produce NUL-terminated
  lines rather than newline-terminated lines.
  uniq accepts a new option: --group to print all items, while separating
  unique groups with empty lines.
  shred accepts new parameters to the --remove option to give greater
  control over that operation, which can greatly reduce sync overhead.
  shuf accepts a new option: --repeat (-r), which can repeat items in
  the output.
  * * Changes in behavior
  cp --link now dereferences a symbolic link as source before creating the
  hard link in the destination unless the -P,--no-deref option is specified.
  Previously, it would create a hard link of the symbolic link, even when
  the dereferencing options -L or -H were specified.
  cp, install, mkdir, mknod and mkfifo no longer accept an argument to the
  short -Z option.  The --context equivalent still takes an optional argument.
  dd status=none now suppresses all non fatal diagnostic messages,
  not just the transfer counts.
  df no longer accepts the long-obsolescent --megabytes option.
  stdbuf now requires at least one buffering mode option to be specified,
  as per the documented interface.
  * * Improvements
  base64 encoding throughput for bulk data is increased by about 60%.
  md5sum can use libcrypto hash routines where allowed to potentially
  get better performance through using more system specific logic.
  sha1sum for example has improved throughput by 40% on an i3-2310M.
  This also affects sha1sum, sha224sum, sha256sum, sha384sum and sha512sum.
  stat and tail work better with EFIVARFS, EXOFS, F2FS, HOSTFS, SMACKFS, SNFS
  and UBIFS.  stat -f --format=%T now reports the file system type, and tail -f
  now uses inotify for files on all those except SNFS, rather than the default
  (for unknown file system types) of issuing a warning and reverting to polling.
  shuf outputs subsets of large inputs much more efficiently.
  Reservoir sampling is used to limit memory usage based on the number of
  outputs, rather than the number of inputs.
  shred increases the default write block size from 12KiB to 64KiB
  to align with other utilities and reduce the system call overhead.
  split --line-bytes=SIZE, now only allocates memory as needed rather
  than allocating SIZE bytes at program start.
  stty now supports configuring "stick" (mark/space) parity where available.
  * * Build-related
  factor now builds on aarch64 based systems [bug introduced in coreutils-8.20]</changelog>
<changelog author="mail@bernhard-voelker.de" date="1389268800">- Add upstream patch (coreutils-copy-fix-selinux-existing-dirs.patch):
  cp -a: set the correct SELinux context on already existing
  destination directories (rh#1045122).
- Merge I18n fixes from Fedora (coreutils-i18n.patch):
  * sort: fix sorting by non-first field (rh#1003544)
  * cut: avoid using slower multi-byte code in non-UTF-8 locales
    (rh#1021403, rh#499220).
- Testsuite: skip some tests:
  * coreutils-skip-some-sort-tests-on-ppc.patch: Add patch to
    skip 2 valgrind'ed sort tests on ppc/ppc64.
  * coreutils-skip-gnulib-test-tls.patch: Add patch to skip
    the gnulib test 'test-tls' on i586, x86_64, ppc and ppc64.
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch: Add patch to skip a
    test when cp fails for /proc/cpuinfo which happens on aarch64.
  * coreutils-tests-shorten-extreme-factor-tests.patch: Add patch
    to skip most of the extreme-expensive factor tests.</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add three patches from SLE11 that aren't upstream:
  coreutils-misc.patch (fixes for tests)
  coreutils-getaddrinfo.patch (fake success as there's no network
    in the build system)
  coreutils-ocfs2_reflinks.patch (support for reflinks on ocfs2)</changelog>
<changelog author="pth@suse.de" date="1393243200">- Add coreutils-test-avoid-FP-when-no-ACL-support.patch from openSUSE
  factory together with its changelog entry.</changelog>
<changelog author="pth@suse.de" date="1395144000">- Apply three patches from openSUSE factory:
  - Add upstream patch (gnu#16855):
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch: Add
    patch for shuf: with -r, don't dump core if the input is empty.
  - Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
    date: fix crash or infinite loop when parsing a malformed TZ="".
  - Add upstream patch (gnu#17010):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
    to avoid that ln(1) segfaults for an empty, relative target.</changelog>
<changelog author="pth@suse.de" date="1406289600">- Incorporate 9 bugfixes, one documentation update and two maintenance
  patches that won't harm (bnc#888215) for df(1), See NEWS for specifics:
  coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  coreutils-also_deduplicate_virtual_file_systems.patch
  coreutils-fix_handling_of_symlinks_in_mount_list.patch
  coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  coreutils-use_the_last_device_name_provided_by_the_system.patch
  coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  coreutils-use_all_of_the_last_device_details_provided.patch
  coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch
  coreutils-avoid_an_inconsequential_mem_leak.patch</changelog>
<changelog author="pth@suse.de" date="1411041600">- Add coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  which was missed in the last update.
- Add coreutils-modify_sparse_test.patch to fix the test for sparse handling.
- Add coreutils-fix_false_du_failure_on_newer_xfs.patch that fixes a false
  negative in the testsuite.
- Add coreutils-disable_tests.patch to not run a tests that fail inside the OBS.
- Add coreutils-test_without_valgrind.patch to not use valgrind in shuf-reservoir.</changelog>
<changelog author="pth@suse.de" date="1426507200">- Add upstream patches for df(1):
  * doc: mention that df -a includes duplicate file systems (deb#737399)
  - coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * df: ensure -a shows all remote file system entries (deb#737399)
  - coreutils-df-show-all-remote-file-systems.patch
  * df: only suppress remote mounts of separate exports with --total
    (deb#737399, rh#920806, boo#866010, boo#901905)
  - coreutils-df-total-suppress-separate-remotes.patch
  (bnc#921559, bnc#907290, bnc#930565).</changelog>
<changelog author="mail@bernhard-voelker.de" date="1431432000">- Fix memory handling error with case insensitive sort using UTF-8
  (boo#928749): coreutils-i18n.patch
  src/sort.c (keycompare_mb): Ensure the buffer is big enough
  to handle anything output from wctomb().  Theoretically any
  input char could be converted to multiple output chars,
  and so we need to multiply the storage by MB_LEN_MAX.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1433332800">- coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch:
  add upstream patch:
  doc: adjust reference to info nodes in man pages (boo#933396)
- coreutils-i18n.patch: Use a later version of the previous patch
  to fix the sort I18N issue (boo#928749, CVE-2015-4041) to also
  avoid CVE-2015-4042.
  https://github.com/pixelb/coreutils/commit/bea5e36cc876</changelog>
<changelog author="pth@suse.de" date="1450440000">- Add coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  that fixes hanging df when remount mounts are inaccessible (bsc#954222).</changelog>
<changelog author="pth@suse.de" date="1454414400">- Update to 8.25 based on the work of Bernhard Voelker
  (for changes since 8.22 see included NEWS file) (fate#319365).
- coreutils.spec (%description): Add base32, a new utility.
- Remove now-upstream patch:
  * coreutils-tests-avoid-FP-of-ls-stat-free-color.patch
- Refresh/merge all other patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-misc.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-test_without_valgrind.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- Patches removed because the fix is included upstreams
  * coreutils-df_improve_mount_point_selection_with_inaccurate_mount_list.patch
  * coreutils-df-doc-df-a-includes-duplicate-file-systems.patch
  * coreutils-improve_df_--human_and_--si,_help_and_man_page.patch
  * coreutils-modify_sparse_test.patch
  * coreutils-df-show-all-remote-file-systems.patch
  * coreutils-shuf-repeat-avoid-crash-when-input-empty.patch
  * coreutils-avoid_sizeof_charPP__static_analysis_warning.patch
  * coreutils-df-total-suppress-separate-remotes.patch
  * coreutils-ln-avoid-segfault-for-empty-target.patch
  * coreutils-test-avoid-FP-when-no-ACL-support.patch
  * coreutils-date-avoid-crash-in-TZ-parsing.patch
  * coreutils-copy-fix-selinux-existing-dirs.patch
  * coreutils-fix_handling_of_symlinks_in_mount_list.patch
  * coreutils-gnulib-tests-ppc64le.patch
  * coreutils-fix_false_du_failure_on_newer_xfs.patch
  * coreutils-avoid_an_inconsequential_mem_leak.patch
  * coreutils-look_for_accessible_mount_points_for_specified_devices.patch
  * coreutils-doc-adjust-reference-to-info-nodes-in-man-pages.patch
  * coreutils-avoid_clang_-Wtautological-constant-out-of-range-compare_warning.patch
  * coreutils-use_all_of_the_last_device_details_provided.patch
  * coreutils-avoid_compiler_warnings_with_some_assert_implementations.patch
  * coreutils-tests-avoid-FP-cp-cpuinfo.patch
  * coreutils-output_placeholder_values_for_inaccessible_mount_points.patch
  * coreutils-also_deduplicate_virtual_file_systems.patch
  * coreutils-use_the_last_device_name_provided_by_the_system.patch
  * coreutils-df-fix-local-hanging-with-inaccessible-remote-mounts.patch
  * coreutils-ignore_non_file_system_entries_in_proc_mounts.patch
  * coreutils-report_correct_device_in_presence_of_eclipsed_mounts.patch</changelog>
<changelog author="pth@suse.de" date="1490097600">- Add coreutils-df_hash_in_filter.patch from jcejka@suse.com to
  speed up df significantly (bsc#965780).</changelog>
<changelog author="pth@suse.de" date="1508500800">- Add coreutils-no_stat_for_dummy_fs.patch so that df -l no longer interacts
  with dummy file system types, so for example no longer hangs with
  problematic nfs mounted via system.automount(5).  [bug introduced in
  coreutils-8.21]
  df also no longer interacts with excluded file system types, so for example
  specifying -x nfs no longer hangs with problematic nfs mounts.
  [bug introduced in coreutils-8.21] (bsc#1043059).</changelog>
<changelog author="pth@suse.de" date="1508760000">- Hardcode package name.</changelog>
<changelog author="pth@suse.de" date="1509969600">- coreutils-no_stat_for_dummy_fs.patch also contains the fix for
  bsc#1026567.</changelog>

</package>
<package pkgid="5ee8b260fc5cb9565f9630427639da7b9c32cf4105a40436a61f41324cd67a49" name="corosync" arch="src">
    <version epoch="0" ver="2.3.6" rel="7.1"/>

<changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
<changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
<changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
<changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
<changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
<changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
<changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
<changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
<changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
<changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
<changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
<changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
<changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
<changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
<changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
<changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
<changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>

</package>
<package pkgid="34bedf9411dee97557d2aa61153b75b3770a26489d638b8e7aea1391029775d8" name="corosync" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="7.1"/>

<changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
<changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
<changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
<changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
<changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
<changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
<changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
<changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
<changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
<changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
<changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
<changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
<changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
<changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
<changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
<changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
<changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>

</package>
<package pkgid="f47630243dfbd90a9b155802d9000a77e67a3e5c571bb4d022de5f130dc18702" name="corosync-testagents" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="7.1"/>

<changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
<changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
<changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
<changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
<changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
<changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
<changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
<changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
<changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
<changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
<changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
<changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
<changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
<changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
<changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
<changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
<changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>

</package>
<package pkgid="87d9f57d89e1debda78d88a8104f612d3a87356021a3fa6559155b64844b1c20" name="cpp48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="932de931a6577b3799bdf1b0fd8eb3f73b184f4fe7d4af796f1bcf47a78f8af4" name="cpp7" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="65d5d40a15ba5a41f7bf53dc7dc4ee6eed27c4ebcf6fd066134be22e51443cf7" name="cpupower" arch="src">
    <version epoch="0" ver="4.10" rel="4.1"/>

<changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
<changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
<changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
<changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
<changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
<changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
<changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
<changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
<changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
<changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
<changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
<changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
<changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
<changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
<changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
<changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>

</package>
<package pkgid="0db2fcb0aa9173232b96fc7cb9668f2392feb91dd76693a9628fdd550267c030" name="cpupower" arch="x86_64">
    <version epoch="0" ver="4.10" rel="4.1"/>

<changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
<changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
<changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
<changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
<changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
<changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
<changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
<changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
<changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
<changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
<changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
<changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
<changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
<changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
<changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
<changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>

</package>
<package pkgid="31c0fdaf6d09258623a8cab6667b10f8d6be44dee56af73109381545e710faf7" name="cpupower-bench" arch="x86_64">
    <version epoch="0" ver="4.10" rel="4.1"/>

<changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
<changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
<changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
<changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
<changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
<changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
<changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
<changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
<changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
<changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
<changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
<changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
<changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
<changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
<changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
<changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>

</package>
<package pkgid="ecc3853641f4e79b29ff7cf6907d7f317e0a9737b64aa84ec9f887281b8a70be" name="cpupower-devel" arch="x86_64">
    <version epoch="0" ver="4.10" rel="4.1"/>

<changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
<changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
<changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
<changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
<changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
<changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
<changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
<changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
<changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
<changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
<changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
<changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
<changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
<changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
<changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
<changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>

</package>
<package pkgid="222ae3a3eabeca866c88fb1182ab3011d9f9547f579a29918294bcdab89bd7e2" name="cross-aarch64-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="ee30b1ecd5488d8093960d04284044f2911ebe9084421ae3a954934ca5d0fd31" name="cross-aarch64-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="b796fbec398c5aae19cc3c367dd7ed722fddca6819e9fb9790520918e0f25c0d" name="cross-aarch64-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="9615f6071cf47a060a65bcc12ebfaf9bd376bea2a784f144191fb9d135d2e2c5" name="cross-aarch64-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="cd38e3288e799d3bd95c1689c9f2d4659529eb3f824b733b7978da888a68722b" name="cross-arm-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="d8b18f5e5f194c04bef94b59d4b1fd0b958417c10959ab16ac5c5ec4acd26403" name="cross-arm-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="5530fdc46fd18296a3f4a0c78fbde8f5d521e5826f4e418d6de78659fbfc58d5" name="cross-armv6hl-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="b7b3c03d9bc53aa7d9f6a19709fce3a76e1386dd1d8004817b6f22ee57b7a60f" name="cross-armv6hl-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="497795a98dd76ae5434de7f056762f497484cf10bc8ff6f5e3b8b5df1f686b40" name="cross-armv7hl-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="b34a7d18064a273b18b6107ee8bf77d6e56ac9cae924032b3649c2e84e22f139" name="cross-armv7hl-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="d522335b2fd97ec4c98bf8922fe8ce3137141f4cbf0cb8901ad687defb8a7a38" name="cross-avr-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="967f5d0266f05aba3c2481171d870ebbde20f9100b39edb5c20506cf7f60330f" name="cross-avr-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="b54bc177d7ca0df75734f07bc6947e45f2a1abd58e6e907c6ab5ddf98babbb79" name="cross-hppa-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="37db17ed9377a1f33edd1aac3e0a2ee0c84f0fdd1c5225ba94ce8985b077d71b" name="cross-hppa-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="21ec8d35674054d6521333039c5745b10784b9a64423c5cc51c2002535f918a6" name="cross-hppa64-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="65736595800dc62a5f4696976d70c42f3b078a5ad7f0cdfbbd329fad353cabf8" name="cross-hppa64-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="6a4e45d457b64fb17eee3b0831c0748a839312f553042eec1ac6da6ee964f5e7" name="cross-i386-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="069c9c0e8472ba8b4541246495009dd345432a2305c35d332a1c930b1609bdf3" name="cross-i386-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="c6357ef55076a2663ef798373e4d3ff1322bb9ecb7130bfb2357381118ab3c53" name="cross-i386-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="7f50ed43cd2fe5974ebcde554cda396a8fd00cf1f9df929ae3f4b2649a094df6" name="cross-i386-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="5528502139c41098a58cb3c55f3ac185ef39e849dd1f9dd0719b49dfe35b1c11" name="cross-ia64-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="fc4d1020a66f399d3f0bcb5544d0da3c5ecc1a9a81c9f28f6ffa8a23a2640339" name="cross-ia64-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="4100f105f3e70d16ed97441d945169b667525e2eed23738a81b0cbe1f83079fc" name="cross-ia64-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="ecb8a9aa486e0e5d580f4960805e6f58d15da6f16db4e652b58beafc99c969ae" name="cross-ia64-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="d3a5976664a8737613a88be9fa5220c5fe313af338d7384b037f2c84f257e1c7" name="cross-m68k-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="add47c1de023788f9fc397bcea56a64fdfc9e3aa8580ec31fbe7ef42f9c0b2db" name="cross-m68k-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="037d045507ab696e61cb50196ce5879f61478fe1152753e70f112ae112e0256d" name="cross-mips-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="b14cbb24110699b8dcdc5b34b6dc2170584f0604f7521575cde78c6492b1aa82" name="cross-mips-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="959e0096374a38038e567e341228496b436a0659c99ed1e2230315a7fbb46da5" name="cross-nvptx-gcc7" arch="src">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="d14bf24db4d88b42ccd300f696cfdc3bd081218ea2914398770dcc0c2dc48fce" name="cross-nvptx-gcc7" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="116c9f4c293d518a2e7864de89963fdbc4c4717210f03dbd54bd71dd00a998c1" name="cross-ppc-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="8527e30098bfab223eaff916ea1ccca68fea055388c6e98fcfd53d2d4b34970b" name="cross-ppc-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="5e954e16e6e233d46002033f870cc475103dd3d6b331c9eb4c255c631cb66173" name="cross-ppc-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="6e33626f56cffd084540a913fa7e806e7c34c97ec9357180183351543f29e1de" name="cross-ppc-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="207b71c0620135aa1ead85bef442e53db1d3b776bd6197b1a5cf7938cafea7a3" name="cross-ppc64-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="6571f6b23c61e9d99d4159fcfc5e4128636cb7d98f444b3e483171b0c6b8b66a" name="cross-ppc64-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="8e9327b95f2e9d05998d56c28c4b13ae8b6c4fb38542f67958c5907108e86a84" name="cross-ppc64-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="c9a943322ad58330deab36db7026915acd705b66ae01075a5c3b8734598ed06d" name="cross-ppc64-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="b2755afc56f625a3d0e16581648de98b2c17583a9e0569b346079e7e143ea9a9" name="cross-ppc64le-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="6d747ee3424de8f6ac451d4efd59d03a961e09540108702ab41e06c3936635b2" name="cross-ppc64le-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="64c61ca635a6c98e8fd9db1ffae4bb115ca06796b4436d5c552fb1e491d0be24" name="cross-ppc64le-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="4f1669cce3d4b518800834a7dd886d4e5efcae958524fedf7310964ade7ae6e8" name="cross-ppc64le-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="d0217f30523bf9bd72d0adbf8f9b36f9e710d353ce449bc1ad883f12f620a93c" name="cross-s390-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="e9897a3d29d2461d4889824f621d32d7e5572a47471289fcc9aab380c7f25402" name="cross-s390-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="822344c6ebc1c3ac51052ce2a2428c069a29f5193daf119d7a25a2eb0cde2b24" name="cross-s390-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="e95a8c99a9cd23f07864f1c83db1b301c424752d858bdf863fde17e401b55608" name="cross-s390-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="6327e4d98edca0186c680c61f4579bc6487bf150280d8801f795b5ad7460d040" name="cross-s390x-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="bab7116ccb8dc80e133cba83d585226d71b33979624ba8681fe19fcefb8d76ef" name="cross-s390x-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="848830a654ec393e7ddeede457b1145cef4dc28adb7532d81e75645d439e4ab5" name="cross-s390x-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="5a98bd970ef490c933619ea1f07a122a9e780e3ee83af2bf866636f672625cbb" name="cross-s390x-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="bd4e863711998a4b4c6d3d2b7fe32259104a25e0b91f85cd3a36d0bcf68dffe9" name="cross-sparc-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="4756ab3940151d6cec790c7a219ef442f450d149179ca6b907779e9056d19e02" name="cross-sparc-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="a1f67f1a4594e71a37f4d14a80879568e1d7321d1cd26eda17865273df881e84" name="cross-sparc64-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="751e31a364d6b8dbbc8c9c08ad0dfdcfe1fb8ae0f7c3f04075f8af47f791adfd" name="cross-sparc64-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="75bffcbfa98b539855a5a9eb768f6871cce3467c4376bc1ed5615c402ff9a6f0" name="cross-spu-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="02c2f5de6e7b77f3dae9128446adcc66903f028bed5cf1a8adc72398963c91fb" name="cross-spu-binutils" arch="x86_64">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="adec97198b7d0d73eeb42f231809dcc9736ece88d62d77efbfff2957579bbf82" name="cross-x86_64-binutils" arch="src">
    <version epoch="0" ver="2.29.1" rel="13.1"/>

<changelog author="idonmez@suse.com" date="1480507200">- Add refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  from upstream to fix an assembler problem with clang on ARM.
  Fixes https://sourceware.org/bugzilla/show_bug.cgi?id=20648</changelog>
<changelog author="jengelh@inai.de" date="1482062400">- Call ldconfig for libbfd</changelog>
<changelog author="afaerber@suse.de" date="1486382400">- Fix alignment frags for aarch64 (boo#1003846)
  aarch64-alignment-frags.patch</changelog>
<changelog author="rguenther@suse.com" date="1486468800">- Add s390x to gold_archs.</changelog>
<changelog author="rguenther@suse.com" date="1487937600">- Add binutils-bso21193.diff to fix section alignment on
  .gnu_debuglink.  [bso#21193]</changelog>
<changelog author="schwab@linux-m68k.org" date="1488801600">- Configure with --with-system-zlib</changelog>
<changelog author="rguenther@suse.com" date="1488974400">- Update to binutils 2.28.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  * This version of binutils fixes a problem with PowerPC VLE 16A and 16D
    relocations which were functionally swapped, for example,
    R_PPC_VLE_HA16A performed like R_PPC_VLE_HA16D while R_PPC_VLE_HA16D
    performed like R_PPC_VLE_HA16A.  This could have been fixed by
    renumbering relocations, which would keep object files created by an
    older version of gas compatible with a newer ld.  However, that would
    require an ABI update, affecting other assemblers and linkers that
    create and process the relocations correctly.  It is recommended that
    all VLE object files be recompiled, but ld can modify the relocations
    if --vle-reloc-fixup is passed to ld.  If the new ld command line
    option is not used, ld will ld warn on finding relocations inconsistent
    with the instructions being relocated.
  * The nm program has a new command line option (--with-version-strings)
    which will display a symbol's version information, if any, after the
    symbol's name.
  * The ARC port of objdump now accepts a -M option to specify the extra
    instruction class(es) that should be disassembled.
  * The --remove-section option for objcopy and strip now accepts section
    patterns starting with an exclamation point to indicate a non-matching
    section.  A non-matching section is removed from the set of sections
    matched by an earlier --remove-section pattern.
  * The --only-section option for objcopy now accepts section patterns
    starting with an exclamation point to indicate a non-matching section.
    A non-matching section is removed from the set of sections matched by
    an earlier --only-section pattern.
  * New --remove-relocations=SECTIONPATTERN option for objcopy and strip.
    This option can be used to remove sections containing relocations.
    The SECTIONPATTERN is the section to which the relocations apply, not
    the relocation section itself.
  GAS
  * Add support for the RISC-V architecture.
  * Add support for the ARM Cortex-M23 and Cortex-M33 processors.
  GNU ld
  * The EXCLUDE_FILE linker script construct can now be applied outside of the
    section list in order for the exclusions to apply over all input sections
    in the list.
  * Add support for the RISC-V architecture.
  * The command line option --no-eh-frame-hdr can now be used in ELF based
    linkers to disable the automatic generation of .eh_frame_hdr sections.
  * Add --in-implib=&lt;infile&gt; to the ARM linker to enable specifying a set of
    Secure Gateway veneers that must exist in the output import library
    specified by --out-implib=&lt;outfile&gt; and the address they must have.
    As such, --in-implib is only supported in combination with --cmse-implib.
  * Extended the --out-implib=&lt;file&gt; option, previously restricted to x86 PE
    targets, to any ELF based target.  This allows the generation of an import
    library for an ELF executable, which can then be used by another application
    to link against the executable.
  GOLD
  * Add -z bndplt option (x86-64 only) to support Intel MPX.
  * Add --orphan-handling option.
  * Add --stub-group-multi option (PowerPC only).
  * Add --target1-rel, --target1-abs, --target2 options (Arm only).
  * Add -z stack-size option.
  * Add --be8 option (Arm only).
  * Add HIDDEN support in linker scripts.
  * Add SORT_BY_INIT_PRIORITY support in linker scripts.
- Add binutils-2.28-branch.diff.
- Remove binutils-2.27-branch.diff
- Remove binutils-2.27-fix-section-order.diff,
  refine_.cfi_sections_check_to_only_consider_compact_eh_frame.patch
  and aarch64-alignment-frags.patch now upstream.</changelog>
<changelog author="matz@suse.com" date="1489752000">- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
  bnc#1029909 and more.  Upstream bugs fixed:
  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
  PR 21159</changelog>
<changelog author="rguenther@suse.com" date="1490875200">- Remove empty rpath component removal optimization from
  binutils-skip-rpaths.patch to workaround CMake rpath handling.
  [boo#1025282]</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update binutils-2.28-branch.diff.
- Make compressed debug section handling explicit, disable for
  old products and enable for gas on all architectures otherwise.
- Add binutils-bso21333.diff.  [boo#1029995]</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Add riscv64 target, tested with gcc7 and downstream newlib 2.4.0
  * Prepare riscv32 target (gh#riscv/riscv-newlib#8)</changelog>
<changelog author="rguenther@suse.com" date="1501070400">- Update to binutils 2.29. [fate#321454, fate#321494, fate#323293]
  * The MIPS port now supports microMIPS eXtended Physical Addressing (XPA)
    instructions for assembly and disassembly.
  * The MIPS port now supports the microMIPS Release 5 ISA for assembly and
    disassembly.
  * The MIPS port now supports the Imagination interAptiv MR2 processor,
    which implements the MIPS32r3 ISA, the MIPS16e2 ASE as well as a couple
    of implementation-specific regular MIPS and MIPS16e2 ASE instructions.
  * The SPARC port now supports the SPARC M8 processor, which implements the
    Oracle SPARC Architecture 2017.
  * The MIPS port now supports the MIPS16e2 ASE for assembly and disassembly.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for the wasm32 ELF conversion of the WebAssembly file format.
  * Add --inlines option to objdump, which extends the --line-numbers option
    so that inlined functions will display their nesting information.
  * Add --merge-notes options to objcopy to reduce the size of notes in
    a binary file by merging and deleting redundant notes.
  * Add support for locating separate debug info files using the build-id
    method, where the separate file has a name based upon the build-id of
    the original file.
  GAS
  * Add support for ELF SHF_GNU_MBIND.
  * Add support for the WebAssembly file format and wasm32 ELF conversion.
  * PowerPC gas now checks that the correct register class is used in
    instructions.  For instance, "addi %f4,%cr3,%r31" warns three times
    that the registers are invalid.
  * Add support for the Texas Instruments PRU processor.
  * Support for the ARMv8-R architecture and Cortex-R52 processor has been
    added to the ARM port.
  GNU ld
  * Support for -z shstk in the x86 ELF linker to generate
    GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program properties.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_SHSTK in ELF GNU program
    properties in the x86 ELF linker.
  * Add support for GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties in the x86 ELF linker.
  * Support for -z ibtplt in the x86 ELF linker to generate IBT-enabled
    PLT.
  * Support for -z ibt in the x86 ELF linker to generate IBT-enabled
    PLT as well as GNU_PROPERTY_X86_FEATURE_1_IBT in ELF GNU program
    properties.
  * Add support for ELF SHF_GNU_MBIND and PT_GNU_MBIND_XXX.
  * Add support for ELF GNU program properties.
  * Add support for the Texas Instruments PRU processor.
  * When configuring for arc*-*-linux* targets the default linker emulation will
    change if --with-cpu=nps400 is used at configure time.
  * Improve assignment of LMAs to orphan sections in some edge cases where a
    mixture of both AT&gt;LMA_REGION and AT(LMA) are used.
  * Orphan sections placed after an empty section that has an AT(LMA) will now
    take an load memory address starting from LMA.
  * Section groups can now be resolved (the group deleted and the group members
    placed like normal sections) at partial link time either using the new
    linker option --force-group-allocation or by placing FORCE_GROUP_ALLOCATION
    into the linker script.
- Includes binutils-bso21193.diff, binutils-bso21333.diff and
  fix-security-bugs.diff.
- Remove ld-dtags.diff, instead configure with --enable-new-dtags.
- Refresh binutils-build-as-needed.diff.
- Remove binutils-2.28-branch.diff.</changelog>
<changelog author="rguenther@suse.com" date="1501070401">- Add binutils-2.29-gold-mips.patch to fix build on SLE-11.</changelog>
<changelog author="matz@suse.com" date="1501502400">- Update to 2.29 branch, fixing PR21847, affecting the ppc64le
  ABI in corner cases since 2.29 release.
  Adds binutils-2.29-branch.diff.
- Remove binutils-2.29-gold-mips.patch, obsolete by the update.</changelog>
<changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
<changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
<changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
<changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
<changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>

</package>
<package pkgid="04c14557964594334b2f01ce97efcb33d43b2bb2c8e68d5ecce140a181c6c4fd" name="cryptctl" arch="src">
    <version epoch="0" ver="2.3" rel="3.1"/>

<changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
<changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
<changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
<changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
<changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
<changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
<changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>

</package>
<package pkgid="8595ddb54e5f277f50cd79aadcec737fe50f814fa1e9c7cb26928170136d175f" name="cryptctl" arch="x86_64">
    <version epoch="0" ver="2.3" rel="3.1"/>

<changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
<changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
<changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
<changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
<changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
<changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
<changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
<changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>

</package>
<package pkgid="61233220412836c7d2c840d43269629c5fcb620dc4fdf757c3900e7a9f8bada8" name="ctdb" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="20146ed2f5cf06c30e259992da1fedad8e60fa75e6f46ca57e939c379aa81af4" name="ctdb" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="dac7864ad4e2e8d59831a291f49f77d53eab4fa99275907d30541217070f462b" name="ctdb" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="8a9a87b107862f51763689909cc8b409ab42cd4028e20e54ad1d1d848cb4b07f" name="ctdb-tests" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="fc162ac710cb147507ba0a0c62fdb94ed9041ad5fc1216aaabd57d6dd8b45bb9" name="ctdb-tests" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="5cede84d4dcd357749a005908625df53ed491376ace9c540970e1bb94ed0f9ab" name="ctdb-tests" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="fcae7d5ce4f5f06639fc39fd24d4d2e2bd1b4f7cd25fcf796db868c0c53a5d26" name="curl" arch="src">
    <version epoch="0" ver="7.37.0" rel="20.1"/>

<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>

</package>
<package pkgid="3a0807074129f0da1b39a4de426f1cb4341d8ba31606854b6768010b7f3891b6" name="curl" arch="src">
    <version epoch="0" ver="7.37.0" rel="23.1"/>

<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>

</package>
<package pkgid="a035bfd2e6038c4a172f3c77ad0f900878211833f352b24a069573ed76ce778a" name="curl" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="20.1"/>

<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>

</package>
<package pkgid="a5ff46b08e50fe2252c5adbca7aa0b86b5cbf41c37fe1306831bf9f030f49842" name="curl" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="23.1"/>

<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>

</package>
<package pkgid="c87ff7366ca249aaf37d28774eea8c27b5f1e388f4173a6c02b18fc28e864c3d" name="cvs" arch="src">
    <version epoch="0" ver="1.12.12" rel="188.1"/>

<changelog author="rguenther@suse.de" date="1158753600">- reference existing file in desktop file</changelog>
<changelog author="rguenther@suse.de" date="1173268800">- use vitmp as default editor</changelog>
<changelog author="rguenther@suse.de" date="1174564800">- add zlib-devel and gdbm-devel BuildRequires</changelog>
<changelog author="coolo@suse.de" date="1178107200">- remove support for susehelp - as cvs is a base pack and susehelp
  isn't really used anymore</changelog>
<changelog author="mkoenig@suse.de" date="1182254400">- adjust path to vitmp [#264909]</changelog>
<changelog author="pth@suse.de" date="1194609600">- Make rcs2log request the installation of the rcs package if
  /usr/bin/rlog isn't found (#331967).
- Install man page for rcs2log.
- Use rpm macros for path names.
- Fix printf format strings.
- Resync patches.
- Give every patch a cvs- prefix.
- Recompress additional sources with bzip2.</changelog>
<changelog author="schwab@suse.de" date="1214568000">- Fix gnulib macros.
- Fix printf format strings.</changelog>
<changelog author="schwab@suse.de" date="1219060800">- Fix buggy AC_FUNC_MKTIME reimplementation.</changelog>
<changelog author="pth@suse.de" date="1240920000">- Make cvs use ssh by default for :ext: transport (bnc#498801).</changelog>
<changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
<changelog author="pth@novell.com" date="1275307200">- Mention all included documentation (bnc#609970).
- Change URL to http://www.nongnu.org/cvs/.</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="pth@suse.de" date="1284984000">- Fix spec file (bnc#609970).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="pth@suse.de" date="1327924800">- Fix the way CVS reads proxy connection HTTP responses
  (bnc#744059, CVE-2012-0804).</changelog>
<changelog author="pth@suse.de" date="1329825600">- Fix typo in the last patch.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="josef.moellers@suse.com" date="1502452800">- Disallow a leading dash in the argument of the "-d" option.
  [bsc#1053364, CVE-2017-12836,
  cvs-Bug-1053364-disallow-dash.patch]
- Changed license to "GPL-2.0"
  see http://cvs.savannah.nongnu.org/viewvc/cvs/ccvs/cvs.spec.in</changelog>

</package>
<package pkgid="cea1ef859e5f76808b7c1271f6d998883054535b91b0c395032925fbdef9c373" name="cvs" arch="x86_64">
    <version epoch="0" ver="1.12.12" rel="188.1"/>

<changelog author="pth@suse.de" date="1240920000">- Make cvs use ssh by default for :ext: transport (bnc#498801).</changelog>
<changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
<changelog author="pth@novell.com" date="1275307200">- Mention all included documentation (bnc#609970).
- Change URL to http://www.nongnu.org/cvs/.</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="pth@suse.de" date="1284984000">- Fix spec file (bnc#609970).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="pth@suse.de" date="1327924800">- Fix the way CVS reads proxy connection HTTP responses
  (bnc#744059, CVE-2012-0804).</changelog>
<changelog author="pth@suse.de" date="1329825600">- Fix typo in the last patch.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="josef.moellers@suse.com" date="1502452800">- Disallow a leading dash in the argument of the "-d" option.
  [bsc#1053364, CVE-2017-12836,
  cvs-Bug-1053364-disallow-dash.patch]
- Changed license to "GPL-2.0"
  see http://cvs.savannah.nongnu.org/viewvc/cvs/ccvs/cvs.spec.in</changelog>

</package>
<package pkgid="99adaf630adc4e246bfcea7302bfe1ca016158f84069b2fd5ad745d93fef76c0" name="cvs-doc" arch="noarch">
    <version epoch="0" ver="1.12.12" rel="188.1"/>

<changelog author="pth@suse.de" date="1240920000">- Make cvs use ssh by default for :ext: transport (bnc#498801).</changelog>
<changelog author="jengelh@medozas.de" date="1260964800">- Package documentation as noarch</changelog>
<changelog author="pth@novell.com" date="1275307200">- Mention all included documentation (bnc#609970).
- Change URL to http://www.nongnu.org/cvs/.</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="pth@suse.de" date="1284984000">- Fix spec file (bnc#609970).</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="pth@suse.de" date="1327924800">- Fix the way CVS reads proxy connection HTTP responses
  (bnc#744059, CVE-2012-0804).</changelog>
<changelog author="pth@suse.de" date="1329825600">- Fix typo in the last patch.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="josef.moellers@suse.com" date="1502452800">- Disallow a leading dash in the argument of the "-d" option.
  [bsc#1053364, CVE-2017-12836,
  cvs-Bug-1053364-disallow-dash.patch]
- Changed license to "GPL-2.0"
  see http://cvs.savannah.nongnu.org/viewvc/cvs/ccvs/cvs.spec.in</changelog>

</package>
<package pkgid="4611846a73b46c8ea90b1727741c953154a0d44ba46ec81da3e31f7d14f42b43" name="cyrus-sasl" arch="src">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="63468aeb937b674671633a4035ff512e2a98dec9e37f13f029e75df2f40be1ef" name="cyrus-sasl" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="c1ad6ac32aa01480440371c07c61b05dfc805c73db5cb51819a8be0083a7942d" name="cyrus-sasl-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="42430576e34ed82486f0147e55244076d49e5ab4efd57bcf7df3b5e1467abefc" name="cyrus-sasl-crammd5" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="893a5f23a4f9d630e91b17a11ac49ecb32f198fdeb1330b80fd0c8d0d62d6d47" name="cyrus-sasl-crammd5-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="68e27de9c235cecb42ac81bb45adf83002ebb95d969c519f050568c34e8407d9" name="cyrus-sasl-devel" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="8935b14e4e1aa7f422386cc63b042d566a0d882bdc16806b38b12163ffd68411" name="cyrus-sasl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="fa7f9a3bdad82fcda6cd7c5851d9b44fed5a8bfa9e59658e592e888602a58d1b" name="cyrus-sasl-digestmd5" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="08ae92f7d7715951d8cd975035df60dafc4a2ce2173e136b7368bdc5a8b9c168" name="cyrus-sasl-digestmd5-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="d797772688cb9348dadaeb2841bff8efd88fe775630ad1792cf215af6357df0f" name="cyrus-sasl-gs2" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="eec10adf6a9a399c6d4b09525bcf9f7bb3b7337db459fc372612f70eb433fab8" name="cyrus-sasl-gssapi" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="04608d15db0102ad666cca409b765bc80fab9eb7abca8d05c79f0523f4f7b9ad" name="cyrus-sasl-gssapi-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="1dbfcbf095d197923dd98bf2780be60fb3388fcfefa50c31558661ec2c111013" name="cyrus-sasl-ldap-auxprop" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="6873fa6cc303659b11b6da0146e471214716f436e9923a873bbd430306a55499" name="cyrus-sasl-ldap-auxprop-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="c0ba05bbbf45bd8fbd8cd3606bd856b96efbad53aee8eb1e7cbdd6b24e773ebb" name="cyrus-sasl-ntlm" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="a9c1844562f363189232aa5d28c9de1fc428c53575bd9c997f4f1abb5df5e051" name="cyrus-sasl-otp" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="5546a7ac05b8960ccf79c3b06be9c0dc97509be3dcb780995608731c02f7a030" name="cyrus-sasl-otp-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="65ea03b215846d8ab24a762134fd876128e35feda5e0221cc3c7c142da3b0978" name="cyrus-sasl-plain" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="89ceaabab7f18233ee0bd84d176528c989b8de67e7a1ed3f3584c8bd40f260fa" name="cyrus-sasl-plain-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="2e7d8576eec1cb6845023c33f6e8be637b60cf73725f791d07e7462a7bb327fd" name="cyrus-sasl-saslauthd" arch="src">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="c50ff13a6e48592ff276e6336f9594ce4e8e684c40a525546ce3740fb07be29f" name="cyrus-sasl-saslauthd" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="990e4514fd64ad6abdc81afd2601f7a1551dfc02b40dada1757dddd12cd4ca50" name="cyrus-sasl-scram" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="0ed3e8f38371bc2bcf565a3ec20d2228791af60dc06d20a47faf0360c97f7b19" name="cyrus-sasl-sqlauxprop" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="be00d6a1751bc32c0a85931eb7b259c42dfcef0ac6aec25e226587d6a3a5f4ae" name="cyrus-sasl-sqlauxprop-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="f5e944eee4838f3aade5772be27623bb83997ba140a9f12b9fb4660a4330be95" name="device-mapper" arch="x86_64">
    <version epoch="0" ver="1.02.97" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="e23068740b1158fdc3fe3cc04aadce1d345f0d8590c087f283272879f7fd3be0" name="device-mapper-32bit" arch="x86_64">
    <version epoch="0" ver="1.02.97" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="0130c64ffa434af4c7aa562f241a1758c2d91dff0ca1cc53ff1ec3da9b3133dc" name="device-mapper-devel" arch="x86_64">
    <version epoch="0" ver="1.02.97" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="d8d2852fc41ec2048085337d33942a38d8ad245cf74b4a1b1503bb85ad164809" name="device-mapper-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.02.97" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="c8830a7ad5adae4727e9f99c022f5c4d55fdcbca921e567d5a41b1a9a41ae5fa" name="dnsmasq" arch="src">
    <version epoch="0" ver="2.78" rel="13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
<changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
<changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
<changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
<changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
<changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1395835200">- dnsmasq.service: Set PrivateDevices=yes so we run in a
  separate namespace with the bare minimum device nodes isolated
  from the host.</changelog>
<changelog author="dmueller@suse.com" date="1402488000">- update to 2.71:
    Subtle change to error handling to help DNSSEC validation
    when servers fail to provide NODATA answers for
    non-existent DS records.
    Tweak code which removes DNSSEC records from answers when
    not required. Fixes broken answers when additional section
    has real records in it. Thanks to Marco Davids for the bug
    report.
    Fix DNSSEC validation of ANY queries. Thanks to Marco Davids
    for spotting that too.
    Fix total DNS failure and 100% CPU use if cachesize set to zero,
    regression introduced in 2.69. Thanks to James Hunt and
    the Ubuntu crowd for assistance in fixing this.
    Fix crash, introduced in 2.69, on TCP request when dnsmasq
    compiled with DNSSEC support, but running without DNSSEC
    enabled. Thanks to Manish Sing for spotting that one.
    Fix regression which broke ipset functionality. Thanks to
    Wang Jian for the bug report.
    Implement dynamic interface discovery on *BSD. This allows
    the contructor: syntax to be used in dhcp-range for DHCPv6
    on the BSD platform. Thanks to Matthias Andree for
    valuable research on how to implement this.
    Fix infinite loop associated with some --bogus-nxdomain
    configs. Thanks fogobogo for the bug report.
    Fix missing RA RDNS option with configuration like
  - -dhcp-option=option6:23,[::] Thanks to Tsachi Kimeldorfer
    for spotting the problem.
    Add [fd00::] and [fe80::] as special addresses in DHCPv6
    options, analogous to [::]. [fd00::] is replaced with the
    actual ULA of the interface on the machine running
    dnsmasq, [fe80::] with the link-local address.
    Thanks to Tsachi Kimeldorfer for championing this.
    DNSSEC validation and caching. Dnsmasq needs to be
    compiled with this enabled, with
    make dnsmasq COPTS=-DHAVE_DNSSEC
    this add dependencies on the nettle crypto library and the
    gmp maths library. It's possible to have these linked
    statically with
    make dnsmasq COPTS='-DHAVE_DNSSEC -DHAVE_DNSSEC_STATIC'
    which bloats the dnsmasq binary, but saves the size of
    the shared libraries which are much bigger.
    To enable, DNSSEC, you will need a set of
    trust-anchors. Now that the TLDs are signed, this can be
    the keys for the root zone, and for convenience they are
    included in trust-anchors.conf in the dnsmasq
    distribution. You should of course check that these are
    legitimate and up-to-date. So, adding
    conf-file=/path/to/trust-anchors.conf
    dnssec
    to your config is all thats needed to get things
    working. The upstream nameservers have to be DNSSEC-capable
    too, of course. Many ISP nameservers aren't, but the
    Google public nameservers (8.8.8.8 and 8.8.4.4) are.
    When DNSSEC is configured, dnsmasq validates any queries
    for domains which are signed. Query results which are
    bogus are replaced with SERVFAIL replies, and results
    which are correctly signed have the AD bit set. In
    addition, and just as importantly, dnsmasq supplies
    correct DNSSEC information to clients which are doing
    their own validation, and caches DNSKEY, DS and RRSIG
    records, which significantly improve the performance of
    downstream validators. Setting --log-queries will show
    DNSSEC in action.
    If a domain is returned from an upstream nameserver without
    DNSSEC signature, dnsmasq by default trusts this. This
    means that for unsigned zone (still the majority) there
    is effectively no cost for having DNSSEC enabled. Of course
    this allows an attacker to replace a signed record with a
    false unsigned record. This is addressed by the
  - -dnssec-check-unsigned flag, which instructs dnsmasq
    to prove that an unsigned record is legitimate, by finding
    a secure proof that the zone containing the record is not
    signed. Doing this has costs (typically one or two extra
    upstream queries). It also has a nasty failure mode if
    dnsmasq's upstream nameservers are not DNSSEC capable.
    Without --dnssec-check-unsigned using such an upstream
    server will simply result in not queries being validated;
    with --dnssec-check-unsigned enabled and a
    DNSSEC-ignorant upstream server, _all_ queries will fail.
    Note that DNSSEC requires that the local time is valid and
    accurate, if not then DNSSEC validation will fail. NTP
    should be running. This presents a problem for routers
    without a battery-backed clock. To set the time needs NTP
    to do DNS lookups, but lookups will fail until NTP has run.
    To address this, there's a flag, --dnssec-no-timecheck
    which disables the time checks (only) in DNSSEC. When dnsmasq
    is started and the clock is not synced, this flag should
    be used. As soon as the clock is synced, SIGHUP dnsmasq.
    The SIGHUP clears the cache of partially-validated data and
    resets the no-timecheck flag, so that all DNSSEC checks
    henceforward will be complete.
    The development of DNSSEC in dnsmasq was started by
    Giovanni Bajo, to whom huge thanks are owed. It has been
    supported by Comcast, whose techfund grant has allowed for
    an invaluable period of full-time work to get it to
    a workable state.
    Add --rev-server. Thanks to Dave Taht for suggesting this.
    Add --servers-file. Allows dynamic update of upstream servers
    full access to configuration.
    Add --local-service. Accept DNS queries only from hosts
    whose address is on a local subnet, ie a subnet for which
    an interface exists on the server. This option
    only has effect if there are no --interface --except-interface,
  - -listen-address or --auth-server options. It is intended
    to be set as a default on installation, to allow
    unconfigured installations to be useful but also safe from
    being used for DNS amplification attacks.
    Fix crashes in cache_get_cname_target() when dangling CNAMEs
    encountered. Thanks to Andy and the rt-n56u project for
    find this and helping to chase it down.
    Fix wrong RCODE in authoritative DNS replies to PTR queries. The
    correct answer was included, but the RCODE was set to NXDOMAIN.
    Thanks to Craig McQueen for spotting this.
    Make statistics available as DNS queries in the .bind TLD as
    well as logging them.
    Use random addresses for DHCPv6 temporary address
    allocations, instead of algorithmically determined stable
    addresses.
    Fix bug which meant that the DHCPv6 DUID was not available
    in DHCP script runs during the lifetime of the dnsmasq
    process which created the DUID de-novo. Once the DUID was
    created and stored in the lease file and dnsmasq
    restarted, this bug disappeared.
    Fix bug introduced in 2.67 which could result in erroneous
    NXDOMAIN returns to CNAME queries.
    Fix build failures on MacOS X and openBSD.
    Allow subnet specifications in --auth-zone to be interface
    names as well as address literals. This makes it possible
    to configure authoritative DNS when local address ranges
    are dynamic and works much better than the previous
    work-around which exempted contructed DHCP ranges from the
    IP address filtering. As a consequence, that work-around
    is removed. Under certain circumstances, this change wil
    break existing configuration: if you're relying on the
    contructed-range exception, you need to change --auth-zone
    to specify the same interface as is used to construct your
    DHCP ranges, probably with a trailing "/6" like this:
  - -auth-zone=example.com,eth0/6 to limit the addresses to
    IPv6 addresses of eth0.
    Fix problems when advertising deleted IPv6 prefixes. If
    the prefix is deleted (rather than replaced), it doesn't
    get advertised with zero preferred time. Thanks to Tsachi
    for the bug report.
    Fix segfault with some locally configured CNAMEs. Thanks
    to Andrew Childs for spotting the problem.
    Fix memory leak on re-reading /etc/hosts and friends,
    introduced in 2.67.
    Check the arrival interface of incoming DNS and TFTP
    requests via IPv6, even in --bind-interfaces mode. This
    isn't possible for IPv4 and can generate scary warnings,
    but as it's always possible for IPv6 (the API always
    exists) then we should do it always.
    Tweak the rules on prefix-lengths in --dhcp-range for
    IPv6. The new rule is that the specified prefix length
    must be larger than or equal to the prefix length of the
    corresponding address on the local interface.
    Fix crash if upstream server returns SERVFAIL when
  - -conntrack in use. Thanks to Giacomo Tazzari for finding
    this and supplying the patch.
    Repair regression in 2.64. That release stopped sending
    lease-time information in the reply to DHCPINFORM
    requests, on the correct grounds that it was a standards
    violation. However, this broke the dnsmasq-specific
    dhcp_lease_time utility. Now, DHCPINFORM returns
    lease-time only if it's specifically requested
    (maintaining standards) and the dhcp_lease_time utility
    has been taught to ask for it (restoring functionality).
    Fix --dhcp-match, --dhcp-vendorclass and --dhcp-userclass
    to work with BOOTP and well as DHCP. Thanks to Peter
    Korsgaard for spotting the problem.
    Add --synth-domain. Thanks to Vishvananda Ishaya for
    suggesting this.
    Fix failure to compile ipset.c if old kernel headers are
    in use. Thanks to Eugene Rudoy for pointing this out.
    Handle IPv4 interface-address labels in Linux. These are
    often used to emulate the old IP-alias addresses. Before,
    using --interface=eth0 would service all the addresses of
    eth0, including ones configured as aliases, which appear
    in ifconfig as eth0:0. Now, only addresses with the label
    eth0 are active. This is not backwards compatible: if you
    want to continue to bind the aliases too, you need to add
    eg. --interface=eth0:0 to the config.
    Fix "failed to set SO_BINDTODEVICE on DHCP socket: Socket
    operation on non-socket" error on startup with
    configurations which have exactly one --interface option
    and do RA but _not_ DHCPv6. Thanks to Trever Adams for the
    bug report.
    Generalise --interface-name to cope with IPv6 addresses
    and multiple addresses per interface per address family.
    Fix option parsing for --dhcp-host, which was generating a
    spurious error when all seven possible items were
    included. Thanks to Zhiqiang Wang for the bug report.
    Remove restriction on prefix-length in --auth-zone. Thanks
    to Toke Hoiland-Jorgensen for suggesting this.
    Log when the maximum number of concurrent DNS queries is
    reached. Thanks to Marcelo Salhab Brogliato for the patch.
    If wildcards are used in --interface, don't assume that
    there will only ever be one available interface for DHCP
    just because there is one at start-up. More may appear, so
    we can't use SO_BINDTODEVICE. Thanks to Natrio for the bug
    report.
    Increase timeout/number of retries in TFTP to accomodate
    AudioCodes Voice Gateways doing streaming writes to flash.
    Thanks to Damian Kaczkowski for spotting the problem.
    Fix crash with empty DHCP string options when adding zero
    terminator. Thanks to Patrick McLean for the bug report.
    Allow hostnames to start with a number, as allowed in
    RFC-1123. Thanks to Kyle Mestery for the patch.
    Fixes to DHCP FQDN option handling: don't terminate FQDN
    if domain not known and allow a FQDN option with blank
    name to request that a FQDN option is returned in the
    reply. Thanks to Roy Marples for the patch.
    Make --clear-on-reload apply to setting upstream servers
    via DBus too.
    When the address which triggered the construction of an
    advertised IPv6 prefix disappears, continue to advertise
    the prefix for up to 2 hours, with the preferred lifetime
    set to zero. This satisfies RFC 6204 4.3 L-13 and makes
    things work better if a prefix disappears without being
    deprecated first. Thanks to Uwe Schindler for persuasively
    arguing for this.
    Fix MAC address enumeration on *BSD. Thanks to Brad Smith
    for the bug report.
    Support RFC-4242 information-refresh-time options in the
    reply to DHCPv6 information-request. The lease time of the
    smallest valid dhcp-range is sent. Thanks to Uwe Schindler
    for suggesting this.
    Make --listen-address higher priority than --except-interface
    in all circumstances. Thanks to Thomas Hood for the bugreport.
    Provide independent control over which interfaces get TFTP
    service. If enable-tftp is given a list of interfaces, then TFTP
    is provided on those. Without the list, the previous behaviour
    (provide TFTP to the same interfaces we provide DHCP to)
    is retained. Thanks to Lonnie Abelbeck for the suggestion.
    Add --dhcp-relay config option. Many thanks to vtsl.net
    for sponsoring this development.
    Fix crash with empty tag: in --dhcp-range. Thanks to
    Kaspar Schleiser for the bug report.
    Add "baseline" and "bloatcheck" makefile targets, for
    revealing size changes during development. Thanks to
    Vladislav Grishenko for the patch.
    Cope with DHCPv6 clients which send REQUESTs without
    address options - treat them as SOLICIT with rapid commit.
    Support identification of clients by MAC address in
    DHCPv6. When using a relay, the relay must support RFC
    6939 for this to work. It always works for directly
    connected clients. Thanks to Vladislav Grishenko
    for prompting this feature.
    Remove the rule for constructed DHCP ranges that the local
    address must be either the first or last address in the
    range. This was originally to avoid SLAAC addresses, but
    we now explicitly autoconfig and privacy addresses instead.
    Update Polish translation. Thanks to Jan Psota.
    Fix problem in DHCPv6 vendorclass/userclass matching
    code. Thanks to Tanguy Bouzeloc for the patch.
    Update Spanish transalation. Thanks to Vicente Soriano.
    Add --ra-param option. Thanks to Vladislav Grishenko for
    inspiration on this.
    Add --add-subnet configuration, to tell upstream DNS
    servers where the original client is. Thanks to DNSthingy
    for sponsoring this feature.
    Add --quiet-dhcp, --quiet-dhcp6 and --quiet-ra. Thanks to
    Kevin Darbyshire-Bryant for the initial patch.
    Allow A/AAAA records created by --interface-name to be the
    target of --cname. Thanks to Hadmut Danisch for the
    suggestion.
    Avoid treating a --dhcp-host which has an IPv6 address
    as eligable for use with DHCPv4 on the grounds that it has
    no address, and vice-versa. Thanks to Yury Konovalov for
    spotting the problem.
    Do a better job caching dangling CNAMEs. Thanks to Yves
    Dorfsman for spotting the problem.
    Add the ability to act as an authoritative DNS
    server. Dnsmasq can now answer queries from the wider 'net
    with local data, as long as the correct NS records are set
    up. Only local data is provided, to avoid creating an open
    DNS relay. Zone transfer is supported, to allow secondary
    servers to be configured.
    Add "constructed DHCP ranges" for DHCPv6. This is intended
    for IPv6 routers which get prefixes dynamically via prefix
    delegation. With suitable configuration, stateful DHCPv6
    and RA can happen automatically as prefixes are delegated
    and then deprecated, without having  to re-write the
    dnsmasq configuration file or restart the daemon. Thanks to
    Steven Barth for extensive testing and development work on
    this idea.
    Fix crash on startup on Solaris 11. Regression probably
    introduced in 2.61.  Thanks to Geoff Johnstone for the
    patch.
    Add code to make behaviour for TCP DNS requests that same
    as for UDP requests, when a request arrives for an allowed
    address, but via a banned interface. This change is only
    active on Linux, since the relevant API is missing (AFAIK)
    on other platforms. Many thanks to Tomas Hozza for
    spotting the problem, and doing invaluable discovery of
    the obscure and undocumented API required for the solution.
    Don't send the default DHCP option advertising dnsmasq as
    the local DNS server if dnsmasq is configured to not act
    as DNS server, or it's configured to a non-standard port.
    Add DNSMASQ_CIRCUIT_ID, DNSMASQ_SUBCRIBER_ID,
    DNSMASQ_REMOTE_ID variables to the environment of the
    lease-change script (and the corresponding Lua). These hold
    information inserted into the DHCP request by a DHCP relay
    agent. Thanks to Lakefield Communications for providing a
    bounty for this addition.
    Fixed crash, introduced in 2.64, whilst handling DHCPv6
    information-requests with some common configurations.
    Thanks to Robert M. Albrecht for the bug report and
    chasing the problem.
    Add --ipset option. Thanks to Jason A. Donenfeld for the
    patch.
    Don't erroneously reject some option names in --dhcp-match
    options. Thanks to Benedikt Hochstrasser for the bug report.
    Allow a trailing '*' wildcard in all interface-name
    configurations. Thanks to Christian Parpart for the patch.
    Handle the situation where libc headers define
    SO_REUSEPORT, but the kernel in use doesn't, to cope with
    the introduction of this option to Linux. Thanks to Rich
    Felker for the bug report.
    Update Polish translation. Thanks to Jan Psota.
    Fix crash if the configured DHCP lease limit is
    reached. Regression occurred in 2.61. Thanks to Tsachi for
    the bug report.
    Update the French translation. Thanks to Gildas le Nadan.</changelog>
<changelog author="cdenicolo@suse.com" date="1402574400">- license update: GPL-2.0 or GPL-3.0
  correct license is dual GPL-2.0 or GPL-3.0; please add COPYING-v3-file to
  RPM.</changelog>
<changelog author="vwallfahrer@suse.com" date="1407240000">- Removed README.SUSE file, it was to confusing and not necessary (bnc#889972).
  Information is already present in the upstream documentation.
- Split up vendor-files.tar.bz2 into single files
- Comply with systemd packaging guidlines</changelog>
<changelog author="vwallfahrer@suse.com" date="1407326400">- Removed Suse and all other OS/Distribution related subdirs from
  contrib, so only the rest gets packaged. The subdirs are not
  necessary anymore (bnc#889028).</changelog>
<changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).
- Fix caching of local records (bsc#923144).</changelog>
<changelog author="max@suse.com" date="1437566400">- Build with support for DNSSEC (fate#318323, bsc#908137).</changelog>
<changelog author="mchandras@suse.de" date="1454673600">- Drop PrivateDevices=yes which breaks logging (bnc#902511, bnc#904537)</changelog>
<changelog author="max@suse.com" date="1475668800">- Fix denial of service between local and remote dns entries
  (CVE-2015-8899, bsc#983273).</changelog>
<changelog author="max@suse.com" date="1488456000">- Update to version 2.76 (fate#321175, fate#322030, bsc#1035227):
  * Fix PXE booting for UEFI architectures (fate#322030).
  * Prevent a man-in-the-middle attack (bsc#972164, fate#321175).
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- This update brings a (small) potential incompatibility in the
  handling of "basename" in --pxe-service. Please read the
  CHANGELOG and the documentation if you are using this option.
- Obsoleted patches:
  * dnsmasq-CVE-2015-3294.patch
  * dnsmasq-CVE-2015-8899.patch
  * dnsmasq-local-cache.patch</changelog>
<changelog author="max@suse.com" date="1506513600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG</changelog>

</package>
<package pkgid="cb6e224cf37b7bf6ed82ee18e521bf23ea3fc49366b63daed69072195330575b" name="dnsmasq" arch="x86_64">
    <version epoch="0" ver="2.78" rel="13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
<changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
<changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
<changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
<changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
<changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1395835200">- dnsmasq.service: Set PrivateDevices=yes so we run in a
  separate namespace with the bare minimum device nodes isolated
  from the host.</changelog>
<changelog author="dmueller@suse.com" date="1402488000">- update to 2.71:
    Subtle change to error handling to help DNSSEC validation
    when servers fail to provide NODATA answers for
    non-existent DS records.
    Tweak code which removes DNSSEC records from answers when
    not required. Fixes broken answers when additional section
    has real records in it. Thanks to Marco Davids for the bug
    report.
    Fix DNSSEC validation of ANY queries. Thanks to Marco Davids
    for spotting that too.
    Fix total DNS failure and 100% CPU use if cachesize set to zero,
    regression introduced in 2.69. Thanks to James Hunt and
    the Ubuntu crowd for assistance in fixing this.
    Fix crash, introduced in 2.69, on TCP request when dnsmasq
    compiled with DNSSEC support, but running without DNSSEC
    enabled. Thanks to Manish Sing for spotting that one.
    Fix regression which broke ipset functionality. Thanks to
    Wang Jian for the bug report.
    Implement dynamic interface discovery on *BSD. This allows
    the contructor: syntax to be used in dhcp-range for DHCPv6
    on the BSD platform. Thanks to Matthias Andree for
    valuable research on how to implement this.
    Fix infinite loop associated with some --bogus-nxdomain
    configs. Thanks fogobogo for the bug report.
    Fix missing RA RDNS option with configuration like
  - -dhcp-option=option6:23,[::] Thanks to Tsachi Kimeldorfer
    for spotting the problem.
    Add [fd00::] and [fe80::] as special addresses in DHCPv6
    options, analogous to [::]. [fd00::] is replaced with the
    actual ULA of the interface on the machine running
    dnsmasq, [fe80::] with the link-local address.
    Thanks to Tsachi Kimeldorfer for championing this.
    DNSSEC validation and caching. Dnsmasq needs to be
    compiled with this enabled, with
    make dnsmasq COPTS=-DHAVE_DNSSEC
    this add dependencies on the nettle crypto library and the
    gmp maths library. It's possible to have these linked
    statically with
    make dnsmasq COPTS='-DHAVE_DNSSEC -DHAVE_DNSSEC_STATIC'
    which bloats the dnsmasq binary, but saves the size of
    the shared libraries which are much bigger.
    To enable, DNSSEC, you will need a set of
    trust-anchors. Now that the TLDs are signed, this can be
    the keys for the root zone, and for convenience they are
    included in trust-anchors.conf in the dnsmasq
    distribution. You should of course check that these are
    legitimate and up-to-date. So, adding
    conf-file=/path/to/trust-anchors.conf
    dnssec
    to your config is all thats needed to get things
    working. The upstream nameservers have to be DNSSEC-capable
    too, of course. Many ISP nameservers aren't, but the
    Google public nameservers (8.8.8.8 and 8.8.4.4) are.
    When DNSSEC is configured, dnsmasq validates any queries
    for domains which are signed. Query results which are
    bogus are replaced with SERVFAIL replies, and results
    which are correctly signed have the AD bit set. In
    addition, and just as importantly, dnsmasq supplies
    correct DNSSEC information to clients which are doing
    their own validation, and caches DNSKEY, DS and RRSIG
    records, which significantly improve the performance of
    downstream validators. Setting --log-queries will show
    DNSSEC in action.
    If a domain is returned from an upstream nameserver without
    DNSSEC signature, dnsmasq by default trusts this. This
    means that for unsigned zone (still the majority) there
    is effectively no cost for having DNSSEC enabled. Of course
    this allows an attacker to replace a signed record with a
    false unsigned record. This is addressed by the
  - -dnssec-check-unsigned flag, which instructs dnsmasq
    to prove that an unsigned record is legitimate, by finding
    a secure proof that the zone containing the record is not
    signed. Doing this has costs (typically one or two extra
    upstream queries). It also has a nasty failure mode if
    dnsmasq's upstream nameservers are not DNSSEC capable.
    Without --dnssec-check-unsigned using such an upstream
    server will simply result in not queries being validated;
    with --dnssec-check-unsigned enabled and a
    DNSSEC-ignorant upstream server, _all_ queries will fail.
    Note that DNSSEC requires that the local time is valid and
    accurate, if not then DNSSEC validation will fail. NTP
    should be running. This presents a problem for routers
    without a battery-backed clock. To set the time needs NTP
    to do DNS lookups, but lookups will fail until NTP has run.
    To address this, there's a flag, --dnssec-no-timecheck
    which disables the time checks (only) in DNSSEC. When dnsmasq
    is started and the clock is not synced, this flag should
    be used. As soon as the clock is synced, SIGHUP dnsmasq.
    The SIGHUP clears the cache of partially-validated data and
    resets the no-timecheck flag, so that all DNSSEC checks
    henceforward will be complete.
    The development of DNSSEC in dnsmasq was started by
    Giovanni Bajo, to whom huge thanks are owed. It has been
    supported by Comcast, whose techfund grant has allowed for
    an invaluable period of full-time work to get it to
    a workable state.
    Add --rev-server. Thanks to Dave Taht for suggesting this.
    Add --servers-file. Allows dynamic update of upstream servers
    full access to configuration.
    Add --local-service. Accept DNS queries only from hosts
    whose address is on a local subnet, ie a subnet for which
    an interface exists on the server. This option
    only has effect if there are no --interface --except-interface,
  - -listen-address or --auth-server options. It is intended
    to be set as a default on installation, to allow
    unconfigured installations to be useful but also safe from
    being used for DNS amplification attacks.
    Fix crashes in cache_get_cname_target() when dangling CNAMEs
    encountered. Thanks to Andy and the rt-n56u project for
    find this and helping to chase it down.
    Fix wrong RCODE in authoritative DNS replies to PTR queries. The
    correct answer was included, but the RCODE was set to NXDOMAIN.
    Thanks to Craig McQueen for spotting this.
    Make statistics available as DNS queries in the .bind TLD as
    well as logging them.
    Use random addresses for DHCPv6 temporary address
    allocations, instead of algorithmically determined stable
    addresses.
    Fix bug which meant that the DHCPv6 DUID was not available
    in DHCP script runs during the lifetime of the dnsmasq
    process which created the DUID de-novo. Once the DUID was
    created and stored in the lease file and dnsmasq
    restarted, this bug disappeared.
    Fix bug introduced in 2.67 which could result in erroneous
    NXDOMAIN returns to CNAME queries.
    Fix build failures on MacOS X and openBSD.
    Allow subnet specifications in --auth-zone to be interface
    names as well as address literals. This makes it possible
    to configure authoritative DNS when local address ranges
    are dynamic and works much better than the previous
    work-around which exempted contructed DHCP ranges from the
    IP address filtering. As a consequence, that work-around
    is removed. Under certain circumstances, this change wil
    break existing configuration: if you're relying on the
    contructed-range exception, you need to change --auth-zone
    to specify the same interface as is used to construct your
    DHCP ranges, probably with a trailing "/6" like this:
  - -auth-zone=example.com,eth0/6 to limit the addresses to
    IPv6 addresses of eth0.
    Fix problems when advertising deleted IPv6 prefixes. If
    the prefix is deleted (rather than replaced), it doesn't
    get advertised with zero preferred time. Thanks to Tsachi
    for the bug report.
    Fix segfault with some locally configured CNAMEs. Thanks
    to Andrew Childs for spotting the problem.
    Fix memory leak on re-reading /etc/hosts and friends,
    introduced in 2.67.
    Check the arrival interface of incoming DNS and TFTP
    requests via IPv6, even in --bind-interfaces mode. This
    isn't possible for IPv4 and can generate scary warnings,
    but as it's always possible for IPv6 (the API always
    exists) then we should do it always.
    Tweak the rules on prefix-lengths in --dhcp-range for
    IPv6. The new rule is that the specified prefix length
    must be larger than or equal to the prefix length of the
    corresponding address on the local interface.
    Fix crash if upstream server returns SERVFAIL when
  - -conntrack in use. Thanks to Giacomo Tazzari for finding
    this and supplying the patch.
    Repair regression in 2.64. That release stopped sending
    lease-time information in the reply to DHCPINFORM
    requests, on the correct grounds that it was a standards
    violation. However, this broke the dnsmasq-specific
    dhcp_lease_time utility. Now, DHCPINFORM returns
    lease-time only if it's specifically requested
    (maintaining standards) and the dhcp_lease_time utility
    has been taught to ask for it (restoring functionality).
    Fix --dhcp-match, --dhcp-vendorclass and --dhcp-userclass
    to work with BOOTP and well as DHCP. Thanks to Peter
    Korsgaard for spotting the problem.
    Add --synth-domain. Thanks to Vishvananda Ishaya for
    suggesting this.
    Fix failure to compile ipset.c if old kernel headers are
    in use. Thanks to Eugene Rudoy for pointing this out.
    Handle IPv4 interface-address labels in Linux. These are
    often used to emulate the old IP-alias addresses. Before,
    using --interface=eth0 would service all the addresses of
    eth0, including ones configured as aliases, which appear
    in ifconfig as eth0:0. Now, only addresses with the label
    eth0 are active. This is not backwards compatible: if you
    want to continue to bind the aliases too, you need to add
    eg. --interface=eth0:0 to the config.
    Fix "failed to set SO_BINDTODEVICE on DHCP socket: Socket
    operation on non-socket" error on startup with
    configurations which have exactly one --interface option
    and do RA but _not_ DHCPv6. Thanks to Trever Adams for the
    bug report.
    Generalise --interface-name to cope with IPv6 addresses
    and multiple addresses per interface per address family.
    Fix option parsing for --dhcp-host, which was generating a
    spurious error when all seven possible items were
    included. Thanks to Zhiqiang Wang for the bug report.
    Remove restriction on prefix-length in --auth-zone. Thanks
    to Toke Hoiland-Jorgensen for suggesting this.
    Log when the maximum number of concurrent DNS queries is
    reached. Thanks to Marcelo Salhab Brogliato for the patch.
    If wildcards are used in --interface, don't assume that
    there will only ever be one available interface for DHCP
    just because there is one at start-up. More may appear, so
    we can't use SO_BINDTODEVICE. Thanks to Natrio for the bug
    report.
    Increase timeout/number of retries in TFTP to accomodate
    AudioCodes Voice Gateways doing streaming writes to flash.
    Thanks to Damian Kaczkowski for spotting the problem.
    Fix crash with empty DHCP string options when adding zero
    terminator. Thanks to Patrick McLean for the bug report.
    Allow hostnames to start with a number, as allowed in
    RFC-1123. Thanks to Kyle Mestery for the patch.
    Fixes to DHCP FQDN option handling: don't terminate FQDN
    if domain not known and allow a FQDN option with blank
    name to request that a FQDN option is returned in the
    reply. Thanks to Roy Marples for the patch.
    Make --clear-on-reload apply to setting upstream servers
    via DBus too.
    When the address which triggered the construction of an
    advertised IPv6 prefix disappears, continue to advertise
    the prefix for up to 2 hours, with the preferred lifetime
    set to zero. This satisfies RFC 6204 4.3 L-13 and makes
    things work better if a prefix disappears without being
    deprecated first. Thanks to Uwe Schindler for persuasively
    arguing for this.
    Fix MAC address enumeration on *BSD. Thanks to Brad Smith
    for the bug report.
    Support RFC-4242 information-refresh-time options in the
    reply to DHCPv6 information-request. The lease time of the
    smallest valid dhcp-range is sent. Thanks to Uwe Schindler
    for suggesting this.
    Make --listen-address higher priority than --except-interface
    in all circumstances. Thanks to Thomas Hood for the bugreport.
    Provide independent control over which interfaces get TFTP
    service. If enable-tftp is given a list of interfaces, then TFTP
    is provided on those. Without the list, the previous behaviour
    (provide TFTP to the same interfaces we provide DHCP to)
    is retained. Thanks to Lonnie Abelbeck for the suggestion.
    Add --dhcp-relay config option. Many thanks to vtsl.net
    for sponsoring this development.
    Fix crash with empty tag: in --dhcp-range. Thanks to
    Kaspar Schleiser for the bug report.
    Add "baseline" and "bloatcheck" makefile targets, for
    revealing size changes during development. Thanks to
    Vladislav Grishenko for the patch.
    Cope with DHCPv6 clients which send REQUESTs without
    address options - treat them as SOLICIT with rapid commit.
    Support identification of clients by MAC address in
    DHCPv6. When using a relay, the relay must support RFC
    6939 for this to work. It always works for directly
    connected clients. Thanks to Vladislav Grishenko
    for prompting this feature.
    Remove the rule for constructed DHCP ranges that the local
    address must be either the first or last address in the
    range. This was originally to avoid SLAAC addresses, but
    we now explicitly autoconfig and privacy addresses instead.
    Update Polish translation. Thanks to Jan Psota.
    Fix problem in DHCPv6 vendorclass/userclass matching
    code. Thanks to Tanguy Bouzeloc for the patch.
    Update Spanish transalation. Thanks to Vicente Soriano.
    Add --ra-param option. Thanks to Vladislav Grishenko for
    inspiration on this.
    Add --add-subnet configuration, to tell upstream DNS
    servers where the original client is. Thanks to DNSthingy
    for sponsoring this feature.
    Add --quiet-dhcp, --quiet-dhcp6 and --quiet-ra. Thanks to
    Kevin Darbyshire-Bryant for the initial patch.
    Allow A/AAAA records created by --interface-name to be the
    target of --cname. Thanks to Hadmut Danisch for the
    suggestion.
    Avoid treating a --dhcp-host which has an IPv6 address
    as eligable for use with DHCPv4 on the grounds that it has
    no address, and vice-versa. Thanks to Yury Konovalov for
    spotting the problem.
    Do a better job caching dangling CNAMEs. Thanks to Yves
    Dorfsman for spotting the problem.
    Add the ability to act as an authoritative DNS
    server. Dnsmasq can now answer queries from the wider 'net
    with local data, as long as the correct NS records are set
    up. Only local data is provided, to avoid creating an open
    DNS relay. Zone transfer is supported, to allow secondary
    servers to be configured.
    Add "constructed DHCP ranges" for DHCPv6. This is intended
    for IPv6 routers which get prefixes dynamically via prefix
    delegation. With suitable configuration, stateful DHCPv6
    and RA can happen automatically as prefixes are delegated
    and then deprecated, without having  to re-write the
    dnsmasq configuration file or restart the daemon. Thanks to
    Steven Barth for extensive testing and development work on
    this idea.
    Fix crash on startup on Solaris 11. Regression probably
    introduced in 2.61.  Thanks to Geoff Johnstone for the
    patch.
    Add code to make behaviour for TCP DNS requests that same
    as for UDP requests, when a request arrives for an allowed
    address, but via a banned interface. This change is only
    active on Linux, since the relevant API is missing (AFAIK)
    on other platforms. Many thanks to Tomas Hozza for
    spotting the problem, and doing invaluable discovery of
    the obscure and undocumented API required for the solution.
    Don't send the default DHCP option advertising dnsmasq as
    the local DNS server if dnsmasq is configured to not act
    as DNS server, or it's configured to a non-standard port.
    Add DNSMASQ_CIRCUIT_ID, DNSMASQ_SUBCRIBER_ID,
    DNSMASQ_REMOTE_ID variables to the environment of the
    lease-change script (and the corresponding Lua). These hold
    information inserted into the DHCP request by a DHCP relay
    agent. Thanks to Lakefield Communications for providing a
    bounty for this addition.
    Fixed crash, introduced in 2.64, whilst handling DHCPv6
    information-requests with some common configurations.
    Thanks to Robert M. Albrecht for the bug report and
    chasing the problem.
    Add --ipset option. Thanks to Jason A. Donenfeld for the
    patch.
    Don't erroneously reject some option names in --dhcp-match
    options. Thanks to Benedikt Hochstrasser for the bug report.
    Allow a trailing '*' wildcard in all interface-name
    configurations. Thanks to Christian Parpart for the patch.
    Handle the situation where libc headers define
    SO_REUSEPORT, but the kernel in use doesn't, to cope with
    the introduction of this option to Linux. Thanks to Rich
    Felker for the bug report.
    Update Polish translation. Thanks to Jan Psota.
    Fix crash if the configured DHCP lease limit is
    reached. Regression occurred in 2.61. Thanks to Tsachi for
    the bug report.
    Update the French translation. Thanks to Gildas le Nadan.</changelog>
<changelog author="cdenicolo@suse.com" date="1402574400">- license update: GPL-2.0 or GPL-3.0
  correct license is dual GPL-2.0 or GPL-3.0; please add COPYING-v3-file to
  RPM.</changelog>
<changelog author="vwallfahrer@suse.com" date="1407240000">- Removed README.SUSE file, it was to confusing and not necessary (bnc#889972).
  Information is already present in the upstream documentation.
- Split up vendor-files.tar.bz2 into single files
- Comply with systemd packaging guidlines</changelog>
<changelog author="vwallfahrer@suse.com" date="1407326400">- Removed Suse and all other OS/Distribution related subdirs from
  contrib, so only the rest gets packaged. The subdirs are not
  necessary anymore (bnc#889028).</changelog>
<changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).
- Fix caching of local records (bsc#923144).</changelog>
<changelog author="max@suse.com" date="1437566400">- Build with support for DNSSEC (fate#318323, bsc#908137).</changelog>
<changelog author="mchandras@suse.de" date="1454673600">- Drop PrivateDevices=yes which breaks logging (bnc#902511, bnc#904537)</changelog>
<changelog author="max@suse.com" date="1475668800">- Fix denial of service between local and remote dns entries
  (CVE-2015-8899, bsc#983273).</changelog>
<changelog author="max@suse.com" date="1488456000">- Update to version 2.76 (fate#321175, fate#322030, bsc#1035227):
  * Fix PXE booting for UEFI architectures (fate#322030).
  * Prevent a man-in-the-middle attack (bsc#972164, fate#321175).
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- This update brings a (small) potential incompatibility in the
  handling of "basename" in --pxe-service. Please read the
  CHANGELOG and the documentation if you are using this option.
- Obsoleted patches:
  * dnsmasq-CVE-2015-3294.patch
  * dnsmasq-CVE-2015-8899.patch
  * dnsmasq-local-cache.patch</changelog>
<changelog author="max@suse.com" date="1506513600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG</changelog>

</package>
<package pkgid="b1208b3967ad5dfda1f61616dfe1ece30854f3250f768d4e228cd0b78cbdee43" name="dnsmasq-utils" arch="x86_64">
    <version epoch="0" ver="2.78" rel="13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
<changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
<changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
<changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
<changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
<changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1395835200">- dnsmasq.service: Set PrivateDevices=yes so we run in a
  separate namespace with the bare minimum device nodes isolated
  from the host.</changelog>
<changelog author="dmueller@suse.com" date="1402488000">- update to 2.71:
    Subtle change to error handling to help DNSSEC validation
    when servers fail to provide NODATA answers for
    non-existent DS records.
    Tweak code which removes DNSSEC records from answers when
    not required. Fixes broken answers when additional section
    has real records in it. Thanks to Marco Davids for the bug
    report.
    Fix DNSSEC validation of ANY queries. Thanks to Marco Davids
    for spotting that too.
    Fix total DNS failure and 100% CPU use if cachesize set to zero,
    regression introduced in 2.69. Thanks to James Hunt and
    the Ubuntu crowd for assistance in fixing this.
    Fix crash, introduced in 2.69, on TCP request when dnsmasq
    compiled with DNSSEC support, but running without DNSSEC
    enabled. Thanks to Manish Sing for spotting that one.
    Fix regression which broke ipset functionality. Thanks to
    Wang Jian for the bug report.
    Implement dynamic interface discovery on *BSD. This allows
    the contructor: syntax to be used in dhcp-range for DHCPv6
    on the BSD platform. Thanks to Matthias Andree for
    valuable research on how to implement this.
    Fix infinite loop associated with some --bogus-nxdomain
    configs. Thanks fogobogo for the bug report.
    Fix missing RA RDNS option with configuration like
  - -dhcp-option=option6:23,[::] Thanks to Tsachi Kimeldorfer
    for spotting the problem.
    Add [fd00::] and [fe80::] as special addresses in DHCPv6
    options, analogous to [::]. [fd00::] is replaced with the
    actual ULA of the interface on the machine running
    dnsmasq, [fe80::] with the link-local address.
    Thanks to Tsachi Kimeldorfer for championing this.
    DNSSEC validation and caching. Dnsmasq needs to be
    compiled with this enabled, with
    make dnsmasq COPTS=-DHAVE_DNSSEC
    this add dependencies on the nettle crypto library and the
    gmp maths library. It's possible to have these linked
    statically with
    make dnsmasq COPTS='-DHAVE_DNSSEC -DHAVE_DNSSEC_STATIC'
    which bloats the dnsmasq binary, but saves the size of
    the shared libraries which are much bigger.
    To enable, DNSSEC, you will need a set of
    trust-anchors. Now that the TLDs are signed, this can be
    the keys for the root zone, and for convenience they are
    included in trust-anchors.conf in the dnsmasq
    distribution. You should of course check that these are
    legitimate and up-to-date. So, adding
    conf-file=/path/to/trust-anchors.conf
    dnssec
    to your config is all thats needed to get things
    working. The upstream nameservers have to be DNSSEC-capable
    too, of course. Many ISP nameservers aren't, but the
    Google public nameservers (8.8.8.8 and 8.8.4.4) are.
    When DNSSEC is configured, dnsmasq validates any queries
    for domains which are signed. Query results which are
    bogus are replaced with SERVFAIL replies, and results
    which are correctly signed have the AD bit set. In
    addition, and just as importantly, dnsmasq supplies
    correct DNSSEC information to clients which are doing
    their own validation, and caches DNSKEY, DS and RRSIG
    records, which significantly improve the performance of
    downstream validators. Setting --log-queries will show
    DNSSEC in action.
    If a domain is returned from an upstream nameserver without
    DNSSEC signature, dnsmasq by default trusts this. This
    means that for unsigned zone (still the majority) there
    is effectively no cost for having DNSSEC enabled. Of course
    this allows an attacker to replace a signed record with a
    false unsigned record. This is addressed by the
  - -dnssec-check-unsigned flag, which instructs dnsmasq
    to prove that an unsigned record is legitimate, by finding
    a secure proof that the zone containing the record is not
    signed. Doing this has costs (typically one or two extra
    upstream queries). It also has a nasty failure mode if
    dnsmasq's upstream nameservers are not DNSSEC capable.
    Without --dnssec-check-unsigned using such an upstream
    server will simply result in not queries being validated;
    with --dnssec-check-unsigned enabled and a
    DNSSEC-ignorant upstream server, _all_ queries will fail.
    Note that DNSSEC requires that the local time is valid and
    accurate, if not then DNSSEC validation will fail. NTP
    should be running. This presents a problem for routers
    without a battery-backed clock. To set the time needs NTP
    to do DNS lookups, but lookups will fail until NTP has run.
    To address this, there's a flag, --dnssec-no-timecheck
    which disables the time checks (only) in DNSSEC. When dnsmasq
    is started and the clock is not synced, this flag should
    be used. As soon as the clock is synced, SIGHUP dnsmasq.
    The SIGHUP clears the cache of partially-validated data and
    resets the no-timecheck flag, so that all DNSSEC checks
    henceforward will be complete.
    The development of DNSSEC in dnsmasq was started by
    Giovanni Bajo, to whom huge thanks are owed. It has been
    supported by Comcast, whose techfund grant has allowed for
    an invaluable period of full-time work to get it to
    a workable state.
    Add --rev-server. Thanks to Dave Taht for suggesting this.
    Add --servers-file. Allows dynamic update of upstream servers
    full access to configuration.
    Add --local-service. Accept DNS queries only from hosts
    whose address is on a local subnet, ie a subnet for which
    an interface exists on the server. This option
    only has effect if there are no --interface --except-interface,
  - -listen-address or --auth-server options. It is intended
    to be set as a default on installation, to allow
    unconfigured installations to be useful but also safe from
    being used for DNS amplification attacks.
    Fix crashes in cache_get_cname_target() when dangling CNAMEs
    encountered. Thanks to Andy and the rt-n56u project for
    find this and helping to chase it down.
    Fix wrong RCODE in authoritative DNS replies to PTR queries. The
    correct answer was included, but the RCODE was set to NXDOMAIN.
    Thanks to Craig McQueen for spotting this.
    Make statistics available as DNS queries in the .bind TLD as
    well as logging them.
    Use random addresses for DHCPv6 temporary address
    allocations, instead of algorithmically determined stable
    addresses.
    Fix bug which meant that the DHCPv6 DUID was not available
    in DHCP script runs during the lifetime of the dnsmasq
    process which created the DUID de-novo. Once the DUID was
    created and stored in the lease file and dnsmasq
    restarted, this bug disappeared.
    Fix bug introduced in 2.67 which could result in erroneous
    NXDOMAIN returns to CNAME queries.
    Fix build failures on MacOS X and openBSD.
    Allow subnet specifications in --auth-zone to be interface
    names as well as address literals. This makes it possible
    to configure authoritative DNS when local address ranges
    are dynamic and works much better than the previous
    work-around which exempted contructed DHCP ranges from the
    IP address filtering. As a consequence, that work-around
    is removed. Under certain circumstances, this change wil
    break existing configuration: if you're relying on the
    contructed-range exception, you need to change --auth-zone
    to specify the same interface as is used to construct your
    DHCP ranges, probably with a trailing "/6" like this:
  - -auth-zone=example.com,eth0/6 to limit the addresses to
    IPv6 addresses of eth0.
    Fix problems when advertising deleted IPv6 prefixes. If
    the prefix is deleted (rather than replaced), it doesn't
    get advertised with zero preferred time. Thanks to Tsachi
    for the bug report.
    Fix segfault with some locally configured CNAMEs. Thanks
    to Andrew Childs for spotting the problem.
    Fix memory leak on re-reading /etc/hosts and friends,
    introduced in 2.67.
    Check the arrival interface of incoming DNS and TFTP
    requests via IPv6, even in --bind-interfaces mode. This
    isn't possible for IPv4 and can generate scary warnings,
    but as it's always possible for IPv6 (the API always
    exists) then we should do it always.
    Tweak the rules on prefix-lengths in --dhcp-range for
    IPv6. The new rule is that the specified prefix length
    must be larger than or equal to the prefix length of the
    corresponding address on the local interface.
    Fix crash if upstream server returns SERVFAIL when
  - -conntrack in use. Thanks to Giacomo Tazzari for finding
    this and supplying the patch.
    Repair regression in 2.64. That release stopped sending
    lease-time information in the reply to DHCPINFORM
    requests, on the correct grounds that it was a standards
    violation. However, this broke the dnsmasq-specific
    dhcp_lease_time utility. Now, DHCPINFORM returns
    lease-time only if it's specifically requested
    (maintaining standards) and the dhcp_lease_time utility
    has been taught to ask for it (restoring functionality).
    Fix --dhcp-match, --dhcp-vendorclass and --dhcp-userclass
    to work with BOOTP and well as DHCP. Thanks to Peter
    Korsgaard for spotting the problem.
    Add --synth-domain. Thanks to Vishvananda Ishaya for
    suggesting this.
    Fix failure to compile ipset.c if old kernel headers are
    in use. Thanks to Eugene Rudoy for pointing this out.
    Handle IPv4 interface-address labels in Linux. These are
    often used to emulate the old IP-alias addresses. Before,
    using --interface=eth0 would service all the addresses of
    eth0, including ones configured as aliases, which appear
    in ifconfig as eth0:0. Now, only addresses with the label
    eth0 are active. This is not backwards compatible: if you
    want to continue to bind the aliases too, you need to add
    eg. --interface=eth0:0 to the config.
    Fix "failed to set SO_BINDTODEVICE on DHCP socket: Socket
    operation on non-socket" error on startup with
    configurations which have exactly one --interface option
    and do RA but _not_ DHCPv6. Thanks to Trever Adams for the
    bug report.
    Generalise --interface-name to cope with IPv6 addresses
    and multiple addresses per interface per address family.
    Fix option parsing for --dhcp-host, which was generating a
    spurious error when all seven possible items were
    included. Thanks to Zhiqiang Wang for the bug report.
    Remove restriction on prefix-length in --auth-zone. Thanks
    to Toke Hoiland-Jorgensen for suggesting this.
    Log when the maximum number of concurrent DNS queries is
    reached. Thanks to Marcelo Salhab Brogliato for the patch.
    If wildcards are used in --interface, don't assume that
    there will only ever be one available interface for DHCP
    just because there is one at start-up. More may appear, so
    we can't use SO_BINDTODEVICE. Thanks to Natrio for the bug
    report.
    Increase timeout/number of retries in TFTP to accomodate
    AudioCodes Voice Gateways doing streaming writes to flash.
    Thanks to Damian Kaczkowski for spotting the problem.
    Fix crash with empty DHCP string options when adding zero
    terminator. Thanks to Patrick McLean for the bug report.
    Allow hostnames to start with a number, as allowed in
    RFC-1123. Thanks to Kyle Mestery for the patch.
    Fixes to DHCP FQDN option handling: don't terminate FQDN
    if domain not known and allow a FQDN option with blank
    name to request that a FQDN option is returned in the
    reply. Thanks to Roy Marples for the patch.
    Make --clear-on-reload apply to setting upstream servers
    via DBus too.
    When the address which triggered the construction of an
    advertised IPv6 prefix disappears, continue to advertise
    the prefix for up to 2 hours, with the preferred lifetime
    set to zero. This satisfies RFC 6204 4.3 L-13 and makes
    things work better if a prefix disappears without being
    deprecated first. Thanks to Uwe Schindler for persuasively
    arguing for this.
    Fix MAC address enumeration on *BSD. Thanks to Brad Smith
    for the bug report.
    Support RFC-4242 information-refresh-time options in the
    reply to DHCPv6 information-request. The lease time of the
    smallest valid dhcp-range is sent. Thanks to Uwe Schindler
    for suggesting this.
    Make --listen-address higher priority than --except-interface
    in all circumstances. Thanks to Thomas Hood for the bugreport.
    Provide independent control over which interfaces get TFTP
    service. If enable-tftp is given a list of interfaces, then TFTP
    is provided on those. Without the list, the previous behaviour
    (provide TFTP to the same interfaces we provide DHCP to)
    is retained. Thanks to Lonnie Abelbeck for the suggestion.
    Add --dhcp-relay config option. Many thanks to vtsl.net
    for sponsoring this development.
    Fix crash with empty tag: in --dhcp-range. Thanks to
    Kaspar Schleiser for the bug report.
    Add "baseline" and "bloatcheck" makefile targets, for
    revealing size changes during development. Thanks to
    Vladislav Grishenko for the patch.
    Cope with DHCPv6 clients which send REQUESTs without
    address options - treat them as SOLICIT with rapid commit.
    Support identification of clients by MAC address in
    DHCPv6. When using a relay, the relay must support RFC
    6939 for this to work. It always works for directly
    connected clients. Thanks to Vladislav Grishenko
    for prompting this feature.
    Remove the rule for constructed DHCP ranges that the local
    address must be either the first or last address in the
    range. This was originally to avoid SLAAC addresses, but
    we now explicitly autoconfig and privacy addresses instead.
    Update Polish translation. Thanks to Jan Psota.
    Fix problem in DHCPv6 vendorclass/userclass matching
    code. Thanks to Tanguy Bouzeloc for the patch.
    Update Spanish transalation. Thanks to Vicente Soriano.
    Add --ra-param option. Thanks to Vladislav Grishenko for
    inspiration on this.
    Add --add-subnet configuration, to tell upstream DNS
    servers where the original client is. Thanks to DNSthingy
    for sponsoring this feature.
    Add --quiet-dhcp, --quiet-dhcp6 and --quiet-ra. Thanks to
    Kevin Darbyshire-Bryant for the initial patch.
    Allow A/AAAA records created by --interface-name to be the
    target of --cname. Thanks to Hadmut Danisch for the
    suggestion.
    Avoid treating a --dhcp-host which has an IPv6 address
    as eligable for use with DHCPv4 on the grounds that it has
    no address, and vice-versa. Thanks to Yury Konovalov for
    spotting the problem.
    Do a better job caching dangling CNAMEs. Thanks to Yves
    Dorfsman for spotting the problem.
    Add the ability to act as an authoritative DNS
    server. Dnsmasq can now answer queries from the wider 'net
    with local data, as long as the correct NS records are set
    up. Only local data is provided, to avoid creating an open
    DNS relay. Zone transfer is supported, to allow secondary
    servers to be configured.
    Add "constructed DHCP ranges" for DHCPv6. This is intended
    for IPv6 routers which get prefixes dynamically via prefix
    delegation. With suitable configuration, stateful DHCPv6
    and RA can happen automatically as prefixes are delegated
    and then deprecated, without having  to re-write the
    dnsmasq configuration file or restart the daemon. Thanks to
    Steven Barth for extensive testing and development work on
    this idea.
    Fix crash on startup on Solaris 11. Regression probably
    introduced in 2.61.  Thanks to Geoff Johnstone for the
    patch.
    Add code to make behaviour for TCP DNS requests that same
    as for UDP requests, when a request arrives for an allowed
    address, but via a banned interface. This change is only
    active on Linux, since the relevant API is missing (AFAIK)
    on other platforms. Many thanks to Tomas Hozza for
    spotting the problem, and doing invaluable discovery of
    the obscure and undocumented API required for the solution.
    Don't send the default DHCP option advertising dnsmasq as
    the local DNS server if dnsmasq is configured to not act
    as DNS server, or it's configured to a non-standard port.
    Add DNSMASQ_CIRCUIT_ID, DNSMASQ_SUBCRIBER_ID,
    DNSMASQ_REMOTE_ID variables to the environment of the
    lease-change script (and the corresponding Lua). These hold
    information inserted into the DHCP request by a DHCP relay
    agent. Thanks to Lakefield Communications for providing a
    bounty for this addition.
    Fixed crash, introduced in 2.64, whilst handling DHCPv6
    information-requests with some common configurations.
    Thanks to Robert M. Albrecht for the bug report and
    chasing the problem.
    Add --ipset option. Thanks to Jason A. Donenfeld for the
    patch.
    Don't erroneously reject some option names in --dhcp-match
    options. Thanks to Benedikt Hochstrasser for the bug report.
    Allow a trailing '*' wildcard in all interface-name
    configurations. Thanks to Christian Parpart for the patch.
    Handle the situation where libc headers define
    SO_REUSEPORT, but the kernel in use doesn't, to cope with
    the introduction of this option to Linux. Thanks to Rich
    Felker for the bug report.
    Update Polish translation. Thanks to Jan Psota.
    Fix crash if the configured DHCP lease limit is
    reached. Regression occurred in 2.61. Thanks to Tsachi for
    the bug report.
    Update the French translation. Thanks to Gildas le Nadan.</changelog>
<changelog author="cdenicolo@suse.com" date="1402574400">- license update: GPL-2.0 or GPL-3.0
  correct license is dual GPL-2.0 or GPL-3.0; please add COPYING-v3-file to
  RPM.</changelog>
<changelog author="vwallfahrer@suse.com" date="1407240000">- Removed README.SUSE file, it was to confusing and not necessary (bnc#889972).
  Information is already present in the upstream documentation.
- Split up vendor-files.tar.bz2 into single files
- Comply with systemd packaging guidlines</changelog>
<changelog author="vwallfahrer@suse.com" date="1407326400">- Removed Suse and all other OS/Distribution related subdirs from
  contrib, so only the rest gets packaged. The subdirs are not
  necessary anymore (bnc#889028).</changelog>
<changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).
- Fix caching of local records (bsc#923144).</changelog>
<changelog author="max@suse.com" date="1437566400">- Build with support for DNSSEC (fate#318323, bsc#908137).</changelog>
<changelog author="mchandras@suse.de" date="1454673600">- Drop PrivateDevices=yes which breaks logging (bnc#902511, bnc#904537)</changelog>
<changelog author="max@suse.com" date="1475668800">- Fix denial of service between local and remote dns entries
  (CVE-2015-8899, bsc#983273).</changelog>
<changelog author="max@suse.com" date="1488456000">- Update to version 2.76 (fate#321175, fate#322030, bsc#1035227):
  * Fix PXE booting for UEFI architectures (fate#322030).
  * Prevent a man-in-the-middle attack (bsc#972164, fate#321175).
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- This update brings a (small) potential incompatibility in the
  handling of "basename" in --pxe-service. Please read the
  CHANGELOG and the documentation if you are using this option.
- Obsoleted patches:
  * dnsmasq-CVE-2015-3294.patch
  * dnsmasq-CVE-2015-8899.patch
  * dnsmasq-local-cache.patch</changelog>
<changelog author="max@suse.com" date="1506513600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG</changelog>

</package>
<package pkgid="144d2dc544b8ef315b0724545b9e2c7978e86237989c680916d67811fbaaec71" name="docker" arch="src">
    <version epoch="0" ver="17.04.0_ce" rel="33.11"/>

<changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
<changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
<changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
<changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
<changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
<changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
<changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
<changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>

</package>
<package pkgid="6ec95b5f0615a9654dc73deaaca2e5a549f1ad5f41299e7d9337e8a6632e8865" name="docker" arch="x86_64">
    <version epoch="0" ver="17.04.0_ce" rel="33.11"/>

<changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
<changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
<changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
<changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
<changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
<changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
<changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
<changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>

</package>
<package pkgid="fe58d4b6ddb437a96975e2dced1ce6ff97be8c74592a1b62cad9cccfe38f45c1" name="docker-bash-completion" arch="noarch">
    <version epoch="0" ver="17.04.0_ce" rel="33.11"/>

<changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
<changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
<changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
<changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
<changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
<changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
<changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
<changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>

</package>
<package pkgid="bd309f2760ca38a935544c58aa9c28aa7429cb5165d615b0e28623e19d4e8d79" name="docker-distribution" arch="src">
    <version epoch="0" ver="2.6.1" rel="8.1"/>

<changelog author="fcastelli@suse.com" date="1428580800">- Created initial package</changelog>
<changelog author="fcastelli@suse.com" date="1429185600">- Update to 2.0.0-rc4:  Several fixes have been made to contextual logging
  output, including ensuring accurate http response status, authorized user
  name and correct output of the version.</changelog>
<changelog author="fcastelli@suse.com" date="1429272000">- Update to 2.0.0: first stable release of distribution</changelog>
<changelog author="fcastelli@suse.com" date="1431604800">- Update to 2.0.1:
  * Enable blob streaming upload
  * S3 consistency checking and better resource utilization
  * Eliminate resource leakage in the notification system
  * Request error and storage driver logging
  * Documentation corrections and additions</changelog>
<changelog author="fcastelli@suse.com" date="1432900800">- Create /etc/registry to hold all the configuration files of registry</changelog>
<changelog author="fcastelli@suse.com" date="1432900801">- Added README-registry.SUSE</changelog>
<changelog author="jmassaguerpla@suse.com" date="1441627200">- Update to 2.1.1 (bsc#948097)
  This release provides a bug fix where the filesystem layout of manifests was
  not backwards compatible with v2.0.x registries.
- Update to 2.1.0
  - Support for listing Registry repositories
  - Manifest and layer soft deletion
  - Pull through caching (experimental)
  - Storage Drivers
  more details on: https://github.com/docker/distribution/releases
  add fix_version.patch: fix version to 2.1.1 instead of git version</changelog>
<changelog author="jmassaguerpla@suse.com" date="1443009600">- set exclusive arch to x86_64 since this is the only arch we build for</changelog>
<changelog author="msabate@suse.com" date="1454673600">- Update to 2.3
  This Docker Registry release is the first to support the Image Manifest
  Version 2, Schema 2 manifest format.</changelog>
<changelog author="msabate@suse.com" date="1457611200">- Ugraded to 2.3.1. The changelog is as follows:
- Allow uppercase characters in hostnames (https://github.com/docker/distribution/commit/34c3acf8a8d800524ac06444290b26ed96d4dac0)
- Fix schema1 manifest etag and docker content digest header (https://github.com/docker/distribution/commit/d7eb5d118a6a14a6f320062296b1808506c35241)
- Add option to disable signatures (https://github.com/docker/distribution/commit/d1c173078fe47f45c7f7b96098410d4f13dd68ab)
- To avoid any network use unless necessary, delay establishing authorization (https://github.com/docker/distribution/commit/740ed699f40e1522faacb2a706e44fa1560af8ea)
- Extend authChallenger interface to remove type cast.  (https://github.com/docker/distribution/commit/16445b67679e91eab408a40a34625aa1f4dabfd1)
- Enable proxying registries to downgrade fetched manifests to Schema 1.  (https://github.com/docker/distribution/commit/36936218c2e6a4527fc99a5c04126bb1f4c7d55c)</changelog>
<changelog author="msabate@suse.com" date="1457611201">- Removed old tarball</changelog>
<changelog author="msabate@suse.com" date="1457611202">- Updated changelog
  bsc#970507
  The fix_version.patch file has been removed because it has been fixed upstream</changelog>
<changelog author="msabate@suse.com" date="1460635200">- Upgraded to 2.4.0. Changelog:
  * New S3 storage driver
  The default s3 storage driver is now implemented on top of the official Amazon
  S3 SDK, boasting major performance and stability goodness. The previous storage
  is still available, but deprecated.
  * Garbage Collector
  A garbage collector tool has been added to the registry. For more details see
  the garbage collector documentation.
  * Tagged Manifest Events
  Manifest push and pull events will now include the tag which was used in the
  operation (if applicable).
  * Relative URLs
  The registry can now be configured to return relative URLs in Location headers.
  * V1 Signature disabled
  With the ongoing adoption of the schema 2 manifest format and deprecation of
  signatures, this option will improve pull performance by generating and
  returning a single libtrust signature.
  * Gotchas
  The RADOS storage driver has been removed. The registry can still be used with
  Ceph as the storage backend using the swift driver in conjunction with the
  Swift API gateway.
  The command line format has changed to support subcommands. To run a registry
  as before an additional subcommand - serve - is required.
  The legacy S3 storage driver, based on adroll/goamz is now deprecated and will
  be removed in a future release.</changelog>
<changelog author="msabate@suse.com" date="1463572800">- Updated to v2.4.1. It contains the following fixes:
  93d7624 Preserve author information in schema1 manifests
  ba672e8 When a blob upload is committed prevent writing out hashstate in the subsequent close.
  96230de Add a test with a missing _manifests directory
  c0d3813 Move garbage collect code into storage package
  011b7e4 Ensure GC continues marking if _manifests is nonexistent
  0a1fcf9 Fix wording for dry-run flag in useage message for garbage collector.
  ed02e88 Sorting completed parts by part number for a better accordance with the S3 spec
  fd5a404 Add blobWrtiter.Close() call into blobWriter.Commit()
  3f538ca add cn-north-1 to valid check
  3330cc5 wait for DLO segments to show up when Close()ing the writer
  775d096 Use correct media type for config blob in schema2 manifest
  64a9727 Only check validity of S3 region if not using custom endpoint
  dafb59f Ensure we log io.Copy errors and bytes copied/total in uploads
  431e46a GCS: FileWriter.Size: return offset + buffer size for Writers that are not closed</changelog>
<changelog author="msabate@suse.com" date="1470052800">- Updated to v2.5.0
  [#]## Storage
- Ensure uploads directory is cleaned after upload is commited
- Add ability to cap concurrent operations in filesystem driver
- S3: Add 'us-gov-west-1' to the valid region list
- Swift: Handle ceph not returning Last-Modified header for HEAD requests
- Add redirect middleware
  [#]### Registry
- Add support for blobAccessController middleware
- Add support for layers from foreign sources
- Remove signature store
- Add support for Let's Encrypt
- Correct yaml key names in configuration
  [#]### Client
- Add option to get content digest from manifest get
  [#]### Spec
- Update the auth spec scope grammar to reflect the fact that hostnames are optionally supported
- Clarify API documentation around catalog fetch behavior
  [#]## API
- Support returning HTTP 429 (Too Many Requests)
  [#]## Documentation
- Update auth documentation examples to show "expires in" as int
  [#]## Docker Image
- Use Alpine Linux as base image</changelog>
<changelog author="msabate@suse.com" date="1484740800">- Updated to v2.6.0
  [#]### Storage
- S3: fixed bug in delete due to read-after-write inconsistency
- S3: allow EC2 IAM roles to be used when authorizing region endpoints
- S3: add Object ACL Support
- S3: fix delete method's notion of subpaths
- S3: use multipart upload API in `Move` method for performance
- S3: add v2 signature signing for legacy S3 clones
- Swift: add simple heuristic to detect incomplete DLOs during read ops
- Swift: support different user and tenant domains
- Swift: bulk deletes in chunks
- Aliyun OSS: fix delete method's notion of subpaths
- Aliyun OSS: optimize data copy after upload finishes
- Azure: close leaking response body
- Fix storage drivers dropping non-EOF errors when listing repositories
- Compare path properly when listing repositories in catalog
- Add a foreign layer URL host whitelist
- Improve catalog enumerate runtime
  [#]### Registry
- Export `storage.CreateOptions` in top-level package
- Enable notifications to endpoints that use self-signed certificates
- Properly validate multi-URL foreign layers
- Add control over validation of URLs in pushed manifests
- Proxy mode: fix socket leak when pull is cancelled
- Tag service: properly handle error responses on HEAD request
- Support for custom authentication URL in proxying registry
- Add configuration option to disable access logging
- Add notification filtering by target media type
- Manifest: `References()` returns all children
- Honor `X-Forwarded-Port` and Forwarded headers
- Reference: Preserve tag and digest in With* functions
- Add policy configuration for enforcing repository classes
  [#]### Client
- Changes the client Tags `All()` method to follow links
- Allow registry clients to connect via HTTP2
- Better handling of OAuth errors in client
  [#]### Spec
- Manifest: clarify relationship between urls and foreign layers
- Authorization: add support for repository classes
  [#]### Manifest
- Override media type returned from `Stat()` for existing manifests
- Add plugin mediatype to distribution manifest
  [#]### Docs
- Document `TOOMANYREQUESTS` error code
- Document required Let's Encrypt port
- Improve documentation around implementation of OAuth2
- Improve documentation for configuration
  [#]### Auth
- Add support for registry type in scope
- Add support for using v2 ping challenges for v1
- Add leeway to JWT `nbf` and `exp` checking
- htpasswd: dynamically parse htpasswd file
- Fix missing auth headers with PATCH HTTP request when pushing to default port
  [#]### Dockerfile
- Update to go1.7
- Reorder Dockerfile steps for better layer caching
  [#]### Notes
  Documentation has moved to the documentation repository at
  `github.com/docker/docker.github.io/tree/master/registry`
  The registry is go 1.7 compliant, and passes newer, more restrictive `lint` and `vet` ing.</changelog>
<changelog author="bg@suse.com" date="1485518400">- enable build for s390x</changelog>
<changelog author="msabate@suse.com" date="1491480000">- Updated to 2.6.1;
  * Fix Forwarded header handling, revert use of X-Forwarded-Port
  * Use driver Stat for registry health check</changelog>

</package>
<package pkgid="72ba753a6c6c6450bfefe5bfb0749bea1ac304f2db748af1cf3f95d70536837a" name="docker-distribution-registry" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="8.1"/>

<changelog author="fcastelli@suse.com" date="1428580800">- Created initial package</changelog>
<changelog author="fcastelli@suse.com" date="1429185600">- Update to 2.0.0-rc4:  Several fixes have been made to contextual logging
  output, including ensuring accurate http response status, authorized user
  name and correct output of the version.</changelog>
<changelog author="fcastelli@suse.com" date="1429272000">- Update to 2.0.0: first stable release of distribution</changelog>
<changelog author="fcastelli@suse.com" date="1431604800">- Update to 2.0.1:
  * Enable blob streaming upload
  * S3 consistency checking and better resource utilization
  * Eliminate resource leakage in the notification system
  * Request error and storage driver logging
  * Documentation corrections and additions</changelog>
<changelog author="fcastelli@suse.com" date="1432900800">- Create /etc/registry to hold all the configuration files of registry</changelog>
<changelog author="fcastelli@suse.com" date="1432900801">- Added README-registry.SUSE</changelog>
<changelog author="jmassaguerpla@suse.com" date="1441627200">- Update to 2.1.1 (bsc#948097)
  This release provides a bug fix where the filesystem layout of manifests was
  not backwards compatible with v2.0.x registries.
- Update to 2.1.0
  - Support for listing Registry repositories
  - Manifest and layer soft deletion
  - Pull through caching (experimental)
  - Storage Drivers
  more details on: https://github.com/docker/distribution/releases
  add fix_version.patch: fix version to 2.1.1 instead of git version</changelog>
<changelog author="jmassaguerpla@suse.com" date="1443009600">- set exclusive arch to x86_64 since this is the only arch we build for</changelog>
<changelog author="msabate@suse.com" date="1454673600">- Update to 2.3
  This Docker Registry release is the first to support the Image Manifest
  Version 2, Schema 2 manifest format.</changelog>
<changelog author="msabate@suse.com" date="1457611200">- Ugraded to 2.3.1. The changelog is as follows:
- Allow uppercase characters in hostnames (https://github.com/docker/distribution/commit/34c3acf8a8d800524ac06444290b26ed96d4dac0)
- Fix schema1 manifest etag and docker content digest header (https://github.com/docker/distribution/commit/d7eb5d118a6a14a6f320062296b1808506c35241)
- Add option to disable signatures (https://github.com/docker/distribution/commit/d1c173078fe47f45c7f7b96098410d4f13dd68ab)
- To avoid any network use unless necessary, delay establishing authorization (https://github.com/docker/distribution/commit/740ed699f40e1522faacb2a706e44fa1560af8ea)
- Extend authChallenger interface to remove type cast.  (https://github.com/docker/distribution/commit/16445b67679e91eab408a40a34625aa1f4dabfd1)
- Enable proxying registries to downgrade fetched manifests to Schema 1.  (https://github.com/docker/distribution/commit/36936218c2e6a4527fc99a5c04126bb1f4c7d55c)</changelog>
<changelog author="msabate@suse.com" date="1457611201">- Removed old tarball</changelog>
<changelog author="msabate@suse.com" date="1457611202">- Updated changelog
  bsc#970507
  The fix_version.patch file has been removed because it has been fixed upstream</changelog>
<changelog author="msabate@suse.com" date="1460635200">- Upgraded to 2.4.0. Changelog:
  * New S3 storage driver
  The default s3 storage driver is now implemented on top of the official Amazon
  S3 SDK, boasting major performance and stability goodness. The previous storage
  is still available, but deprecated.
  * Garbage Collector
  A garbage collector tool has been added to the registry. For more details see
  the garbage collector documentation.
  * Tagged Manifest Events
  Manifest push and pull events will now include the tag which was used in the
  operation (if applicable).
  * Relative URLs
  The registry can now be configured to return relative URLs in Location headers.
  * V1 Signature disabled
  With the ongoing adoption of the schema 2 manifest format and deprecation of
  signatures, this option will improve pull performance by generating and
  returning a single libtrust signature.
  * Gotchas
  The RADOS storage driver has been removed. The registry can still be used with
  Ceph as the storage backend using the swift driver in conjunction with the
  Swift API gateway.
  The command line format has changed to support subcommands. To run a registry
  as before an additional subcommand - serve - is required.
  The legacy S3 storage driver, based on adroll/goamz is now deprecated and will
  be removed in a future release.</changelog>
<changelog author="msabate@suse.com" date="1463572800">- Updated to v2.4.1. It contains the following fixes:
  93d7624 Preserve author information in schema1 manifests
  ba672e8 When a blob upload is committed prevent writing out hashstate in the subsequent close.
  96230de Add a test with a missing _manifests directory
  c0d3813 Move garbage collect code into storage package
  011b7e4 Ensure GC continues marking if _manifests is nonexistent
  0a1fcf9 Fix wording for dry-run flag in useage message for garbage collector.
  ed02e88 Sorting completed parts by part number for a better accordance with the S3 spec
  fd5a404 Add blobWrtiter.Close() call into blobWriter.Commit()
  3f538ca add cn-north-1 to valid check
  3330cc5 wait for DLO segments to show up when Close()ing the writer
  775d096 Use correct media type for config blob in schema2 manifest
  64a9727 Only check validity of S3 region if not using custom endpoint
  dafb59f Ensure we log io.Copy errors and bytes copied/total in uploads
  431e46a GCS: FileWriter.Size: return offset + buffer size for Writers that are not closed</changelog>
<changelog author="msabate@suse.com" date="1470052800">- Updated to v2.5.0
  [#]## Storage
- Ensure uploads directory is cleaned after upload is commited
- Add ability to cap concurrent operations in filesystem driver
- S3: Add 'us-gov-west-1' to the valid region list
- Swift: Handle ceph not returning Last-Modified header for HEAD requests
- Add redirect middleware
  [#]### Registry
- Add support for blobAccessController middleware
- Add support for layers from foreign sources
- Remove signature store
- Add support for Let's Encrypt
- Correct yaml key names in configuration
  [#]### Client
- Add option to get content digest from manifest get
  [#]### Spec
- Update the auth spec scope grammar to reflect the fact that hostnames are optionally supported
- Clarify API documentation around catalog fetch behavior
  [#]## API
- Support returning HTTP 429 (Too Many Requests)
  [#]## Documentation
- Update auth documentation examples to show "expires in" as int
  [#]## Docker Image
- Use Alpine Linux as base image</changelog>
<changelog author="msabate@suse.com" date="1484740800">- Updated to v2.6.0
  [#]### Storage
- S3: fixed bug in delete due to read-after-write inconsistency
- S3: allow EC2 IAM roles to be used when authorizing region endpoints
- S3: add Object ACL Support
- S3: fix delete method's notion of subpaths
- S3: use multipart upload API in `Move` method for performance
- S3: add v2 signature signing for legacy S3 clones
- Swift: add simple heuristic to detect incomplete DLOs during read ops
- Swift: support different user and tenant domains
- Swift: bulk deletes in chunks
- Aliyun OSS: fix delete method's notion of subpaths
- Aliyun OSS: optimize data copy after upload finishes
- Azure: close leaking response body
- Fix storage drivers dropping non-EOF errors when listing repositories
- Compare path properly when listing repositories in catalog
- Add a foreign layer URL host whitelist
- Improve catalog enumerate runtime
  [#]### Registry
- Export `storage.CreateOptions` in top-level package
- Enable notifications to endpoints that use self-signed certificates
- Properly validate multi-URL foreign layers
- Add control over validation of URLs in pushed manifests
- Proxy mode: fix socket leak when pull is cancelled
- Tag service: properly handle error responses on HEAD request
- Support for custom authentication URL in proxying registry
- Add configuration option to disable access logging
- Add notification filtering by target media type
- Manifest: `References()` returns all children
- Honor `X-Forwarded-Port` and Forwarded headers
- Reference: Preserve tag and digest in With* functions
- Add policy configuration for enforcing repository classes
  [#]### Client
- Changes the client Tags `All()` method to follow links
- Allow registry clients to connect via HTTP2
- Better handling of OAuth errors in client
  [#]### Spec
- Manifest: clarify relationship between urls and foreign layers
- Authorization: add support for repository classes
  [#]### Manifest
- Override media type returned from `Stat()` for existing manifests
- Add plugin mediatype to distribution manifest
  [#]### Docs
- Document `TOOMANYREQUESTS` error code
- Document required Let's Encrypt port
- Improve documentation around implementation of OAuth2
- Improve documentation for configuration
  [#]### Auth
- Add support for registry type in scope
- Add support for using v2 ping challenges for v1
- Add leeway to JWT `nbf` and `exp` checking
- htpasswd: dynamically parse htpasswd file
- Fix missing auth headers with PATCH HTTP request when pushing to default port
  [#]### Dockerfile
- Update to go1.7
- Reorder Dockerfile steps for better layer caching
  [#]### Notes
  Documentation has moved to the documentation repository at
  `github.com/docker/docker.github.io/tree/master/registry`
  The registry is go 1.7 compliant, and passes newer, more restrictive `lint` and `vet` ing.</changelog>
<changelog author="bg@suse.com" date="1485518400">- enable build for s390x</changelog>
<changelog author="msabate@suse.com" date="1491480000">- Updated to 2.6.1;
  * Fix Forwarded header handling, revert use of X-Forwarded-Port
  * Use driver Stat for registry health check</changelog>

</package>
<package pkgid="b744e0959632002469ac1fd5340e07a4f07929d4a277ac71e8a7fa27c85f1c9c" name="docker-libnetwork" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20170119.7b2b1fe" rel="2.1"/>

<changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
<changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
<changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>

</package>
<package pkgid="c8801c6520d441f6e5adbe5f68519e927cd284558ae65d8d547c720716a5aa1d" name="docker-test" arch="x86_64">
    <version epoch="0" ver="17.04.0_ce" rel="33.11"/>

<changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
<changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
<changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
<changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
<changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
<changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
<changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
<changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>

</package>
<package pkgid="1d38010148dc59a6f2570d2af639add7b23a085888d3b4ce7b6116b7560167c0" name="docker-zsh-completion" arch="noarch">
    <version epoch="0" ver="17.04.0_ce" rel="33.11"/>

<changelog author="jmassaguerpla@suse.com" date="1488801600">- Fix post section by adding shadow as a package requirement
  Otherwise the groupadd instruction fails</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801601">- Fix bsc#1026827: systemd TasksMax default throttles docker</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488801602">- Remove old plugins.json to prevent docker-1.13 to fail to start</changelog>
<changelog author="asarai@suse.com" date="1488974400">- Clean up docker-mount-secrets.patch to use the new swarm secrets internals of
  Docker 1.13.0, which removes the need to implement any secret handling
  ourselves. This resulted in a split up of the patch.
  - docker-mount-secrets.patch
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1489752000">- Add a backport of fix to AppArmor lazy loading docker-exec case.
  https://github.com/docker/docker/pull/31773
  + pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490011200">- Disable libseccomp for leap 42.1, sle12sp1 and sle12, because
  docker needs a higher version. Otherwise, we get the error
    "conditional filtering requires libseccomp version &gt;= 2.2.1
  (bsc#1028639 and bsc#1028638)</changelog>
<changelog author="mmeister@suse.com" date="1491912000">- Fix (bsc#1032644)
  Change lvm2 from Requires to Recommends
  Docker usually uses a default storage driver, when it's not configured
  explicitly. This default driver then depends on the underlying
  system and gets chosen during installation.</changelog>
<changelog author="asarai@suse.com" date="1491912001">- Update SUSE secrets patch to handle boo#1030702.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="asarai@suse.com" date="1491998400">- Enable Delegate=yes, since systemd will safely ignore lvalues it doesn't
  understand.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998401">- remove the go_arches macro because we are using go1.7 which
  is available in all archs
- remove gcc specific patches
  * gcc-go-patches.patch
  * netlink_netns_powerpc.patch
  * boltdb_bolt_add_brokenUnaligned.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998402">- Make sure this is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- Update to version 17.04.0-ce (fix bsc#1034053 )
- Patches removed because have been merged into this version:
  * pr31549-cmd-docker-fix-TestDaemonCommand.patch
  * pr31773-daemon-also-ensureDefaultApparmorProfile-in-exec-pat.patch
- Patches rebased:
  * integration-cli-fix-TestInfoEnsureSucceeds.patch
- Build man pages for all archs (bsc#953182)
- Containers cannot resolve DNS if docker host uses 127.0.0.1 as resolver (bsc#1034063)
  see /usr/share/doc/packages/docker/CHANGELOG.md</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492516800">- Fix secrets-0002-SUSE-implement-SUSE-container-secrets.patch:
  substitute docker/distribution/digest by opencontainers/digest</changelog>
<changelog author="fcastelli@suse.com" date="1493640000">- Update golang build requirements to use golang(API) symbol: this is
  needed to solve a conflict between multiple versions of Go being available</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- Fix golang requirements in the subpackages</changelog>
<changelog author="asarai@suse.com" date="1494417600">- Add a partial fix for boo#1038493.
- Fixed bsc#1037436 where execids were being leaked due to bad error handling.
  This is a backport of https://github.com/docker/cli/pull/52.
  + bsc1037436-0001-client-check-tty-before-creating-exec-job.patch</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Fix bsc#1038476 warning about non-executable docker
  * Simply verify we have binary prior using it, might happen if
    someone had docker installed and then did remove it and install
    from scratch again</changelog>
<changelog author="asarai@suse.com" date="1495022400">- Fix bsc#1037607 which was causing read-only issues on Kubic, this is a
  backport of https://github.com/moby/moby/pull/33250.
  + bsc1037607-0001-apparmor-make-pkg-aaparser-work-on-read-only-root.patch</changelog>
<changelog author="asarai@suse.com" date="1496059200">- Update SUSE secrets patch to correctly handle restarting of containers.
  + secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1496145600">- Fix bsc#1032287: missing docker systemd configuration</changelog>

</package>
<package pkgid="d5341990a5260d768221158f8634d979d5f90d76ff1618cc20350666a1ff772a" name="dracut" arch="src">
    <version epoch="0" ver="044.1" rel="23.2"/>

<changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>

</package>
<package pkgid="3b435ca91a5f8031a0f2141ada3d38a568a9b246cc76029ef9ea8d8c6655e057" name="dracut" arch="src">
    <version epoch="0" ver="044.1" rel="26.1"/>

<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
<changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>

</package>
<package pkgid="a6748e3ce64d36517a86bb2ba7427969d6063ceb345e75ba037d78f92df59ee3" name="dracut" arch="src">
    <version epoch="0" ver="044.1" rel="29.1"/>

<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
<changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
<changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
<changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>

</package>
<package pkgid="e3d230b5e79de0a603d1f5e4916760c965c908cf0d890fc1ebeb944ef1fb6c33" name="dracut" arch="x86_64">
    <version epoch="0" ver="044.1" rel="23.2"/>

<changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>

</package>
<package pkgid="8faba23eecf737a9d342683b7d8779dd144e59b3f65df773ce3b7e44427ce07d" name="dracut" arch="x86_64">
    <version epoch="0" ver="044.1" rel="26.1"/>

<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
<changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>

</package>
<package pkgid="74947c1beb23a513e28ebf8295d0903f9f7a6a8c9c8210e4e211a4d4230d6527" name="dracut" arch="x86_64">
    <version epoch="0" ver="044.1" rel="29.1"/>

<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
<changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
<changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
<changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>

</package>
<package pkgid="1adfb7dd28c51b5f3c1b7cbb0c22754bc001dfce635d0ccd13cadaa5f43d1c88" name="dracut-fips" arch="x86_64">
    <version epoch="0" ver="044.1" rel="23.2"/>

<changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>

</package>
<package pkgid="94fc62c0d5b824c8e67ccdd6df3d1588ccd8f2a98609b258c3dd3fe00b8b44b6" name="dracut-fips" arch="x86_64">
    <version epoch="0" ver="044.1" rel="26.1"/>

<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
<changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>

</package>
<package pkgid="f7713ba549e3d129005b11ccfd5601bda2811d118c32e1759dd11a4286f31e4d" name="dracut-fips" arch="x86_64">
    <version epoch="0" ver="044.1" rel="29.1"/>

<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
<changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
<changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
<changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>

</package>
<package pkgid="219bf57a7acebcdb5004429f1cfe6f4d188424bb11451b60d9e938143ce65bd0" name="dracut-kiwi-live" arch="x86_64">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="0204485e4152d3e8e4e8d20956eea9df528cadc7ac936dbd5b480b4fa9b1b04f" name="dracut-kiwi-overlay" arch="x86_64">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="0298e691b206eac4e1d083b5462d89461c5bd60de85acd34e63522520cfceb69" name="dracut-tools" arch="x86_64">
    <version epoch="0" ver="044.1" rel="23.2"/>

<changelog author="daniel.molkentin@suse.com" date="1489752000">- 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
  * add 0510-01fips-Some-modules-use-separators-other-than.patch
  * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491220800">- Drop binutils dependency in favor of elfutils
  * add 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491480000">- Fix typo in installkernel script (bsc#1032576)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1491566400">- Fix mdraid regression (bsc#1028542)
  * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
- man: make the -k option clear using mkinitrd (bsc#1012656)
  * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>

</package>
<package pkgid="458413ced601d74b7a4c5265383a6f37ae094b948f74fa300cf2628b954bb654" name="dracut-tools" arch="x86_64">
    <version epoch="0" ver="044.1" rel="26.1"/>

<changelog author="daniel.molkentin@suse.com" date="1492689600">- Ensure hisi_sas_v2_hw gets included (bsc#1034597)
  * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch</changelog>
<changelog author="tchvatal@suse.com" date="1492776000">- Conflict with older btrfsprogs &lt; 3.18  bsc#1035518
  * otherwise when zypper duping we are not able to generate intrd
    until the btrfsprogs are updated, this way we force the app
    to be update beforehand (13.1 and SLE11 migrations)</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493121600">- Fix subnet calculation in mkinitrd (bsc#1035743)
  * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208000">- Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208001">- More correct patch description for 0512, no functional changes
  * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208002">- 95fcoe: fix rules generation (osc#1036323)
  * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208003">- 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
  * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1493208004">- 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
  * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
<changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>

</package>
<package pkgid="5c0b5265a3f556ad460590e24e970cc3b2a59cd402a46b59e0533ded56484d44" name="dracut-tools" arch="x86_64">
    <version epoch="0" ver="044.1" rel="29.1"/>

<changelog author="daniel.molkentin@suse.com" date="1494244800">- Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
  * adds 0520-Ignore-module-resolution-errors.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1494504000">- Revert: "Require version &gt;= 3.18 btrfsprogs, rather than conflicting with
  an older one". Dracut should never depend on optional components</changelog>
<changelog author="daniel.molkentin@suse.com" date="1496836800">- Ship udev files required by systemd (bsc#1040153)
  * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
- Bump package version to 044.1 to allow systemd to depend on this change</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497614400">- 01fips: Fix typo (bsc#1033238)
  * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
- 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
  * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1497873600">- Suppress nonsensical error message (bsc#1032029)
  * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499774400">- bail out if module directory does not exist (bsc#1043900)
  * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499860800">- iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
  * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1499947200">- switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
  * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1501675200">- Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
  * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1503057600">- Ensure that targets such as halt can be reached (bsc#1048698)
  * adds 0529-systemd-add-missing-.slice-unit.patch
  * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
  * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
- Do not add too many drivers all at once (bsc#1037344)
  * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
- instmods: check modules.builtin in $srcmods (bsc#1048606)
  * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
- ssh-client: ensure is usable in all cases (bsc#1021846)
  * adds 0534-ssh-client-Include-nss_-libraries.patch
- Sync initramfs after creation to ensure entigrity (bsc#1049113)
  * adds 0535-Sync-initramfs-after-creation.patch</changelog>
<changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504008000">- Don't detect crc32.ko as built-in (bsc#1054538)
  * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
- Enable systemd-based core dumps for initrd (bsc#1054809)
  * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1504612800">- 95multipath: Pickup files in /etc/multipath/conf.d (boo#1048551)
  * adds 0539-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
  * adds 0540-Fix-task-limit-in-emergency.service-the-same-change-.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1508760000">- This is to support predictable interface names (boo#960669)
  * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
- Include crc32c Intel module when using btrfs (bsc#1011554)
  * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1509710400">- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  is not applied on SLE.</changelog>
<changelog author="daniel.molkentin@suse.com" date="1512561600">- Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
  Adds 0543-Remove-00systemd-bootchart.patch
- Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
  not applied on Leap either</changelog>
<changelog author="daniel.molkentin@suse.com" date="1512734400">- Make ip=dhcp work. Previously, a network interface specifier was required.
  The new behaviour matches documented behaviour.
  Adds 0544-40network-Make-ip-dhcp-work.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513166400">- Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
  * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
  * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513166401">- Fix logic for applying 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch</changelog>
<changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>

</package>
<package pkgid="0427a989b733c058676ef9bca945a7234a01440469aec7d8128ce9897ddf452d" name="drbd-utils" arch="src">
    <version epoch="0" ver="9.0.0" rel="3.1"/>

<changelog author="nwang@suse.com" date="1450958400">- Update to v8.9.5
  * add support for new disk option
    'rs-discard-granularity' (module v8.4.7)
  * add support for new disk option
    'discard-zeroes-if-aligned' (module v8.4.7)
  * add support for v9 "path" commands
  * doc improvements/corrections
  * improvements to drbd ocf resource agent
    and pacemaker "constraint based fencing"
    (crm-fence-peer.sh)
  * drbd-overview improvements
  * Add an autoconf switch for building without man pages
  * Fix compatibility with the musl C library
  * Introduce the concept of paths within a connection to
    the config file; add support for paths to drbdadm adjust
  * Allow multiple connection-mesh statements within one resource
  * Document peer-device-options on the drbd-9.0 man pages
  * increase the lower boundary for al-extents from 7 to 67;
    drbdadm clamps al-extents to 67 implicitly if you configures
    something lower than 67
  * Document the events2 command on the drbd-8.4 man page
  * Fix environment variables for handlers
  * Rewrite the parser for configure options; Reuse the data
    structures describing drbdsetup options
  * No longer try to set peer-device-options with the connect
    or attach commands; Only do it with the up and attach commands
  * Fixed issues with stderr messages might go into arbitrary FDs
  * Allow recursive includes; drbdadm includes each config
    file only once
  * Fix parsing cut-off proxy sections
  * When converting 8.4 to 9.0 meta-data produce meta-data the drbd9
    kernel driver will accept
  * Obey max-peers for all volumes when creating meta-data
  * Do not re-register at usage.drbd.org when the module is not
    loaded when drbdadm is invoked</changelog>
<changelog author="nwang@suse.com" date="1456228800">- bsc#967753. Fix different udev rules folder in Leap and openSUSE.</changelog>
<changelog author="nwang@suse.com" date="1457352000">- Update to v8.9.6
  * Call "drbdsetup resize" only as often as necessary on
    "drbdadm resize"
  * Disconnect connection first on single path deletion from connection
  * Add unfence-peer handler
  * Fix "drbdadm adjust" for proxy configurations</changelog>
<changelog author="nwang@suse.com" date="1457352001">- bsc#955177, fence when another node pacemaker shutdown.
  add patch fence-after-pacemaker-down.patch</changelog>
<changelog author="nwang@suse.com" date="1457956800">- fate#320495. Support ha resource agent of drbd9.
  Add patch support-drbd9-ra.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1460116800">- bsc#972886, add pkg-config as build requirement to ensure udev's
  rules directory will be detected at build time</changelog>
<changelog author="nwang@suse.com" date="1467201600">- bsc#986784, fix DRBD9 stacked resource could not started by RA.</changelog>
<changelog author="nwang@suse.com" date="1467201601">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
<changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
<changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
<changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
<changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
<changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
<changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
<changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
<changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
<changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
<changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
<changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>

</package>
<package pkgid="c9890c577c97ddc3ee8bee54c3440167dd8e6185db5e89f812462a878e9fc207" name="drbd-utils" arch="x86_64">
    <version epoch="0" ver="9.0.0" rel="3.1"/>

<changelog author="nwang@suse.com" date="1450958400">- Update to v8.9.5
  * add support for new disk option
    'rs-discard-granularity' (module v8.4.7)
  * add support for new disk option
    'discard-zeroes-if-aligned' (module v8.4.7)
  * add support for v9 "path" commands
  * doc improvements/corrections
  * improvements to drbd ocf resource agent
    and pacemaker "constraint based fencing"
    (crm-fence-peer.sh)
  * drbd-overview improvements
  * Add an autoconf switch for building without man pages
  * Fix compatibility with the musl C library
  * Introduce the concept of paths within a connection to
    the config file; add support for paths to drbdadm adjust
  * Allow multiple connection-mesh statements within one resource
  * Document peer-device-options on the drbd-9.0 man pages
  * increase the lower boundary for al-extents from 7 to 67;
    drbdadm clamps al-extents to 67 implicitly if you configures
    something lower than 67
  * Document the events2 command on the drbd-8.4 man page
  * Fix environment variables for handlers
  * Rewrite the parser for configure options; Reuse the data
    structures describing drbdsetup options
  * No longer try to set peer-device-options with the connect
    or attach commands; Only do it with the up and attach commands
  * Fixed issues with stderr messages might go into arbitrary FDs
  * Allow recursive includes; drbdadm includes each config
    file only once
  * Fix parsing cut-off proxy sections
  * When converting 8.4 to 9.0 meta-data produce meta-data the drbd9
    kernel driver will accept
  * Obey max-peers for all volumes when creating meta-data
  * Do not re-register at usage.drbd.org when the module is not
    loaded when drbdadm is invoked</changelog>
<changelog author="nwang@suse.com" date="1456228800">- bsc#967753. Fix different udev rules folder in Leap and openSUSE.</changelog>
<changelog author="nwang@suse.com" date="1457352000">- Update to v8.9.6
  * Call "drbdsetup resize" only as often as necessary on
    "drbdadm resize"
  * Disconnect connection first on single path deletion from connection
  * Add unfence-peer handler
  * Fix "drbdadm adjust" for proxy configurations</changelog>
<changelog author="nwang@suse.com" date="1457352001">- bsc#955177, fence when another node pacemaker shutdown.
  add patch fence-after-pacemaker-down.patch</changelog>
<changelog author="nwang@suse.com" date="1457956800">- fate#320495. Support ha resource agent of drbd9.
  Add patch support-drbd9-ra.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1460116800">- bsc#972886, add pkg-config as build requirement to ensure udev's
  rules directory will be detected at build time</changelog>
<changelog author="nwang@suse.com" date="1467201600">- bsc#986784, fix DRBD9 stacked resource could not started by RA.</changelog>
<changelog author="nwang@suse.com" date="1467201601">- bsc#986215, fix segfault of up a DRBD9 stacked resource.
- Add patch fix-segfault-up-stacked-resource.patch</changelog>
<changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
<changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
<changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
<changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
<changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
<changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
<changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
<changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
<changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
<changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
<changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>

</package>
<package pkgid="d00bbae2a5e3260b915bdc8fa3e7cafbbd95a82737eec5b583fdfe56ec46bf08" name="drm" arch="src">
    <version epoch="0" ver="4.9.33" rel="5.2"/>

<changelog author="tiwai@suse.de" date="1472731200">- backport upstream fixes for intel_csr.c (to add support for KBL
  DMC).</changelog>
<changelog author="patrik.jakobsson@suse.com" date="1490875200">- Update the drm sources to v4.9 and add the following backport
  patches to work with the SLE12-SP3 kernel (fate#321223):
  0001-drm-Don-t-use-driver-specific-i2c-locking.patch
  0002-drm-i915-Add-u64_to_user_ptr-macro.patch
  0003-drm-i915-Remove-use-of-vmap-notifier.patch
  0004-drm-Remove-use-of-non-exisiting-__malloc-attribute.patch
  0005-drm-i915-Remove-call-to-intel-gtt.patch
  0006-drm-i915-Add-extra-argument-to-get_user_pages_remote.patch
  0007-makefile-Add-a-makefile-for-the-oot-build.patch
  0008-intel_ips-Include-the-header-file.patch
  0009-drm-amdkfd-Replace-in_compat_syscall-with-is_compat_.patch
  0010-drm-bochs-cirrus-i915-Fixup-missing-PCI-IDs.patch
  0011-drm-vmwgfx-Remove-missing-stack-frame-code.patch
  0012-drm-Make-all-drivers-use-the-correct-include-directo.patch
  0013-drm-virtio-Fix-compile-warning-for-use-of-find_vbq.patch
  0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch</changelog>
<changelog author="mmarek@suse.cz" date="1490961600">- Only install the package on systems with Intel Kaby Lake graphics
  (fate#321223).</changelog>
<changelog author="patrik.jakobsson@suse.com" date="1490961601">- Add missing source tag for preable file</changelog>
<changelog author="tiwai@suse.de" date="1493294400">- Add Skylake, Broxton and AMDGPU supplements list (bsc#1036380)
- Don't limit the chipsets for openSUSE (bsc#1036380)</changelog>
<changelog author="tiwai@suse.de" date="1494331200">- Upgrade to 4.9.23 (CVE-2017-7261,CVE-2017-7294,bsc#1018358,
  bsc#1031717,bsc#1021294,bsc#1009674):
  drm/nouveau/disp/mcp7x: disable dptmds workaround
  drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
  drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
  drm/nouveau/mpeg: mthd returns true on success now
  Revert "drm/i915/execlists: Reset RING registers upon resume"
  drm/i915: Avoid rcu_barrier() from reclaim paths (shrinker)
  drm/i915: Stop using RP_DOWN_EI on Baytrail
  drm/i915: Drop support for I915_EXEC_CONSTANTS_* execbuf parameters.
  drm/i915: Only enable hotplug interrupts if the display interrupts are enabled
  drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
  drm/i915: Nuke debug messages from the pipe update critical section
  drm/i915/gen9: Increase PCODE request timeout to 50ms
  drm/msm/adreno: move function declarations to header file
  drm/mga: remove device_is_agp callback
  drm/i915: actually drive the BDW reserved IDs
  drm/edid: constify edid quirk list
  drm/sun4i: Add compatible string for A31/A31s TCON (timing controller)
  drm/sun4i: Add compatible strings for A31/A31s display pipelines
  drm/sun4i: tcon: Move SoC specific quirks to a DT matched data structure
  drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
  drm/vmwgfx: Remove getparam error message
  drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
  drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
  drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
  drm/vmwgfx: Type-check lookups of fence objects
  drm/etnaviv: (re-)protect fence allocation with GPU mutex
  drm/vc4: Allocate the right amount of space for boot-time CRTC state.
  drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
  drm: reference count event-&gt;completion
  drm/bridge: analogix dp: Fix runtime PM state on driver bind
  drm/amdgpu: reinstate oland workaround for sclk
  drm/amdgpu/si: add dpm quirk for Oland
  drm/vc4: Use runtime autosuspend to avoid thrashing V3D power state.
  drm/vc4: Fix termination of the initial scan for branch targets.
  drm/vc4: Fix -&gt;clock_select setting for the VEC encoder
  drm/vc4: Fix race between page flip completion event and clean-up
  drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing classes
  drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
  drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
  drm/i915: Fix not finding the VBT when it overlaps with OPREGION_ASLE_EXT
  drm/i915: Avoid spurious WARNs about the wrong pipe in the PPS code
  drm: Cancel drm_fb_helper_resume_work on unload
  drm: Cancel drm_fb_helper_dirty_work on unload
  drm/i915/gvt: Disable access to stolen memory as a guest
  drm/atomic: fix an error code in mode_fixup()
  drm/imx: imx-tve: Do not set the regulator voltage
  drm/vmwgfx: Work around drm removal of control nodes
  drm/ttm: Make sure BOs being swapped out are cacheable
  drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
  drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
  drm/ast: Call open_key before enable_mmio in POST code
  drm/ast: Fix test for VGA enabled
  drm/amdgpu: add more cases to DCE11 possible crtc mask setup
  drm/dp/mst: fix kernel oops when turning off secondary monitor
  drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
  drm/i915: Always convert incoming exec offsets to non-canonical
  drm/atomic: Fix double free in drm_atomic_state_default_clear
  drm/i915/bxt: Add MST support when do DPLL calculation
  drm/i915: fix use-after-free in page_flip_completed()
  drm/i915/execlists: Reset RING registers upon resume
  drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
  drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
  drm/amdgpu/si: fix crash on headless asics
  drm/i915: Remove WaDisableLSQCROPERFforOCL KBL workaround.
  drm/i915: Check for NULL atomic state in intel_crtc_disable_noatomic()
  drm/i915: Fix calculation of rotated x and y offsets for planar formats
  drm/i915: Don't init hpd polling for vlv and chv from runtime_suspend()
  drm/i915: Don't leak edid in intel_crt_detect_ddc()
  drm/i915: prevent crash with .disable_display parameter
  drm/i915: Clear ret before unbinding in i915_gem_evict_something()
  drm/atomic: clear out fence when duplicating state
  Revert "drm/radeon: always apply pci shutdown callbacks"
  drm/vc4: fix a bounds check
  drm/vc4: Return -EINVAL on the overflow checks failing.
  drm/vc4: Fix an integer overflow in temporary allocation layout.
  drm/vc4: Fix memory leak of the CRTC state.
  drm/i915: Ignore bogus plane coordinates on SKL when the plane is not visible
  drm: Fix broken VT switch with video=1366x768 option
  drm: Schedule the output_poll_work with 1s delay if we have delayed event
  drm: Initialise drm_mm.head_node.allocated
  drm/i915: Move the min_pixclk[] handling to the end of readout
  drm/panel: simple: Check against num_timings when setting preferred for timing
  drm: avoid uninitialized timestamp use in wait_vblank
  drm/i915/gen9: Fix PCODE polling during SAGV disabling
  drm/amdgpu: drop verde dpm quirks
  drm/amdgpu: update si kicker smc firmware
  drm/radeon: drop verde dpm quirks
  drm/radeon: update smc firmware selection for SI
  drm: Clean up planes in atomic commit helper failure path
  drm/i915/gen9: Fix PCODE polling timeout in stable backport
  drm/savage: dereferencing an error pointer
  drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
  drm/tegra: dpaux: Fix error handling
  drm/i915/gen9: Fix PCODE polling during CDCLK change notification
  drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
  drm/i915/gen9: unconditionally apply the memory bandwidth WA
  drm/i915: disable PSR by default on HSW/BDW
  drm/radeon: Always store CRTC relative radeon_crtc-&gt;cursor_x/y values
  drm/i915: tune down the fast link training vs boot fail
  drm/i915/dp: add lane_count check in intel_dp_check_link_status
  drm/i915: Initialize overlay-&gt;last_flip properly
  drm/i915: Force VDD off on the new power seqeuencer before starting to use it
  drm/i915: Fix oops in overlay due to frontbuffer tracking
  drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
  drm/i915: Fix setting of boost freq tunable
  drm/i915: skip the first 4k of stolen memory on everything &gt;= gen8
  drm/i915: Initialize dev_priv-&gt;atomic_cdclk_freq at init time
  drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things
  drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating
  drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting
  drivers/gpu/drm/ast: Fix infinite loop if read fails
  drm/amdgpu: fix init save/restore list in gfx_v8.0
  drm/amdgpu: fix enable_cp_power_gating in gfx_v8.0.
  drm/amd/powerplay: bypass fan table setup if no fan connected
  drm/gma500: Add compat ioctl
  drm/radeon/si: load the proper firmware on 0x87 oland boards
  drm/radeon: add additional pci revision to dpm workaround
  drm/radeon: Hide the HW cursor while it's out of bounds
  drm/radeon: Also call cursor_move_locked when the cursor size changes
  drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
  drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
  drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas
  drm/nouveau/ltc: protect clearing of comptags with mutex
  drm/nouveau/bios: require checksum to match for fast acpi shadow method
  drm/nouveau/kms: lvds panel strap moved again on maxwell
  drm/nouveau/gr: fallback to legacy paths during firmware lookup
  drm/amd/amdgpu: enable GUI idle INT after enabling CGCG
  drm/amdgpu: Also call cursor_move_locked when the cursor size changes
  drm/amdgpu: Store CRTC relative amdgpu_crtc-&gt;cursor_x/y values
  drm/amdgpu: add additional pci revision to dpm workaround
  drm/amdgpu/si: load the proper firmware on 0x87 oland boards
- Add missing patches from SLE12-SP3 kernel tree (bsc#1029634,
  bsc#1007959,bsc#1011913):
  1001-drm-mgag200-Added-support-for-the-new-device-G200eH3.patch
  1002-drm-i915-Add-intel_uncore_suspend-resume-functions.patch
  1003-drm-i915-Listen-for-PMIC-bus-access-notifications.patch
  1004-drm-i915-Fix-crash-after-S3-resume-with-DP-MST-mode-.patch</changelog>
<changelog author="tiwai@suse.de" date="1495108800">- Fix the build with CONFIG_VGA_SWITCHEROO (bsc#1039759):
  0015-workaround-for-pci-d3_bridge.patch</changelog>
<changelog author="tiwai@suse.de" date="1495627200">- Fix the build failure with the updated fence_wait_any_timeout()
  API (bsc#1040550):
  0016-drm-amdgpu-add-the-interface-of-waiting-multiple-fen.patch</changelog>
<changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
<changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
<changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
<changelog author="tiwai@suse.de" date="1497441600">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
<changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
<changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
<changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
<changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
<changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
<changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
<changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
<changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>

</package>
<package pkgid="f5ea8a545bc50af9ec6b3813a1acfd242f00b4525a01c6dbb5516e35b2823c13" name="drm-kmp-default" arch="x86_64">
    <version epoch="0" ver="4.9.33_k4.4.79_4" rel="5.2"/>

<changelog author="tiwai@suse.de" date="1472731200">- backport upstream fixes for intel_csr.c (to add support for KBL
  DMC).</changelog>
<changelog author="patrik.jakobsson@suse.com" date="1490875200">- Update the drm sources to v4.9 and add the following backport
  patches to work with the SLE12-SP3 kernel (fate#321223):
  0001-drm-Don-t-use-driver-specific-i2c-locking.patch
  0002-drm-i915-Add-u64_to_user_ptr-macro.patch
  0003-drm-i915-Remove-use-of-vmap-notifier.patch
  0004-drm-Remove-use-of-non-exisiting-__malloc-attribute.patch
  0005-drm-i915-Remove-call-to-intel-gtt.patch
  0006-drm-i915-Add-extra-argument-to-get_user_pages_remote.patch
  0007-makefile-Add-a-makefile-for-the-oot-build.patch
  0008-intel_ips-Include-the-header-file.patch
  0009-drm-amdkfd-Replace-in_compat_syscall-with-is_compat_.patch
  0010-drm-bochs-cirrus-i915-Fixup-missing-PCI-IDs.patch
  0011-drm-vmwgfx-Remove-missing-stack-frame-code.patch
  0012-drm-Make-all-drivers-use-the-correct-include-directo.patch
  0013-drm-virtio-Fix-compile-warning-for-use-of-find_vbq.patch
  0014-drm-nouveau-Use-old-struct-dma_attrs-instead-of-unsi.patch</changelog>
<changelog author="mmarek@suse.cz" date="1490961600">- Only install the package on systems with Intel Kaby Lake graphics
  (fate#321223).</changelog>
<changelog author="patrik.jakobsson@suse.com" date="1490961601">- Add missing source tag for preable file</changelog>
<changelog author="tiwai@suse.de" date="1493294400">- Add Skylake, Broxton and AMDGPU supplements list (bsc#1036380)
- Don't limit the chipsets for openSUSE (bsc#1036380)</changelog>
<changelog author="tiwai@suse.de" date="1494331200">- Upgrade to 4.9.23 (CVE-2017-7261,CVE-2017-7294,bsc#1018358,
  bsc#1031717,bsc#1021294,bsc#1009674):
  drm/nouveau/disp/mcp7x: disable dptmds workaround
  drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
  drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
  drm/nouveau/mpeg: mthd returns true on success now
  Revert "drm/i915/execlists: Reset RING registers upon resume"
  drm/i915: Avoid rcu_barrier() from reclaim paths (shrinker)
  drm/i915: Stop using RP_DOWN_EI on Baytrail
  drm/i915: Drop support for I915_EXEC_CONSTANTS_* execbuf parameters.
  drm/i915: Only enable hotplug interrupts if the display interrupts are enabled
  drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
  drm/i915: Nuke debug messages from the pipe update critical section
  drm/i915/gen9: Increase PCODE request timeout to 50ms
  drm/msm/adreno: move function declarations to header file
  drm/mga: remove device_is_agp callback
  drm/i915: actually drive the BDW reserved IDs
  drm/edid: constify edid quirk list
  drm/sun4i: Add compatible string for A31/A31s TCON (timing controller)
  drm/sun4i: Add compatible strings for A31/A31s display pipelines
  drm/sun4i: tcon: Move SoC specific quirks to a DT matched data structure
  drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
  drm/vmwgfx: Remove getparam error message
  drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
  drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
  drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
  drm/vmwgfx: Type-check lookups of fence objects
  drm/etnaviv: (re-)protect fence allocation with GPU mutex
  drm/vc4: Allocate the right amount of space for boot-time CRTC state.
  drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
  drm: reference count event-&gt;completion
  drm/bridge: analogix dp: Fix runtime PM state on driver bind
  drm/amdgpu: reinstate oland workaround for sclk
  drm/amdgpu/si: add dpm quirk for Oland
  drm/vc4: Use runtime autosuspend to avoid thrashing V3D power state.
  drm/vc4: Fix termination of the initial scan for branch targets.
  drm/vc4: Fix -&gt;clock_select setting for the VEC encoder
  drm/vc4: Fix race between page flip completion event and clean-up
  drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing classes
  drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
  drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
  drm/i915: Fix not finding the VBT when it overlaps with OPREGION_ASLE_EXT
  drm/i915: Avoid spurious WARNs about the wrong pipe in the PPS code
  drm: Cancel drm_fb_helper_resume_work on unload
  drm: Cancel drm_fb_helper_dirty_work on unload
  drm/i915/gvt: Disable access to stolen memory as a guest
  drm/atomic: fix an error code in mode_fixup()
  drm/imx: imx-tve: Do not set the regulator voltage
  drm/vmwgfx: Work around drm removal of control nodes
  drm/ttm: Make sure BOs being swapped out are cacheable
  drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
  drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
  drm/ast: Call open_key before enable_mmio in POST code
  drm/ast: Fix test for VGA enabled
  drm/amdgpu: add more cases to DCE11 possible crtc mask setup
  drm/dp/mst: fix kernel oops when turning off secondary monitor
  drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
  drm/i915: Always convert incoming exec offsets to non-canonical
  drm/atomic: Fix double free in drm_atomic_state_default_clear
  drm/i915/bxt: Add MST support when do DPLL calculation
  drm/i915: fix use-after-free in page_flip_completed()
  drm/i915/execlists: Reset RING registers upon resume
  drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
  drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
  drm/amdgpu/si: fix crash on headless asics
  drm/i915: Remove WaDisableLSQCROPERFforOCL KBL workaround.
  drm/i915: Check for NULL atomic state in intel_crtc_disable_noatomic()
  drm/i915: Fix calculation of rotated x and y offsets for planar formats
  drm/i915: Don't init hpd polling for vlv and chv from runtime_suspend()
  drm/i915: Don't leak edid in intel_crt_detect_ddc()
  drm/i915: prevent crash with .disable_display parameter
  drm/i915: Clear ret before unbinding in i915_gem_evict_something()
  drm/atomic: clear out fence when duplicating state
  Revert "drm/radeon: always apply pci shutdown callbacks"
  drm/vc4: fix a bounds check
  drm/vc4: Return -EINVAL on the overflow checks failing.
  drm/vc4: Fix an integer overflow in temporary allocation layout.
  drm/vc4: Fix memory leak of the CRTC state.
  drm/i915: Ignore bogus plane coordinates on SKL when the plane is not visible
  drm: Fix broken VT switch with video=1366x768 option
  drm: Schedule the output_poll_work with 1s delay if we have delayed event
  drm: Initialise drm_mm.head_node.allocated
  drm/i915: Move the min_pixclk[] handling to the end of readout
  drm/panel: simple: Check against num_timings when setting preferred for timing
  drm: avoid uninitialized timestamp use in wait_vblank
  drm/i915/gen9: Fix PCODE polling during SAGV disabling
  drm/amdgpu: drop verde dpm quirks
  drm/amdgpu: update si kicker smc firmware
  drm/radeon: drop verde dpm quirks
  drm/radeon: update smc firmware selection for SI
  drm: Clean up planes in atomic commit helper failure path
  drm/i915/gen9: Fix PCODE polling timeout in stable backport
  drm/savage: dereferencing an error pointer
  drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
  drm/tegra: dpaux: Fix error handling
  drm/i915/gen9: Fix PCODE polling during CDCLK change notification
  drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
  drm/i915/gen9: unconditionally apply the memory bandwidth WA
  drm/i915: disable PSR by default on HSW/BDW
  drm/radeon: Always store CRTC relative radeon_crtc-&gt;cursor_x/y values
  drm/i915: tune down the fast link training vs boot fail
  drm/i915/dp: add lane_count check in intel_dp_check_link_status
  drm/i915: Initialize overlay-&gt;last_flip properly
  drm/i915: Force VDD off on the new power seqeuencer before starting to use it
  drm/i915: Fix oops in overlay due to frontbuffer tracking
  drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
  drm/i915: Fix setting of boost freq tunable
  drm/i915: skip the first 4k of stolen memory on everything &gt;= gen8
  drm/i915: Initialize dev_priv-&gt;atomic_cdclk_freq at init time
  drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things
  drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating
  drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting
  drivers/gpu/drm/ast: Fix infinite loop if read fails
  drm/amdgpu: fix init save/restore list in gfx_v8.0
  drm/amdgpu: fix enable_cp_power_gating in gfx_v8.0.
  drm/amd/powerplay: bypass fan table setup if no fan connected
  drm/gma500: Add compat ioctl
  drm/radeon/si: load the proper firmware on 0x87 oland boards
  drm/radeon: add additional pci revision to dpm workaround
  drm/radeon: Hide the HW cursor while it's out of bounds
  drm/radeon: Also call cursor_move_locked when the cursor size changes
  drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
  drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
  drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas
  drm/nouveau/ltc: protect clearing of comptags with mutex
  drm/nouveau/bios: require checksum to match for fast acpi shadow method
  drm/nouveau/kms: lvds panel strap moved again on maxwell
  drm/nouveau/gr: fallback to legacy paths during firmware lookup
  drm/amd/amdgpu: enable GUI idle INT after enabling CGCG
  drm/amdgpu: Also call cursor_move_locked when the cursor size changes
  drm/amdgpu: Store CRTC relative amdgpu_crtc-&gt;cursor_x/y values
  drm/amdgpu: add additional pci revision to dpm workaround
  drm/amdgpu/si: load the proper firmware on 0x87 oland boards
- Add missing patches from SLE12-SP3 kernel tree (bsc#1029634,
  bsc#1007959,bsc#1011913):
  1001-drm-mgag200-Added-support-for-the-new-device-G200eH3.patch
  1002-drm-i915-Add-intel_uncore_suspend-resume-functions.patch
  1003-drm-i915-Listen-for-PMIC-bus-access-notifications.patch
  1004-drm-i915-Fix-crash-after-S3-resume-with-DP-MST-mode-.patch</changelog>
<changelog author="tiwai@suse.de" date="1495108800">- Fix the build with CONFIG_VGA_SWITCHEROO (bsc#1039759):
  0015-workaround-for-pci-d3_bridge.patch</changelog>
<changelog author="tiwai@suse.de" date="1495627200">- Fix the build failure with the updated fence_wait_any_timeout()
  API (bsc#1040550):
  0016-drm-amdgpu-add-the-interface-of-waiting-multiple-fen.patch</changelog>
<changelog author="tiwai@suse.de" date="1496145600">- Update to 4.9.30 to follow the upstream development (bsc#1041744)
- Fix the build with aarch64 (bsc#1041697):
  0020-drm-msm-Remove-use-of-vmap-notifier.patch
  0021-drm-msm-Add-u64_to_user_ptr.patch
  0022-drm-tegra-Revert-dsi-runtime-pm.patch
  0023-drm-msm-Disable-dsi-pll-8960-phy.patch
  0024-drm-tegra-Workaround-for-pinconf_generic_dt_free_map.patch</changelog>
<changelog author="tiwai@suse.de" date="1496145601">- Fix Oops at gen6_ppgtt_insert_entries (bsc#1040463):
  1005-drm-i915-Use-pagecache-write-to-prepopulate-shmemfs-.patch</changelog>
<changelog author="tiwai@suse.de" date="1496232000">- Create a dummy adv7511.ko for weak-updates (bsc#1041872).</changelog>
<changelog author="tiwai@suse.de" date="1497441600">- Rephrase the package description for avoiding the confusion
  (bsc#1044176)
- Update to 4.9.31 to follow the upstream development (bsc#1041744):
  * drm/radeon/ci: disable mclk switching for high refresh rates (v2)
  * drm/radeon: Unbreak HPD handling for r600+
  * drm/radeon: Fix vram_size/visible values in DRM_RADEON_GEM_INFO
    ioctl
  * drm/gma500/psb: Actually use VBT mode when it is found</changelog>
<changelog author="tiwai@suse.de" date="1497787200">- Update to 4.9.33 to follow the upstream development (bsc#1041744,
  CVE-2017-7346, bsc#1031796):
  drm/i915: Always recompute watermarks when distrust_bios_wm is set, v2.
  drm/i915: Workaround VLV/CHV DSI scanline counter hardware fail
  drm/ast: Fixed system hanged if disable P2A
  drm/nouveau: Fix drm poll_helper handling
  drm/nouveau: Don't enabling polling twice on runtime resume
  drm/nouveau: Handle fbcon suspend/resume in seperate worker
  drm/nouveau: Rename acpi_work to hpd_work
  drm/nouveau: Intercept ACPI_VIDEO_NOTIFY_PROBE
  drm/i915: Check for NULL i915_vma in intel_unpin_fb_obj()
  drm: Don't race connector registration
  drm: prevent double-(un)registration for connectors
  drm/nouveau/fence/g84-: protect against concurrent access to
    semaphore buffers
  drm/nouveau: prevent userspace from deleting client object
  drm/i915: Prevent the system suspend complete optimization
  drm/i915/vbt: split out defaults that are set when there is no VBT
  drm/i915/vbt: don't propagate errors from intel_bios_init()
  drm/nouveau/tmr: fully separate alarm execution/pending lists
  drm/vmwgfx: Make sure backup_handle is always valid
  drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
  drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
  drm/msm: Expose our reservation object when exporting a dmabuf.
  drm: Fix oops + Xserver hang when unplugging USB drm devices
  drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
- Fix the build with 4.9.33:
  0025-drm-i915-comment-out-PCI_DEV_FLAGS_NEEDS_RESUME.patch
- drm/mgag200: Fix to always set HiPri for G200e4 (bsc#1015452,
  bsc#995542):
  1006-drm-mgag200-Fix-to-always-set-HiPri-for-G200e4.patch</changelog>
<changelog author="tiwai@suse.de" date="1498651200">- Fix the bogus TV detection on old i9x5gm (bsc#1046269):
  1007-drm-i915-Disable-tv-output-on-i9x5gm.patch
- Cherry-pick drm fixes from 4.9.34 upstream (bsc#1041744):
  0101-drm-amdgpu-Fix-overflow-of-watermark-calcs-at-4k-res.patch
  0102-drm-i915-Fix-GVT-g-PVINFO-version-compatibility-chec.patch
  0103-drm-mediatek-fix-mtk_hdmi_setup_vendor_specific_info.patch
  0104-drm-vc4-Fix-OOPSes-from-trying-to-cache-a-partially-.patch</changelog>
<changelog author="tiwai@suse.de" date="1498824000">- Workaround for BXT aperture vs GTT chip bug (bsc#1046821):
  1008-drm-i915-Serialize-GTT-Aperture-accesses-on-BXT.patch</changelog>
<changelog author="tiwai@suse.de" date="1499256000">- Cherry-pick drm fixes from 4.9.35 and 4.9.36 upstream updates
  (bsc#1041744):
  0105-drm-radeon-add-a-PX-quirk-for-another-K53TK-variant.patch
  0106-drm-radeon-add-a-quirk-for-Toshiba-Satellite-L20-183.patch
  0107-drm-amdgpu-atom-fix-ps-allocation-size-for-EnableDis.patch
  0108-drm-amdgpu-adjust-default-display-clock.patch
  0109-drm-ast-Handle-configuration-without-P2A-bridge.patch
  0110-drm-vmwgfx-Free-hash-table-allocated-by-cmdbuf-manag.patch
  0111-drm-amdgpu-fix-program-vce-instance-logic-error.patch
  0112-drm-amdgpu-add-support-for-new-hainan-variants.patch
  0113-drm-amdgpu-check-ring-being-ready-before-using.patch
  0114-drm-etnaviv-trick-drm_mm-into-giving-out-a-low-IOVA.patch
  0115-drm-radeon-si-load-special-ucode-for-certain-MC-conf.patch
  0116-drm-amd-powerplay-fix-vce-cg-logic-error-on-CZ-St.patch
  0117-drm-amd-powerplay-refine-vce-dpm-update-code-on-Cz.patch
- Fix Memory leak in the virtio_gpu_object_create function
  (bsc#1047277, CVE-2017-10810):
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
<changelog author="tiwai@suse.de" date="1499774400">- Fix the crash at suspend/resume on old Intel chipsets
  (bsc#1047729):
  1010-drm-i915-Unify-active-context-tracking-between-legac.patch</changelog>
<changelog author="tiwai@suse.de" date="1500292800">- Fix large topology support for vmwgfx (bsc#1048155):
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch
  1013-drm-vmwgfx-Limit-max-desktop-dimensions-to-8Kx8K.patch
- Rename / refresh v4.9.37 patch: from
  1009-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch
  to
  0118-drm-virtio-don-t-leak-bo-on-drm_gem_object_init-fail.patch</changelog>
<changelog author="tiwai@suse.de" date="1500552000">- Fix potential issues in the previous patchset for vmwgfx
  (bsc#1048155): refreshed two patches
  1011-drm-vmwgfx-Support-topology-greater-than-texture-siz.patch
  1012-drm-vmwgfx-Fix-large-topology-crash.patch</changelog>
<changelog author="tiwai@suse.de" date="1500984000">- Fix GPU hang caused by the previous PM fix (bsc#1050256):
  1014-drm-i915-Restore-marking-context-objects-as-dirty-on.patch</changelog>

</package>
<package pkgid="1bc6187670f249a99044c18d95e0a973971c61cf1d3bd86c26c8e8623ea93e89" name="editorconfig" arch="x86_64">
    <version epoch="0" ver="0.12.1" rel="5.1"/>

<changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
<changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
<changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>

</package>
<package pkgid="98416b9b0d3ade0c1ee529ae1c3277381abcca9b3687f858a199a3620c237b28" name="editorconfig-core-c" arch="src">
    <version epoch="0" ver="0.12.1" rel="5.1"/>

<changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
<changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
<changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>

</package>
<package pkgid="b06b9cb5ca7c3d8a363310774e554e05e15d920414a3ae56d9d8c5ac4ea7cd44" name="emacs" arch="src">
    <version epoch="0" ver="24.3" rel="28.1"/>

<changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
<changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
<changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
<changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
<changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
<changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
<changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
<changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
<changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
<changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
<changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
<changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
<changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
<changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
<changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
<changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
<changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
<changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>

</package>
<package pkgid="c7ea2ff33e04611598c35c62ea7ca2f31bcdfae2cde1ef928bea74c31422f577" name="emacs" arch="x86_64">
    <version epoch="0" ver="24.3" rel="28.1"/>

<changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
<changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
<changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
<changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
<changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
<changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
<changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
<changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
<changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
<changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
<changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
<changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
<changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
<changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
<changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
<changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
<changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
<changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>

</package>
<package pkgid="46a4569ed25fecef20d129a77ff38050b8ba3e404b0d856ea5fb9fa6183f24aa" name="emacs-el" arch="noarch">
    <version epoch="0" ver="24.3" rel="28.1"/>

<changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
<changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
<changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
<changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
<changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
<changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
<changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
<changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
<changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
<changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
<changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
<changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
<changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
<changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
<changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
<changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
<changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
<changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>

</package>
<package pkgid="b35faf44584b6d012d65fc896c763d4b6d5ca56af67cd581e0b322b64a6d05a1" name="emacs-info" arch="noarch">
    <version epoch="0" ver="24.3" rel="28.1"/>

<changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
<changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
<changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
<changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
<changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
<changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
<changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
<changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
<changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
<changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
<changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
<changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
<changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
<changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
<changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
<changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
<changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
<changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>

</package>
<package pkgid="69efde50510b7c67db69f687e74a96fe205ecf5e8fe36adae5df2c88b068e868" name="emacs-nox" arch="x86_64">
    <version epoch="0" ver="24.3" rel="28.1"/>

<changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
<changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
<changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
<changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
<changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
<changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
<changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
<changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
<changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
<changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
<changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
<changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
<changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
<changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
<changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
<changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
<changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
<changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>

</package>
<package pkgid="f1ce9b1b4ce2f2b83acf7aa5138c7b43d512157826adac223aaffeb38e0f1fa1" name="emacs-x11" arch="x86_64">
    <version epoch="0" ver="24.3" rel="28.1"/>

<changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
<changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
<changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
<changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
<changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
<changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
<changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
<changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
<changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
<changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
<changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
<changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
<changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
<changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
<changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
<changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
<changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
<changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>

</package>
<package pkgid="19f163ae7312cb6bca4e2f4fe5751aac376f3d12f90b040facafafa3448994e7" name="empathy" arch="src">
    <version epoch="0" ver="3.12.13" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397476800">- Update to version 3.12.1:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Bugs fixed: wrong count of unread messages and text missing
    (bgo#662672).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1403524800">- Update to version 3.12.4:
  + Picking a specific persona/account from context menu doesn't
    work (bgo#732100).
- Changes from version 3.12.3:
  + This new stable release removes support for connecting to
    Windows Live chat using XMPP as Microsoft shut down their XMPP
    gateways. However, you can continue using the proprietary MSN
    protocol through telepathy-haze.
  + Bugs fixed: bgo#696977, bgo#731150.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.12.5:
  + Chain GtkCombobox subclass constructors to parent (bgo#732909).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410523200">- Update to version 3.12.6:
  + Bugs fixed:
  - gnome-contact's desktop file changed (bgo#735575).
  - Smileys are not centered ("Insert Smiley" menu) (bgo#736369).
  - Fix crash if empathy_chatroom_manager_find() failed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.12.7:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.12.8:
  + bgo#705326: User help suggests "ignore SSL certificate errors"
    option for Jabber accounts "if you trust the server you are
    connecting to".
  + bgo#746100: goa-mc-plugin: Remove Facebook chat using Jabber.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 3.12.9:
  + bgo#746612: Geoclue2 requires a DesktopId property.
  + bgo#747375, Fix a wrong header guard in
    libempathy-gtk/empathy-smiley-manager.h.
  + bgo#747170, Typo (messenging) in documentation.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.12.10:
  + bgo#741771: Preferences dialog expands to absurd width.
  + bgo#745504: Fix preferences with modern gtk+.
  + bgo#746841: Provide a scalable -symbolic variant of the app
    icon.
  + bgo#747460: Initial empathy accounts window is too wide.
  + Don't crash when running in Wayland.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444824000">- Update to version 3.12.11:
  + Fix opening contact list after launching empathy -h
    (bgo#729282).
  + Leak fixes for telepathy-accounts-widgets (bgo#752938).
  + Don't hard code the name of the pkg-config binary
    (bgo#755707).
  + Call the finish method only once (bgo#756165).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1451908800">- Add empathy-fix-icons-in-search-bar.patch: Fix the previous/next
  icons, patch from upstream git.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Add patches from upstream git to fix various issues:
  + empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch
  + empathy-Fix-a-critical-warning.patch
  + empathy-Don-t-call-XInitThreads-in-Wayland.patch
  + empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  + empathy-Add-a-missing-tag-to-the-AppData-file.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Add empathy-clutter-gst-3_0.patch: Port to clutter-gst-3.0.
- Replace pkgconfig(clutter-gst-2.0) for pkgconfig(clutter-gst-3.0)
  BuildRequires due to above port.
- Add libtool BuildRequires and pass autoreconf -fiv since above
  patch touches the buildsystem.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1463140800">- Update to version 3.12.12:
  + Fix pkg-config usage (bgo#761000).
  + The minimum value of an uint64_t is 0, not G_MININT32
    (bgo#762735).
  + Hardcoding #!/usr/bin/python is not portable (bgo#762737).
  + Fix -Werror build for clang (bgo#762738).
  + Add the Rizon IRC network to the list of IRC networks
    (bgo#764438).
  + GCC 5 generates a type-limits warning in
    tpaw-account-settings.c (bgo#765022).
  + Empathy uses deprecated webkit functions (bgo#765024).
  + Gnome-shell Wayland application tracking broken for Empathy
    (bgo#766285).
  + Empathy dumps core when running on Wayland compositor
    (bgo#708170).
  + Updated translations.
- Drop empathy-fix-icons-in-search-bar.patch,
  empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch,
  empathy-Fix-a-critical-warning.patch,
  empathy-Don-t-call-XInitThreads-in-Wayland.patch,
  empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  and empathy-Add-a-missing-tag-to-the-AppData-file.patch, all
  fixed upstream.</changelog>
<changelog author="fcrozat@suse.com" date="1463486400">- Recommends geoclue2 now, empathy no longer uses geoclue.</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Add empathy-port-webkit2gkt3.patch: Port to webkit2gtk3
  (bgo#749001).
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequries following above port.</changelog>
<changelog author="zaitor@opensuse.org" date="1489406400">- Update to version 3.12.13:
  + Fixes the GActions in EmpathyRosterWindow (bsc#999832).
  + Bugs fixed: bgo#685837, bgo#746735, bgo#756990, bgo#767516,
    bgo#768889.
  + Updated translations.</changelog>

</package>
<package pkgid="ee2a46fcc7cec15f10336a75721517d126ca4d4aec9885d1f5927dd472e82c34" name="empathy" arch="x86_64">
    <version epoch="0" ver="3.12.13" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397476800">- Update to version 3.12.1:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Bugs fixed: wrong count of unread messages and text missing
    (bgo#662672).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1403524800">- Update to version 3.12.4:
  + Picking a specific persona/account from context menu doesn't
    work (bgo#732100).
- Changes from version 3.12.3:
  + This new stable release removes support for connecting to
    Windows Live chat using XMPP as Microsoft shut down their XMPP
    gateways. However, you can continue using the proprietary MSN
    protocol through telepathy-haze.
  + Bugs fixed: bgo#696977, bgo#731150.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.12.5:
  + Chain GtkCombobox subclass constructors to parent (bgo#732909).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410523200">- Update to version 3.12.6:
  + Bugs fixed:
  - gnome-contact's desktop file changed (bgo#735575).
  - Smileys are not centered ("Insert Smiley" menu) (bgo#736369).
  - Fix crash if empathy_chatroom_manager_find() failed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.12.7:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.12.8:
  + bgo#705326: User help suggests "ignore SSL certificate errors"
    option for Jabber accounts "if you trust the server you are
    connecting to".
  + bgo#746100: goa-mc-plugin: Remove Facebook chat using Jabber.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 3.12.9:
  + bgo#746612: Geoclue2 requires a DesktopId property.
  + bgo#747375, Fix a wrong header guard in
    libempathy-gtk/empathy-smiley-manager.h.
  + bgo#747170, Typo (messenging) in documentation.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.12.10:
  + bgo#741771: Preferences dialog expands to absurd width.
  + bgo#745504: Fix preferences with modern gtk+.
  + bgo#746841: Provide a scalable -symbolic variant of the app
    icon.
  + bgo#747460: Initial empathy accounts window is too wide.
  + Don't crash when running in Wayland.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444824000">- Update to version 3.12.11:
  + Fix opening contact list after launching empathy -h
    (bgo#729282).
  + Leak fixes for telepathy-accounts-widgets (bgo#752938).
  + Don't hard code the name of the pkg-config binary
    (bgo#755707).
  + Call the finish method only once (bgo#756165).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1451908800">- Add empathy-fix-icons-in-search-bar.patch: Fix the previous/next
  icons, patch from upstream git.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Add patches from upstream git to fix various issues:
  + empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch
  + empathy-Fix-a-critical-warning.patch
  + empathy-Don-t-call-XInitThreads-in-Wayland.patch
  + empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  + empathy-Add-a-missing-tag-to-the-AppData-file.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Add empathy-clutter-gst-3_0.patch: Port to clutter-gst-3.0.
- Replace pkgconfig(clutter-gst-2.0) for pkgconfig(clutter-gst-3.0)
  BuildRequires due to above port.
- Add libtool BuildRequires and pass autoreconf -fiv since above
  patch touches the buildsystem.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1463140800">- Update to version 3.12.12:
  + Fix pkg-config usage (bgo#761000).
  + The minimum value of an uint64_t is 0, not G_MININT32
    (bgo#762735).
  + Hardcoding #!/usr/bin/python is not portable (bgo#762737).
  + Fix -Werror build for clang (bgo#762738).
  + Add the Rizon IRC network to the list of IRC networks
    (bgo#764438).
  + GCC 5 generates a type-limits warning in
    tpaw-account-settings.c (bgo#765022).
  + Empathy uses deprecated webkit functions (bgo#765024).
  + Gnome-shell Wayland application tracking broken for Empathy
    (bgo#766285).
  + Empathy dumps core when running on Wayland compositor
    (bgo#708170).
  + Updated translations.
- Drop empathy-fix-icons-in-search-bar.patch,
  empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch,
  empathy-Fix-a-critical-warning.patch,
  empathy-Don-t-call-XInitThreads-in-Wayland.patch,
  empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  and empathy-Add-a-missing-tag-to-the-AppData-file.patch, all
  fixed upstream.</changelog>
<changelog author="fcrozat@suse.com" date="1463486400">- Recommends geoclue2 now, empathy no longer uses geoclue.</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Add empathy-port-webkit2gkt3.patch: Port to webkit2gtk3
  (bgo#749001).
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequries following above port.</changelog>
<changelog author="zaitor@opensuse.org" date="1489406400">- Update to version 3.12.13:
  + Fixes the GActions in EmpathyRosterWindow (bsc#999832).
  + Bugs fixed: bgo#685837, bgo#746735, bgo#756990, bgo#767516,
    bgo#768889.
  + Updated translations.</changelog>

</package>
<package pkgid="b2bc11c1e55844cabb7750e5ee8e96f4d061c538fe5d5419081967f73d5502bc" name="empathy-lang" arch="noarch">
    <version epoch="0" ver="3.12.13" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397476800">- Update to version 3.12.1:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Bugs fixed: wrong count of unread messages and text missing
    (bgo#662672).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1403524800">- Update to version 3.12.4:
  + Picking a specific persona/account from context menu doesn't
    work (bgo#732100).
- Changes from version 3.12.3:
  + This new stable release removes support for connecting to
    Windows Live chat using XMPP as Microsoft shut down their XMPP
    gateways. However, you can continue using the proprietary MSN
    protocol through telepathy-haze.
  + Bugs fixed: bgo#696977, bgo#731150.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.12.5:
  + Chain GtkCombobox subclass constructors to parent (bgo#732909).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410523200">- Update to version 3.12.6:
  + Bugs fixed:
  - gnome-contact's desktop file changed (bgo#735575).
  - Smileys are not centered ("Insert Smiley" menu) (bgo#736369).
  - Fix crash if empathy_chatroom_manager_find() failed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.12.7:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.12.8:
  + bgo#705326: User help suggests "ignore SSL certificate errors"
    option for Jabber accounts "if you trust the server you are
    connecting to".
  + bgo#746100: goa-mc-plugin: Remove Facebook chat using Jabber.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429099200">- Update to version 3.12.9:
  + bgo#746612: Geoclue2 requires a DesktopId property.
  + bgo#747375, Fix a wrong header guard in
    libempathy-gtk/empathy-smiley-manager.h.
  + bgo#747170, Typo (messenging) in documentation.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.12.10:
  + bgo#741771: Preferences dialog expands to absurd width.
  + bgo#745504: Fix preferences with modern gtk+.
  + bgo#746841: Provide a scalable -symbolic variant of the app
    icon.
  + bgo#747460: Initial empathy accounts window is too wide.
  + Don't crash when running in Wayland.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444824000">- Update to version 3.12.11:
  + Fix opening contact list after launching empathy -h
    (bgo#729282).
  + Leak fixes for telepathy-accounts-widgets (bgo#752938).
  + Don't hard code the name of the pkg-config binary
    (bgo#755707).
  + Call the finish method only once (bgo#756165).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1451908800">- Add empathy-fix-icons-in-search-bar.patch: Fix the previous/next
  icons, patch from upstream git.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Add patches from upstream git to fix various issues:
  + empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch
  + empathy-Fix-a-critical-warning.patch
  + empathy-Don-t-call-XInitThreads-in-Wayland.patch
  + empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  + empathy-Add-a-missing-tag-to-the-AppData-file.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Add empathy-clutter-gst-3_0.patch: Port to clutter-gst-3.0.
- Replace pkgconfig(clutter-gst-2.0) for pkgconfig(clutter-gst-3.0)
  BuildRequires due to above port.
- Add libtool BuildRequires and pass autoreconf -fiv since above
  patch touches the buildsystem.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1463140800">- Update to version 3.12.12:
  + Fix pkg-config usage (bgo#761000).
  + The minimum value of an uint64_t is 0, not G_MININT32
    (bgo#762735).
  + Hardcoding #!/usr/bin/python is not portable (bgo#762737).
  + Fix -Werror build for clang (bgo#762738).
  + Add the Rizon IRC network to the list of IRC networks
    (bgo#764438).
  + GCC 5 generates a type-limits warning in
    tpaw-account-settings.c (bgo#765022).
  + Empathy uses deprecated webkit functions (bgo#765024).
  + Gnome-shell Wayland application tracking broken for Empathy
    (bgo#766285).
  + Empathy dumps core when running on Wayland compositor
    (bgo#708170).
  + Updated translations.
- Drop empathy-fix-icons-in-search-bar.patch,
  empathy-Don-t-crash-in-window_get_workspace-under-Wayland.patch,
  empathy-Fix-a-critical-warning.patch,
  empathy-Don-t-call-XInitThreads-in-Wayland.patch,
  empathy-Avoid-warning-spam-from-GtkStyleContext-with-GTK-3.20.patch
  and empathy-Add-a-missing-tag-to-the-AppData-file.patch, all
  fixed upstream.</changelog>
<changelog author="fcrozat@suse.com" date="1463486400">- Recommends geoclue2 now, empathy no longer uses geoclue.</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Add empathy-port-webkit2gkt3.patch: Port to webkit2gtk3
  (bgo#749001).
- Replace pkgconfig(webkitgtk-3.0) for pkgconfig(webkit2gtk-4.0)
  BuildRequries following above port.</changelog>
<changelog author="zaitor@opensuse.org" date="1489406400">- Update to version 3.12.13:
  + Fixes the GActions in EmpathyRosterWindow (bsc#999832).
  + Bugs fixed: bgo#685837, bgo#746735, bgo#756990, bgo#767516,
    bgo#768889.
  + Updated translations.</changelog>

</package>
<package pkgid="6ab3a5fe7a635e0ec726a59ebb219b982f87cf9d260c82b45634e616ea5d93d6" name="enigmail" arch="src">
    <version epoch="0" ver="1.9.8.3" rel="5.1"/>

<changelog author="wr@rosenauer.org" date="1405857600">- standalone enigmail 1.7 package previously built as part of
  MozillaThunderbird
  (since version 1.7 it's not required to build against Thunderbird
  sources anymore and compatibility to Thunderbird and SeaMonkey at
  the same time should be given)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 1.7.2 (bmo#893330)
  * bugfix release which contains several bugfixes including
    mail with only Bcc recipients sent in plain text
    (CVE-2014-5369)</changelog>
<changelog author="astieger@suse.com" date="1427371200">- enigmail 1.8.1:
  * Improved user interface for message composition
  * Simplified setup wizard
  * Possibility to permanently decrypt messages via filter rules
  * Improved support for PGP/MIME messages from GPGTools sent from
    MS Exchange Server
  * Many bugs fixed
  * last major version to support GnuPG 1.4.x
- packaging changes:
  * update upstream signing key
  * run unit tests during build
  * remove gpg-offline
  * run spec-cleaner
  * add upstream sourc URLs</changelog>
<changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
<changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
<changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
<changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
<changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
<changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
<changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
<changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
<changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
<changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
<changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
<changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
<changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
<changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>

</package>
<package pkgid="4422e7bfaa06423dd35c559ca34535b1288eb64f6dfe40818c40df83af61e396" name="enigmail" arch="src">
    <version epoch="0" ver="1.9.9" rel="9.1"/>

<changelog author="wr@rosenauer.org" date="1405857600">- standalone enigmail 1.7 package previously built as part of
  MozillaThunderbird
  (since version 1.7 it's not required to build against Thunderbird
  sources anymore and compatibility to Thunderbird and SeaMonkey at
  the same time should be given)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 1.7.2 (bmo#893330)
  * bugfix release which contains several bugfixes including
    mail with only Bcc recipients sent in plain text
    (CVE-2014-5369)</changelog>
<changelog author="astieger@suse.com" date="1427371200">- enigmail 1.8.1:
  * Improved user interface for message composition
  * Simplified setup wizard
  * Possibility to permanently decrypt messages via filter rules
  * Improved support for PGP/MIME messages from GPGTools sent from
    MS Exchange Server
  * Many bugs fixed
  * last major version to support GnuPG 1.4.x
- packaging changes:
  * update upstream signing key
  * run unit tests during build
  * remove gpg-offline
  * run spec-cleaner
  * add upstream sourc URLs</changelog>
<changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
<changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
<changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
<changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
<changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
<changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
<changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
<changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
<changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
<changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
<changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
<changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
<changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
<changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
<changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>

</package>
<package pkgid="1935675f0c28847a3b1b23138017d8137727df80e832a2619336529be6529fdc" name="enigmail" arch="x86_64">
    <version epoch="0" ver="1.9.8.3" rel="5.1"/>

<changelog author="wr@rosenauer.org" date="1405857600">- standalone enigmail 1.7 package previously built as part of
  MozillaThunderbird
  (since version 1.7 it's not required to build against Thunderbird
  sources anymore and compatibility to Thunderbird and SeaMonkey at
  the same time should be given)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 1.7.2 (bmo#893330)
  * bugfix release which contains several bugfixes including
    mail with only Bcc recipients sent in plain text
    (CVE-2014-5369)</changelog>
<changelog author="astieger@suse.com" date="1427371200">- enigmail 1.8.1:
  * Improved user interface for message composition
  * Simplified setup wizard
  * Possibility to permanently decrypt messages via filter rules
  * Improved support for PGP/MIME messages from GPGTools sent from
    MS Exchange Server
  * Many bugs fixed
  * last major version to support GnuPG 1.4.x
- packaging changes:
  * update upstream signing key
  * run unit tests during build
  * remove gpg-offline
  * run spec-cleaner
  * add upstream sourc URLs</changelog>
<changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
<changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
<changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
<changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
<changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
<changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
<changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
<changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
<changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
<changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
<changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
<changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
<changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
<changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>

</package>
<package pkgid="7293019e08c6e9a0439ec3ddb703d9bbf6ab16de400c1c7c9b8aff3368ffefcc" name="enigmail" arch="x86_64">
    <version epoch="0" ver="1.9.9" rel="9.1"/>

<changelog author="wr@rosenauer.org" date="1405857600">- standalone enigmail 1.7 package previously built as part of
  MozillaThunderbird
  (since version 1.7 it's not required to build against Thunderbird
  sources anymore and compatibility to Thunderbird and SeaMonkey at
  the same time should be given)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 1.7.2 (bmo#893330)
  * bugfix release which contains several bugfixes including
    mail with only Bcc recipients sent in plain text
    (CVE-2014-5369)</changelog>
<changelog author="astieger@suse.com" date="1427371200">- enigmail 1.8.1:
  * Improved user interface for message composition
  * Simplified setup wizard
  * Possibility to permanently decrypt messages via filter rules
  * Improved support for PGP/MIME messages from GPGTools sent from
    MS Exchange Server
  * Many bugs fixed
  * last major version to support GnuPG 1.4.x
- packaging changes:
  * update upstream signing key
  * run unit tests during build
  * remove gpg-offline
  * run spec-cleaner
  * add upstream sourc URLs</changelog>
<changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
<changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
<changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
<changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
<changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
<changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
<changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
<changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
<changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
<changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
<changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
<changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
<changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
<changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
<changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>

</package>
<package pkgid="2e7ae4b2cad6e4cdac0d0a22754fc8c7df992c5f7c431a2eb631b09162373814" name="enlightenment-theme-openSUSE" arch="noarch">
    <version epoch="0" ver="20170726" rel="3.1"/>

<changelog author="simon@simotek.net" date="1387713600">- update for e18 and elementary</changelog>
<changelog author="simon@simotek.net" date="1388577600">- 20131230
  - Fix LED color in IBox
  - Fixed folder icon to suite the theme better</changelog>
<changelog author="simon@simotek.net" date="1392724800">- conflicts with older e17 themes</changelog>
<changelog author="simon@simotek.net" date="1392984000">- Fix the mess that was branding</changelog>
<changelog author="simon@simotek.net" date="1393070400">- can't conflict with e17 themes as e17 needs it for terminology etc</changelog>
<changelog author="simon@simotek.net" date="1393156800">- don't require enlightenment, this is bad when the theme is only being used
  by elementary, especially if someone is trying to install e17</changelog>
<changelog author="simon@simotek.net" date="1402574400">- Update theme for elementary 1.10 (Also supports e19)</changelog>
<changelog author="simon@simotek.net" date="1410523200">- New theme for openSUSE 13.2, old theme will soon be in oliveleaf
  package
  Brings in changes for elementary 1.11 as well as some e19 fixes</changelog>
<changelog author="simon@simotek.net" date="1413028800">- Follow upstream in relicencing bsd theme code to lgpl2+,
    Note the build system is still BSD
- Fix incorrect spec file which only mentioned BSD licence
- Fix Init logo</changelog>
<changelog author="simon@simotek.net" date="1433937600">- At the recomendation of DimStar Obsolete but don't provide e17 themes</changelog>
<changelog author="simon@simotek.net" date="1445169600">- Updated colors / branding for leap
  Update to 1.15 upstream changes</changelog>
<changelog author="simon@simotek.net" date="1445515200">- Fix build script for factory, now using awk which is more robust</changelog>
<changelog author="simon@simotek.net" date="1445860800">- Add some debug for when it fails in staging</changelog>
<changelog author="simon@simotek.net" date="1448971200">- Finally have a version working on Factory again. 20151201</changelog>
<changelog author="simon@simotek.net" date="1449921600">- Minor fix to make the build file consistent 20151212</changelog>
<changelog author="simon@simotek.net" date="1450267200">- Minor Fix to terminology script shouldn't effect this 20151216</changelog>
<changelog author="sflees@suse.de" date="1467720000">- Update for e21 changes 20160705</changelog>
<changelog author="sflees@suse.de" date="1476964800">- Update to 20161020
  * Fixes incorrect clock color (due to upstream changes)</changelog>
<changelog author="sflees@suse.de" date="1500033600">- Create 20170714 mirrors 1.19/1.20 efl
  * fixes boo#1042287 missing text and others.</changelog>
<changelog author="sflees@suse.de" date="1501070400">- Fix regression in previous release borders boo#1050560</changelog>

</package>
<package pkgid="50b16f82e4efaf2db02a49c5ab90473a5ecc084c90b26f36b9af23144656e2b8" name="enlightenment-theme-openSUSE" arch="src">
    <version epoch="0" ver="20170726" rel="3.1"/>

<changelog author="simon@simotek.net" date="1387713600">- update for e18 and elementary</changelog>
<changelog author="simon@simotek.net" date="1388577600">- 20131230
  - Fix LED color in IBox
  - Fixed folder icon to suite the theme better</changelog>
<changelog author="simon@simotek.net" date="1392724800">- conflicts with older e17 themes</changelog>
<changelog author="simon@simotek.net" date="1392984000">- Fix the mess that was branding</changelog>
<changelog author="simon@simotek.net" date="1393070400">- can't conflict with e17 themes as e17 needs it for terminology etc</changelog>
<changelog author="simon@simotek.net" date="1393156800">- don't require enlightenment, this is bad when the theme is only being used
  by elementary, especially if someone is trying to install e17</changelog>
<changelog author="simon@simotek.net" date="1402574400">- Update theme for elementary 1.10 (Also supports e19)</changelog>
<changelog author="simon@simotek.net" date="1410523200">- New theme for openSUSE 13.2, old theme will soon be in oliveleaf
  package
  Brings in changes for elementary 1.11 as well as some e19 fixes</changelog>
<changelog author="simon@simotek.net" date="1413028800">- Follow upstream in relicencing bsd theme code to lgpl2+,
    Note the build system is still BSD
- Fix incorrect spec file which only mentioned BSD licence
- Fix Init logo</changelog>
<changelog author="simon@simotek.net" date="1433937600">- At the recomendation of DimStar Obsolete but don't provide e17 themes</changelog>
<changelog author="simon@simotek.net" date="1445169600">- Updated colors / branding for leap
  Update to 1.15 upstream changes</changelog>
<changelog author="simon@simotek.net" date="1445515200">- Fix build script for factory, now using awk which is more robust</changelog>
<changelog author="simon@simotek.net" date="1445860800">- Add some debug for when it fails in staging</changelog>
<changelog author="simon@simotek.net" date="1448971200">- Finally have a version working on Factory again. 20151201</changelog>
<changelog author="simon@simotek.net" date="1449921600">- Minor fix to make the build file consistent 20151212</changelog>
<changelog author="simon@simotek.net" date="1450267200">- Minor Fix to terminology script shouldn't effect this 20151216</changelog>
<changelog author="sflees@suse.de" date="1467720000">- Update for e21 changes 20160705</changelog>
<changelog author="sflees@suse.de" date="1476964800">- Update to 20161020
  * Fixes incorrect clock color (due to upstream changes)</changelog>
<changelog author="sflees@suse.de" date="1500033600">- Create 20170714 mirrors 1.19/1.20 efl
  * fixes boo#1042287 missing text and others.</changelog>
<changelog author="sflees@suse.de" date="1501070400">- Fix regression in previous release borders boo#1050560</changelog>

</package>
<package pkgid="6487b60e6e7e4157642af91283f6f486bfc853916c05bb22310942183bf1a08d" name="erlang" arch="src">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="4410499ed33c8c108292da816866e2d2115437ac1a12ef307cd7e6cc88d2c38f" name="erlang" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="9e6ea6be9e209a600af14d34837816683d1e725994a82d8125c26c3af38fbead" name="erlang-debugger" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="4792b33856230087031fd8eb4c6b876b29d13a6150f5a2731d9992b1acbf0a69" name="erlang-debugger-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="d70abaa697edb8239f3463306d3111c9a9be00b47600712209b16194e0d24b1e" name="erlang-dialyzer" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="97d5b75c827150e714763ca6b369369efedc4d5d60484e1a776a892163a0beee" name="erlang-dialyzer-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="2468ec8a6568893c8061b258c122196bc4f904a8456bbb92bb292d27f1c1e440" name="erlang-diameter" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="40cffde16a94461ffd924a25c2d1ebc521353e506c0eb0c013cc4332afc7b4f5" name="erlang-diameter-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="aecacda2fd1469d4c36747c731b2e62a498b6826c00d873a8911fb3a77396052" name="erlang-doc" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="f350fab4f2a4a407d91284192badfd7b1bf4147cf08f9c0df8cf552cef632991" name="erlang-epmd" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="a500b8e613d2dffac28ceb12a0c979fc8003a2c6b25a2337018add883ce5ae36" name="erlang-et" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="e9bc1f7a29a03543d95d5698a77a89adca6bb050b41f1feb9f163feb1d61ce77" name="erlang-et-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="0b2800ec1a9a28cb76ddc16c4e1305a5fba06d432c6f49516311618c469ec04c" name="erlang-gs" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="25da9b63b45d5ddbf25faefe380549812a37a8cdab4b152517110a0e9915d501" name="erlang-gs-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="8f519d5253bd90e6559fb7a6928c970d4ff817e92020a98bd5aeb56d30fe437a" name="erlang-jinterface" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="75759457037bce9604eda3ab54183578b22d9157c895f53e27c30319c510a3d0" name="erlang-jinterface-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="9bd7758a5995e120db3b220b9f3b949974383437689681c9ada82e9044f0eec0" name="erlang-observer" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="89ac423cc998ff651fcf9e971dc84391b625a4cb14537d1c8f23f0ef554a9d63" name="erlang-observer-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="3a83aea6aee01e28bd431a36f22c86bc89bf77f4e63a461638ba06404cd2526f" name="erlang-reltool" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="ac367e95ab8fd25198d108ec365b44d60730d56a9eb83a90e0109fabf5c209a9" name="erlang-reltool-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="00830364836a2f3fd9e87e70595504cfb529629d3be4cd124e58eada76b06c0e" name="erlang-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="c09ef5e382966f8f24145898f6ec87d697e3e802497c5989459d947b02c0cabe" name="erlang-wx" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="6288471ebb07f88ffa3e571b8dd70cc3ed1e19c84ce0ea1f565967e2fada4b47" name="erlang-wx-src" arch="x86_64">
    <version epoch="0" ver="18.3.4.7" rel="6.1"/>

<changelog author="kruber@zib.de" date="1440590400">- update to 18.0.3:
  * erts: Fixed a binary memory leak when printing to shell using
    the tty driver (i.e. not -oldshell).
  * erts: Fix a bug where the standard error port sometimes
    crashes with eagain as the reason.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1443528000">- Rework wxWidgets BuildRequire: fix build for Leap 42.1 (boo#967176)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1446120000">- Update to 18.1.3:
  * ssl: Add possibility to downgrade an SSL/TLS connection to a
    tcp connection, and give back the socket control to a user
    process.
  * ssh: The following new key exchange algorithms are
    implemented:'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384',
    'ecdh-sha2-nistp521','diffie-hellman-group14-sha1',
    'diffie-hellman-group-exchange-sha1' and
    'diffie-hellman-group-exchange-sha256'. This raises the
    security level considerably.
  * kernel,stdlib,sasl: A mechanism for limiting the amount of
    text that the built-in error logger events will produce has
    been introduced. It is useful for limiting both the size of
    log files and the CPU time used to produce them. This
    mechanism is experimental in the sense that it may be changed
    based on feedback. See config parameter
    error_logger_format_depth in the Kernel application.
- Removed erts_fix_unlock_status_lock.patch: fixed in upstream</changelog>
<changelog author="ro@suse.de" date="1450353600">- disable hipe on s390/s390x to fix build</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to 18.2.1:
  * Due to a bug in the handling of paths on windows
    none of the following would work with paths
    containing a space: ct_run dialyzer erlc escript typer
    This also contains a fix for HiPE enabled emulator for
    FreeBSD.
- Update to 18.2:
  * ssl: Add configurable upper limit for session
    cache.  erts: Add function enif_getenv to read OS
    environment variables in a portable way from NIFs.
  * kernel: Add {line_delim, byte()} option to
    inet:setopts/2 and  decode_packet/3
  * ssh: The 'ecdsa-sha2-nistp256',
    'ecdsa-sha2-nistp384' and 'ecdsa-sha2-nistp521'
    signature algorithms for ssh are implemented. See RFC5656.
  * ssh: The ssh:daemon option dh_gex_groups is
    extended to read a user provided ssh moduli file
    with generator-modulus pairs. The file is in openssh
    format.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1452600000">- Update to 18.2.2:
  * ssh: The authentication method 'keyboard-interactive' failed
    in the Erlang client when the server after successful
    authentication continued by asking for zero more
    passwords.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1454155200">- Update to 18.2.3:
  * inets: mod_alias now traverses all aliases picking
    the longest match and not the first match.</changelog>
<changelog author="kruber@zib.de" date="1458216000">- Update to 18.3:
  * New statistics info about runnable and active processes &amp;
    ports. Call erlang:statistics with:
    total_run_queue_lengths | run_queue_lengths | total_active_tasks
    | active_tasks.
  * Time warp improvements: dbg:p/2 and erlang:trace/3 with
    monotonic_timestamp |strict_monotonic_timestamp.
  * Introduced a validation callback for heart.
  * The module overload in sasl has been deprecated.
  * several bug fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1462276800">- Update to 18.3.2:
  * inets: Add environment information item peer_cert to mod_esi
  * ssl: Corrections to cipher suite handling using
    the 3 and 4 tuple format
  * ssl: Make values for the TLS-1.2 signature_algorithms
    extension configurable</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918400">- Update to 18.3.3:
  * common_test: The nodelay option used to be enabled (true) by
  default for sockets opened by the Common Test
    telnet client.
  * common_test: Fix bug in cth_surefire
  * common_test: The ct:get_timetrap_info/0 function has been
  updated to return more information about timetrap
    scaling.
  * common_test: A problem with stylesheet HTML tags getting
  incorrectly escaped by Common Test has been
    corrected.
  * common_test: The ct_run start flag -no_esc_chars and
  ct:run_test/1 start option {esc_chars,Bool} have
    been introduced.
  * inets: Put back unused module inets_regexp
  * ssl: Correct cipher suites conversion and gaurd expression.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1463918401">- Return diameter application: as for 18.3.3 it is distributed
  under APL license</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1466164800">- Update to 18.3.4:
  * inets: Handle multiple \t in mime types file
  * ssl: Correct ssl:prf/5 to use the negotiated cipher suite's prf
    function in ssl:prf/5 instead of the default prf.
  * ssl: Timeouts may have the value 0, guards have been corrected
    to allow this
  * ssl: Change of internal handling of hash sign pairs as the used
    one enforced to much restrictions making some valid
    combinations unavailable.
  * ssl: Create a little randomness in sending of session
    invalidation messages, to mitigate load when whole table is
    invalidated.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Do not suppress errors from useradd/groupadd
- Orthographic/typographical fixes</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102400">- Rebased patches:
  + crypto.patch (manually)
  + erlang-not-install-misc.patch (manually)
  + otp-R16B-rpath.patch (manually)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1469102401">- Update to 18.3.4.1:
  * ssh: SSH client does not any longer retry a bad password
    given as option to ssh:connect et al.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1471003200">- Update to 18.3.4.4:
  * erts: Fixed a race that could cause a lost wakeup of a process
    that timed out in a receive ... after. This bug was introduced
    in ERTS version 7.0.
  * erts: Fixed segfault after writing an erl crash dump.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1486036800">- Update to 18.3.4.5:
  * crypto: Key exchange algorithms
    diffie-hellman-group-exchange-sha* optimized, up to a factor of
    11 for the slowest ( = biggest and safest) one.
  * erts: A bug has been fixed where if erlang was started +B on a
    unix platform it would be killed by a SIGUSR2 signal when
    creating a crash dump.
  * erts: Calls to erl_drv_send_term() or erl_drv_output_term()
    from a non-scheduler thread while the corresponding port was
    invalid caused the emulator to enter an inconsistent state
    which eventually caused an emulator crash.
  * erts: Driver and NIF operations accessing processes or ports
    could cause an emulator crash when used from non-scheduler
    threads.
  * erts: Fix bug in binary_to_term for binaries created by
    term_to_binary with option compressed. The bug can cause badarg
    exception for a valid binary when Erlang VM is linked against a
    zlib library of version 1.2.9 or newer. Bug exists since OTP
    17.0.
  * inets: Shutdown gracefully on connection or TLS handshake
    errors
  * ssh: The key exchange algorithm
    diffie-hellman-group-exchange-sha* has a server-option
    {dh_gex_limits,{Min,Max}}. There was a hostkey signature
    validation error on the client side if the option was used and
    the Min or the Max differed fromthe corresponding values
    obtained from the client.
  * ssh: Key exchange algorithms diffie-hellman-group-exchange-sha*
    optimized, up to a factor of 11 for the slowest ( = biggest and
    safest) one.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1510920000">- Update to 18.3.4.6:
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * eldap: Misc building environment updates
  * erts: Fix performance bug in pre-allocators that could cause
    them to permanently fall back on normal more expensive memory
    allocation. Pre-allocators are used for quick allocation of
    short lived meta data used by messages and other scheduled
    tasks. Bug exists since OTP_R15B02.
  * erts: Fixed bug in operator bxor causing erroneuos result when
    one operand is a big *negative* integer with the lowest N*W
    bits as zero and the other operand not larger than N*W bits. N
    is an integer of 1 or larger and W is 32 or 64 depending on
    word size.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug.
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * ssh: Trailing white space was removed at end of the
    hello-string. This caused interoperability problems with some
    other ssh-implementations (e.g OpenSSH 7.3p1 on Solaris 11)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511438400">- Add 0001-Add-structure-for-mutual-recursion-detection-in-ePCR.patch
  0002-fix-find_fixedlen-stk-overflow-w-mutual-recursion.patch
  0003-Fix-heap-overflow-with-unmatched-closing-parens.patch:
  fix bno#1030062 (CVE-2016-10253)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1511697600">- Update to 18.3.4.7:
  * ssl: An erlang TLS server configured with cipher suites using
    rsa key exchange, may be vulnerable to ani Adaptive Chosen
    Ciphertext attack (AKA Bleichenbacheri attack) against RSA,
    which when exploited, may resulti in plaintext recovery of
    encrypted messages and/or ai Man-in-the-middle (MiTM) attack,
    despite the attackeri not having gained access to the server?s
    private key itself. CVE-2017-1000385
    Exploiting this vulnerability to perform plaintext recovery of
    encrypted messages will, in most practical cases, allow an
    attacker to read the plaintext only after the session has
    completed. Only TLS sessions established using RSA key exchange
    are vulnerable to this attack.
    Exploiting this vulnerability to conduct a MiTM attack requires
    the attacker to complete the initial attack, which may require
    thousands of server requests, during the handshake phase of the
    targeted session within the window of the configured handshake
    timeout. This attack may be conducted against any TLS session
    using RSA signatures, but only if cipher suites using RSA key
    exchange are also enabled on the server. The limited window of
    opportunity, limitations in bandwidth, and latency make this
    attack significantly more difficult to execute.
    RSA key exchange is enabled by default although least
    prioritized if server order is honored. For such a cipher suite
    to be chosen it must also be supported by the client and
    probably the only shared cipher suite.
    Captured TLS sessions encrypted with ephemeral cipher suites
    (DHE or ECDHE) are not at risk for subsequent decryption due to
    this vulnerability.</changelog>

</package>
<package pkgid="196aec1b0654558184ccd29a60d73c13e18f033e225a91eac79dd8cb420b5f6a" name="etags" arch="x86_64">
    <version epoch="0" ver="24.3" rel="28.1"/>

<changelog author="schwab@linux-m68k.org" date="1385121600">- emacs-24.3-glibc.patch, emacs-24.3.dif: Remove obsolete hunks
- emacs-24.3-xevent.patch: Remove obsolete patch
- Remove unknown configure option --without-sync-input</changelog>
<changelog author="werner@suse.de" date="1386072000">- Change emacs wrapper script to use new dbus-run-session tool to
  avoid hanging emacs on terminal mode due I/O conflict on stdin
  of both emacs and dbus-launch session (bnc#853082)</changelog>
<changelog author="werner@suse.de" date="1389787200">- Do not reassign S-left, S-right, S-up and S-down anymore (bnc#858430)</changelog>
<changelog author="schwab@linux-m68k.org" date="1390046400">- emacs-24.3-giflib5-interlace.patch: fix display of interlaced GIF images</changelog>
<changelog author="werner@suse.de" date="1393588800">- Adding coreutils to etags scriptlets requirements (bnc#865845)</changelog>
<changelog author="dmueller@suse.com" date="1398859200">- remove dependency on bind-devel (I don't see any usage of
  bind in the source, and I see no such dependency in packaging
  on other distros)</changelog>
<changelog author="werner@suse.de" date="1399550400">- Add the patches
    CVE-2014-3421.patch
    CVE-2014-3422.patch
    CVE-2014-3423.patch
    CVE-2014-3424.patch
  to avoid several unsecure usage of temporary files (bnc#876847)</changelog>
<changelog author="werner@suse.de" date="1399636800">- Modify emacs-24.3-giflib5-interlace.patch in such a way that
  it works with older giflibraries</changelog>
<changelog author="schwab@linux-m68k.org" date="1404043200">- Don't use outdated C standard</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Add Utility category to .desktop file.</changelog>
<changelog author="werner@suse.de" date="1441108800">- Allow both Xft and as fallback the old X font scheme (boo#943793)</changelog>
<changelog author="werner@suse.de" date="1447156800">- Do not enforce the usage of the glibc regular expression as the
  GNU emacs ctags program depends on the emacs version (bsc#953745).
  For this fix the patch emacs-24.3-glibc.patch and emacs-24.3.dif
  had been modified.</changelog>
<changelog author="werner@suse.de" date="1482321600">- Add patch emacs-24.3-execve.patch
  Assume POSIX 1003.1-1988 or later for execve (this fix bug
  boo#1013572 and maybe also boo#967260)</changelog>
<changelog author="werner@suse.de" date="1482408000">- Add patch emacs-24.3-unexelf.patch to make it build evene on PPC64LE</changelog>
<changelog author="werner@suse.de" date="1482408001">- Add patch emacs-24.3-gtk-3.10.patch that is a backport of the
  commit 3f4c6d5 to handle gtk3 stuff even for version less than
  3.10 and greater than 3.20 (bsc#1013849)</changelog>
<changelog author="werner@suse.de" date="1493121600">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
<changelog author="werner@suse.de" date="1493208001">- Fix small bug in emacs-24.3-gtk-3.10.patch which now allows
  to scroll even if keyboard is used (boo#1035645)</changelog>
<changelog author="werner@suse.de" date="1498651200">- Port change for boo#943793 back to SLES-12 (bsc#1044093)</changelog>
<changelog author="werner@suse.de" date="1505304000">- Add patch emacs-24.3-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>

</package>
<package pkgid="c225f0b587698a28d85265171a1cd77cc83f7a3a54624ea07034e92d29e00494" name="evince" arch="src">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="afbdf07a85778a0a8a5c0fe90010227839e55fc3816615cd1ff2195b9d7d4e53" name="evince" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="6625d789d0b6dc36e64a0738836ea282b3f91692b7f2872a9fb7b5d68ac41791" name="evince-browser-plugin" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="fcad8aabfeda43f05cff5869de71b5df75b7b2e09cfa99c32142ef55cd485761" name="evince-devel" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="2e1f54eedede6f501ff105f39c8930548b9734037b5bf364d4e8043fe8c302e3" name="evince-lang" arch="noarch">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="28beb1936a0d9d2929bb8c5f2731c26616b4a7a25d764eaa9c36385119c66ddd" name="evince-plugin-comicsdocument" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="289b810fa7945812ab9790db1bc58e74eb3b1778c5a8e1bf0f325662726ff7b0" name="evince-plugin-djvudocument" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="cf3e495e7bcce658211f8e11242a93a5a7e742dd9da03f1c1282cadd51dcfe25" name="evince-plugin-dvidocument" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="5d8ae0a3131db74842606852f3780a503b3f624de293facb8ad3bb6c5454e0f4" name="evince-plugin-pdfdocument" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="f9a13f867406ae607a13a059f7e516f31e929dbb2b98093ad4e89d1eea476b6a" name="evince-plugin-psdocument" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="9e5b257ae219918d68dcc030a6f7188886ac3ef941611c2ff39145ac3f71ff79" name="evince-plugin-tiffdocument" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="a2674feb991f56a7371670d48ef080750f8348dd4d63c2ea0e74f495224fe66b" name="evince-plugin-xpsdocument" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="91802474a7daef6e5c724c87fc16ec70473da4d1ea80cbc574fb10836755c4bc" name="exercism" arch="x86_64">
    <version epoch="0" ver="2.4.0+git20170324.41427fc" rel="3.1"/>

<changelog author="mamorales@suse.com" date="1467028800">- initial package</changelog>
<changelog author="mamorales@suse.com" date="1467201600">- add golang-github-exercism-cli-rpmlintrc as a source</changelog>
<changelog author="mamorales@suse.com" date="1471867200">- update to version 2.3.0</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481112001">- Update to version 2.3.0+git20160807.ca8a22e:
  * update codegangsta/urfave url
  * Update url for package cli from codegangsta/cli to urfave/cli
  * Update all reference of codegangsta/cli to urfave/cli
  * Add '--all' flag to 'fetch' command
  * Move FetchAll to method on *api.Client
  * Add test for client.FetchAll
  * Don't run command if API key is missing.
  * Update changelog
  * Bump version to v2.3.0
  * Update the CHANGELOG profile entries</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1490961600">- Update to version 2.4.0+git20170324.41427fc:
  * Add silent argument/option to the configure command to obfuscate output
  * iteration_test: change variable names to camelCase
  * api_test: fix assertion order
  * README.md: add comment about setting up local dev site
  * Replace Client with Interface
  * Display WhatNextInstructions from API when provided
  * Fix minor formatting issue in RELEASE doc
  * Bump version to v2.4.0</changelog>

</package>
<package pkgid="e2a30e23373ffad3da2a52d9401f6cfe25742084c710152c528551cefeed11fa" name="exim" arch="src">
    <version epoch="0" ver="4.86.2" rel="14.1"/>

<changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
<changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
<changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
<changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
<changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
<changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
<changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
<changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
<changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
<changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
<changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
<changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
<changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
<changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>

</package>
<package pkgid="f88aa5ddc3c73e9522df154c7980f18d503abbbd5529fc922d75c5cfe1ac383f" name="exim" arch="src">
    <version epoch="0" ver="4.86.2" rel="17.1"/>

<changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
<changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
<changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
<changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
<changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
<changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
<changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
<changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
<changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
<changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
<changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
<changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
<changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
<changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>

</package>
<package pkgid="a5e79e00eb729abdd16fa5e6c0b61c3e0f5b07a66a0dfe2bb0375ca6940e9cdb" name="exim" arch="x86_64">
    <version epoch="0" ver="4.86.2" rel="14.1"/>

<changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
<changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
<changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
<changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
<changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
<changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
<changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
<changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
<changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
<changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
<changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
<changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
<changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
<changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>

</package>
<package pkgid="476811fb26a580c2bccc742ee0e5ef32dec1372917c9f105ca7882d066d7f36d" name="exim" arch="x86_64">
    <version epoch="0" ver="4.86.2" rel="17.1"/>

<changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
<changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
<changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
<changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
<changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
<changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
<changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
<changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
<changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
<changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
<changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
<changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
<changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
<changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>

</package>
<package pkgid="a6e5ecbb7f06815a60fc0f3515e63e2cba388bb28d1eb09078f5b010a03d288c" name="eximon" arch="x86_64">
    <version epoch="0" ver="4.86.2" rel="14.1"/>

<changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
<changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
<changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
<changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
<changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
<changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
<changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
<changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
<changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
<changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
<changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
<changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
<changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
<changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>

</package>
<package pkgid="ad56c7ad560708aeef05a68ce45fb2a3bb17ee142e788abc739e18c7abdac0c8" name="eximon" arch="x86_64">
    <version epoch="0" ver="4.86.2" rel="17.1"/>

<changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
<changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
<changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
<changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
<changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
<changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
<changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
<changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
<changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
<changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
<changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
<changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
<changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
<changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>

</package>
<package pkgid="b9dc5db481b0eacf4d518a75ff9117efe9e5ceec86bcc906850a4230229dc95b" name="eximstats-html" arch="x86_64">
    <version epoch="0" ver="4.86.2" rel="14.1"/>

<changelog author="lmuelle@suse.com" date="1417003200">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
<changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
<changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
<changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
<changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
<changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
<changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
<changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
<changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
<changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
<changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
<changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
<changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
<changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>

</package>
<package pkgid="e9eb74afb08c762bd09fa4eeb6638570cc7dd66ffdb3d8a29a068c004ca9659d" name="eximstats-html" arch="x86_64">
    <version epoch="0" ver="4.86.2" rel="17.1"/>

<changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from exim.service file; (boo#935601).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163200">- Fix service file; (boo#935601)
- Using bcond for mysql, pgsql and ldap
- mysql, pgsql and ldap enabled by default</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1419163201">- Enable SPF</changelog>
<changelog author="lmuelle@suse.com" date="1422100800">- update to 4.85
  + When running the test suite, the README says that variables such as
    no_msglog_check are global and can be placed anywhere in a specific
    test's script, however it was observed that placement needed to be near
    the beginning for it to behave that way. Changed the runtest perl
    script to read through the entire script once to detect and set these
    variables, reset to the beginning of the script, and then run through
    the script parsing/test process like normal.
  + Expand the EXPERIMENTAL_TPDA feature.  Several different events now
    cause callback expansion.
  + Bugzilla 1518: Clarify "condition" processing in routers; that
    syntax errors in an expansion can be treated as a string instead of
    logging or causing an error, due to the internal use of bool_lax
    instead of bool when processing it.
  + Add EXPERIMENTAL_DANE, allowing for using the DNS as trust-anchor for
    server certificates when making smtp deliveries.
  + Support secondary-separator specifier for MX, SRV, TLSA lookups.
  + Add ${sort {list}{condition}{extractor}} expansion item.
  + Bugzilla 1216: Add -M (related messages) option to exigrep.
  + GitHub Issue 18: Adjust logic testing for true/false in redis lookups.
    Merged patch from Sebastian Wiedenroth.
  + Fix results-pipe from transport process.  Several recipients, combined
    with certificate use, exposed issues where response data items split
    over buffer boundaries were not parsed properly.  This eventually
    resulted in duplicates being sent.  This issue only became common enough
    to notice due to the introduction of conection certificate information,
    the item size being so much larger.  Found and fixed by Wolfgang Breyha.
  + Bug 1533: Fix truncation of items in headers_remove lists.  A fixed
    size buffer was used, resulting in syntax errors when an expansion
    exceeded it.
  + Add support for directories of certificates when compiled with a GnuTLS
    version 3.3.6 or later.
  + Rename the TPDA expermimental facility to Event Actions.  The #ifdef
    is EXPERIMENTAL_EVENT, the main-configuration and transport options
    both become "event_action", the variables become $event_name, $event_data
    and $event_defer_errno.  There is a new variable $verify_mode, usable in
    routers, transports and related events.  The tls:cert event is now also
    raised for inbound connections, if the main configuration event_action
    option is defined.
  + In test suite, disable OCSP for old versions of openssl which contained
    early OCSP support, but no stapling (appears to be less than 1.0.0).
  + When compiled with OpenSSL and EXPERIMENTAL_CERTNAMES, the checks on
    server certificate names available under the smtp transport option
    "tls_verify_cert_hostname" now do not permit multi-component wildcard
    matches.
  + Time-related extraction expansions from certificates now use the main
    option "timezone" setting for output formatting, and are consistent
    between OpenSSL and GnuTLS compilations.  Bug 1541.
  + Fix a crash in mime ACL when meeting a zero-length, quoted or RFC2047-
    encoded parameter in the incoming message.  Bug 1558.
  + Bug 1527: Autogrow buffer used in reading spool files.  Since they now
    include certificate info, eximon was claiming there were spoolfile
    syntax errors.
  + Bug 1521: Fix ldap lookup for single-attr request, multiple-attr return.
  + Log delivery-related information more consistently, using the sequence
    "H=&lt;name&gt; [&lt;ip&gt;]" wherever possible.
  + Bug 1547: Omit RFCs from release. Draft and RFCs have licenses which
    are problematic for Debian distribution, omit them from the release
    tarball.
  + Updates and fixes to the EXPERIMENTAL_DSN feature.
  + Fix string representation of time values on 64bit time_t anchitectures.
    Bug 1561.
  + Fix a null-indirection in certextract expansions when a nondefault
    output list separator was used.</changelog>
<changelog author="lmuelle@suse.com" date="1422100801">- Let ld know the path to mysqlclient.</changelog>
<changelog author="lmuelle@suse.com" date="1422100802">- Drop BuildRequires xorg-x11-server-sdk for non SUSE systems in particular to
  build on RHEL 6 again.</changelog>
<changelog author="lmuelle@suse.com" date="1422100803">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
<changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
<changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
<changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
<changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
<changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
<changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage ((bsc#1015930)</changelog>
<changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
<changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
<changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>

</package>
<package pkgid="166053bb7a21a729acb4cdedf29a24f058bb7d1ec877f95b9ac7391545211990" name="exiv2" arch="src">
    <version epoch="0" ver="0.25" rel="10.1"/>

<changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
<changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
<changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
<changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
<changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
<changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
<changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
<changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
<changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
<changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
<changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
<changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
<changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
<changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
<changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
<changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
<changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>

</package>
<package pkgid="e0cd38c4ce83a4669fc07b819fcc138f90404d9c09dc7f80a82ec0ae091c4906" name="exiv2" arch="x86_64">
    <version epoch="0" ver="0.25" rel="10.1"/>

<changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
<changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
<changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
<changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
<changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
<changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
<changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
<changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
<changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
<changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
<changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
<changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
<changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
<changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
<changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
<changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
<changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>

</package>
<package pkgid="2c673dd3c69f8f928d19af8538e742c7e799c6ebb9f354c75888274293d9e473" name="exiv2-lang" arch="noarch">
    <version epoch="0" ver="0.25" rel="10.1"/>

<changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
<changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
<changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
<changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
<changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
<changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
<changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
<changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
<changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
<changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
<changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
<changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
<changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
<changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
<changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
<changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
<changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>

</package>
<package pkgid="fc559a51a50c334e0048941a23171c259ecb6bdbcbe311e338da5028db799ce7" name="expat" arch="src">
    <version epoch="0" ver="2.1.0" rel="24.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as a source</changelog>
<changelog author="prusnak@suse.cz" date="1262952000">- fix CVE-2009-3560.patch [bnc#566434]</changelog>
<changelog author="prusnak@opensuse.org" date="1298635200">- fix license (MIT) in spec file</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add libexpat-devel to baselibs</changelog>
<changelog author="crrodriguez@opensuse.org" date="1319976000">- Hide non public symbols reusing existing win32 API export/imports
- annotate malloc/realloc-like functions with attribute alloc_size
  to catch possible misuses in calling code.</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="crrodriguez@opensuse.org" date="1329048000">- Put libraries back to %{_libdir}, /usr merge project</changelog>
<changelog author="tabraham@novell.com" date="1331035200">- update to 2.1.0 beta
  * refreshed expat-visibility.patch
  * removed obsolete expat-CVE-2009-3560.patch
  * removed obsolete expat-CVE-2009-2625.patch
  - hash table DOS attack fix
  - accumulated bug fixes and some changes to the build system
  - new conditional feature to make byte offsets for attributes
    and attribute names available</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- update to 2.1.0
  - Bug Fixes:
    [#1742315]: Harmful XML_ParserCreateNS suggestion.
    [#2895533]: CVE-2012-1147 - Resource leak in readfilemap.c.
    [#1785430]: Expat build fails on linux-amd64 with gcc version&gt;=4.1 -O3.
    [#1983953], 2517952, 2517962, 2649838:
    Build modifications using autoreconf instead of buildconf.sh.
    [#2815947], #2884086: OBJEXT and EXEEXT support while building.
    [#1990430]: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
    [#2517938]: xmlwf should return non-zero exit status if not well-formed.
    [#2517946]: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
    [#2855609]: Dangling positionPtr after error.
    [#2894085]: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
    [#2958794]: CVE-2012-1148 - Memory leak in poolGrow.
    [#2990652]: CMake support.
    [#3010819]: UNEXPECTED_STATE with a trailing "%" in entity value.
    [#3206497]: Unitialized memory returned from XML_Parse.
    [#3287849]: make check fails on mingw-w64.
    [#3496608]: CVE-2012-0876 - Hash DOS attack.
  - Patches:
    [#1749198]: pkg-config support.
    [#3010222]: Fix for bug #3010819.
    [#3312568]: CMake support.
    [#3446384]: Report byte offsets for attr names and values.
  - New Features / API changes:
  * Added new API member XML_SetHashSalt() that allows setting an
    intial value (salt) for hash calculations. This is part of the
    fix for bug #3496608 to randomize hash parameters.
  * When compiled with XML_ATTR_INFO defined, adds new API member
    XML_GetAttributeInfo() that allows retrieving the byte
    offsets for attribute names and values (patch #3446384).
  * Added CMake build system.  See bug #2990652 and patch #3312568.
  * Added run-benchmark target to Makefile.in - relies on testdata
    module present in the same relative location as in the repository.</changelog>
<changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
<changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
<changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
<changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
<changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="kstreitova@suse.com" date="1462968000">- add expat-2.1.0-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="kstreitova@suse.com" date="1463486400">- add expat-2.1.0-heap_buffer_overflow.patch to fix multiple
  integer overflows [bnc#980391], [CVE-2015-1283]
- fix some issues with the current version of the
  expat-2.1.0-parser_crashes_on_malformed_input.patch
  [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="tchvatal@suse.com" date="1486036800">- Add patch to fix bnc#983216 and bnc#983215 CVE-2012-6702 CVE-2016-5300
  * expat-2.1.1-CVE-2012-6702.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501675200">- Security fix [bsc#1047236, CVE-2017-9233]
  * External Entity Vulnerability in Expat 2.2.0 And Earlier
  * Added patch expat-CVE-2017-9233.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501761600">- Security fix [bsc#1047240, CVE-2016-9063]
  * Possible integer overflow in XML_Parse
  * Added patch expat-2.1.0-CVE-2016-9063.patch</changelog>

</package>
<package pkgid="864be36f3524ad72344c7e8838dbfa00dc68413f98631c63bba5c99d046b4d0d" name="expat" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="24.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as a source</changelog>
<changelog author="prusnak@suse.cz" date="1262952000">- fix CVE-2009-3560.patch [bnc#566434]</changelog>
<changelog author="prusnak@opensuse.org" date="1298635200">- fix license (MIT) in spec file</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add libexpat-devel to baselibs</changelog>
<changelog author="crrodriguez@opensuse.org" date="1319976000">- Hide non public symbols reusing existing win32 API export/imports
- annotate malloc/realloc-like functions with attribute alloc_size
  to catch possible misuses in calling code.</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="crrodriguez@opensuse.org" date="1329048000">- Put libraries back to %{_libdir}, /usr merge project</changelog>
<changelog author="tabraham@novell.com" date="1331035200">- update to 2.1.0 beta
  * refreshed expat-visibility.patch
  * removed obsolete expat-CVE-2009-3560.patch
  * removed obsolete expat-CVE-2009-2625.patch
  - hash table DOS attack fix
  - accumulated bug fixes and some changes to the build system
  - new conditional feature to make byte offsets for attributes
    and attribute names available</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- update to 2.1.0
  - Bug Fixes:
    [#1742315]: Harmful XML_ParserCreateNS suggestion.
    [#2895533]: CVE-2012-1147 - Resource leak in readfilemap.c.
    [#1785430]: Expat build fails on linux-amd64 with gcc version&gt;=4.1 -O3.
    [#1983953], 2517952, 2517962, 2649838:
    Build modifications using autoreconf instead of buildconf.sh.
    [#2815947], #2884086: OBJEXT and EXEEXT support while building.
    [#1990430]: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
    [#2517938]: xmlwf should return non-zero exit status if not well-formed.
    [#2517946]: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
    [#2855609]: Dangling positionPtr after error.
    [#2894085]: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
    [#2958794]: CVE-2012-1148 - Memory leak in poolGrow.
    [#2990652]: CMake support.
    [#3010819]: UNEXPECTED_STATE with a trailing "%" in entity value.
    [#3206497]: Unitialized memory returned from XML_Parse.
    [#3287849]: make check fails on mingw-w64.
    [#3496608]: CVE-2012-0876 - Hash DOS attack.
  - Patches:
    [#1749198]: pkg-config support.
    [#3010222]: Fix for bug #3010819.
    [#3312568]: CMake support.
    [#3446384]: Report byte offsets for attr names and values.
  - New Features / API changes:
  * Added new API member XML_SetHashSalt() that allows setting an
    intial value (salt) for hash calculations. This is part of the
    fix for bug #3496608 to randomize hash parameters.
  * When compiled with XML_ATTR_INFO defined, adds new API member
    XML_GetAttributeInfo() that allows retrieving the byte
    offsets for attribute names and values (patch #3446384).
  * Added CMake build system.  See bug #2990652 and patch #3312568.
  * Added run-benchmark target to Makefile.in - relies on testdata
    module present in the same relative location as in the repository.</changelog>
<changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
<changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
<changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
<changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
<changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="kstreitova@suse.com" date="1462968000">- add expat-2.1.0-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="kstreitova@suse.com" date="1463486400">- add expat-2.1.0-heap_buffer_overflow.patch to fix multiple
  integer overflows [bnc#980391], [CVE-2015-1283]
- fix some issues with the current version of the
  expat-2.1.0-parser_crashes_on_malformed_input.patch
  [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="tchvatal@suse.com" date="1486036800">- Add patch to fix bnc#983216 and bnc#983215 CVE-2012-6702 CVE-2016-5300
  * expat-2.1.1-CVE-2012-6702.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501675200">- Security fix [bsc#1047236, CVE-2017-9233]
  * External Entity Vulnerability in Expat 2.2.0 And Earlier
  * Added patch expat-CVE-2017-9233.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501761600">- Security fix [bsc#1047240, CVE-2016-9063]
  * Possible integer overflow in XML_Parse
  * Added patch expat-2.1.0-CVE-2016-9063.patch</changelog>

</package>
<package pkgid="c17d7c45098f890598bd7c2100fa4b64c28c18e77fd3e04acf106a2b8c65d6b2" name="fate" arch="src">
    <version epoch="0" ver="1.6.0.2" rel="26.1"/>

<changelog author="joachim@suse.de" date="1450353600">- update to version 1.5.5.1
  which fixes BSC#957386
  points to bugzilla.suse.com instead of bugs.kde.or</changelog>
<changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
<changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
<changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
<changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
<changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
<changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
<changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
<changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
<changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
<changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
<changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
<changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
<changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
<changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
<changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
<changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
<changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
<changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
<changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>

</package>
<package pkgid="e22a9796ecad21bdf4a3fce2500863949df31bd09d5814421c73b277054c5b8b" name="fate" arch="src">
    <version epoch="0" ver="1.6.0.3" rel="29.1"/>

<changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
<changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
<changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
<changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
<changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
<changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
<changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
<changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
<changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
<changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
<changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
<changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
<changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
<changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
<changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
<changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
<changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
<changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
<changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
<changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>

</package>
<package pkgid="b350852a592724a2d7b4cff5d9c8dbe25f3aae93a3e13c2497b26a6e947a3a35" name="fate" arch="x86_64">
    <version epoch="0" ver="1.6.0.2" rel="26.1"/>

<changelog author="joachim@suse.de" date="1450353600">- update to version 1.5.5.1
  which fixes BSC#957386
  points to bugzilla.suse.com instead of bugs.kde.or</changelog>
<changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
<changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
<changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
<changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
<changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
<changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
<changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
<changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
<changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
<changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
<changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
<changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
<changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
<changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
<changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
<changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
<changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
<changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
<changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>

</package>
<package pkgid="7ce4abb7463ad557c77d0b7bf37d7d713d5f00927e0103d77c109afe3a9e8475" name="fate" arch="x86_64">
    <version epoch="0" ver="1.6.0.3" rel="29.1"/>

<changelog author="jplack@suse.de" date="1455019200">- update to version 1.5.5.2
- add new build dep to build with newer libboost v1.60+
- fixes BSC#962053, #964836</changelog>
<changelog author="joachim@suse.de" date="1456401600">- update to version 1.5.5.3
  * replace splitter by scrollbars in simpleeditor&amp;ecoeditor
  * give more space for labels in VerticalPage
  * eco editor: move long labels to be tool tips and give short labels instead
  * add optional toolTip to RichTextEditors in VerticalPage
  * implement ListEdit::sizeHint()
  * richtexteditor: fix/adjust layout
  * prioritytable: fix/adjust layout
  * prioritytable: make sure requester prio is not editable</changelog>
<changelog author="joachim@suse.de" date="1456488000">- update to version 1.5.5.4
  * prioritytable: reenable editing of requester prio by himself</changelog>
<changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
<changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
<changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
<changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
<changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
<changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
<changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
<changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
<changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
<changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
<changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
<changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
<changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
<changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
<changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
<changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
<changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>

</package>
<package pkgid="82a4f4b36085cc1b57cb8508a50383de85ffd217184c45e2aff7b619fa2ed66e" name="fetchmsttfonts" arch="noarch">
    <version epoch="0" ver="11.4" rel="23.1"/>

<changelog author="meissner@suse.de" date="1255435200">- fixed to use new sourceforge download URLs. bnc#533112, bnc#546461</changelog>
<changelog author="dmueller@suse.de" date="1276862400">- bump version to 11.3</changelog>
<changelog author="dmueller@suse.de" date="1279022400">- submission for 11.3 (bnc#621540)</changelog>
<changelog author="meissner@suse.de" date="1299672000">- 11.4 submission</changelog>
<changelog author="meissner@suse.de" date="1312804800">- Add COPYING file bnc#656777</changelog>
<changelog author="jdelvare@suse.de" date="1319025600">- Drop references to legacy package agfa-fonts.
- Properly reference all files and directories so that they are
  deleted on package removal.</changelog>
<changelog author="meissner@suse.de" date="1323432000">- post (and display) EULA.html to text as post-install message.</changelog>
<changelog author="meissner@suse.com" date="1348056000">- /etc/sysconfig/proxy could be missing bnc#777151</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416052800">- fix bashisms in fetchmsttfonts.sh script</changelog>
<changelog author="meissner@suse.com" date="1431345600">- remove voxel from server list (gone) bsc#930338</changelog>
<changelog author="astieger@suse.com" date="1449748800">- verify md5 and sha1 checksums (sourced from upstream),
  SHA-512 checksums (generated locally) boo#958651
- no longer download the Andale file twice
- update license text for new FSF address</changelog>
<changelog author="9@cirno.systems" date="1502452800">- Remove unnecessary BuildRequires
- Refactor download script (bsc#1057119)
  * Use sf.net automatic mirror selection
  * Remove proxy settings code as it is already applied as part of
    openSUSE?s default /etc/profile.sh
  * Fix some issues pointed out by shellcheck</changelog>

</package>
<package pkgid="d4a8dd92e630c98c2c470ffdc867b03e239c66c313acb0ae819e41aacd20acdd" name="fetchmsttfonts" arch="src">
    <version epoch="0" ver="11.4" rel="23.1"/>

<changelog author="meissner@suse.de" date="1214308800">- initial package
  - included fetchmsttfonts.sh script from 10.3</changelog>
<changelog author="dmueller@suse.de" date="1227873600">- update for 11.1
  * add eula to package</changelog>
<changelog author="meissner@suse.de" date="1227873601">- reviewed and adjusted server list. Some servers no longer
  carried the fonts.</changelog>
<changelog author="coolo@suse.de" date="1228046400">- according to my test case, it works if there is no provides/obsoletes
  to the old name</changelog>
<changelog author="ro@suse.de" date="1228132800">- insert newline after macro to help macro expansion ...</changelog>
<changelog author="meissner@suse.de" date="1228478400">- require coreutils (for /usr/bin/id) and fonts-config
  for minimal builds. bnc#456795</changelog>
<changelog author="meissner@suse.de" date="1229515200">- exit 0 when we are running non-chrooted (oS 11.1 bug in some
  installation methods) bnc#456795</changelog>
<changelog author="meissner@suse.de" date="1233144000">- %ghost the font files so they get removed on -e
- run font-config on %postun (for removal), buildrequire it and
  freetype2 for it.</changelog>
<changelog author="meissner@suse.de" date="1255435200">- fixed to use new sourceforge download URLs. bnc#533112, bnc#546461</changelog>
<changelog author="dmueller@suse.de" date="1276862400">- bump version to 11.3</changelog>
<changelog author="dmueller@suse.de" date="1279022400">- submission for 11.3 (bnc#621540)</changelog>
<changelog author="meissner@suse.de" date="1299672000">- 11.4 submission</changelog>
<changelog author="meissner@suse.de" date="1312804800">- Add COPYING file bnc#656777</changelog>
<changelog author="jdelvare@suse.de" date="1319025600">- Drop references to legacy package agfa-fonts.
- Properly reference all files and directories so that they are
  deleted on package removal.</changelog>
<changelog author="meissner@suse.de" date="1323432000">- post (and display) EULA.html to text as post-install message.</changelog>
<changelog author="meissner@suse.com" date="1348056000">- /etc/sysconfig/proxy could be missing bnc#777151</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416052800">- fix bashisms in fetchmsttfonts.sh script</changelog>
<changelog author="meissner@suse.com" date="1431345600">- remove voxel from server list (gone) bsc#930338</changelog>
<changelog author="astieger@suse.com" date="1449748800">- verify md5 and sha1 checksums (sourced from upstream),
  SHA-512 checksums (generated locally) boo#958651
- no longer download the Andale file twice
- update license text for new FSF address</changelog>
<changelog author="9@cirno.systems" date="1502452800">- Remove unnecessary BuildRequires
- Refactor download script (bsc#1057119)
  * Use sf.net automatic mirror selection
  * Remove proxy settings code as it is already applied as part of
    openSUSE?s default /etc/profile.sh
  * Fix some issues pointed out by shellcheck</changelog>

</package>
<package pkgid="ce8374e1739f9ee324ef9aadf7302c3136fdf2d7e3b16506b1bb3b0a0cc42562" name="ffmpeg" arch="src">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="e84ed1f7fae19d5c2216e3bde3890e81901716a0562ba7367e472f5bb9c748b4" name="ffmpeg" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="675233c09f038d78613758bc8dcae12e1820fd0b6ade20be837ba3c8914bd0fc" name="ffmpeg2" arch="src">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="a46ee0391218006de50c7c5956162d41752c1be520fa4f70ccea11c56622e37d" name="ffmpeg2-devel" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="63868438bf8142f7670ae07f9758e7e74fbeb797e7d80bacf7eae1f28b64e609" name="file" arch="src">
    <version epoch="0" ver="5.22" rel="10.1"/>

<changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>

</package>
<package pkgid="294fd970989e6b1a0c22e9f766b1923b1f0f3e3f3829c42d53d16e6e98d4a927" name="file" arch="src">
    <version epoch="0" ver="5.22" rel="13.1"/>

<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
<changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>

</package>
<package pkgid="e619f225b365a57fe14b435827e47fffce7f3ca193058f69c20f4e802f2a4c1d" name="file" arch="x86_64">
    <version epoch="0" ver="5.22" rel="10.1"/>

<changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>

</package>
<package pkgid="7b78407533759f9a67c9831eaffc0f5a3ca8c2f9f63a3aa3a601838293444789" name="file" arch="x86_64">
    <version epoch="0" ver="5.22" rel="13.1"/>

<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
<changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>

</package>
<package pkgid="e876c2fa49f9bfeacf1e7e74f6c5ec8d83b4b476858fc7deddf4cb0e56e63708" name="file-devel" arch="x86_64">
    <version epoch="0" ver="5.22" rel="10.1"/>

<changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>

</package>
<package pkgid="a65d11cd6c01740ed3d0fc72ab0e04b6f328847534430239991f7408d95a3dae" name="file-devel" arch="x86_64">
    <version epoch="0" ver="5.22" rel="13.1"/>

<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
<changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>

</package>
<package pkgid="b01ab8d5a67f3d15b93c2b9420fb7631d495ae9b895150689c92b9d596072739" name="file-magic" arch="x86_64">
    <version epoch="0" ver="5.22" rel="10.1"/>

<changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>

</package>
<package pkgid="13a0a828a95786c1e063a94548151c66cc659ebcda913e9f9715f5c5128c160d" name="file-magic" arch="x86_64">
    <version epoch="0" ver="5.22" rel="13.1"/>

<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
<changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>

</package>
<package pkgid="4e6bfc8a7cb2f9e5fdb4a46545d14c80d5d3ef79da34832621c0f7999fb2667f" name="fossil" arch="src">
    <version epoch="0" ver="2.3" rel="3.1"/>

<changelog author="dmacvicar@novell.com" date="1283947200">- initial package based on version 20100823222416</changelog>
<changelog author="prusnak@opensuse.org" date="1285675200">- updated to 20100918155143</changelog>
<changelog author="jw@novell.com" date="1301832000">- updated to 20110316111914
  The changelog from upstream is huge
  http://www.fossil-scm.org/index.html/timeline
  has ca. 600 checkins since 2010-09</changelog>
<changelog author="prusnak@opensuse.org" date="1306929600">- updated to 20110528185122
  - see changelog at http://www.fossil-scm.org/index.html/timeline</changelog>
<changelog author="max@suse.com" date="1353585600">- Update to version 1.24 and change the versioning scheme from
  time stamp to upstream version number. This shouldn't be a
  problem, because fossil never was on Factory or any release.</changelog>
<changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
<changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
<changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
<changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
<changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
<changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
<changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
<changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
<changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
<changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
<changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
<changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
<changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>

</package>
<package pkgid="b5e9ada15d58e82d533fc8a4bfa71ddc1ca9ff7314cbe9c2235745b82322a4e9" name="fossil" arch="src">
    <version epoch="0" ver="2.4" rel="6.1"/>

<changelog author="dmacvicar@novell.com" date="1283947200">- initial package based on version 20100823222416</changelog>
<changelog author="prusnak@opensuse.org" date="1285675200">- updated to 20100918155143</changelog>
<changelog author="jw@novell.com" date="1301832000">- updated to 20110316111914
  The changelog from upstream is huge
  http://www.fossil-scm.org/index.html/timeline
  has ca. 600 checkins since 2010-09</changelog>
<changelog author="prusnak@opensuse.org" date="1306929600">- updated to 20110528185122
  - see changelog at http://www.fossil-scm.org/index.html/timeline</changelog>
<changelog author="max@suse.com" date="1353585600">- Update to version 1.24 and change the versioning scheme from
  time stamp to upstream version number. This shouldn't be a
  problem, because fossil never was on Factory or any release.</changelog>
<changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
<changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
<changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
<changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
<changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
<changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
<changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
<changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
<changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
<changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
<changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
<changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
<changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
<changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>

</package>
<package pkgid="bd8b22fe2058209393f55f5d749327eb2d727bc10bda8bebbb76089be2b6ada3" name="fossil" arch="x86_64">
    <version epoch="0" ver="2.3" rel="3.1"/>

<changelog author="dmacvicar@novell.com" date="1283947200">- initial package based on version 20100823222416</changelog>
<changelog author="prusnak@opensuse.org" date="1285675200">- updated to 20100918155143</changelog>
<changelog author="jw@novell.com" date="1301832000">- updated to 20110316111914
  The changelog from upstream is huge
  http://www.fossil-scm.org/index.html/timeline
  has ca. 600 checkins since 2010-09</changelog>
<changelog author="prusnak@opensuse.org" date="1306929600">- updated to 20110528185122
  - see changelog at http://www.fossil-scm.org/index.html/timeline</changelog>
<changelog author="max@suse.com" date="1353585600">- Update to version 1.24 and change the versioning scheme from
  time stamp to upstream version number. This shouldn't be a
  problem, because fossil never was on Factory or any release.</changelog>
<changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
<changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
<changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
<changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
<changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
<changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
<changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
<changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
<changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
<changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
<changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
<changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
<changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>

</package>
<package pkgid="9b35de901da8d1907e7665e5006aff088ce17693e313f47af75cf7a626dedbc5" name="fossil" arch="x86_64">
    <version epoch="0" ver="2.4" rel="6.1"/>

<changelog author="dmacvicar@novell.com" date="1283947200">- initial package based on version 20100823222416</changelog>
<changelog author="prusnak@opensuse.org" date="1285675200">- updated to 20100918155143</changelog>
<changelog author="jw@novell.com" date="1301832000">- updated to 20110316111914
  The changelog from upstream is huge
  http://www.fossil-scm.org/index.html/timeline
  has ca. 600 checkins since 2010-09</changelog>
<changelog author="prusnak@opensuse.org" date="1306929600">- updated to 20110528185122
  - see changelog at http://www.fossil-scm.org/index.html/timeline</changelog>
<changelog author="max@suse.com" date="1353585600">- Update to version 1.24 and change the versioning scheme from
  time stamp to upstream version number. This shouldn't be a
  problem, because fossil never was on Factory or any release.</changelog>
<changelog author="mmeister@suse.com" date="1361188800">- Update to Version 1.25
  * Timeline Nodes in the ui selectable to diff between two nodes.
  * Added and enhanced a few commands and options.
  * Added a few JavaScripts to the web ui.</changelog>
<changelog author="max@suse.com" date="1381838400">- Update to Version 1.27
  * Enhance the fossil changes, fossil clean, fossil extras,
    fossil ls and fossil status commands to restrict operation to
    files and directories named on the command-line.
  * New --integrate option to fossil merge, which automatically
    closes the merged branch when committing.
  * Renamed /stats_report page to /reports. Graph width is now
    relative, not absolute.
  * Added yw=YYYY-WW (year-week) filter to timeline to limit the
    results to a specific year and calendar week number,
    e.g. /timeline?yw=2013-01.
  * Updates to SQLite to prevent opening a repository file using
    file descriptors 1 or 2 on unix. This fixes a bug under which
    an assertion failure could overwrite part of a repository
    database file, corrupting it.
  * Added support for unlimited line lengths in side-by-side
    diffs.
  * New --close option to fossil commit, which immediately closes
    the branch being committed.
  * Added chart option to fossil bisect.
  * Improvements to the "human or bot?" determination.
  * Reports errors about missing CGI-standard environment
    variables for HTTP servers which do not support them.
  * Added --scgi option to fossil server.
  * Internal improvements to the sync process.
  * The internals of the JSON API are now MIT-licensed, so
    downstream users/packagers are no longer affected by the "do
    no evil" license clause.
  * The argument to the --port option for the "fossil ui" and
    "fossil server" commands can take an IP address in addition to
    the port number, causing Fossil to bind to just that one IP
    address.
  * After prompting for a password, also ask if that password
    should be remembered.
  * Performance improvements to the diff engine.
  * Fix the side-by-side diff engine to work better with
    multi-byte unicode text.
  * Color-coding in the web-based annotation (blame) display. Fix
    the annotation engine so that it is no longer confused by
    time-warps.
  * The markdown formatter is now available by default and can be
    used for tickets, wiki, and embedded documentation.
  * Add subcommands "fossil bisect log" and "fossil bisect status"
    to the "fossil bisect" command, as well as other bisect
    enhancements.
  * Enhanced defenses that prevent spiders from using excessive
    CPU and bandwidth.
  * Consistent use of the -n or --dry-run command line options.
  * Enhancements to /timeline.rss, adding more flags for filtering
    results, including the ability to subscribe to changes made to
    individual tickets.
  * Improved handling of the differences between case-sensitive
    and case-insensitive filesystems.
  * JSON API: added the 'status' command to report local checkout
    status.
  * Fixes to the --args support and documented this feature in the
    help.
  * Added /stats_report page.
  * Added ym=YYYY-MM filter to the "/timeline" url.
  * Fixed: config reset now re-installs default ticket report
    format.
  * ssh:// and file:// protocols now ignore proxy settings.
  * Added /hash-color-test web page.
  * Cherry-pick merges are recorded internally (though no yet
    displayed on the timeline graph.)
  * Bring in the latest versions of SQLite, zlib, and autosetup
    from upstream.</changelog>
<changelog author="max@suse.de" date="1400760000">- Update to version 1.28:
  * Enhance /reports to support event type filtering.
  * When cloning a repository, the user name passed via the URL
    (if any) is now used as the default local admin user's name.
  * Enhance the SSH transport mechanism so that it runs a single
    instance of the "fossil" executable on the remote side,
    obviating the need for a shell on the remote side. Some users
    may need to add the "?fossil=/path/to/fossil" query parameter
    to "ssh:" URIs if their fossil binary is not in a standard
    place.
  * Add the "fossil blame" command that works just like "fossil
    annotate" but uses a different output format that includes the
    user who made each changes and omits line numbers.
  * Add the "Tarball and ZIP-archive Prefix" configuration
    parameter under Admin/Configuration.
  * Fix CGI processing so that it works on web servers that do not
    supply REQUEST_URI.
  * Add options --dirsonly, --emptydirs, and --allckouts to the
    "fossil clean" command.
  * Ten-fold performance improvement in large "fossil blame" or
    "fossil annotate" commands.
  * Add option -W|--width and --offset to "fossil timeline" and
    "fossil finfo" commands.
  * Option -n|--limit of "fossil timeline" now specifies the
    number of entries, just like all other commands which have the
  - n|--limit option. The various timeline-related functions now
    output "--- ?? limit (??) reached ---" at the end whenever
    appropriate. Use "-n 0" if no limit is desired.
  * Fix handling of password embedded in Fossil URL.
  * New --once option to fossil clone command which does not store
    the URL or password when cloning.
  * Modify fossil ui to respect "default user" in an open
    repository.
  * Fossil now hides check-ins that have the "hidden" tag in
    timeline webpages.
  * Enhance /ci_edit page to add the "hidden" tag to check-ins.
  * Advanced possibilities for commit and ticket change
    notifications over http using TH1 scripting.
  * Add --sha1sum and --integrate options to the "fossil commit"
    command.
  * Add the "clean" and "extra" subcommands to the "fossil all"
    command
  * Add the --whatif option to "fossil clean" that works the same
    as "--dry-run", so that the name does not collide with the
  - -dry-run option of "fossil all".
  * Provide a configuration option to show dates on the web
    timeline as "YYMMMDD HH:MM"
  * Add an option to the "stats" webpage that allows an
    administrator to see the current repository schema.
  * Enhancements to the "/vdiff" webpage for more difference
    display options.
  * Added the "/tree" webpage as an alternative to "/dir" and make
    it the default way of showing file lists.
  * Send gzipped HTTP responses to clients that support it.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1411387200">- fossil 1.29:
  * Add the ability to display content, diffs and annotations for
    UTF16 text files in the web interface.
  * Add the "SaveAs..." and "Invert" buttons to the graphical diff
    display that results from using the --tk option with the fossil
    diff command.
  * The /reports page now requires Read ("o") permissions. The
    "byweek" report now properly propagates the selected year
    through the event type filter links.
  * The info command now shows leaf status of the checkout.
  * Add support for tunneling https through a http proxy
  * Add option --empty to the "fossil open" command.
  * Enhanced the fileage page to support a glob parameter.
  * Add -w|--ignore-all-space and -Z|--ignore-trailing-space
    options to fossil annotate, fossil blame, fossil (g)diff,
    fossil stash diff.
  * Add --strip-trailing-cr option to fossil (g)diff and fossil
    stash diff.
  * Add button "Ignore Whitespace" to /annotate, /blame, /ci, /fdiff
    and /vdiff UI pages.
  * Enhance /reports with a "byweekday" view.
  * Enhance the fossil cat command so that it works outside of a
    checkout when using the -R command-line option.
  * Use full-length SHA1 hashes, not abbreviations, in most
    hyperlinks.
  * Correctly render the &lt;title&gt; markup on wiki pages in the
    /artifact webpage.
  * Enhance the fossil whatis command to report on attachments
    and cluster artifacts. Added the /help?cmd=test-whatis-all
    command for testing purposes.
  * Add support for HTTP Basic Authentication on clone and sync.
  * Fix the stash so that it remembers added files and re-adds them
    when the stash is applied.
  * Fix the server so that it avoids writing to the database (and
    thus avoids database locking issues) on a pull or clone.
  * Add support for server load management using both a cache of
    expensive pages (the fossil cache command) and by rejecting
    expensive page requests when the server load average is too
    high.
  * Add the fossil praise command as an alias for fossil blame for
    subversion compatibility.
  * Enhance the fossil test-diff command with -y or --tk options so
    that it shows both filenames above their respective columns in
    the side-by-side diff output.
  * Issue a warning if a fossil add command tries to add a file that
    matches the ignore-glob.
  * Add option -W|--width to "fossil stash ls" and "fossil leaves"
    commands.
  * Enhance support for running as the root user
  * Added the -empty option to fossil new, which causes it to not
    create an initial empty commit. The first commit after
    checking out a repo created this way will become the initial
    commit.
  * Enhance sync operations by committing each round-trip to
    minimize number of retransmits when autosync fails. Include
    option for fossil update and fossil merge to continue even if
    missing content.
  * Minor portability fixes for platforms where the char type is
    unsigned by default.
- use source URLs
- verify source signatures
- add fossil-1.29-remove_date_time.patch to fix packaging warning</changelog>
<changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
<changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
<changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
<changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
<changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
<changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
<changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
<changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
<changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
<changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
<changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>

</package>
<package pkgid="a58c459ffcf8e30ccbcc0b5a6fc3e0a09afd66f4cb2c24f762866618949a8f37" name="freeradius-server" arch="src">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="d32b006b7347f892c12d2f7d0a8e584c35940a482de7b1ef753a8c7e8d3eeb45" name="freeradius-server" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="d8d65c58f60f5803983d5f6082e04c58f17bfebf1b0d193527162eaa375564ce" name="freeradius-server-devel" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="7eb51184730dee721a762fa7b3411faaaf3b034e3f8b6a0c0182f97971e6a7c8" name="freeradius-server-doc" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="d480db479285e3eb9cc703d8b43fa58282ebaa268188690ae721705d67382f2e" name="freeradius-server-krb5" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="a825fa9d799517e9ece2656a94443e2868075f7750a4ec90a47ffe2ebcf2576f" name="freeradius-server-ldap" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="ad127d35732242db8326f6f1c90c485be244546cae468161503f60e339852e0a" name="freeradius-server-libs" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="4fb0fd330b166a2fd16156480b6d952f0ff622994a0e9b0de3126373bd890fd7" name="freeradius-server-mysql" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="863920228015012f73ab89ddbce09c6e76755aa262eaaa6d4897547dd093dca9" name="freeradius-server-perl" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="2aaee4c678b8fd373661d1b16749e2a0f6b9bc6e92535dea7a14e1ce3f87f8ff" name="freeradius-server-postgresql" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="079aae60cd727f52ec7fdbf8c9b6c663ef02c4e1bb3bc12b7f39cbc661efcd57" name="freeradius-server-python" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="add7286b12f9cc031f22fd0fa3ebd30da2e7fa26d943aa25eb3b8d573fb16fc3" name="freeradius-server-sqlite" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="339697cde63fddf7429fa910e61f9f91e9a2b9da1ef3d940b880cb05ca58e251" name="freeradius-server-utils" arch="x86_64">
    <version epoch="0" ver="3.0.15" rel="3.1"/>

<changelog author="vcizek@suse.com" date="1421150400">- update to 3.0.6
  - fixes a segmentation fault in PEAP module (bnc#912588)
  Feature improvements:
  * radmin / raddebug conditional errors are printed to the output, instead of being discarded.
  * raddebug will exit if condition set with -c was invalid.
  * radmin auto-reconnects if the connection to the server has gone away.
  * rlm_cache now has submodule support. See raddb/mods-available/cache
  * New memcached driver for rlm_cache. See raddb/mods-available/cache
  * Add support for &amp;Attribute-Name[*] in conditions. See "man unlang" for details.
  * Add &amp;Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n].
  * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf.
  * When checking IP addresses in conditions, make the right side be parsed as an IP prefix.
  * Support JIT compilation of compiled regular expressions when built with libpcre.
  * Support named capture groups with "%{regex:&lt;name&gt;}" when built with libpcre.
  * Increase regular expression capture groups from 8 to 32.
  * Emit error markers for badly formed regular expressions.
  * Allow 'm' flag to enable multiline mode in regular expressions.
  * Support limited implicit attribute conversion in update sections.
  * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).</changelog>
<changelog author="tchvatal@suse.com" date="1421236800">- Do not disable as-needed build
- Remove the with_sysconfig switch and just stick with versions</changelog>
<changelog author="michael@stroeder.com" date="1429704000">- update to 3.0.8
  * Changes of version 3.0.8
    + Feature improvements
  - Allow syslog_severity to be set in rlm_linelog.
  - Allow defaults to be set for bulk clients in LDAP and
    couchbase.
  - Updates to dhcpclient. Patches from Nicolas C.
  - rlm_mschap now supports direct connections to winbind,
    which is faster than ntlm_auth.
    See raddb/mods-available/mschap. Patch from Matthew Newton.
  - Recommend /dev/urandom for TLS randomness, instead of
    ${certdir}/random
  - Allow TLSv1 to be disabled via "disable_tlsv1" in tls{}.
  - Allow Expanded EAP types where vendor is 0 (IETF) and type
    is normal EAP type. Supplicants sending Expanded EAP types
    like this are broken.
  - Add support for server side sort controls when searching
    for user objects in rlm_ldap.
    + Bug Fixes
  - Don't complain about "authorize" in "server {}" blocks, but
    only if there's no "server" block.
  - Fix cosmetic issue where debug from the first packet read by
    a detail reader thread would be emited during config parsing.
  - Fix ASSERT on truncated detail packets.
  - Don't use main server log functions from within panic_action,
    as in the case of syslog this would cause deadlocks if the
    fault was triggered from within a malloc.
  - Fix issue in "switch" when "correct_escapes = false".
    Fixes #911.
  - Fix sqlcounter configuration to use "%%b" instead of "%b",
    otherwise the new syntax validation will fail.
  - Allow forward references in configuration items. Modules
    aren't always loaded in a sane order.
  - Fix more escaping issues. Closes #912.
  - Decode MAC addresses correctly for VMPS.
  - Fix memory leak with TLS connections.
  - Fix state machine threading issues for conflicting packets.
  - Fix copy_request_to_tunnel issues for tagged attributes.
  - Allow "ok" to over-ride "updated" inside of Auth-Type
    sections.
  - Update state machine so that post-proxy is run though child
    threads for performance, instead of blocking the main thread.
  - Allow "netmask" to work again in client definitions.
  - Relax restrictions on SQL group queries.
  - track outgoing proxy sockets and clean them up more
    aggressively.
  - track proxy statistics, including CoA and Disconnect.
  - If radmin has a connection failure when running a command,
    it re-connects and runs the command again.
  - mark home servers "unknown" less aggressively.
  - Fix potential SEGV in PostgreSQL driver on error.
  - Fix issue where fields like nas_type would not be
    accessible via the %{client:} xlat, for dynamic clients.
  - Set default busy_timeout (of 200ms) in the sqlite driver, so
    writes don't cause selects to fail in multithreaded mode.
    This is user configurable, and may be increased if required.
  - Convert Password-With-Header attributes to binary (from hex
    or base64), in the authorize method of rlm_pap.
  - Fix invalid assert in state.c, that could cause abort in
    post-auth.
  - Fix double free when -m flag is used, and connection pools
    are referenced by multiple modules.
  - RADIUS over TLS accounting uses the same port as
    authentication.
  - Regularized return codes from radmin commands.
  - Fix RHEL spec file so it works correctly for Centos7 which
    uses systemd, and didn't like the SystemV init script.
  - radwho and radlast now have a -D option to load dictionaries
  - DHCP packets are no longer checked for duplicates.
  - Don't crash in sql module group comparisons in corner case.
  - Calculate MPPE keys correctly when using TLS 1.2.
  - Fix load-balance sections. Closes #945
  - TLS certificates are available again in the post-auth
    section. They are not available for session resumption.
  - radclient encodes CHAP-Password properly when using -c
    Closes #955.
  - Fix issue in rlm_cache_memcached driver that caused variable
    length values to be truncated.
  - Fix track functionality in detail reader, so it no longer
    fails with a "Failed marking detail request as done: Bad
    file descriptor" error.
  - Actually add the peer identity (as User-Name) to the inner
    tunnel in EAP-PWD requests, so it's available for lookups.
  - Fixes to PostgreSQL queries. Patches from Santiago Gimeno.
- new set of consolidated patch files:
  deleted:
  * freeradius-server-2.1.1-logrotate_su.patch
  * freeradius-server-2.1.6-rcradiusd.patch
  * freeradius-server-initscript-pidfile.patch
  * freeradius-server-radius-reload-logrotate.patch
  * freeradius-server-var_run.patch
  added:
  * freeradius-server-radiusd-logrotate.patch
  * freeradius-server-rcradiusd.patch
  * freeradius-server-tmpfiles.patch</changelog>
<changelog author="vcizek@suse.com" date="1429790400">- minor adjustments/cleanup of spec and changes</changelog>
<changelog author="michael@stroeder.com" date="1436356800">- update to 3.0.9
  * Changes of version 3.0.9
    + Feature improvements
  - Make "pool" configurations more consistent, and update
    documentation for them.
  - Move connection pool logic to "most recently started",
    instead of MRU. This should help with pool stability.
  - More VSAs for 3GPP2
  - Added examples of multi-value attributes to rlm_perl.
  - LDAP-Group and SQL-Group attributes are now dynamically
    allocated.
  - Only the "sql" module registers SQL-Group. Other instances
    register "instance-name-SQL-Group", similarly to "ldap".
  - Unknown attributes are now complained about more often when
    used in unlang statements. e.g. if (Foo-Bar == 3) used to be
    a string to string comparison. It is now a parse error.
  - Rename RLM_COMPONENT_* to MOD_* in the code. This makes many
    things easier.
  - Move to C99 initializers for modules.
  - Load modules in raddb/mods-enabled. This allows attributes
    like "LDAP-Group" to be used in the "files" module, without
    explicit ordering or listing in "instantiate".
  - Added 'bootstrap' section to modules. Third-party modules
    will need to be updated.
  - When adding clients from a DB, add them to a virtual server
    if that virtual server has a "listen" section. Otherwise,
    add the clients to the global list.
  - When reading dynamic clients from a file, don't expire them
    if the underlying file is unchanged.
  - Allow the server to originate CoA requests from the
    post-auth stage.
  - The server creates ${run_dir} and ${logdir} in daemon mode,
    if they do not already exist.
  - Add dictionary for Wi-Fi Alliance Hotspot 2.0. The server
    now supports all mandatory and optional attributes for this
    specification.
  - HUP now re-loads the configuration only if the files have
    changed. If all files are unchanged, HUP re-opens the log
    file, and does nothing else.
  - Much better debug messages for EAP-TLS, including which
    attributes are cached, and when they are retrieved.
  - Increase default max_requests to 16384. Memory is cheap now.
  - Added "stats memory" commands to radmin. Debug build only.
  - Aptilo controller dictionary updates.
  - SQL modules now use Acct-Unique-Session-Id everywhere.
  - The redis modules are now stable.
  - The LDAP module now supports SASL "interactive bind" method.
    This allows Kerberos based administrator and user binds.
  - DHCP code is now in libfreeradius-dhcp.
  - More DHCP encoding / decoding unit tests.
  - rlm_replicate can now be listed in the "accounting" section.
  - Better sqlite debugging output.
  - Remove "required" option from many sql_ippool directives.
  - Set default CA "basic constraints" to "critical". Fixes #1073
  - Updates to help / man pages from Jorge Pereira.
  - Added more tests.
    + Bug Fixes
  - Be more careful about unused config item warnings when
    using -Xx.
  - Move more defines to be auto-generated.
  - Allow virtual servers in proxy fallback.
  - Allow %{module:} to work.
  - Don't crash in RadSec. Closes #980.
  - Return better errors when a unix group / user is not found.
  - Re-enable detail module "locking" parameter.
  - Don't crash when logging replies from Status-Server packets.
  - The couchbase module now uses "update" instead of "map", for
    consistent with the rest of the server.
    See raddb/mods-available/couchbase
  - Don't require NT-Password for MS-CHAP password changes.
  - Be a bit more careful about decrypting MS-CHAP-MPPE-Key
    attributes. Closes #1013. There is no perfect fix, tho.
  - Fix security issues with EAP-PWD.
    See http://freeradius.org/security.html#eap-pwd-2015
  - Fix dynamic clients read from SQL in non-debug mode
  - MS-CHAP now allows retries (i.e. password change) when
    passwords are expired.
  - Allow "user=radiusd" when the server is already user
    "radiusd"
  - suid up/down works on non-Linux systems. This means that the
    control socket should have the correct ownership.
  - Fix issue which caused the server to sometimes have problems
    when a home server was marked zombie.
  - Fix format.pl because Perl is now more picky.
  - Fix proxy to Packet-Dst-IP-Address, so that it uses the
    correct destination port.
  - Fix corner case with cursor functions and removal.
  - OpenDirectory fixes and documentation.
  - Fix leaks in rlm_redis.
  - RFC 6929 "evs" attributes are now encoded / decoded properly.
  - Fix talloc pool leaks when receiving malformed or
    retransmitted Accounting/CoA requests.
  - Printed attributes again use double quotes instead of single
    quotes.
  - Set X509_V_FLAG_CRL_CHECK_ALL, and add "check_all_crl" to
    eap.conf. Fixes oCert CVE-2015-4680.
  - rlm_expr now errors out correctly on malformed attribute
    references instead of triggering an assert.
  - Make "break" work in "foreach" loops
  - Allow dynamic expansions to work again in the "hints" file.
  - Correct minor typos in comments and examples from Alan Buxy.
  - Re-urlencode the path portion of ldapi:// urls before
    passing it to ldap_initialise.
- freeradius-server-rlm_sql_unixodbc-configure.patch removes
  hard-coded directory in configure script of rlm_sql_unixodbc
- install new module rlm_sqlhpwippool.so</changelog>
<changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
<changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
<changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
<changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
<changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
<changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
<changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
<changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
<changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
<changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
<changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
<changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- update to 3.0.15 (bnc#1049086)
  Feature improvements
  * Update dictionary.starent, dictionary.ruckus
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  * FR-GV-201: Check input / output length in make_secret().
    (CVE-2017-10978)
  * FR-GV-206: Fix read overflow when decoding DHCP option 63
    (CVE-2017-10983)
  * FR-GV-301: Fix write overflow in data2vp_wimax()
    (CVE-2017-10984)
  * FR-GV-302: Fix infinite loop and memory exhaustion with
    'concat' attributes (CVE-2017-10985)
  * FR-GV-303: Fix infinite read in dhcp_attr2vp() (CVE-2017-10986)
  * FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions()
    (CVE-2017-10987)
  * FR-GV-305: Decode 'signed' attributes correctly.
    (CVE-2017-10988)
  * FR-AD-001: use strncmp() instead of memcmp() for bounded data
  * Print messages when we see deprecated configuration items
  * Show reasons why we couldn't parse a certificate expiry time
  * Be more accepting about truncated ASN1 times.
  * Fix OpenSSL API issue which could leak small amounts of memory.
  * For Access-Reject, call rad_authlog() after running the
    post-auth section, just like for Access-Accept.
  * Don't crash when reading corrupted data from session resumption
    cache.
  * Parse port in dhcpclient.
  * Don't leak memory for OpenSSL.
  * Portability fixes taken from OpenBSD port collection.
  * run rad_authlog after post-auth for Access-Reject.
  * Don't process VMPS packets twice.
  * Fix attribute truncation in rlm_perl
  * Fix bug when processing huntgroups.
- a1eccee1.patch: FR-AD-002 - Bind the lifetime of program name
  and python path to the module
- 62f7d288.patch: FR-AD-003 - Pass correct statement length into
  sqlite3_prepare[_v2]</changelog>

</package>
<package pkgid="d6fad5af0362b0d9b763395b7e074f2cc26188523349ec77c791c104699dddce" name="freerdp" arch="src">
    <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="6.1"/>

<changelog author="zawertun@gmail.com" date="1333108800">- added freerdp-fix-bitmap-cache.patch fixing a problem with the
  bitmap cache resulting in garbled images
  (https://github.com/FreeRDP/FreeRDP/issues/348)</changelog>
<changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
<changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
<changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
<changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
<changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
<changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
<changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
<changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
<changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
<changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
<changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
<changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
<changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
<changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
<changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
<changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
<changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
<changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>

</package>
<package pkgid="33020afc30c649d45f6308a4702ed40c706113dec82ebe4d3b413de865880e67" name="freerdp" arch="x86_64">
    <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="6.1"/>

<changelog author="zawertun@gmail.com" date="1333108800">- added freerdp-fix-bitmap-cache.patch fixing a problem with the
  bitmap cache resulting in garbled images
  (https://github.com/FreeRDP/FreeRDP/issues/348)</changelog>
<changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
<changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
<changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
<changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
<changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
<changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
<changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
<changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
<changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
<changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
<changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
<changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
<changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
<changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
<changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
<changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
<changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
<changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>

</package>
<package pkgid="ac454fabf1c841481a3fb1b4146047bebe35633aea253bafe19b998e786074d7" name="freerdp-devel" arch="x86_64">
    <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="6.1"/>

<changelog author="zawertun@gmail.com" date="1333108800">- added freerdp-fix-bitmap-cache.patch fixing a problem with the
  bitmap cache resulting in garbled images
  (https://github.com/FreeRDP/FreeRDP/issues/348)</changelog>
<changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
<changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
<changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
<changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
<changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
<changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
<changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
<changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
<changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
<changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
<changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
<changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
<changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
<changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
<changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
<changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
<changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
<changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>

</package>
<package pkgid="4400e35094ef6c19caa4494249fe5261a1e0643b624297d7a5624cba71cbbc2d" name="freexl" arch="src">
    <version epoch="0" ver="1.0.4" rel="5.1"/>

<changelog author="tzotsos@opensuse.org" date="1331035200">- Initial build</changelog>
<changelog author="opensuse@dstoecker.de" date="1344686400">- update to 1.0.0d</changelog>
<changelog author="tzotsos@opensuse.org" date="1373198400">- update to 1.0.0e</changelog>
<changelog author="mpluskal@suse.com" date="1422878400">- Cleanup spec file with spec-cleaner
- Enable tests execution during build
- Build documentation
- Update to 1.0.0h (no changelog provided by upstream</changelog>
<changelog author="mpluskal@suse.com" date="1423051200">- Update licence information (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
- Remove static library.</changelog>
<changelog author="mpluskal@suse.com" date="1425729600">- Update to 1.0.0i
  * no changelog provided by upstream</changelog>
<changelog author="opensuse@dstoecker.de" date="1429531200">- update to 1.0.1 (boo#986614)
  * CVE-2015-2753: denial of service (stack corruption) or possibly
    execution of arbitrary code via a crafted sector
    in a workbook
  * CVE-2015-2754: denial of service (stack corruption) and possibly
    execution of arbitrary code via a crafted
    workbook, related to a "premature EOF."
  * CVE-2015-2776: denial of service (memory consumption) via a
    crafted shared strings table in a workbook.</changelog>
<changelog author="mpluskal@suse.com" date="1446292800">- Update to 1.0.2
  * no changelog provided by upstream</changelog>
<changelog author="mpluskal@suse.com" date="1467028800">- Drop html documentation
- Small spec file cleanups
- Referencing security issues fixed in 1.0.1</changelog>
<changelog author="mpluskal@suse.com" date="1505304000">- Update to version 1.0.4:
  * No chagelog provided by upstream
  * CVE-2017-2924 (boo#1058433) from 1.0.3 is fixed
  * CVE-2017-2923 (boo#1058431) from 1.0.3 is fixed
- Small packaging cleanup</changelog>

</package>
<package pkgid="3cf6d8cdd0c0619353f1f4b62fdab5156733c0b3ba40f2a6429bc44bc6ba7308" name="freexl-devel" arch="x86_64">
    <version epoch="0" ver="1.0.4" rel="5.1"/>

<changelog author="tzotsos@opensuse.org" date="1331035200">- Initial build</changelog>
<changelog author="opensuse@dstoecker.de" date="1344686400">- update to 1.0.0d</changelog>
<changelog author="tzotsos@opensuse.org" date="1373198400">- update to 1.0.0e</changelog>
<changelog author="mpluskal@suse.com" date="1422878400">- Cleanup spec file with spec-cleaner
- Enable tests execution during build
- Build documentation
- Update to 1.0.0h (no changelog provided by upstream</changelog>
<changelog author="mpluskal@suse.com" date="1423051200">- Update licence information (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
- Remove static library.</changelog>
<changelog author="mpluskal@suse.com" date="1425729600">- Update to 1.0.0i
  * no changelog provided by upstream</changelog>
<changelog author="opensuse@dstoecker.de" date="1429531200">- update to 1.0.1 (boo#986614)
  * CVE-2015-2753: denial of service (stack corruption) or possibly
    execution of arbitrary code via a crafted sector
    in a workbook
  * CVE-2015-2754: denial of service (stack corruption) and possibly
    execution of arbitrary code via a crafted
    workbook, related to a "premature EOF."
  * CVE-2015-2776: denial of service (memory consumption) via a
    crafted shared strings table in a workbook.</changelog>
<changelog author="mpluskal@suse.com" date="1446292800">- Update to 1.0.2
  * no changelog provided by upstream</changelog>
<changelog author="mpluskal@suse.com" date="1467028800">- Drop html documentation
- Small spec file cleanups
- Referencing security issues fixed in 1.0.1</changelog>
<changelog author="mpluskal@suse.com" date="1505304000">- Update to version 1.0.4:
  * No chagelog provided by upstream
  * CVE-2017-2924 (boo#1058433) from 1.0.3 is fixed
  * CVE-2017-2923 (boo#1058431) from 1.0.3 is fixed
- Small packaging cleanup</changelog>

</package>
<package pkgid="563d31da4786a303c420cc1e41c90fb5e4fce03a63d593cf4589c776fa0fd65b" name="frei0r-plugins" arch="src">
    <version epoch="0" ver="1.4" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1315051200">- Initial package, version 1.3.</changelog>
<changelog author="vuntz@opensuse.org" date="1317211200">- Cleanup package.</changelog>
<changelog author="dimstar@opensuse.org" date="1317816000">- Add pkgconfig(gavl) BuildRequires to enable the remaining
  filters: rgbparade, scale0tilt, vectorscope.
- Add frei0r-plugins-compiler-warnings.patch: Fix compiler warning
  on undefined operation. Patch taken from upstream git, commit
  id 8f8090.</changelog>
<changelog author="reddwarf@opensuse.org" date="1362571200">- Update to version 1.4:
  * Fix several major bugs in existing plugins
  * Add new filters and the optional dependency to cairo.
  - New filters (18): IIRblur, Vignette, Keyspillm0pup, Timeout,
    Posterize, Dither, Spillsupress, Emboss, Colgate, RGBNoise,
    Colorize, Softglow, ColrHalftone, Sigmoidaltransfer,
    Colortap, cairogradient, cairoimagegrid, medians
  - New mixers: cairoblend, cairoaffineblend
- Remove frei0r-missing-return.patch and frei0r-plugins-compiler-warnings.patch
- Add frei0r-plugins-1.4-missing_include.patch
- Add pkgconfig(cairo) BuildRequires</changelog>
<changelog author="wbauer@tmo.at" date="1431777600">- Build against opencv-qt5-devel on &gt; 13.2, otherwise it would
  crash kdenlive/libmlt which are built against Qt5</changelog>
<changelog author="wbauer@tmo.at" date="1446724800">- Build against opencv-qt5-devel on Leap as well, Leap comes with
  the KF5/Qt5 based kdenlive (boo#930616)</changelog>
<changelog author="ecsos@opensuse.org" date="1447329600">- change if clause for opencv-qt5-devel, so no need for
  ProjectConfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457006400">- Add frei0r-plugins-openCV-3.0-compatibility.patch: fix the
  compilation against OpenCV 3. This patch is based on the two
  upstream commits 129eea and 7ed3f84e6.</changelog>
<changelog author="zaitor@opensuse.org" date="1457092800">- Update Url to http://frei0r.dyne.org/, show that we are using the
  fork and not the original frei0r.</changelog>
<changelog author="olaf@aepfle.de" date="1457092801">- Fix frei0r-plugins-openCV-3.0-compatibility.patch</changelog>
<changelog author="davejplater@gmail.com" date="1513339200">- Split off plugins built against OpenCV because they cause
  multiprocessing issues in shotcut and kdenlive. See boo#1068792
  and https://github.com/mltframework/mlt/issues/274.</changelog>

</package>
<package pkgid="b6554a7855362e05f6dde9aea8630ae0afea48d9ef11c2e5c8810fa83522d385" name="frei0r-plugins" arch="x86_64">
    <version epoch="0" ver="1.4" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1315051200">- Initial package, version 1.3.</changelog>
<changelog author="vuntz@opensuse.org" date="1317211200">- Cleanup package.</changelog>
<changelog author="dimstar@opensuse.org" date="1317816000">- Add pkgconfig(gavl) BuildRequires to enable the remaining
  filters: rgbparade, scale0tilt, vectorscope.
- Add frei0r-plugins-compiler-warnings.patch: Fix compiler warning
  on undefined operation. Patch taken from upstream git, commit
  id 8f8090.</changelog>
<changelog author="reddwarf@opensuse.org" date="1362571200">- Update to version 1.4:
  * Fix several major bugs in existing plugins
  * Add new filters and the optional dependency to cairo.
  - New filters (18): IIRblur, Vignette, Keyspillm0pup, Timeout,
    Posterize, Dither, Spillsupress, Emboss, Colgate, RGBNoise,
    Colorize, Softglow, ColrHalftone, Sigmoidaltransfer,
    Colortap, cairogradient, cairoimagegrid, medians
  - New mixers: cairoblend, cairoaffineblend
- Remove frei0r-missing-return.patch and frei0r-plugins-compiler-warnings.patch
- Add frei0r-plugins-1.4-missing_include.patch
- Add pkgconfig(cairo) BuildRequires</changelog>
<changelog author="wbauer@tmo.at" date="1431777600">- Build against opencv-qt5-devel on &gt; 13.2, otherwise it would
  crash kdenlive/libmlt which are built against Qt5</changelog>
<changelog author="wbauer@tmo.at" date="1446724800">- Build against opencv-qt5-devel on Leap as well, Leap comes with
  the KF5/Qt5 based kdenlive (boo#930616)</changelog>
<changelog author="ecsos@opensuse.org" date="1447329600">- change if clause for opencv-qt5-devel, so no need for
  ProjectConfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457006400">- Add frei0r-plugins-openCV-3.0-compatibility.patch: fix the
  compilation against OpenCV 3. This patch is based on the two
  upstream commits 129eea and 7ed3f84e6.</changelog>
<changelog author="zaitor@opensuse.org" date="1457092800">- Update Url to http://frei0r.dyne.org/, show that we are using the
  fork and not the original frei0r.</changelog>
<changelog author="olaf@aepfle.de" date="1457092801">- Fix frei0r-plugins-openCV-3.0-compatibility.patch</changelog>
<changelog author="davejplater@gmail.com" date="1513339200">- Split off plugins built against OpenCV because they cause
  multiprocessing issues in shotcut and kdenlive. See boo#1068792
  and https://github.com/mltframework/mlt/issues/274.</changelog>

</package>
<package pkgid="24f6158665e987453d5abbae2c24e2987239ff46dab00fad8efd9ae6acc30626" name="frei0r-plugins-devel" arch="x86_64">
    <version epoch="0" ver="1.4" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1315051200">- Initial package, version 1.3.</changelog>
<changelog author="vuntz@opensuse.org" date="1317211200">- Cleanup package.</changelog>
<changelog author="dimstar@opensuse.org" date="1317816000">- Add pkgconfig(gavl) BuildRequires to enable the remaining
  filters: rgbparade, scale0tilt, vectorscope.
- Add frei0r-plugins-compiler-warnings.patch: Fix compiler warning
  on undefined operation. Patch taken from upstream git, commit
  id 8f8090.</changelog>
<changelog author="reddwarf@opensuse.org" date="1362571200">- Update to version 1.4:
  * Fix several major bugs in existing plugins
  * Add new filters and the optional dependency to cairo.
  - New filters (18): IIRblur, Vignette, Keyspillm0pup, Timeout,
    Posterize, Dither, Spillsupress, Emboss, Colgate, RGBNoise,
    Colorize, Softglow, ColrHalftone, Sigmoidaltransfer,
    Colortap, cairogradient, cairoimagegrid, medians
  - New mixers: cairoblend, cairoaffineblend
- Remove frei0r-missing-return.patch and frei0r-plugins-compiler-warnings.patch
- Add frei0r-plugins-1.4-missing_include.patch
- Add pkgconfig(cairo) BuildRequires</changelog>
<changelog author="wbauer@tmo.at" date="1431777600">- Build against opencv-qt5-devel on &gt; 13.2, otherwise it would
  crash kdenlive/libmlt which are built against Qt5</changelog>
<changelog author="wbauer@tmo.at" date="1446724800">- Build against opencv-qt5-devel on Leap as well, Leap comes with
  the KF5/Qt5 based kdenlive (boo#930616)</changelog>
<changelog author="ecsos@opensuse.org" date="1447329600">- change if clause for opencv-qt5-devel, so no need for
  ProjectConfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457006400">- Add frei0r-plugins-openCV-3.0-compatibility.patch: fix the
  compilation against OpenCV 3. This patch is based on the two
  upstream commits 129eea and 7ed3f84e6.</changelog>
<changelog author="zaitor@opensuse.org" date="1457092800">- Update Url to http://frei0r.dyne.org/, show that we are using the
  fork and not the original frei0r.</changelog>
<changelog author="olaf@aepfle.de" date="1457092801">- Fix frei0r-plugins-openCV-3.0-compatibility.patch</changelog>
<changelog author="davejplater@gmail.com" date="1513339200">- Split off plugins built against OpenCV because they cause
  multiprocessing issues in shotcut and kdenlive. See boo#1068792
  and https://github.com/mltframework/mlt/issues/274.</changelog>

</package>
<package pkgid="eb3792a63ab297663c9e21445fa57814d8386491feff7d44c21e4bd0c9c291c8" name="frei0r-plugins-opencv" arch="x86_64">
    <version epoch="0" ver="1.4" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1315051200">- Initial package, version 1.3.</changelog>
<changelog author="vuntz@opensuse.org" date="1317211200">- Cleanup package.</changelog>
<changelog author="dimstar@opensuse.org" date="1317816000">- Add pkgconfig(gavl) BuildRequires to enable the remaining
  filters: rgbparade, scale0tilt, vectorscope.
- Add frei0r-plugins-compiler-warnings.patch: Fix compiler warning
  on undefined operation. Patch taken from upstream git, commit
  id 8f8090.</changelog>
<changelog author="reddwarf@opensuse.org" date="1362571200">- Update to version 1.4:
  * Fix several major bugs in existing plugins
  * Add new filters and the optional dependency to cairo.
  - New filters (18): IIRblur, Vignette, Keyspillm0pup, Timeout,
    Posterize, Dither, Spillsupress, Emboss, Colgate, RGBNoise,
    Colorize, Softglow, ColrHalftone, Sigmoidaltransfer,
    Colortap, cairogradient, cairoimagegrid, medians
  - New mixers: cairoblend, cairoaffineblend
- Remove frei0r-missing-return.patch and frei0r-plugins-compiler-warnings.patch
- Add frei0r-plugins-1.4-missing_include.patch
- Add pkgconfig(cairo) BuildRequires</changelog>
<changelog author="wbauer@tmo.at" date="1431777600">- Build against opencv-qt5-devel on &gt; 13.2, otherwise it would
  crash kdenlive/libmlt which are built against Qt5</changelog>
<changelog author="wbauer@tmo.at" date="1446724800">- Build against opencv-qt5-devel on Leap as well, Leap comes with
  the KF5/Qt5 based kdenlive (boo#930616)</changelog>
<changelog author="ecsos@opensuse.org" date="1447329600">- change if clause for opencv-qt5-devel, so no need for
  ProjectConfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457006400">- Add frei0r-plugins-openCV-3.0-compatibility.patch: fix the
  compilation against OpenCV 3. This patch is based on the two
  upstream commits 129eea and 7ed3f84e6.</changelog>
<changelog author="zaitor@opensuse.org" date="1457092800">- Update Url to http://frei0r.dyne.org/, show that we are using the
  fork and not the original frei0r.</changelog>
<changelog author="olaf@aepfle.de" date="1457092801">- Fix frei0r-plugins-openCV-3.0-compatibility.patch</changelog>
<changelog author="davejplater@gmail.com" date="1513339200">- Split off plugins built against OpenCV because they cause
  multiprocessing issues in shotcut and kdenlive. See boo#1068792
  and https://github.com/mltframework/mlt/issues/274.</changelog>

</package>
<package pkgid="536cf98a6cf59124b10797149758a353b014ded6ff0fb60bd6f6bbd24078a6d5" name="fwts" arch="src">
    <version epoch="0" ver="17.07.00" rel="8.1"/>

<changelog author="mpluskal@suse.com" date="1443009600">- Update to 05.09.00
  * Update ACPICA to version 20150717
  * SMBios 3.0.0 tests supported
  * new features:
  + acpi: method: add _CR3 test
  + acpi: method: add _MTL test
  + acpi: method: add _RST test
  + acpi: method: add _PRR test
  + data: klog.json: sync with latest 4.2 kernel messages
    (LP: #1493039)
  + lib: smbios: add smbios version 3.0.0 entry find helper
  + dmicheck: add test for smbios 3.0.0 entry point
  + dmicheck: add error test for SMBIOS 3.0.0 table
  + dmicheck: sync the dmi value test with smbios 3.0.0 spec
  * fixed bugs:
  + acpi: fadt: merge tests for reset register
  + cpu: cpufreq: reduce scope of variables
  + acpi: gpedump: clarify precedence for &amp; and ?
  + lib: fwts_cpu: reduce scope on variables
  + ACPICA: Update to version 20150717 (LP: #1486253)
  + lib: fwts_log: re-work to clean up va_arg scoping
  + uefi: uefirtvariable: clean up cppcheck style warning
  + acpi: rsdp: make OEM ID test less strict
  + fix some spelling mistakes in code and sync fwts-tests
    accordingly
  + cpu: maxfreq: check for unlikely event that no CPUs in cpu
    list
  + acpi: crsdump: fix incorrect use of string size in string
    copies
  + lib: fwts_acpi_tables: add checking for empty table parsing
  + lib: fwts_acpi_table: remove dead initialisation of ptr
  + dmi: dmicheck: fix build error on 32 bit builds
  + Makefile.am: use pkg-config for json-c
  + lib: fwts_smbios: fix the smbios version from uefi always
    zero (LP: #1484023)
  + lib: fwts_scan_efi_systable: fix getting wrong smbios entry
    (LP: #1484046)
  + acpi: dbg2: won't find obj when no namespace device path
    (lp: #1486893)
  + lib: fwts_smbios: add the struct definition for smbios
    3.0.0
  + dmicheck: re-orgainise the smbios entry point check
  + dmicheck: fix the Base Board type range typos
  + auto-packager: mkpackage.sh: remove utopic</changelog>
<changelog author="mpluskal@suse.com" date="1447761600">- Update to 05.11.00
  * Update ACPICA to version 20150930
  * New Features
  + Add in the notion of ACPI compliance tests.
  + MADT subtables: Local SAPIC structure has 3 reserved bytes,
  not 1
  + ACPI: MADT: update GICC flag checks for ACPI 6.0
  + ACPI: MADT: further update to GICC flag checks for 6.0
  + acpi: method: skip scope names in method_evaluate_method
  + acpi: method: add _GPE test
  + acpi: method: add _TSN test
  + acpi: method: add _TFP test
  + acpi: method: add _EC test
  + acpi: method: add _CWS test
  + acpi: method: add _BTH test
  + auto-packager: mkpackage.sh: add xenial
  + acpi: tpm2: add check for zero control area address (LP:
  [#1506442])
  + securebootcert: change fail to warning when MS UEFI CA not
  found in DB
  + lib: fwts_uefi: add BMC device path define
  + uefidump: add dumping the BMC device path
  + uefibootpath: add test for the BMC device path
  + lib: fwts_uefi: add the URI device path define
  + uefibootpath: add test for the URI device path
  + uefidump: add dumping for the URI device path
  + lib: fwts_uefi: add the UFS device path define
  + uefidump: add dumping for the UFS device path
  + uefibootpath: add test for the UFS device path
  * Fixed Bugs
  + dmi: dmicheck: fix SMBIOS issues on aarch64 systems
  + acpidump: add missing reserved fields to MADT structures
  + cpufreq: the calibration is taking a long time, make it
  faster
  + acpi: tcpa: replace tab with spaces to fix formatting
  alignment</changelog>
<changelog author="mpluskal@suse.com" date="1450526400">- Update to 05.12.00
  * Update ACPICA to version 20151124
  * live-image/fwts-frontend-text: add a selection for recommended
  * data: klog.json: add in some more kernel error messages for
  4.3
  * ACPI: Add ASPT test
  * lib: framework: allow mixed tests and test category options
  * fwts: framework: Add --log-level option
  * lib: fwts_uefi: add SD device path define
  * Boot path sync with UEFI spec. 2.5
  + uefibootpath: add test for the SD device path
  + uefidump: add dumping for the SD device path
  + lib: fwts_uefi: add efi bluetooth device path define
  + uefibootpath: add test for the bluetooth device path
  + uefidump: add dumping for the bluetooth device path
  + lib: fwts_uefi: add wireless device path define
  + uefibootpath: add test for the wireless device path
  + uefidump: add dumping for the wireless device path
  + lib: fwts_uefi: add ramdisk device path define
  + uefibootpath: add test for the ramdisk device path
  + uefidump: add dumping for the ramdisk device path
  * Fixed bugs
  + acpi: fpdt: add a terminate for buggy BIOS that reports zero
  length
  + lib: klog: remove use of pcre, use regex instead
  + utilities: kernelscan: remove use of pcre, use regex instead
  + uefidump: add more bounds checking and remove need for heap
  + utilities: fix memory leak, line not being free'd
  + acpi: bert: remove redundant variable 'length'
  + lib: iasl: rework IASL interface to ACPICA
  + acpi: acpidump: use IASL rather than fwts custom table dump
  code
  + s3 + klog: make log scanning more robust for S3 (LP: #1522292)
  + lib: acpica: make region handler more robust (LP: #1524217)
  + debian: copyright, fix lintian warnings
  + Debian: update Standards-Version to 3.9.6
  + acpi: acpidump: check for fwts_iasl_init failure
  + lib: fwts_acpi_tables: fix segfault when tables fail to load
  (LP: #1452201)
  + acpi: dbg2: remove dead store to ptr1
  + hotkey: fix key reading loop, it needs to loop more than once
  + lib: fwts_framework: remove dead store to len in for loop
  + lib: fwts_acpi_table: remove redundant store to rsdt
  + acpi: gpedump: remove redundant store to gpe_xrupt_info
  + lib: fwts_acpi_tables: remove dead store to facs
  + acpica: fwts_acpica: remove redundant store to length
  + lib: fwts_acpi_tables: remove redundant store to xsdt
  + lib: fwts_acpi_tables: check table to avoid dereferencing
  NULL ptr
  + lib: fwts_acpi_table: Fix FADT update in creation of fake
  FACS table.
  + uefibootpath: fix the wrong type for relative offset range
  path</changelog>
<changelog author="mpluskal@suse.com" date="1453032000">- Update to 16.01.00
  * ACPICA: Update to version 20160108
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
  * ACPICA: Update to version 20151218
  * esrtdump: add dumping for esrt table
  * fixed bugs:
    + Fix spelling mistakes of "ACPI"
    + method: update method status
    + utilities: kernelscan: fix memory leaks and a segfault
    + acpi: cstates: fix clang build warning on zero CPUs.
    + acpi: s3, s3power, s4: replace cleanup free with explicit
    frees
    + data: klog.json: add in some more kernel error messages for
    4.4
    + acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
    + acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
    + bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
    + acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should
    be an info
    + Update copyright year to 2016
    + dmi: dmicheck: fix reserved bits mask for Processor
    Information
    + uefirtvariable: fix decalred VLA have zero size</changelog>
<changelog author="mpluskal@suse.com" date="1456401600">- Update to 16.02.00
  * Start defining FWTS architectures as variables
  * Define some utility functions for using the fwts_architecture
    enum
  * Add mechanism to tell FWTS what architecture is being tested
  * ACPI: MADT: add in compliance tests for the MADT and subtables
  * ACPI: Add in MADT subtable description for GIC ITS subtable
  * ACPI: MADT: add in compliance checks for the GIC ITS subtable
  * Documentation: add --acpicompliance to man page
  * Documentation: add --arch to the man page
  * RSDP: minor cleanups to rsdp.c for checkpatch issues
  * utilities: add a helper function for printing out architecture
    names
  * ACPI tables: when bodging up an RSDP, do the right thing for
    the arch
  * ACPI RSDP: flesh out the tests to check for full spec
    compliance.
  * Update regression test rsdp-0001/test-0001.sh
  * Update the regression test arg-help-0001/test-0001.sh
  * Update regression test for arg-help-0001/test-0002.sh
  * Update regression test for arg-show-tests-0001/test-0001.sh
  * Update regression test arg-show-tests-full-0001/test-0001.sh
  * Update the regression test arg-table-path-0001/test-0001.sh
  * Update the regression test madt-0001/test-0001.sh
  * Update the regression test madt-0001/test-0002.sh
  * FADT: enable compiling on non-x86 architectures
  * FADT: non-x86 machines need an FADT but x86 can survive
    without one
  * FADT: disable SCI_EN and RESET_REG tests when in reduced
    hardware mode
  * FADT: add in code to log basic info about the various FADT
    flag fields
  * Add in bit masks for FACS flags.
  * FADT: move log info out of test2, will provide it elsewhere
  * ACPI: Add hypervisor ID field to FADT.
  * FADT: minor cleanup and initial compliance tests
  * FADT: expand the compliance test for FIRMWARE_CTRL fields
  * FADT: expand compliance checks for DSDT and X_DSDT fields
  * FADT: add compliance tests for reserved fields, PM profile,
    reduced hardware
  * FADT: restructure test sequence around reduced hardware mode
  * FADT: expand compliance tests for the SMI_CMD field
  * FADT: add compliance tests for the ACPI_ENABLE and
    ACPI_DISABLE fields
  * FADT: add compliance tests for S4BIOS_REQ and PSTATE_CNT
    fields
  * FADT: extend and add PM address block compliance tests
  * FADT: enhance compliance tests for GPE blocks
  * FADT: add compliance test for the CST_CNT field
  * FADT: add in compliance tests for C2/C3 latency fields
  * FADT: add in SLEEP_CONTROL_REG and SLEEP_STATUS_REG
    compliance tests
  * FADT: remove no longer useful variables from test1
  * FADT: add safety checks for older versions of FADT
  * FADT: update regression tests to incorporate new/changed
    tests
  * acpi: method: add _PMC test
  * acpi: method: add _PRT test
  * fwts-test: update for _PMC and _PRT tests
  * acpi: method: add _RDI test
  * acpi: method: add _LPI test
  * fwts-test: update for _RDI and _LPI tests
  * acpi: method: remove non-method names from the top comments
  * acpi: erst: fix incorrect error message for reserved field
  * fwts-test: update erst test for the fix of reserved field
  * lib: fwts_klog: fix incorrect indentation, detected by gcc-6
  * lib: fwts_hwinfo: clean up type punning, fixes warning with
    gcc-6
  * fwts: wakealarm: reset wakealarm timer at end of test
    (LP: #1534003)
  * Update arg-show-tests-full now that we have an extra test in
    wakealarm
  * dmi: dmicheck: add some simple sanity checks to table size
  * lib: fwts_args: use safer strncat than strcat
  * lib: fwts_acpi_tables: don't do expensive low allocs multiple
    times
  * acpi: fadt: check 32/64 bit PM register addresses for
    inconsistency (LP: #1536606)
  * acpi: madt: fix incorrect format specifier for size_t
  * cpu: microcode: fix a couple of warnings found by cppcheck:
  * acpi: madt: clean up some minor style issues detected by
    cppcheck
  * data: klog.json: update to sync with 4.6 kernel changes
  * ACPICA: Update to version 20160212 (LP: #1545099)
  * lib: fwts_acpi_tables: fix warnings found by clang scan-build
  * lib: fwts_cpu: check for MSR read failures
  * lib: fwts_klog: handle the case where klog_old is empty list
  * acpica: fix disassembly on i386 platforms (LP: #1547469)
  * lib: fwts_arch: i686 arch name is also an X86 arch
    (LP: #1547554)
  * fwts-test: only run rsdp regression test on specific arches
    (LP: #1547602)
  * Fix null_gass initializer for older versions of gcc
    (LP: #1549429)
  * fwts-test: sync up with the arg-table-path</changelog>
<changelog author="mpluskal@suse.com" date="1458216000">- Update to 16.03.00
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
    + ACPICA: Update to version 20151218 (LP: #1527733)
    + esrtdump: add dumping for esrt table (LP: #1532103)
  * Fix spelling mistakes of "ACPI"
  * method: update method status
  * utilities: kernelscan: fix memory leaks and a segfault
  * acpi: cstates: fix clang build warning on zero CPUs.
  * acpi: s3, s3power, s4: replace cleanup free with explicit frees
  * data: klog.json: add in some more kernel error messages for 4.4
    (LP: #1526746)
  * acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
  * acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should be
    an info (LP:#1529717)
  * Update copyright year to 2016
  * dmi: dmicheck: fix reserved bits mask for Processor
    Information
  * uefirtvariable: fix decalred VLA have zero size (LP: #1526815)</changelog>
<changelog author="mpluskal@suse.com" date="1463572800">- Update to version 16.05.01:
  * ACPICA: Update to version 20160108 (LP: #1532268)
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
  * ACPICA: Update to version 20151218 (LP: #1527733)
  * esrtdump: add dumping for esrt table (LP: #1532103)
  * Fix spelling mistakes of "ACPI"
  * method: update method status
  * utilities: kernelscan: fix memory leaks and a segfault
  * acpi: cstates: fix clang build warning on zero CPUs.
  * acpi: s3, s3power, s4: replace cleanup free with explicit frees
  * data: klog.json: add in some more kernel error messages for 4.4
    (LP: #1526746)
  * acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
  * acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should be
    an info (LP: #1529717)
  * Update copyright year to 2016
  * dmi: dmicheck: fix reserved bits mask for Processor Information
  * uefirtvariable: fix decalred VLA have zero size (LP: #1526815)</changelog>
<changelog author="mpluskal@suse.com" date="1468670400">- Update to version 16.06.01:
  * lib: acpi: add an acpi category
  * live-image/fwts-frontend-text: add selections of acpi and uefi
    tests
  * acpi: add tests to acpi category
  * acpi: fwts-tests: Remove redundant tailing space and update
    fwts-tests
  * auto-packager: mkpackage.sh: remove lucid
  * auto-packager: mkpackage.sh: add wily
  * acpi: Add SPCR ACPI table check (LP: #1433604)
  * dmi: dmicheck: add 4 new DMI chassis types
  * lots of bugfixes
- Enable building on all architectures</changelog>
<changelog author="mpluskal@suse.com" date="1469966400">- Update to version 16.07.00:
  * --uefi and --acpi options renamed to --uefitests and
  - -acpitests
  * ACPI table tests in the acpitables test have been moved into
    specific ACPI tests.
  * cpi: acpidump: update TCPA table and acpidump accordingly
  * acpi: add ACPI TCPA test
  * acpi: add XENV table test
  * lib: fwts_framework: Append "tests" to --uefi and --acpi
  * live-image/fwts-frontend-text: update to --uefitests and
  - -acpitests
  * lib: acpi, acpidump: rename slit tables types
  * lib: acpi: add in new GICC table fwts_acpi_table_gicc_affinity
  * acpi: add SRAT table sanity checking (LP: #1464658)
  * acpi: add BERT table sanity checking (LP: #1464712)
  * lib: acpi: Add in GAS address types
  * acpi: add ECDT table sanity checking (LP: #1464716)
  * lib: acpi: Add support for the SPMI table
  * acpi: add ACPI SPMI table sanity checking (LP: #1465256)
  * acpi: add ACPI SLIT table sanity checking (LP: #1465276)
  * lib: acpi: Add support for the HEST family of ACPI tables
  * acpi: add ACPI HEST table sanity checking (LP: #1465379)
  * acpi: Add BOOT table test (LP: #1465435)
  * acpi: Add DBGP table test (LP: #1465441)
  * acpi: Add DBG2 table test (LP: #1465710)
  * acpi: re-orgainise HPET tests
  * acpi: move MADT test from acpitables into new MADT test
  * acpi: move GTDT test from acpitables into new GTDT test
  * acpi: move XSDT test from acpitables into new XSDT test
  * acpi: move RSDP test from acpitables into new RSDP test
  * acpi: move RSDT test from acpitables into new RSDT test
  * acpi: acpitables: remove no-op MCFG test
  * acpi: move SBST test from acpitables into new SBST test
  * acpi: move FADT test from acpitables into existing FADT test
  * acpi: acpitables: remove redundant acpi table checking
  * acpi: allow various ACPI table tests to run without root access
  * lib: fwts_acpi_tables: fully pad out fixed up ACPI OEM IDs
  * acpi: spcr: add missing white space in error messages
  * acpi: add ACPI ERST test (LP: #1467835)
  * acpi: correct ACPI BGRT table type
  * acpi: add ACPI BGRT test (LP: #1467863)
  * acpi: add ACPI CPEP test (LP: #1467870)
  * acpi: add ACPI FACS test (LP: #1467966)
  * acpi: acpidump: add in missing exponent field to SLIC
  * acpi: add CSRT ACPI Table test (LP: #1470116)
  * acpi: add LPIT ACPI test (LP: #1470184)
  * acpi: add WAET ACPI table test (LP: #1470495)
  * acpi: add SLIC table test (LP: #1470518)
  * acpi: add MSDM table test (LP: #1470538)
  * acpi: add UEFI ACPI data table test (LP: #1471698)
  * bios: os2gap: remove ancient legacy test (LP: #1470573)
  * lost of bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1471521600">- Update to version 16.08.00 (boo#994319):
  * acpi: nfit: add ACPI NFIT test
  * lib: acpi: add support for MPST
  * acpi: mpst: add ACPI MPST test
  * lib: acpi: add support for PMTT
  * acpi: pmtt: add ACPI PMTT test
  * ACPICA: Update to version 20160729
  * lots of bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1473595200">- Update to version 16.09.00:
  * lib: acpi: add supports for WPBT
  * acpi: wpbt: add ACPI WPBT test
  * lib: acpi: add supports for DRTM
  * acpi: drtm: add ACPI DRTM test
  * lib: fwts_guid: add a compare function
  * acpi: nfit: check fields equals 0 for Virtual CD and Disk
  * opal: mtd: Add OPAL MTD Validation
  * acpi: ACPI Platform check updates
  * acpi: fadt: Remove HEADLESS check on reduced hardware
  * pci: aspm: Add segment support
  * ACPICA: Update to version 20160831
  * lots of bugs fixed
- Drop no longer needed json-c-includes.patch
- Exclude s390x from building</changelog>
<changelog author="mpluskal@suse.com" date="1479038400">- Update to version 16.11.00:
  * ACPICA: Update to version 20160930
  * uefibootpath: add test for eMMC device path
  * uefidump: add dumping for the eMMC device path
  * miscelanous bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1480593600">- Replace requires with recommends for dependencies</changelog>
<changelog author="mpluskal@suse.com" date="1483358400">- Update to version 16.12.0 (boo#1017763):
  * ACPICA: Update to version 20161117
  * klog.json: Add a few more kernel errors to the database
  * opal: pci_info: Add OPAL PCI Info validation
  * opal: mem_info: Add OPAL MEM Info validation
  * opal: cpu_info: Add OPAL CPU Info validation
  * securebootcert: add variable AuditMode checking
  * securebootcert: add variable DeployedMode checking
  * lots of bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1485604800">- Update to version 17.01.00:
  * ACPICA: Update to version 20161222
  * klog.json: Add kernel errors to the database
  * opal: pci_info: minor code style clean-ups</changelog>
<changelog author="mpluskal@suse.com" date="1488196800">- Update to version 17.02.00:
  * ACPICA: Update to version 20170119
  * acpi: s3: Add new --s3-resume-hook option
  * Add README_JSON.txt for FWTS
  * klog.json: Add some more kernel messages to klog data base
  * klog.json: Add some EFI driver kernel messages to klog database
  * klog.json: Add some EFI quirk driver kernel messages to klog database
  * klog.json: Add some more EFI driver kernel messages to klog database
  * klog.json: Add some miscellaneous messages to klog database
  * Integrate PPC for FWTS-LIVE Frontend
  * fwts_framework: handle -? option differently from -h
- Rebase fwts-no-compiletime.patch</changelog>
<changelog author="mpluskal@suse.com" date="1490356800">- Update to version 17.03.00:
  * ACPICA: Update to version 20170224
  * sbbr: Add "--sbbr" flag to support running SBBR Tests.
  * acpi: iort: Add support for SMMUv3
  * lots of bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1496577600">- Update to version 17.05.00:
  * Support SMBIOS 3.1.1 tests
  * dmi: dmicheck: check new offset in spec 3.11
  * dmi: dmicheck: check reserved bits of Type 7 offset 0x5
  * dmi: dmicheck: check reserved bits of Type 7 offset 0xd
  * dmi: dmicheck: add a function to verify reserved bits
  * dmi: dmicheck: add a helper function to check word min/max value
  * dmi: dmicheck: check pci(e) slot and segment, bus and dev/func
  * dmi: dmicheck: check reserved bits of offset 0x5 in type 13
  * dmi: dmicheck: add a helper function to check a reserved offset
  * dmi: dmicheck: check reserved bits in type 15 &amp; type 17
  * dmi: dmicheck: check reserved fields in type 22, 23, 30, 32, 38 and 39
  * dmi: dmicheck: add 64-bit integer to dmi_reserved_bits_check
  * dmi: dmicheck: add checks for new type 43
  * dmi: dmicheck: check reserved bits in Type 0
  * fwts/opal: Power management DT Validation tests.
  * fwts/opal: Reserved memory DT validation tests.
  * Add snapcraft rules to build a fwts snap</changelog>
<changelog author="mpluskal@suse.com" date="1498132800">- Update to version 17.06.00:
  * ACPICA: Update to version 20170531
  * olog: olog.json: Update OPAL skiboot errors to check on olog
    scan
  * bios: mtrr: print out actual default type of MTRR
  * lib: fwts_alloc: only parse mem info once we have a valid line
    read in
  * lib: fwts_safe_mem: add SIGBUS handling
  * lib: fwts_alloc: re-work the memory parsing again
  * acpi: method use correct format specifier for uint32_t type
  * bios: mtrr: fix compile error in ubuntu trusty
  * opal: fix tests dependency on libfdt
  * bios: mtrr: fix overlaped MTRR (LP: #1694710)</changelog>
<changelog author="mpluskal@suse.com" date="1503921600">- Update to version 17.07.00 (boo#1055891):
  * acpi: bgrt: update according to acpi 6.1 errata
  * acpi: method: update _PSD and _TSD tests according to ACPI 6.1
    errata
  * acpi: rsdp: revision 1 must have length 20 according to ACPI
    6.1 errata
  * acpi: method: Add _CPC revision 3 according to ACPI 6.2
  * acpi: hest: add new type 11 introduced in ACPI 6.2
  * acpi: srat: add new type 4 according to ACPI 6.2
  * acpi: method: update _GCP according to ACPI 6.2
  * acpi: hest: add notification type 11 according to ACPI 6.2
  * acpi: fadt: update minor version to 2 for ACPI 6.2
  * acpi: hest: add checks for GHES_ASSIST flag value in ACPI 6.2
  * acpi: wsmt: add wsmt test according to ACPI 6.2
  * ACPICA: Update to version 20170629
  * acpi: tpm2: Add additional start method values
  * acpi: iort: Add PMCG support</changelog>

</package>
<package pkgid="d61e6d4471a047b0a84676d152ab3c24d590c075f224d156912c841686c3a4ef" name="fwts" arch="x86_64">
    <version epoch="0" ver="17.07.00" rel="8.1"/>

<changelog author="mpluskal@suse.com" date="1443009600">- Update to 05.09.00
  * Update ACPICA to version 20150717
  * SMBios 3.0.0 tests supported
  * new features:
  + acpi: method: add _CR3 test
  + acpi: method: add _MTL test
  + acpi: method: add _RST test
  + acpi: method: add _PRR test
  + data: klog.json: sync with latest 4.2 kernel messages
    (LP: #1493039)
  + lib: smbios: add smbios version 3.0.0 entry find helper
  + dmicheck: add test for smbios 3.0.0 entry point
  + dmicheck: add error test for SMBIOS 3.0.0 table
  + dmicheck: sync the dmi value test with smbios 3.0.0 spec
  * fixed bugs:
  + acpi: fadt: merge tests for reset register
  + cpu: cpufreq: reduce scope of variables
  + acpi: gpedump: clarify precedence for &amp; and ?
  + lib: fwts_cpu: reduce scope on variables
  + ACPICA: Update to version 20150717 (LP: #1486253)
  + lib: fwts_log: re-work to clean up va_arg scoping
  + uefi: uefirtvariable: clean up cppcheck style warning
  + acpi: rsdp: make OEM ID test less strict
  + fix some spelling mistakes in code and sync fwts-tests
    accordingly
  + cpu: maxfreq: check for unlikely event that no CPUs in cpu
    list
  + acpi: crsdump: fix incorrect use of string size in string
    copies
  + lib: fwts_acpi_tables: add checking for empty table parsing
  + lib: fwts_acpi_table: remove dead initialisation of ptr
  + dmi: dmicheck: fix build error on 32 bit builds
  + Makefile.am: use pkg-config for json-c
  + lib: fwts_smbios: fix the smbios version from uefi always
    zero (LP: #1484023)
  + lib: fwts_scan_efi_systable: fix getting wrong smbios entry
    (LP: #1484046)
  + acpi: dbg2: won't find obj when no namespace device path
    (lp: #1486893)
  + lib: fwts_smbios: add the struct definition for smbios
    3.0.0
  + dmicheck: re-orgainise the smbios entry point check
  + dmicheck: fix the Base Board type range typos
  + auto-packager: mkpackage.sh: remove utopic</changelog>
<changelog author="mpluskal@suse.com" date="1447761600">- Update to 05.11.00
  * Update ACPICA to version 20150930
  * New Features
  + Add in the notion of ACPI compliance tests.
  + MADT subtables: Local SAPIC structure has 3 reserved bytes,
  not 1
  + ACPI: MADT: update GICC flag checks for ACPI 6.0
  + ACPI: MADT: further update to GICC flag checks for 6.0
  + acpi: method: skip scope names in method_evaluate_method
  + acpi: method: add _GPE test
  + acpi: method: add _TSN test
  + acpi: method: add _TFP test
  + acpi: method: add _EC test
  + acpi: method: add _CWS test
  + acpi: method: add _BTH test
  + auto-packager: mkpackage.sh: add xenial
  + acpi: tpm2: add check for zero control area address (LP:
  [#1506442])
  + securebootcert: change fail to warning when MS UEFI CA not
  found in DB
  + lib: fwts_uefi: add BMC device path define
  + uefidump: add dumping the BMC device path
  + uefibootpath: add test for the BMC device path
  + lib: fwts_uefi: add the URI device path define
  + uefibootpath: add test for the URI device path
  + uefidump: add dumping for the URI device path
  + lib: fwts_uefi: add the UFS device path define
  + uefidump: add dumping for the UFS device path
  + uefibootpath: add test for the UFS device path
  * Fixed Bugs
  + dmi: dmicheck: fix SMBIOS issues on aarch64 systems
  + acpidump: add missing reserved fields to MADT structures
  + cpufreq: the calibration is taking a long time, make it
  faster
  + acpi: tcpa: replace tab with spaces to fix formatting
  alignment</changelog>
<changelog author="mpluskal@suse.com" date="1450526400">- Update to 05.12.00
  * Update ACPICA to version 20151124
  * live-image/fwts-frontend-text: add a selection for recommended
  * data: klog.json: add in some more kernel error messages for
  4.3
  * ACPI: Add ASPT test
  * lib: framework: allow mixed tests and test category options
  * fwts: framework: Add --log-level option
  * lib: fwts_uefi: add SD device path define
  * Boot path sync with UEFI spec. 2.5
  + uefibootpath: add test for the SD device path
  + uefidump: add dumping for the SD device path
  + lib: fwts_uefi: add efi bluetooth device path define
  + uefibootpath: add test for the bluetooth device path
  + uefidump: add dumping for the bluetooth device path
  + lib: fwts_uefi: add wireless device path define
  + uefibootpath: add test for the wireless device path
  + uefidump: add dumping for the wireless device path
  + lib: fwts_uefi: add ramdisk device path define
  + uefibootpath: add test for the ramdisk device path
  + uefidump: add dumping for the ramdisk device path
  * Fixed bugs
  + acpi: fpdt: add a terminate for buggy BIOS that reports zero
  length
  + lib: klog: remove use of pcre, use regex instead
  + utilities: kernelscan: remove use of pcre, use regex instead
  + uefidump: add more bounds checking and remove need for heap
  + utilities: fix memory leak, line not being free'd
  + acpi: bert: remove redundant variable 'length'
  + lib: iasl: rework IASL interface to ACPICA
  + acpi: acpidump: use IASL rather than fwts custom table dump
  code
  + s3 + klog: make log scanning more robust for S3 (LP: #1522292)
  + lib: acpica: make region handler more robust (LP: #1524217)
  + debian: copyright, fix lintian warnings
  + Debian: update Standards-Version to 3.9.6
  + acpi: acpidump: check for fwts_iasl_init failure
  + lib: fwts_acpi_tables: fix segfault when tables fail to load
  (LP: #1452201)
  + acpi: dbg2: remove dead store to ptr1
  + hotkey: fix key reading loop, it needs to loop more than once
  + lib: fwts_framework: remove dead store to len in for loop
  + lib: fwts_acpi_table: remove redundant store to rsdt
  + acpi: gpedump: remove redundant store to gpe_xrupt_info
  + lib: fwts_acpi_tables: remove dead store to facs
  + acpica: fwts_acpica: remove redundant store to length
  + lib: fwts_acpi_tables: remove redundant store to xsdt
  + lib: fwts_acpi_tables: check table to avoid dereferencing
  NULL ptr
  + lib: fwts_acpi_table: Fix FADT update in creation of fake
  FACS table.
  + uefibootpath: fix the wrong type for relative offset range
  path</changelog>
<changelog author="mpluskal@suse.com" date="1453032000">- Update to 16.01.00
  * ACPICA: Update to version 20160108
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
  * ACPICA: Update to version 20151218
  * esrtdump: add dumping for esrt table
  * fixed bugs:
    + Fix spelling mistakes of "ACPI"
    + method: update method status
    + utilities: kernelscan: fix memory leaks and a segfault
    + acpi: cstates: fix clang build warning on zero CPUs.
    + acpi: s3, s3power, s4: replace cleanup free with explicit
    frees
    + data: klog.json: add in some more kernel error messages for
    4.4
    + acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
    + acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
    + bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
    + acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should
    be an info
    + Update copyright year to 2016
    + dmi: dmicheck: fix reserved bits mask for Processor
    Information
    + uefirtvariable: fix decalred VLA have zero size</changelog>
<changelog author="mpluskal@suse.com" date="1456401600">- Update to 16.02.00
  * Start defining FWTS architectures as variables
  * Define some utility functions for using the fwts_architecture
    enum
  * Add mechanism to tell FWTS what architecture is being tested
  * ACPI: MADT: add in compliance tests for the MADT and subtables
  * ACPI: Add in MADT subtable description for GIC ITS subtable
  * ACPI: MADT: add in compliance checks for the GIC ITS subtable
  * Documentation: add --acpicompliance to man page
  * Documentation: add --arch to the man page
  * RSDP: minor cleanups to rsdp.c for checkpatch issues
  * utilities: add a helper function for printing out architecture
    names
  * ACPI tables: when bodging up an RSDP, do the right thing for
    the arch
  * ACPI RSDP: flesh out the tests to check for full spec
    compliance.
  * Update regression test rsdp-0001/test-0001.sh
  * Update the regression test arg-help-0001/test-0001.sh
  * Update regression test for arg-help-0001/test-0002.sh
  * Update regression test for arg-show-tests-0001/test-0001.sh
  * Update regression test arg-show-tests-full-0001/test-0001.sh
  * Update the regression test arg-table-path-0001/test-0001.sh
  * Update the regression test madt-0001/test-0001.sh
  * Update the regression test madt-0001/test-0002.sh
  * FADT: enable compiling on non-x86 architectures
  * FADT: non-x86 machines need an FADT but x86 can survive
    without one
  * FADT: disable SCI_EN and RESET_REG tests when in reduced
    hardware mode
  * FADT: add in code to log basic info about the various FADT
    flag fields
  * Add in bit masks for FACS flags.
  * FADT: move log info out of test2, will provide it elsewhere
  * ACPI: Add hypervisor ID field to FADT.
  * FADT: minor cleanup and initial compliance tests
  * FADT: expand the compliance test for FIRMWARE_CTRL fields
  * FADT: expand compliance checks for DSDT and X_DSDT fields
  * FADT: add compliance tests for reserved fields, PM profile,
    reduced hardware
  * FADT: restructure test sequence around reduced hardware mode
  * FADT: expand compliance tests for the SMI_CMD field
  * FADT: add compliance tests for the ACPI_ENABLE and
    ACPI_DISABLE fields
  * FADT: add compliance tests for S4BIOS_REQ and PSTATE_CNT
    fields
  * FADT: extend and add PM address block compliance tests
  * FADT: enhance compliance tests for GPE blocks
  * FADT: add compliance test for the CST_CNT field
  * FADT: add in compliance tests for C2/C3 latency fields
  * FADT: add in SLEEP_CONTROL_REG and SLEEP_STATUS_REG
    compliance tests
  * FADT: remove no longer useful variables from test1
  * FADT: add safety checks for older versions of FADT
  * FADT: update regression tests to incorporate new/changed
    tests
  * acpi: method: add _PMC test
  * acpi: method: add _PRT test
  * fwts-test: update for _PMC and _PRT tests
  * acpi: method: add _RDI test
  * acpi: method: add _LPI test
  * fwts-test: update for _RDI and _LPI tests
  * acpi: method: remove non-method names from the top comments
  * acpi: erst: fix incorrect error message for reserved field
  * fwts-test: update erst test for the fix of reserved field
  * lib: fwts_klog: fix incorrect indentation, detected by gcc-6
  * lib: fwts_hwinfo: clean up type punning, fixes warning with
    gcc-6
  * fwts: wakealarm: reset wakealarm timer at end of test
    (LP: #1534003)
  * Update arg-show-tests-full now that we have an extra test in
    wakealarm
  * dmi: dmicheck: add some simple sanity checks to table size
  * lib: fwts_args: use safer strncat than strcat
  * lib: fwts_acpi_tables: don't do expensive low allocs multiple
    times
  * acpi: fadt: check 32/64 bit PM register addresses for
    inconsistency (LP: #1536606)
  * acpi: madt: fix incorrect format specifier for size_t
  * cpu: microcode: fix a couple of warnings found by cppcheck:
  * acpi: madt: clean up some minor style issues detected by
    cppcheck
  * data: klog.json: update to sync with 4.6 kernel changes
  * ACPICA: Update to version 20160212 (LP: #1545099)
  * lib: fwts_acpi_tables: fix warnings found by clang scan-build
  * lib: fwts_cpu: check for MSR read failures
  * lib: fwts_klog: handle the case where klog_old is empty list
  * acpica: fix disassembly on i386 platforms (LP: #1547469)
  * lib: fwts_arch: i686 arch name is also an X86 arch
    (LP: #1547554)
  * fwts-test: only run rsdp regression test on specific arches
    (LP: #1547602)
  * Fix null_gass initializer for older versions of gcc
    (LP: #1549429)
  * fwts-test: sync up with the arg-table-path</changelog>
<changelog author="mpluskal@suse.com" date="1458216000">- Update to 16.03.00
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
    + ACPICA: Update to version 20151218 (LP: #1527733)
    + esrtdump: add dumping for esrt table (LP: #1532103)
  * Fix spelling mistakes of "ACPI"
  * method: update method status
  * utilities: kernelscan: fix memory leaks and a segfault
  * acpi: cstates: fix clang build warning on zero CPUs.
  * acpi: s3, s3power, s4: replace cleanup free with explicit frees
  * data: klog.json: add in some more kernel error messages for 4.4
    (LP: #1526746)
  * acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
  * acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should be
    an info (LP:#1529717)
  * Update copyright year to 2016
  * dmi: dmicheck: fix reserved bits mask for Processor
    Information
  * uefirtvariable: fix decalred VLA have zero size (LP: #1526815)</changelog>
<changelog author="mpluskal@suse.com" date="1463572800">- Update to version 16.05.01:
  * ACPICA: Update to version 20160108 (LP: #1532268)
  * acpi: method: add _PTC test
  * sync with uefi 2.5 global variables
    + uefidump: add dumping global variabl AuditMode
    + uefidump: add dumping global variabl DeployedMode
    + uefidump: add dumping global variable OsRecoveryOrder
    + uefidump: add dumping global variable PlatformRecovery####
    + uefidump: add dumping global variable SysPrepOrder
    + uefidump: add dumping global variable SysPrep####
  * ACPICA: Update to version 20151218 (LP: #1527733)
  * esrtdump: add dumping for esrt table (LP: #1532103)
  * Fix spelling mistakes of "ACPI"
  * method: update method status
  * utilities: kernelscan: fix memory leaks and a segfault
  * acpi: cstates: fix clang build warning on zero CPUs.
  * acpi: s3, s3power, s4: replace cleanup free with explicit frees
  * data: klog.json: add in some more kernel error messages for 4.4
    (LP: #1526746)
  * acpi: hpet: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * acpi: pcc: fwts_mmap failure is FWTS_MAP_FAILED and not NULL
  * bios: ebdadump: fwts_mmap failure is FWTS_MAP_FAILED and not
    MAP_FAILED
  * acpi: syntaxcheck: ASL_MSG_COMPILER_RESERVED failure should be
    an info (LP: #1529717)
  * Update copyright year to 2016
  * dmi: dmicheck: fix reserved bits mask for Processor Information
  * uefirtvariable: fix decalred VLA have zero size (LP: #1526815)</changelog>
<changelog author="mpluskal@suse.com" date="1468670400">- Update to version 16.06.01:
  * lib: acpi: add an acpi category
  * live-image/fwts-frontend-text: add selections of acpi and uefi
    tests
  * acpi: add tests to acpi category
  * acpi: fwts-tests: Remove redundant tailing space and update
    fwts-tests
  * auto-packager: mkpackage.sh: remove lucid
  * auto-packager: mkpackage.sh: add wily
  * acpi: Add SPCR ACPI table check (LP: #1433604)
  * dmi: dmicheck: add 4 new DMI chassis types
  * lots of bugfixes
- Enable building on all architectures</changelog>
<changelog author="mpluskal@suse.com" date="1469966400">- Update to version 16.07.00:
  * --uefi and --acpi options renamed to --uefitests and
  - -acpitests
  * ACPI table tests in the acpitables test have been moved into
    specific ACPI tests.
  * cpi: acpidump: update TCPA table and acpidump accordingly
  * acpi: add ACPI TCPA test
  * acpi: add XENV table test
  * lib: fwts_framework: Append "tests" to --uefi and --acpi
  * live-image/fwts-frontend-text: update to --uefitests and
  - -acpitests
  * lib: acpi, acpidump: rename slit tables types
  * lib: acpi: add in new GICC table fwts_acpi_table_gicc_affinity
  * acpi: add SRAT table sanity checking (LP: #1464658)
  * acpi: add BERT table sanity checking (LP: #1464712)
  * lib: acpi: Add in GAS address types
  * acpi: add ECDT table sanity checking (LP: #1464716)
  * lib: acpi: Add support for the SPMI table
  * acpi: add ACPI SPMI table sanity checking (LP: #1465256)
  * acpi: add ACPI SLIT table sanity checking (LP: #1465276)
  * lib: acpi: Add support for the HEST family of ACPI tables
  * acpi: add ACPI HEST table sanity checking (LP: #1465379)
  * acpi: Add BOOT table test (LP: #1465435)
  * acpi: Add DBGP table test (LP: #1465441)
  * acpi: Add DBG2 table test (LP: #1465710)
  * acpi: re-orgainise HPET tests
  * acpi: move MADT test from acpitables into new MADT test
  * acpi: move GTDT test from acpitables into new GTDT test
  * acpi: move XSDT test from acpitables into new XSDT test
  * acpi: move RSDP test from acpitables into new RSDP test
  * acpi: move RSDT test from acpitables into new RSDT test
  * acpi: acpitables: remove no-op MCFG test
  * acpi: move SBST test from acpitables into new SBST test
  * acpi: move FADT test from acpitables into existing FADT test
  * acpi: acpitables: remove redundant acpi table checking
  * acpi: allow various ACPI table tests to run without root access
  * lib: fwts_acpi_tables: fully pad out fixed up ACPI OEM IDs
  * acpi: spcr: add missing white space in error messages
  * acpi: add ACPI ERST test (LP: #1467835)
  * acpi: correct ACPI BGRT table type
  * acpi: add ACPI BGRT test (LP: #1467863)
  * acpi: add ACPI CPEP test (LP: #1467870)
  * acpi: add ACPI FACS test (LP: #1467966)
  * acpi: acpidump: add in missing exponent field to SLIC
  * acpi: add CSRT ACPI Table test (LP: #1470116)
  * acpi: add LPIT ACPI test (LP: #1470184)
  * acpi: add WAET ACPI table test (LP: #1470495)
  * acpi: add SLIC table test (LP: #1470518)
  * acpi: add MSDM table test (LP: #1470538)
  * acpi: add UEFI ACPI data table test (LP: #1471698)
  * bios: os2gap: remove ancient legacy test (LP: #1470573)
  * lost of bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1471521600">- Update to version 16.08.00 (boo#994319):
  * acpi: nfit: add ACPI NFIT test
  * lib: acpi: add support for MPST
  * acpi: mpst: add ACPI MPST test
  * lib: acpi: add support for PMTT
  * acpi: pmtt: add ACPI PMTT test
  * ACPICA: Update to version 20160729
  * lots of bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1473595200">- Update to version 16.09.00:
  * lib: acpi: add supports for WPBT
  * acpi: wpbt: add ACPI WPBT test
  * lib: acpi: add supports for DRTM
  * acpi: drtm: add ACPI DRTM test
  * lib: fwts_guid: add a compare function
  * acpi: nfit: check fields equals 0 for Virtual CD and Disk
  * opal: mtd: Add OPAL MTD Validation
  * acpi: ACPI Platform check updates
  * acpi: fadt: Remove HEADLESS check on reduced hardware
  * pci: aspm: Add segment support
  * ACPICA: Update to version 20160831
  * lots of bugs fixed
- Drop no longer needed json-c-includes.patch
- Exclude s390x from building</changelog>
<changelog author="mpluskal@suse.com" date="1479038400">- Update to version 16.11.00:
  * ACPICA: Update to version 20160930
  * uefibootpath: add test for eMMC device path
  * uefidump: add dumping for the eMMC device path
  * miscelanous bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1480593600">- Replace requires with recommends for dependencies</changelog>
<changelog author="mpluskal@suse.com" date="1483358400">- Update to version 16.12.0 (boo#1017763):
  * ACPICA: Update to version 20161117
  * klog.json: Add a few more kernel errors to the database
  * opal: pci_info: Add OPAL PCI Info validation
  * opal: mem_info: Add OPAL MEM Info validation
  * opal: cpu_info: Add OPAL CPU Info validation
  * securebootcert: add variable AuditMode checking
  * securebootcert: add variable DeployedMode checking
  * lots of bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1485604800">- Update to version 17.01.00:
  * ACPICA: Update to version 20161222
  * klog.json: Add kernel errors to the database
  * opal: pci_info: minor code style clean-ups</changelog>
<changelog author="mpluskal@suse.com" date="1488196800">- Update to version 17.02.00:
  * ACPICA: Update to version 20170119
  * acpi: s3: Add new --s3-resume-hook option
  * Add README_JSON.txt for FWTS
  * klog.json: Add some more kernel messages to klog data base
  * klog.json: Add some EFI driver kernel messages to klog database
  * klog.json: Add some EFI quirk driver kernel messages to klog database
  * klog.json: Add some more EFI driver kernel messages to klog database
  * klog.json: Add some miscellaneous messages to klog database
  * Integrate PPC for FWTS-LIVE Frontend
  * fwts_framework: handle -? option differently from -h
- Rebase fwts-no-compiletime.patch</changelog>
<changelog author="mpluskal@suse.com" date="1490356800">- Update to version 17.03.00:
  * ACPICA: Update to version 20170224
  * sbbr: Add "--sbbr" flag to support running SBBR Tests.
  * acpi: iort: Add support for SMMUv3
  * lots of bugfixes</changelog>
<changelog author="mpluskal@suse.com" date="1496577600">- Update to version 17.05.00:
  * Support SMBIOS 3.1.1 tests
  * dmi: dmicheck: check new offset in spec 3.11
  * dmi: dmicheck: check reserved bits of Type 7 offset 0x5
  * dmi: dmicheck: check reserved bits of Type 7 offset 0xd
  * dmi: dmicheck: add a function to verify reserved bits
  * dmi: dmicheck: add a helper function to check word min/max value
  * dmi: dmicheck: check pci(e) slot and segment, bus and dev/func
  * dmi: dmicheck: check reserved bits of offset 0x5 in type 13
  * dmi: dmicheck: add a helper function to check a reserved offset
  * dmi: dmicheck: check reserved bits in type 15 &amp; type 17
  * dmi: dmicheck: check reserved fields in type 22, 23, 30, 32, 38 and 39
  * dmi: dmicheck: add 64-bit integer to dmi_reserved_bits_check
  * dmi: dmicheck: add checks for new type 43
  * dmi: dmicheck: check reserved bits in Type 0
  * fwts/opal: Power management DT Validation tests.
  * fwts/opal: Reserved memory DT validation tests.
  * Add snapcraft rules to build a fwts snap</changelog>
<changelog author="mpluskal@suse.com" date="1498132800">- Update to version 17.06.00:
  * ACPICA: Update to version 20170531
  * olog: olog.json: Update OPAL skiboot errors to check on olog
    scan
  * bios: mtrr: print out actual default type of MTRR
  * lib: fwts_alloc: only parse mem info once we have a valid line
    read in
  * lib: fwts_safe_mem: add SIGBUS handling
  * lib: fwts_alloc: re-work the memory parsing again
  * acpi: method use correct format specifier for uint32_t type
  * bios: mtrr: fix compile error in ubuntu trusty
  * opal: fix tests dependency on libfdt
  * bios: mtrr: fix overlaped MTRR (LP: #1694710)</changelog>
<changelog author="mpluskal@suse.com" date="1503921600">- Update to version 17.07.00 (boo#1055891):
  * acpi: bgrt: update according to acpi 6.1 errata
  * acpi: method: update _PSD and _TSD tests according to ACPI 6.1
    errata
  * acpi: rsdp: revision 1 must have length 20 according to ACPI
    6.1 errata
  * acpi: method: Add _CPC revision 3 according to ACPI 6.2
  * acpi: hest: add new type 11 introduced in ACPI 6.2
  * acpi: srat: add new type 4 according to ACPI 6.2
  * acpi: method: update _GCP according to ACPI 6.2
  * acpi: hest: add notification type 11 according to ACPI 6.2
  * acpi: fadt: update minor version to 2 for ACPI 6.2
  * acpi: hest: add checks for GHES_ASSIST flag value in ACPI 6.2
  * acpi: wsmt: add wsmt test according to ACPI 6.2
  * ACPICA: Update to version 20170629
  * acpi: tpm2: Add additional start method values
  * acpi: iort: Add PMCG support</changelog>

</package>
<package pkgid="bc986ccad3fab264d559befbd77921058fbbd1dcb584f14883a65082ebd6cc8f" name="gcc48" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="bead4d1e788f9d5e7a2519366817bcbb5bc4da10026b3830fe08612136e117ee" name="gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="96b34809773e0cbebfb13d7d40f8a05bf52d31549594a123e95379652709c514" name="gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="3a78b72577bba014845e954c0555ef26a1f5286e7b73dae2b6dee62e06acc8d3" name="gcc48-ada" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="ac11f5dd19bb609b2e524f482803df5ccf4aafe7908cfbed3b090f6d7b06507a" name="gcc48-ada-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="c8c39f7487b61e82ce90f1505b827becc6ea555032dae5d95e4742de26598633" name="gcc48-c++" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="acdd515b821016e448c950c1e56a6677a7b89deff39fa7e9cdf6ab93d4494d09" name="gcc48-fortran" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="d204e253420b2e339afde08f567367e25494be44df275d4e3637baaae85b721f" name="gcc48-fortran-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="7b24926ac4e8772b43d25dd5cfa87094069d82a6947c10c429695f6a32c6cbf6" name="gcc48-gij" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="df003508254f8e228d8ac762a4c819820b9371f93200524ece45dcba267cc8b7" name="gcc48-gij-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="a137c880cb6045083524df99ef3f713f0d664bb9374fa673baf7ec6cd9de030f" name="gcc48-info" arch="noarch">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="1acd6ae4bbbb02db97b824c8e78da7f2638e4d6b85ccea6df02482d01e9ba7d4" name="gcc48-java" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="aa2a29f5b36d587ad955df4a21f0452ddfa3e17be779529385b96209af263d7c" name="gcc48-locale" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="f1532f7c64a908b257c0f3326b69b1455b1edfed38b9cbc29387265841ecccdf" name="gcc48-obj-c++" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="f561464ddc318d23bec1ee58ddbb37ff359bd61129f349dcbdf86f0ec46d7d41" name="gcc48-objc" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="c160d34ea762af0c56a6668f32883311489e36578a3ad63083173734cdacb8d8" name="gcc48-objc-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="2773b63146e76abf677d944b6398fd98cbef040d17d3d5f858501302f7717a01" name="gcc48-testresults" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="84482590b5774b5eb3118d9428ce8c78935050aaab03d789256d1a901639d52b" name="gcc48-testresults" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.4"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="1506699e49633998d500566233054afe74d1a3b1bd64e454431c735bed5a1277" name="gcc7" arch="src">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="d88fa1cfa95a8500c3a553806e95fbdc06a0520071408df1d860d9fee95753c1" name="gcc7" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="a2aa51d66bbc263891df2952d0e2d5be4ba326b7c802721d700b854cf28bcf59" name="gcc7-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="fa3e6bd562dda8d7e9490e4983d49f9dbbea08368296f7c3f463e59898b2f0a2" name="gcc7-ada" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="a96ce54e5c52d9d9a0aa61e7541c2c014937008ce1c7e7ed5c6c1489e50c3b3f" name="gcc7-ada-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="113df6722944a3704995eb67c89db545c4c48f32a7c84c49959008b86a785cec" name="gcc7-c++" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="aa5561564b5342747969f39bd4dfe8bb5f135ada8aa3e5a53652188bcadf3417" name="gcc7-c++-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="b79b5c9e4575f22c820b2805a5074ce17c630e406be9bfc18fcd8e02bd825018" name="gcc7-fortran" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="d686b1939ee1532ba1df553d4254ca2f58c9edffa358f46864a6e77d9b456442" name="gcc7-fortran-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="4aabd594a4ee813a12a08585c42b3f5ec7a1b5f34fc3f4a2bd08c77e27086e39" name="gcc7-go" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="6cb5f6020a452fdfb8e116561a9daecd5d57b0df9ffd07ef63c73aee5a8b7516" name="gcc7-go-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="48bda94e07310d165ccf80e0259b461cfa4b6a0e933237044ee70a3d6f58d821" name="gcc7-info" arch="noarch">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="0d4fbe1086bca2931b073a635224f1fdf4cfed775db37c83a78b2cfb9ea72718" name="gcc7-locale" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="12001ec5b74cb8fbcca10b61f6a6744c7b982a798658211c55b7227aa9aeb64f" name="gcc7-testresults" arch="src">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="282b27c49a0dd6cac64c68c1669ecdd9f7cd1e24b6f0a46f9957e3e5b116b196" name="gcc7-testresults" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="26d8bced48379e4371ec31e0d95a8dc2031b6e091e3424cf4f055bc4e95814b1" name="gdb" arch="src">
    <version epoch="0" ver="8.0.1" rel="3.1"/>

<changelog author="matz@suse.de" date="1456747200">- Rebase to gdb version 7.11 as of version in Fedora 24:
  * Per-inferior thread numbers.
  * Breakpoint "explicit locations" (via CLI and GDB/MI).
  * New convenience variables ($_gthread, $_inferior).
  * Record btrace now supports non-stop mode.
  * Various improvements on AArch64 GNU/Linux:
  - Multi-architecture debugging support.
  - displaced stepping.
  - tracepoint support added in GDBserver.
  * In Ada, the overloads selection menu provides the parameter
    types and return types for the matching overloaded subprograms.
  * Various remote protocol improvements, including several
    new packets which can be used to support features such as
    follow-exec-mode, exec catchpoints, syscall catchpoints, etc.
  * Some minor improvements in the Python API for extending GDB.
- Added local patch gdb-fix-buf-overflow.diff.
- Added new patches from Fedora:
    gdb-fedora-libncursesw.patch
    gdb-fortran-stride-intel-1of6.patch
    gdb-fortran-stride-intel-2of6.patch
    gdb-fortran-stride-intel-3of6.patch
    gdb-fortran-stride-intel-4of6.patch
    gdb-fortran-stride-intel-5of6.patch
    gdb-fortran-stride-intel-6of6-nokfail.patch
    gdb-fortran-stride-intel-6of6.patch
    gdb-opcodes-clflushopt-test.patch
    gdb-testsuite-readline63-sigint.patch
- Removed obsolete patches:
    gdb-6.3-bz231832-obstack-2gb.patch
    gdb-probes-based-interface-robust-1of2.patch
    gdb-probes-based-interface-robust-2of2.patch
    gdb-rhbz1260558-ppc64le-skip_trampoline_code.patch
    gdb-rhbz1270564-invalid-dwarf-regno.patch
    gdb-rhel5-compat.patch
- Really disable problematic testcases.</changelog>
<changelog author="rguenther@suse.com" date="1458561600">- Add gdb-7.10-swo18929.patch to fix crash printing values.  [bnc#971556]
  [swo#18929]</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460030400">-  update gdb-orphanripper.c from last fedora changes of 2013
  http://pkgs.fedoraproject.org/cgit/rpms/gdb.git/log/gdb-orphanripper.c
  may be solution to transient build hung on Rings:1 ppc64le
  tracked by bug boo#974419</changelog>
<changelog author="rguenther@suse.com" date="1461585600">[diverging changelog entry from SLE tree vs devel:gcc tree:
- Add gdb-7.9-bnc976404.patch to fix thread support on s390x. [bnc #976404]
  [bnc #970589]
- Add gdb-7.9-swo18929.patch to fix crash printing values.  [bnc#971556]
  ]
- Removed gdb-7.9-bnc976404.patch when updating to devel:gcc tree.
- Replaced gdb-7.9-swo18929.patch with gdb-7.10-swo18929.patch as well.</changelog>
<changelog author="martin.liska@suse.com" date="1464091200">- Add gdb-gcc6-Wparentheses-warning.patch to fix Werrors reported by GCC6.</changelog>
<changelog author="matz@suse.com" date="1466424000">- Rebase to gdb 7.11.1: minor bug fixes.
- Remove gdb-gcc6-Wparentheses-warning.patch (applied upstream).
- Add some patches from Fedora F24:
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-bz1219747-attach-kills.patch
  gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch
  gdb-rhbz1325795-framefilters-test.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch</changelog>
<changelog author="matz@suse.com" date="1470225600">- Add gdb-aarch64-v81-hwbreakpoints.diff for detecting
  debug capabilities on ARMv8.1/8.2.  [bnc#990697]</changelog>
<changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
<changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
<changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
<changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
<changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
<changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
<changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
<changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
<changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
<changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
<changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
<changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>

</package>
<package pkgid="ecbdbee223b93274438fab34382a69ac2dafb479f6513919dd762de5158f773e" name="gdb" arch="x86_64">
    <version epoch="0" ver="8.0.1" rel="3.1"/>

<changelog author="matz@suse.de" date="1456747200">- Rebase to gdb version 7.11 as of version in Fedora 24:
  * Per-inferior thread numbers.
  * Breakpoint "explicit locations" (via CLI and GDB/MI).
  * New convenience variables ($_gthread, $_inferior).
  * Record btrace now supports non-stop mode.
  * Various improvements on AArch64 GNU/Linux:
  - Multi-architecture debugging support.
  - displaced stepping.
  - tracepoint support added in GDBserver.
  * In Ada, the overloads selection menu provides the parameter
    types and return types for the matching overloaded subprograms.
  * Various remote protocol improvements, including several
    new packets which can be used to support features such as
    follow-exec-mode, exec catchpoints, syscall catchpoints, etc.
  * Some minor improvements in the Python API for extending GDB.
- Added local patch gdb-fix-buf-overflow.diff.
- Added new patches from Fedora:
    gdb-fedora-libncursesw.patch
    gdb-fortran-stride-intel-1of6.patch
    gdb-fortran-stride-intel-2of6.patch
    gdb-fortran-stride-intel-3of6.patch
    gdb-fortran-stride-intel-4of6.patch
    gdb-fortran-stride-intel-5of6.patch
    gdb-fortran-stride-intel-6of6-nokfail.patch
    gdb-fortran-stride-intel-6of6.patch
    gdb-opcodes-clflushopt-test.patch
    gdb-testsuite-readline63-sigint.patch
- Removed obsolete patches:
    gdb-6.3-bz231832-obstack-2gb.patch
    gdb-probes-based-interface-robust-1of2.patch
    gdb-probes-based-interface-robust-2of2.patch
    gdb-rhbz1260558-ppc64le-skip_trampoline_code.patch
    gdb-rhbz1270564-invalid-dwarf-regno.patch
    gdb-rhel5-compat.patch
- Really disable problematic testcases.</changelog>
<changelog author="rguenther@suse.com" date="1458561600">- Add gdb-7.10-swo18929.patch to fix crash printing values.  [bnc#971556]
  [swo#18929]</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460030400">-  update gdb-orphanripper.c from last fedora changes of 2013
  http://pkgs.fedoraproject.org/cgit/rpms/gdb.git/log/gdb-orphanripper.c
  may be solution to transient build hung on Rings:1 ppc64le
  tracked by bug boo#974419</changelog>
<changelog author="rguenther@suse.com" date="1461585600">[diverging changelog entry from SLE tree vs devel:gcc tree:
- Add gdb-7.9-bnc976404.patch to fix thread support on s390x. [bnc #976404]
  [bnc #970589]
- Add gdb-7.9-swo18929.patch to fix crash printing values.  [bnc#971556]
  ]
- Removed gdb-7.9-bnc976404.patch when updating to devel:gcc tree.
- Replaced gdb-7.9-swo18929.patch with gdb-7.10-swo18929.patch as well.</changelog>
<changelog author="martin.liska@suse.com" date="1464091200">- Add gdb-gcc6-Wparentheses-warning.patch to fix Werrors reported by GCC6.</changelog>
<changelog author="matz@suse.com" date="1466424000">- Rebase to gdb 7.11.1: minor bug fixes.
- Remove gdb-gcc6-Wparentheses-warning.patch (applied upstream).
- Add some patches from Fedora F24:
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-bz1219747-attach-kills.patch
  gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch
  gdb-rhbz1325795-framefilters-test.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch</changelog>
<changelog author="matz@suse.com" date="1470225600">- Add gdb-aarch64-v81-hwbreakpoints.diff for detecting
  debug capabilities on ARMv8.1/8.2.  [bnc#990697]</changelog>
<changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
<changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
<changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
<changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
<changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
<changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
<changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
<changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
<changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
<changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
<changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
<changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>

</package>
<package pkgid="8abac23482e4def340d3d580734b8ebf5749f52a76ab1b51e45345ce29b5760a" name="gdb-testresults" arch="x86_64">
    <version epoch="0" ver="8.0.1" rel="3.1"/>

<changelog author="matz@suse.de" date="1456747200">- Rebase to gdb version 7.11 as of version in Fedora 24:
  * Per-inferior thread numbers.
  * Breakpoint "explicit locations" (via CLI and GDB/MI).
  * New convenience variables ($_gthread, $_inferior).
  * Record btrace now supports non-stop mode.
  * Various improvements on AArch64 GNU/Linux:
  - Multi-architecture debugging support.
  - displaced stepping.
  - tracepoint support added in GDBserver.
  * In Ada, the overloads selection menu provides the parameter
    types and return types for the matching overloaded subprograms.
  * Various remote protocol improvements, including several
    new packets which can be used to support features such as
    follow-exec-mode, exec catchpoints, syscall catchpoints, etc.
  * Some minor improvements in the Python API for extending GDB.
- Added local patch gdb-fix-buf-overflow.diff.
- Added new patches from Fedora:
    gdb-fedora-libncursesw.patch
    gdb-fortran-stride-intel-1of6.patch
    gdb-fortran-stride-intel-2of6.patch
    gdb-fortran-stride-intel-3of6.patch
    gdb-fortran-stride-intel-4of6.patch
    gdb-fortran-stride-intel-5of6.patch
    gdb-fortran-stride-intel-6of6-nokfail.patch
    gdb-fortran-stride-intel-6of6.patch
    gdb-opcodes-clflushopt-test.patch
    gdb-testsuite-readline63-sigint.patch
- Removed obsolete patches:
    gdb-6.3-bz231832-obstack-2gb.patch
    gdb-probes-based-interface-robust-1of2.patch
    gdb-probes-based-interface-robust-2of2.patch
    gdb-rhbz1260558-ppc64le-skip_trampoline_code.patch
    gdb-rhbz1270564-invalid-dwarf-regno.patch
    gdb-rhel5-compat.patch
- Really disable problematic testcases.</changelog>
<changelog author="rguenther@suse.com" date="1458561600">- Add gdb-7.10-swo18929.patch to fix crash printing values.  [bnc#971556]
  [swo#18929]</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460030400">-  update gdb-orphanripper.c from last fedora changes of 2013
  http://pkgs.fedoraproject.org/cgit/rpms/gdb.git/log/gdb-orphanripper.c
  may be solution to transient build hung on Rings:1 ppc64le
  tracked by bug boo#974419</changelog>
<changelog author="rguenther@suse.com" date="1461585600">[diverging changelog entry from SLE tree vs devel:gcc tree:
- Add gdb-7.9-bnc976404.patch to fix thread support on s390x. [bnc #976404]
  [bnc #970589]
- Add gdb-7.9-swo18929.patch to fix crash printing values.  [bnc#971556]
  ]
- Removed gdb-7.9-bnc976404.patch when updating to devel:gcc tree.
- Replaced gdb-7.9-swo18929.patch with gdb-7.10-swo18929.patch as well.</changelog>
<changelog author="martin.liska@suse.com" date="1464091200">- Add gdb-gcc6-Wparentheses-warning.patch to fix Werrors reported by GCC6.</changelog>
<changelog author="matz@suse.com" date="1466424000">- Rebase to gdb 7.11.1: minor bug fixes.
- Remove gdb-gcc6-Wparentheses-warning.patch (applied upstream).
- Add some patches from Fedora F24:
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-bz1219747-attach-kills.patch
  gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch
  gdb-rhbz1325795-framefilters-test.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch</changelog>
<changelog author="matz@suse.com" date="1470225600">- Add gdb-aarch64-v81-hwbreakpoints.diff for detecting
  debug capabilities on ARMv8.1/8.2.  [bnc#990697]</changelog>
<changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
<changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
<changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
<changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
<changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
<changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
<changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
<changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
<changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
<changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
<changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
<changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>

</package>
<package pkgid="641fae0b7927963a023daeda9171ec565daf19db48862ea1086ba7f818cf2607" name="gdbserver" arch="x86_64">
    <version epoch="0" ver="8.0.1" rel="3.1"/>

<changelog author="matz@suse.de" date="1456747200">- Rebase to gdb version 7.11 as of version in Fedora 24:
  * Per-inferior thread numbers.
  * Breakpoint "explicit locations" (via CLI and GDB/MI).
  * New convenience variables ($_gthread, $_inferior).
  * Record btrace now supports non-stop mode.
  * Various improvements on AArch64 GNU/Linux:
  - Multi-architecture debugging support.
  - displaced stepping.
  - tracepoint support added in GDBserver.
  * In Ada, the overloads selection menu provides the parameter
    types and return types for the matching overloaded subprograms.
  * Various remote protocol improvements, including several
    new packets which can be used to support features such as
    follow-exec-mode, exec catchpoints, syscall catchpoints, etc.
  * Some minor improvements in the Python API for extending GDB.
- Added local patch gdb-fix-buf-overflow.diff.
- Added new patches from Fedora:
    gdb-fedora-libncursesw.patch
    gdb-fortran-stride-intel-1of6.patch
    gdb-fortran-stride-intel-2of6.patch
    gdb-fortran-stride-intel-3of6.patch
    gdb-fortran-stride-intel-4of6.patch
    gdb-fortran-stride-intel-5of6.patch
    gdb-fortran-stride-intel-6of6-nokfail.patch
    gdb-fortran-stride-intel-6of6.patch
    gdb-opcodes-clflushopt-test.patch
    gdb-testsuite-readline63-sigint.patch
- Removed obsolete patches:
    gdb-6.3-bz231832-obstack-2gb.patch
    gdb-probes-based-interface-robust-1of2.patch
    gdb-probes-based-interface-robust-2of2.patch
    gdb-rhbz1260558-ppc64le-skip_trampoline_code.patch
    gdb-rhbz1270564-invalid-dwarf-regno.patch
    gdb-rhel5-compat.patch
- Really disable problematic testcases.</changelog>
<changelog author="rguenther@suse.com" date="1458561600">- Add gdb-7.10-swo18929.patch to fix crash printing values.  [bnc#971556]
  [swo#18929]</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460030400">-  update gdb-orphanripper.c from last fedora changes of 2013
  http://pkgs.fedoraproject.org/cgit/rpms/gdb.git/log/gdb-orphanripper.c
  may be solution to transient build hung on Rings:1 ppc64le
  tracked by bug boo#974419</changelog>
<changelog author="rguenther@suse.com" date="1461585600">[diverging changelog entry from SLE tree vs devel:gcc tree:
- Add gdb-7.9-bnc976404.patch to fix thread support on s390x. [bnc #976404]
  [bnc #970589]
- Add gdb-7.9-swo18929.patch to fix crash printing values.  [bnc#971556]
  ]
- Removed gdb-7.9-bnc976404.patch when updating to devel:gcc tree.
- Replaced gdb-7.9-swo18929.patch with gdb-7.10-swo18929.patch as well.</changelog>
<changelog author="martin.liska@suse.com" date="1464091200">- Add gdb-gcc6-Wparentheses-warning.patch to fix Werrors reported by GCC6.</changelog>
<changelog author="matz@suse.com" date="1466424000">- Rebase to gdb 7.11.1: minor bug fixes.
- Remove gdb-gcc6-Wparentheses-warning.patch (applied upstream).
- Add some patches from Fedora F24:
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-bz1219747-attach-kills.patch
  gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch
  gdb-rhbz1325795-framefilters-test.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch</changelog>
<changelog author="matz@suse.com" date="1470225600">- Add gdb-aarch64-v81-hwbreakpoints.diff for detecting
  debug capabilities on ARMv8.1/8.2.  [bnc#990697]</changelog>
<changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
<changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
<changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
<changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
<changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
<changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
<changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
<changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
<changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
<changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
<changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
<changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
<changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>

</package>
<package pkgid="22ee64cd33f11fac15ce16a3a42a10f47650add13336b9e39ec7ae79ee94c794" name="gdk-pixbuf" arch="src">
    <version epoch="0" ver="2.34.0" rel="10.1"/>

<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
<changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
<changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
<changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
<changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
<changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>

</package>
<package pkgid="cc45eceacc446e741b720da7e857bfdf89bd1760b31a89381d0d92ef52b05164" name="gdk-pixbuf-devel" arch="x86_64">
    <version epoch="0" ver="2.34.0" rel="10.1"/>

<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
<changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
<changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
<changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
<changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
<changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>

</package>
<package pkgid="13e30d1e0c2f384563b861d0a7149485d9ab9b9f9707b936c723b7051a8f0352" name="gdk-pixbuf-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.34.0" rel="10.1"/>

<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
<changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
<changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
<changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
<changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
<changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>

</package>
<package pkgid="5112065e165299e65e42b46723dd41ec7266deb6fd93dc470ab47b7845d954f6" name="gdk-pixbuf-lang" arch="noarch">
    <version epoch="0" ver="2.34.0" rel="10.1"/>

<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
<changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
<changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
<changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
<changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
<changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>

</package>
<package pkgid="ecde07e8738b4f9fd5a267d20c663323297185f84b50e6abe691743ccd9627f8" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
    <version epoch="0" ver="2.40.18" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
<changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
<changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
<changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
<changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
<changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
<changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
<changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
<changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
<changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
<changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
<changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
<changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>

</package>
<package pkgid="14f96493c32aa5dcd06ec9e0ac81abe4cf2aadd2a7fafcfafbb316c739b925aa" name="gdk-pixbuf-loader-rsvg-32bit" arch="x86_64">
    <version epoch="0" ver="2.40.18" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
<changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
<changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
<changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
<changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
<changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
<changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
<changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
<changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
<changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
<changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
<changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
<changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>

</package>
<package pkgid="bd1d41a555965f954653e07603e42d5894120bb8289f9c02ff8ee2023a2fd669" name="gdk-pixbuf-query-loaders" arch="x86_64">
    <version epoch="0" ver="2.34.0" rel="10.1"/>

<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
<changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
<changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
<changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
<changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
<changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>

</package>
<package pkgid="cc253f3f650331bb471507517f5d1d18ea540df573a6da504e7957f838af3a0e" name="gdk-pixbuf-query-loaders-32bit" arch="x86_64">
    <version epoch="0" ver="2.34.0" rel="10.1"/>

<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
<changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
<changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
<changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
<changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
<changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>

</package>
<package pkgid="1238fa535b463df15d639f75ae491fd469e3027ab2bd81e741bd18e252fcd1d1" name="git" arch="src">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="d674cf5ec9e54107bd920af9a3c8d9cb6d01c064e08253ea57ebbad9946f0d27" name="git" arch="src">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="39b5e9cf432f06486432aebf7bb9bb71f973ee2a419a1348175fb957faaa9a3a" name="git" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="e474fca9d04a27f9e2fd2e57bc3a40d3b316d0e1c21fb8991f5eb85f16f1e7b7" name="git" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="b48a4ae76b2cb541af08a198df858a9b8012ec510d65aeda4c83f393b6140c56" name="git-annex" arch="src">
    <version epoch="0" ver="6.20170818" rel="3.1"/>

<changelog author="mimi.vx@gmail.com" date="1465905600">- Declare build requirement on 'bash-completion' to fix the build in
  Tumbleweed.</changelog>
<changelog author="psimons@suse.com" date="1466164800">- Declare the fact that the git-annex bash-completion sub-package
  supplements normal bash-completions, i.e. it's a recommended
  package. Suggested by @dimstar in his OBS review.</changelog>
<changelog author="psimons@suse.com" date="1468152000">- Update to version 6.20160511 revision 0 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1474459200">- Update to version 6.20160907 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1474891200">- Update to version 6.20160923 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1476705600">- Update to version 6.20161012 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
<changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
<changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
<changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>

</package>
<package pkgid="066e41374acedcd8de8003080d5ac282710cd831d1eaed039260f877d1a0bc3e" name="git-annex" arch="x86_64">
    <version epoch="0" ver="6.20170818" rel="3.1"/>

<changelog author="mimi.vx@gmail.com" date="1465905600">- Declare build requirement on 'bash-completion' to fix the build in
  Tumbleweed.</changelog>
<changelog author="psimons@suse.com" date="1466164800">- Declare the fact that the git-annex bash-completion sub-package
  supplements normal bash-completions, i.e. it's a recommended
  package. Suggested by @dimstar in his OBS review.</changelog>
<changelog author="psimons@suse.com" date="1468152000">- Update to version 6.20160511 revision 0 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1474459200">- Update to version 6.20160907 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1474891200">- Update to version 6.20160923 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1476705600">- Update to version 6.20161012 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
<changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
<changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
<changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>

</package>
<package pkgid="96b8cc650b5010d35126633571be6a38a949378bde0fb4e8d892d8f7760afc25" name="git-annex-bash-completion" arch="x86_64">
    <version epoch="0" ver="6.20170818" rel="3.1"/>

<changelog author="mimi.vx@gmail.com" date="1465905600">- Declare build requirement on 'bash-completion' to fix the build in
  Tumbleweed.</changelog>
<changelog author="psimons@suse.com" date="1466164800">- Declare the fact that the git-annex bash-completion sub-package
  supplements normal bash-completions, i.e. it's a recommended
  package. Suggested by @dimstar in his OBS review.</changelog>
<changelog author="psimons@suse.com" date="1468152000">- Update to version 6.20160511 revision 0 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1474459200">- Update to version 6.20160907 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1474891200">- Update to version 6.20160923 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1476705600">- Update to version 6.20161012 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
<changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
<changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
<changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
<changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>

</package>
<package pkgid="5d75593add9047d5eba60db9d4b2103209c93d117ae517b942c9b8a328b6e5bf" name="git-arch" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="9f6e171e66699d31dd3efc2802d126986b59aa0b2df5fde78c26b35c692495fa" name="git-arch" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="25285390f7f322d517ede219f1627ee21e1cd01d52a7477d9009a4691c6bfc84" name="git-core" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="b6b48c87b75e7d6bf55eb397aa37611a9ea0f77766d7608ccb15ba77ae8f4d8c" name="git-core" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="92ec454fcf64a91a827fec0890b1470bf1f3cd28992149ba52746c7d8a7cd6ec" name="git-credential-gnome-keyring" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="6bfcd9a28516597d8b25335e05066344617fac6d9348f117d43298cd4d46aaa5" name="git-credential-gnome-keyring" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="57e1c7bea23269a7f5a1a49ced246a97c1f3eab6d79528a9746925a05cec32d9" name="git-cvs" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="1d84b6bd268ef2a122fcc9cc58e2e5bd911f4f0f03c6d3b23c07c16b3250b706" name="git-cvs" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="bb268b962af8f2cd43beb3045f7b0e9e8bb07b570faefc49fa8a5b7afcc54b42" name="git-daemon" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="ef62188d3e87ad04c79ed7f5284c08daaa577aa8e71b14b6ebefe34730e013b8" name="git-daemon" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="7462b4c8727a673ba3a0511391a6b6ffc056d46b0861f97678aab58f6edaff39" name="git-doc" arch="noarch">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="0b620889d88166963f4c2ebc4b913183398a0eeea5b4010470d51658bd01b995" name="git-doc" arch="noarch">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="775d74cf20c00c561ca4b0a4d223e65c82e9e4b67be769c3ddc98a587cb997c9" name="git-email" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="8d99c126993a8a2b10834a8379aba64e68864a250900aec0f0284bf79bcc9d57" name="git-email" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="1209c7f67dafb73545cb64bc75cdf8eabf2935c1341e9c7a577e6712c8813d05" name="git-gui" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="15dfd77525dce88d52852afe62ee1f8922ac2b7bc08fe0ae419ebcd590659f63" name="git-gui" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="0c5c0f5ce32a2e7f2a04f7902e7f1601ac7a804634719371448b52cd04c41545" name="git-svn" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="2f9930e131f54b4caaee4bc571020223207c3550cbf9b1cf81e2d8df058bb6ae" name="git-svn" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="c3dbcbd3b2c9e18b06637c2fcb9bb9231b5f89fb0478d001db90146e773bf3a2" name="git-web" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="849a87dbfe8f4d4c5762def1a40ccd272f2e3c5d88e24f94466d749164d6d16d" name="git-web" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="6638d7adbefe3c9761f0827d4ee6c270c56e85b021af1dd99ed2de7b3eadd976" name="gitk" arch="x86_64">
    <version epoch="0" ver="2.13.5" rel="3.1"/>

<changelog author="astieger@suse.com" date="1473249600">- fix shell lib include path in git-sh-setup (boo#1011169)
  adding git-setup-i18n-fix.patch</changelog>
<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>

</package>
<package pkgid="7373d1aa76a0134ca67a2268d2362e68fe1c6318a39d610b9ee3f432ff231a88" name="gitk" arch="x86_64">
    <version epoch="0" ver="2.13.6" rel="7.1"/>

<changelog author="astieger@suse.com" date="1475582400">- git 2.10.1:
  * documentation and command output updates
  * Prevents loops on submodules with broken metadata
  * Forbid removal of the symbolic reference HEAD
  * Update Japanese translation for "git-gui".
  * Fix "git commit-tree" reading commit.gpgsign configuration
  * Ignore merges when matching with "git log --cherry-pick"
  * Fix "git format-patch --base=..." usage of signature separator
  * "git add --chmod=+x &lt;pathspec&gt;" added recently only toggled the
  executable bit for paths that are either new or modified. This has
  been corrected to flip the executable bit for all paths that match
  the given pathspec.</changelog>
<changelog author="astieger@suse.com" date="1477742400">- git 2.10.2:
  * minor bug fixes
  * internal code improvements
  * documentation updates</changelog>
<changelog author="astieger@suse.com" date="1480507200">- git 2.11.0:
  * backward compatibility:
    + empty string (matching everything) used as pathspec now
    triggers a warning
    + historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    is deprecated
    +  default abbreviation length of 7 now scales by repo size
  * updates
    + new version of git-gui
    + many new command line and configuration options
    + many workflow and output improvements
  * dropped upstreamed patches:
    + git-setup-i18n-fix.patch
    + git-tclIndex.patch</changelog>
<changelog author="olaf@aepfle.de" date="1481284800">- git-gui: Sort entries in optimized tclIndex
  git-gui-tclIndex.patch</changelog>
<changelog author="lchiquitto@suse.de" date="1485950400">- Refresh all patches to update line numbers
- Add old bug reference to allow submission to SLE-12</changelog>
<changelog author="astieger@suse.com" date="1486123200">- git 2.11.1:
  * The default Travis-CI configuration specifies newer P4 and GitLFS.
  * The character width table has been updated to match Unicode 9.0
  * various fixes affecting multiple subcommands for correctness,
    bugs, and unexpected behavior.
  * documentation updates
  * git-svn updates</changelog>
<changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
<changelog author="astieger@suse.com" date="1487937600">- git 2.12.0:
  * Use of an empty string that is used for 'everything matches' is
    still warned and Git asks users to use a more explicit '.' for that
    instead.  The hope is that existing users will not mind this
    change, and eventually the warning can be turned into a hard error,
    upgrading the deprecation into removal of this (mis)feature.  That
    is not scheduled to happen in the upcoming release (yet).
  * The historical argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    has been deprecated for quite some time, and will be removed in a
    future release.
  * An ancient script "git relink" has been removed.</changelog>
<changelog author="lchiquitto@suse.de" date="1488888000">- Submit version 2.12.0 to SLE-12 (fate#322294, bsc#977477)</changelog>
<changelog author="astieger@suse.com" date="1490097600">- git 2.12.1:
  * Reduce authentication round-trip over HTTP when the server
    supports just a single authentication method.
  * "git add -i" patch subcommand fixed to have a path selection
  * various path verification fixes
  * fix "git log -L..." buffer overrun</changelog>
<changelog author="astieger@suse.com" date="1490443200">- git 2.12.2:
  * CLI output fixes
  * "Dump http" transport fixes
  * various fixes for internal code paths
  * Trailer "Cc:" RFC fix</changelog>
<changelog author="astieger@suse.com" date="1494417600">- git 2.12.3:
  * CVE-2017-8386: On a server running git-shell as login shell to
    restrict user to git commands, remote users may have been able
    to have git service programs spawn an interactive pager
    and thus escape the shell restrictions. (bsc#1038395)</changelog>
<changelog author="astieger@suse.com" date="1494417601">- git 2.13.0:
  * empty string as a pathspec element for 'everything matches'
    is still warned, for future removal.
  * deprecated argument order "git merge &lt;msg&gt; HEAD &lt;commit&gt;..."
    was removed
  * default location "~/.git-credential-cache/socket" for the
    socket used to communicate with the credential-cache daemon
    moved to "~/.cache/git/credential/socket".
  * now avoid blindly falling back to ".git" when the setup
    sequence indicated otherwise
  * many workflow features, improvements and bug fixes
  * add a hardened implementation of SHA1 in response to practical
    collision attacks (CVE-2005-4900, bsc#1042640)</changelog>
<changelog author="schwab@linux-m68k.org" date="1495886400">- Fix packaging of documentation</changelog>
<changelog author="astieger@suse.com" date="1496664000">- git 2.13.1:
  * Setting "log.decorate=false" in the configuration file did not
    take effect in v2.13, which has been corrected.
  * corrections to documentation and command help output
  * garbage collection fixes
  * memory leaks fixed
  * receive-pack now makes sure that the push certificate records
    the same set of push options used for pushing
  * shell completion corrections for git stash
  * fix "git clone --config var=val" with empty strings
  * internal efficiency improvements
  * Update sha1 collision detection code for big-endian platforms
    and platforms not supporting unaligned fetches</changelog>
<changelog author="astieger@suse.com" date="1498392000">- git 2.13.2:
  * "collision detecting" SHA-1 update for platform fixes
  * "git checkout --recurse-submodules" did not quite work with a
    submodule that itself has submodules.
  * The "run-command" API implementation has been made more robust
    against dead-locking in a threaded environment.
  * "git clean -d" now only cleans ignored files with "-x"
  * "git status --ignored"  did not list ignored and untracked files
    without "-uall"
  * "git pull --rebase --autostash" didn't auto-stash when the local
    history fast-forwards to the upstream.
  * "git describe --contains" gives as much weight to lightweight
    tags as annotated tags
  * Fix "git stash push &lt;pathspec&gt;" from a subdirectory</changelog>
<changelog author="astieger@suse.com" date="1499947200">- git 2.13.3:
  * various internal bug fixes
  * Fix a  regression to "git rebase -i"
  * Correct unaligned 32-bit access in pack-bitmap code
  * Tighten error checks for invalid "git apply" input
  * The split index code did not honor core.sharedrepository setting
    correctly
  * Fix "git branch --list" handling of color.branch.local</changelog>
<changelog author="astieger@suse.com" date="1501675200">- git 2.13.4:
  * Update the character width tables.
  * Fix an alias that contained an uppercase letter
  * Progress meter fixes
  * git gc concurrency fixes</changelog>
<changelog author="astieger@suse.com" date="1502366400">- git 2.13.5 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
<changelog author="astieger@suse.com" date="1506427200">- git 2.13.6:
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>

</package>
<package pkgid="66951312201431c1b723f62a6a87cfcb0605fdea90545c22f3d2d3932f3dfe6d" name="gkrellm-cpufreq" arch="src">
    <version epoch="0" ver="0.6.4.1" rel="8.1"/>

<changelog author="pgajdos@suse.com" date="1382529600">- Packge created, version 0.6.4 (bnc#841818).</changelog>
<changelog author="pgajdos@suse.com" date="1383825600">- Add cpupower.patch: port to cpupower plus warn when intel_pstate
  is active (read frequencies from /proc/cpuinfo in that case).</changelog>
<changelog author="pgajdos@suse.com" date="1389009600">- Add cpulabel.patch: add CPUN labels [bnc#841818c#18]
- Add couple-controls.patch: perhaps better behaviour when
  'Couple controls of multiple CPUs' is selected (but still not
  perfect)</changelog>
<changelog author="cfarrell@suse.com" date="1389268800">- license update: GPL-2.0+
  no indication that the package is GPL-2.0 (i.e. only)</changelog>
<changelog author="pgajdos@suse.com" date="1389960000">- add cpupower to Requires:</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Own some dirs to fix build on older openSUSE releases.</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- this package was discontinued, please use gkrellm-cpupower
  instead [bsc#1062808]</changelog>

</package>
<package pkgid="40554071ed98aae17b9810c6f409147f73eb1b8a3eabcbbf8ec5f506164bb193" name="gkrellm-cpufreq" arch="x86_64">
    <version epoch="0" ver="0.6.4.1" rel="8.1"/>

<changelog author="pgajdos@suse.com" date="1382529600">- Packge created, version 0.6.4 (bnc#841818).</changelog>
<changelog author="pgajdos@suse.com" date="1383825600">- Add cpupower.patch: port to cpupower plus warn when intel_pstate
  is active (read frequencies from /proc/cpuinfo in that case).</changelog>
<changelog author="pgajdos@suse.com" date="1389009600">- Add cpulabel.patch: add CPUN labels [bnc#841818c#18]
- Add couple-controls.patch: perhaps better behaviour when
  'Couple controls of multiple CPUs' is selected (but still not
  perfect)</changelog>
<changelog author="cfarrell@suse.com" date="1389268800">- license update: GPL-2.0+
  no indication that the package is GPL-2.0 (i.e. only)</changelog>
<changelog author="pgajdos@suse.com" date="1389960000">- add cpupower to Requires:</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Own some dirs to fix build on older openSUSE releases.</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- this package was discontinued, please use gkrellm-cpupower
  instead [bsc#1062808]</changelog>

</package>
<package pkgid="f5fce1bdbefff4f9bb850475009a962f1f8879a5de15e1a8a89e688f0e2ca96d" name="gkrellm-cpupower" arch="src">
    <version epoch="0" ver="0.2" rel="2.1"/>

<changelog author="pgajdos@suse.com" date="1382529600">- Packge created, version 0.6.4 (bnc#841818).</changelog>
<changelog author="pgajdos@suse.com" date="1383825600">- Add cpupower.patch: port to cpupower plus warn when intel_pstate
  is active (read frequencies from /proc/cpuinfo in that case).</changelog>
<changelog author="pgajdos@suse.com" date="1389009600">- Add cpulabel.patch: add CPUN labels [bnc#841818c#18]
- Add couple-controls.patch: perhaps better behaviour when
  'Couple controls of multiple CPUs' is selected (but still not
  perfect)</changelog>
<changelog author="cfarrell@suse.com" date="1389268800">- license update: GPL-2.0+
  no indication that the package is GPL-2.0 (i.e. only)</changelog>
<changelog author="pgajdos@suse.com" date="1389960000">- add cpupower to Requires:</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Own some dirs to fix build on older openSUSE releases.</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- use sources from github:gkrellm2-cpupower/releases [bsc#1062808]
- package renamed to gkrellm-cpupower
- version 0.2</changelog>

</package>
<package pkgid="40e8b04f40dd7f4ede8db119ad4f2d830457d2cbbb317d512d4162e0b278cce9" name="gkrellm-cpupower" arch="x86_64">
    <version epoch="0" ver="0.2" rel="2.1"/>

<changelog author="pgajdos@suse.com" date="1382529600">- Packge created, version 0.6.4 (bnc#841818).</changelog>
<changelog author="pgajdos@suse.com" date="1383825600">- Add cpupower.patch: port to cpupower plus warn when intel_pstate
  is active (read frequencies from /proc/cpuinfo in that case).</changelog>
<changelog author="pgajdos@suse.com" date="1389009600">- Add cpulabel.patch: add CPUN labels [bnc#841818c#18]
- Add couple-controls.patch: perhaps better behaviour when
  'Couple controls of multiple CPUs' is selected (but still not
  perfect)</changelog>
<changelog author="cfarrell@suse.com" date="1389268800">- license update: GPL-2.0+
  no indication that the package is GPL-2.0 (i.e. only)</changelog>
<changelog author="pgajdos@suse.com" date="1389960000">- add cpupower to Requires:</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Own some dirs to fix build on older openSUSE releases.</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- use sources from github:gkrellm2-cpupower/releases [bsc#1062808]
- package renamed to gkrellm-cpupower
- version 0.2</changelog>

</package>
<package pkgid="5a48bf48713dac6c05c5a174f364adda66e2c32a2e35a42a8cfa0618c310024b" name="gnome-books" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
<changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
<changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
<changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
<changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
<changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
<changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>

</package>
<package pkgid="a5c118dd160b37fa1b0d28c01a0e6b650395a02adec7dceca3b7fb6f66ea019e" name="gnome-desktop" arch="src">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
<changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
<changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
<changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>

</package>
<package pkgid="5e144e70ba66056d423cdb4f3f2e641a09e72cf4ba6f036de657d39b6238327f" name="gnome-desktop-lang" arch="noarch">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
<changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
<changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
<changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>

</package>
<package pkgid="2d7d479f983a648f05f4a039f31bc2ae037b1c0c0a921b93a6ad29c9b199d760" name="gnome-documents" arch="src">
    <version epoch="0" ver="3.20.1" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
<changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
<changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
<changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
<changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
<changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
<changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>

</package>
<package pkgid="b837bf48a11b8c5773ed171dc1c6b626480f7ca79edd5760a1cb32d3bf5d0f21" name="gnome-documents" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
<changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
<changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
<changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
<changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
<changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
<changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>

</package>
<package pkgid="872157418999d1c628e0a01a2f2b2fd287ff75a1de0fb1d7b2be0cb841b99404" name="gnome-documents-lang" arch="noarch">
    <version epoch="0" ver="3.20.1" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
<changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
<changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
<changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
<changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
<changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
<changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>

</package>
<package pkgid="93576353b44ad9910e9c4a29337ed7905f1b4110a2389a76c25627cee0f836f6" name="gnome-documents_books-common" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
<changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
<changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
<changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
<changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
<changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
<changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>

</package>
<package pkgid="5a326ffab0920da45452cdf79eb334bdd6dbdeb036dc2b7fd27b17b7abb4c5e7" name="gnome-keyring" arch="src">
    <version epoch="0" ver="3.20.0" rel="7.1"/>

<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
<changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
<changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
<changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
<changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
<changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
<changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="6b686503fcc61356511cb9b64575a73bd64a7664c753e39311be0fde8a79af96" name="gnome-keyring" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="7.1"/>

<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
<changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
<changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
<changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
<changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
<changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
<changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="b75a46edac993e91c0d328d4a15f07e1dbd80a769afc3699131d78e165e5bf8b" name="gnome-keyring-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="7.1"/>

<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
<changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
<changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
<changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
<changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
<changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
<changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="7a37476201f87b50684629e5775b97b5e321b891dfd9989ee577946294fd677e" name="gnome-keyring-lang" arch="noarch">
    <version epoch="0" ver="3.20.0" rel="7.1"/>

<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
<changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
<changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
<changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
<changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
<changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
<changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="f7f7a7b3ad6efcc3b35dbd4f2ae3152a79404813dbabe6f15e566b80b9f9f121" name="gnome-keyring-pam" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="7.1"/>

<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
<changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
<changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
<changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
<changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
<changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
<changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="bca2d948700a85a931ad126fba2600e4fc181e39a8173698ac0a4f7349b72093" name="gnome-keyring-pam-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="7.1"/>

<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
<changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
<changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
<changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
<changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
<changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
<changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="199fd5de107b9db59028b732e328f4914777a4b55c26e6c9db69b7214c4bc3e4" name="gnome-packagekit" arch="src">
    <version epoch="0" ver="3.20.0" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
<changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
<changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
<changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
<changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
<changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>

</package>
<package pkgid="607caa9308183b2a6bf724d258fd09aeb7fba4a97e68a7c9ac08f6a6213a6565" name="gnome-packagekit" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
<changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
<changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
<changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
<changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
<changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>

</package>
<package pkgid="e91c0eaf23ae680334356ff869336d69e12b3135cf6edea63b8f00b45ceeb70e" name="gnome-packagekit-extras" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
<changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
<changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
<changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
<changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
<changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>

</package>
<package pkgid="4bff354c8c42d48eb28518866daca995c91ddc373e234d2ce24b0d98b0f4406a" name="gnome-packagekit-lang" arch="noarch">
    <version epoch="0" ver="3.20.0" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 3.15.3:
  + Avoid conflict with new GTK+ API.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1422273600">- Update to version 3.15.4:
  + Add suitable Keywords to the package updater desktop file.
  + Update executable blacklist for gnome-terminal.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 3.15.90:
  + Remove the dialog to run newly installed software.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="fcrozat@suse.com" date="1429099200">- Add patch license-agreement-title.patch: fix license agreement
  title (bsc#927319).</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 3.17.90:
  + Ensure to escape package and vendor name.
  + Consider available packages as updatable.
  + Set minimum content height for scrolledwindows.
  + Avoid registering two main desktop file categories.
  + Updated translations.
- Rebase gnome-packagekit-OnlyShowIn.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1445515200">- Add bnc-946886-install-signatures-in-viewer.patch -- install
  signatures in gpk-update-viewer if needed (bsc#946886).</changelog>
<changelog author="dimstar@opensuse.org" date="1447761600">- Move gpk-application.appdata.xml to -extras package, where also
  the .desktop file resides.</changelog>
<changelog author="rlmu@suse.com" date="1448971200">- Add bnc#939278-gnome-packagekit-asks-for-reboot-password-too-early.patch
  Asks for reboot passwd too early (bnc#939278).</changelog>
<changelog author="zaitor@opensuse.org" date="1451390400">- Replace libcanberra-devel for pkgconfig(libcanberra-gtk3)
  BuildRequires: Needed now that libcanberra-devel has been split,
  and it is what configure looks for.</changelog>
<changelog author="zaitor@opensuse.org" date="1455364800">- Disable gnome-packagekit-displaysize.patch: Upstream solved the
  issue an other way, lets test if we can drop the patch we carry.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Add a missing tag to the AppData file.
  + Add resizing to various modal dialogs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1459944000">- Remove py_requires: The python helper functions have been removed
  since version 3.11.1.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop patch license-agreement-title.patch: fixed upstream.
- Rebase bnc#881245-update-test-affects-package-manager-should-restart-gpk-update-viewer.patch</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1468497600">- Installation of local files has been removed from gpk, avoid
  registration of bad rpm mime handler. See boo#941862, bgo#766896</changelog>
<changelog author="sckang@suse.com" date="1493121600">- Add gnome-packagekit-fix-logout-button-not-working.patch: Fix
  logout button not working when relogin is needed (bsc#988167).</changelog>
<changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>

</package>
<package pkgid="ef3b0b0f2ae286aa7cc80801b1b16310e48ede7af2386b544dbdf8201a0a1a95" name="gnome-settings-daemon" arch="src">
    <version epoch="0" ver="3.20.1" rel="15.1"/>

<changelog author="federico@suse.com" date="1460980800">- Removed gnome-settings-daemon-initial-keyboard.patch.  Upstream's
  behavior is fine, as the default keyboard layout needs to be
  available for the screen lock.</changelog>
<changelog author="federico@suse.com" date="1460980801">- Removed
  gsettings-do-not-store-autodetected-keyboard-settings.patch.
  Equivalent code is now upstream.</changelog>
<changelog author="federico@suse.com" date="1463486400">- Added back an updated version of
  gnome-settings-daemon-initial-keyboard.patch for bsc#979051.
  Suse works differently from GNOME; we set the default keyboard
  from xkb, and GNOME likes to do it itself.  This makes sure
  there is no keyboard selector icon if there is a single default
  keyboard defined.</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Add explicit pkgconfig(libgeoclue-2.0) BuildRequires: configure
  checks for it and it allows us to specify the minimum version
  required.</changelog>
<changelog author="sreeves@suse.com" date="1465473600">- Remove gnome-settings-daemon-bnc877552.patch - fixed upstream</changelog>
<changelog author="fezhang@suse.com" date="1466164800">- Add gnome-settings-daemon-housekeeping-ignore-boot-efi.patch
  (bsc#919217). Prevent popup warnings about /boot/efi on a default
  UEFI installation.</changelog>
<changelog author="mgorse@suse.com" date="1470398400">- Only require udev on SLE. Only needed for older filesystem
  package.
- Re-enable gnome-patch-translation on SLE. We don't have any
  non-rebased patches now, so probably safe.
- Drop gnome-settings-daemon-housekeeping-ignore-boot-efi.patch:
  now handled in branding.</changelog>
<changelog author="sckang@suse.com" date="1470830400">- Add gnome-settings-daemon-bring-back-updates-plugin.patch:
  Revert upstream commits fc22a8100fa40533fddfb4338160a20188e46c6b
  and e3e961c52419df5f2544b24957e71cf3a4c5ef85 to bring back the
  updates plugin.(bsc#991024)</changelog>
<changelog author="dimstar@opensuse.org" date="1472212800">- Call autoreconf on SLE12 and Leap 42.x:
  gnome-settings-daemon-bring-back-updates-plugin.patch is also
  applied on Leap, hence autoreconf needs to run there too.</changelog>
<changelog author="fezhang@suse.com" date="1473249600">- Add gnome-settings-daemon-shutdown-with-power-button.patch:
  Bring back "shutdown" as a configurable choice for power button.
  Even though upstream removed it due to "too destructive" and
  recommends using a custom shortcut, we still need it for bare
  metal servers without keyboards attched (bsc#996342).
  Check bgo#753713, bgo#755953 to learn why upstream removed the
  power button actions.</changelog>
<changelog author="dimstar@opensuse.org" date="1473336000">- Also apply gnome-settings-daemon-shutdown-with-power-button.patch
  on openSUSE (boo#993381).</changelog>
<changelog author="fezhang@suse.com" date="1473681600">- Rename gnome-settings-daemon-shutdown-with-power-button.patch to
  gnome-settings-daemon-more-power-button-actions.patch:
  Also add back the "interactive" power button action for
  consistency with SLES11 behavior (bsc#996342).</changelog>
<changelog author="sckang@suse.com" date="1476360000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  updates notification not popping up in openSUSE (bsc#1004343).</changelog>
<changelog author="dimstar@opensuse.org" date="1478520000">- Update gnome-settings-daemon-bring-back-updates-plugin.patch:
  + Add pk-clear-offline-update, which originally belonged to
    PackageKit, but install it now to g-s-d's libexecdir.
  + Add an additional annotation to the PK handler that this binary
    is part of org.freedesktop.packagekit.clear-offline-update
    (only annotation is being installed, no rule or action).
  + Fixes boo#1005495: Repetitive Update notification after an
    offline update was done (as nothing removed the status file
    when the notification was confirmed by clicking 'ok').</changelog>
<changelog author="xwang@suse.com" date="1479297600">- Add gnome-settings-daemon-shutdown-dialog-delay.patch: Fix
  'Shutdown dialog delay 1 to 2 seconds' (bsc#979257, bgo#774452).</changelog>
<changelog author="zaitor@opensuse.org" date="1484308800">- Apply gnome-settings-daemon-initial-keyboard.patch also for
  openSUSE, this fix is also needed there (boo#1009515).</changelog>
<changelog author="xwang@suse.com" date="1490270400">- Update sle-configure-timeout-blank.patch: Fix mouse cursor on
  black screen (bsc#1029637).</changelog>
<changelog author="xwang@suse.com" date="1494417600">- Add gnome-settings-daemon-keybindings-become-unavaiable.patch:
  Fix some keybindings become unavailable. Include upstream commits
  8966dd9, 7d15e66, e980c09, 61be0fa, 2600ac4.
  (bsc#1000599 bgo#758302)</changelog>
<changelog author="fezhang@suse.com" date="1499947200">- Add gnome-settings-daemon-gvc-crash-headset.patch: Backport
  commit 25bf3ed7. Fix a crash caused by double free when setting
  headset (bsc#1045780).</changelog>
<changelog author="hpj@suse.com" date="1502366400">- Modify gnome-settings-daemon-revert-libinput-mandatory.patch
  (bsc#990470). This fixes two-finger scrolling in the GNOME
  desktop environment.</changelog>

</package>
<package pkgid="d0515ea9f79e33d1b144bfd64616f5ce94ff0bbb419d503ad755e16fb626ed7c" name="gnome-settings-daemon" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="15.1"/>

<changelog author="federico@suse.com" date="1460980800">- Removed gnome-settings-daemon-initial-keyboard.patch.  Upstream's
  behavior is fine, as the default keyboard layout needs to be
  available for the screen lock.</changelog>
<changelog author="federico@suse.com" date="1460980801">- Removed
  gsettings-do-not-store-autodetected-keyboard-settings.patch.
  Equivalent code is now upstream.</changelog>
<changelog author="federico@suse.com" date="1463486400">- Added back an updated version of
  gnome-settings-daemon-initial-keyboard.patch for bsc#979051.
  Suse works differently from GNOME; we set the default keyboard
  from xkb, and GNOME likes to do it itself.  This makes sure
  there is no keyboard selector icon if there is a single default
  keyboard defined.</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Add explicit pkgconfig(libgeoclue-2.0) BuildRequires: configure
  checks for it and it allows us to specify the minimum version
  required.</changelog>
<changelog author="sreeves@suse.com" date="1465473600">- Remove gnome-settings-daemon-bnc877552.patch - fixed upstream</changelog>
<changelog author="fezhang@suse.com" date="1466164800">- Add gnome-settings-daemon-housekeeping-ignore-boot-efi.patch
  (bsc#919217). Prevent popup warnings about /boot/efi on a default
  UEFI installation.</changelog>
<changelog author="mgorse@suse.com" date="1470398400">- Only require udev on SLE. Only needed for older filesystem
  package.
- Re-enable gnome-patch-translation on SLE. We don't have any
  non-rebased patches now, so probably safe.
- Drop gnome-settings-daemon-housekeeping-ignore-boot-efi.patch:
  now handled in branding.</changelog>
<changelog author="sckang@suse.com" date="1470830400">- Add gnome-settings-daemon-bring-back-updates-plugin.patch:
  Revert upstream commits fc22a8100fa40533fddfb4338160a20188e46c6b
  and e3e961c52419df5f2544b24957e71cf3a4c5ef85 to bring back the
  updates plugin.(bsc#991024)</changelog>
<changelog author="dimstar@opensuse.org" date="1472212800">- Call autoreconf on SLE12 and Leap 42.x:
  gnome-settings-daemon-bring-back-updates-plugin.patch is also
  applied on Leap, hence autoreconf needs to run there too.</changelog>
<changelog author="fezhang@suse.com" date="1473249600">- Add gnome-settings-daemon-shutdown-with-power-button.patch:
  Bring back "shutdown" as a configurable choice for power button.
  Even though upstream removed it due to "too destructive" and
  recommends using a custom shortcut, we still need it for bare
  metal servers without keyboards attched (bsc#996342).
  Check bgo#753713, bgo#755953 to learn why upstream removed the
  power button actions.</changelog>
<changelog author="dimstar@opensuse.org" date="1473336000">- Also apply gnome-settings-daemon-shutdown-with-power-button.patch
  on openSUSE (boo#993381).</changelog>
<changelog author="fezhang@suse.com" date="1473681600">- Rename gnome-settings-daemon-shutdown-with-power-button.patch to
  gnome-settings-daemon-more-power-button-actions.patch:
  Also add back the "interactive" power button action for
  consistency with SLES11 behavior (bsc#996342).</changelog>
<changelog author="sckang@suse.com" date="1476360000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  updates notification not popping up in openSUSE (bsc#1004343).</changelog>
<changelog author="dimstar@opensuse.org" date="1478520000">- Update gnome-settings-daemon-bring-back-updates-plugin.patch:
  + Add pk-clear-offline-update, which originally belonged to
    PackageKit, but install it now to g-s-d's libexecdir.
  + Add an additional annotation to the PK handler that this binary
    is part of org.freedesktop.packagekit.clear-offline-update
    (only annotation is being installed, no rule or action).
  + Fixes boo#1005495: Repetitive Update notification after an
    offline update was done (as nothing removed the status file
    when the notification was confirmed by clicking 'ok').</changelog>
<changelog author="xwang@suse.com" date="1479297600">- Add gnome-settings-daemon-shutdown-dialog-delay.patch: Fix
  'Shutdown dialog delay 1 to 2 seconds' (bsc#979257, bgo#774452).</changelog>
<changelog author="zaitor@opensuse.org" date="1484308800">- Apply gnome-settings-daemon-initial-keyboard.patch also for
  openSUSE, this fix is also needed there (boo#1009515).</changelog>
<changelog author="xwang@suse.com" date="1490270400">- Update sle-configure-timeout-blank.patch: Fix mouse cursor on
  black screen (bsc#1029637).</changelog>
<changelog author="xwang@suse.com" date="1494417600">- Add gnome-settings-daemon-keybindings-become-unavaiable.patch:
  Fix some keybindings become unavailable. Include upstream commits
  8966dd9, 7d15e66, e980c09, 61be0fa, 2600ac4.
  (bsc#1000599 bgo#758302)</changelog>
<changelog author="fezhang@suse.com" date="1499947200">- Add gnome-settings-daemon-gvc-crash-headset.patch: Backport
  commit 25bf3ed7. Fix a crash caused by double free when setting
  headset (bsc#1045780).</changelog>
<changelog author="hpj@suse.com" date="1502366400">- Modify gnome-settings-daemon-revert-libinput-mandatory.patch
  (bsc#990470). This fixes two-finger scrolling in the GNOME
  desktop environment.</changelog>

</package>
<package pkgid="773ce67932c58396d8f8fb729e57aa0a5c11f42dc9b9eb2d857c3dc3320c0442" name="gnome-settings-daemon-devel" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="15.1"/>

<changelog author="federico@suse.com" date="1460980800">- Removed gnome-settings-daemon-initial-keyboard.patch.  Upstream's
  behavior is fine, as the default keyboard layout needs to be
  available for the screen lock.</changelog>
<changelog author="federico@suse.com" date="1460980801">- Removed
  gsettings-do-not-store-autodetected-keyboard-settings.patch.
  Equivalent code is now upstream.</changelog>
<changelog author="federico@suse.com" date="1463486400">- Added back an updated version of
  gnome-settings-daemon-initial-keyboard.patch for bsc#979051.
  Suse works differently from GNOME; we set the default keyboard
  from xkb, and GNOME likes to do it itself.  This makes sure
  there is no keyboard selector icon if there is a single default
  keyboard defined.</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Add explicit pkgconfig(libgeoclue-2.0) BuildRequires: configure
  checks for it and it allows us to specify the minimum version
  required.</changelog>
<changelog author="sreeves@suse.com" date="1465473600">- Remove gnome-settings-daemon-bnc877552.patch - fixed upstream</changelog>
<changelog author="fezhang@suse.com" date="1466164800">- Add gnome-settings-daemon-housekeeping-ignore-boot-efi.patch
  (bsc#919217). Prevent popup warnings about /boot/efi on a default
  UEFI installation.</changelog>
<changelog author="mgorse@suse.com" date="1470398400">- Only require udev on SLE. Only needed for older filesystem
  package.
- Re-enable gnome-patch-translation on SLE. We don't have any
  non-rebased patches now, so probably safe.
- Drop gnome-settings-daemon-housekeeping-ignore-boot-efi.patch:
  now handled in branding.</changelog>
<changelog author="sckang@suse.com" date="1470830400">- Add gnome-settings-daemon-bring-back-updates-plugin.patch:
  Revert upstream commits fc22a8100fa40533fddfb4338160a20188e46c6b
  and e3e961c52419df5f2544b24957e71cf3a4c5ef85 to bring back the
  updates plugin.(bsc#991024)</changelog>
<changelog author="dimstar@opensuse.org" date="1472212800">- Call autoreconf on SLE12 and Leap 42.x:
  gnome-settings-daemon-bring-back-updates-plugin.patch is also
  applied on Leap, hence autoreconf needs to run there too.</changelog>
<changelog author="fezhang@suse.com" date="1473249600">- Add gnome-settings-daemon-shutdown-with-power-button.patch:
  Bring back "shutdown" as a configurable choice for power button.
  Even though upstream removed it due to "too destructive" and
  recommends using a custom shortcut, we still need it for bare
  metal servers without keyboards attched (bsc#996342).
  Check bgo#753713, bgo#755953 to learn why upstream removed the
  power button actions.</changelog>
<changelog author="dimstar@opensuse.org" date="1473336000">- Also apply gnome-settings-daemon-shutdown-with-power-button.patch
  on openSUSE (boo#993381).</changelog>
<changelog author="fezhang@suse.com" date="1473681600">- Rename gnome-settings-daemon-shutdown-with-power-button.patch to
  gnome-settings-daemon-more-power-button-actions.patch:
  Also add back the "interactive" power button action for
  consistency with SLES11 behavior (bsc#996342).</changelog>
<changelog author="sckang@suse.com" date="1476360000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  updates notification not popping up in openSUSE (bsc#1004343).</changelog>
<changelog author="dimstar@opensuse.org" date="1478520000">- Update gnome-settings-daemon-bring-back-updates-plugin.patch:
  + Add pk-clear-offline-update, which originally belonged to
    PackageKit, but install it now to g-s-d's libexecdir.
  + Add an additional annotation to the PK handler that this binary
    is part of org.freedesktop.packagekit.clear-offline-update
    (only annotation is being installed, no rule or action).
  + Fixes boo#1005495: Repetitive Update notification after an
    offline update was done (as nothing removed the status file
    when the notification was confirmed by clicking 'ok').</changelog>
<changelog author="xwang@suse.com" date="1479297600">- Add gnome-settings-daemon-shutdown-dialog-delay.patch: Fix
  'Shutdown dialog delay 1 to 2 seconds' (bsc#979257, bgo#774452).</changelog>
<changelog author="zaitor@opensuse.org" date="1484308800">- Apply gnome-settings-daemon-initial-keyboard.patch also for
  openSUSE, this fix is also needed there (boo#1009515).</changelog>
<changelog author="xwang@suse.com" date="1490270400">- Update sle-configure-timeout-blank.patch: Fix mouse cursor on
  black screen (bsc#1029637).</changelog>
<changelog author="xwang@suse.com" date="1494417600">- Add gnome-settings-daemon-keybindings-become-unavaiable.patch:
  Fix some keybindings become unavailable. Include upstream commits
  8966dd9, 7d15e66, e980c09, 61be0fa, 2600ac4.
  (bsc#1000599 bgo#758302)</changelog>
<changelog author="fezhang@suse.com" date="1499947200">- Add gnome-settings-daemon-gvc-crash-headset.patch: Backport
  commit 25bf3ed7. Fix a crash caused by double free when setting
  headset (bsc#1045780).</changelog>
<changelog author="hpj@suse.com" date="1502366400">- Modify gnome-settings-daemon-revert-libinput-mandatory.patch
  (bsc#990470). This fixes two-finger scrolling in the GNOME
  desktop environment.</changelog>

</package>
<package pkgid="729cca172b556ceed1c244f29d6dd790c965fa7d29f6f1c6b954ac942108b812" name="gnome-settings-daemon-lang" arch="noarch">
    <version epoch="0" ver="3.20.1" rel="15.1"/>

<changelog author="federico@suse.com" date="1460980800">- Removed gnome-settings-daemon-initial-keyboard.patch.  Upstream's
  behavior is fine, as the default keyboard layout needs to be
  available for the screen lock.</changelog>
<changelog author="federico@suse.com" date="1460980801">- Removed
  gsettings-do-not-store-autodetected-keyboard-settings.patch.
  Equivalent code is now upstream.</changelog>
<changelog author="federico@suse.com" date="1463486400">- Added back an updated version of
  gnome-settings-daemon-initial-keyboard.patch for bsc#979051.
  Suse works differently from GNOME; we set the default keyboard
  from xkb, and GNOME likes to do it itself.  This makes sure
  there is no keyboard selector icon if there is a single default
  keyboard defined.</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Add explicit pkgconfig(libgeoclue-2.0) BuildRequires: configure
  checks for it and it allows us to specify the minimum version
  required.</changelog>
<changelog author="sreeves@suse.com" date="1465473600">- Remove gnome-settings-daemon-bnc877552.patch - fixed upstream</changelog>
<changelog author="fezhang@suse.com" date="1466164800">- Add gnome-settings-daemon-housekeeping-ignore-boot-efi.patch
  (bsc#919217). Prevent popup warnings about /boot/efi on a default
  UEFI installation.</changelog>
<changelog author="mgorse@suse.com" date="1470398400">- Only require udev on SLE. Only needed for older filesystem
  package.
- Re-enable gnome-patch-translation on SLE. We don't have any
  non-rebased patches now, so probably safe.
- Drop gnome-settings-daemon-housekeeping-ignore-boot-efi.patch:
  now handled in branding.</changelog>
<changelog author="sckang@suse.com" date="1470830400">- Add gnome-settings-daemon-bring-back-updates-plugin.patch:
  Revert upstream commits fc22a8100fa40533fddfb4338160a20188e46c6b
  and e3e961c52419df5f2544b24957e71cf3a4c5ef85 to bring back the
  updates plugin.(bsc#991024)</changelog>
<changelog author="dimstar@opensuse.org" date="1472212800">- Call autoreconf on SLE12 and Leap 42.x:
  gnome-settings-daemon-bring-back-updates-plugin.patch is also
  applied on Leap, hence autoreconf needs to run there too.</changelog>
<changelog author="fezhang@suse.com" date="1473249600">- Add gnome-settings-daemon-shutdown-with-power-button.patch:
  Bring back "shutdown" as a configurable choice for power button.
  Even though upstream removed it due to "too destructive" and
  recommends using a custom shortcut, we still need it for bare
  metal servers without keyboards attched (bsc#996342).
  Check bgo#753713, bgo#755953 to learn why upstream removed the
  power button actions.</changelog>
<changelog author="dimstar@opensuse.org" date="1473336000">- Also apply gnome-settings-daemon-shutdown-with-power-button.patch
  on openSUSE (boo#993381).</changelog>
<changelog author="fezhang@suse.com" date="1473681600">- Rename gnome-settings-daemon-shutdown-with-power-button.patch to
  gnome-settings-daemon-more-power-button-actions.patch:
  Also add back the "interactive" power button action for
  consistency with SLES11 behavior (bsc#996342).</changelog>
<changelog author="sckang@suse.com" date="1476360000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  updates notification not popping up in openSUSE (bsc#1004343).</changelog>
<changelog author="dimstar@opensuse.org" date="1478520000">- Update gnome-settings-daemon-bring-back-updates-plugin.patch:
  + Add pk-clear-offline-update, which originally belonged to
    PackageKit, but install it now to g-s-d's libexecdir.
  + Add an additional annotation to the PK handler that this binary
    is part of org.freedesktop.packagekit.clear-offline-update
    (only annotation is being installed, no rule or action).
  + Fixes boo#1005495: Repetitive Update notification after an
    offline update was done (as nothing removed the status file
    when the notification was confirmed by clicking 'ok').</changelog>
<changelog author="xwang@suse.com" date="1479297600">- Add gnome-settings-daemon-shutdown-dialog-delay.patch: Fix
  'Shutdown dialog delay 1 to 2 seconds' (bsc#979257, bgo#774452).</changelog>
<changelog author="zaitor@opensuse.org" date="1484308800">- Apply gnome-settings-daemon-initial-keyboard.patch also for
  openSUSE, this fix is also needed there (boo#1009515).</changelog>
<changelog author="xwang@suse.com" date="1490270400">- Update sle-configure-timeout-blank.patch: Fix mouse cursor on
  black screen (bsc#1029637).</changelog>
<changelog author="xwang@suse.com" date="1494417600">- Add gnome-settings-daemon-keybindings-become-unavaiable.patch:
  Fix some keybindings become unavailable. Include upstream commits
  8966dd9, 7d15e66, e980c09, 61be0fa, 2600ac4.
  (bsc#1000599 bgo#758302)</changelog>
<changelog author="fezhang@suse.com" date="1499947200">- Add gnome-settings-daemon-gvc-crash-headset.patch: Backport
  commit 25bf3ed7. Fix a crash caused by double free when setting
  headset (bsc#1045780).</changelog>
<changelog author="hpj@suse.com" date="1502366400">- Modify gnome-settings-daemon-revert-libinput-mandatory.patch
  (bsc#990470). This fixes two-finger scrolling in the GNOME
  desktop environment.</changelog>

</package>
<package pkgid="f4293f1c999191c88ed0c638a94f3422022d69479024712680617c0e69b61738" name="gnome-shell" arch="src">
    <version epoch="0" ver="3.20.4" rel="13.1"/>

<changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
<changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
<changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
<changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
<changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
<changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
<changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
<changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
<changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
<changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
<changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
<changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
<changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
<changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
<changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
<changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
<changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
<changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
<changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
<changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>

</package>
<package pkgid="02da7adbc63f406e701c139545c7ebc6d86ec44430852186a06d39d93c6eb364" name="gnome-shell" arch="x86_64">
    <version epoch="0" ver="3.20.4" rel="13.1"/>

<changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
<changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
<changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
<changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
<changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
<changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
<changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
<changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
<changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
<changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
<changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
<changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
<changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
<changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
<changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
<changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
<changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
<changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
<changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
<changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>

</package>
<package pkgid="139b233e408882e8b736fecf19c1bd4fcb9362dd21653f5c6c11c7c001c52837" name="gnome-shell-browser-plugin" arch="x86_64">
    <version epoch="0" ver="3.20.4" rel="13.1"/>

<changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
<changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
<changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
<changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
<changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
<changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
<changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
<changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
<changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
<changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
<changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
<changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
<changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
<changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
<changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
<changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
<changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
<changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
<changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
<changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>

</package>
<package pkgid="4e1d0c79191db0d2106c76fb09047a830d2f795702579bd81cce7a0797cbdeed" name="gnome-shell-calendar" arch="x86_64">
    <version epoch="0" ver="3.20.4" rel="13.1"/>

<changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
<changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
<changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
<changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
<changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
<changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
<changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
<changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
<changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
<changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
<changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
<changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
<changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
<changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
<changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
<changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
<changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
<changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
<changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
<changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>

</package>
<package pkgid="eaedc39061a4fd561a5326043d2a00929731f130f87725a9bc5d5081e4e4287e" name="gnome-shell-devel" arch="x86_64">
    <version epoch="0" ver="3.20.4" rel="13.1"/>

<changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
<changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
<changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
<changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
<changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
<changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
<changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
<changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
<changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
<changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
<changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
<changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
<changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
<changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
<changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
<changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
<changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
<changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
<changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
<changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>

</package>
<package pkgid="e9fbb56224390e3680c26560550887532157f5f7b259005269fb60171a7a54d3" name="gnome-shell-lang" arch="noarch">
    <version epoch="0" ver="3.20.4" rel="13.1"/>

<changelog author="tyang@suse.com" date="1463745600">- Update gnome-shell-878951-hide-list-with-no-user.patch:
  Disable the user list if there is only root created (bnc#878951,
  bnc#980451)</changelog>
<changelog author="tyang@suse.com" date="1464004800">- Add gnome-shell-970480-authprompt-wrapping-message.patch:
  Fix the wrapping error message issue when user password change
  operation fails in gdm greeter (bnc#970480).</changelog>
<changelog author="cxiong@suse.com" date="1464004801">- Update to GNOME 3.20.2 fate#318572
  + Fix SPEC file issues: remove unused files.</changelog>
<changelog author="cxiong@suse.com" date="1464436800">- Add gs-fate318433-prevent-same-account-multi-logins.patch:
  Prevent multiple simultaneous logins (Requires patched
  accountsservice)(fate#318433).</changelog>
<changelog author="zaitor@opensuse.org" date="1467201600">- Update to version 3.20.3:
  + Fix sorting of hidden apps in app switcher (bgo#766238).
  + Allocate framebuffers early to fix a crash on NVIDIA
    (bgo#764898).
  + Fix cycle-windows/cycle-group keybindings (bgo#730739).
  + networkAgent: Handle VPN service aliases (bgo#658484).
  + Fix crash when using screen recorder under wayland
    (bgo#767001).
  + Plug a memory leak (bgo#710230).
  + Updated translations.
- Drop gnome-shell-cogl-nvidia-fixes.patch: Fixed upstream.</changelog>
<changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-*). Nowadays pkgconfig(libsystemd)
  is enough and replaces all libsystemd-* libs which are obsolete.</changelog>
<changelog author="zaitor@opensuse.org" date="1467979200">- Add gnome-shell-background-free-MetaBackground.patch: Free
  MetaBackground explicitly when its MetaBackgroundActor is
  destroyed (bgo#766353).</changelog>
<changelog author="cxiong@suse.com" date="1470225600">- Update gs-fate318433-prevent-same-account-multi-logins.patch:
  Make cancel button usable after login forbidden (bnc#991051,
  fate#318433).</changelog>
<changelog author="qzhao@suse.com" date="1470916800">- Add gnome-shell-disable-ibus-when-not-installed.patch: Disable
  ibus when it not installed, especially out of CJK areas
  (bsc#987360).</changelog>
<changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.20.4:
  + Free old backgrounds immediately (bgo#766353).
  + Adjust to flatpak PermissionStore API changes (bgo#766598).
  + calendar: Only hide dismissed occurrence of recurring event
    (bgo#748226).
  + Updated translations.
- Drop gnome-shell-background-free-MetaBackground.patch: Fixed
  upstream.
- Add gnome-shell-fix-missing-return.patch: Fix build, add missing
  return value in gnome-calendar.</changelog>
<changelog author="cxiong@suse.com" date="1473422400">- Fix gnome-shell-gdm-login-applet.patch (boo#995296)
  + Fix aboutMenu's distribution name to be more general, like
    openSUSE Leap support.</changelog>
<changelog author="cxiong@suse.com" date="1474459200">- Enable SLE-Classic for Leap 42.2 bnc#999655
  + modify SPEC to re-enable SLE-Classic for Leap 42.2</changelog>
<changelog author="xwang@suse.com" date="1474632000">- Drop gnome-shell-sle-theme.patch (bsc#999592): the patch is
  included in gnome-shell-gdm-login-applet.patch.
- Drop source SLE-theme.tar.gz: SLE12SP2 doesn't use this source
  any more.
- Update gnome-shell-gdm-login-applet.patch:
  + Use dbus function to get hostname
- Add aboutMenu.js: Create from gnome-shell-gdm-login-applet.patch</changelog>
<changelog author="cxiong@suse.com" date="1478088000">- Fix SLEClassic Xsettings overrides bug (boo#993341)
  + Also add extra check for other rogue types</changelog>
<changelog author="xwang@suse.com" date="1478520000">- Add SUSE logo on lock screen for GNOME theme (bsc#1007468):
  + gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + sle-background.png</changelog>
<changelog author="xwang@suse.com" date="1479988800">- Add gnome-shell-774381-app-window-overlay-app-list.patch:
  Fix app windows overlay app list in overview screen (bsc#1008539,
  bgo#774381).</changelog>
<changelog author="qzheng@suse.com" date="1492689600">- Add gnome-shell-login-fix-session-button-can-be-clicked.patch:
  Disable session selection button when it's hidden in user switch
  dialog (bsc#1034584, bsc#1034827, bgo#781482).</changelog>
<changelog author="xwang@suse.com" date="1499256000">- Enable gnome-shell-878951-hide-list-with-no-user.patch on
  openSUSE. Upstream commit fbc5e37. (bsc#1047262, bgo#731320).</changelog>
<changelog author="alarrosa@suse.com" date="1499774400">- Add
  gnome-shell-1036494-Consistently-handle-createExtensionObject-errors.patch,
  gnome-shell-1036494-Catch-import-errors.patch and
  gnome-shell-1036494-Consistently-handle-initExtension-errors.patch
  to handle correctly extensions that fail to load (bsc#1036494,
  bgo#781728, CVE-2017-8288).</changelog>
<changelog author="zaitor@opensuse.org" date="1499947200">- Add gnome-shell-portalhelper-Fix-auth-URI-not-being-passed-to-window-patch:
  + Fix auth URI not being passed to window (bgo#783286).</changelog>

</package>
<package pkgid="395199e46b4c4944b204eb4473fe19c04f819b2e753ea60eacf41cabc2843977" name="gnome-shell-search-provider-documents" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Fixed bugs and regressions caused by having separate views for
    documents and collections.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Implement night mode in the content.
  + Use the trash while deleting.
  + Add placeholder text for PostScript files when the no TOC is
    available.
  + Restore the search criteria when we move back from the preview
    or collection view to the search results.
  + Adapt to changes in nao:identifier syntax for Google items.
  + Unbreak loading Google and SkyDrive items from the cache.
  + Prevent WebKit2 from blowing away our cache.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.3:
  + Collections are not displayed in the collections dialog.
  + Fix the sharing dialog to work with the latest Google Drive
    changes.
  + Unbreak activating documents from the search provider.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603201">- Update to version 3.17.2:
  + Handle inability to load unsupported e-book formats.
  + Use the trash while deleting.
  + Fixed partially visible text in collections dialog.
  + Hide "Contents" tab when no TOC is available.
  + Prevent multiple about dialogs from opening.</changelog>
<changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 3.17.90:
  + New collections dialog.
  + Don't show the places dialog if there is only one page.
  + Port to package.js.
  + Unbreak activating documents from the search provider.
  + Adapt the sharing dialog to work with latest Google Drive
    changes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923200">- Update to version 3.18.0:
  + Update title if active collection is renamed.
  + Fix tagged entry theming.
  + Prevent nested collections.
  + Align the source label.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442923201">- Update to version 3.18.0.1:
  + Fix syntax error in desktop file translation.</changelog>
<changelog author="zaitor@opensuse.org" date="1444737600">- Update to version 3.18.1:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Pass --disable-static and --enable-getting-started to configure,
  build the getting started pdf.
- Because of the above, add inkscape and poppler-tools
  BuildRequires, needed dependencies.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Restore separate collections for Books and Documents.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 3.19.3:
  + Change to selection mode when pressing ctrl+a.
  + Don't hide navigation controls when hovering.
  + Don't invert the content of Books in night-mode.
  + Show a spinner while creating the first collection.
  + Rename "Recent" view to "Documents" or "Books".
  + Restore separate collections for Books and Documents.
  + Add the ability to change the sort order of the view.
  + Disable Print menu item when unsupported.
  + Update the layout of the selection toolbar.
  + Link preview searchbar with next and previous buttons.
  + Add screenshots to AppData.
  + Show DjVu files as being eBooks.
  + Fix lost keypresses when searching in fullscreen.
  + Fix possible warnings exiting fullscreen.
  + Fix installation on some systems.
  + Fix the background of tagged entries.
  + Don't show an extra menu when the app menu is disabled.
  + Add a help overlay.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1453291200">- Update to version 3.19.4:
  + Add full-text search.
  + Use LOKDocView for handling ODF, OOXML, etc. files.
  + Try not to open PDFs in GIMP.
  + Updated translations.
- Filter out automatic generated typelib(LOKDocView) requires: the
  LO package in openSUSE does not yet provide the needed libraries
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1456920000">- Stop filtering out typelib(LOKDocView) requires: openSUSE's
  libreoffice package was updated to install the needed components
  (boo#965296).</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Better empty states.
  + Fix LOKDocView crashes during start-up.
  + Rename icons so that xdg-app bundles can be created.
  + Theme fixes.
  + Updated translations.</changelog>
<changelog author="schwab@suse.de" date="1459425600">- Reinstate filtering of typelib(LOKDocView) requires on non-x86.</changelog>
<changelog author="tyang@suse.com" date="1460635200">- Update to GNOME 3.20 Fate#318572</changelog>
<changelog author="schwab@suse.de" date="1463486400">- Reenble dependency on libreofficekit for aarch64.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.1:
  + Don't select when focusing the search entry.
  + Don't show documents in the collection dialog.
  + Fix bookmarking.
  + Fix continuous mode never being disabled.
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1471867200">- Drop pdf-converter-modify.patch.
  Drop unoconv or libreoffice recommends:
  Upstream uses LOKDocView instead of unoconv to handle ODF, OOXML,
  etc now, see bgo#753686 for more details (bnc#902922).</changelog>
<changelog author="mgorse@suse.com" date="1501243200">- Add gnome-documents-bsc1047718-pre-ooxml-formats.patch: use
  libreoffice, rather than unoconv, to convert pre-OpenXML MS
  Office files (bsc#1047718).
- Add some patches from upstream to fix dbus-related criticals if
  a primary instance is already running (bsc#1028817 bgo#783548):
  0001-application-Avoid-CRITICALs-if-a-primary-instance-is.patch
  0002-application-Instantiate-ShellSearchProvider-only-whe.patch
  0003-application-Assert-that-the-ShellSearchProvider-s-li.patch
  0004-application-Don-t-unexport-a-skeleton-that-was-never.patch</changelog>

</package>
<package pkgid="7e57fbbef33cb4ebf19a8690adcb3d63e9aee35f54286ff5117425ff54e4ded9" name="gnome-version" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
<changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
<changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
<changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>

</package>
<package pkgid="31c7cccef032e9264d62cfd68b02ff7d9d5fb0b3dcda400fba6a08763d764e8a" name="gnu-compilers-hpc" arch="noarch">
    <version epoch="0" ver="1.3" rel="2.1"/>

<changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
<changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
<changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
<changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
<changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
<changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
<changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
<changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
<changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>

</package>
<package pkgid="192610b7dba51951ac9797d58ac217be43d90192c589853f9cc56c8acda17e13" name="gnu-compilers-hpc" arch="src">
    <version epoch="0" ver="1.3" rel="2.1"/>

<changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
<changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
<changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
<changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
<changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
<changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
<changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
<changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
<changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>

</package>
<package pkgid="74ab350db78fe34e632e8855c35b79b048d9c1b124c5d263537a1c869b433f6c" name="gnu-compilers-hpc-devel" arch="noarch">
    <version epoch="0" ver="1.3" rel="2.1"/>

<changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
<changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
<changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
<changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
<changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
<changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
<changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
<changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
<changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>

</package>
<package pkgid="a51f7aed61e4f3c646c157443b7369b0224ef4fd2f0ae77a54bcdda3e54118d3" name="gnu-compilers-hpc-macros-devel" arch="noarch">
    <version epoch="0" ver="1.3" rel="2.1"/>

<changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
<changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
<changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
<changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
<changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
<changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
<changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
<changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
<changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>

</package>
<package pkgid="3ff62903213b91132a8083c4ee623b3d2d18f60549f83b38b0b5709fae8fe620" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.1" rel="15.1"/>

<changelog author="axel.braun@gmx.de" date="1421928000">- version 2.8</changelog>
<changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
<changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>

</package>
<package pkgid="3a6736e46c5844fcba266e34092a5b219fc8163b8ef9bf334fc36ce61fb46d78" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.1" rel="18.1"/>

<changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
<changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>

</package>
<package pkgid="e6000cef90e7278c578c0f19048ef33c505c6d964af9dc1b952c519640e7970c" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.2" rel="21.1"/>

<changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>

</package>
<package pkgid="8d8939ba537c478b79e8e685932f2e39edc9554429a14c4cc62c90f75337d26a" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.3" rel="24.1"/>

<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>

</package>
<package pkgid="e9dfb4229da6a1aaf13e92787450621515527ebe8a6d8ced67f00673f2500b7b" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.5" rel="29.1"/>

<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>

</package>
<package pkgid="a3ce30305b592234c88c7a2a9ff0544c9842d0ce52304ec46cd3f0abd854bf57" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.5" rel="32.1"/>

<changelog author="axel.braun@gmx.de" date="1477137600">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
<changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>

</package>
<package pkgid="ac6d80963e747dc2fe83ef976334a7ba71b280eb88253166d022c2ba5a2787bc" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.6" rel="35.1"/>

<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
<changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
<changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>

</package>
<package pkgid="84193e8bf9f35d8ef0ee4192455013b7f5206dcd6aa0e8acca26e1a74864982e" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.8" rel="38.1"/>

<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
<changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
<changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
<changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
<changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>

</package>
<package pkgid="a84e351bddaeabe8478be121c5999ded6781031b82583ef4abc2aedd424ec420" name="gnuhealth" arch="noarch">
    <version epoch="0" ver="3.2.9" rel="41.1"/>

<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
<changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
<changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
<changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
<changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
<changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>

</package>
<package pkgid="b0fc841fa75c160e586ec8e9c771f5a0cdec85a641195de0037bc2d3f6483812" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.1" rel="15.1"/>

<changelog author="axel.braun@gmx.de" date="1421928000">- version 2.8</changelog>
<changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
<changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>

</package>
<package pkgid="f2d91ace531a51933019dfa781d30810262b85d8746ce011c49996f858377726" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.1" rel="18.1"/>

<changelog author="axel.braun@gmx.de" date="1451908800">- Version 3.0RC2</changelog>
<changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>

</package>
<package pkgid="4d2a4d3dc3350f77ab9b73fa46579036ea14a6d447b051d3192ac0c45c93a019" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.2" rel="21.1"/>

<changelog author="axel.braun@gmx.de" date="1452513600">- version 3.0.0</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- Trim summary/description from redundant words</changelog>
<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>

</package>
<package pkgid="293c2dd74962fa9ff5a6b1a30006d5c5736e28004903ff32ce2e3b05377661e9" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.3" rel="24.1"/>

<changelog author="axel.braun@gmx.de" date="1472644800">- file permissions corrected</changelog>
<changelog author="axel.braun@gmx.de" date="1475064000">- update of README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1476792000">- README updated</changelog>
<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>

</package>
<package pkgid="ac97534804dd0030aaec0a33c2ada4e7c58ec667fe59af246047dc7e8de3b0f2" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.5" rel="29.1"/>

<changelog author="axel.braun@gmx.de" date="1477137600">- Release 3.0.4</changelog>
<changelog author="axel.braun@gmx.de" date="1477137601">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>

</package>
<package pkgid="8635d582fd601658ba2fd2c81aae2cab3c567848567ad199ff9fc2f36a86fba5" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.5" rel="32.1"/>

<changelog author="axel.braun@gmx.de" date="1477137600">- temporary fix for prescription_orders report until 3.0.5 is released</changelog>
<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
<changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>

</package>
<package pkgid="794f2cf01cb5cfc4ee16ebb19ce0908ae33d3198000a1a68bc01cc2d7a13da5c" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.6" rel="35.1"/>

<changelog author="axel.braun@gmx.de" date="1481544000">- Release 3.0.5
  * Update to ICD10 version 2016
  * fix bug #49414: Error when printing prescription using review dates
  * bug #49405: Error on summary report when no date of birh is assigned to the person</changelog>
<changelog author="axel.braun@gmx.de" date="1487073600">- version 3.06
  * Fix bug #50269: Traceback when assigning a new meal order
  * Fix bug #50281: Traceback when displaying patient critical info
    in non-english languages
  * fix bug #50288: Wrong widget for mealtime field. // Fix
    validation for meal order warning
  * Remove readonly from patient meal order warning, to correctly
    save state of the field</changelog>
<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
<changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
<changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>

</package>
<package pkgid="4548352004177baf97c0b271830b1d701b0cb1fda8a6ef5908bb19680810dffe" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.8" rel="38.1"/>

<changelog author="axel.braun@gmx.de" date="1487592000">- renamed gnuhealth_control to gnuhealth-control
  fixed documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
<changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
<changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
<changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
<changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>

</package>
<package pkgid="fe72049e234dd207288b9d62ba30ce0197abcc76cf452616123715bdc580f24f" name="gnuhealth" arch="src">
    <version epoch="0" ver="3.2.9" rel="41.1"/>

<changelog author="axel.braun@gmx.de" date="1488024000">- added DB-role to gnuhealh-control
  updated documentation</changelog>
<changelog author="axel.braun@gmx.de" date="1489492800">- Release 3.0.7 (bnc1026365)</changelog>
<changelog author="axel.braun@gmx.de" date="1490529600">- release 3.0.8
  [bug #50635] Missing declaration of view directory on setup.py on health_disability module</changelog>
<changelog author="axel.braun@gmx.de" date="1497960000">- GNU Health version 3.1.0b3</changelog>
<changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
<changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
<changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
<changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
<changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
<changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
<changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
<changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
<changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
<changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
<changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
<changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
<changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
<changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
<changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
<changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>

</package>
<package pkgid="8ee722cb5b79a2328bda285e29c58fd20bc08298c6715ce54f310309f40e3d21" name="gnustep-base" arch="src">
    <version epoch="0" ver="1.25.0" rel="3.1"/>

<changelog author="lars@linux-schulserver.de" date="1239537600">- initial version</changelog>
<changelog author="chris@computersalat.de" date="1302177600">- update to 1.20.1
  o for more info please see ChangeLog file
- rework enable-tls patch
- spec mod
  o add header
  o fix gs_library (/usr/lib/GNUstep)
    see WindowMaker pkg: /usr/lib/GNUstep/Applications</changelog>
<changelog author="chris@computersalat.de" date="1344081600">- update to 1.24.0
  o for more info please see ChangeLog file
- remove obsolete enable-tls patch
- add source signature file (tar.gz.sig)
- enable parallel build
- add BuildReq libicu-devel
- rpmlint stuff
  * fix Group
  * add missing rcgdomap link
  * remove setuid/setgid bit gdomap (6755 -&gt; 0755)</changelog>
<changelog author="fredkiefer@gmx.de" date="1362571200">- update to 1.24.3
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1364817600">- update to 1.24.4
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1376136000">- update to 1.24.5
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1387886400">- update to 1.24.6
  o NSUUID implemented
  o New OSX version macros
  o TLS support improvements
  o Various new methods for OSX compatibility
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1426939200">- update to 1.24.7
  o TLS and other security improvements (note, SSLv3.0 is disabled by default
    in order to prevent the 'POODLE' attack).
  o Latest timezone data included
  o Various other bug fixes
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1431777600">- update to 1.24.8
  o Performance optimisations (particularly in the use of tiny string
    objects by the new objc runtime on 64bit systems).
  o Thread naming and logging of threads by NSLog() has been made
    consistent with the latest OSX releases, making debugging of
    multithreaded code a little easier.
  o Sergei Golovin has added NSURLConnection regression tests (while
    fixing a few bugs there).
  o As usual, this release also contains an update to include the most
    recent international timezone data.
  o Various other bugfixes.</changelog>
<changelog author="fredkiefer@gmx.de" date="1458561600">- update to 1.24.9
  o Niels added support for generics
  o Support for 'ng' runtime library (latest language features enabled)
  o Performance optimisations and improved diagnostic messages
  o Garbage Collection deprecated (support to be removed)
  o As usual, this release also contains an update to include the most
    recent international timezone data.</changelog>
<changelog author="fredkiefer@gmx.de" date="1458907200">- disable icu on Suse systems before 12.</changelog>
<changelog author="aloisio@gmx.com" date="1484222400">- Spec cleanup
- Removed _service file and added tarball so that
  the package can be accepted into Factory</changelog>
<changelog author="aloisio@gmx.com" date="1484395200">- Reverted macros in comments</changelog>
<changelog author="aloisio@gmx.com" date="1484654400">- Rename pl to pllist unconditionally.
- Explicit filelist to better monitor conflicts between
  packages.</changelog>
<changelog author="fredkiefer@gmx.de" date="1492344000">- update to 1.25.0</changelog>
<changelog author="fredkiefer@gmx.de" date="1500724800">- Change gnustep-make from BuildRequired to Required.</changelog>
<changelog author="fredkiefer@gmx.de" date="1504440000">- Remove scripts to start gdnc as daemon or on login. (Fixes boo#1055816)</changelog>

</package>
<package pkgid="918f378fc2a934c0422772484b848df5e17a774780804262f6853df38e5b559f" name="gnustep-base" arch="x86_64">
    <version epoch="0" ver="1.25.0" rel="3.1"/>

<changelog author="lars@linux-schulserver.de" date="1239537600">- initial version</changelog>
<changelog author="chris@computersalat.de" date="1302177600">- update to 1.20.1
  o for more info please see ChangeLog file
- rework enable-tls patch
- spec mod
  o add header
  o fix gs_library (/usr/lib/GNUstep)
    see WindowMaker pkg: /usr/lib/GNUstep/Applications</changelog>
<changelog author="chris@computersalat.de" date="1344081600">- update to 1.24.0
  o for more info please see ChangeLog file
- remove obsolete enable-tls patch
- add source signature file (tar.gz.sig)
- enable parallel build
- add BuildReq libicu-devel
- rpmlint stuff
  * fix Group
  * add missing rcgdomap link
  * remove setuid/setgid bit gdomap (6755 -&gt; 0755)</changelog>
<changelog author="fredkiefer@gmx.de" date="1362571200">- update to 1.24.3
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1364817600">- update to 1.24.4
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1376136000">- update to 1.24.5
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1387886400">- update to 1.24.6
  o NSUUID implemented
  o New OSX version macros
  o TLS support improvements
  o Various new methods for OSX compatibility
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1426939200">- update to 1.24.7
  o TLS and other security improvements (note, SSLv3.0 is disabled by default
    in order to prevent the 'POODLE' attack).
  o Latest timezone data included
  o Various other bug fixes
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1431777600">- update to 1.24.8
  o Performance optimisations (particularly in the use of tiny string
    objects by the new objc runtime on 64bit systems).
  o Thread naming and logging of threads by NSLog() has been made
    consistent with the latest OSX releases, making debugging of
    multithreaded code a little easier.
  o Sergei Golovin has added NSURLConnection regression tests (while
    fixing a few bugs there).
  o As usual, this release also contains an update to include the most
    recent international timezone data.
  o Various other bugfixes.</changelog>
<changelog author="fredkiefer@gmx.de" date="1458561600">- update to 1.24.9
  o Niels added support for generics
  o Support for 'ng' runtime library (latest language features enabled)
  o Performance optimisations and improved diagnostic messages
  o Garbage Collection deprecated (support to be removed)
  o As usual, this release also contains an update to include the most
    recent international timezone data.</changelog>
<changelog author="fredkiefer@gmx.de" date="1458907200">- disable icu on Suse systems before 12.</changelog>
<changelog author="aloisio@gmx.com" date="1484222400">- Spec cleanup
- Removed _service file and added tarball so that
  the package can be accepted into Factory</changelog>
<changelog author="aloisio@gmx.com" date="1484395200">- Reverted macros in comments</changelog>
<changelog author="aloisio@gmx.com" date="1484654400">- Rename pl to pllist unconditionally.
- Explicit filelist to better monitor conflicts between
  packages.</changelog>
<changelog author="fredkiefer@gmx.de" date="1492344000">- update to 1.25.0</changelog>
<changelog author="fredkiefer@gmx.de" date="1500724800">- Change gnustep-make from BuildRequired to Required.</changelog>
<changelog author="fredkiefer@gmx.de" date="1504440000">- Remove scripts to start gdnc as daemon or on login. (Fixes boo#1055816)</changelog>

</package>
<package pkgid="29d4e4008dbd8a1ca755682a85b5461a8c25497d11a634ab436d2604e5128c1e" name="gnustep-base-devel" arch="x86_64">
    <version epoch="0" ver="1.25.0" rel="3.1"/>

<changelog author="lars@linux-schulserver.de" date="1239537600">- initial version</changelog>
<changelog author="chris@computersalat.de" date="1302177600">- update to 1.20.1
  o for more info please see ChangeLog file
- rework enable-tls patch
- spec mod
  o add header
  o fix gs_library (/usr/lib/GNUstep)
    see WindowMaker pkg: /usr/lib/GNUstep/Applications</changelog>
<changelog author="chris@computersalat.de" date="1344081600">- update to 1.24.0
  o for more info please see ChangeLog file
- remove obsolete enable-tls patch
- add source signature file (tar.gz.sig)
- enable parallel build
- add BuildReq libicu-devel
- rpmlint stuff
  * fix Group
  * add missing rcgdomap link
  * remove setuid/setgid bit gdomap (6755 -&gt; 0755)</changelog>
<changelog author="fredkiefer@gmx.de" date="1362571200">- update to 1.24.3
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1364817600">- update to 1.24.4
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1376136000">- update to 1.24.5
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1387886400">- update to 1.24.6
  o NSUUID implemented
  o New OSX version macros
  o TLS support improvements
  o Various new methods for OSX compatibility
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1426939200">- update to 1.24.7
  o TLS and other security improvements (note, SSLv3.0 is disabled by default
    in order to prevent the 'POODLE' attack).
  o Latest timezone data included
  o Various other bug fixes
  o for more info please see ChangeLog file</changelog>
<changelog author="fredkiefer@gmx.de" date="1431777600">- update to 1.24.8
  o Performance optimisations (particularly in the use of tiny string
    objects by the new objc runtime on 64bit systems).
  o Thread naming and logging of threads by NSLog() has been made
    consistent with the latest OSX releases, making debugging of
    multithreaded code a little easier.
  o Sergei Golovin has added NSURLConnection regression tests (while
    fixing a few bugs there).
  o As usual, this release also contains an update to include the most
    recent international timezone data.
  o Various other bugfixes.</changelog>
<changelog author="fredkiefer@gmx.de" date="1458561600">- update to 1.24.9
  o Niels added support for generics
  o Support for 'ng' runtime library (latest language features enabled)
  o Performance optimisations and improved diagnostic messages
  o Garbage Collection deprecated (support to be removed)
  o As usual, this release also contains an update to include the most
    recent international timezone data.</changelog>
<changelog author="fredkiefer@gmx.de" date="1458907200">- disable icu on Suse systems before 12.</changelog>
<changelog author="aloisio@gmx.com" date="1484222400">- Spec cleanup
- Removed _service file and added tarball so that
  the package can be accepted into Factory</changelog>
<changelog author="aloisio@gmx.com" date="1484395200">- Reverted macros in comments</changelog>
<changelog author="aloisio@gmx.com" date="1484654400">- Rename pl to pllist unconditionally.
- Explicit filelist to better monitor conflicts between
  packages.</changelog>
<changelog author="fredkiefer@gmx.de" date="1492344000">- update to 1.25.0</changelog>
<changelog author="fredkiefer@gmx.de" date="1500724800">- Change gnustep-make from BuildRequired to Required.</changelog>
<changelog author="fredkiefer@gmx.de" date="1504440000">- Remove scripts to start gdnc as daemon or on login. (Fixes boo#1055816)</changelog>

</package>
<package pkgid="8b97a7b524f81fddfd8e5fdb289e6c4837c594127e1b2603cb7e767ff65b2511" name="go" arch="src">
    <version epoch="0" ver="1.7.5" rel="27.1"/>

<changelog author="jmassaguerpla@suse.com" date="1464091200">- Enable build for ppc64le on SLE12 (bsc#981432)</changelog>
<changelog author="i@marguerite.su" date="1465560000">- update version 1.6.2
  * fixes to the compiler, runtime, tools, documentation,
    and the mime/multipart, net/http, and sort packages.</changelog>
<changelog author="i@marguerite.su" date="1466164800">- install shared libraries.</changelog>
<changelog author="dmueller@suse.com" date="1466683200">- bootstrap aarch64 even on SLE via gcc5-go</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1468929600">- do not set with_shared for ppc64 (BE)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1469534400">- update go go1.6.3 (released 2016/07/17) includes security fixes to the
  &lt;code&gt;net/http/cgi&lt;/code&gt; package and &lt;code&gt;net/http&lt;/code&gt; package when used in
  a CGI environment. This release also adds support for macOS Sierra.
  See the &lt;a href="https://github.com/golang/go/issues?q=milestone%3AGo1.6.3"&gt;Go
  1.6.3 milestone&lt;/a&gt; on our issue tracker for details.
  This fixes: bsc#988487 (CVE-2016-5386), so we remove CVE-2016-5386.patch)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1469534401">- CVE-2016-5386.patch: fixes bsc#988487 aka https://httpoxy.org/</changelog>
<changelog author="i@marguerite.su" date="1471176000">- fix source location for 3rd-party libraries</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472558400">- build ppc64le with gcc-go</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474459200">- update to gcc6-go for Factory
- add gcc6-go.patch for Factory
- build with gcc-go for aarch64, ppc64le and ppc64, but for x86_64
  always use go1.4, as it should be according to
  https://golang.org/doc/install/source#go14</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474632000">- Reverting to use gcc-go instead of go1.4 for Factory and Leap
  The fallback boostrap method via go1.4 does not work for Factory because
  of a known bug with binutils 2.27 https://github.com/golang/go/issues/16906.
  Leap will work but we don't have go1.4 in there.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474891200">- update to go1.7.0 (bsc#996303)
  Most of its changes are in the implementation of the toolchain,
  runtime, and libraries. There is one minor change to the language
  specification.
  The release adds a port to IBM LinuxOne; updates the x86-64 compiler
  back end to generate more efficient code; includes the context package,
  promoted from the x/net subrepository and now used in the standard
  library; and adds support in the testing package for creating
  hierarchies of tests and benchmarks. The release also finalizes
  the vendoring support started in Go 1.5, making it a standard feature.
  more at: https://golang.org/doc/go1.7
  Review patches:
  - armv6l.patch
  - fix_certificates_lookup.patch,
  - go-1.5-install-dont-reinstall-stdlibs.patch
  - gcc5-go.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1478174400">- Make sure we build go using gcc-go in Factory cause there is no go1.4</changelog>
<changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
<changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
<changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
<changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
<changelog author="thipp@suse.de" date="1496145600">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>

</package>
<package pkgid="6e7fe322fc679d82a29eebce1a8f92abf162cb39c060b9c09716d2c4779f977a" name="go" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="27.1"/>

<changelog author="jmassaguerpla@suse.com" date="1464091200">- Enable build for ppc64le on SLE12 (bsc#981432)</changelog>
<changelog author="i@marguerite.su" date="1465560000">- update version 1.6.2
  * fixes to the compiler, runtime, tools, documentation,
    and the mime/multipart, net/http, and sort packages.</changelog>
<changelog author="i@marguerite.su" date="1466164800">- install shared libraries.</changelog>
<changelog author="dmueller@suse.com" date="1466683200">- bootstrap aarch64 even on SLE via gcc5-go</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1468929600">- do not set with_shared for ppc64 (BE)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1469534400">- update go go1.6.3 (released 2016/07/17) includes security fixes to the
  &lt;code&gt;net/http/cgi&lt;/code&gt; package and &lt;code&gt;net/http&lt;/code&gt; package when used in
  a CGI environment. This release also adds support for macOS Sierra.
  See the &lt;a href="https://github.com/golang/go/issues?q=milestone%3AGo1.6.3"&gt;Go
  1.6.3 milestone&lt;/a&gt; on our issue tracker for details.
  This fixes: bsc#988487 (CVE-2016-5386), so we remove CVE-2016-5386.patch)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1469534401">- CVE-2016-5386.patch: fixes bsc#988487 aka https://httpoxy.org/</changelog>
<changelog author="i@marguerite.su" date="1471176000">- fix source location for 3rd-party libraries</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472558400">- build ppc64le with gcc-go</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474459200">- update to gcc6-go for Factory
- add gcc6-go.patch for Factory
- build with gcc-go for aarch64, ppc64le and ppc64, but for x86_64
  always use go1.4, as it should be according to
  https://golang.org/doc/install/source#go14</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474632000">- Reverting to use gcc-go instead of go1.4 for Factory and Leap
  The fallback boostrap method via go1.4 does not work for Factory because
  of a known bug with binutils 2.27 https://github.com/golang/go/issues/16906.
  Leap will work but we don't have go1.4 in there.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474891200">- update to go1.7.0 (bsc#996303)
  Most of its changes are in the implementation of the toolchain,
  runtime, and libraries. There is one minor change to the language
  specification.
  The release adds a port to IBM LinuxOne; updates the x86-64 compiler
  back end to generate more efficient code; includes the context package,
  promoted from the x/net subrepository and now used in the standard
  library; and adds support in the testing package for creating
  hierarchies of tests and benchmarks. The release also finalizes
  the vendoring support started in Go 1.5, making it a standard feature.
  more at: https://golang.org/doc/go1.7
  Review patches:
  - armv6l.patch
  - fix_certificates_lookup.patch,
  - go-1.5-install-dont-reinstall-stdlibs.patch
  - gcc5-go.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1478174400">- Make sure we build go using gcc-go in Factory cause there is no go1.4</changelog>
<changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
<changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
<changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
<changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
<changelog author="thipp@suse.de" date="1496145600">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>

</package>
<package pkgid="9210ceb7a608633d287e4349a4d2486be6a15043a0b2770f62bf84eaededfe2c" name="go-doc" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="27.1"/>

<changelog author="jmassaguerpla@suse.com" date="1464091200">- Enable build for ppc64le on SLE12 (bsc#981432)</changelog>
<changelog author="i@marguerite.su" date="1465560000">- update version 1.6.2
  * fixes to the compiler, runtime, tools, documentation,
    and the mime/multipart, net/http, and sort packages.</changelog>
<changelog author="i@marguerite.su" date="1466164800">- install shared libraries.</changelog>
<changelog author="dmueller@suse.com" date="1466683200">- bootstrap aarch64 even on SLE via gcc5-go</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1468929600">- do not set with_shared for ppc64 (BE)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1469534400">- update go go1.6.3 (released 2016/07/17) includes security fixes to the
  &lt;code&gt;net/http/cgi&lt;/code&gt; package and &lt;code&gt;net/http&lt;/code&gt; package when used in
  a CGI environment. This release also adds support for macOS Sierra.
  See the &lt;a href="https://github.com/golang/go/issues?q=milestone%3AGo1.6.3"&gt;Go
  1.6.3 milestone&lt;/a&gt; on our issue tracker for details.
  This fixes: bsc#988487 (CVE-2016-5386), so we remove CVE-2016-5386.patch)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1469534401">- CVE-2016-5386.patch: fixes bsc#988487 aka https://httpoxy.org/</changelog>
<changelog author="i@marguerite.su" date="1471176000">- fix source location for 3rd-party libraries</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472558400">- build ppc64le with gcc-go</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474459200">- update to gcc6-go for Factory
- add gcc6-go.patch for Factory
- build with gcc-go for aarch64, ppc64le and ppc64, but for x86_64
  always use go1.4, as it should be according to
  https://golang.org/doc/install/source#go14</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474632000">- Reverting to use gcc-go instead of go1.4 for Factory and Leap
  The fallback boostrap method via go1.4 does not work for Factory because
  of a known bug with binutils 2.27 https://github.com/golang/go/issues/16906.
  Leap will work but we don't have go1.4 in there.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474891200">- update to go1.7.0 (bsc#996303)
  Most of its changes are in the implementation of the toolchain,
  runtime, and libraries. There is one minor change to the language
  specification.
  The release adds a port to IBM LinuxOne; updates the x86-64 compiler
  back end to generate more efficient code; includes the context package,
  promoted from the x/net subrepository and now used in the standard
  library; and adds support in the testing package for creating
  hierarchies of tests and benchmarks. The release also finalizes
  the vendoring support started in Go 1.5, making it a standard feature.
  more at: https://golang.org/doc/go1.7
  Review patches:
  - armv6l.patch
  - fix_certificates_lookup.patch,
  - go-1.5-install-dont-reinstall-stdlibs.patch
  - gcc5-go.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1478174400">- Make sure we build go using gcc-go in Factory cause there is no go1.4</changelog>
<changelog author="asarai@suse.com" date="1478865600">- Disable stripping to fix __.PKGDEF issues. bsc#964546
  There is an upstream issue about it as well, with a patch which will
  hopefully make Go more resilient to this issue.
    https://github.com/golang/go/issues/17890</changelog>
<changelog author="mpost@suse.com" date="1482321600">- Added s390x to the list of architectures that get built.</changelog>
<changelog author="bg@suse.com" date="1483099200">- define go_arch to s390x</changelog>
<changelog author="bg@suse.com" date="1483099201">- set libdir for s390x in go.sh</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490961600">- Add a patch to bump _MaxGomaxprocs so that things like Docker and k8s can run
  properly on NUMA machines. Don't bump this number too high. bsc#1028865
  + runtime-bump-MaxGomaxprocs.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- minor update to go1.7.5 because this is required by
  docker-v17.04.00-ce (bsc#1034053)
  fixes included:
  * go1.7.1 (released 2016/09/07) includes fixes to the compiler, runtime,
    documentation, and the compress/flate, hash/crc32, io, net, net/http,
    path/filepath, reflect, and syscall packages.
    See the Go 1.7.1 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.1
  * go1.7.2 was not released. No changelog.
  * go1.7.3 (released 2016/10/19) includes fixes to the compiler, runtime,
    and the crypto/cipher, crypto/tls, net/http, and strings packages.
    See the Go 1.7.3 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.3
  * go1.7.4 (released 2016/12/01) includes two security fixes.
    See the Go 1.7.4 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.4
  * go1.7.5 (released 2017/01/26) includes fixes to the compiler, runtime,
    and the crypto/x509 and time packages.
    See the Go 1.7.5 milestone on our issue tracker for details:
    https://github.com/golang/go/issues?q=milestone%3AGo1.7.5</changelog>
<changelog author="thipp@suse.de" date="1496145600">- Add patch to fix carry bug in x86-64 P-256 implementation (CVE-2017-8932).
  bsc#1040618
  + fix-carry-bug-in-x86-64-P-256-implementation.patch</changelog>

</package>
<package pkgid="97b06393cc46cade3c7f33f8f70326f3a3d45966a9a571daa4717baddb2c6099" name="go-md2man" arch="x86_64">
    <version epoch="0" ver="1.0.6+git20160904.a65d4d2" rel="11.1"/>

<changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.0.2</changelog>
<changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-cpuguy83-md2man
- update version 1.0.2+git20150617.e69ac41
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1453032000">- Update to version 1.0.5+git20160104.2724a9c:
  + md2man usable as a library (again)
  + Improve man page rendering</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593601">- add golang-github-shurcool-sanitized_anchor_name-source dependency</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
<changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
<changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Update to version 1.0.6+git20160904.a65d4d2:
  * Render raw html as is
  * Add html entity output support
  * fix escaping for curly braces
  * fix wrong type for Entity func
  * md2man usable as a library (again)
  * Improve man page rendering
  * use stdio for default input and output
  * improve link
  * add vendor</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488542400">- add provides go-go-md2man
  this provides was there in previous versions and we can not remove
  it or otherwise it breaks dependent packages (i.e. docker, k8s)</changelog>

</package>
<package pkgid="7864f721f317d7d3a2f27a2876683e679723e1ae263e3582493627592b140219" name="go-tools" arch="x86_64">
    <version epoch="0" ver="1.4.2+git20161212.0a14ca4" rel="6.1"/>

<changelog author="speilicke@suse.com" date="1382097600">- Initial version</changelog>
<changelog author="cbosdonnat@suse.com" date="1411041600">- Updated to 1.3.1 using mercurial tip
- removed patches:
  * godoc-path-locations.patch: no longer needed all sources are in
    GOROOT or GOPATH</changelog>
<changelog author="i@marguerite.su" date="1425816000">- update to 1.4.2+git20150306.c327a7c
- upstream changed to github.com/golang/tools
- package name changed: go-tools
- add provides/obsoletes</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 1.4.2+git20150320.af0a448</changelog>
<changelog author="i@marguerite.su" date="1427198400">- BuildRequires:  go-oauth2</changelog>
<changelog author="i@marguerite.su" date="1427284800">- add go-tools-rpmlintrc file as source2</changelog>
<changelog author="i@marguerite.su" date="1432987200">- update version 1.4.2+git20150529.8ccf558
- use update-alternatives to avoid conflict w/
  perl-Devel-Cover package</changelog>
<changelog author="i@marguerite.su" date="1436616000">- rename to golang-org-x-tools
- update version 1.4.2+git20150710.4cd43f3
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1440763200">- Update to version 1.4.2+git20150825.b48dc8d:
  + cmd/godoc: remove obsolete vet redirect
  + imports: fix bug, where unused named import is mistaken for unnamed import.
  + cmd/tipgodoc: change capitalization of 'Authors' to be consistent
  + go/loader: fix fd leak and limit calls to ioutil.ReadDir
  + website: fix JavaScript error on website and blog in non-ES6 browsers
  + cmd/gotype: use std lib go/types instead of x/tools version
  + cmd/gotype: keep gotype working with Go1.4
- cover/vert are merged in mainline go 1.5, so strip them off.</changelog>
<changelog author="bwiedemann@suse.com" date="1458475200">- Specify version to fix build-compare</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Dropped rpmlintrc</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.4.2+git20161212.0a14ca4:
  * go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows
  * Revert "go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows."
  * Revert "go/buildutil: handle symlinks in filenames"
  * cmd/guru: avoid testing symlinks on OSes that do not support them
  * go/buildutil, cmd/guru: resolve symlinks in filenames through build.Context
  * go/internal/gccgoimporter: handle conversions in exported const values
  * go/loader: fix broken tests after context removal from testing package
  * playground/socket: deflake test, remove sleep
  * godoc: Regenerate static/static.go
  * godoc: don't select line numbers when highlighting source code</changelog>
<changelog author="tboerger@suse.com" date="1481889600">- Updated mango-doc dependency name</changelog>
<changelog author="tboerger@suse.com" date="1482235200">- Create a proper subpackage</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Fix requirements
- Remove duplicate files</changelog>

</package>
<package pkgid="d7fd14fd1ed3f8eaf6c465996d1c4b57e2f3adbf77c242d125231998b7dd6eca" name="golang-bitbucket-taruti-bigendian" arch="src">
    <version epoch="0" ver="0.0.0+hg20130320.25.37f0ed9bf940" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1309608000">- Initial version</changelog>
<changelog author="saschpe@suse.de" date="1323086400">- Update to 05/12/2011 mercurial version</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20130320.25.37f0ed9bf940:
  + Upstream provides no changelog
- Use _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-bitbucket-taruti-bigendian
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="1285ba0dee1b29fc6da4a35e7a7cc08cdfb6b7084e11077bb38f26aac7bb2cf5" name="golang-bitbucket-taruti-bigendian" arch="x86_64">
    <version epoch="0" ver="0.0.0+hg20130320.25.37f0ed9bf940" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1309608000">- Initial version</changelog>
<changelog author="saschpe@suse.de" date="1323086400">- Update to 05/12/2011 mercurial version</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20130320.25.37f0ed9bf940:
  + Upstream provides no changelog
- Use _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-bitbucket-taruti-bigendian
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="bce35e84b6b552e9b1f8531ce41324733c91df692433e1fdddb36acf0b16489b" name="golang-github-cpuguy83-go-md2man" arch="src">
    <version epoch="0" ver="1.0.6+git20160904.a65d4d2" rel="11.1"/>

<changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.0.2</changelog>
<changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-cpuguy83-md2man
- update version 1.0.2+git20150617.e69ac41
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1453032000">- Update to version 1.0.5+git20160104.2724a9c:
  + md2man usable as a library (again)
  + Improve man page rendering</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593601">- add golang-github-shurcool-sanitized_anchor_name-source dependency</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
<changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
<changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Update to version 1.0.6+git20160904.a65d4d2:
  * Render raw html as is
  * Add html entity output support
  * fix escaping for curly braces
  * fix wrong type for Entity func
  * md2man usable as a library (again)
  * Improve man page rendering
  * use stdio for default input and output
  * improve link
  * add vendor</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488542400">- add provides go-go-md2man
  this provides was there in previous versions and we can not remove
  it or otherwise it breaks dependent packages (i.e. docker, k8s)</changelog>

</package>
<package pkgid="3954a2856aef4a677b68bd8f90c1ae13794b1ffe3bcd06eb2f9b953405a73464" name="golang-github-cpuguy83-go-md2man" arch="x86_64">
    <version epoch="0" ver="1.0.6+git20160904.a65d4d2" rel="11.1"/>

<changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.0.2</changelog>
<changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-cpuguy83-md2man
- update version 1.0.2+git20150617.e69ac41
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1453032000">- Update to version 1.0.5+git20160104.2724a9c:
  + md2man usable as a library (again)
  + Improve man page rendering</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593601">- add golang-github-shurcool-sanitized_anchor_name-source dependency</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
<changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
<changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Update to version 1.0.6+git20160904.a65d4d2:
  * Render raw html as is
  * Add html entity output support
  * fix escaping for curly braces
  * fix wrong type for Entity func
  * md2man usable as a library (again)
  * Improve man page rendering
  * use stdio for default input and output
  * improve link
  * add vendor</changelog>
<changelog author="jmassaguerpla@suse.com" date="1488542400">- add provides go-go-md2man
  this provides was there in previous versions and we can not remove
  it or otherwise it breaks dependent packages (i.e. docker, k8s)</changelog>

</package>
<package pkgid="b0d4f3ef97ff963da286faeba7fa63a1fba6f1d99b0539008d85f1998122f91a" name="golang-github-dchest-authcookie" arch="src">
    <version epoch="0" ver="0.0.0+git20120917.fbdef6e" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1308052800">- Initial version</changelog>
<changelog author="saschpe@gmx.de" date="1308052801">- Disabled testsuite on Mandriva to fix build errors</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Adjust to Go weekly.2011-12-02 release changes</changelog>
<changelog author="graham@andtech.eu" date="1327492800">- Pass hash to hmac.New instead of using NewSHA256
- Update to weekly.2012-01-20</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %go_exclusivearch macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20120917.fbdef6e:
  + Upstream provides no changelog
- Use _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-dchest-authcookie
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="15dc6684d493f197d19790642b325c1c89f22a5de832c59ad5c9889644854e1c" name="golang-github-dchest-authcookie" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20120917.fbdef6e" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1308052800">- Initial version</changelog>
<changelog author="saschpe@gmx.de" date="1308052801">- Disabled testsuite on Mandriva to fix build errors</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Adjust to Go weekly.2011-12-02 release changes</changelog>
<changelog author="graham@andtech.eu" date="1327492800">- Pass hash to hmac.New instead of using NewSHA256
- Update to weekly.2012-01-20</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %go_exclusivearch macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20120917.fbdef6e:
  + Upstream provides no changelog
- Use _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-dchest-authcookie
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="0d4e1578c9946fad6bbe14d6e5aae38aa0fe857112ccb97795796d09679fa472" name="golang-github-docker-libnetwork" arch="src">
    <version epoch="0" ver="0.0.0+git20170119.7b2b1fe" rel="2.1"/>

<changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
<changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
<changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>

</package>
<package pkgid="84fb084bcf4d4cb8e073ee5247f0197c4b3595fd18d9441d0c05c3816aa3fe5e" name="golang-github-docker-libnetwork" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20170119.7b2b1fe" rel="2.1"/>

<changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
<changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
<changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>

</package>
<package pkgid="fd66025c88148b2a07dbf6a220db4f3d28a2a5f5c765675506a94df3bd99b000" name="golang-github-exercism-cli" arch="src">
    <version epoch="0" ver="2.4.0+git20170324.41427fc" rel="3.1"/>

<changelog author="mamorales@suse.com" date="1467028800">- initial package</changelog>
<changelog author="mamorales@suse.com" date="1467201600">- add golang-github-exercism-cli-rpmlintrc as a source</changelog>
<changelog author="mamorales@suse.com" date="1471867200">- update to version 2.3.0</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481112001">- Update to version 2.3.0+git20160807.ca8a22e:
  * update codegangsta/urfave url
  * Update url for package cli from codegangsta/cli to urfave/cli
  * Update all reference of codegangsta/cli to urfave/cli
  * Add '--all' flag to 'fetch' command
  * Move FetchAll to method on *api.Client
  * Add test for client.FetchAll
  * Don't run command if API key is missing.
  * Update changelog
  * Bump version to v2.3.0
  * Update the CHANGELOG profile entries</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1490961600">- Update to version 2.4.0+git20170324.41427fc:
  * Add silent argument/option to the configure command to obfuscate output
  * iteration_test: change variable names to camelCase
  * api_test: fix assertion order
  * README.md: add comment about setting up local dev site
  * Replace Client with Interface
  * Display WhatNextInstructions from API when provided
  * Fix minor formatting issue in RELEASE doc
  * Bump version to v2.4.0</changelog>

</package>
<package pkgid="b317116bbca64d6f2474e59da54923c61f66e80cd124f2af3515510e1a224ade" name="golang-github-exercism-cli" arch="x86_64">
    <version epoch="0" ver="2.4.0+git20170324.41427fc" rel="3.1"/>

<changelog author="mamorales@suse.com" date="1467028800">- initial package</changelog>
<changelog author="mamorales@suse.com" date="1467201600">- add golang-github-exercism-cli-rpmlintrc as a source</changelog>
<changelog author="mamorales@suse.com" date="1471867200">- update to version 2.3.0</changelog>
<changelog author="tboerger@suse.com" date="1481112000">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481112001">- Update to version 2.3.0+git20160807.ca8a22e:
  * update codegangsta/urfave url
  * Update url for package cli from codegangsta/cli to urfave/cli
  * Update all reference of codegangsta/cli to urfave/cli
  * Add '--all' flag to 'fetch' command
  * Move FetchAll to method on *api.Client
  * Add test for client.FetchAll
  * Don't run command if API key is missing.
  * Update changelog
  * Bump version to v2.3.0
  * Update the CHANGELOG profile entries</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1490961600">- Update to version 2.4.0+git20170324.41427fc:
  * Add silent argument/option to the configure command to obfuscate output
  * iteration_test: change variable names to camelCase
  * api_test: fix assertion order
  * README.md: add comment about setting up local dev site
  * Replace Client with Interface
  * Display WhatNextInstructions from API when provided
  * Fix minor formatting issue in RELEASE doc
  * Bump version to v2.4.0</changelog>

</package>
<package pkgid="0d16c2d15554c0f6b8591a74017e7240d38e897215a05e09187d227d2ef261ca" name="golang-github-fitstar-falcore" arch="src">
    <version epoch="0" ver="0.0.0+git20161013.63e3547" rel="3.1"/>

<changelog author="graham@andtech.eu" date="1333368000">- initial package</changelog>
<changelog author="graham@andtech.eu" date="1344945600">- Support for sendfile on linux/bsd
  Additional net/http handler
  Windows build fixes</changelog>
<changelog author="graham@andtech.eu" date="1345377600">- Issue #29
  - Mime type lookup fails for RHEL6 and it's clones. mime types
    tested for are now guaranteed to be in the lookup table.</changelog>
<changelog author="graham@andtech.eu" date="1372507200">- Update to latest git version</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20130807.da39923:
  + Upstream provides no changelog
- Add _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-fitstar-falcore
- update version 0.0.0+git20150708.286078d
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161013.63e3547:
  * gofmt
  * - Checkout fixed example from ngmoco
  * - Update github reference and change Simpe to StringResponse
  * body on http.Response should never be nil. leave the zero-length strings.NewReader intact
  * fixing the percentages on the trace
  * make sure to drop transfer encoding since we dropped the body
  * don't allocate headers when they're already provided
  * removed debug etag test error
  * don't crash if the upstream pool is empty
  * make content length behavior match</changelog>

</package>
<package pkgid="e060d56835ab99e6be965703ee1351c0f9804c2ce4853ab96d4b618d92cf37a9" name="golang-github-fitstar-falcore" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20161013.63e3547" rel="3.1"/>

<changelog author="graham@andtech.eu" date="1333368000">- initial package</changelog>
<changelog author="graham@andtech.eu" date="1344945600">- Support for sendfile on linux/bsd
  Additional net/http handler
  Windows build fixes</changelog>
<changelog author="graham@andtech.eu" date="1345377600">- Issue #29
  - Mime type lookup fails for RHEL6 and it's clones. mime types
    tested for are now guaranteed to be in the lookup table.</changelog>
<changelog author="graham@andtech.eu" date="1372507200">- Update to latest git version</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20130807.da39923:
  + Upstream provides no changelog
- Add _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-fitstar-falcore
- update version 0.0.0+git20150708.286078d
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161013.63e3547:
  * gofmt
  * - Checkout fixed example from ngmoco
  * - Update github reference and change Simpe to StringResponse
  * body on http.Response should never be nil. leave the zero-length strings.NewReader intact
  * fixing the percentages on the trace
  * make sure to drop transfer encoding since we dropped the body
  * don't allocate headers when they're already provided
  * removed debug etag test error
  * don't crash if the upstream pool is empty
  * make content length behavior match</changelog>

</package>
<package pkgid="2cb743f11bb50e41db229c8d4de4ec99316299596241f1560236c02c088028e8" name="golang-github-golang-geo" arch="noarch">
    <version epoch="0" ver="0.0.0+git20170112.f819552" rel="2.1"/>

<changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>

</package>
<package pkgid="41828b9028afc4abafe8ab439552b6bfa2fb965ba044fbef7a6a4079e4343302" name="golang-github-golang-geo" arch="src">
    <version epoch="0" ver="0.0.0+git20170112.f819552" rel="2.1"/>

<changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>

</package>
<package pkgid="072e152441f9b5cfb6510228fbec3bdf161ea32483e50eb182d0ee83426d075e" name="golang-github-golang-glog" arch="src">
    <version epoch="0" ver="0.0.0+git20141105.44145f0" rel="7.1"/>

<changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20141105.44145f0</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
<changelog author="jengelh@inai.de" date="1489233600">- Ensure neutrality of description / trim redundant words</changelog>

</package>
<package pkgid="b9a38b036428da71f8f3a9fcb88b3fd256d50c7b0deabb526cd8859406858da8" name="golang-github-golang-glog" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20141105.44145f0" rel="7.1"/>

<changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20141105.44145f0</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
<changelog author="jengelh@inai.de" date="1489233600">- Ensure neutrality of description / trim redundant words</changelog>

</package>
<package pkgid="a3aa538931f47dbda49f5ab266c84baa6002036465b38ecb91fbb0d9ce197866" name="golang-github-golang-protobuf" arch="src">
    <version epoch="0" ver="0.0.0+git20170217.69b215d" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
<changelog author="saschpe@gmx.de" date="1308052800">- Update to 14/06/2011 mercurial release
  * Adapted reflect API changes
  * Safer unmarshalling
- Added goprotobuf-fix-imports patch
- Added goprotobuf-fix-proto-testsuite patch
- Also build and install goproto-gen-go binary
- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@gmx.de" date="1308916800">- Update to 24/06/2011 mercurial version
  * goprotobuf: update for Alignof/Sizeof returning uintptr, and
    goto restriction
  * goprotobuf: sync from Google internal version</changelog>
<changelog author="saschpe@suse.de" date="1315483200">- Update to 08/09/2011 mercurial version:
  * Follow changes of weekly Go release</changelog>
<changelog author="saschpe@suse.de" date="1323864000">- Adjust to Go weekly.2011-12-02 changes</changelog>
<changelog author="graham@andtech.eu" date="1327492800">- Update for weekly.2012-01-20
- update to go 1 import strings
- Fix panic in SetDefaults for nil sub-messages
- Fix a couple of instances where bad input could cause a panic
- GetExtension now returns a specific error when the requested extension is
  missing</changelog>
<changelog author="graham@andtech.eu" date="1328702400">- patch for encode/decode update runtime.MemStats use for weekly</changelog>
<changelog author="graham@andtech.eu" date="1329393600">- Update for weekly 2012-02-12
- Remove uses of runtime.MemStats.
- Correctly generate extension names for .proto files that don't declare a
  package.
- Better error handling for invalid input that mentions tag 0.
- Weak import/field handling.
- Fix proto.Equal to consider empty and nil repeated fields as equal.
- Avoid generating a struct that uses the same name for a field and a method.
- update to loss of unsafe.Unreflect, unsafe.New</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package path locations
- Add documentation sub-package</changelog>
<changelog author="graham@andtech.eu" date="1372507200">- Update pacakge to latest upstream mercurial version</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage
- name changed to go-protobuf
- source changed from google code to github.com/golang/protobuf
- version update to 0.0.0+git20150320.de8c523</changelog>
<changelog author="i@marguerite.su" date="1436616000">- rename golang-github-golang-protobuf
- update version 0.0.0+git20150708.ab974be
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 0.0.0+git20151207.68415e7:
  + Unexport proto.MessageSet, and remove a bunch of its support.
  + Add compressed file descriptor code generation.
  + Remove a test that has outlived its usefulness.
  + Generate correct service name for gRPC services without a package name.
  + Document parameters in README
  + Fix unmarshaling code to properly handle multiple instances of the same extension appearing in the wire format. Prior to this change, multiple custom options would result in all but the first being discarded when processed using the proto.GetExtension() facilities.
  + Regenerate protos.
  + Generate sizer functions for oneofs.
  + By popular demand, rename README to README.md and make Markdown consistent.
  + Add some more Markdown annotations.</changelog>
<changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Renamed the subpackage for the protoc-gen-go binary</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161116.8ee7999:
  * Run 'make generate-test-pbs' in proto/ to regenerate proto3.pb.go testdata
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.</changelog>
<changelog author="thipp@suse.de" date="1488369600">- Update to version 0.0.0+git20170217.69b215d:
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.
  * fix import path
- Update rpmlintrc
- Update requirements</changelog>

</package>
<package pkgid="118f77e85d3aa5a0b28aad1581cc15f5bcaf185ed4c4f6a8d7588c817ad39036" name="golang-github-golang-protobuf" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20170217.69b215d" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
<changelog author="saschpe@gmx.de" date="1308052800">- Update to 14/06/2011 mercurial release
  * Adapted reflect API changes
  * Safer unmarshalling
- Added goprotobuf-fix-imports patch
- Added goprotobuf-fix-proto-testsuite patch
- Also build and install goproto-gen-go binary
- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@gmx.de" date="1308916800">- Update to 24/06/2011 mercurial version
  * goprotobuf: update for Alignof/Sizeof returning uintptr, and
    goto restriction
  * goprotobuf: sync from Google internal version</changelog>
<changelog author="saschpe@suse.de" date="1315483200">- Update to 08/09/2011 mercurial version:
  * Follow changes of weekly Go release</changelog>
<changelog author="saschpe@suse.de" date="1323864000">- Adjust to Go weekly.2011-12-02 changes</changelog>
<changelog author="graham@andtech.eu" date="1327492800">- Update for weekly.2012-01-20
- update to go 1 import strings
- Fix panic in SetDefaults for nil sub-messages
- Fix a couple of instances where bad input could cause a panic
- GetExtension now returns a specific error when the requested extension is
  missing</changelog>
<changelog author="graham@andtech.eu" date="1328702400">- patch for encode/decode update runtime.MemStats use for weekly</changelog>
<changelog author="graham@andtech.eu" date="1329393600">- Update for weekly 2012-02-12
- Remove uses of runtime.MemStats.
- Correctly generate extension names for .proto files that don't declare a
  package.
- Better error handling for invalid input that mentions tag 0.
- Weak import/field handling.
- Fix proto.Equal to consider empty and nil repeated fields as equal.
- Avoid generating a struct that uses the same name for a field and a method.
- update to loss of unsafe.Unreflect, unsafe.New</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package path locations
- Add documentation sub-package</changelog>
<changelog author="graham@andtech.eu" date="1372507200">- Update pacakge to latest upstream mercurial version</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage
- name changed to go-protobuf
- source changed from google code to github.com/golang/protobuf
- version update to 0.0.0+git20150320.de8c523</changelog>
<changelog author="i@marguerite.su" date="1436616000">- rename golang-github-golang-protobuf
- update version 0.0.0+git20150708.ab974be
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 0.0.0+git20151207.68415e7:
  + Unexport proto.MessageSet, and remove a bunch of its support.
  + Add compressed file descriptor code generation.
  + Remove a test that has outlived its usefulness.
  + Generate correct service name for gRPC services without a package name.
  + Document parameters in README
  + Fix unmarshaling code to properly handle multiple instances of the same extension appearing in the wire format. Prior to this change, multiple custom options would result in all but the first being discarded when processed using the proto.GetExtension() facilities.
  + Regenerate protos.
  + Generate sizer functions for oneofs.
  + By popular demand, rename README to README.md and make Markdown consistent.
  + Add some more Markdown annotations.</changelog>
<changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Renamed the subpackage for the protoc-gen-go binary</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161116.8ee7999:
  * Run 'make generate-test-pbs' in proto/ to regenerate proto3.pb.go testdata
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.</changelog>
<changelog author="thipp@suse.de" date="1488369600">- Update to version 0.0.0+git20170217.69b215d:
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.
  * fix import path
- Update rpmlintrc
- Update requirements</changelog>

</package>
<package pkgid="836a8e37a199d9c989598eedd6418f4b94a35f4fb95d6c8f1c3bbe3b1991db8b" name="golang-github-gorilla-context" arch="noarch">
    <version epoch="0" ver="1.1" rel="3.1"/>

<changelog author="me@zygoon.pl" date="1468238400">- Initial version for openSUSE by Frank Schreiner</changelog>
<changelog author="thipp@suse.de" date="1484136000">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="34504d9c7a115883d054cd415a56cd1d703b470f3db7a07fb9e0dc1eede2ef87" name="golang-github-gorilla-context" arch="src">
    <version epoch="0" ver="1.1" rel="3.1"/>

<changelog author="me@zygoon.pl" date="1468238400">- Initial version for openSUSE by Frank Schreiner</changelog>
<changelog author="thipp@suse.de" date="1484136000">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="3fb5d2d7e6a444741843d9d407acade573c7ef713f68bbd232b0eb04f6985e2f" name="golang-github-gorilla-websocket" arch="noarch">
    <version epoch="0" ver="0.0.0+git20170718.a69d9f6" rel="3.1"/>

<changelog author="i@marguerite.su" date="1426852800">- initial version 0.0.0+git20150309.2dbddeb</changelog>
<changelog author="avvissu@yandex.by" date="1459252800">- Update to version 0.0.0+git20160313.e2e3d84:
  + Support proxy authorization for websocket client
  + Improve Upgrader.Upgrade doc
  + Update .travis.yml to build Go 1.6
  + Fix go vet warning
  + Run 'go vet' instead of 'go tool vet' in Travis
  + Remove Go 1.1 from Travis config
  + Add IsWebSocketUpgrade
  + Document that default ping handler can block</changelog>
<changelog author="avvissu@yandex.by" date="1468670400">- Get rid of source subpackage, no one use it</changelog>
<changelog author="thipp@suse.de" date="1484049600">- Update to version 0.0.0+git20161231.adf16b3:
  * Fix filewatch example
  * .travis.yml go vet fix.
  * Do not shallow copy crypto/tls.Config
  * Drop Go 1.3 from supported configurations
  * Fix Read() to return errUnexpectedEOF when EOF is received before all bytes in the frame have been read
  * Test truncated frames at all positions
  * Handle invalid close frames
  * Meaningful names for hub
  * Meaningful names for connection, message
  * Cleanup js in chat example
  * Reduce memory allocations in NextReader, NextWriter
  * Use single character receiver names in chat example
  * Revert "Reduce memory allocations in NextReader, NextWriter"
  * Reduce memory allocations in NextReader, NextWriter
  * Add Sec-WebSocket-Extensions header parser
  * Add Ping/Pong handler getter methods
  * Coalesce outbound messages in chat example
  * Implement RFC 6455, section 4.4
  * Add hooks to support RFC 7692 (per-message compression extension)
  * Add description to the chat example readme
  * Update hub.go
  * Improve chat example
  * Fix typos in chat example
  * Simplify dial TLS test
  * per message compression; only no context modes
  * Update README to reflect change of Go sub-repo websocket feature
  * compression: add tests, rename option
  * add cookie jar to dialer
  * Test w/ Go 1.7 on Travis
  * Improve mask performance
  * Update README.md
  * Improve chat example
  * Improve command example
  * Fix mask alignment
  * Improve write error handling
  * Add Conn.[Set]CloseHandler
  * Fix documentation
  * Improve WriteMessage fast path
  * pool flate writers
  * pool flate readers
  * Fix up README.md for command example.
  * Compression improvements
  * Add safe maskBytes
- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>
<changelog author="thipp@suse.de" date="1502712000">- Update to version 0.0.0+git20170718.a69d9f6:
  * Update compression documentation
  * benchmarks for write with compression enabled/disabled
  * Improve SetXHandler documentation
  * Change default and add API for compression level
  * Fix to compile on Go &lt; 1.6
  * Fix compile error on Go &lt; 1.6
  * Improve upgrade error messages
  * fix flate write pool size to work with best compression
  * remove test as HuffmanOnly compression level not defined in Go &lt; 1.7
  * Add code snippet for EnableCompression in doc.go, change EnableWriteCompression()'s parameter to false since enableWriteCompression is true by default.
  * Change text/template to html/template in the examples
  * Prepared Messages (#211)
  * Improve examples
  * Add Go 1.8 to Travis config
  * Update cloneTLSConfig to use Go 1.8 Config.Clone method
  * Use bufio.Reader returned from hijack in upgrade
  * Fix formatting.
  * Use bufio.Writer returned from hijack in upgrade
  * enable client compression based on response header
  * Reduce memory used in chat example
  * doc: use ":=" when check error for conn.WriteMessage
  * distinguish Upgrader.Upgrade from Upgrade
  * implementing (some of) @garyburd's suggestions
  * Misc cleanup</changelog>

</package>
<package pkgid="045a05298649973916098d15c5566ef0721e715064276c5cbdf77852723557f6" name="golang-github-gorilla-websocket" arch="src">
    <version epoch="0" ver="0.0.0+git20170718.a69d9f6" rel="3.1"/>

<changelog author="i@marguerite.su" date="1426852800">- initial version 0.0.0+git20150309.2dbddeb</changelog>
<changelog author="avvissu@yandex.by" date="1459252800">- Update to version 0.0.0+git20160313.e2e3d84:
  + Support proxy authorization for websocket client
  + Improve Upgrader.Upgrade doc
  + Update .travis.yml to build Go 1.6
  + Fix go vet warning
  + Run 'go vet' instead of 'go tool vet' in Travis
  + Remove Go 1.1 from Travis config
  + Add IsWebSocketUpgrade
  + Document that default ping handler can block</changelog>
<changelog author="avvissu@yandex.by" date="1468670400">- Get rid of source subpackage, no one use it</changelog>
<changelog author="thipp@suse.de" date="1484049600">- Update to version 0.0.0+git20161231.adf16b3:
  * Fix filewatch example
  * .travis.yml go vet fix.
  * Do not shallow copy crypto/tls.Config
  * Drop Go 1.3 from supported configurations
  * Fix Read() to return errUnexpectedEOF when EOF is received before all bytes in the frame have been read
  * Test truncated frames at all positions
  * Handle invalid close frames
  * Meaningful names for hub
  * Meaningful names for connection, message
  * Cleanup js in chat example
  * Reduce memory allocations in NextReader, NextWriter
  * Use single character receiver names in chat example
  * Revert "Reduce memory allocations in NextReader, NextWriter"
  * Reduce memory allocations in NextReader, NextWriter
  * Add Sec-WebSocket-Extensions header parser
  * Add Ping/Pong handler getter methods
  * Coalesce outbound messages in chat example
  * Implement RFC 6455, section 4.4
  * Add hooks to support RFC 7692 (per-message compression extension)
  * Add description to the chat example readme
  * Update hub.go
  * Improve chat example
  * Fix typos in chat example
  * Simplify dial TLS test
  * per message compression; only no context modes
  * Update README to reflect change of Go sub-repo websocket feature
  * compression: add tests, rename option
  * add cookie jar to dialer
  * Test w/ Go 1.7 on Travis
  * Improve mask performance
  * Update README.md
  * Improve chat example
  * Improve command example
  * Fix mask alignment
  * Improve write error handling
  * Add Conn.[Set]CloseHandler
  * Fix documentation
  * Improve WriteMessage fast path
  * pool flate writers
  * pool flate readers
  * Fix up README.md for command example.
  * Compression improvements
  * Add safe maskBytes
- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>
<changelog author="thipp@suse.de" date="1502712000">- Update to version 0.0.0+git20170718.a69d9f6:
  * Update compression documentation
  * benchmarks for write with compression enabled/disabled
  * Improve SetXHandler documentation
  * Change default and add API for compression level
  * Fix to compile on Go &lt; 1.6
  * Fix compile error on Go &lt; 1.6
  * Improve upgrade error messages
  * fix flate write pool size to work with best compression
  * remove test as HuffmanOnly compression level not defined in Go &lt; 1.7
  * Add code snippet for EnableCompression in doc.go, change EnableWriteCompression()'s parameter to false since enableWriteCompression is true by default.
  * Change text/template to html/template in the examples
  * Prepared Messages (#211)
  * Improve examples
  * Add Go 1.8 to Travis config
  * Update cloneTLSConfig to use Go 1.8 Config.Clone method
  * Use bufio.Reader returned from hijack in upgrade
  * Fix formatting.
  * Use bufio.Writer returned from hijack in upgrade
  * enable client compression based on response header
  * Reduce memory used in chat example
  * doc: use ":=" when check error for conn.WriteMessage
  * distinguish Upgrader.Upgrade from Upgrade
  * implementing (some of) @garyburd's suggestions
  * Misc cleanup</changelog>

</package>
<package pkgid="ef3af5cef19a54e0cf464978102c65ba84b37c10ccfad44ff3bde6eae8fbb2ee" name="golang-github-hoisie-httplib" arch="noarch">
    <version epoch="0" ver="0.0.0+git20120409.3cbb2f7" rel="3.1"/>

<changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
<changelog author="graham@andtech.eu" date="1309176000">- Patch to build against weekly.2011-06-23</changelog>
<changelog author="graham@andtech.eu" date="1317902400">- Synch with upstsream fixes for r60
- add rpmlintrc (ELF strip/static binary warnings)</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Patch to build against weekly.2011-12-02</changelog>
<changelog author="graham@andtech.eu" date="1328270400">- use go install instead of gomake</changelog>
<changelog author="graham@andtech.eu" date="1331121600">- update spec file to use new Go rpm macros</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update specfile to use new package locaitons
- Add documentation sub package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20120409.3cbb2f7
- drop httplib.go-weekly-fixes.patch
  * upstream contains this fix
- import changed to github.com/hoisie/httplib
- remove go_disable_brp_strip_static_archive usage</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-httplib
- use golang-packaging for packaging</changelog>
<changelog author="thipp@suse.de" date="1484308800">- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>

</package>
<package pkgid="27f148410b9fab690da8ca0d68944a2aac787501ca72e26b98244dfead31d643" name="golang-github-hoisie-httplib" arch="src">
    <version epoch="0" ver="0.0.0+git20120409.3cbb2f7" rel="3.1"/>

<changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
<changelog author="graham@andtech.eu" date="1309176000">- Patch to build against weekly.2011-06-23</changelog>
<changelog author="graham@andtech.eu" date="1317902400">- Synch with upstsream fixes for r60
- add rpmlintrc (ELF strip/static binary warnings)</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Patch to build against weekly.2011-12-02</changelog>
<changelog author="graham@andtech.eu" date="1328270400">- use go install instead of gomake</changelog>
<changelog author="graham@andtech.eu" date="1331121600">- update spec file to use new Go rpm macros</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update specfile to use new package locaitons
- Add documentation sub package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20120409.3cbb2f7
- drop httplib.go-weekly-fixes.patch
  * upstream contains this fix
- import changed to github.com/hoisie/httplib
- remove go_disable_brp_strip_static_archive usage</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-httplib
- use golang-packaging for packaging</changelog>
<changelog author="thipp@suse.de" date="1484308800">- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>

</package>
<package pkgid="d0683a28990d2505ce44ce4199020108892b67142139a997713ca34cf1a819da" name="golang-github-hoisie-mustache" arch="noarch">
    <version epoch="0" ver="0.0.0+git20160804.6375acf" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1289304000">- Initial commit</changelog>
<changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
<changelog author="saschpe@suse.de" date="1305720000">- Update to 18/05/2011 mercurial version
- Run tests</changelog>
<changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
<changelog author="saschpe@suse.de" date="1305720002">- Disable tests also for RHEL, CentOS and Mandriva</changelog>
<changelog author="saschpe@suse.de" date="1305806400">- Disable brp-strip-static-archive also on RHEL and CentOS</changelog>
<changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
<changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@gmx.de" date="1313236800">- Update to 13/08/2011 git version:
  * Updates for Go r59
  * Properly handle the case where struct pointers are nil
  * Double-bracket variables, {{var}}, are now HTML-escaping by default,
    and triple-bracket vars, {{{var}}}, are raw
  * Remove workaround for relection table bug since it's been fixed</changelog>
<changelog author="saschpe@suse.de" date="1313409600">- Update license to MIT (from BSD), fixes bnc#712213</changelog>
<changelog author="graham@andtech.eu" date="1328788800">- gofixes for latest weekly (2012-02-07)</changelog>
<changelog author="graham@andtech.eu" date="1331121600">-  update spec for new Go rpm macros</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec with new patch locations for package
- Add documentation sub package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20141121.af524a1
- import path changed to github.com/hoisie/mustache
- remove go_disable_brp_strip_static_archive usage
- drop patch: opensuse-build-fix.patch, upstream fixed</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-mustache
- use golang-packaging for packaging</changelog>
<changelog author="thipp@suse.de" date="1484308800">- Update to 0.0.0+git20160804.6375acf
- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>

</package>
<package pkgid="e6a8e865f35eaaba9ab1643e4f7e5be9b371448e54c90de5c778d4b34da360dc" name="golang-github-hoisie-mustache" arch="src">
    <version epoch="0" ver="0.0.0+git20160804.6375acf" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1289304000">- Initial commit</changelog>
<changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
<changelog author="saschpe@suse.de" date="1305720000">- Update to 18/05/2011 mercurial version
- Run tests</changelog>
<changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
<changelog author="saschpe@suse.de" date="1305720002">- Disable tests also for RHEL, CentOS and Mandriva</changelog>
<changelog author="saschpe@suse.de" date="1305806400">- Disable brp-strip-static-archive also on RHEL and CentOS</changelog>
<changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
<changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@gmx.de" date="1313236800">- Update to 13/08/2011 git version:
  * Updates for Go r59
  * Properly handle the case where struct pointers are nil
  * Double-bracket variables, {{var}}, are now HTML-escaping by default,
    and triple-bracket vars, {{{var}}}, are raw
  * Remove workaround for relection table bug since it's been fixed</changelog>
<changelog author="saschpe@suse.de" date="1313409600">- Update license to MIT (from BSD), fixes bnc#712213</changelog>
<changelog author="graham@andtech.eu" date="1328788800">- gofixes for latest weekly (2012-02-07)</changelog>
<changelog author="graham@andtech.eu" date="1331121600">-  update spec for new Go rpm macros</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec with new patch locations for package
- Add documentation sub package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20141121.af524a1
- import path changed to github.com/hoisie/mustache
- remove go_disable_brp_strip_static_archive usage
- drop patch: opensuse-build-fix.patch, upstream fixed</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-mustache
- use golang-packaging for packaging</changelog>
<changelog author="thipp@suse.de" date="1484308800">- Update to 0.0.0+git20160804.6375acf
- Refactoring based on new packaging proposal
- Add rpmlintrc</changelog>

</package>
<package pkgid="3adbe18f12b862dfbe2000d8728e151cb171a6d418378d4be9bcdfad92af5a20" name="golang-github-hoisie-web" arch="noarch">
    <version epoch="0" ver="0.0.0+git20160809.a498c02" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
<changelog author="saschpe@suse.de" date="1305720000">- Update to 18/05/2011 mercurial version
- Run tests</changelog>
<changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
<changelog author="saschpe@suse.de" date="1305720002">- Disable tests for Mandriva
- Also disable brp-strip-static-archive on RHEL and CentOS</changelog>
<changelog author="saschpe@suse.de" date="1305806400">- Simpler build</changelog>
<changelog author="saschpe@suse.de" date="1305806401">- Removed rpmlintrc, not needed anymore</changelog>
<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
<changelog author="saschpe@gmx.de" date="1306065600">- Disable tests on Mandriva</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="graham@andtech.eu" date="1309176000">- Add patch to build against weekly 2011.06.23 api changes</changelog>
<changelog author="saschpe@gmx.de" date="1313236800">- Update to 13/08/2011 git version:
  * Updates for Go r.59
- Drop web.go-fix-weekly patch, merged upstream</changelog>
<changelog author="graham@andtech.eu" date="1317902400">- Update to 15/09/2011 git version:
  * Updates for Go r.60</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Apply fixes for weekly.2011-12-02 changes</changelog>
<changelog author="graham@andtech.eu" date="1329480000">- updates for weekly.2012-02-12</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- update spec file for new pacakge location
- add documentation package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20130630.5a66d0f
- import path changed to github.com/hoisie/web
- drop weekly-build-fix.patch
  * upstream contains this fix
- remove go_disable_brp_strip_static_archive usage
- add patch web.go-go.net.patch
  * patch web.go to use golang.org/x/net instead of
    code.google.com/p/go.net</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-web
- use golang-packaging for packaging</changelog>
<changelog author="thipp@suse.de" date="1484740800">- Update to 0.0.0+git20160809.a498c02
- Refactoring based on new packaging proposal
- Remove web.go-go.net.patch</changelog>

</package>
<package pkgid="347d77e0f192a30ee2437e29f6f8267b0fdeecd06f16b4f6e379b0b2c53affc7" name="golang-github-hoisie-web" arch="src">
    <version epoch="0" ver="0.0.0+git20160809.a498c02" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
<changelog author="saschpe@suse.de" date="1305720000">- Update to 18/05/2011 mercurial version
- Run tests</changelog>
<changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
<changelog author="saschpe@suse.de" date="1305720002">- Disable tests for Mandriva
- Also disable brp-strip-static-archive on RHEL and CentOS</changelog>
<changelog author="saschpe@suse.de" date="1305806400">- Simpler build</changelog>
<changelog author="saschpe@suse.de" date="1305806401">- Removed rpmlintrc, not needed anymore</changelog>
<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
<changelog author="saschpe@gmx.de" date="1306065600">- Disable tests on Mandriva</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="graham@andtech.eu" date="1309176000">- Add patch to build against weekly 2011.06.23 api changes</changelog>
<changelog author="saschpe@gmx.de" date="1313236800">- Update to 13/08/2011 git version:
  * Updates for Go r.59
- Drop web.go-fix-weekly patch, merged upstream</changelog>
<changelog author="graham@andtech.eu" date="1317902400">- Update to 15/09/2011 git version:
  * Updates for Go r.60</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Apply fixes for weekly.2011-12-02 changes</changelog>
<changelog author="graham@andtech.eu" date="1329480000">- updates for weekly.2012-02-12</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- update spec file for new pacakge location
- add documentation package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20130630.5a66d0f
- import path changed to github.com/hoisie/web
- drop weekly-build-fix.patch
  * upstream contains this fix
- remove go_disable_brp_strip_static_archive usage
- add patch web.go-go.net.patch
  * patch web.go to use golang.org/x/net instead of
    code.google.com/p/go.net</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-hoisie-web
- use golang-packaging for packaging</changelog>
<changelog author="thipp@suse.de" date="1484740800">- Update to 0.0.0+git20160809.a498c02
- Refactoring based on new packaging proposal
- Remove web.go-go.net.patch</changelog>

</package>
<package pkgid="9a3956f3bc6a9e934ed7dd79422dfecff290126ea40b178b225ed4e1a5323a1c" name="golang-github-jpoirier-cpu" arch="src">
    <version epoch="0" ver="0.0.0+git20141224.5b5a7ea" rel="3.1"/>

<changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20120228.3403179:
  + Upstream provides no changelog
- Add _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename golang-github-jpoirier-cpu
- update version 0.0.0+git20141224.5b5a7ea
- use golang-packaging for packaging</changelog>
<changelog author="dvaleev@suse.com" date="1441195200">- set ExclusiveArch to intel architecture.
  (Requires cpuid instuction)</changelog>
<changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="1e8926938c761761c48fbad188c318b02e04b95a7be4e90fe8ef1981cdb69b33" name="golang-github-jpoirier-cpu" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20141224.5b5a7ea" rel="3.1"/>

<changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+git20120228.3403179:
  + Upstream provides no changelog
- Add _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename golang-github-jpoirier-cpu
- update version 0.0.0+git20141224.5b5a7ea
- use golang-packaging for packaging</changelog>
<changelog author="dvaleev@suse.com" date="1441195200">- set ExclusiveArch to intel architecture.
  (Requires cpuid instuction)</changelog>
<changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="f0f5d3a32553b33eceb15f23a121e16e224020e393d9abc7b4a9c933d248581f" name="golang-github-kr-pty" arch="src">
    <version epoch="0" ver="0.0.0+git20160716.ce7fa45" rel="3.1"/>

<changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150511.5cf931e</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20160716.ce7fa45:
  * Add support for Power (ppc64, ppc64le) and System z (s390x)
  * Remove ioctl_* constants on Linux
  * Remove uintptr(...)
  * Add support for ARM64
  * Prevent arm64 file to be compiled anywhere else. Fixed #32.
  * run: don't override supplied SysProcAttr
  * Don't attempt to build on windows
  * Support DragonFly BSD
  * Reformat pty_dragonfly.go file using gofmt</changelog>

</package>
<package pkgid="f786d77111c8199740d2c2d141c5401b1073c75964c73f79f8369459aad2ce49" name="golang-github-kr-pty" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20160716.ce7fa45" rel="3.1"/>

<changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150511.5cf931e</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20160716.ce7fa45:
  * Add support for Power (ppc64, ppc64le) and System z (s390x)
  * Remove ioctl_* constants on Linux
  * Remove uintptr(...)
  * Add support for ARM64
  * Prevent arm64 file to be compiled anywhere else. Fixed #32.
  * run: don't override supplied SysProcAttr
  * Don't attempt to build on windows
  * Support DragonFly BSD
  * Reformat pty_dragonfly.go file using gofmt</changelog>

</package>
<package pkgid="22ca00591b2a060cf347aec526bc7b7eaa8f12f0503a98ee4bb816bcff27d2c4" name="golang-github-kr-text" arch="src">
    <version epoch="0" ver="0.0.0+git20160504.7cafcd8" rel="3.1"/>

<changelog author="i@marguerite.su" date="1411128000">- initial version 0.0.0+git20130910.6807e77
  * upstream has no version scheme so see git commits
- don't run tests, because it'll need github.com/kr/pty
  we don't want to import new dependencies.</changelog>
<changelog author="i@marguerite.su" date="1426161600">- update version 0.0.0+git20130910.6807e77
  * no changelog</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-github-kr-text
- update version 0.0.0+git20150520.e373e13
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20160504.7cafcd8:
  * handle unicode input correctly
  * add license (from plan 9 from user space)
  * open only one file at a time
  * indent writer
  * refactor
  * properly track prefix bytes written
  * relicense whole repo under MIT
  * Run 'gofmt -w -s' on sources
  * text: fix infinite loop in Wrap
  * cmd/agg: new command</changelog>

</package>
<package pkgid="192ced1903d87e11df8c4dcb977f2cc6eacb22afbf1efa1f4759254be2b47850" name="golang-github-kr-text" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20160504.7cafcd8" rel="3.1"/>

<changelog author="i@marguerite.su" date="1411128000">- initial version 0.0.0+git20130910.6807e77
  * upstream has no version scheme so see git commits
- don't run tests, because it'll need github.com/kr/pty
  we don't want to import new dependencies.</changelog>
<changelog author="i@marguerite.su" date="1426161600">- update version 0.0.0+git20130910.6807e77
  * no changelog</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-github-kr-text
- update version 0.0.0+git20150520.e373e13
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20160504.7cafcd8:
  * handle unicode input correctly
  * add license (from plan 9 from user space)
  * open only one file at a time
  * indent writer
  * refactor
  * properly track prefix bytes written
  * relicense whole repo under MIT
  * Run 'gofmt -w -s' on sources
  * text: fix infinite loop in Wrap
  * cmd/agg: new command</changelog>

</package>
<package pkgid="de90391b8f57d3795d4db8064a67b3bdc07ed31dc4fceacba0b957fc2ac62153" name="golang-github-petar-gollrb" arch="src">
    <version epoch="0" ver="0.0.0+git20130427.53be0d3" rel="3.1"/>

<changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
<changelog author="saschpe@suse.de" date="1308916801">- Corrected package description</changelog>
<changelog author="saschpe@suse.de" date="1308916802">- Fixed URL</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Re-packaged tarball
- Adjust to Go weekly.2011-12-02 release changes</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec files for new pacakge location
- Add documentation package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426852800">- update version 0.0.0+git20130427.53be0d3
- remove go_disable_brp_strip_static_archive usage
- drop GoLLRB-weekly-fixes.patch
  * upstream contains this fix</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-petar-gollrb
- update version 0.0.0+git20130427.53be0d3
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="5d5c5e4d402bf52d38a2bc3eba7feaa7eaad502d427252c1a6a23014fb591130" name="golang-github-petar-gollrb" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20130427.53be0d3" rel="3.1"/>

<changelog author="saschpe@suse.de" date="1308916800">- Initial version</changelog>
<changelog author="saschpe@suse.de" date="1308916801">- Corrected package description</changelog>
<changelog author="saschpe@suse.de" date="1308916802">- Fixed URL</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Re-packaged tarball
- Adjust to Go weekly.2011-12-02 release changes</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec files for new pacakge location
- Add documentation package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426852800">- update version 0.0.0+git20130427.53be0d3
- remove go_disable_brp_strip_static_archive usage
- drop GoLLRB-weekly-fixes.patch
  * upstream contains this fix</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-github-petar-gollrb
- update version 0.0.0+git20130427.53be0d3
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="d306a1dd4ba46e20b824730f6b3751cfad2371f095432d2e5f89cb1fc15a2877" name="golang-github-philio-gomysql" arch="src">
    <version epoch="0" ver="0.0.0+git20110531.e621cd9" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1305979200">- Initial version</changelog>
<changelog author="saschpe@gmx.de" date="1306065600">- Disable tests for now, needs a running MySQL server</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="graham@andtech.eu" date="1324728000">- Update to work with weekly.2011.12.22
- If db isn't setup, show helpful tips and don't crash
- Remove some unnecessary type assertions
- Add UseResult method on Statement
- fixed to handle null values
- Return an error in UseResult if there's no result set</changelog>
<changelog author="saschpe@suse.de" date="1328529600">- Move to goinstall</changelog>
<changelog author="graham@andtech.eu" date="1331121600">- update specfile</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package locations
- Add documentation sub package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-github-philio-gomysql
- update version 0.0.0+git20110531.e621cd9
- use golang-packaging for packaging
- add patch: shadowed-err.patch
  * fix 'err is shadowed' error
- add patch: strconv.patch
  * fix Atoi64 and such functions
- add patch: crypto.sum.patch
  * fix crypto/sha1 Sum() to Sum(nil)</changelog>
<changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="f2e34814a35e9c1810299cb832ffc076df8f305bda2f154db228e88df43d5a97" name="golang-github-philio-gomysql" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20110531.e621cd9" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1305979200">- Initial version</changelog>
<changelog author="saschpe@gmx.de" date="1306065600">- Disable tests for now, needs a running MySQL server</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="graham@andtech.eu" date="1324728000">- Update to work with weekly.2011.12.22
- If db isn't setup, show helpful tips and don't crash
- Remove some unnecessary type assertions
- Add UseResult method on Statement
- fixed to handle null values
- Return an error in UseResult if there's no result set</changelog>
<changelog author="saschpe@suse.de" date="1328529600">- Move to goinstall</changelog>
<changelog author="graham@andtech.eu" date="1331121600">- update specfile</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package locations
- Add documentation sub package</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-github-philio-gomysql
- update version 0.0.0+git20110531.e621cd9
- use golang-packaging for packaging
- add patch: shadowed-err.patch
  * fix 'err is shadowed' error
- add patch: strconv.patch
  * fix Atoi64 and such functions
- add patch: crypto.sum.patch
  * fix crypto/sha1 Sum() to Sum(nil)</changelog>
<changelog author="tboerger@suse.com" date="1482148800">- Refactoring based on new packaging proposal</changelog>

</package>
<package pkgid="e857d39b1d4948f7958fcc442d604ae54764b621b4e51920f588c47ec055c01f" name="golang-github-russross-blackfriday" arch="src">
    <version epoch="0" ver="1.4.0+git20151230.c8875c0" rel="11.1"/>

<changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.2</changelog>
<changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-russross-blackfriday
- update version 1.2.0+git20150720.8cec3a8
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1453032000">- Update to version 1.4.0+git20151230.c8875c0:
  + remove check that brace is &gt; 0
  + Use more idiomatic form for set of strings
  + Add a few missing HTML5 block tags
  + Fix footnote following an exclamation point
  + Add String() method to reference struct
  + Fix nested footnotes
  + Fix fenced code processing inside blockquotes
  + Refix fenced code blocks w/o preceding blank lines
  + Fix escaping asterisks within emphasis
  + Fix footnote followed by a reference style link
  + Fix bug parsing emphasis
  + Add HTML_SMARTYPANTS_DASHES for togging smart dashes
  + LaTex backend: add # to list of characters requiring
    backslash-escaping
  + Don't require the input to end with a newline
  + Implement support for CDATA section
  + Convert constant variables into consts
  + Fix bug with gathering list item lines</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
<changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
<changelog author="tboerger@suse.com" date="1480680003">- Always call gobuild and goinstall</changelog>
<changelog author="tboerger@suse.com" date="1480680004">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680005">- Recursively test all packages</changelog>

</package>
<package pkgid="9f4dd03f147f944f41b61b57dda3eace8cd4a8953a67d2d0115df30cc15a51e5" name="golang-github-russross-blackfriday" arch="x86_64">
    <version epoch="0" ver="1.4.0+git20151230.c8875c0" rel="11.1"/>

<changelog author="dmacvicar@suse.de" date="1432728000">- initial package for version 1.2</changelog>
<changelog author="i@marguerite.su" date="1438084800">- rename to golang-github-russross-blackfriday
- update version 1.2.0+git20150720.8cec3a8
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1453032000">- Update to version 1.4.0+git20151230.c8875c0:
  + remove check that brace is &gt; 0
  + Use more idiomatic form for set of strings
  + Add a few missing HTML5 block tags
  + Fix footnote following an exclamation point
  + Add String() method to reference struct
  + Fix nested footnotes
  + Fix fenced code processing inside blockquotes
  + Refix fenced code blocks w/o preceding blank lines
  + Fix escaping asterisks within emphasis
  + Fix footnote followed by a reference style link
  + Fix bug parsing emphasis
  + Add HTML_SMARTYPANTS_DASHES for togging smart dashes
  + LaTex backend: add # to list of characters requiring
    backslash-escaping
  + Don't require the input to end with a newline
  + Implement support for CDATA section
  + Convert constant variables into consts
  + Fix bug with gathering list item lines</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
<changelog author="tboerger@suse.com" date="1480680002">- Requires and BuildRequires for dependencies</changelog>
<changelog author="tboerger@suse.com" date="1480680003">- Always call gobuild and goinstall</changelog>
<changelog author="tboerger@suse.com" date="1480680004">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680005">- Recursively test all packages</changelog>

</package>
<package pkgid="dabd01a5cfbd97f7d194f1d5596a934f8e808991fc987d5dd81b59c4adf2740f" name="golang-github-shurcool-sanitized_anchor_name" arch="src">
    <version epoch="0" ver="0.0.0+git20151027.10ef21a" rel="11.1"/>

<changelog author="i@marguerite.su" date="1438084800">- initial version 0.0.0+git20150514.11a20b7</changelog>
<changelog author="i@marguerite.su" date="1453032000">- Update to version 0.0.0+git20151027.10ef21a
  * pollute repository with an extraneous non-executable file
- don't build -source sub-package</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
<changelog author="tboerger@suse.com" date="1480680002">- Always call gobuild and goinstall</changelog>
<changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>

</package>
<package pkgid="e450d9c3c77c8b8b314728886cd43fd75a179c3df72e92478d71221bb01a3851" name="golang-github-shurcool-sanitized_anchor_name" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20151027.10ef21a" rel="11.1"/>

<changelog author="i@marguerite.su" date="1438084800">- initial version 0.0.0+git20150514.11a20b7</changelog>
<changelog author="i@marguerite.su" date="1453032000">- Update to version 0.0.0+git20151027.10ef21a
  * pollute repository with an extraneous non-executable file
- don't build -source sub-package</changelog>
<changelog author="jmassaguerpla@suse.com" date="1480593600">- add the generation of the source package. With go1.7 we need
  the source in order to build other golang-* which depend on this
  one.</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1480680001">- Using the new golang-packaging now</changelog>
<changelog author="tboerger@suse.com" date="1480680002">- Always call gobuild and goinstall</changelog>
<changelog author="tboerger@suse.com" date="1480680003">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680004">- Recursively test all packages</changelog>

</package>
<package pkgid="6a73ea3199890d31f5ef6b9df940a38b7169aabec423e30bb9d00b73c90726cc" name="golang-google-golangorg-appengine" arch="src">
    <version epoch="0" ver="0.0.0+git20150702.e335b53" rel="6.1"/>

<changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150702.e335b53</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
<changelog author="tboerger@suse.com" date="1480939200">- Disabled tests for now to get it reliable built</changelog>
<changelog author="tboerger@suse.com" date="1481889600">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481889601">- Update to version 0.0.0+git20150702.e335b53:
  * appengine/delay: add error return value for delay.Call
  * Fix nested application of internal call overrides.
  * appengine/demo: Update samples.
  * appengine/internal: Split VersionID on "." instead of "_".
  * appengine/internal: Add unit test for BackgroundContext.
  * demos: rename "c" context variables to "ctx"
  * Update datastore.PropertyLoadSaver doc example.
  * Convert appengine_internal error types (APIError and CallError) to their appengine/internal equivalents.
  * Add internal/blobstore proto.
  * Add blobstore package.</changelog>

</package>
<package pkgid="7454cee305719f898a1b4be75685c6a43a5314084bee2ead55b12aa834296278" name="golang-google-golangorg-appengine" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20150702.e335b53" rel="6.1"/>

<changelog author="i@marguerite.su" date="1436702400">- initial version 0.0.0+git20150702.e335b53</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1480680000">- Recursively test all packages</changelog>
<changelog author="tboerger@suse.com" date="1480939200">- Disabled tests for now to get it reliable built</changelog>
<changelog author="tboerger@suse.com" date="1481889600">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481889601">- Update to version 0.0.0+git20150702.e335b53:
  * appengine/delay: add error return value for delay.Call
  * Fix nested application of internal call overrides.
  * appengine/demo: Update samples.
  * appengine/internal: Split VersionID on "." instead of "_".
  * appengine/internal: Add unit test for BackgroundContext.
  * demos: rename "c" context variables to "ctx"
  * Update datastore.PropertyLoadSaver doc example.
  * Convert appengine_internal error types (APIError and CallError) to their appengine/internal equivalents.
  * Add internal/blobstore proto.
  * Add blobstore package.</changelog>

</package>
<package pkgid="91166382c0de161b3db707ed303eddd479a1dc7d34bbab32941ee5a96e4b8d49" name="golang-googlecode-couch-go" arch="src">
    <version epoch="0" ver="0.0.0+hg20120329.80177d89e264" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1305979200">- Initial version</changelog>
<changelog author="saschpe@gmx.de" date="1306065600">- Require couchdb
- Disable tests, they need a running CouchDB</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="graham@andtech.eu" date="1317988800">- update API to Go r60 (via patch, changes submitted upstream)</changelog>
<changelog author="graham@andtech.eu" date="1372507200">- Update package to latest mercurial</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20120329.56.80177d89e264:
  + Upstream provides no changelog
- Use _service file
- Drop rpmlintrc, both issues are obvious Go issues</changelog>
<changelog author="speilicke@suse.com" date="1379419200">- Only recommend couchdb to not depend on having it on the same
  machine</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-googlecode-couch-go
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
<changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>

</package>
<package pkgid="7d8251640df52e3916872f748137b223fdcf179ba5da6fb507bfeca68817672e" name="golang-googlecode-couch-go" arch="x86_64">
    <version epoch="0" ver="0.0.0+hg20120329.80177d89e264" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1305979200">- Initial version</changelog>
<changelog author="saschpe@gmx.de" date="1306065600">- Require couchdb
- Disable tests, they need a running CouchDB</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="graham@andtech.eu" date="1317988800">- update API to Go r60 (via patch, changes submitted upstream)</changelog>
<changelog author="graham@andtech.eu" date="1372507200">- Update package to latest mercurial</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20120329.56.80177d89e264:
  + Upstream provides no changelog
- Use _service file
- Drop rpmlintrc, both issues are obvious Go issues</changelog>
<changelog author="speilicke@suse.com" date="1379419200">- Only recommend couchdb to not depend on having it on the same
  machine</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-googlecode-couch-go
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
<changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>

</package>
<package pkgid="d9b3c933c36614c65da6ef5c0f95f83b9714c304bd451072cb388c793193566e" name="golang-googlecode-freetype-go" arch="noarch">
    <version epoch="0" ver="0.0.0+git20170609.e2365df" rel="3.1"/>

<changelog author="speilicke@novell.com" date="1289304000">- Initial commit</changelog>
<changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
<changelog author="saschpe@suse.de" date="1305806400">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, RHEL and CentOS
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter
- Added include path patch</changelog>
<changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
<changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@suse.de" date="1307707200">- Update to 10/06/2011 mercurial version
  * Rename exp/draw to image/draw
  * Follow go stdlib changes for os.Open and Stderr/Println
- Rebased include-fix patch to upstream changes</changelog>
<changelog author="graham@andtech.eu" date="1317988800">- Update to HG 18.07.2011 (for Go r60)
- image.Pix changes</changelog>
<changelog author="graham@andtech.eu" date="1318248000">- Fudge a $GOROOT build env so freetype sub-package types have a
  good looking signature for packaging. This is a messy solution
  and needs tidied up into real packages.</changelog>
<changelog author="graham@andtech.eu" date="1324641600">- Update to 23.12.2011 mercurial</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{exclusivearch} macro
- Install binaries with "go-" prefix</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20130813.72.38e23dc4a845:
  + Upstream provides no changelog
- Add _service file</changelog>
<changelog author="speilicke@suse.com" date="1379592000">- Fix license: FTL or GPL-2.0+</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-googlecode-freetype-go
- update version 0.0.0+hg20150309.128.46c3056cafbb
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
<changelog author="thipp@suse.de" date="1488542400">- Update to version 0.0.0+git20161208.d9be45a
- Refactoring based on new packaging proposal
- Rename %{name}-rpmlintrc to rpmlintrc
- Use git instead of mercurial
- Remove example binaries from package</changelog>
<changelog author="thipp@suse.de" date="1502712000">- Update to version 0.0.0+git20170609.e2365df:
  * Add an example/capjoin program.
  * Add a face.Metrics method, and parse hhea ascent and descent.
  * Use an "example" build tag instead of "ignore".
  * Loosen the SLOOP (Set LOOP) opcode precondition.
  * Add the genbasicfont program.
  * Don't crash when a glyph has no contours.
  * Support TTC v2
  * Support Unicode Full Repertoire cmap tables.
  * Allow multiple kern subtables.
  * Fix a comment typo.</changelog>

</package>
<package pkgid="f275c80511f92cf0cf961d0c9d90330b7e9e1a950e7aa13072d0fea3d4c37cb8" name="golang-googlecode-freetype-go" arch="src">
    <version epoch="0" ver="0.0.0+git20170609.e2365df" rel="3.1"/>

<changelog author="speilicke@novell.com" date="1289304000">- Initial commit</changelog>
<changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
<changelog author="saschpe@suse.de" date="1305806400">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, RHEL and CentOS
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter
- Added include path patch</changelog>
<changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
<changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@suse.de" date="1307707200">- Update to 10/06/2011 mercurial version
  * Rename exp/draw to image/draw
  * Follow go stdlib changes for os.Open and Stderr/Println
- Rebased include-fix patch to upstream changes</changelog>
<changelog author="graham@andtech.eu" date="1317988800">- Update to HG 18.07.2011 (for Go r60)
- image.Pix changes</changelog>
<changelog author="graham@andtech.eu" date="1318248000">- Fudge a $GOROOT build env so freetype sub-package types have a
  good looking signature for packaging. This is a messy solution
  and needs tidied up into real packages.</changelog>
<changelog author="graham@andtech.eu" date="1324641600">- Update to 23.12.2011 mercurial</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{exclusivearch} macro
- Install binaries with "go-" prefix</changelog>
<changelog author="speilicke@suse.com" date="1376395201">- Update to version 0.0.0+hg20130813.72.38e23dc4a845:
  + Upstream provides no changelog
- Add _service file</changelog>
<changelog author="speilicke@suse.com" date="1379592000">- Fix license: FTL or GPL-2.0+</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-googlecode-freetype-go
- update version 0.0.0+hg20150309.128.46c3056cafbb
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
<changelog author="thipp@suse.de" date="1488542400">- Update to version 0.0.0+git20161208.d9be45a
- Refactoring based on new packaging proposal
- Rename %{name}-rpmlintrc to rpmlintrc
- Use git instead of mercurial
- Remove example binaries from package</changelog>
<changelog author="thipp@suse.de" date="1502712000">- Update to version 0.0.0+git20170609.e2365df:
  * Add an example/capjoin program.
  * Add a face.Metrics method, and parse hhea ascent and descent.
  * Use an "example" build tag instead of "ignore".
  * Loosen the SLOOP (Set LOOP) opcode precondition.
  * Add the genbasicfont program.
  * Don't crash when a glyph has no contours.
  * Support TTC v2
  * Support Unicode Full Repertoire cmap tables.
  * Allow multiple kern subtables.
  * Fix a comment typo.</changelog>

</package>
<package pkgid="fd89f6dc8604fe9736fd1b53f2e1e4a00f07f417205375c8ea428fff063f91bb" name="golang-googlecode-goconf" arch="src">
    <version epoch="0" ver="0.0.0+hg20120508.a4db5c465ed1" rel="3.1"/>

<changelog author="speilicke@novell.com" date="1289304000">- Initial commit</changelog>
<changelog author="graham@andtech.eu" date="1296561600">- Patch get.go to use float64 (float type is removed)</changelog>
<changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
<changelog author="saschpe@suse.de" date="1305720000">- Update to 2011/05/18 mercurial version</changelog>
<changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
<changelog author="saschpe@suse.de" date="1305806400">- Disable brp-strip-static-archive also on RHEL and CentOS</changelog>
<changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
<changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@suse.de" date="1305892801">- Remove non-working tests</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@suse.de" date="1308916800">- Fix upstream URL</changelog>
<changelog author="graham@andtech.eu" date="1330948800">- update for weekly.2012-03-04</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Update to version 0.0.0+hg20120508.16.a4db5c465ed1
- Add and use _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-googlecode-goconf
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
<changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>

</package>
<package pkgid="614366dcdb7594e857b537436d1e2f8546847ea28afdf0b42e7aa6c6015fa340" name="golang-googlecode-goconf" arch="x86_64">
    <version epoch="0" ver="0.0.0+hg20120508.a4db5c465ed1" rel="3.1"/>

<changelog author="speilicke@novell.com" date="1289304000">- Initial commit</changelog>
<changelog author="graham@andtech.eu" date="1296561600">- Patch get.go to use float64 (float type is removed)</changelog>
<changelog author="saschpe@suse.de" date="1300708800">- Removed authors from description
- Removed pkg_version macro, use %%{version} directly</changelog>
<changelog author="saschpe@suse.de" date="1305720000">- Update to 2011/05/18 mercurial version</changelog>
<changelog author="saschpe@suse.de" date="1305720001">- Don't require 'go'
- Disable brp-strip-static-archive on Fedora, breaks build
- Provide devel and devel-static packages
- Remove devel-file-in-non-devel-package rpmlint filter</changelog>
<changelog author="saschpe@suse.de" date="1305806400">- Disable brp-strip-static-archive also on RHEL and CentOS</changelog>
<changelog author="saschpe@suse.de" date="1305806401">- Simpler build</changelog>
<changelog author="saschpe@suse.de" date="1305806402">- Remove rpmlintrc, not needed anymore</changelog>
<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@suse.de" date="1305892801">- Remove non-working tests</changelog>
<changelog author="saschpe@suse.de" date="1307534400">- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@suse.de" date="1308916800">- Fix upstream URL</changelog>
<changelog author="graham@andtech.eu" date="1330948800">- update for weekly.2012-03-04</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Update to version 0.0.0+hg20120508.16.a4db5c465ed1
- Add and use _service file</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-googlecode-goconf
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
<changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>

</package>
<package pkgid="3030b726d9b522a0a607a8dc2d4e1b8bd0a92df967b79ff262cf7ceb2e297fe5" name="golang-googlecode-mango-doc" arch="src">
    <version epoch="0" ver="0.0.0+hg20141127.23dea2f59f66" rel="2.1"/>

<changelog author="tboerger@suse.com" date="1465214400">- Initial packaging</changelog>
<changelog author="tboerger@suse.com" date="1465214401">- Also provide mango-doc</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
<changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
<changelog author="thipp@suse.de" date="1489665600">- Rename rpmlintrc to golang-googlecode-mango-doc-rpmlintrc</changelog>

</package>
<package pkgid="a806a8bc87fe14ef3ecdebfa3528ae477117d2c004a2136dec92006ee02517eb" name="golang-googlecode-mango-doc" arch="x86_64">
    <version epoch="0" ver="0.0.0+hg20141127.23dea2f59f66" rel="2.1"/>

<changelog author="tboerger@suse.com" date="1465214400">- Initial packaging</changelog>
<changelog author="tboerger@suse.com" date="1465214401">- Also provide mango-doc</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
<changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
<changelog author="thipp@suse.de" date="1489665600">- Rename rpmlintrc to golang-googlecode-mango-doc-rpmlintrc</changelog>

</package>
<package pkgid="4129e557e037f3da96569508a27006b41cf34157beca085a03b7f281d8768b54" name="golang-gopkgin-check" arch="src">
    <version epoch="0" ver="0.0.0+git20161122.aa8c435" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1308052800">- Initial version</changelog>
<changelog author="saschpe@gmx.de" date="1308052801">- Disabled testsuite on Mandriva to avoid build error</changelog>
<changelog author="graham@andtech.eu" date="1309003200">- Update to latest bzr (fixes breakage due to GOTO lang change)</changelog>
<changelog author="graham@andtech.eu" date="1317816000">- Update to latest bzr, builds against go release r.60</changelog>
<changelog author="graham@andtech.eu" date="1317988800">- correct license to BSD3c</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Update to bzr 13/12/2011 version:
  * Port to weekly.2011-12-02
  * *C now has an Output method matching the log.Logger interface.</changelog>
<changelog author="graham@andtech.eu" date="1330948800">- Update to weekly.2012-03-04
- Added HasLen checker
- Renamed Bug to Commentf.
- Added DeepEquals and Equals now matches the behavior of ==</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec for new package locations
- Add documentation sub package</changelog>
<changelog author="graham@andtech.eu" date="1344945600">- Update to latest r2012.07.24
- support for std libs testing package benchmarking</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="i@marguerite.su" date="1410091200">- update version 2014.08.27 from github
  * see upstream git commits</changelog>
<changelog author="i@marguerite.su" date="1426939200">- rename to go-gocheck
- remove go_disable_brp_strip_static_archive usage
- update version 0.0.0+git20140401.1632973</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-gopkgin-check
- update version 0.0.0+git20150626.b3d3430
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161122.aa8c435:
  * Replaced path.Join with filepath.Join in newPath() in order to facilitate proper MkDir() on all OS-es
  * Fixed misleading tempdir removal message under Windows.
  * Include the whole Go license on benchmark.go.
  * check: fix data race on C.status
  * Fix panic tracebacks with Go tip.
  * Moved the reporter functions to a separate file.
  * Do not export reporterS.
  * Get the filename from runtime.
  * Fix tests and some golint issues (#85)
  * Fix typo: conjuction (#83)</changelog>

</package>
<package pkgid="7b20f34a78191857add3be9ee78bfe5f6bf6d3ba770a39340fb8ea6ba701e407" name="golang-gopkgin-check" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20161122.aa8c435" rel="3.1"/>

<changelog author="saschpe@gmx.de" date="1308052800">- Initial version</changelog>
<changelog author="saschpe@gmx.de" date="1308052801">- Disabled testsuite on Mandriva to avoid build error</changelog>
<changelog author="graham@andtech.eu" date="1309003200">- Update to latest bzr (fixes breakage due to GOTO lang change)</changelog>
<changelog author="graham@andtech.eu" date="1317816000">- Update to latest bzr, builds against go release r.60</changelog>
<changelog author="graham@andtech.eu" date="1317988800">- correct license to BSD3c</changelog>
<changelog author="saschpe@suse.de" date="1323777600">- Update to bzr 13/12/2011 version:
  * Port to weekly.2011-12-02
  * *C now has an Output method matching the log.Logger interface.</changelog>
<changelog author="graham@andtech.eu" date="1330948800">- Update to weekly.2012-03-04
- Added HasLen checker
- Renamed Bug to Commentf.
- Added DeepEquals and Equals now matches the behavior of ==</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec for new package locations
- Add documentation sub package</changelog>
<changelog author="graham@andtech.eu" date="1344945600">- Update to latest r2012.07.24
- support for std libs testing package benchmarking</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="speilicke@suse.com" date="1376395200">- Use %{go_exclusivearch} macro</changelog>
<changelog author="i@marguerite.su" date="1410091200">- update version 2014.08.27 from github
  * see upstream git commits</changelog>
<changelog author="i@marguerite.su" date="1426939200">- rename to go-gocheck
- remove go_disable_brp_strip_static_archive usage
- update version 0.0.0+git20140401.1632973</changelog>
<changelog author="i@marguerite.su" date="1437825600">- rename to golang-gopkgin-check
- update version 0.0.0+git20150626.b3d3430
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Refactoring based on new packaging proposal</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161122.aa8c435:
  * Replaced path.Join with filepath.Join in newPath() in order to facilitate proper MkDir() on all OS-es
  * Fixed misleading tempdir removal message under Windows.
  * Include the whole Go license on benchmark.go.
  * check: fix data race on C.status
  * Fix panic tracebacks with Go tip.
  * Moved the reporter functions to a separate file.
  * Do not export reporterS.
  * Get the filename from runtime.
  * Fix tests and some golint issues (#85)
  * Fix typo: conjuction (#83)</changelog>

</package>
<package pkgid="dcff5533a5eb306f7151f3dbfb9fd360b320e5ea39149ad7bcc3221419a1ca6c" name="golang-org-x-crypto" arch="src">
    <version epoch="0" ver="1.5.2+git20161212.9a6f0a0" rel="2.1"/>

<changelog author="matwey.kornilov@gmail.com" date="1425038400">- Initial version</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20150318.b7d6bf2
- disable gotest for sle</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-crypto
- update version 0.0.0+git20150711.f6a608d
- use golang-packaging for packaging</changelog>
<changelog author="dvaleev@suse.com" date="1441368000">- Fix flaky TestHostKeyCert test (crypto-fix-ssh.patch) (boo#944474)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 1.5.2+git20151215.f18420e:
  + x/crypto/pkcs12: deal with short byte array in PBKDF
  + otr: smpFailureError processing tlvTypeSMP3 prevents sending tlvTypeSMP4
  + x/crypto/openpgp/packet: fix message for errors resulting from an unknown cipher.
  + crypto/ssh: fix typo in error string.
  + x/crypto/otr: clear key slots when handshaking.
  + x/crypto/otr: make errors fatal.
  + x/crypto/otr: update libotr test code for version 4.
  + x/crypto/otr: reformat the libotr test harness with clang-format.
  + x/crypto/ssh: run go fmt
  + x/crypto/ssh/agent: Fix keyring removing the wrong key(s)
- Removed crypto-fix-ssh.patch: has been upstreamed</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Reformatted service file properly</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161212.9a6f0a0:
  * blake2s: fix build constraints
  * chacha20poly1305: fix build constraints
  * x/crypto/ssh: Add FingerprintLegacyMD5 and FingerprintSHA256 methods
  * acme/autocert: remove trailing dot from domain before requesting cert
  * x/crypto/blake2b: SSE4.1 is bit 19, not 15.
  * chacha20poly1305: make polyHashADInternal private
  * bn256: fix equations in comments
  * x/crypto/ssh/terminal: replace \n with \r\n.
  * x/crypto/ocsp: Don't hard-code OCSP response hash function
  * blake2b: fix constant size</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Fix requirements</changelog>

</package>
<package pkgid="ac5d14c5f4d29ffd8cf65b77816a758481a0dc0dd4bfd9ca26e267eafc157e8a" name="golang-org-x-crypto" arch="x86_64">
    <version epoch="0" ver="1.5.2+git20161212.9a6f0a0" rel="2.1"/>

<changelog author="matwey.kornilov@gmail.com" date="1425038400">- Initial version</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 0.0.0+git20150318.b7d6bf2
- disable gotest for sle</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-crypto
- update version 0.0.0+git20150711.f6a608d
- use golang-packaging for packaging</changelog>
<changelog author="dvaleev@suse.com" date="1441368000">- Fix flaky TestHostKeyCert test (crypto-fix-ssh.patch) (boo#944474)</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 1.5.2+git20151215.f18420e:
  + x/crypto/pkcs12: deal with short byte array in PBKDF
  + otr: smpFailureError processing tlvTypeSMP3 prevents sending tlvTypeSMP4
  + x/crypto/openpgp/packet: fix message for errors resulting from an unknown cipher.
  + crypto/ssh: fix typo in error string.
  + x/crypto/otr: clear key slots when handshaking.
  + x/crypto/otr: make errors fatal.
  + x/crypto/otr: update libotr test code for version 4.
  + x/crypto/otr: reformat the libotr test harness with clang-format.
  + x/crypto/ssh: run go fmt
  + x/crypto/ssh/agent: Fix keyring removing the wrong key(s)
- Removed crypto-fix-ssh.patch: has been upstreamed</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Reformatted service file properly</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161212.9a6f0a0:
  * blake2s: fix build constraints
  * chacha20poly1305: fix build constraints
  * x/crypto/ssh: Add FingerprintLegacyMD5 and FingerprintSHA256 methods
  * acme/autocert: remove trailing dot from domain before requesting cert
  * x/crypto/blake2b: SSE4.1 is bit 19, not 15.
  * chacha20poly1305: make polyHashADInternal private
  * bn256: fix equations in comments
  * x/crypto/ssh/terminal: replace \n with \r\n.
  * x/crypto/ocsp: Don't hard-code OCSP response hash function
  * blake2b: fix constant size</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Fix requirements</changelog>

</package>
<package pkgid="4954d033dd364e9c529f43323da9eff7aa5b38e6bf916c9df632ce1001268905" name="golang-org-x-debug" arch="src">
    <version epoch="0" ver="0.0.0+git20160621.fb50892" rel="2.1"/>

<changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>

</package>
<package pkgid="185a4817a945dd27a3ee91d5e91410afa62f5ff21fc9acfff26f47c1e6f90d97" name="golang-org-x-debug" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20160621.fb50892" rel="2.1"/>

<changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>

</package>
<package pkgid="a9949db61b63a58d61eba5c4cef774d9643fea631fc7eaec693ff1579bf9b1d9" name="golang-org-x-debug-debugproxy" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20160621.fb50892" rel="2.1"/>

<changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>

</package>
<package pkgid="ac737ea953fb8dba4a098c13ab309407a0ab6a44182cf30637f05d9702ddc41f" name="golang-org-x-image" arch="src">
    <version epoch="0" ver="1.0.3+git20161212.88b0132" rel="3.1"/>

<changelog author="graham@andtech.eu" date="1330603200">- initial package</changelog>
<changelog author="graham@andtech.eu" date="1331121600">- updade spec for new rpm macros</changelog>
<changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13
- go.image/tiff: optimize reading uncompressed files from a tiff
  buffer.
- go.image/tiff: simplify encoding.</changelog>
<changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- tiff: new Options parameter for Encode.
- tiff: support writing files with differencing predictor.</changelog>
<changelog author="i@marguerite.su" date="1427025600">- update version 1.0.3+git20150321.7eedc60
- source URL changed to github.com/golang/image
- import path changed to golang.org/x/image
- clean specfile</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-image
- update version 1.0.3+git20150702.92cae9f
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1441886400">- Update to version 1.0.3+git20150901.b3d8467:
  + shiny/screen: new package.
  + shiny/font: new package for drawing text on an image.
  + colornames: new package for named colors
  + math/fixed: add I and P helper functions.
  + shiny/font/plan9font: implement ParseFont.
  + shiny/font: add Hinting, Stretch, Style and Weight option types.
  + math/fixed: add rectangle types and the R function.
  + shiny/font: add per-glyph metrics.
  + shiny/font: have Face.Glyph return an advance width, not a new dot.
  + shiny/font/plan9font: add an example test.
  + font: fix up some old x/exp/shiny references.
  + draw: tweak the YCbCr to RGBA conversion formula.
  + image/draw: have Transform take a f64.Aff3 instead of a *f64.Aff3.
  + vp8: split expression to placate 386 compiler
  + draw: skip TestFastPaths for Go 1.4.
  + draw: have Scale and Transform recognize straight copies.
  + math/fixed: new package.
  + draw: have Scale and Transform recognize straight copies.
  + math/fixed: add Point methods (Add, Sub, Mul, Div).</changelog>
<changelog author="toddrme2178@gmail.com" date="1467374400">- Make Group tag consistent with other golang packages.</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.0.3+git20161212.88b0132:
  * vector: make args float32 pairs instead of f32.Vec2.
  * vector: measure the fixed point rasterizer's accuracy.
  * font/gofont: new packages for the Go font family.
  * font/gofont: add style descriptions to the generated package docs.
  * font/sfnt: new package for parsing SFNT fonts.
  * font/sfnt: parse the CFF table.
  * font/sfnt: parse CFF 2-byte operators and real numbers.
  * font: add some comments for the XxxBytes methods.
  * font/sfnt: parse Type 2 Charstrings.
  * font/sfnt: implement rrcurveto.</changelog>

</package>
<package pkgid="d2a84ad312c04014994b4f5fd5ec0b598281fcb89a395798aa60c8da9378ae39" name="golang-org-x-image" arch="x86_64">
    <version epoch="0" ver="1.0.3+git20161212.88b0132" rel="3.1"/>

<changelog author="graham@andtech.eu" date="1330603200">- initial package</changelog>
<changelog author="graham@andtech.eu" date="1331121600">- updade spec for new rpm macros</changelog>
<changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13
- go.image/tiff: optimize reading uncompressed files from a tiff
  buffer.
- go.image/tiff: simplify encoding.</changelog>
<changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- tiff: new Options parameter for Encode.
- tiff: support writing files with differencing predictor.</changelog>
<changelog author="i@marguerite.su" date="1427025600">- update version 1.0.3+git20150321.7eedc60
- source URL changed to github.com/golang/image
- import path changed to golang.org/x/image
- clean specfile</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-image
- update version 1.0.3+git20150702.92cae9f
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1441886400">- Update to version 1.0.3+git20150901.b3d8467:
  + shiny/screen: new package.
  + shiny/font: new package for drawing text on an image.
  + colornames: new package for named colors
  + math/fixed: add I and P helper functions.
  + shiny/font/plan9font: implement ParseFont.
  + shiny/font: add Hinting, Stretch, Style and Weight option types.
  + math/fixed: add rectangle types and the R function.
  + shiny/font: add per-glyph metrics.
  + shiny/font: have Face.Glyph return an advance width, not a new dot.
  + shiny/font/plan9font: add an example test.
  + font: fix up some old x/exp/shiny references.
  + draw: tweak the YCbCr to RGBA conversion formula.
  + image/draw: have Transform take a f64.Aff3 instead of a *f64.Aff3.
  + vp8: split expression to placate 386 compiler
  + draw: skip TestFastPaths for Go 1.4.
  + draw: have Scale and Transform recognize straight copies.
  + math/fixed: new package.
  + draw: have Scale and Transform recognize straight copies.
  + math/fixed: add Point methods (Add, Sub, Mul, Div).</changelog>
<changelog author="toddrme2178@gmail.com" date="1467374400">- Make Group tag consistent with other golang packages.</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.0.3+git20161212.88b0132:
  * vector: make args float32 pairs instead of f32.Vec2.
  * vector: measure the fixed point rasterizer's accuracy.
  * font/gofont: new packages for the Go font family.
  * font/gofont: add style descriptions to the generated package docs.
  * font/sfnt: new package for parsing SFNT fonts.
  * font/sfnt: parse the CFF table.
  * font/sfnt: parse CFF 2-byte operators and real numbers.
  * font: add some comments for the XxxBytes methods.
  * font/sfnt: parse Type 2 Charstrings.
  * font/sfnt: implement rrcurveto.</changelog>

</package>
<package pkgid="bdb3653fb40ba5155b67416f7cdcf55ea9bacde4b138d4496c9a542d92c5e937" name="golang-org-x-net" arch="src">
    <version epoch="0" ver="1.5.2+git20161213.cfae461" rel="11.1"/>

<changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13</changelog>
<changelog author="graham@andtech.eu" date="1336392000">- LICENSE now in tarball, add AUTHORS, README etc to docs</changelog>
<changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- Update websockets to hybi17 &amp; hixie76/hybi00
- New ipv4 package</changelog>
<changelog author="graham@andtech.eu" date="1362916800">- publicsuffix: rename exp/cookiejar as net/http/cookiejar.
- publicsuffix: build the full table from publicsuffix.org's
- html: don't use Go tip io.ByteWriter
- spdy: make use of MaxDataLength
- ipv4: fix sprious lookahead on IPConn-based PacketConn
- ipv4: simplify, drop unnecessary parentheses and slice indices
- html: move exp/html and exp/html/atom here to the go.net
- proxy: make proxy tests able to run with host protocol stack
- proxy: make use of constants
- proxy: fix typo
- spdy: update SPDY/2 to SPDY/3
- proxy: fix desired destination address in SOCKS5 CONNECT
- publicsuffix: add an EffectiveTLDPlus1 function.
- publicsuffix: distinguish ICANN domains from private domains;
- publicsuffix: tighten the encoding from 8 bytes per node to 4.
- ipv4: update doc
- ipv4: change I/O method signatures on PacketConn and RawConn
- publicsuffix: use IDNA.
- idna: new package.
- publicsuffix: new package.
- ipv4: remove arguments from example functions
- proxy: fix IP address determination
- go.net: gofmt -w -s
- ipv4: make supportsNewIPInput const
- spdy: disallow stream id 0
- net/spdy: handle corrupted zlib data on read
- ipv4: make variable names clear
- go.net: apply gofmt -w -s
- websocket: Use protocol parameter in websocket.Dial.
- ipv4: make RFC numbers in doc clickable on GoPkgDoc
- spdy: fix typo
- spdy: add package description</changelog>
<changelog author="graham@andtech.eu" date="1368532800">- go.net/ipv4: use testing.Skip{,f}
- go.net/websocket: update package comment to refer RFC 6455
- go.net/websocket: optimize frame masking code
- go.net/websocket: allow server configurable
- publicsuffix: update table to latest list from publicsuffix.org
- go.net/websocket: fix handshake error.</changelog>
<changelog author="speilicke@suse.com" date="1382097600">- Renamed to go-go.net (from go-net)
- Add _service file</changelog>
<changelog author="speilicke@suse.com" date="1382097601">- Update to version 1.1.2+hg20131014.85.355ff0aa1b2e:
  + No changelog</changelog>
<changelog author="speilicke@suse.com" date="1382097602">- Set version to 1.2rc2 after go update</changelog>
<changelog author="i@marguerite.su" date="1425816000">- update version 1.4.2+git20150304.6dc0abc
- package name changed: go-net</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1436270400">- rename to golang-org-x-net
- update version 1.4.2+git20150629.d9558e5
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151224.5d0a0f8:
  + http2: add server-side trailer support
  + http2: add support for Transport reading trailers from the server
  + html/charset: use x/text/encoding/htmlindex
  + html/charset: handle unsupported code points for encoding
  + http2: send client trailers
  + http2: make Transport's Response.Body.Close not wait for buffered data
  + html/charset: verify correct UTF-8 behavior
  + http2: reset DebugGoroutines after testing it
  + http2: fix readFrames goroutine spin between ConnectionError and conn close
  + http2: fix typo and simplify truncation of text in test</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451390400">- Update to version 1.5.2+git20151229.0cb26f7:
  + http2: move HEADERS/CONTINUATION order checking into Framer</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1471435201">- Create a separate subpackage for h2i</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161213.cfae461:
  * ipv4: add support for linux/{mips,mipsle}
  * ipv6: add support for linux/{mips,mipsle}
  * nettest: update comment on MakePipe
  * ipv4: add missing IP_HDRINCL option on Windows
  * ipv4: deflake TestConnUnicastSocketOptions on Windows
  * http2: log Framer reads and writes when a server test fails
  * http2: allow Transport to connect to https://[v6literal]/ without port
  * http2: don't flush a stream's write queue in sc.resetStream
  * http2: speed up TestTransportFlowControl in short mode
  * context: deflake tests under Go 1.6</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update requirements</changelog>

</package>
<package pkgid="c0b78d48cf399e751e11b8a68f73f2fe42b70a8f4eccfee9dfe5db9defbdc527" name="golang-org-x-net" arch="x86_64">
    <version epoch="0" ver="1.5.2+git20161213.cfae461" rel="11.1"/>

<changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13</changelog>
<changelog author="graham@andtech.eu" date="1336392000">- LICENSE now in tarball, add AUTHORS, README etc to docs</changelog>
<changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- Update websockets to hybi17 &amp; hixie76/hybi00
- New ipv4 package</changelog>
<changelog author="graham@andtech.eu" date="1362916800">- publicsuffix: rename exp/cookiejar as net/http/cookiejar.
- publicsuffix: build the full table from publicsuffix.org's
- html: don't use Go tip io.ByteWriter
- spdy: make use of MaxDataLength
- ipv4: fix sprious lookahead on IPConn-based PacketConn
- ipv4: simplify, drop unnecessary parentheses and slice indices
- html: move exp/html and exp/html/atom here to the go.net
- proxy: make proxy tests able to run with host protocol stack
- proxy: make use of constants
- proxy: fix typo
- spdy: update SPDY/2 to SPDY/3
- proxy: fix desired destination address in SOCKS5 CONNECT
- publicsuffix: add an EffectiveTLDPlus1 function.
- publicsuffix: distinguish ICANN domains from private domains;
- publicsuffix: tighten the encoding from 8 bytes per node to 4.
- ipv4: update doc
- ipv4: change I/O method signatures on PacketConn and RawConn
- publicsuffix: use IDNA.
- idna: new package.
- publicsuffix: new package.
- ipv4: remove arguments from example functions
- proxy: fix IP address determination
- go.net: gofmt -w -s
- ipv4: make supportsNewIPInput const
- spdy: disallow stream id 0
- net/spdy: handle corrupted zlib data on read
- ipv4: make variable names clear
- go.net: apply gofmt -w -s
- websocket: Use protocol parameter in websocket.Dial.
- ipv4: make RFC numbers in doc clickable on GoPkgDoc
- spdy: fix typo
- spdy: add package description</changelog>
<changelog author="graham@andtech.eu" date="1368532800">- go.net/ipv4: use testing.Skip{,f}
- go.net/websocket: update package comment to refer RFC 6455
- go.net/websocket: optimize frame masking code
- go.net/websocket: allow server configurable
- publicsuffix: update table to latest list from publicsuffix.org
- go.net/websocket: fix handshake error.</changelog>
<changelog author="speilicke@suse.com" date="1382097600">- Renamed to go-go.net (from go-net)
- Add _service file</changelog>
<changelog author="speilicke@suse.com" date="1382097601">- Update to version 1.1.2+hg20131014.85.355ff0aa1b2e:
  + No changelog</changelog>
<changelog author="speilicke@suse.com" date="1382097602">- Set version to 1.2rc2 after go update</changelog>
<changelog author="i@marguerite.su" date="1425816000">- update version 1.4.2+git20150304.6dc0abc
- package name changed: go-net</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1436270400">- rename to golang-org-x-net
- update version 1.4.2+git20150629.d9558e5
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151224.5d0a0f8:
  + http2: add server-side trailer support
  + http2: add support for Transport reading trailers from the server
  + html/charset: use x/text/encoding/htmlindex
  + html/charset: handle unsupported code points for encoding
  + http2: send client trailers
  + http2: make Transport's Response.Body.Close not wait for buffered data
  + html/charset: verify correct UTF-8 behavior
  + http2: reset DebugGoroutines after testing it
  + http2: fix readFrames goroutine spin between ConnectionError and conn close
  + http2: fix typo and simplify truncation of text in test</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451390400">- Update to version 1.5.2+git20151229.0cb26f7:
  + http2: move HEADERS/CONTINUATION order checking into Framer</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1471435201">- Create a separate subpackage for h2i</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161213.cfae461:
  * ipv4: add support for linux/{mips,mipsle}
  * ipv6: add support for linux/{mips,mipsle}
  * nettest: update comment on MakePipe
  * ipv4: add missing IP_HDRINCL option on Windows
  * ipv4: deflake TestConnUnicastSocketOptions on Windows
  * http2: log Framer reads and writes when a server test fails
  * http2: allow Transport to connect to https://[v6literal]/ without port
  * http2: don't flush a stream's write queue in sc.resetStream
  * http2: speed up TestTransportFlowControl in short mode
  * context: deflake tests under Go 1.6</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update requirements</changelog>

</package>
<package pkgid="b197882f9ecd8174b94fc3500383018bf2ea37d0db6b6f6dc457d2696fc21120" name="golang-org-x-net-context" arch="src">
    <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>

<changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update to version 1.5.2+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493380800">- Only package and build golang.org/x/net/websocketto prevent problems with
  build requirements of golang.org/x/net</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1493380801">- Update to version 0.0.0+git20170424.da118f7:
  * context/ctxhttp: remove pre-Go 1.5 support
  * context: fix doc typo
  * context: correct spelling of TODO in comment
  * context/ctxhttp: add a specialized minimal version for Go 1.7
  * context/ctxhttp: if context is canceled, return its error
  * context: use Go 1.8 type alias for CancelFunc and Context
  * Revert "context: use Go 1.8 type alias for CancelFunc and Context"
  * context: deflake tests under Go 1.6
  * all: single space after period
  * context/ctxhttp: close httptest server</changelog>
<changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
<changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>

</package>
<package pkgid="76cec1e2be2b814c008c4106e6ba9c7c19dcf1c7cd52acdab0ad35155b9afdc1" name="golang-org-x-net-context" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>

<changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update to version 1.5.2+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493380800">- Only package and build golang.org/x/net/websocketto prevent problems with
  build requirements of golang.org/x/net</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1493380801">- Update to version 0.0.0+git20170424.da118f7:
  * context/ctxhttp: remove pre-Go 1.5 support
  * context: fix doc typo
  * context: correct spelling of TODO in comment
  * context/ctxhttp: add a specialized minimal version for Go 1.7
  * context/ctxhttp: if context is canceled, return its error
  * context: use Go 1.8 type alias for CancelFunc and Context
  * Revert "context: use Go 1.8 type alias for CancelFunc and Context"
  * context: deflake tests under Go 1.6
  * all: single space after period
  * context/ctxhttp: close httptest server</changelog>
<changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
<changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>

</package>
<package pkgid="5cd1ff91ccf44ca8cc0533e30d41472399b9ebfe8a4b3e0aab1cc594f2edc388" name="golang-org-x-net-html" arch="src">
    <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>

<changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update to version 0.0.0+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493380800">- Only package and build golang.org/x/net/websocketto prevent problems with
  build requirements of golang.org/x/net</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1493380801">- Update to version 0.0.0+git20170424.da118f7:
  * x/net/html: Sync the html parser and atom with the current whatwg spec
  * x/net/html/charset: Change NewReaderByName to NewReaderLabel.
  * html/charset/testdata: update licensing info in README
  * html: Use existing standard library interface internally.
  * html: remove license references from benchmark test data
  * html/charmap: update table with latest data
  * html/charset: use x/text/encoding/htmlindex
  * html/charset: handle unsupported code points for encoding
  * html/charset: verify correct UTF-8 behavior
  * html/charset: replace EUC-KR test</changelog>
<changelog author="thipp@suse.de" date="1496318400">- Remove net/html/charset to avoid cyclic dependency</changelog>
<changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
<changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>

</package>
<package pkgid="bbed7dcb208f8091321f5dabf3d9d9949ed5c34b0d674fce004a7fc65a1b20fa" name="golang-org-x-net-html" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>

<changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update to version 0.0.0+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493380800">- Only package and build golang.org/x/net/websocketto prevent problems with
  build requirements of golang.org/x/net</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1493380801">- Update to version 0.0.0+git20170424.da118f7:
  * x/net/html: Sync the html parser and atom with the current whatwg spec
  * x/net/html/charset: Change NewReaderByName to NewReaderLabel.
  * html/charset/testdata: update licensing info in README
  * html: Use existing standard library interface internally.
  * html: remove license references from benchmark test data
  * html/charmap: update table with latest data
  * html/charset: use x/text/encoding/htmlindex
  * html/charset: handle unsupported code points for encoding
  * html/charset: verify correct UTF-8 behavior
  * html/charset: replace EUC-KR test</changelog>
<changelog author="thipp@suse.de" date="1496318400">- Remove net/html/charset to avoid cyclic dependency</changelog>
<changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
<changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>

</package>
<package pkgid="7b22f0278f5e44bbf2204ebbcf25314d2ad6be447180469735dd5362c4cd2589" name="golang-org-x-net-websocket" arch="src">
    <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>

<changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update to version 0.0.0+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1493380800">- Only package and build golang.org/x/net/websocket. Otherwise, we were creating
  a "dependency cycle" because we were building golang.org/x/net which depends
  on golang.org/x/text, which depends on golang.org/x/tools, which depends on
  golang.org/x/net/websocket, which will try to build golang.org/x/net.
- Update to version 0.0.0+git20170424.da118f7:
  * websocket: handle solicited and unsolicited Ping/Pong frames correctly
  * websocket: don't send IPv6 zone identifier in outbound request, per RFC 6874
  * websocket: Be explicit about goroutine safety
  * websocket: remove redundant error handling
  * websocket: fix Read behaviour in hybiFrameReader.Read
  * websocket: use net.Dialer to open tcp connection
  * websocket: limit incoming payload size
  * websocket: use of crypto/rand package in test
  * websocket: drop support for go1.4 or below
  * websocket: mention the gorilla package</changelog>
<changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
<changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>

</package>
<package pkgid="344846d15003bee9cbbc6ce9895feb54b617a1e08e2ba4d05101a75c871a7edf" name="golang-org-x-net-websocket" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20170424.da118f7" rel="2.1"/>

<changelog author="thipp@suse.de" date="1488196800">- Initial commit
- Add _service
- Add rpmlintrc</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update to version 0.0.0+git20170227.906cda9:
  * publicsuffix: update table to latest list from publicsuffix.org
  * internal/netreflect: don't build on go1.9 or above
  * lif: drop support for go1.5
  * route: drop support for go1.5
  * ipv4, ipv6, internal/netreflect, bpf: fix the x/net build
  * http2/hpack: remove hpack's constant time string comparison
  * http2: replace fixedBuffer with dataBuffer
  * http2: Add opt-in option to Framer to allow DataFrame struct reuse
  * http2/hpack: speedup Encoder.searchTable
  * http2: add configurable knobs for the server's receive window</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1493380800">- Only package and build golang.org/x/net/websocket. Otherwise, we were creating
  a "dependency cycle" because we were building golang.org/x/net which depends
  on golang.org/x/text, which depends on golang.org/x/tools, which depends on
  golang.org/x/net/websocket, which will try to build golang.org/x/net.
- Update to version 0.0.0+git20170424.da118f7:
  * websocket: handle solicited and unsolicited Ping/Pong frames correctly
  * websocket: don't send IPv6 zone identifier in outbound request, per RFC 6874
  * websocket: Be explicit about goroutine safety
  * websocket: remove redundant error handling
  * websocket: fix Read behaviour in hybiFrameReader.Read
  * websocket: use net.Dialer to open tcp connection
  * websocket: limit incoming payload size
  * websocket: use of crypto/rand package in test
  * websocket: drop support for go1.4 or below
  * websocket: mention the gorilla package</changelog>
<changelog author="thipp@suse.de" date="1496404800">- Use full tarball and include %doc section</changelog>
<changelog author="thipp@suse.de" date="1502798400">- Remove BuildArch</changelog>

</package>
<package pkgid="a7d5338bd220bb9ec349c06593f3eb4c203cc52bdd28edd4f2ef27627fdc1d8e" name="golang-org-x-sync" arch="src">
    <version epoch="0" ver="0.0.0+git20161206.450f422" rel="2.1"/>

<changelog author="tboerger@suse.com" date="1481198400">- Initial packaging</changelog>
<changelog author="tboerger@suse.com" date="1481889600">- Enabled changes generate within service</changelog>

</package>
<package pkgid="6e48744de93d381004e0224aa0f4e9ee9f9901d8bd59dc0fccfe8533499e6f15" name="golang-org-x-sync" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20161206.450f422" rel="2.1"/>

<changelog author="tboerger@suse.com" date="1481198400">- Initial packaging</changelog>
<changelog author="tboerger@suse.com" date="1481889600">- Enabled changes generate within service</changelog>

</package>
<package pkgid="370745c4eb9a359072c3632436c383459e5e2769c34fc16bec48423e9f36613c" name="golang-org-x-sys" arch="src">
    <version epoch="0" ver="0.0.0+git20161205.478fcf5" rel="3.1"/>

<changelog author="i@marguerite.su" date="1427112000">- initial version 0.0.0+git20150320.8642817</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-sys
- update version 0.0.0+git20150612.b4e2899
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Switched to disabled run service</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 0.0.0+git20161205.478fcf5:
  * x/sys/unix: add *linkat functions on linux
  * unix: Fix *linkat on sparc64 and s390x
  * unix: Add FADV_* constants for linux/arm
  * unix: fix name of prlimit parameters
  * x/sys/unix: add Getsid on linux
  * x/sys/unix: added SockaddrCAN struct to allow creation of AF_CAN sockets
  * unix: Use syscall.SysctlRaw in Sysctl
  * windows: run "go generate"
  * windows/registry: add code to access remote pc registry
  * x/sys/unix: added linux/mips{,le} support</changelog>

</package>
<package pkgid="6a46a65d7c776452b1d6dbe8ee4a2a54d3bf348ac98bc71d3e8bd2524892d4e1" name="golang-org-x-sys" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20161205.478fcf5" rel="3.1"/>

<changelog author="i@marguerite.su" date="1427112000">- initial version 0.0.0+git20150320.8642817</changelog>
<changelog author="i@marguerite.su" date="1436702400">- rename to golang-org-x-sys
- update version 0.0.0+git20150612.b4e2899
- use golang-packaging for packaging</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Switched to disabled run service</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 0.0.0+git20161205.478fcf5:
  * x/sys/unix: add *linkat functions on linux
  * unix: Fix *linkat on sparc64 and s390x
  * unix: Add FADV_* constants for linux/arm
  * unix: fix name of prlimit parameters
  * x/sys/unix: add Getsid on linux
  * x/sys/unix: added SockaddrCAN struct to allow creation of AF_CAN sockets
  * unix: Use syscall.SysctlRaw in Sysctl
  * windows: run "go generate"
  * windows/registry: add code to access remote pc registry
  * x/sys/unix: added linux/mips{,le} support</changelog>

</package>
<package pkgid="362f18fb58a27b0d3235cbdf799856bce5ce1f7a959aa78749ba99401374cb91" name="golang-org-x-text" arch="src">
    <version epoch="0" ver="1.5.2+git20161209.47a200a" rel="11.1"/>

<changelog author="i@marguerite.su" date="1425816000">- initial version 1.4.2+git20150306.f3f2426</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1436270400">- rename golang-org-x-text
- update version 1.4.2+git20150710.7c0e16d
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151217.cf49866:
  + : added bidi and htmlindex packages to gen.go
  + encoding/charmap: don't map U+FFFD in encoder
  + : upgrade to CLDR 28 and necessary adjustments
  + encoding: encoders return errors on out-of-repertoire runes
  + encoding: added Replacement identifier and htmlindex tests
  + : added .gitignore
  + display: remove package
  + : run long tests after a generated package
  + display: remove completely
  + encoding/htmlindex: use UTF-8 encoding</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1471435201">- Added subpackage for colcmp command</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161209.47a200a:
  * secure/precis: reduce allocations for non-changing input
  * unicode/norm: remove unreachable code
  * secure/precis: new comparison API
  * internal/export/idna: sanitize errors
  * internal/export/idna: finalize API
  * internal/gen: remove a workaround for golang.org/issue/13145.
  * unicode/runenames: new package to look up rune names.
  * secure/precis: add ascii fast path to enforce
  * internal/gen: work around long string concatenation.
  * secure/precis: manually define built in profiles</changelog>
<changelog author="thipp@suse.de" date="1484222400">- Add subpackage for gotext command
- Extend rpmlintrc</changelog>

</package>
<package pkgid="3ee473152a119944170ac70f21d32a0a1995d56b900920bf113b404e284320a2" name="golang-org-x-text" arch="x86_64">
    <version epoch="0" ver="1.5.2+git20161209.47a200a" rel="11.1"/>

<changelog author="i@marguerite.su" date="1425816000">- initial version 1.4.2+git20150306.f3f2426</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1436270400">- rename golang-org-x-text
- update version 1.4.2+git20150710.7c0e16d
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151217.cf49866:
  + : added bidi and htmlindex packages to gen.go
  + encoding/charmap: don't map U+FFFD in encoder
  + : upgrade to CLDR 28 and necessary adjustments
  + encoding: encoders return errors on out-of-repertoire runes
  + encoding: added Replacement identifier and htmlindex tests
  + : added .gitignore
  + display: remove package
  + : run long tests after a generated package
  + display: remove completely
  + encoding/htmlindex: use UTF-8 encoding</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1471435201">- Added subpackage for colcmp command</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161209.47a200a:
  * secure/precis: reduce allocations for non-changing input
  * unicode/norm: remove unreachable code
  * secure/precis: new comparison API
  * internal/export/idna: sanitize errors
  * internal/export/idna: finalize API
  * internal/gen: remove a workaround for golang.org/issue/13145.
  * unicode/runenames: new package to look up rune names.
  * secure/precis: add ascii fast path to enforce
  * internal/gen: work around long string concatenation.
  * secure/precis: manually define built in profiles</changelog>
<changelog author="thipp@suse.de" date="1484222400">- Add subpackage for gotext command
- Extend rpmlintrc</changelog>

</package>
<package pkgid="fce7e737329932ca2c104b940ee613aeda53ed6af5e663cb10c8c88b14e3ffc0" name="golang-org-x-time-rate" arch="noarch">
    <version epoch="0" ver="0.0.0+git20161028.f51c127" rel="2.1"/>

<changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
<changelog author="thipp@suse.de" date="1486641601">- Fix import path</changelog>

</package>
<package pkgid="f685b0e6da23eba95b7bb7b68bc5ddb56b5280871296613fa019e7130d0f19ba" name="golang-org-x-time-rate" arch="src">
    <version epoch="0" ver="0.0.0+git20161028.f51c127" rel="2.1"/>

<changelog author="thipp@suse.de" date="1486641600">- Initial commit</changelog>
<changelog author="thipp@suse.de" date="1486641601">- Fix import path</changelog>

</package>
<package pkgid="6abf2e86acd95c69176afb8e83442daec16a6cd4a1f8b2a679b17f0229d3b19a" name="golang-org-x-tools" arch="src">
    <version epoch="0" ver="1.4.2+git20161212.0a14ca4" rel="6.1"/>

<changelog author="speilicke@suse.com" date="1382097600">- Initial version</changelog>
<changelog author="cbosdonnat@suse.com" date="1411041600">- Updated to 1.3.1 using mercurial tip
- removed patches:
  * godoc-path-locations.patch: no longer needed all sources are in
    GOROOT or GOPATH</changelog>
<changelog author="i@marguerite.su" date="1425816000">- update to 1.4.2+git20150306.c327a7c
- upstream changed to github.com/golang/tools
- package name changed: go-tools
- add provides/obsoletes</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 1.4.2+git20150320.af0a448</changelog>
<changelog author="i@marguerite.su" date="1427198400">- BuildRequires:  go-oauth2</changelog>
<changelog author="i@marguerite.su" date="1427284800">- add go-tools-rpmlintrc file as source2</changelog>
<changelog author="i@marguerite.su" date="1432987200">- update version 1.4.2+git20150529.8ccf558
- use update-alternatives to avoid conflict w/
  perl-Devel-Cover package</changelog>
<changelog author="i@marguerite.su" date="1436616000">- rename to golang-org-x-tools
- update version 1.4.2+git20150710.4cd43f3
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1440763200">- Update to version 1.4.2+git20150825.b48dc8d:
  + cmd/godoc: remove obsolete vet redirect
  + imports: fix bug, where unused named import is mistaken for unnamed import.
  + cmd/tipgodoc: change capitalization of 'Authors' to be consistent
  + go/loader: fix fd leak and limit calls to ioutil.ReadDir
  + website: fix JavaScript error on website and blog in non-ES6 browsers
  + cmd/gotype: use std lib go/types instead of x/tools version
  + cmd/gotype: keep gotype working with Go1.4
- cover/vert are merged in mainline go 1.5, so strip them off.</changelog>
<changelog author="bwiedemann@suse.com" date="1458475200">- Specify version to fix build-compare</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Dropped rpmlintrc</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.4.2+git20161212.0a14ca4:
  * go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows
  * Revert "go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows."
  * Revert "go/buildutil: handle symlinks in filenames"
  * cmd/guru: avoid testing symlinks on OSes that do not support them
  * go/buildutil, cmd/guru: resolve symlinks in filenames through build.Context
  * go/internal/gccgoimporter: handle conversions in exported const values
  * go/loader: fix broken tests after context removal from testing package
  * playground/socket: deflake test, remove sleep
  * godoc: Regenerate static/static.go
  * godoc: don't select line numbers when highlighting source code</changelog>
<changelog author="tboerger@suse.com" date="1481889600">- Updated mango-doc dependency name</changelog>
<changelog author="tboerger@suse.com" date="1482235200">- Create a proper subpackage</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Fix requirements
- Remove duplicate files</changelog>

</package>
<package pkgid="5ae29c3698440ae1716986b37ef6a9fc0a2eb16eaa82e8987e6e2a194eafbf63" name="golang-org-x-tools" arch="x86_64">
    <version epoch="0" ver="1.4.2+git20161212.0a14ca4" rel="6.1"/>

<changelog author="speilicke@suse.com" date="1382097600">- Initial version</changelog>
<changelog author="cbosdonnat@suse.com" date="1411041600">- Updated to 1.3.1 using mercurial tip
- removed patches:
  * godoc-path-locations.patch: no longer needed all sources are in
    GOROOT or GOPATH</changelog>
<changelog author="i@marguerite.su" date="1425816000">- update to 1.4.2+git20150306.c327a7c
- upstream changed to github.com/golang/tools
- package name changed: go-tools
- add provides/obsoletes</changelog>
<changelog author="i@marguerite.su" date="1426939200">- update version 1.4.2+git20150320.af0a448</changelog>
<changelog author="i@marguerite.su" date="1427198400">- BuildRequires:  go-oauth2</changelog>
<changelog author="i@marguerite.su" date="1427284800">- add go-tools-rpmlintrc file as source2</changelog>
<changelog author="i@marguerite.su" date="1432987200">- update version 1.4.2+git20150529.8ccf558
- use update-alternatives to avoid conflict w/
  perl-Devel-Cover package</changelog>
<changelog author="i@marguerite.su" date="1436616000">- rename to golang-org-x-tools
- update version 1.4.2+git20150710.4cd43f3
- use golang-packaging for packaging</changelog>
<changelog author="i@marguerite.su" date="1440763200">- Update to version 1.4.2+git20150825.b48dc8d:
  + cmd/godoc: remove obsolete vet redirect
  + imports: fix bug, where unused named import is mistaken for unnamed import.
  + cmd/tipgodoc: change capitalization of 'Authors' to be consistent
  + go/loader: fix fd leak and limit calls to ioutil.ReadDir
  + website: fix JavaScript error on website and blog in non-ES6 browsers
  + cmd/gotype: use std lib go/types instead of x/tools version
  + cmd/gotype: keep gotype working with Go1.4
- cover/vert are merged in mainline go 1.5, so strip them off.</changelog>
<changelog author="bwiedemann@suse.com" date="1458475200">- Specify version to fix build-compare</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout
- Dropped rpmlintrc</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.4.2+git20161212.0a14ca4:
  * go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows
  * Revert "go/buildutil, cmd/guru: fix tests for symlinks in guru and gorename to account for windows."
  * Revert "go/buildutil: handle symlinks in filenames"
  * cmd/guru: avoid testing symlinks on OSes that do not support them
  * go/buildutil, cmd/guru: resolve symlinks in filenames through build.Context
  * go/internal/gccgoimporter: handle conversions in exported const values
  * go/loader: fix broken tests after context removal from testing package
  * playground/socket: deflake test, remove sleep
  * godoc: Regenerate static/static.go
  * godoc: don't select line numbers when highlighting source code</changelog>
<changelog author="tboerger@suse.com" date="1481889600">- Updated mango-doc dependency name</changelog>
<changelog author="tboerger@suse.com" date="1482235200">- Create a proper subpackage</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Fix requirements
- Remove duplicate files</changelog>

</package>
<package pkgid="9a858c85edf6fff6df10cdec75bf952ce5fb0ac21ef326369d77c81cda327fd9" name="golang-packaging" arch="noarch">
    <version epoch="0" ver="15.0.3" rel="11.1"/>

<changelog author="i@marguerite.su" date="1451995200">- update version 14
  * if importpath has "test/example", it should survive (github#5)
  * merge macros.go from openSUSE's go here
  * add golang-macros.rb, replacement for the complicated
    macros in shell in macros.go
  * golang-macros.rb:
    + support build with fake build id
    + support build with custom tags (github#7)
    + support pass any -&lt;arg&gt;="a b c" or -&lt;arg&gt;=&lt;value&gt;
    to go install, shared build is possible now
    (not fully support, other macros need to be adapted)
    + --filelist, to generate filelist used in %files
    section with excluding support
    + use IO.popen to break the build at the exact place
    it fails (github#6)</changelog>
<changelog author="i@marguerite.su" date="1452513600">- update version 14.1
  * golang.prov fix: uniq! returns nil if everything is unique</changelog>
<changelog author="i@marguerite.su" date="1452513601">- update version 14.2
  * golang.req: fix ' // indirect' comment in import</changelog>
<changelog author="i@marguerite.su" date="1453204800">- update version 14.3
  * fix: command not found error for go test on SLE
  * fix #5 again: gsub importpath itself is not enough</changelog>
<changelog author="i@marguerite.su" date="1453464000">- update version 14.4
  * fix #5 on golang.req</changelog>
<changelog author="i@marguerite.su" date="1453464001">- update version 14.5
  * fix a typo that prevent golang.req from running (fix #10)</changelog>
<changelog author="i@marguerite.su" date="1455278400">- update version 14.6
  * Fix rbarch for Power architectures</changelog>
<changelog author="i@marguerite.su" date="1456315200">- update version 14.7
  * do not hardcode go version</changelog>
<changelog author="i@marguerite.su" date="1459684800">- update version 14.8
  * rpmsysinfo.rb: fix encoding problem in open()
  * cli.rb: ruby 1.8.7 doesn't support passing environment
    variables in popen(), some commands/tests need time to
    finish, an immediate io.close() will get us wrong
    exitstatus (broken pipe, code 13). so use 'timeout'
    module with a 30s and process.wait for them to quit
    successfully.
  * golang.req: the oniguruma in ruby 1.8.7 doesn't support
    named group in regexp. so ditch the named group used in
    go_get_version()</changelog>
<changelog author="i@marguerite.su" date="1459857600">- update version 14.8.1
  * bugfix release
  * fix a typo in cli.rb
  * increate timeout to 300s, or go install can't
    finish itself sometimes</changelog>
<changelog author="tboerger@suse.com" date="1460721600">- Switched to service based package updates
- Update to version 14.9.0:
  * do not hardcode go version
  * fix encoding problem in rpmsysinfo.rb
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API</changelog>
<changelog author="mpluskal@suse.com" date="1460894400">- Update service
  * use xz for compression
  * change from disabled to localonly
- Update spec file to actually use tarball generated by _service
- Drop useless _servicedata</changelog>
<changelog author="i@marguerite.su" date="1465387200">- Update to version 14.9.1:
  * simplify rpmsysinfo.rb: don't guess variables'
    values can be passed in by RPM environment
    variables. use RbConfig to get libdir.
  * support s390x architecture</changelog>
<changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
<changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
<changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
<changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
<changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
<changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
<changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>

</package>
<package pkgid="9b2863aaaf3da5dc481b5b8d83d1bd43939f52c191ccafe4c0104c72956946c9" name="golang-packaging" arch="src">
    <version epoch="0" ver="15.0.3" rel="11.1"/>

<changelog author="i@marguerite.su" date="1451995200">- update version 14
  * if importpath has "test/example", it should survive (github#5)
  * merge macros.go from openSUSE's go here
  * add golang-macros.rb, replacement for the complicated
    macros in shell in macros.go
  * golang-macros.rb:
    + support build with fake build id
    + support build with custom tags (github#7)
    + support pass any -&lt;arg&gt;="a b c" or -&lt;arg&gt;=&lt;value&gt;
    to go install, shared build is possible now
    (not fully support, other macros need to be adapted)
    + --filelist, to generate filelist used in %files
    section with excluding support
    + use IO.popen to break the build at the exact place
    it fails (github#6)</changelog>
<changelog author="i@marguerite.su" date="1452513600">- update version 14.1
  * golang.prov fix: uniq! returns nil if everything is unique</changelog>
<changelog author="i@marguerite.su" date="1452513601">- update version 14.2
  * golang.req: fix ' // indirect' comment in import</changelog>
<changelog author="i@marguerite.su" date="1453204800">- update version 14.3
  * fix: command not found error for go test on SLE
  * fix #5 again: gsub importpath itself is not enough</changelog>
<changelog author="i@marguerite.su" date="1453464000">- update version 14.4
  * fix #5 on golang.req</changelog>
<changelog author="i@marguerite.su" date="1453464001">- update version 14.5
  * fix a typo that prevent golang.req from running (fix #10)</changelog>
<changelog author="i@marguerite.su" date="1455278400">- update version 14.6
  * Fix rbarch for Power architectures</changelog>
<changelog author="i@marguerite.su" date="1456315200">- update version 14.7
  * do not hardcode go version</changelog>
<changelog author="i@marguerite.su" date="1459684800">- update version 14.8
  * rpmsysinfo.rb: fix encoding problem in open()
  * cli.rb: ruby 1.8.7 doesn't support passing environment
    variables in popen(), some commands/tests need time to
    finish, an immediate io.close() will get us wrong
    exitstatus (broken pipe, code 13). so use 'timeout'
    module with a 30s and process.wait for them to quit
    successfully.
  * golang.req: the oniguruma in ruby 1.8.7 doesn't support
    named group in regexp. so ditch the named group used in
    go_get_version()</changelog>
<changelog author="i@marguerite.su" date="1459857600">- update version 14.8.1
  * bugfix release
  * fix a typo in cli.rb
  * increate timeout to 300s, or go install can't
    finish itself sometimes</changelog>
<changelog author="tboerger@suse.com" date="1460721600">- Switched to service based package updates
- Update to version 14.9.0:
  * do not hardcode go version
  * fix encoding problem in rpmsysinfo.rb
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API</changelog>
<changelog author="mpluskal@suse.com" date="1460894400">- Update service
  * use xz for compression
  * change from disabled to localonly
- Update spec file to actually use tarball generated by _service
- Drop useless _servicedata</changelog>
<changelog author="i@marguerite.su" date="1465387200">- Update to version 14.9.1:
  * simplify rpmsysinfo.rb: don't guess variables'
    values can be passed in by RPM environment
    variables. use RbConfig to get libdir.
  * support s390x architecture</changelog>
<changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
<changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
<changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
<changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
<changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
<changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
<changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>

</package>
<package pkgid="7dbb25aeb50ef66765da98bde958683ab511911767143f4be9aea8c2100e6019" name="google-cloud-sdk" arch="noarch">
    <version epoch="0" ver="0.9.87" rel="7.1"/>

<changelog author="rschweikert@suse.com" date="1392811200">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- Adjust version settings for obsoletes and provides</changelog>
<changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
<changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
<changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
<changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
<changelog author="rschweikert@suse.com" date="1394107200">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107201">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107202">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
<changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
<changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
<changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
<changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
<changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
<changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
<changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
<changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>

</package>
<package pkgid="f16caef8b51917562c28d4d5147d26bc23d2db74acbdd47b9355ff1f20a94ff2" name="google-cloud-sdk" arch="noarch">
    <version epoch="0" ver="140.0.0" rel="10.1"/>

<changelog author="rschweikert@suse.com" date="1392811200">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- Adjust version settings for obsoletes and provides</changelog>
<changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
<changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
<changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
<changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
<changelog author="rschweikert@suse.com" date="1394020800">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107200">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107201">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
<changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
<changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
<changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
<changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
<changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
<changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
<changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
<changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Update to version 140.0.0 (2017/01/18)  (bsc#1002895,bsc#1008328)
  + Remove hidePathMangeling.patch
  + Add gcsdk-gsutil-hide-deps.patch
  + Add gcsdk-gsutil-no-self-update-check.patch
  + Add gcsdk-gsutil-use-system-certs.patch
  + Add gcsdk-no-batch-limit.patch
  + Add gcsdk-no-http-no-tunnel-proxt.patch
  + Add gcsdk-bq-hide-deps.patch
  + Remove disableSelfUpdate.patch, disabled by default from upstream
  + Cloud SDK
  * `gcloud alpha search-help` is now available in alpha.
    Run `gcloud alpha search-help [TERM]` to find gcloud commands whose
    help text contains [TERM].
  + Google Cloud ML
  * `gcloud ml jobs submit training` now supports packages already in Google
    Cloud Storage via the `--packages` flag.
  + Google Cloud Datalab
  * Upgrade the Datalab CLI to the 20170110 build.
  + Google Cloud Debugger
  * The `gcloud debug` command group is now available in GA.
  + Google Container Registry
  * An issue that affected Docker client version parsing during
    `docker-credential-gcr configure-docker` has been fixed.
  + Google Cloud Deployment Manager
  * 'deployment-manager deployments update' can update deployments with a new
    description using --description flag.
  + Emulators
  * The pubsub emulator now accepts web-safe Base64 encoded data.
- From version 139.0.1 (2017/01/12)
  * Fixed crash in `gcloud dataproc clusters create`
  * https://code.google.com/p/google-cloud-sdk/issues/detail?id=1464
- From version 139.0.0 (2017/01/11)
  + Breaking Changes
  * (Google Cloud Logging) The default value of the `--unique-writer-identity`
    flag to `gcloud beta logging sinks create` and
    `gcloud beta logging sinks update` is now true. Please consult the
    documentation before using these commands.
  * (Google Cloud Logging) Remove 'struct' option from `gcloud logging write`.
    Use 'json' instead
  * (Google Cloud Logging) `logging beta metrics create` and
    `logging beta metrics update` commands have changed their flags and
    importantly now use Logging V2 filter syntax. See the help for more
    information.
  * (Google App Engine) Flexible deployments now skip files matching
    `node_modules` and `.git` by default, but no longer skip other hidden
    files by default. Standard deployments are not changing.
  * (Google Compute Engine)
    `gcloud compute target-pools set-backup --backup-pool` and
    `gcloud compute project-info set-usage-bucket --bucket` flags now warn
    if you provide an empty argument; use `--no-backup-pool` and
    `--no-bucket instead`.
  * (Google Cloud Bigtable) Removed `gcloud alpha bigtable` command group;
    please use `gcloud beta bigtable` for all Cloud Bigtable operations.
  * (Stackdriver Debugger) Added a `--location` option to several
    `gcloud beta debug` commands, to separate out the processing of resource
    IDs from filename patterns. These commands now take only resource IDs as
    positional parameters.
  + Google Cloud Datalab
  * Added the command-line tool for Google Cloud Datalab in the Cloud SDK;
    call it via the `datalab` script.
  + Google Cloud Key Management Service
  * Added the `gcloud beta kms` commands for key management.
  + Google Cloud Logging
  * Add `--billing-account` flag to `gcloud logging read`
  * gcloud beta logging metrics list/describe now output the version of the
    filter associated with the metric
  + Google Cloud ML
  * The `gcloud beta ml jobs submit training` now takes a `--scale-tier` flag.
  * Support gzipped TFRecord file type for
    `gcloud beta ml jobs submit prediction`.
  + Google App Engine
  * (Google App Engine) Fixed bug with `gcloud app instances describe`.
  - -service and --version flags are now required.
  * `gcloud beta app deploy` now uses multi-threading rather than
    multi-processing for file uploads; if you've been seeing issues on
    Windows, please try the `beta` command out.
  * `gcloud app versions migrate` is now GA.
  * `gcloud app instances delete` is now GA.
  * Added `gcloud beta app operations` commands.
  * Added `gcloud beta app instances delete` command.
  + Google Compute Engine
  * `gcloud beta compute images create` now has a `--guest-os-features`
    flag for enabling specific OS supported features.
  * Use the new scopes format (see `--help` for deetails) for
  - `gcloud alpha compute instances create`
  - `gcloud alpha compute instances create-from-container`
  - `gcloud alpha compute instance-templates create`
  - `gcloud alpha compute instance-templates create-from-container`
  - `gcloud beta compute instances create`
  - `gcloud beta compute instance-templates create`
  * Add `--custom-extensions` flag to:
    `gcloud alpha compute instances create`,
    `gcloud alpha compute instances set-machine-type`, and
    `gcloud alpha compute instance-templates create`
  + Google Compute Engine (Networking)
  * The `--host` flag for `gcloud alpha compute url-maps
    invalidate-cdn-cache` is now available in the GA version of the command.
  + Stackdriver Debugger
  * Fixed log view URLs in the debug logpoints commands to use the V2 query
    syntax.
  + Google Service Management
  * `--validate-only` flag added to `gcloud service-management deploy` command
  + Google Cloud Functions
  * The `--trigger-params` flag has been renamed to `--trigger-path`
    (the `path=` specifier is no longer necessary). The old flag has been
    deprecated and will be removed or `gcloud alpha functions deploy`.
  * Restore `gcloud alpha functions get-logs` command.
  * Restore deprecated flags `--trigger-topic`, `--trigger-bucket`,
    `--source`, `--bucket`, and `--trigger-gs-uri` to `gcloud alpha
    functions deploy` command.
  + Google Container Engine
  * Update Google Container Engine's kubectl from version 1.4.6 to 1.5.1.
  + Google Cloud Bigtable
  * The `cbt` command line tool component is now available. See:
    https://cloud.google.com/bigtable/docs/go/cbt-reference
  + Google Cloud Datastore
  * `gcloud datastore create-indexes` and `cleanup-indexes` are now GA
  + Google Container Registry
  * `docker-credential-gcr` has been upgraded to v1.3 and now supports Docker
    client v1.14 credential helpers. `docker-credential-gcr` will now
    preferentially act as a credential helper (as opposed to credential
    store) on Docker client versions 1.14+. Update (or install) the
    `docker-credential-gcr` component and run `docker-credential-gcr
    configure-docker` to configure your Docker client to use
    `docker-credential-gcr` to authenticate operations on your GCR
    repositories.
  + Google Cloud Deployment Manager
  * Added labels support to the
    `gcloud alpha deployment-manager deployments create` and `update` commands
    (via the `--labels` and `--{update,remove}-labels` flags respectively).
  * Introduce new syntax `key:val,foo:bar` for `--properties` flag in all
    `gcloud deployment-manager` commands. The old `key=val,foo=bar` syntax is
    deprecated.
- From version 138.0.0 (2016/12/14)
  + Cloud SDK
  * Introduce --(no-)force-key-file-overwrite flags to all gcloud commands
    using SSH key files. These new flags control overwrite behavior when
    SSH key files are broken. Without these flags, interactive sessions will
    ask for confirmation before regenerating key files. Old non-interactive
    behavior (permissive) is deprecated and will be removed in 6 months. To
    preserve old behavior in your scripts, use new flag
  - -force-key-file-overwrite (though this is discouraged).
  * Credential store format for service accounts has changed. Your
    credentials will get auto-upgraded to new format upon usage; however, if
    gcloud is downgraded to previous version those credentials will not be
    usable and users will have to reactivate their service account.
  + Google Cloud ML
  * `gcloud beta ml jobs submit training` is now blocking by default. Use the
    `--async` flag to finish immediately after job submission.
  + Google Compute Engine
  * `gcloud compute instances create` creates instance with no scopes by
    default if project has no default service account.
  * `compute target-ssl-proxies list` deprecated `--regex` and names argument.
    Please use `--filter` flag instead.
  * `gcloud compute connect-to-serial-port` allows for interactive
    connections to the serial port for instances.
  * Promote `compute instances set-scopes` command from alpha to beta.
  + Google App Engine
  * Java SDK updated to 1.9.48. For more details, please see
    https://cloud.google.com/appengine/docs/java/release-notes
  * Python SDK updated to 1.9.49. For more details, please see
    https://cloud.google.com/appengine/docs/python/release-notes
  * `gcloud app describe` is now GA.
  * Added `gcloud beta app instances delete`, which deletes a specific
    App Engine instance.
  * Added `gcloud beta app versions migrate`.
  * Added support for `env: flex` (Flexible Environment) instances to
    `gcloud app instances enable-debug` and `gcloud app instances disable-debug`.
  * Added support for skip_files in Flexible Environment deployments.
  + Google Container Engine
  * Users can create clusters/nodepools with node autoupgrade enabled in
    Beta by adding `--enable-auto-upgrade`. Please refer to
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * node-pool upgrades can now be rolled back using the
    `gcloud alpha container node-pools rollback &lt;pool-name&gt;` command.
    See `gcloud alpha container node-pools rollback --help` for more details.
  + Google Cloud Container Builder
  * Container Builder timeouts are now unlimited (with a default of ten
    minutes), and can be specified with the --timeout flag.
  + Google Cloud Dataflow
  * The `gcloud dataflow jobs` command group now has the following commands
    in GA: cancel, describe, drain, list, show
  + Google Cloud Functions
  * Remove `gcloud alpha functions get-logs` command.
  * Remove deprecated flags --trigger-topic --trigger-bucket --source --bucket
  - -trigger-gs-uri from `gcloud alpha functions deploy` command.
- From version 137.0.1 (2016/12/08)
  + Google Cloud ML
  * `gcloud beta ml jobs submit training`: Fix crash when `--packages` was not
    specified.
- From version 137.0.0 (2016/12/07)
  + Google Cloud Functions
  * Add `gcloud alpha functions deploy` `--trigger-provider`,
    `--trigger-event`, `--trigger-resource` and `--trigger-params` flags.
  * Add `gcloud alpha functions event-types list` command.
  + Google Cloud ML
  * The `gcloud beta ml models versions` command group has been moved to
    `gcloud beta ml versions`. The old commands still work, but are
    deprecated.
  * The `--origin` flag for the `gcloud beta ml versions create` command now
    accepts local file paths in addition to Google Cloud Storage (`gs://`)
    paths.
  * `gcloud beta ml jobs training`: `--packages` now takes a comma-separated
    list instead of a space-separated list.
  + Google Compute Engine
  * Internal Load Balancing is now available in GA.
  * It is no longer allowed to pass an empty scope in
    `gcloud compute instances create --scopes` flag.
  + Google Container Engine
  * `gcloud container images describe` has some breaking changes to its
  - -format=JSON output.
  + Google Service Management
  * The gcloud service-management surface is now available in the GA and beta
    release tracks. Please use `gcloud service-management` instead of
    `gcloud beta service-management`.
- From version 136.0.0 (2016/12/01)
  + Cloud SDK
  * `gcloud config get-value` is now GA.
  + Google Cloud Service Management
  * Add `gcloud beta service-management undelete`.
  + Google Container Engine
  * Add `gcloud beta container image describe` to list container analysis
    data.
  * Update Google Container Engine's kubectl from version 1.4.4 to 1.4.6.
  + Google Cloud Container Builder
  * `gcloud container builds ...` are now GA.
  + Google Cloud Resource Manager
  * `gcloud organizations ...` are now GA.
  * Removed `gcloud organizations update`.
  + Google Cloud ML
  * Add `gcloud beta ml local predict` to do local prediction.
  * Deprecate '--instances' flag in `gcloud beta ml predict`.
  + Google App Engine
  * `gcloud app instances describe` is now GA.
  * `gcloud app services describe` is now GA.
  * `gcloud app logs read` will now show request logs by default as well as
    stdout, stderr, and crash.log.
  * Add `gcloud beta app describe`, which prints information about the
    current App Engine application.
  * `gcloud beta app deploy` can now deploy go apps, without the use of
    `aedeploy` or `goapp deploy`. Both App Engine Standard and Flexible
    environments are supported. If you are using `runtime: custom` with
    `aedeploy`, you will need to vendor your dependencies into the app
    directory manually.
  * Deprecated the configuration property `app/gsutil`. Affected users are
    warned during `gcloud app deploy` with instructions on how to update
    their configuration appropriately.
  * The App Engine flexible environment now defaults to Python 3.5 when
    Python 3 is requested. To temporarily revert to Python 3.4, specify
    `python_version: 3.4` in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml).
  * Updated app-engine-go component to the 1.9.48 SDK.
  + Google Compute Engine
  * Add `--service-label` flag to `gcloud alpha compute forwarding-rules
    create`.
  + Cloud Tools for Powershell
  * Add cmdlets to manage Cloud Storage ACLs.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Fixed `gcloud deployment-manager deployments describe` when resource
    expansion fails.
  + Bigtable Emulator
  * Bigtable emulator now supports `column_range_filter`.
  + Google Cloud Dataproc
  * Add `--service-account` flag to `gcloud dataproc clusters create`.
- From version 135.0.0 (2016/11/16)
  + Google Cloud Service Management
  * `gcloud service-management deploy` command now supports providing
    multiple service configuration or API specification inputs
    simultaneously. This change allows creating .proto and YAML based
    configurations for gRPC services.
  + Google Container Engine
  * Change the `gcloud container list-tags` command to support user-specified
    filters on occurrences and exposes a column summarizing vulnerability
    information.
  + Google Cloud Resource Manager
  * `gcloud organizations update` is now deprecated.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Runtime configuration variables can now be set and retrieved using text
    values.
  + Bigtable Emulator
  * Now supports macOS Sierra.
  + Google App Engine
  * The App Engine flexible environment now includes Python 3.5
    support (beta). To preview this runtime, specify `python_version: 3.5`
    in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml) file.
  * Added the `gcloud beta app services describe` command, which prints
    information about a given service.
- From version 134.0.0 (2016/11/09)
  + Cloud SDK
  * `gcloud info --run-diagnostics` flag is now available to diagnose common
    installation and local network issues.
  * `gcloud init` now has a `--skip-diagnostics` flag.
  + Google AppEngine
  * App Engine Java SDK updated to 1.9.46.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * Added `gcloud app create` command, which creates an App Engine app in the
    current project.
  * Added `gcloud app regions list` command, which lists support for
    App Engine Standard and Flexible environments for each geographical
    region.
  * `gcloud app deploy` now offers to create an App Engine app
    interactively, if the current project does not have an app yet.
  + Google Cloud BigQuery
  * Add support for specifying a null marker when loading data. See the
    `null_marker` flag within the `load` command.
  + Google Compute Engine
  * `gcloud compute instance-groups managed delete` shows clean error message
    instead of bare exception on attempt to delete zonal and regional Managed
    Instance Groups in one gcloud invocation. Old behavior was to accept and
    invoke such request and then fail on waiting for operation complete.
  * Remove OpenSUSE as a default image option. OpenSUSE images are still
    available in the opensuse-cloud project.
- From version 133.0.0 (2016/11/02)
  + Google Cloud Container Builder
  * `gcloud alpha container builds` promoted to beta. The following has
    changed:
  * The 'create' command is now called 'submit'.
  * The 'stream-logs' command is now called 'log', and will only stream
    the log if the '--stream' flag is used. Otherwise, it will print
    only the log contents available at the time the command was run.
  The alpha commands will remain, as is, until at least March of 2017.
  + Google Compute Engine
  * regional instance groups are now GA.
    `gcloud compute instance-groups managed`
  * Customer-Supplied Encryption Keys (CSEK) for image creation is now GA. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Update kubectl to version 1.4.4.
- From version 132.0.0 (2016/10/26)
  + Breaking Changes
  * (Cloud SDK-wide) Command line flag abbreviations are no longer supported.
  * (Cloud SDK-wide) Python 2.6 is no longer supported by the Cloud SDK and
    commands may not function correctly when run under an Python 2.6
    interpreter. Please update your Python installation to 2.7 to ensure
    compatibility.
  * If you have a 2.7 interpreter on your system that is not the default,
    you can use the CLOUDSDK_PYTHON environment variable to point to it.
  * The last version of the SDK that supports Python 2.6 is 131.0.0,
    which can be downloaded from our archive:
    &lt;https://cloud.google.com/sdk/downloads#earlier_versions&gt;
  * (Google Compute Engine/Google Cloud Source Repositories): Google Cloud
    Source Repositories scope no longer added by default on instance creation.
  * (Stackdriver Debugger) Changed the default to true for the `--all-users`
    option on `gcloud beta debug logpoints list` command.
  + Google Cloud Storage
  * Update gsutil component to 4.22
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.22/CHANGES.md&gt;
  + Google Compute Engine
  * Allow specifying both `--network` and `--subnet` for the same network
    interface card.
  + Google Cloud Dataproc
  * Jobs and clusters now support labels on creation
  * Jobs and clusters now support filtering by labels and state
  + Google Container Engine
  * Google Container Engine cluster upgrade operations can now be cancelled
    using the `gcloud alpha container operations cancel` command.  See
    `gcloud alpha container operations cancel --help` for more details.
  + Cloud Tools for Powershell
  * Fix a bug where the module is not picking up the active user credentials
    correctly.
  * Make `New-GcsObject` `-ObjectName` parameter optional when uploading a
    file.
  * Add ability to pipeline `GcsObject` to `Write-GcsObject` cmdlet.
- From version 131.0.0 (2016/10/19)
  + Cloud SDK
  * Added PowerShell provider for Google Cloud Storage; allows navigation of
    Google Cloud Storage buckets as if they were a local file system.
    When using Cloud Tools for PowerShell `cd` into gs:\ and type `dir` to
    begin. Learn more at
    https://cloud.google.com/tools/powershell/docs/backup.
  * App Engine updated to 1.9.45. Java SDK updated to 1.9.44.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * `gcloud config configurations create` will now automatically activate
    specified empty configuration. Use `gcloud config set` to populate its
    properties.
  + Google Cloud Compute
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine image creation is now available in the beta release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Added support for for creating new clusters and nodepools on preemptible
    VM instances in Beta by adding `--preemptible`. See
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * Fixed a bug in `gcloud alpha container clusters update` that
    prevented disabling cluster autoscaling. Cluster autoscaling
    can now be disabled by running:
    `gcloud alpha container clusters update --disable-autoscaling`
  * Update kubectl to version 1.4.1.
  + Google Cloud BigQuery
  * Added support for setting labels on query jobs.
    Example usage: `bq query --label "foo:bar" "select 123"`.
    The `show` command outputs any labels set on a job.
  + Google Source Repository
  * Change the Cloud Source Repositories scope given by default to
    Google Compute Engine Instances and Instance Templates to read_only
    from full control.
- From version 130.0.0 (2016/10/12)
  + Breaking Changes
  * Breaking change to --network-interface in `alpha compute instances
    create`, and `alpha compute instance-images create` commands. By default
    interfaces will have ephemeral IP (was: no external ip).
  + Google AppEngine
  * App Engine: The `gcloud app deploy` command no longer blocks when
    stopping the previous version; this should speed up deployment times.
    Instructions for checking the status of the stop-version operation are
    included in the command output.
  * Support ramdisk volumes in App Engine flexible environments Alpha.
  + Google Cloud Functions
  * Add `alpha functions regions list` command.
  + Google Cloud ML
  * Change '--instances=' to
    '(--json-instances=, --instances= | --text-instances=)' to allow
    `gcloud beta ml predict` to read files in UTF-8 encoded text format.
  + Google Cloud Platform Projects
  * Add the `gcloud alpha projects create` command.
  + Google Compute Engine
  * Add new key to --network-interface in `alpha compute instances create`,
    and `alpha compute instance-images create` commands: no-address.
  * Make flag --network-interface visible in `alpha compute instances create`,
    and `alpha compute instance-templates create` commands.
  + Google Container Engine
  * Fix a bug in `gcloud beta container images list-tags`.
  * Add support for kubernetes labels on new clusters and nodepools by passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud container clusters create --help` and
    `gcloud container nodepools create --help` for more details and
    examples.
- From version 129.0.0 (2016/10/05)
  + Google Cloud Bigtable
  * `gcloud alpha bigtable` commands are deprecated and will be removed in
    release 134.0.0. All users should migrate to `gcloud beta bigtable`
    commands.
  + Google Cloud ML
  * Add `gcloud beta ml jobs stream-logs` JOB [--allow-multiline-logs]
    [--polling-interval=POLLING_INTERVAL; default="60"] [GLOBAL-FLAG ...]
    to show logs from a running Cloud ML job.
  + Google Compute Engine
  * The --replacement flag is no longer required in the
    `gcloud compute images deprecate` command.
  * Add --create-disk flag to `gcloud alpha compute instances create`.
  * Add --create-disk flag to `gcloud alpha compute instance-templates
    create`.
  + Google Container Engine
  * Can now specify the cluster-version when creating Google Container Engine
    clusters.
  * Update kubectl to version 1.4.0.
  + Google Container Registry
  * `docker-credential-gcr` bug fixed.
  + Go SDK
  * Update Go SDK component to use 20160927 release, based on Go 1.6.3.
  + Stackdriver Logging
  * Added commands to manage logs-based metrics in Stackdriver Logging.
- From version 128.0.0 (2016/09/28)
  + Breaking Changes
  * The `gcloud auth application-default` commands are now in GA.
    `gcloud auth login` no longer writes Application Default Credentials, use
    `gcloud auth application-default login` instead.
  + Google AppEngine
  * Java apps that have no app.yaml file are now auto-detected based on a
    WEB-INF/appengine-web.xml file when launching the dev_appserver.
  * Fixed timestamp processing issue
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1121) in
    `gcloud app logs read`.
  + Google Cloud Functions
  * Added the `--memory` flag to `gcloud alpha functions deploy` to allow
    configuration of amount of memory available during function execution.
  + Google Cloud ML
  * Added `gcloud beta ml local train` command which runs user code
    locally and injects the environment variables necessary for running
    distributed TensorFlow jobs in subprocesses.
  * `gcloud beta ml jobs submit training` now takes a path to a python
    package, and either (1) builds from the setup.py file at the package
    root, or (2) generates a setup.py file and builds the package. It then
    uploads the generated tar.gz archives to Google Cloud Storage.
  + Google Compute Engine
  * Internal load balancing is now in beta.
  * Cloud Source Repositories control scope is now included in the list
    of default scopes granted to newly created instances and instance
    templates.
  * Added multi-nic support to `gcloud alpha compute instances create` and
    `gcloud alpha compute instance-templates create`.
  + Google Container Engine
  * Can now create temporary clusters with all kubernetes alpha features
    enabled using `gcloud alpha container clusters create
  - -enable-kubernetes-alpha`.
  * Added support for kubernetes labels on new clusters and nodepools by
    passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud alpha container clusters create --help` and
    `gcloud alpha container nodepools create --help` for more details and
    examples.
  + Google Container Repository
  * Added the ability to configure where (and in which order)
    docker-credential-gcr searches for Google Container Registry
    credentials. Run `docker-credential-gcr config --help` for more details.
- From version 127.0.0 (2016/09/21)
  + Google BigQuery
  * New load/query option in BigQuery client to support schema update
    within a load/query job.
  * New query option in BigQuery client to specify query parameters in
    Standard SQL.
  + Google Cloud Dataproc
  * `gcloud dataproc clusters create` flag
    `--preemptible-worker-boot-disk-size`
    can be used to specify future preemptible VM boot disk size.
  + Google Container Engine
  * Update kubectl to version 1.3.7.
  + Google Cloud ML
  * New `gcloud beta ml predict` command to do online prediction.
  * New `gcloud beta ml jobs submit prediction` command to submit batch
    prediction job.
  + Google Cloud SQL
  * New arguments to beta sql instances create/patch commands for Cloud SQL
    Second Generation instances:
  * `--storage-size` Sets storage size in GB.
  * `--maintenance-release-channel` Sets production or preview channel for
    maintenance window.
  * `--maintenance-window-day` Sets day of week for maintenance window.
  * `--maintenance-window-hour` Sets hour of day for maintenance window.
  * `--maintenance-window-any` (patch only) Clears maintenance window
    setting.
- From version 126.0.0 (2016/09/14)
  + Breaking changes
  * The HTTP error messages for these command groups have changed to a common
    format:
  * `gcloud dns`
  * `gcloud genomics`
  * `gcloud logging`
    Some command groups have not changed yet. That should happen in the next
    release. You can use `--log-http` to see the details of all HTTP
    requests and responses on the standard error.
  + Google Compute Engine
  * Add `--connection-draining-timeout` flag to `gcloud compute
    backend-services {create,update}` commands.
  * Added `gcloud alpha compute instance-groups managed update-instances` and
    `stop-proactive-update-instances` commands.
  + Google Cloud Debugger
  * The `gcloud beta debug source gen-repo-info-file` command, which
    generates repository information files for the Stackdriver Debugger,
    is now available.
  + Google Container Registry
  * The `gcloud container images` command group is now available in the beta
    release track.
  + Cloud SDK
  * Added `core/custom_ca_certs_file` property to allow use of a custom CA
    certificate file.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON for
    the v1 API. This version of the emulator resolves the deserialization
    issues in 123.0.0.
- From version 125.0.0 (2016/09/07)
  + Google BigQuery
  * `gcloud alpha bigquery` is no longer available.  To use BigQuery, use
    the `bq` tool shipped with the Cloud SDK.
  + Google Compute Engine
  * Add support to change the default service account on a Compute Engine
    project (alpha release) via the following command:
    `gcloud alpha compute project-info set-default-service-account`
  * Support multiple network interface cards in
    `gcloud alpha compute instances create` command.
  * Add `gcloud alpha compute instances set-scopes` command.
  + Google Container Engine
  * Update kubectl to version 1.3.6.
  + Google Container Repository
  * Released bug fixes for docker-credential-gcr as v1.0.1, please rerun
    `docker-credential-gcr configure-docker` after updating.
  + Google Cloud Logging
  * `gcloud logging create` and `gcloud logging update` echo back the writer
    identity associated with the sink.
  + Google Cloud Dataflow
  * The Dataflow CLI is now in Beta.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager manifests describe` with no manifest
    specified will show the latest manifest of the given deployment.
  + Emulators
  * `gcloud beta emulators datastore start` now defaults to the new
    version of the emulator which supports Cloud Datastore API v1 and
    v1beta3 over gRPC, proto-over-HTTP, and JSON-over-HTTP.
- From version 124.0.0 (2016/08/31)
  + Breaking Changes
  * Creating a Global Backend Service in Compute Engine will warn you if
    you don't use --global. In the future this will be required.
  * Major changes were made to `gcloud alpha dataflow` commands. See
    Google Cloud Dataflow section for more information
  + Google App Engine
  * Added endpointscfg.py to the app-engine-python component.
  * Skipped modules during upload will now be logged at INFO level instead of
    WARN.
  + Google Cloud Dataflow
  * Changes to `gcloud alpha dataflow` commands:
  * Changed the `jobs list` command now has a "status" filter. This
    change is from the JobsV1B3 API. You can now use the API's filter
    request as either "all", "terminated", or "active".
  * Added the `logs list` command. This dumps the log messages created
    from the workflow. Please see the help docs for more information.
  * Renamed `metrics tail` to `metrics list`.
  * Renamed `metrics list` --origin flag to --source. This can be either
    "user" for custom-made aggregates or "service" otherwise. This
    defaults to "all".
  * Added `metrics list` --transform flag. This filters all metrics that
    prefix regex matches the argument.
  * Removed `jobs list` --job-name flag.
  * Added `jobs list` --uri flag.
  + Cloud Tools for Powershell
  * Add Google Cloud Sql and Google Cloud Dns powershell cmdlets.
  + Google Cloud Deployment Manager
  * `deployment-manager deployments create` with a template file will copy
    the outputs specified in the schema to the generated config file.
  + Google Cloud Functions
  * Add alpha  functions logs read command
  + Google Container Repository
  * docker-credential-gcr (GCR's Docker credential helper) has been added
    as an optional component for GCR customers running Docker client v1.11
    or newer. Run `gcloud components install docker-credential-gcr`
    followed by `docker-credential-gcr configure-docker` in order to
    configure Docker. You may then use Docker normally, without any gcloud
    interaction at all (e.g. `docker pull gcr.io/myproject/myimage`)
  + Google Container Engine
  * Update kubectl to version 1.3.5.
  + Google Compute Engine
  * Added `gcloud compute instances stop` --discard-local-ssd flag.
  * Added windows-sql-cloud project to the default public image list.
  + Cloud SDK
  * `gcloud config get-value` is now available in the BETA release track.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON
    for the v1 API.
  + Cloud SQL
  * New commands added to beta:
  * `gcloud beta sql backups create`
  * `gcloud beta sql backups create`
  * `gcloud beta sql instances failover`
  * New flags for `gcloud beta sql instances create`:
  * --failover-replica-name
  * --replica-type
  * --storage-auto-increase
  * --storage-type
  * New flags for `gcloud beta sql instances patch`:
  * --storage-auto-increase
  * --no-storage-auto-increase
- From version  122.0.0 (2016/08/24)
  + Google App Engine
  * The `gcloud beta app regions list` command is now available. It
    shows support for the standard and flexible environments for each
    geographical region.
  * `gcloud app versions describe` now shows more extensive information
    about the deployed version, including the container used for
    App Engine Flexible.
  * Built-in versions will no longer appear when listing App Engine
    versions (`gcloud app versions list`).
  + Cloud SDK
  * Users can now make logs garbage collection optional by changing the
    value of the `core/max_log_days` property to 0.
  * The `gsutil` component has been upgraded to version 4.21.
  + Google Cloud Machine Learning
  * Added `gcloud alpha ml jobs submit training` command to start a
    Cloud ML training job.
  + Google Compute Engine/Networking
  * `compute networks switch-mode` and `compute networks expand-ip-range`
    commands are now in beta.
  + Google Container Engine
  * Image Type selection for `gcloud container` commands is now GA.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager deployments` will now display `INTENT`
    when applicable.
  + Emulators
  * A bug causing the rejection of unpadded base64-encoded bytes data in the
    Pub/Sub emulator (INVALID_ARGUMENT: "Payload isn't valid for request")
    has been fixed.
- From version  122.0.0 (2016/08/17)
  + Google App Engine
  * Added `gcloud beta app instances describe`, which shows information
    about a running App Engine Flexible instance.
  * Add new flags to `gcloud alpha functions deploy`, hide flags that
    are being replaced with new flags, log a warning when someone uses
    a flag to be replaced:
  * *--bucket    * to be replaced by *--stage-bucket*.
  * *--source    * to be replaced by *--local-path
  * (for code in local file system)
  * --source-path    * (for code in Google Code Storage).
  * *--trigger-gs-uri    * to be replaced by *--trigger-bucket*.
  + Cloud SDK
  * `gcloud init` now has an opt-in for listing all user projects, which
    could be in the hundreds. The user can now to opt-in to see all projects,
    or they can just type in a known project.
  + Google Cloud Machine Learning
  * Add `gcloud alpha ml models versions` group to manage Cloud ML model
    versions.
  * Add `gcloud alpha ml models` group to manage Cloud ML models
  * Add `gcloud alpha ml jobs` group to manage Cloud ML training and
    prediction jobs.
  + Google Cloud Genomics
  * The `gcloud genomics pipelines run` command now uses the default Compute
    Engine zone property if the *--zones    * flag is not specified.
  + Google Cloud Pub/Sub
  * Fixed error handling bug in `gcloud beta pubsub subscriptions create`
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1017).
  + Google Compute Engine
  * Enable *--health-checks
  * flag for the `gcloud beta compute backend-services`
    `create` and `update` commands.
  + Google Container Builder
  * *RepoSource    * is now available as a source for builds.
  * *BuildSteps    * now respect arbitrary dependencies on each other
    as defined by the `waitFor` field.
  + Google Container Engine
  * Update kubectl to version 1.3.4.
- From version  121.0.0 (2016/08/10)
  + Google App Engine
  * Cloud SDK dev_appserver.py supports running App Engine Standard Go
    applications.
  * `gcloud app instances disable-debug` now deletes the instance rather
    than restarting it. New instance(s) may spawn based on the app's
    scaling settings.
  + Google Cloud Dataproc
  * Added the `--preemptible-worker-boot-disk-size` flag to
    `gcloud dataproc clusters create`.
  + Google Compute Engine
  * `gcloud compute backend-services` session affinity flags have been
    promoted from beta to GA.
  + Google Container Engine
  * Changed the `container/use_client_certificate` property default value to
    `false`. This makes the `gcloud container clusters create` and
    `gcloud container clusters get-credentials` commands configure
    `kubectl` to use Google OAuth2 credentials by default instead of the
    legacy client certificate.
  + Google Cloud Dataflow
  * Added the `gcloud alpha dataflow jobs drain` command. The `drain` command
    takes a streaming job and stops receiving new data from the sources. It
    then processes the buffered data. For more information please see the
    documentation for stopping a running pipeline at
    &lt;https://cloud.google.com/dataflow/pipelines/stopping-a-pipeline&gt;.
  + Google Cloud DNS
  * Fix for issue reported in:
    &lt;http://stackoverflow.com/questions/38636010/removing-dns-entries-with-gcloud&gt;.
  + Stackdriver Error Reporting
  * Added `gcloud beta error-reporting events report` command for reporting
    errors.
- From version  120.0.0 (2016/08/03)
  + Deployment Manager
  * `deployment-manager resources list` will show INTENT when the
    resource STATE is `IN_PREVIEW`.
  * `deployment-manager deployments describe` will show output values in
    addition to listing the resources.
  + Emulators
  * Added a `gcloud beta emulators bigtable env-init` command to export
    environment variables required to communicate with the bigtable emulator.
  * The PubSub emulator now correctly starts the push loops when creating
    a push subscription.
  + Google Cloud DNS
  * `gcloud dns` now supports CAA records.
  + Google Cloud Storage
  * Update gsutil component to 4.20.
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.20/CHANGES.md&gt;
  + Google Compute Engine/Networking
  * `gcloud alpha compute instance-groups managed wait-for-stable`
    command waits until all `current_action` fields are set to none and
    there are only no `pending_actions` in managed instance group.
  * `gcloud compute xpn` commands now available in the alpha release track.
    These commands configure cross-project networking.
  * `gcloud compute networks subnets {get,set}-iam-policy` commands now
    available in alpha.
  + Google Container Engine
  * Update kubectl to 1.3.3.
- From version  119.0.0 (2016/07/27)
  + Google BigQuery
  * Added support for dataset labels. See:
    &lt;https://cloud.google.com/bigquery/docs/labeling-datasets&gt; for more
    details.
  * Now sending progress output to stderr and query output to stdout.
    This fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=780&gt;.
  + Google Cloud SDK
  * `gcloud auth login` will stop writing application default credentials
    in a future release. See:
    &lt;https://developers.google.com/identity/protocols/application-default-credentials#toolcloudsdk&gt; for more information.
  * Command line flag abbreviations are now deprecated and produce warning
    messages. Flag abbreviations will be completely disabled in release
    130.0.0. This pre-empts the problem of future flag additions making
    some flag abbreviations ambiguous, possibly breaking scripts.
  + Google Cloud SQL
  * Added the `gcloud beta sql users` command group with commands that enable
    management of users on Cloud SQL instances.
  + Google Cloud Platform Projects
  * `gcloud alpha projects update` now support labels.
  + Google Container Engine
  * Added the `delete` command to the `gcloud alpha container images` command
    group.
- From version  118.0.0 (2016/07/20)
  + Emulators
  * There is a new `gcloud beta emulators start bigtable` command for
    starting a Cloud Bigtable emulator.
  + Google Compute Engine/Networking
  * `gcloud alpha compute backend-services` and `forwarding-rules` commands
    now support the internal load balancing scheme. Please use
    `--load-balancing-scheme=internal` flag when creating these resources.
    In addition `gcloud alpha compute forwarding-rules create` supports
    `--backend-service` flag to allow forwarding to internal load balancers.
  * Beta release of `compute connect-to-serial-port` command for
    Interactive Serial Console support. See
    http://cloud.google.com/compute/docs/instances/interacting-with-serial-console for details.
  + Google Container Engine
  * Bump kubectl from 1.2.4 to 1.2.5.
  + SQL
  * `gcloud beta sql instances create` supports new database type MYSQL_5_7.
  + Windows support
  * Beta launch of Google Cloud PowerShell. PowerShell cmdlets for managing
    Google Cloud Storage and Google Compute Engine.
    For more information see
    https://googlecloudplatform.github.io/google-cloud-powershell.
- From version  117.0.0 (2016/07/13)
  + Google Compute Engine
  * Regional Managed Instance Groups commands are now in beta.
  * `target-ssl-proxies` commands are now in beta.
  * Connection-based load balancing commands are now in beta.
  * Added `--connection-draining-timeout` flag to
    `gcloud beta compute backend-services` `create` and `update` commands.
  * `health-checks` command group is now in beta.
  + Google Container Engine
  * Local SSDs are now supported for clusters via the `--local-ssd-count`
    flag (in beta).
  * Added `--additional-zones` flag to `gcloud beta container clusters
    update`.
  + Google Container Builder
  * The `gcloud alpha container builds create` command now supports using
    JSON or YAML config files to configure builds, using the `--config` flag.
- From version  116.0.0 (2016/06/29)
  + Breaking Changes
  * `gcloud alpha dataflow list-messages` datetime values are now
    displayed in ISO 8601 format: 2015-01-15T12:31:07 ('T' separating the
    date and time components).
  + Google App Engine
  * The `gcloud app` surface is now available in the GA and beta release
    tracks. Please use `gcloud app` instead of `gcloud preview app`
    (some features only available in the beta release track).
  * Add `gcloud app open-console` command, which opens the App Engine
    dashboard in a web browser.
  + Google Cloud Datastore emulator
  * The Cloud Datastore emulator can accept an IPv6 address for the
    `--host-port` argument.
  * Cloud Datastore emulator no longer fails when trying to load an
    index.yaml file.
  + Google Container Builder
  * The `gcloud alpha container builds` command group creates and manages
    builds using the Google Container Builder service. See
    https://cloud.google.com/container-builder/docs/ for API documentation.
  + Google Cloud Dataproc
  * Added `--preemptible-worker-boot-disk-size` flag, which allows
    configuration of preemptible worker boot disk, to `gcloud beta dataproc
    clusters create`.
  + Google BigQuery
  * New query option in BQ client to specify a limit on bytes billed for the
    query.
  + Google Cloud Bigtable
  * Added `gcloud beta bigtable instances` group to manage Bigtable
    instances.
  * Added `gcloud beta bigtable clusters` group to manage Bigtable clusters
    within instances.
  * Known issue: `gcloud beta bigtable instances create` is an asynchronous
    operation by default and will not block with or without the `--async`
    flag.
- From version  115.0.0 (2016/06/22)
  + Breaking Changes
  * (Google Compute Engine) The `debian-7` and `debian-7-backports` image
    aliases have been removed, as Debian 7 has reached end-of-life
  * (Google Compute Engine) The `--port-range` flag in the `gcloud compute
    forwarding-rules create` command has been deprecated; please use the
    `--ports` flag instead. At this time only consecutive ports can be
    specified.
  * (Google Compute Engine) `gcloud alpha compute rolling-updates` commands
    have been deprecated and removed.
  * (Google Container Engine) The `--wait` flag for the `gcloud container
    clusters` command group is now deprecated; please use the `--async` flag
    instead.
  + Cloud SDK
  * Users will now be prompted to set Cloud SDK proxy properties if network
    issues are detected while running `gcloud init`.
  + Google Compute Engine
  * `gcloud compute backend-services {create,update} --enable-cdn` flag
    has been promoted from beta to GA.
  * `gcloud compute url-maps invalidate-cdn-cache` has been promoted
    from beta to GA.
  * The `--remote-traffic-selector` flag in `gcloud compute vpn-tunnels
    create`, which allows specifying a list of CIDR blocks to be used
    during IKE\IPsec traffic selectors negotiation, is now available in
    the GA release track.
  + Google App Engine
  * Add `gcloud preview app versions describe` command.
  + Deployment Manager
  * (beta only) deployment-manager now supports rollbacks with the
    `--manifest-id` flag: `gcloud beta deployment-manager deployments update
    deployment-name --manifest-id=MANIFEST-ID`
  + Docker
  * `gcloud docker` now respects the `$DOCKER_CONFIG` environment variable
  + Emulators
  * The Cloud Datastore emulator now has an `env-unset` command which
    prints the commands to unset any environment variables set by running
    the commands in the output of the `env-init` command.
- From version  114.0.0 (2016/06/15)
  + Breaking Changes
  * (Google Compute Engine) Deprecated the use of image aliases. Please use
    image families instead. See https://cloud.google.com/compute/docs/images
    for more details.
  * (Google App Engine) Removed the deprecated and unused `--force` flag for
    `gcloud app deploy`.
  * (Google Cloud Debugger) Removed `gcloud alpha debug` command group;
    debug commands are now accessible solely using `gcloud beta debug`.
  + Google Compute Engine
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine disks is now available in the GA release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for more details.
  * Added autocompletion for the URL map name in
    `gcloud compute url-maps invalidate-cdn-cache`.
  * Added `gcloud alpha compute networks switch-mode` command.
  * Added `gcloud alpha compute networks subnets expand-ip-range` command.
  * Added `--remote-traffic-selector` flag, which allows specifying a list
    of CIDR blocks to be used during IKE\IPsec traffic selectors
    negotiation, to `gcloud beta compute vpn-tunnels create`
  * Fixed `gcloud compute routes list` command to display vpn-tunnel as
    `NEXT_HOP`.
  + Google App Engine
  * Parallelized source file uploads in `gcloud preview app deploy` for
    increased speed. To revert to the old behavior in event of a problem,
    please run `gcloud config set app/num_file_upload_processes 1`
    and report an issue here:
    https://code.google.com/p/google-cloud-sdk/issues/list
  * Google App Engine components updated to 1.9.38.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added support for Managed VMs instances in
    `gcloud preview app instances enable-debug` and
    `gcloud preview app instances disable-debug`.
  + Docker
  * Fixed a bug where Windows users experienced docker authentication issues
    when the `%HOME%` variable was set and differed from `%USERPROFILE%`
  + Emulators
  * Fixed behavior of pub/sub emulator subscription topic names when their
    respective topics are deleted. They should now be set to
    `_deleted-topic_`.
- From version  113.0.0 (2016/06/08)
  + Cloud SDK
  * gcloud now uses Internet Explorer proxy configuration settings when on
    Windows, or MacOSX SystemConfiguration proxy settings on Mac, if the
    gcloud configurations `proxy/*` are not set.
  + Google Compute Engine
  * `gcloud compute ssh` no longer generates keys when invoked with
  - -plain flag.
  * `gcloud compute routers` is now GA.
  + Google Genomics
  * `gcloud genomics pipelines run` command supports passing "inputs" and
    "outputs" as repeated parameters.
- From version  112.0.0 (2016/06/01)
  + Cloud SDK
  * Updated error messages for `gcloud projects` surface.
  * `gcloud docker` commands now take less time to execute when the
    Docker client is not configured to use a credential helper.
  + Google App Engine
  * The `--docker-build` flag and related `app/docker_build` property,
    as well as `app/use_cloud_build` property have been deprecated and will
    be removed in a future release. By default, Docker images are built
    remotely using Google Container Builder. To perform a Docker build on
    a different host, you can run:
    docker build -t gcr.io/project/service.version .
    gcloud docker push gcr.io/project/service.version
    gcloud preview app deploy --image-url=project/service.version
  + Google Compute Engine
  * Added `--licenses` flag to `gcloud compute images create`.
  + Google Container Engine
  * Fixed bug where only 16-bit kubectl was installed on Windows.
    Now Installs 32 and 64-bit.
  + Google Genomics
  * `gcloud alpha genomics datasets/callsets` name argument is a flag,
    instead of positional.
  * `gcloud alpha genomics pipelines run` command now accepts "zones"
    command-line argument.
  * `gcloud alpha genomics datasets restore/update` and
    `variantsets delete/describe` now take string IDs instead of ints.
  + Deployment Manager
  * `gcloud deployment-manager deployments describe` output only reports
    errors once, includes status for resources, and includes more useful
    fields.
- From version  111.0.0 (2016/05/25)
  + Google App Engine
  * `gcloud docker` commands are now less verbose during the authentication
    operation.
  + Google Container Engine
  * `gcloud container clusters update` command now GA.
  * `gcloud container node-pools` commands are now GA.
  + Google Compute Engine
  * Enabled Strict Host Key Checking for SSH connections (after the first
    connection) to instances. Also adds a new flag to `gcloud compute ssh`
    called `--strict-host-key-checking` to control the StrictHostKeyChecking
    option.
  * Add support for customer-supplied encryption keys to `gcloud beta compute
    instances start`. (in beta track)
  * Implemented backend-service connection based balancing mode.
  + Google Service Registry
  * Launched `gcloud alpha service-registry`. (alpha track)
    Users will need to sign up
    (https://docs.google.com/forms/d/11SfJGB3LUGgT_aSMlVzWoJ0ec2fHKwk0J4e-zTNw0Bs/viewform?edit_requested=true)
    before enabling this API in their projects.
  + Deployment Manager
  * Added `gcloud alpha deployment-manager runtime-configs`. Alpha
    commands for Deployment Manager's Runtime Config API.
  + Emulators
  * Adds a `--legacy` flag to gcloud beta emulators datastore. The flag
    is set by default and maintains existing behavior with support for
    Cloud Datastore API v1beta2. Passing `--no-legacy` uses a new version
    of the Cloud Datastore Emulator which supports Cloud Datastore API
    v1beta3 over gRPC, JSON, and proto-over-HTTP. The default behavior of
    the legacy flag will change in a future release.
  + Organizations
  * Launched `gcloud alpha orgranizations`. (alpha track)
- From version  110.0.0 (2016/05/18)
  + Google IAM
  * The `gcloud iam` command group is now available in GA. The
    `gcloud beta iam` will still be available for several more releases.
  + Google App Engine
  * Fixed issue with the `--docker-build=local` flag in the
    `gcloud preview app deploy` command with docker version 1.10+. Note
    that local Docker builds with Docker version 1.11 will still fail when
    using the new Docker external credentials; please downgrade to the
    plain credential store.
    https://code.google.com/p/google-cloud-sdk/issues/detail?id=802
  + Google Container Engine
  * `gcloud beta container` commands (e.g. `container create`) now support
    specifying ImageTypes.
  * The `gcloud container clusters list` command now sorts the clusters
    based on zone and then on cluster name.
  * The `gcloud container clusters create` command now allows specifying
  - -max-nodes-per-pool (default 1000) to create multiple node pools for
    large clusters.
  + Google Compute Engine
  * The `gcloud compute backend-services` backend commands now support
  - -instance-group-zone and --instance-group-region to qualify instance
    group specifically. Before --zone, --region was used to qualify all
    resource arguments, where as now it is used to qualify backend service.
  + Google Genomics
  * The `genomics variantsets create` command now supports the --name and
  - -description flags.
  * The `genomics variantsets delete` command displays the name of the
    variant set before prompting the user to delete it.
  * The genomics `variantsets describe/list` commands display variant set
    names and descriptions.
  + Emulators
  * The Google Cloud Datastore emulator supports a new environment variable
    for client library configuration.
  * The Google Cloud Datastore emulator flag --store-on-disk has been fixed to
    accept a false value using --no-store-on-disk. Previously,
  - -store-on-disk=False could be specified but wasn't respected.
  + Debug
  * The `The gcloud debug` command group is now in Beta.
  + Misc.
  * The Cloud SDK Windows installer is now dual signed SHA1 and SHA256. The
    executable is signed with both authenticode and RFC3161 signatures.
  * The winkeygen.exe executable is also now dual signed, like above.
- From version  109.0.0 (2016/05/11)
  + Google App Engine
  * Google App Engine components updated to 1.9.37.
  * Please visit the following release notes for details:
  * Python -
    https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed issue with failed uploads in gcloud preview app-deploy
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=784).
  * Deprecated --server flag for app commands; its use is unsupported.
  + Google Compute Engine
  * Removed the `gcloud alpha compute autoscaler` command group.
  * Removed deprecated `gcloud compute backend-services add-backend` --group
    flag in favor of --instance-group.
  * `gcloud compute copy-files` now exits with the return code of the called
    `scp` process.
  * Added support for customer-supplied encryption keys to the
    `gcloud beta compute disks snapshot` command.
  * Remove google-containers from default gcloud public image project.
  + Google Container Engine
  * Fixed bug listing clusters with no node pools.
  * `gcloud container resize` command now supports multi-zone clusters.
  + Google Error Reporting
  * Added the `gcloud beta error-reporting events delete` command to cleanup
    Stackdriver Error Reporting data.
- From version  108.0.0 (2016/05/04)
  + Breaking Changes
  * The `gcloud preview app modules get-logs` command is now deprecated.
    Please use the new command `gcloud preview app logs read` instead.
  + Google App Engine
  * Fixed a bug which caused `gcloud preview app deploy` to fail when run
    from a git directory.
  + Google Cloud SDK
  * Deprecated user property files (~/.config/gcloud/properties) will
    no longer be read by gcloud.  If you are not already using
    `configurations`, your properties will be automatically migrated for
    you.  No action is required on your part.
  * The `--format` flag now supports four more transforms: `extract`, `join`,
    `slice`, and `split`.
  + Google Cloud Debugger
  * Added the `gcloud alpha debug snapshots wait` command.
  + Google Compute Engine
  * The `gcloud alpha compute instance-groups managed list-instances` command
    output now includes the `INSTANCE_TEMPLATE` and `STATUS` columns.
  + Google Container Engine
  * Update kubectl to v1.2.3
  + Google Genomics
  * `gcloud alpha genomics variants describe/delete/update` commands now
    accept non-integer variant IDs.
- From version  107.0.0 (2016/04/27)
  + Google Compute Engine
  * Enable cursor ("start") support for get-serial-port-output in Beta.
  * Add tail-serial-port-output in Beta.
  * Image families are now in General Availability (GA).
  + Google App Engine
  * Google App Engine components updated to 1.9.36.
  * Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Deployment Manager
  * Creating and updating Deployments will now display output values
    in addition to listing the resources.
  + Google Container Engine
  * `gcloud container clusters resize` now allows specifying a node pool.
  + Cloud Debugger
  * Added `gcloud alpha debug` command surface to allow control of the
    Cloud Debugger from the command line.
  + Google BigQuery
  * BQ support for partitioned tables.
- From version  106.0.0 (2016/04/20)
  + Breaking Changes
  * Python 2.6 support in the Cloud SDK is deprecated and releases will stop
    supporting Python 2.6 on September 1, 2016.  Please update your Python
    installation to 2.7 to ensure compatibility with future Cloud SDK
    versions.
  * `gcloud preview app modules` commands are now deprecated (see "Google App
    Engine" section for more details).
  * `module` parameter in application .yaml files is now deprecated
    (see "Google App Engine" section for more details).
  * `--format` printer legend attributes are now deprecated (see "Cloud SDK"
    section for more details).
  + Cloud SDK
  * The --format printer legend attributes are deprecated and will be
    removed in release 124.0.0. The legend attribute docs have been removed.
  * The gcloud compute, functions, genomics, logging, and projects list
    commands now  support the `--filter` flag.
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.19/CHANGES.md)
  + Google App Engine
  * App Engine "modules" are being renamed to "services".
  * The `gcloud preview app modules` commands are now deprecated (except
    `gcloud preview app modules get-logs`). Please use the just-added
    `gcloud preview app versions`, `gcloud preview app services`, and
    `gcloud preview app instances` commands instead.
  * The 'module' parameter in application .yaml files is deprecated; please
    use 'service' instead.
  * Fixed `MaxRetrialsException` for `gcloud preview app deploy` of standard
    (not MVM or flexible) App Engine apps with `.git` directory present
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=727&gt;).
  * Fixed bug in `gcloud preview app deploy` where `--docker-build=local`
    did not work when `app/use_cloud_build` was enabled.
  + Google Compute Engine
  * Add `--no-creation-retries` flag to `compute instance-groups managed
    resize` command in alpha and beta.
  + Google Container Engine
  * Fix bug that caused kubectl component to be missing from components
    list on Windows.
  * `gcloud container clusters create` now allows specifying multiple zones
    within a region for your cluster's nodes to be created in.
  * Update kubectl to v1.2.2
- From version  105.0.0 (2016/04/13)
  + Breaking Changes
  * `health-checks` commands for protocol HTTP2 have been removed.
  * Rename the `alpha compute url-maps` `invalidate-cache` and
    `list-cache-invalidations` subcommands to `invalidate-cdn-cache` and
    `list-cdn-cache-invalidations`, respectively.
  + Cloud SDK
  * Suppress progress tracker animations if not outputting to a terminal.
  * `gcloud components list` now supports the `--filter` flag and queries
    like:
    `gcloud components list --filter=id:app-engine-java
  - -format="value(state.name)"`
  + Google Compute Engine
  * Promote Cloud CDN functionality from alpha to beta.
  + Google App Engine
  * File uploads during gcloud preview app deploy have been improved. If
    you have any trouble, you can revert to the old behavior with
    `gcloud config set app/use_gsutil true`.
- From version  104.0.0 (2016/04/06)
  + Cloud SDK
  * `gcloud init` no longer offers to clone
    [Google Cloud Repositories]
    (https://cloud.google.com/source-repositories/docs/).
    Please use `gcloud source repos clone` at any time after running
    `gcloud init`.
  + Google Compute Engine
  * `gcloud beta compute` commands now support image families.
  + Google App Engine
  * Users of `gcloud preview app deploy` can set the timeout for the
    Container Builder service using the app/cloud_build_timeout
    property.
  + Google Container Engine
  * kubectl component is now available for Windows (64-bit only).
  * `gcloud alpha container clusters update` now allows enabling/disabling
    addons for Container Engine clusters via `--update-addons` flag.
  * `gcloud container clusters create` now supports disabling
    HPA and Ingress controller addons via `--disable-addons` flag.
  + Google Genomics
  * `gcloud alpha genomics variants import` now supports configurable variant
    info field merging via the info_merge_config command line flag.
- From version  103.0.0 (2016/03/30)
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.18/CHANGES.md)
  + Google App Engine
  * Add fingerprinting support for PHP applications. You can now run
    `gcloud preview app gen-config` to auto-generate the necessary
    configuration for deploying PHP applications to the App Engine
    Flexible Environment.
  + Google Container Engine
  * gcloud container clusters create|get-credentials will warn/error
    respectively if the HOME env var isn't set. The variable
    is required to store kubectl credentials (kubeconfig).
  + Google Compute Engine
  * Enable support for: gcloud compute disks resize.
- From version  102.0.0 (2016/03/22)
  + Breaking Changes
  * The `gcloud alpha container nodepools` commands have been renamed to
    `node-pools`. Functionality and parameters haven't changed.
  * `gcloud beta iam list-grantable-roles` now returns a list of roles
    instead of a dictionary with a single key 'roles' with the value of
    a list of roles.
  * `gcloud config configuration describe` output has changed to include the
    configuration `name` and `is_active` fields. All configuration
    properties are now part of the `properties` field.
  + Cloud SDK
  * --format=json and --format=yaml now list resource attributes with
    null values.
  + Google App Engine
  * Use of the Google Container Builder service is now enabled by default for
    all managed VMs deployments.
    This change may require you to enable the Container Builder API. Visit
    https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=*PROJECT_ID*;
    to enable it, where *PROJECT_ID    * is your current project ID.
  * Updated Google App Engine components to 1.9.34.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Google Compute Engine
  * Added `gcloud compute backend-services` session affinity commands.
  * Added `gcloud compute http-health-checks` and `https-health-checks`
    commands.
  * Added `gcloud alpha compute target-ssl-proxies` commands.
  * Extended `gcloud compute forwarding-rules` to support
    `target-ssl-proxies`.
  + Google Container Engine
  * `gcloud container clusters list` will output a warning if there
    were zones for which it could not retrieve results.
  * Updated kubectl to version 1.2.0.
- From version  101.0.0 (2016/03/16)
  + Billing
  * Added [`gcloud alpha billing`]
    (https://cloud.google.com/sdk/gcloud/reference/alpha/billing/)
    command surface.
  + Google App Engine
  * App Engine components updated to 1.9.34. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for the
    Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
    for the Java release notes.
  + Google BigQuery
  * Updated the `bq` tool to version v2.0.24. Also includes fix for
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=632&gt;.
- From version  100.0.0 (2016/03/09)
  + Breaking Changes
  * `gcloud preview app deploy` deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the previous behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  + Cloud SDK
  * Providing no argument for list- and dict-type flags now results in a
    warning. Instead, please explicitly provide an empty string value. For
    instance, `gcloud command --flag` becomes `gcloud command --flag ''`
    (for list- and dict-type flags only).
  + IAM
  * Added `gcloud beta iam list-grantable-roles` command for given
    cloud resource.
  + Google App Engine
  * Fixed `WindowsError: [Error 32]` in the `gcloud preview app deploy`
    command on Windows. Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=554&gt;.
  + Google Container Engine
  * Added node pool support to enable heterogeneous clusters (alpha).
- From version  99.0.0 (2016/3/2)
  + Breaking Changes
  * Support for the deprecated workspace configurations feature has been
    removed. If you are using gcloud in a workspace, those properties will
    no longer be read.  See `gcloud topic configurations` for information
    on how to use configurations instead.
  + Cloud SDK
  * Enable gcloud to run in Cygwin 64 bit environments.
  * Fail gracefully on unreadable Google Compute Engine credential file.
    Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=460&gt;.
  + Google App Engine
  * App Engine components updated to 1.9.33. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for
    the Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt; for the Java
    release notes.
  * Added `gcloud preview app browse` command.
  * Fixed a race condition that caused errors while deploying App Engine
    Managed VM applications.
  * Fixed a TLS-related error during gcloud preview app deploy. Alleviates
    the problem in
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=559&gt;.
  + Google Compute Engine
  * `routers` surface moved to beta and is now accessible via
    `gcloud beta compute routers`
  + Google Cloud Dataproc
  * Add `--subnet` flag to `gcloud dataproc clusters create`.
  + Google Cloud Genomics
  * `genomics alpha operations cancel` assumes the `operations/` prefix
    if not present.
  + Google Cloud Storage
  * Update gsutil component to 4.17
- From version  98.0.0 (2016/2/24)
  * Release 95.0.0 introduced a bug that generated corrupt keys for
    Windows gcloud compute ssh|copy-files. Any keys generated on Windows
    between 95.0.0 and 97.0.0 inclusive are rejected by ssh servers.
    `gcloud compute` has been changed to:
  * Fix the winkeygen Windows key generator.
  * Recognize corrupt Windows keys and automatically regenerate them.
  * Fixed
    [#538](https://code.google.com/p/google-cloud-sdk/issues/detail?id=538).
    Users should no longer get "gsutil ImportError: No module named google"
    errors.
  + Google App Engine
  * MySqldb "latest" version changed from 1.24b4 to 1.2.5.
  + Emulators
  * Improves Pub/Sub emulator's ability to handle requests concurrent with
    HTTP pull requests.
  * The Pub/Sub emulator attempts to detect and inform users when an
    unsupported API version is used.
  * The Pub/Sub emulator now correctly handles absolute URIs in HTTP/Json
    requests.
  + Windows support
  * Google Cloud SDK no longer needs Python installed when using the Windows
    Installer. The SDK for Windows comes with Python bundled.
- From version  97.0.0 (2016/2/17)
  + Breaking Changes
    `gcloud alpha compute routers` now requires manual configuration of
    interfaces
  + Google Compute Engine
  * Added flag `--advertised-route-priority` to `gcloud alpha compute
    routers create`
  * Added support for regional instance groups in alpha
  + Google App Engine
  * Ruby runtime now uses the Rack "deployment" environment, instead
    of "none"
  + Google Container Engine
  * Added `--master` flag to `gcloud container clusters upgrade`
- From version  96.0.0 (2016/2/10)
  + Google App Engine
  * Google App Engine components updated to 1.9.32. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * The `gcloud preview app gen-config` command now offers to
    automatically update the runtime field in app.yaml if necessary.
  + IAM
  * The `gcloud beta iam` command group has launched.
  + Emulators
  * The Pub/Sub emulator now supports Gzip-encoded requests.
  + Google Compute Engine
  * The gcloud compute copy-files|scp commands on Windows now treat path
    arguments with a drive prefix as local files.
  + Configurations
  * The `config configurations delete` command now takes multiple
    configuration names.
  + Containers
  * kubectl is updated to v1.1.7.
  * Bugfix on the `gcloud container clusters get-credentials` when run
    from a client without edit permissions.
  + Misc. Changes
  * The default floating point output format precision is 6. Exponent
    notation is used for abs(n) &lt; 1e-04 and abs(n) &gt;= 1e+09.
  * The arrow and page up/down/home/end keys now work in the Windows help
    pager.
- From version  95.0.0 (2016/2/3)
  + Breaking Changes
  * Use `gcloud compute networks create --mode=legacy` to create non-subnet
    networks.
  + Google Compute Engine
  * `gcloud compute copy-files` and `gcloud compute ssh` on Windows now use
    standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone
    winkeygen.exe generates PuTTY and ssh compatible keys. The Windows
    PuTTY executables are up to date at version 0.66.
  + Google Compute Engine subnets
  * Added `gcloud compute networks subnets`.
  * Added `--mode` flag to `gcloud compute networks create`.
  * Added `--subnet` flag to `gcloud compute instances create` and
    `gcloud compute instance-templates create`.
  * Added `--local-traffic-selector` flag to `gcloud compute vpn-tunnels
    create`.
  + Google App Engine
  * Added support for streaming logs when the `use_cloud_build=1` property
    is set.
  * Moved the nodejs install script into the docker image.
  + Projects
  * `gcloud projects update|undelete|delete` have been moved to beta.
  + gcloud --format
  * Added nested table formatting by
    `--format="table(field1,listField2:format=FORMAT-STRING)"` where
    _FORMAT-STRING_ can be any format (json, table, ...).
    Try: `gcloud compute instances list
  - -format="table[box](name, disks:format='table[no-heading]
    (deviceName:sort=1, kind)')"`
  * Added list field aggregation formatting (similar to nested formatting) by
    `--format="table(listField2:format=FORMAT-STRING)"`. When the main table
    has no columns each nested format is aggregated into a single list.
    Try: `gcloud compute instances list
  - -format="table(disks:format='table[box](deviceName:sort=1, kind)')"`
- From version  94.0.0 (2016/1/27)
  + Google Compute Engine
  * Added `gcloud alpha compute url-maps list-cache-invalidations` command.
  + Google App Engine
  * Google App Engine components updated to 1.9.31. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added `--runtime` flag to `gcloud preview app gen-config` to specify
    a runtime when a directory identifies as multiple runtimes. This flag
    can be used in conjunction with `--custom`.
  + Google Container Engine
  * `gcloud container cluster describe` and `list` commands now notify
    the user when their cluster versions are about to go out of support or
    are unsupported.
  + Google Cloud Logging
  * `gcloud beta logging write` and `gcloud beta logging logs delete`
    commands now use the V2beta1 API. The `gcloud beta logging write`
    command now uses the global resource descriptor (which translates to
    "custom.googleapis.com" service in V1).
  + Cloud Dataproc
  * `gcloud beta dataproc clusters create` now supports `--tags` and
    `--metadata` flags to set instance tags and metadata on all instances
    in the Dataproc cluster.
  + PubSub Emulator
  * A new --host flag can be used to specify the address the emulator
    should bind as. The flag can be left unspecified, set to "localhost",
    a hostname, or an explicit IP address.
  + Projects
  * Added commands `get-iam-policy`, `set-iam-policy`,
    `add-iam-policy-binding`, and `remove-iam-policy-binding` for the
    `gcloud beta projects` surface.
  * Added the `gcloud projects list` command that can be used to list
    projects.
- From version  93.0.0 (2016/1/20)
  * kubectrl upgraded to 1.1.4.
  * `gcloud beta dataproc cluster create` now supports `--properties` flag
    to set properties for installed packages.
  * Datastore emulator's `DATASTORE_LOCAL_HOST` environment variable
    changed to `DATASTORE_EMULATOR_HOST`.
  * `gcloud source repos clone` now supports `--dry-run` flag to show
    equivalent git command.
- From version  92.0.0 (2016/1/13)
  * Because of the rollback of 91.0.0, this release contains all of the
    changes from 91.0.0 in addition to the changes listed below.
  + Breaking Changes
  * `gcloud preview app deploy`
  * Changed deployments to set the deployed versions to receive all
    traffic for their modules by default.
    To keep the old behavior (traffic split remains the same), use the
    `--no-promote` flag or run
    `gcloud config set app/promote_by_default true`.
    Note that your old versions are still running, and must be stopped
    manually. This behavior will change in a future release.
  * Removed deprecated `--set-default` flag.  Please use `--promote`
    instead.
  * `gcloud preview app deploy`: Removed deprecated `--env-vars` flag.
  * The output of the `gcloud preview app modules list` command has been
    changed to include the traffic split percentage instead of the 'default
    version' field.
  * Removed deprecated `gcloud preview app modules cancel-deployment`
    command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app modules download` command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app run` command. Please use
    `dev_appserver.py` instead.
  * Changed behavior of the `--zone`/`-z` flag in the
    `gcloud dns record-sets` command group. This flag can no longer precede
    the command. For instance,
    `gcloud dns record-sets -z=mz list` will not work, but
    `gcloud dns record-sets list -z=mz` will.
  * Changed `--password-file` option for `sql instances set-root-password`;
    password now does not include trailing newline from password file. This
    matches the documented behavior, but not the previous behavior.
    (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419)
  * Removed `meta/active_configuration` from the results of
    `gcloud config list` since it is not a property that can be set. You
    can continue to use the `gcloud config configurations` commands to
    view and manage your configurations.
  + Cloud SDK
  * Added `gcloud config` proxy settings. Users can configure `gcloud` to
    use a proxy via the following settings:
  * `gcloud config proxy/address`
  * `gcloud config proxy/password`
  * `gcloud config proxy/port`
  * `gcloud config proxy/type`
  * `gcloud config proxy/username`
  * Added `alpha` and `beta` components to Debian packages.
  * Removed unused config properties: `app/hosted_registry`, `app/host`,
    `app/admin_host`, `app/api_host`.
  + Google Cloud Logging
  * Migrated to
    [v2beta1](https://cloud.google.com/logging/docs/api/introduction_v2) API
    release.
  * Moved `gcloud beta logging sinks` commands to `v2beta1`.
  * Added `gcloud beta logging resource-descriptors` command to display
    supported resources from various services.
  * Added `gcloud beta logging read` command to retrieve log entries
    using filters.
  + Google Container Engine
  * Added `gcloud container clusters resize` for resizing Container Engine
    clusters.
  * Added notifications when node upgrades are available to `gcloud container
    cluster describe` and `list` commands.
  + Google App Engine
  * Fixed bug where initial deployments using `--image-url` failed.
  * Changed `gcloud preview app modules set_default` command to use the App
    Engine Admin API.
  * Changed `gcloud preview app modules list` command to use the App Engine
    Admin API.
- From version  91.0.1 (2015/12/16)
  * The Cloud SDK has been rolled back to 90.0.0.
- From version  91.0.0 (2015/12/16)
  + Breaking Changes
  * Deprecated command group `gcloud compute replica-pools` has been removed.
  * Deprecated command group `gcloud compute resource-views` has been removed.
  * App Engine API is now the only supported method for deploying in the
    `gcloud preview app deploy` command.
  + Google App Engine
  * `DEPLOYABLES` argument for `gcloud preview app deploy` is now
    optional. If not given, the command defaults to `app.yaml` in the
    current directory; if that is not found, it attempts to automatically
    generate necessary configuration files (such as app.yaml) in the
    current directory before deployment.
  * `--force` argument to `gcloud preview app deploy` is now deprecated
    and will be removed in a future release.
  + Container
  * `gcloud container` commands that poll long running operations
    (e.g create, delete, upgrade) now display progress details when
    available.
- From version  90.0.0 (2015/12/09)
  * Cloud SDK release version scheme has changed. Patch version is now
    treated as a major release version which corresponds to SDK weekly
    releases. Any updates/fixes to released version will increment
    minor/patch version number going forward.
  + Breaking Changes
  * The deprecated flag --clear-target-pool has been removed from
    `gcloud compute instance-groups managed set-target-pools` command.
  + Google App Engine
  * Components updated to 1.9.30.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed a bug caused by uploading invalid file names for vm: true
    applications.
  + Compute
  * Subnetwork support has been promoted from alpha to beta. For more
    information see https://cloud.google.com/compute/docs/subnetworks.
- From version  0.9.89 (2015/12/02)
  + Breaking Changes
  * Removed flag `--container-ipv4-cidr` for
    `gcloud container clusters create`; please use `--cluster-ipv4-cidr`
    instead.
  * Renamed `gcloud alpha compute vpn-tunnels create --ike-networks` to
    `--local-traffic-selector`.
  * `gcloud alpha compute resource-views` commands will soon be removed.
    Please use `gcloud compute instance-groups unmanaged` commands instead.
  * `gcloud alpha compute replica-pools` commands will soon be removed.
    Please use `gcloud compute instance-groups` commands instead.
  + `gcloud` Core
  * Changed behavior of `gcloud init` git repository clone option. It now
    takes as input a path to the destination directory for the repository,
    rather than the parent directory of the repository destination.
  + BigQuery
  * Fixed failure in `gcloud alpha biquery query
    "select     * from ..."` command while displaying query results.
  + Compute
  * Fixed `gcloud alpha compute instances set-machine-type` failure when
    supplying custom cpu/custom memory, but no zone.
  * Added a new scope alias for Cloud Monitoring: `monitoring-write`. This
    scope is on by default in all new VMs.
  + Google Cloud DNS
  * Added `--replace-origin-ns` flag to `gcloud dns record-sets import`
    command to allow importing NS records.
  + Google Cloud Storage
  * Updated `gsutil` component to 4.16.
  + Google Container Engine
  * Updated kubectl to version 1.1.2.
  * Increased `gcloud container clusters create/delete` timeouts from 20m to
    30m.
  * Added `--subnetwork` flag to `gcloud container clusters create` to
    allow creation of container clusters can now be created in a Google
    Compute Engine subnetwork
    (https://cloud.google.com/compute/docs/subnetworks).
- From version  0.9.88 (2015/11/25)
  + Breaking Changes
  * The `gcloud preview app run` command has now been removed. Please use
    the bundled `dev_appserver.py` script directly instead.
  * App Engine: The 'version' and 'application' fields in module and
    configuration files are now illegal. Project name should instead be
    specified either by `gcloud config set project MY_PROJECT` or by
    setting the `--project` flag on individual command executions. Versions
    are generated automatically by default but can also be manually
    specified by setting the `--version` flag on individual command
    executions.
  + App Engine
  * Don't do runtime identification for custom runtimes during deploy. This
    fixes issue [#387]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=387).
  * The `dev_appserver.py` script no longer requires the installation of
    all App Engine components. It will install only the necessary ones at
    run time. Fixes [#273]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=273)
  + Core
  * Added the `gcloud components install` command.  This allows you to
    install missing components at the version of the SDK you currently have
    (it does not update your SDK installation).  `gcloud components update`
    should now only be used to update your SDK to the latest version.
  * Fixes [#293]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=293)
    related SSL certificate validation issues.
  * Use zsh builtins in path.zsh.inc for faster/cleaner shell startup.</changelog>

</package>
<package pkgid="576f782657e91c2df7472648ffc7f3b6d87d1b1d280d8463c579972c47714956" name="google-cloud-sdk" arch="noarch">
    <version epoch="0" ver="140.0.0" rel="13.1"/>

<changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
<changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
<changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
<changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
<changelog author="rschweikert@suse.com" date="1394107200">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107201">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107202">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
<changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
<changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
<changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
<changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
<changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
<changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
<changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
<changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Update to version 140.0.0 (2017/01/18)  (bsc#1002895,bsc#1008328)
  + Remove hidePathMangeling.patch
  + Add gcsdk-gsutil-hide-deps.patch
  + Add gcsdk-gsutil-no-self-update-check.patch
  + Add gcsdk-gsutil-use-system-certs.patch
  + Add gcsdk-no-batch-limit.patch
  + Add gcsdk-no-http-no-tunnel-proxt.patch
  + Add gcsdk-bq-hide-deps.patch
  + Remove disableSelfUpdate.patch, disabled by default from upstream
  + Cloud SDK
  * `gcloud alpha search-help` is now available in alpha.
    Run `gcloud alpha search-help [TERM]` to find gcloud commands whose
    help text contains [TERM].
  + Google Cloud ML
  * `gcloud ml jobs submit training` now supports packages already in Google
    Cloud Storage via the `--packages` flag.
  + Google Cloud Datalab
  * Upgrade the Datalab CLI to the 20170110 build.
  + Google Cloud Debugger
  * The `gcloud debug` command group is now available in GA.
  + Google Container Registry
  * An issue that affected Docker client version parsing during
    `docker-credential-gcr configure-docker` has been fixed.
  + Google Cloud Deployment Manager
  * 'deployment-manager deployments update' can update deployments with a new
    description using --description flag.
  + Emulators
  * The pubsub emulator now accepts web-safe Base64 encoded data.
- From version 139.0.1 (2017/01/12)
  * Fixed crash in `gcloud dataproc clusters create`
  * https://code.google.com/p/google-cloud-sdk/issues/detail?id=1464
- From version 139.0.0 (2017/01/11)
  + Breaking Changes
  * (Google Cloud Logging) The default value of the `--unique-writer-identity`
    flag to `gcloud beta logging sinks create` and
    `gcloud beta logging sinks update` is now true. Please consult the
    documentation before using these commands.
  * (Google Cloud Logging) Remove 'struct' option from `gcloud logging write`.
    Use 'json' instead
  * (Google Cloud Logging) `logging beta metrics create` and
    `logging beta metrics update` commands have changed their flags and
    importantly now use Logging V2 filter syntax. See the help for more
    information.
  * (Google App Engine) Flexible deployments now skip files matching
    `node_modules` and `.git` by default, but no longer skip other hidden
    files by default. Standard deployments are not changing.
  * (Google Compute Engine)
    `gcloud compute target-pools set-backup --backup-pool` and
    `gcloud compute project-info set-usage-bucket --bucket` flags now warn
    if you provide an empty argument; use `--no-backup-pool` and
    `--no-bucket instead`.
  * (Google Cloud Bigtable) Removed `gcloud alpha bigtable` command group;
    please use `gcloud beta bigtable` for all Cloud Bigtable operations.
  * (Stackdriver Debugger) Added a `--location` option to several
    `gcloud beta debug` commands, to separate out the processing of resource
    IDs from filename patterns. These commands now take only resource IDs as
    positional parameters.
  + Google Cloud Datalab
  * Added the command-line tool for Google Cloud Datalab in the Cloud SDK;
    call it via the `datalab` script.
  + Google Cloud Key Management Service
  * Added the `gcloud beta kms` commands for key management.
  + Google Cloud Logging
  * Add `--billing-account` flag to `gcloud logging read`
  * gcloud beta logging metrics list/describe now output the version of the
    filter associated with the metric
  + Google Cloud ML
  * The `gcloud beta ml jobs submit training` now takes a `--scale-tier` flag.
  * Support gzipped TFRecord file type for
    `gcloud beta ml jobs submit prediction`.
  + Google App Engine
  * (Google App Engine) Fixed bug with `gcloud app instances describe`.
  - -service and --version flags are now required.
  * `gcloud beta app deploy` now uses multi-threading rather than
    multi-processing for file uploads; if you've been seeing issues on
    Windows, please try the `beta` command out.
  * `gcloud app versions migrate` is now GA.
  * `gcloud app instances delete` is now GA.
  * Added `gcloud beta app operations` commands.
  * Added `gcloud beta app instances delete` command.
  + Google Compute Engine
  * `gcloud beta compute images create` now has a `--guest-os-features`
    flag for enabling specific OS supported features.
  * Use the new scopes format (see `--help` for deetails) for
  - `gcloud alpha compute instances create`
  - `gcloud alpha compute instances create-from-container`
  - `gcloud alpha compute instance-templates create`
  - `gcloud alpha compute instance-templates create-from-container`
  - `gcloud beta compute instances create`
  - `gcloud beta compute instance-templates create`
  * Add `--custom-extensions` flag to:
    `gcloud alpha compute instances create`,
    `gcloud alpha compute instances set-machine-type`, and
    `gcloud alpha compute instance-templates create`
  + Google Compute Engine (Networking)
  * The `--host` flag for `gcloud alpha compute url-maps
    invalidate-cdn-cache` is now available in the GA version of the command.
  + Stackdriver Debugger
  * Fixed log view URLs in the debug logpoints commands to use the V2 query
    syntax.
  + Google Service Management
  * `--validate-only` flag added to `gcloud service-management deploy` command
  + Google Cloud Functions
  * The `--trigger-params` flag has been renamed to `--trigger-path`
    (the `path=` specifier is no longer necessary). The old flag has been
    deprecated and will be removed or `gcloud alpha functions deploy`.
  * Restore `gcloud alpha functions get-logs` command.
  * Restore deprecated flags `--trigger-topic`, `--trigger-bucket`,
    `--source`, `--bucket`, and `--trigger-gs-uri` to `gcloud alpha
    functions deploy` command.
  + Google Container Engine
  * Update Google Container Engine's kubectl from version 1.4.6 to 1.5.1.
  + Google Cloud Bigtable
  * The `cbt` command line tool component is now available. See:
    https://cloud.google.com/bigtable/docs/go/cbt-reference
  + Google Cloud Datastore
  * `gcloud datastore create-indexes` and `cleanup-indexes` are now GA
  + Google Container Registry
  * `docker-credential-gcr` has been upgraded to v1.3 and now supports Docker
    client v1.14 credential helpers. `docker-credential-gcr` will now
    preferentially act as a credential helper (as opposed to credential
    store) on Docker client versions 1.14+. Update (or install) the
    `docker-credential-gcr` component and run `docker-credential-gcr
    configure-docker` to configure your Docker client to use
    `docker-credential-gcr` to authenticate operations on your GCR
    repositories.
  + Google Cloud Deployment Manager
  * Added labels support to the
    `gcloud alpha deployment-manager deployments create` and `update` commands
    (via the `--labels` and `--{update,remove}-labels` flags respectively).
  * Introduce new syntax `key:val,foo:bar` for `--properties` flag in all
    `gcloud deployment-manager` commands. The old `key=val,foo=bar` syntax is
    deprecated.
- From version 138.0.0 (2016/12/14)
  + Cloud SDK
  * Introduce --(no-)force-key-file-overwrite flags to all gcloud commands
    using SSH key files. These new flags control overwrite behavior when
    SSH key files are broken. Without these flags, interactive sessions will
    ask for confirmation before regenerating key files. Old non-interactive
    behavior (permissive) is deprecated and will be removed in 6 months. To
    preserve old behavior in your scripts, use new flag
  - -force-key-file-overwrite (though this is discouraged).
  * Credential store format for service accounts has changed. Your
    credentials will get auto-upgraded to new format upon usage; however, if
    gcloud is downgraded to previous version those credentials will not be
    usable and users will have to reactivate their service account.
  + Google Cloud ML
  * `gcloud beta ml jobs submit training` is now blocking by default. Use the
    `--async` flag to finish immediately after job submission.
  + Google Compute Engine
  * `gcloud compute instances create` creates instance with no scopes by
    default if project has no default service account.
  * `compute target-ssl-proxies list` deprecated `--regex` and names argument.
    Please use `--filter` flag instead.
  * `gcloud compute connect-to-serial-port` allows for interactive
    connections to the serial port for instances.
  * Promote `compute instances set-scopes` command from alpha to beta.
  + Google App Engine
  * Java SDK updated to 1.9.48. For more details, please see
    https://cloud.google.com/appengine/docs/java/release-notes
  * Python SDK updated to 1.9.49. For more details, please see
    https://cloud.google.com/appengine/docs/python/release-notes
  * `gcloud app describe` is now GA.
  * Added `gcloud beta app instances delete`, which deletes a specific
    App Engine instance.
  * Added `gcloud beta app versions migrate`.
  * Added support for `env: flex` (Flexible Environment) instances to
    `gcloud app instances enable-debug` and `gcloud app instances disable-debug`.
  * Added support for skip_files in Flexible Environment deployments.
  + Google Container Engine
  * Users can create clusters/nodepools with node autoupgrade enabled in
    Beta by adding `--enable-auto-upgrade`. Please refer to
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * node-pool upgrades can now be rolled back using the
    `gcloud alpha container node-pools rollback &lt;pool-name&gt;` command.
    See `gcloud alpha container node-pools rollback --help` for more details.
  + Google Cloud Container Builder
  * Container Builder timeouts are now unlimited (with a default of ten
    minutes), and can be specified with the --timeout flag.
  + Google Cloud Dataflow
  * The `gcloud dataflow jobs` command group now has the following commands
    in GA: cancel, describe, drain, list, show
  + Google Cloud Functions
  * Remove `gcloud alpha functions get-logs` command.
  * Remove deprecated flags --trigger-topic --trigger-bucket --source --bucket
  - -trigger-gs-uri from `gcloud alpha functions deploy` command.
- From version 137.0.1 (2016/12/08)
  + Google Cloud ML
  * `gcloud beta ml jobs submit training`: Fix crash when `--packages` was not
    specified.
- From version 137.0.0 (2016/12/07)
  + Google Cloud Functions
  * Add `gcloud alpha functions deploy` `--trigger-provider`,
    `--trigger-event`, `--trigger-resource` and `--trigger-params` flags.
  * Add `gcloud alpha functions event-types list` command.
  + Google Cloud ML
  * The `gcloud beta ml models versions` command group has been moved to
    `gcloud beta ml versions`. The old commands still work, but are
    deprecated.
  * The `--origin` flag for the `gcloud beta ml versions create` command now
    accepts local file paths in addition to Google Cloud Storage (`gs://`)
    paths.
  * `gcloud beta ml jobs training`: `--packages` now takes a comma-separated
    list instead of a space-separated list.
  + Google Compute Engine
  * Internal Load Balancing is now available in GA.
  * It is no longer allowed to pass an empty scope in
    `gcloud compute instances create --scopes` flag.
  + Google Container Engine
  * `gcloud container images describe` has some breaking changes to its
  - -format=JSON output.
  + Google Service Management
  * The gcloud service-management surface is now available in the GA and beta
    release tracks. Please use `gcloud service-management` instead of
    `gcloud beta service-management`.
- From version 136.0.0 (2016/12/01)
  + Cloud SDK
  * `gcloud config get-value` is now GA.
  + Google Cloud Service Management
  * Add `gcloud beta service-management undelete`.
  + Google Container Engine
  * Add `gcloud beta container image describe` to list container analysis
    data.
  * Update Google Container Engine's kubectl from version 1.4.4 to 1.4.6.
  + Google Cloud Container Builder
  * `gcloud container builds ...` are now GA.
  + Google Cloud Resource Manager
  * `gcloud organizations ...` are now GA.
  * Removed `gcloud organizations update`.
  + Google Cloud ML
  * Add `gcloud beta ml local predict` to do local prediction.
  * Deprecate '--instances' flag in `gcloud beta ml predict`.
  + Google App Engine
  * `gcloud app instances describe` is now GA.
  * `gcloud app services describe` is now GA.
  * `gcloud app logs read` will now show request logs by default as well as
    stdout, stderr, and crash.log.
  * Add `gcloud beta app describe`, which prints information about the
    current App Engine application.
  * `gcloud beta app deploy` can now deploy go apps, without the use of
    `aedeploy` or `goapp deploy`. Both App Engine Standard and Flexible
    environments are supported. If you are using `runtime: custom` with
    `aedeploy`, you will need to vendor your dependencies into the app
    directory manually.
  * Deprecated the configuration property `app/gsutil`. Affected users are
    warned during `gcloud app deploy` with instructions on how to update
    their configuration appropriately.
  * The App Engine flexible environment now defaults to Python 3.5 when
    Python 3 is requested. To temporarily revert to Python 3.4, specify
    `python_version: 3.4` in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml).
  * Updated app-engine-go component to the 1.9.48 SDK.
  + Google Compute Engine
  * Add `--service-label` flag to `gcloud alpha compute forwarding-rules
    create`.
  + Cloud Tools for Powershell
  * Add cmdlets to manage Cloud Storage ACLs.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Fixed `gcloud deployment-manager deployments describe` when resource
    expansion fails.
  + Bigtable Emulator
  * Bigtable emulator now supports `column_range_filter`.
  + Google Cloud Dataproc
  * Add `--service-account` flag to `gcloud dataproc clusters create`.
- From version 135.0.0 (2016/11/16)
  + Google Cloud Service Management
  * `gcloud service-management deploy` command now supports providing
    multiple service configuration or API specification inputs
    simultaneously. This change allows creating .proto and YAML based
    configurations for gRPC services.
  + Google Container Engine
  * Change the `gcloud container list-tags` command to support user-specified
    filters on occurrences and exposes a column summarizing vulnerability
    information.
  + Google Cloud Resource Manager
  * `gcloud organizations update` is now deprecated.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Runtime configuration variables can now be set and retrieved using text
    values.
  + Bigtable Emulator
  * Now supports macOS Sierra.
  + Google App Engine
  * The App Engine flexible environment now includes Python 3.5
    support (beta). To preview this runtime, specify `python_version: 3.5`
    in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml) file.
  * Added the `gcloud beta app services describe` command, which prints
    information about a given service.
- From version 134.0.0 (2016/11/09)
  + Cloud SDK
  * `gcloud info --run-diagnostics` flag is now available to diagnose common
    installation and local network issues.
  * `gcloud init` now has a `--skip-diagnostics` flag.
  + Google AppEngine
  * App Engine Java SDK updated to 1.9.46.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * Added `gcloud app create` command, which creates an App Engine app in the
    current project.
  * Added `gcloud app regions list` command, which lists support for
    App Engine Standard and Flexible environments for each geographical
    region.
  * `gcloud app deploy` now offers to create an App Engine app
    interactively, if the current project does not have an app yet.
  + Google Cloud BigQuery
  * Add support for specifying a null marker when loading data. See the
    `null_marker` flag within the `load` command.
  + Google Compute Engine
  * `gcloud compute instance-groups managed delete` shows clean error message
    instead of bare exception on attempt to delete zonal and regional Managed
    Instance Groups in one gcloud invocation. Old behavior was to accept and
    invoke such request and then fail on waiting for operation complete.
  * Remove OpenSUSE as a default image option. OpenSUSE images are still
    available in the opensuse-cloud project.
- From version 133.0.0 (2016/11/02)
  + Google Cloud Container Builder
  * `gcloud alpha container builds` promoted to beta. The following has
    changed:
  * The 'create' command is now called 'submit'.
  * The 'stream-logs' command is now called 'log', and will only stream
    the log if the '--stream' flag is used. Otherwise, it will print
    only the log contents available at the time the command was run.
  The alpha commands will remain, as is, until at least March of 2017.
  + Google Compute Engine
  * regional instance groups are now GA.
    `gcloud compute instance-groups managed`
  * Customer-Supplied Encryption Keys (CSEK) for image creation is now GA. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Update kubectl to version 1.4.4.
- From version 132.0.0 (2016/10/26)
  + Breaking Changes
  * (Cloud SDK-wide) Command line flag abbreviations are no longer supported.
  * (Cloud SDK-wide) Python 2.6 is no longer supported by the Cloud SDK and
    commands may not function correctly when run under an Python 2.6
    interpreter. Please update your Python installation to 2.7 to ensure
    compatibility.
  * If you have a 2.7 interpreter on your system that is not the default,
    you can use the CLOUDSDK_PYTHON environment variable to point to it.
  * The last version of the SDK that supports Python 2.6 is 131.0.0,
    which can be downloaded from our archive:
    &lt;https://cloud.google.com/sdk/downloads#earlier_versions&gt;
  * (Google Compute Engine/Google Cloud Source Repositories): Google Cloud
    Source Repositories scope no longer added by default on instance creation.
  * (Stackdriver Debugger) Changed the default to true for the `--all-users`
    option on `gcloud beta debug logpoints list` command.
  + Google Cloud Storage
  * Update gsutil component to 4.22
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.22/CHANGES.md&gt;
  + Google Compute Engine
  * Allow specifying both `--network` and `--subnet` for the same network
    interface card.
  + Google Cloud Dataproc
  * Jobs and clusters now support labels on creation
  * Jobs and clusters now support filtering by labels and state
  + Google Container Engine
  * Google Container Engine cluster upgrade operations can now be cancelled
    using the `gcloud alpha container operations cancel` command.  See
    `gcloud alpha container operations cancel --help` for more details.
  + Cloud Tools for Powershell
  * Fix a bug where the module is not picking up the active user credentials
    correctly.
  * Make `New-GcsObject` `-ObjectName` parameter optional when uploading a
    file.
  * Add ability to pipeline `GcsObject` to `Write-GcsObject` cmdlet.
- From version 131.0.0 (2016/10/19)
  + Cloud SDK
  * Added PowerShell provider for Google Cloud Storage; allows navigation of
    Google Cloud Storage buckets as if they were a local file system.
    When using Cloud Tools for PowerShell `cd` into gs:\ and type `dir` to
    begin. Learn more at
    https://cloud.google.com/tools/powershell/docs/backup.
  * App Engine updated to 1.9.45. Java SDK updated to 1.9.44.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * `gcloud config configurations create` will now automatically activate
    specified empty configuration. Use `gcloud config set` to populate its
    properties.
  + Google Cloud Compute
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine image creation is now available in the beta release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Added support for for creating new clusters and nodepools on preemptible
    VM instances in Beta by adding `--preemptible`. See
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * Fixed a bug in `gcloud alpha container clusters update` that
    prevented disabling cluster autoscaling. Cluster autoscaling
    can now be disabled by running:
    `gcloud alpha container clusters update --disable-autoscaling`
  * Update kubectl to version 1.4.1.
  + Google Cloud BigQuery
  * Added support for setting labels on query jobs.
    Example usage: `bq query --label "foo:bar" "select 123"`.
    The `show` command outputs any labels set on a job.
  + Google Source Repository
  * Change the Cloud Source Repositories scope given by default to
    Google Compute Engine Instances and Instance Templates to read_only
    from full control.
- From version 130.0.0 (2016/10/12)
  + Breaking Changes
  * Breaking change to --network-interface in `alpha compute instances
    create`, and `alpha compute instance-images create` commands. By default
    interfaces will have ephemeral IP (was: no external ip).
  + Google AppEngine
  * App Engine: The `gcloud app deploy` command no longer blocks when
    stopping the previous version; this should speed up deployment times.
    Instructions for checking the status of the stop-version operation are
    included in the command output.
  * Support ramdisk volumes in App Engine flexible environments Alpha.
  + Google Cloud Functions
  * Add `alpha functions regions list` command.
  + Google Cloud ML
  * Change '--instances=' to
    '(--json-instances=, --instances= | --text-instances=)' to allow
    `gcloud beta ml predict` to read files in UTF-8 encoded text format.
  + Google Cloud Platform Projects
  * Add the `gcloud alpha projects create` command.
  + Google Compute Engine
  * Add new key to --network-interface in `alpha compute instances create`,
    and `alpha compute instance-images create` commands: no-address.
  * Make flag --network-interface visible in `alpha compute instances create`,
    and `alpha compute instance-templates create` commands.
  + Google Container Engine
  * Fix a bug in `gcloud beta container images list-tags`.
  * Add support for kubernetes labels on new clusters and nodepools by passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud container clusters create --help` and
    `gcloud container nodepools create --help` for more details and
    examples.
- From version 129.0.0 (2016/10/05)
  + Google Cloud Bigtable
  * `gcloud alpha bigtable` commands are deprecated and will be removed in
    release 134.0.0. All users should migrate to `gcloud beta bigtable`
    commands.
  + Google Cloud ML
  * Add `gcloud beta ml jobs stream-logs` JOB [--allow-multiline-logs]
    [--polling-interval=POLLING_INTERVAL; default="60"] [GLOBAL-FLAG ...]
    to show logs from a running Cloud ML job.
  + Google Compute Engine
  * The --replacement flag is no longer required in the
    `gcloud compute images deprecate` command.
  * Add --create-disk flag to `gcloud alpha compute instances create`.
  * Add --create-disk flag to `gcloud alpha compute instance-templates
    create`.
  + Google Container Engine
  * Can now specify the cluster-version when creating Google Container Engine
    clusters.
  * Update kubectl to version 1.4.0.
  + Google Container Registry
  * `docker-credential-gcr` bug fixed.
  + Go SDK
  * Update Go SDK component to use 20160927 release, based on Go 1.6.3.
  + Stackdriver Logging
  * Added commands to manage logs-based metrics in Stackdriver Logging.
- From version 128.0.0 (2016/09/28)
  + Breaking Changes
  * The `gcloud auth application-default` commands are now in GA.
    `gcloud auth login` no longer writes Application Default Credentials, use
    `gcloud auth application-default login` instead.
  + Google AppEngine
  * Java apps that have no app.yaml file are now auto-detected based on a
    WEB-INF/appengine-web.xml file when launching the dev_appserver.
  * Fixed timestamp processing issue
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1121) in
    `gcloud app logs read`.
  + Google Cloud Functions
  * Added the `--memory` flag to `gcloud alpha functions deploy` to allow
    configuration of amount of memory available during function execution.
  + Google Cloud ML
  * Added `gcloud beta ml local train` command which runs user code
    locally and injects the environment variables necessary for running
    distributed TensorFlow jobs in subprocesses.
  * `gcloud beta ml jobs submit training` now takes a path to a python
    package, and either (1) builds from the setup.py file at the package
    root, or (2) generates a setup.py file and builds the package. It then
    uploads the generated tar.gz archives to Google Cloud Storage.
  + Google Compute Engine
  * Internal load balancing is now in beta.
  * Cloud Source Repositories control scope is now included in the list
    of default scopes granted to newly created instances and instance
    templates.
  * Added multi-nic support to `gcloud alpha compute instances create` and
    `gcloud alpha compute instance-templates create`.
  + Google Container Engine
  * Can now create temporary clusters with all kubernetes alpha features
    enabled using `gcloud alpha container clusters create
  - -enable-kubernetes-alpha`.
  * Added support for kubernetes labels on new clusters and nodepools by
    passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud alpha container clusters create --help` and
    `gcloud alpha container nodepools create --help` for more details and
    examples.
  + Google Container Repository
  * Added the ability to configure where (and in which order)
    docker-credential-gcr searches for Google Container Registry
    credentials. Run `docker-credential-gcr config --help` for more details.
- From version 127.0.0 (2016/09/21)
  + Google BigQuery
  * New load/query option in BigQuery client to support schema update
    within a load/query job.
  * New query option in BigQuery client to specify query parameters in
    Standard SQL.
  + Google Cloud Dataproc
  * `gcloud dataproc clusters create` flag
    `--preemptible-worker-boot-disk-size`
    can be used to specify future preemptible VM boot disk size.
  + Google Container Engine
  * Update kubectl to version 1.3.7.
  + Google Cloud ML
  * New `gcloud beta ml predict` command to do online prediction.
  * New `gcloud beta ml jobs submit prediction` command to submit batch
    prediction job.
  + Google Cloud SQL
  * New arguments to beta sql instances create/patch commands for Cloud SQL
    Second Generation instances:
  * `--storage-size` Sets storage size in GB.
  * `--maintenance-release-channel` Sets production or preview channel for
    maintenance window.
  * `--maintenance-window-day` Sets day of week for maintenance window.
  * `--maintenance-window-hour` Sets hour of day for maintenance window.
  * `--maintenance-window-any` (patch only) Clears maintenance window
    setting.
- From version 126.0.0 (2016/09/14)
  + Breaking changes
  * The HTTP error messages for these command groups have changed to a common
    format:
  * `gcloud dns`
  * `gcloud genomics`
  * `gcloud logging`
    Some command groups have not changed yet. That should happen in the next
    release. You can use `--log-http` to see the details of all HTTP
    requests and responses on the standard error.
  + Google Compute Engine
  * Add `--connection-draining-timeout` flag to `gcloud compute
    backend-services {create,update}` commands.
  * Added `gcloud alpha compute instance-groups managed update-instances` and
    `stop-proactive-update-instances` commands.
  + Google Cloud Debugger
  * The `gcloud beta debug source gen-repo-info-file` command, which
    generates repository information files for the Stackdriver Debugger,
    is now available.
  + Google Container Registry
  * The `gcloud container images` command group is now available in the beta
    release track.
  + Cloud SDK
  * Added `core/custom_ca_certs_file` property to allow use of a custom CA
    certificate file.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON for
    the v1 API. This version of the emulator resolves the deserialization
    issues in 123.0.0.
- From version 125.0.0 (2016/09/07)
  + Google BigQuery
  * `gcloud alpha bigquery` is no longer available.  To use BigQuery, use
    the `bq` tool shipped with the Cloud SDK.
  + Google Compute Engine
  * Add support to change the default service account on a Compute Engine
    project (alpha release) via the following command:
    `gcloud alpha compute project-info set-default-service-account`
  * Support multiple network interface cards in
    `gcloud alpha compute instances create` command.
  * Add `gcloud alpha compute instances set-scopes` command.
  + Google Container Engine
  * Update kubectl to version 1.3.6.
  + Google Container Repository
  * Released bug fixes for docker-credential-gcr as v1.0.1, please rerun
    `docker-credential-gcr configure-docker` after updating.
  + Google Cloud Logging
  * `gcloud logging create` and `gcloud logging update` echo back the writer
    identity associated with the sink.
  + Google Cloud Dataflow
  * The Dataflow CLI is now in Beta.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager manifests describe` with no manifest
    specified will show the latest manifest of the given deployment.
  + Emulators
  * `gcloud beta emulators datastore start` now defaults to the new
    version of the emulator which supports Cloud Datastore API v1 and
    v1beta3 over gRPC, proto-over-HTTP, and JSON-over-HTTP.
- From version 124.0.0 (2016/08/31)
  + Breaking Changes
  * Creating a Global Backend Service in Compute Engine will warn you if
    you don't use --global. In the future this will be required.
  * Major changes were made to `gcloud alpha dataflow` commands. See
    Google Cloud Dataflow section for more information
  + Google App Engine
  * Added endpointscfg.py to the app-engine-python component.
  * Skipped modules during upload will now be logged at INFO level instead of
    WARN.
  + Google Cloud Dataflow
  * Changes to `gcloud alpha dataflow` commands:
  * Changed the `jobs list` command now has a "status" filter. This
    change is from the JobsV1B3 API. You can now use the API's filter
    request as either "all", "terminated", or "active".
  * Added the `logs list` command. This dumps the log messages created
    from the workflow. Please see the help docs for more information.
  * Renamed `metrics tail` to `metrics list`.
  * Renamed `metrics list` --origin flag to --source. This can be either
    "user" for custom-made aggregates or "service" otherwise. This
    defaults to "all".
  * Added `metrics list` --transform flag. This filters all metrics that
    prefix regex matches the argument.
  * Removed `jobs list` --job-name flag.
  * Added `jobs list` --uri flag.
  + Cloud Tools for Powershell
  * Add Google Cloud Sql and Google Cloud Dns powershell cmdlets.
  + Google Cloud Deployment Manager
  * `deployment-manager deployments create` with a template file will copy
    the outputs specified in the schema to the generated config file.
  + Google Cloud Functions
  * Add alpha  functions logs read command
  + Google Container Repository
  * docker-credential-gcr (GCR's Docker credential helper) has been added
    as an optional component for GCR customers running Docker client v1.11
    or newer. Run `gcloud components install docker-credential-gcr`
    followed by `docker-credential-gcr configure-docker` in order to
    configure Docker. You may then use Docker normally, without any gcloud
    interaction at all (e.g. `docker pull gcr.io/myproject/myimage`)
  + Google Container Engine
  * Update kubectl to version 1.3.5.
  + Google Compute Engine
  * Added `gcloud compute instances stop` --discard-local-ssd flag.
  * Added windows-sql-cloud project to the default public image list.
  + Cloud SDK
  * `gcloud config get-value` is now available in the BETA release track.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON
    for the v1 API.
  + Cloud SQL
  * New commands added to beta:
  * `gcloud beta sql backups create`
  * `gcloud beta sql backups create`
  * `gcloud beta sql instances failover`
  * New flags for `gcloud beta sql instances create`:
  * --failover-replica-name
  * --replica-type
  * --storage-auto-increase
  * --storage-type
  * New flags for `gcloud beta sql instances patch`:
  * --storage-auto-increase
  * --no-storage-auto-increase
- From version  122.0.0 (2016/08/24)
  + Google App Engine
  * The `gcloud beta app regions list` command is now available. It
    shows support for the standard and flexible environments for each
    geographical region.
  * `gcloud app versions describe` now shows more extensive information
    about the deployed version, including the container used for
    App Engine Flexible.
  * Built-in versions will no longer appear when listing App Engine
    versions (`gcloud app versions list`).
  + Cloud SDK
  * Users can now make logs garbage collection optional by changing the
    value of the `core/max_log_days` property to 0.
  * The `gsutil` component has been upgraded to version 4.21.
  + Google Cloud Machine Learning
  * Added `gcloud alpha ml jobs submit training` command to start a
    Cloud ML training job.
  + Google Compute Engine/Networking
  * `compute networks switch-mode` and `compute networks expand-ip-range`
    commands are now in beta.
  + Google Container Engine
  * Image Type selection for `gcloud container` commands is now GA.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager deployments` will now display `INTENT`
    when applicable.
  + Emulators
  * A bug causing the rejection of unpadded base64-encoded bytes data in the
    Pub/Sub emulator (INVALID_ARGUMENT: "Payload isn't valid for request")
    has been fixed.
- From version  122.0.0 (2016/08/17)
  + Google App Engine
  * Added `gcloud beta app instances describe`, which shows information
    about a running App Engine Flexible instance.
  * Add new flags to `gcloud alpha functions deploy`, hide flags that
    are being replaced with new flags, log a warning when someone uses
    a flag to be replaced:
  * *--bucket    * to be replaced by *--stage-bucket*.
  * *--source    * to be replaced by *--local-path
  * (for code in local file system)
  * --source-path    * (for code in Google Code Storage).
  * *--trigger-gs-uri    * to be replaced by *--trigger-bucket*.
  + Cloud SDK
  * `gcloud init` now has an opt-in for listing all user projects, which
    could be in the hundreds. The user can now to opt-in to see all projects,
    or they can just type in a known project.
  + Google Cloud Machine Learning
  * Add `gcloud alpha ml models versions` group to manage Cloud ML model
    versions.
  * Add `gcloud alpha ml models` group to manage Cloud ML models
  * Add `gcloud alpha ml jobs` group to manage Cloud ML training and
    prediction jobs.
  + Google Cloud Genomics
  * The `gcloud genomics pipelines run` command now uses the default Compute
    Engine zone property if the *--zones    * flag is not specified.
  + Google Cloud Pub/Sub
  * Fixed error handling bug in `gcloud beta pubsub subscriptions create`
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1017).
  + Google Compute Engine
  * Enable *--health-checks
  * flag for the `gcloud beta compute backend-services`
    `create` and `update` commands.
  + Google Container Builder
  * *RepoSource    * is now available as a source for builds.
  * *BuildSteps    * now respect arbitrary dependencies on each other
    as defined by the `waitFor` field.
  + Google Container Engine
  * Update kubectl to version 1.3.4.
- From version  121.0.0 (2016/08/10)
  + Google App Engine
  * Cloud SDK dev_appserver.py supports running App Engine Standard Go
    applications.
  * `gcloud app instances disable-debug` now deletes the instance rather
    than restarting it. New instance(s) may spawn based on the app's
    scaling settings.
  + Google Cloud Dataproc
  * Added the `--preemptible-worker-boot-disk-size` flag to
    `gcloud dataproc clusters create`.
  + Google Compute Engine
  * `gcloud compute backend-services` session affinity flags have been
    promoted from beta to GA.
  + Google Container Engine
  * Changed the `container/use_client_certificate` property default value to
    `false`. This makes the `gcloud container clusters create` and
    `gcloud container clusters get-credentials` commands configure
    `kubectl` to use Google OAuth2 credentials by default instead of the
    legacy client certificate.
  + Google Cloud Dataflow
  * Added the `gcloud alpha dataflow jobs drain` command. The `drain` command
    takes a streaming job and stops receiving new data from the sources. It
    then processes the buffered data. For more information please see the
    documentation for stopping a running pipeline at
    &lt;https://cloud.google.com/dataflow/pipelines/stopping-a-pipeline&gt;.
  + Google Cloud DNS
  * Fix for issue reported in:
    &lt;http://stackoverflow.com/questions/38636010/removing-dns-entries-with-gcloud&gt;.
  + Stackdriver Error Reporting
  * Added `gcloud beta error-reporting events report` command for reporting
    errors.
- From version  120.0.0 (2016/08/03)
  + Deployment Manager
  * `deployment-manager resources list` will show INTENT when the
    resource STATE is `IN_PREVIEW`.
  * `deployment-manager deployments describe` will show output values in
    addition to listing the resources.
  + Emulators
  * Added a `gcloud beta emulators bigtable env-init` command to export
    environment variables required to communicate with the bigtable emulator.
  * The PubSub emulator now correctly starts the push loops when creating
    a push subscription.
  + Google Cloud DNS
  * `gcloud dns` now supports CAA records.
  + Google Cloud Storage
  * Update gsutil component to 4.20.
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.20/CHANGES.md&gt;
  + Google Compute Engine/Networking
  * `gcloud alpha compute instance-groups managed wait-for-stable`
    command waits until all `current_action` fields are set to none and
    there are only no `pending_actions` in managed instance group.
  * `gcloud compute xpn` commands now available in the alpha release track.
    These commands configure cross-project networking.
  * `gcloud compute networks subnets {get,set}-iam-policy` commands now
    available in alpha.
  + Google Container Engine
  * Update kubectl to 1.3.3.
- From version  119.0.0 (2016/07/27)
  + Google BigQuery
  * Added support for dataset labels. See:
    &lt;https://cloud.google.com/bigquery/docs/labeling-datasets&gt; for more
    details.
  * Now sending progress output to stderr and query output to stdout.
    This fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=780&gt;.
  + Google Cloud SDK
  * `gcloud auth login` will stop writing application default credentials
    in a future release. See:
    &lt;https://developers.google.com/identity/protocols/application-default-credentials#toolcloudsdk&gt; for more information.
  * Command line flag abbreviations are now deprecated and produce warning
    messages. Flag abbreviations will be completely disabled in release
    130.0.0. This pre-empts the problem of future flag additions making
    some flag abbreviations ambiguous, possibly breaking scripts.
  + Google Cloud SQL
  * Added the `gcloud beta sql users` command group with commands that enable
    management of users on Cloud SQL instances.
  + Google Cloud Platform Projects
  * `gcloud alpha projects update` now support labels.
  + Google Container Engine
  * Added the `delete` command to the `gcloud alpha container images` command
    group.
- From version  118.0.0 (2016/07/20)
  + Emulators
  * There is a new `gcloud beta emulators start bigtable` command for
    starting a Cloud Bigtable emulator.
  + Google Compute Engine/Networking
  * `gcloud alpha compute backend-services` and `forwarding-rules` commands
    now support the internal load balancing scheme. Please use
    `--load-balancing-scheme=internal` flag when creating these resources.
    In addition `gcloud alpha compute forwarding-rules create` supports
    `--backend-service` flag to allow forwarding to internal load balancers.
  * Beta release of `compute connect-to-serial-port` command for
    Interactive Serial Console support. See
    http://cloud.google.com/compute/docs/instances/interacting-with-serial-console for details.
  + Google Container Engine
  * Bump kubectl from 1.2.4 to 1.2.5.
  + SQL
  * `gcloud beta sql instances create` supports new database type MYSQL_5_7.
  + Windows support
  * Beta launch of Google Cloud PowerShell. PowerShell cmdlets for managing
    Google Cloud Storage and Google Compute Engine.
    For more information see
    https://googlecloudplatform.github.io/google-cloud-powershell.
- From version  117.0.0 (2016/07/13)
  + Google Compute Engine
  * Regional Managed Instance Groups commands are now in beta.
  * `target-ssl-proxies` commands are now in beta.
  * Connection-based load balancing commands are now in beta.
  * Added `--connection-draining-timeout` flag to
    `gcloud beta compute backend-services` `create` and `update` commands.
  * `health-checks` command group is now in beta.
  + Google Container Engine
  * Local SSDs are now supported for clusters via the `--local-ssd-count`
    flag (in beta).
  * Added `--additional-zones` flag to `gcloud beta container clusters
    update`.
  + Google Container Builder
  * The `gcloud alpha container builds create` command now supports using
    JSON or YAML config files to configure builds, using the `--config` flag.
- From version  116.0.0 (2016/06/29)
  + Breaking Changes
  * `gcloud alpha dataflow list-messages` datetime values are now
    displayed in ISO 8601 format: 2015-01-15T12:31:07 ('T' separating the
    date and time components).
  + Google App Engine
  * The `gcloud app` surface is now available in the GA and beta release
    tracks. Please use `gcloud app` instead of `gcloud preview app`
    (some features only available in the beta release track).
  * Add `gcloud app open-console` command, which opens the App Engine
    dashboard in a web browser.
  + Google Cloud Datastore emulator
  * The Cloud Datastore emulator can accept an IPv6 address for the
    `--host-port` argument.
  * Cloud Datastore emulator no longer fails when trying to load an
    index.yaml file.
  + Google Container Builder
  * The `gcloud alpha container builds` command group creates and manages
    builds using the Google Container Builder service. See
    https://cloud.google.com/container-builder/docs/ for API documentation.
  + Google Cloud Dataproc
  * Added `--preemptible-worker-boot-disk-size` flag, which allows
    configuration of preemptible worker boot disk, to `gcloud beta dataproc
    clusters create`.
  + Google BigQuery
  * New query option in BQ client to specify a limit on bytes billed for the
    query.
  + Google Cloud Bigtable
  * Added `gcloud beta bigtable instances` group to manage Bigtable
    instances.
  * Added `gcloud beta bigtable clusters` group to manage Bigtable clusters
    within instances.
  * Known issue: `gcloud beta bigtable instances create` is an asynchronous
    operation by default and will not block with or without the `--async`
    flag.
- From version  115.0.0 (2016/06/22)
  + Breaking Changes
  * (Google Compute Engine) The `debian-7` and `debian-7-backports` image
    aliases have been removed, as Debian 7 has reached end-of-life
  * (Google Compute Engine) The `--port-range` flag in the `gcloud compute
    forwarding-rules create` command has been deprecated; please use the
    `--ports` flag instead. At this time only consecutive ports can be
    specified.
  * (Google Compute Engine) `gcloud alpha compute rolling-updates` commands
    have been deprecated and removed.
  * (Google Container Engine) The `--wait` flag for the `gcloud container
    clusters` command group is now deprecated; please use the `--async` flag
    instead.
  + Cloud SDK
  * Users will now be prompted to set Cloud SDK proxy properties if network
    issues are detected while running `gcloud init`.
  + Google Compute Engine
  * `gcloud compute backend-services {create,update} --enable-cdn` flag
    has been promoted from beta to GA.
  * `gcloud compute url-maps invalidate-cdn-cache` has been promoted
    from beta to GA.
  * The `--remote-traffic-selector` flag in `gcloud compute vpn-tunnels
    create`, which allows specifying a list of CIDR blocks to be used
    during IKE\IPsec traffic selectors negotiation, is now available in
    the GA release track.
  + Google App Engine
  * Add `gcloud preview app versions describe` command.
  + Deployment Manager
  * (beta only) deployment-manager now supports rollbacks with the
    `--manifest-id` flag: `gcloud beta deployment-manager deployments update
    deployment-name --manifest-id=MANIFEST-ID`
  + Docker
  * `gcloud docker` now respects the `$DOCKER_CONFIG` environment variable
  + Emulators
  * The Cloud Datastore emulator now has an `env-unset` command which
    prints the commands to unset any environment variables set by running
    the commands in the output of the `env-init` command.
- From version  114.0.0 (2016/06/15)
  + Breaking Changes
  * (Google Compute Engine) Deprecated the use of image aliases. Please use
    image families instead. See https://cloud.google.com/compute/docs/images
    for more details.
  * (Google App Engine) Removed the deprecated and unused `--force` flag for
    `gcloud app deploy`.
  * (Google Cloud Debugger) Removed `gcloud alpha debug` command group;
    debug commands are now accessible solely using `gcloud beta debug`.
  + Google Compute Engine
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine disks is now available in the GA release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for more details.
  * Added autocompletion for the URL map name in
    `gcloud compute url-maps invalidate-cdn-cache`.
  * Added `gcloud alpha compute networks switch-mode` command.
  * Added `gcloud alpha compute networks subnets expand-ip-range` command.
  * Added `--remote-traffic-selector` flag, which allows specifying a list
    of CIDR blocks to be used during IKE\IPsec traffic selectors
    negotiation, to `gcloud beta compute vpn-tunnels create`
  * Fixed `gcloud compute routes list` command to display vpn-tunnel as
    `NEXT_HOP`.
  + Google App Engine
  * Parallelized source file uploads in `gcloud preview app deploy` for
    increased speed. To revert to the old behavior in event of a problem,
    please run `gcloud config set app/num_file_upload_processes 1`
    and report an issue here:
    https://code.google.com/p/google-cloud-sdk/issues/list
  * Google App Engine components updated to 1.9.38.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added support for Managed VMs instances in
    `gcloud preview app instances enable-debug` and
    `gcloud preview app instances disable-debug`.
  + Docker
  * Fixed a bug where Windows users experienced docker authentication issues
    when the `%HOME%` variable was set and differed from `%USERPROFILE%`
  + Emulators
  * Fixed behavior of pub/sub emulator subscription topic names when their
    respective topics are deleted. They should now be set to
    `_deleted-topic_`.
- From version  113.0.0 (2016/06/08)
  + Cloud SDK
  * gcloud now uses Internet Explorer proxy configuration settings when on
    Windows, or MacOSX SystemConfiguration proxy settings on Mac, if the
    gcloud configurations `proxy/*` are not set.
  + Google Compute Engine
  * `gcloud compute ssh` no longer generates keys when invoked with
  - -plain flag.
  * `gcloud compute routers` is now GA.
  + Google Genomics
  * `gcloud genomics pipelines run` command supports passing "inputs" and
    "outputs" as repeated parameters.
- From version  112.0.0 (2016/06/01)
  + Cloud SDK
  * Updated error messages for `gcloud projects` surface.
  * `gcloud docker` commands now take less time to execute when the
    Docker client is not configured to use a credential helper.
  + Google App Engine
  * The `--docker-build` flag and related `app/docker_build` property,
    as well as `app/use_cloud_build` property have been deprecated and will
    be removed in a future release. By default, Docker images are built
    remotely using Google Container Builder. To perform a Docker build on
    a different host, you can run:
    docker build -t gcr.io/project/service.version .
    gcloud docker push gcr.io/project/service.version
    gcloud preview app deploy --image-url=project/service.version
  + Google Compute Engine
  * Added `--licenses` flag to `gcloud compute images create`.
  + Google Container Engine
  * Fixed bug where only 16-bit kubectl was installed on Windows.
    Now Installs 32 and 64-bit.
  + Google Genomics
  * `gcloud alpha genomics datasets/callsets` name argument is a flag,
    instead of positional.
  * `gcloud alpha genomics pipelines run` command now accepts "zones"
    command-line argument.
  * `gcloud alpha genomics datasets restore/update` and
    `variantsets delete/describe` now take string IDs instead of ints.
  + Deployment Manager
  * `gcloud deployment-manager deployments describe` output only reports
    errors once, includes status for resources, and includes more useful
    fields.
- From version  111.0.0 (2016/05/25)
  + Google App Engine
  * `gcloud docker` commands are now less verbose during the authentication
    operation.
  + Google Container Engine
  * `gcloud container clusters update` command now GA.
  * `gcloud container node-pools` commands are now GA.
  + Google Compute Engine
  * Enabled Strict Host Key Checking for SSH connections (after the first
    connection) to instances. Also adds a new flag to `gcloud compute ssh`
    called `--strict-host-key-checking` to control the StrictHostKeyChecking
    option.
  * Add support for customer-supplied encryption keys to `gcloud beta compute
    instances start`. (in beta track)
  * Implemented backend-service connection based balancing mode.
  + Google Service Registry
  * Launched `gcloud alpha service-registry`. (alpha track)
    Users will need to sign up
    (https://docs.google.com/forms/d/11SfJGB3LUGgT_aSMlVzWoJ0ec2fHKwk0J4e-zTNw0Bs/viewform?edit_requested=true)
    before enabling this API in their projects.
  + Deployment Manager
  * Added `gcloud alpha deployment-manager runtime-configs`. Alpha
    commands for Deployment Manager's Runtime Config API.
  + Emulators
  * Adds a `--legacy` flag to gcloud beta emulators datastore. The flag
    is set by default and maintains existing behavior with support for
    Cloud Datastore API v1beta2. Passing `--no-legacy` uses a new version
    of the Cloud Datastore Emulator which supports Cloud Datastore API
    v1beta3 over gRPC, JSON, and proto-over-HTTP. The default behavior of
    the legacy flag will change in a future release.
  + Organizations
  * Launched `gcloud alpha orgranizations`. (alpha track)
- From version  110.0.0 (2016/05/18)
  + Google IAM
  * The `gcloud iam` command group is now available in GA. The
    `gcloud beta iam` will still be available for several more releases.
  + Google App Engine
  * Fixed issue with the `--docker-build=local` flag in the
    `gcloud preview app deploy` command with docker version 1.10+. Note
    that local Docker builds with Docker version 1.11 will still fail when
    using the new Docker external credentials; please downgrade to the
    plain credential store.
    https://code.google.com/p/google-cloud-sdk/issues/detail?id=802
  + Google Container Engine
  * `gcloud beta container` commands (e.g. `container create`) now support
    specifying ImageTypes.
  * The `gcloud container clusters list` command now sorts the clusters
    based on zone and then on cluster name.
  * The `gcloud container clusters create` command now allows specifying
  - -max-nodes-per-pool (default 1000) to create multiple node pools for
    large clusters.
  + Google Compute Engine
  * The `gcloud compute backend-services` backend commands now support
  - -instance-group-zone and --instance-group-region to qualify instance
    group specifically. Before --zone, --region was used to qualify all
    resource arguments, where as now it is used to qualify backend service.
  + Google Genomics
  * The `genomics variantsets create` command now supports the --name and
  - -description flags.
  * The `genomics variantsets delete` command displays the name of the
    variant set before prompting the user to delete it.
  * The genomics `variantsets describe/list` commands display variant set
    names and descriptions.
  + Emulators
  * The Google Cloud Datastore emulator supports a new environment variable
    for client library configuration.
  * The Google Cloud Datastore emulator flag --store-on-disk has been fixed to
    accept a false value using --no-store-on-disk. Previously,
  - -store-on-disk=False could be specified but wasn't respected.
  + Debug
  * The `The gcloud debug` command group is now in Beta.
  + Misc.
  * The Cloud SDK Windows installer is now dual signed SHA1 and SHA256. The
    executable is signed with both authenticode and RFC3161 signatures.
  * The winkeygen.exe executable is also now dual signed, like above.
- From version  109.0.0 (2016/05/11)
  + Google App Engine
  * Google App Engine components updated to 1.9.37.
  * Please visit the following release notes for details:
  * Python -
    https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed issue with failed uploads in gcloud preview app-deploy
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=784).
  * Deprecated --server flag for app commands; its use is unsupported.
  + Google Compute Engine
  * Removed the `gcloud alpha compute autoscaler` command group.
  * Removed deprecated `gcloud compute backend-services add-backend` --group
    flag in favor of --instance-group.
  * `gcloud compute copy-files` now exits with the return code of the called
    `scp` process.
  * Added support for customer-supplied encryption keys to the
    `gcloud beta compute disks snapshot` command.
  * Remove google-containers from default gcloud public image project.
  + Google Container Engine
  * Fixed bug listing clusters with no node pools.
  * `gcloud container resize` command now supports multi-zone clusters.
  + Google Error Reporting
  * Added the `gcloud beta error-reporting events delete` command to cleanup
    Stackdriver Error Reporting data.
- From version  108.0.0 (2016/05/04)
  + Breaking Changes
  * The `gcloud preview app modules get-logs` command is now deprecated.
    Please use the new command `gcloud preview app logs read` instead.
  + Google App Engine
  * Fixed a bug which caused `gcloud preview app deploy` to fail when run
    from a git directory.
  + Google Cloud SDK
  * Deprecated user property files (~/.config/gcloud/properties) will
    no longer be read by gcloud.  If you are not already using
    `configurations`, your properties will be automatically migrated for
    you.  No action is required on your part.
  * The `--format` flag now supports four more transforms: `extract`, `join`,
    `slice`, and `split`.
  + Google Cloud Debugger
  * Added the `gcloud alpha debug snapshots wait` command.
  + Google Compute Engine
  * The `gcloud alpha compute instance-groups managed list-instances` command
    output now includes the `INSTANCE_TEMPLATE` and `STATUS` columns.
  + Google Container Engine
  * Update kubectl to v1.2.3
  + Google Genomics
  * `gcloud alpha genomics variants describe/delete/update` commands now
    accept non-integer variant IDs.
- From version  107.0.0 (2016/04/27)
  + Google Compute Engine
  * Enable cursor ("start") support for get-serial-port-output in Beta.
  * Add tail-serial-port-output in Beta.
  * Image families are now in General Availability (GA).
  + Google App Engine
  * Google App Engine components updated to 1.9.36.
  * Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Deployment Manager
  * Creating and updating Deployments will now display output values
    in addition to listing the resources.
  + Google Container Engine
  * `gcloud container clusters resize` now allows specifying a node pool.
  + Cloud Debugger
  * Added `gcloud alpha debug` command surface to allow control of the
    Cloud Debugger from the command line.
  + Google BigQuery
  * BQ support for partitioned tables.
- From version  106.0.0 (2016/04/20)
  + Breaking Changes
  * Python 2.6 support in the Cloud SDK is deprecated and releases will stop
    supporting Python 2.6 on September 1, 2016.  Please update your Python
    installation to 2.7 to ensure compatibility with future Cloud SDK
    versions.
  * `gcloud preview app modules` commands are now deprecated (see "Google App
    Engine" section for more details).
  * `module` parameter in application .yaml files is now deprecated
    (see "Google App Engine" section for more details).
  * `--format` printer legend attributes are now deprecated (see "Cloud SDK"
    section for more details).
  + Cloud SDK
  * The --format printer legend attributes are deprecated and will be
    removed in release 124.0.0. The legend attribute docs have been removed.
  * The gcloud compute, functions, genomics, logging, and projects list
    commands now  support the `--filter` flag.
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.19/CHANGES.md)
  + Google App Engine
  * App Engine "modules" are being renamed to "services".
  * The `gcloud preview app modules` commands are now deprecated (except
    `gcloud preview app modules get-logs`). Please use the just-added
    `gcloud preview app versions`, `gcloud preview app services`, and
    `gcloud preview app instances` commands instead.
  * The 'module' parameter in application .yaml files is deprecated; please
    use 'service' instead.
  * Fixed `MaxRetrialsException` for `gcloud preview app deploy` of standard
    (not MVM or flexible) App Engine apps with `.git` directory present
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=727&gt;).
  * Fixed bug in `gcloud preview app deploy` where `--docker-build=local`
    did not work when `app/use_cloud_build` was enabled.
  + Google Compute Engine
  * Add `--no-creation-retries` flag to `compute instance-groups managed
    resize` command in alpha and beta.
  + Google Container Engine
  * Fix bug that caused kubectl component to be missing from components
    list on Windows.
  * `gcloud container clusters create` now allows specifying multiple zones
    within a region for your cluster's nodes to be created in.
  * Update kubectl to v1.2.2
- From version  105.0.0 (2016/04/13)
  + Breaking Changes
  * `health-checks` commands for protocol HTTP2 have been removed.
  * Rename the `alpha compute url-maps` `invalidate-cache` and
    `list-cache-invalidations` subcommands to `invalidate-cdn-cache` and
    `list-cdn-cache-invalidations`, respectively.
  + Cloud SDK
  * Suppress progress tracker animations if not outputting to a terminal.
  * `gcloud components list` now supports the `--filter` flag and queries
    like:
    `gcloud components list --filter=id:app-engine-java
  - -format="value(state.name)"`
  + Google Compute Engine
  * Promote Cloud CDN functionality from alpha to beta.
  + Google App Engine
  * File uploads during gcloud preview app deploy have been improved. If
    you have any trouble, you can revert to the old behavior with
    `gcloud config set app/use_gsutil true`.
- From version  104.0.0 (2016/04/06)
  + Cloud SDK
  * `gcloud init` no longer offers to clone
    [Google Cloud Repositories]
    (https://cloud.google.com/source-repositories/docs/).
    Please use `gcloud source repos clone` at any time after running
    `gcloud init`.
  + Google Compute Engine
  * `gcloud beta compute` commands now support image families.
  + Google App Engine
  * Users of `gcloud preview app deploy` can set the timeout for the
    Container Builder service using the app/cloud_build_timeout
    property.
  + Google Container Engine
  * kubectl component is now available for Windows (64-bit only).
  * `gcloud alpha container clusters update` now allows enabling/disabling
    addons for Container Engine clusters via `--update-addons` flag.
  * `gcloud container clusters create` now supports disabling
    HPA and Ingress controller addons via `--disable-addons` flag.
  + Google Genomics
  * `gcloud alpha genomics variants import` now supports configurable variant
    info field merging via the info_merge_config command line flag.
- From version  103.0.0 (2016/03/30)
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.18/CHANGES.md)
  + Google App Engine
  * Add fingerprinting support for PHP applications. You can now run
    `gcloud preview app gen-config` to auto-generate the necessary
    configuration for deploying PHP applications to the App Engine
    Flexible Environment.
  + Google Container Engine
  * gcloud container clusters create|get-credentials will warn/error
    respectively if the HOME env var isn't set. The variable
    is required to store kubectl credentials (kubeconfig).
  + Google Compute Engine
  * Enable support for: gcloud compute disks resize.
- From version  102.0.0 (2016/03/22)
  + Breaking Changes
  * The `gcloud alpha container nodepools` commands have been renamed to
    `node-pools`. Functionality and parameters haven't changed.
  * `gcloud beta iam list-grantable-roles` now returns a list of roles
    instead of a dictionary with a single key 'roles' with the value of
    a list of roles.
  * `gcloud config configuration describe` output has changed to include the
    configuration `name` and `is_active` fields. All configuration
    properties are now part of the `properties` field.
  + Cloud SDK
  * --format=json and --format=yaml now list resource attributes with
    null values.
  + Google App Engine
  * Use of the Google Container Builder service is now enabled by default for
    all managed VMs deployments.
    This change may require you to enable the Container Builder API. Visit
    https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=*PROJECT_ID*;
    to enable it, where *PROJECT_ID    * is your current project ID.
  * Updated Google App Engine components to 1.9.34.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Google Compute Engine
  * Added `gcloud compute backend-services` session affinity commands.
  * Added `gcloud compute http-health-checks` and `https-health-checks`
    commands.
  * Added `gcloud alpha compute target-ssl-proxies` commands.
  * Extended `gcloud compute forwarding-rules` to support
    `target-ssl-proxies`.
  + Google Container Engine
  * `gcloud container clusters list` will output a warning if there
    were zones for which it could not retrieve results.
  * Updated kubectl to version 1.2.0.
- From version  101.0.0 (2016/03/16)
  + Billing
  * Added [`gcloud alpha billing`]
    (https://cloud.google.com/sdk/gcloud/reference/alpha/billing/)
    command surface.
  + Google App Engine
  * App Engine components updated to 1.9.34. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for the
    Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
    for the Java release notes.
  + Google BigQuery
  * Updated the `bq` tool to version v2.0.24. Also includes fix for
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=632&gt;.
- From version  100.0.0 (2016/03/09)
  + Breaking Changes
  * `gcloud preview app deploy` deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the previous behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  + Cloud SDK
  * Providing no argument for list- and dict-type flags now results in a
    warning. Instead, please explicitly provide an empty string value. For
    instance, `gcloud command --flag` becomes `gcloud command --flag ''`
    (for list- and dict-type flags only).
  + IAM
  * Added `gcloud beta iam list-grantable-roles` command for given
    cloud resource.
  + Google App Engine
  * Fixed `WindowsError: [Error 32]` in the `gcloud preview app deploy`
    command on Windows. Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=554&gt;.
  + Google Container Engine
  * Added node pool support to enable heterogeneous clusters (alpha).
- From version  99.0.0 (2016/3/2)
  + Breaking Changes
  * Support for the deprecated workspace configurations feature has been
    removed. If you are using gcloud in a workspace, those properties will
    no longer be read.  See `gcloud topic configurations` for information
    on how to use configurations instead.
  + Cloud SDK
  * Enable gcloud to run in Cygwin 64 bit environments.
  * Fail gracefully on unreadable Google Compute Engine credential file.
    Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=460&gt;.
  + Google App Engine
  * App Engine components updated to 1.9.33. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for
    the Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt; for the Java
    release notes.
  * Added `gcloud preview app browse` command.
  * Fixed a race condition that caused errors while deploying App Engine
    Managed VM applications.
  * Fixed a TLS-related error during gcloud preview app deploy. Alleviates
    the problem in
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=559&gt;.
  + Google Compute Engine
  * `routers` surface moved to beta and is now accessible via
    `gcloud beta compute routers`
  + Google Cloud Dataproc
  * Add `--subnet` flag to `gcloud dataproc clusters create`.
  + Google Cloud Genomics
  * `genomics alpha operations cancel` assumes the `operations/` prefix
    if not present.
  + Google Cloud Storage
  * Update gsutil component to 4.17
- From version  98.0.0 (2016/2/24)
  * Release 95.0.0 introduced a bug that generated corrupt keys for
    Windows gcloud compute ssh|copy-files. Any keys generated on Windows
    between 95.0.0 and 97.0.0 inclusive are rejected by ssh servers.
    `gcloud compute` has been changed to:
  * Fix the winkeygen Windows key generator.
  * Recognize corrupt Windows keys and automatically regenerate them.
  * Fixed
    [#538](https://code.google.com/p/google-cloud-sdk/issues/detail?id=538).
    Users should no longer get "gsutil ImportError: No module named google"
    errors.
  + Google App Engine
  * MySqldb "latest" version changed from 1.24b4 to 1.2.5.
  + Emulators
  * Improves Pub/Sub emulator's ability to handle requests concurrent with
    HTTP pull requests.
  * The Pub/Sub emulator attempts to detect and inform users when an
    unsupported API version is used.
  * The Pub/Sub emulator now correctly handles absolute URIs in HTTP/Json
    requests.
  + Windows support
  * Google Cloud SDK no longer needs Python installed when using the Windows
    Installer. The SDK for Windows comes with Python bundled.
- From version  97.0.0 (2016/2/17)
  + Breaking Changes
    `gcloud alpha compute routers` now requires manual configuration of
    interfaces
  + Google Compute Engine
  * Added flag `--advertised-route-priority` to `gcloud alpha compute
    routers create`
  * Added support for regional instance groups in alpha
  + Google App Engine
  * Ruby runtime now uses the Rack "deployment" environment, instead
    of "none"
  + Google Container Engine
  * Added `--master` flag to `gcloud container clusters upgrade`
- From version  96.0.0 (2016/2/10)
  + Google App Engine
  * Google App Engine components updated to 1.9.32. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * The `gcloud preview app gen-config` command now offers to
    automatically update the runtime field in app.yaml if necessary.
  + IAM
  * The `gcloud beta iam` command group has launched.
  + Emulators
  * The Pub/Sub emulator now supports Gzip-encoded requests.
  + Google Compute Engine
  * The gcloud compute copy-files|scp commands on Windows now treat path
    arguments with a drive prefix as local files.
  + Configurations
  * The `config configurations delete` command now takes multiple
    configuration names.
  + Containers
  * kubectl is updated to v1.1.7.
  * Bugfix on the `gcloud container clusters get-credentials` when run
    from a client without edit permissions.
  + Misc. Changes
  * The default floating point output format precision is 6. Exponent
    notation is used for abs(n) &lt; 1e-04 and abs(n) &gt;= 1e+09.
  * The arrow and page up/down/home/end keys now work in the Windows help
    pager.
- From version  95.0.0 (2016/2/3)
  + Breaking Changes
  * Use `gcloud compute networks create --mode=legacy` to create non-subnet
    networks.
  + Google Compute Engine
  * `gcloud compute copy-files` and `gcloud compute ssh` on Windows now use
    standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone
    winkeygen.exe generates PuTTY and ssh compatible keys. The Windows
    PuTTY executables are up to date at version 0.66.
  + Google Compute Engine subnets
  * Added `gcloud compute networks subnets`.
  * Added `--mode` flag to `gcloud compute networks create`.
  * Added `--subnet` flag to `gcloud compute instances create` and
    `gcloud compute instance-templates create`.
  * Added `--local-traffic-selector` flag to `gcloud compute vpn-tunnels
    create`.
  + Google App Engine
  * Added support for streaming logs when the `use_cloud_build=1` property
    is set.
  * Moved the nodejs install script into the docker image.
  + Projects
  * `gcloud projects update|undelete|delete` have been moved to beta.
  + gcloud --format
  * Added nested table formatting by
    `--format="table(field1,listField2:format=FORMAT-STRING)"` where
    _FORMAT-STRING_ can be any format (json, table, ...).
    Try: `gcloud compute instances list
  - -format="table[box](name, disks:format='table[no-heading]
    (deviceName:sort=1, kind)')"`
  * Added list field aggregation formatting (similar to nested formatting) by
    `--format="table(listField2:format=FORMAT-STRING)"`. When the main table
    has no columns each nested format is aggregated into a single list.
    Try: `gcloud compute instances list
  - -format="table(disks:format='table[box](deviceName:sort=1, kind)')"`
- From version  94.0.0 (2016/1/27)
  + Google Compute Engine
  * Added `gcloud alpha compute url-maps list-cache-invalidations` command.
  + Google App Engine
  * Google App Engine components updated to 1.9.31. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added `--runtime` flag to `gcloud preview app gen-config` to specify
    a runtime when a directory identifies as multiple runtimes. This flag
    can be used in conjunction with `--custom`.
  + Google Container Engine
  * `gcloud container cluster describe` and `list` commands now notify
    the user when their cluster versions are about to go out of support or
    are unsupported.
  + Google Cloud Logging
  * `gcloud beta logging write` and `gcloud beta logging logs delete`
    commands now use the V2beta1 API. The `gcloud beta logging write`
    command now uses the global resource descriptor (which translates to
    "custom.googleapis.com" service in V1).
  + Cloud Dataproc
  * `gcloud beta dataproc clusters create` now supports `--tags` and
    `--metadata` flags to set instance tags and metadata on all instances
    in the Dataproc cluster.
  + PubSub Emulator
  * A new --host flag can be used to specify the address the emulator
    should bind as. The flag can be left unspecified, set to "localhost",
    a hostname, or an explicit IP address.
  + Projects
  * Added commands `get-iam-policy`, `set-iam-policy`,
    `add-iam-policy-binding`, and `remove-iam-policy-binding` for the
    `gcloud beta projects` surface.
  * Added the `gcloud projects list` command that can be used to list
    projects.
- From version  93.0.0 (2016/1/20)
  * kubectrl upgraded to 1.1.4.
  * `gcloud beta dataproc cluster create` now supports `--properties` flag
    to set properties for installed packages.
  * Datastore emulator's `DATASTORE_LOCAL_HOST` environment variable
    changed to `DATASTORE_EMULATOR_HOST`.
  * `gcloud source repos clone` now supports `--dry-run` flag to show
    equivalent git command.
- From version  92.0.0 (2016/1/13)
  * Because of the rollback of 91.0.0, this release contains all of the
    changes from 91.0.0 in addition to the changes listed below.
  + Breaking Changes
  * `gcloud preview app deploy`
  * Changed deployments to set the deployed versions to receive all
    traffic for their modules by default.
    To keep the old behavior (traffic split remains the same), use the
    `--no-promote` flag or run
    `gcloud config set app/promote_by_default true`.
    Note that your old versions are still running, and must be stopped
    manually. This behavior will change in a future release.
  * Removed deprecated `--set-default` flag.  Please use `--promote`
    instead.
  * `gcloud preview app deploy`: Removed deprecated `--env-vars` flag.
  * The output of the `gcloud preview app modules list` command has been
    changed to include the traffic split percentage instead of the 'default
    version' field.
  * Removed deprecated `gcloud preview app modules cancel-deployment`
    command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app modules download` command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app run` command. Please use
    `dev_appserver.py` instead.
  * Changed behavior of the `--zone`/`-z` flag in the
    `gcloud dns record-sets` command group. This flag can no longer precede
    the command. For instance,
    `gcloud dns record-sets -z=mz list` will not work, but
    `gcloud dns record-sets list -z=mz` will.
  * Changed `--password-file` option for `sql instances set-root-password`;
    password now does not include trailing newline from password file. This
    matches the documented behavior, but not the previous behavior.
    (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419)
  * Removed `meta/active_configuration` from the results of
    `gcloud config list` since it is not a property that can be set. You
    can continue to use the `gcloud config configurations` commands to
    view and manage your configurations.
  + Cloud SDK
  * Added `gcloud config` proxy settings. Users can configure `gcloud` to
    use a proxy via the following settings:
  * `gcloud config proxy/address`
  * `gcloud config proxy/password`
  * `gcloud config proxy/port`
  * `gcloud config proxy/type`
  * `gcloud config proxy/username`
  * Added `alpha` and `beta` components to Debian packages.
  * Removed unused config properties: `app/hosted_registry`, `app/host`,
    `app/admin_host`, `app/api_host`.
  + Google Cloud Logging
  * Migrated to
    [v2beta1](https://cloud.google.com/logging/docs/api/introduction_v2) API
    release.
  * Moved `gcloud beta logging sinks` commands to `v2beta1`.
  * Added `gcloud beta logging resource-descriptors` command to display
    supported resources from various services.
  * Added `gcloud beta logging read` command to retrieve log entries
    using filters.
  + Google Container Engine
  * Added `gcloud container clusters resize` for resizing Container Engine
    clusters.
  * Added notifications when node upgrades are available to `gcloud container
    cluster describe` and `list` commands.
  + Google App Engine
  * Fixed bug where initial deployments using `--image-url` failed.
  * Changed `gcloud preview app modules set_default` command to use the App
    Engine Admin API.
  * Changed `gcloud preview app modules list` command to use the App Engine
    Admin API.
- From version  91.0.1 (2015/12/16)
  * The Cloud SDK has been rolled back to 90.0.0.
- From version  91.0.0 (2015/12/16)
  + Breaking Changes
  * Deprecated command group `gcloud compute replica-pools` has been removed.
  * Deprecated command group `gcloud compute resource-views` has been removed.
  * App Engine API is now the only supported method for deploying in the
    `gcloud preview app deploy` command.
  + Google App Engine
  * `DEPLOYABLES` argument for `gcloud preview app deploy` is now
    optional. If not given, the command defaults to `app.yaml` in the
    current directory; if that is not found, it attempts to automatically
    generate necessary configuration files (such as app.yaml) in the
    current directory before deployment.
  * `--force` argument to `gcloud preview app deploy` is now deprecated
    and will be removed in a future release.
  + Container
  * `gcloud container` commands that poll long running operations
    (e.g create, delete, upgrade) now display progress details when
    available.
- From version  90.0.0 (2015/12/09)
  * Cloud SDK release version scheme has changed. Patch version is now
    treated as a major release version which corresponds to SDK weekly
    releases. Any updates/fixes to released version will increment
    minor/patch version number going forward.
  + Breaking Changes
  * The deprecated flag --clear-target-pool has been removed from
    `gcloud compute instance-groups managed set-target-pools` command.
  + Google App Engine
  * Components updated to 1.9.30.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed a bug caused by uploading invalid file names for vm: true
    applications.
  + Compute
  * Subnetwork support has been promoted from alpha to beta. For more
    information see https://cloud.google.com/compute/docs/subnetworks.
- From version  0.9.89 (2015/12/02)
  + Breaking Changes
  * Removed flag `--container-ipv4-cidr` for
    `gcloud container clusters create`; please use `--cluster-ipv4-cidr`
    instead.
  * Renamed `gcloud alpha compute vpn-tunnels create --ike-networks` to
    `--local-traffic-selector`.
  * `gcloud alpha compute resource-views` commands will soon be removed.
    Please use `gcloud compute instance-groups unmanaged` commands instead.
  * `gcloud alpha compute replica-pools` commands will soon be removed.
    Please use `gcloud compute instance-groups` commands instead.
  + `gcloud` Core
  * Changed behavior of `gcloud init` git repository clone option. It now
    takes as input a path to the destination directory for the repository,
    rather than the parent directory of the repository destination.
  + BigQuery
  * Fixed failure in `gcloud alpha biquery query
    "select     * from ..."` command while displaying query results.
  + Compute
  * Fixed `gcloud alpha compute instances set-machine-type` failure when
    supplying custom cpu/custom memory, but no zone.
  * Added a new scope alias for Cloud Monitoring: `monitoring-write`. This
    scope is on by default in all new VMs.
  + Google Cloud DNS
  * Added `--replace-origin-ns` flag to `gcloud dns record-sets import`
    command to allow importing NS records.
  + Google Cloud Storage
  * Updated `gsutil` component to 4.16.
  + Google Container Engine
  * Updated kubectl to version 1.1.2.
  * Increased `gcloud container clusters create/delete` timeouts from 20m to
    30m.
  * Added `--subnetwork` flag to `gcloud container clusters create` to
    allow creation of container clusters can now be created in a Google
    Compute Engine subnetwork
    (https://cloud.google.com/compute/docs/subnetworks).
- From version  0.9.88 (2015/11/25)
  + Breaking Changes
  * The `gcloud preview app run` command has now been removed. Please use
    the bundled `dev_appserver.py` script directly instead.
  * App Engine: The 'version' and 'application' fields in module and
    configuration files are now illegal. Project name should instead be
    specified either by `gcloud config set project MY_PROJECT` or by
    setting the `--project` flag on individual command executions. Versions
    are generated automatically by default but can also be manually
    specified by setting the `--version` flag on individual command
    executions.
  + App Engine
  * Don't do runtime identification for custom runtimes during deploy. This
    fixes issue [#387]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=387).
  * The `dev_appserver.py` script no longer requires the installation of
    all App Engine components. It will install only the necessary ones at
    run time. Fixes [#273]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=273)
  + Core
  * Added the `gcloud components install` command.  This allows you to
    install missing components at the version of the SDK you currently have
    (it does not update your SDK installation).  `gcloud components update`
    should now only be used to update your SDK to the latest version.
  * Fixes [#293]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=293)
    related SSL certificate validation issues.
  * Use zsh builtins in path.zsh.inc for faster/cleaner shell startup.</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Use the more typical &gt;= operator for version comparisons
- Use find -exec over xargs</changelog>
<changelog author="rjschwei@suse.com" date="1504699200">- Fix gsutil (bsc#1054930)
  + Force VERSION and CHECKSUM file into the right place, settings from
    MANIFEST.in are being ignored
  + Remove the "gsutil test" command. The test command depends on third_party
    test implementation and is invoked during "regular" operation such
    as cp and ls. Testing should be loaded only for developers</changelog>

</package>
<package pkgid="ecfa1901ec536920fb0fd2909d70855dde06998b6e5fa30ab95dc76bee07a0a1" name="google-cloud-sdk" arch="src">
    <version epoch="0" ver="0.9.87" rel="7.1"/>

<changelog author="rschweikert@suse.com" date="1392811200">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- Adjust version settings for obsoletes and provides</changelog>
<changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
<changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
<changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
<changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
<changelog author="rschweikert@suse.com" date="1394107200">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107201">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107202">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
<changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
<changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
<changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
<changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
<changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
<changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
<changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
<changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>

</package>
<package pkgid="b61552125257a86e1affbc9de13cdf6b22cd9636484a32a115dbaa3d0a402c6e" name="google-cloud-sdk" arch="src">
    <version epoch="0" ver="140.0.0" rel="10.1"/>

<changelog author="rschweikert@suse.com" date="1392811200">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- Adjust version settings for obsoletes and provides</changelog>
<changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
<changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
<changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
<changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
<changelog author="rschweikert@suse.com" date="1394020800">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107200">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107201">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
<changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
<changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
<changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
<changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
<changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
<changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
<changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
<changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Update to version 140.0.0 (2017/01/18)  (bsc#1002895,bsc#1008328)
  + Remove hidePathMangeling.patch
  + Add gcsdk-gsutil-hide-deps.patch
  + Add gcsdk-gsutil-no-self-update-check.patch
  + Add gcsdk-gsutil-use-system-certs.patch
  + Add gcsdk-no-batch-limit.patch
  + Add gcsdk-no-http-no-tunnel-proxt.patch
  + Add gcsdk-bq-hide-deps.patch
  + Remove disableSelfUpdate.patch, disabled by default from upstream
  + Cloud SDK
  * `gcloud alpha search-help` is now available in alpha.
    Run `gcloud alpha search-help [TERM]` to find gcloud commands whose
    help text contains [TERM].
  + Google Cloud ML
  * `gcloud ml jobs submit training` now supports packages already in Google
    Cloud Storage via the `--packages` flag.
  + Google Cloud Datalab
  * Upgrade the Datalab CLI to the 20170110 build.
  + Google Cloud Debugger
  * The `gcloud debug` command group is now available in GA.
  + Google Container Registry
  * An issue that affected Docker client version parsing during
    `docker-credential-gcr configure-docker` has been fixed.
  + Google Cloud Deployment Manager
  * 'deployment-manager deployments update' can update deployments with a new
    description using --description flag.
  + Emulators
  * The pubsub emulator now accepts web-safe Base64 encoded data.
- From version 139.0.1 (2017/01/12)
  * Fixed crash in `gcloud dataproc clusters create`
  * https://code.google.com/p/google-cloud-sdk/issues/detail?id=1464
- From version 139.0.0 (2017/01/11)
  + Breaking Changes
  * (Google Cloud Logging) The default value of the `--unique-writer-identity`
    flag to `gcloud beta logging sinks create` and
    `gcloud beta logging sinks update` is now true. Please consult the
    documentation before using these commands.
  * (Google Cloud Logging) Remove 'struct' option from `gcloud logging write`.
    Use 'json' instead
  * (Google Cloud Logging) `logging beta metrics create` and
    `logging beta metrics update` commands have changed their flags and
    importantly now use Logging V2 filter syntax. See the help for more
    information.
  * (Google App Engine) Flexible deployments now skip files matching
    `node_modules` and `.git` by default, but no longer skip other hidden
    files by default. Standard deployments are not changing.
  * (Google Compute Engine)
    `gcloud compute target-pools set-backup --backup-pool` and
    `gcloud compute project-info set-usage-bucket --bucket` flags now warn
    if you provide an empty argument; use `--no-backup-pool` and
    `--no-bucket instead`.
  * (Google Cloud Bigtable) Removed `gcloud alpha bigtable` command group;
    please use `gcloud beta bigtable` for all Cloud Bigtable operations.
  * (Stackdriver Debugger) Added a `--location` option to several
    `gcloud beta debug` commands, to separate out the processing of resource
    IDs from filename patterns. These commands now take only resource IDs as
    positional parameters.
  + Google Cloud Datalab
  * Added the command-line tool for Google Cloud Datalab in the Cloud SDK;
    call it via the `datalab` script.
  + Google Cloud Key Management Service
  * Added the `gcloud beta kms` commands for key management.
  + Google Cloud Logging
  * Add `--billing-account` flag to `gcloud logging read`
  * gcloud beta logging metrics list/describe now output the version of the
    filter associated with the metric
  + Google Cloud ML
  * The `gcloud beta ml jobs submit training` now takes a `--scale-tier` flag.
  * Support gzipped TFRecord file type for
    `gcloud beta ml jobs submit prediction`.
  + Google App Engine
  * (Google App Engine) Fixed bug with `gcloud app instances describe`.
  - -service and --version flags are now required.
  * `gcloud beta app deploy` now uses multi-threading rather than
    multi-processing for file uploads; if you've been seeing issues on
    Windows, please try the `beta` command out.
  * `gcloud app versions migrate` is now GA.
  * `gcloud app instances delete` is now GA.
  * Added `gcloud beta app operations` commands.
  * Added `gcloud beta app instances delete` command.
  + Google Compute Engine
  * `gcloud beta compute images create` now has a `--guest-os-features`
    flag for enabling specific OS supported features.
  * Use the new scopes format (see `--help` for deetails) for
  - `gcloud alpha compute instances create`
  - `gcloud alpha compute instances create-from-container`
  - `gcloud alpha compute instance-templates create`
  - `gcloud alpha compute instance-templates create-from-container`
  - `gcloud beta compute instances create`
  - `gcloud beta compute instance-templates create`
  * Add `--custom-extensions` flag to:
    `gcloud alpha compute instances create`,
    `gcloud alpha compute instances set-machine-type`, and
    `gcloud alpha compute instance-templates create`
  + Google Compute Engine (Networking)
  * The `--host` flag for `gcloud alpha compute url-maps
    invalidate-cdn-cache` is now available in the GA version of the command.
  + Stackdriver Debugger
  * Fixed log view URLs in the debug logpoints commands to use the V2 query
    syntax.
  + Google Service Management
  * `--validate-only` flag added to `gcloud service-management deploy` command
  + Google Cloud Functions
  * The `--trigger-params` flag has been renamed to `--trigger-path`
    (the `path=` specifier is no longer necessary). The old flag has been
    deprecated and will be removed or `gcloud alpha functions deploy`.
  * Restore `gcloud alpha functions get-logs` command.
  * Restore deprecated flags `--trigger-topic`, `--trigger-bucket`,
    `--source`, `--bucket`, and `--trigger-gs-uri` to `gcloud alpha
    functions deploy` command.
  + Google Container Engine
  * Update Google Container Engine's kubectl from version 1.4.6 to 1.5.1.
  + Google Cloud Bigtable
  * The `cbt` command line tool component is now available. See:
    https://cloud.google.com/bigtable/docs/go/cbt-reference
  + Google Cloud Datastore
  * `gcloud datastore create-indexes` and `cleanup-indexes` are now GA
  + Google Container Registry
  * `docker-credential-gcr` has been upgraded to v1.3 and now supports Docker
    client v1.14 credential helpers. `docker-credential-gcr` will now
    preferentially act as a credential helper (as opposed to credential
    store) on Docker client versions 1.14+. Update (or install) the
    `docker-credential-gcr` component and run `docker-credential-gcr
    configure-docker` to configure your Docker client to use
    `docker-credential-gcr` to authenticate operations on your GCR
    repositories.
  + Google Cloud Deployment Manager
  * Added labels support to the
    `gcloud alpha deployment-manager deployments create` and `update` commands
    (via the `--labels` and `--{update,remove}-labels` flags respectively).
  * Introduce new syntax `key:val,foo:bar` for `--properties` flag in all
    `gcloud deployment-manager` commands. The old `key=val,foo=bar` syntax is
    deprecated.
- From version 138.0.0 (2016/12/14)
  + Cloud SDK
  * Introduce --(no-)force-key-file-overwrite flags to all gcloud commands
    using SSH key files. These new flags control overwrite behavior when
    SSH key files are broken. Without these flags, interactive sessions will
    ask for confirmation before regenerating key files. Old non-interactive
    behavior (permissive) is deprecated and will be removed in 6 months. To
    preserve old behavior in your scripts, use new flag
  - -force-key-file-overwrite (though this is discouraged).
  * Credential store format for service accounts has changed. Your
    credentials will get auto-upgraded to new format upon usage; however, if
    gcloud is downgraded to previous version those credentials will not be
    usable and users will have to reactivate their service account.
  + Google Cloud ML
  * `gcloud beta ml jobs submit training` is now blocking by default. Use the
    `--async` flag to finish immediately after job submission.
  + Google Compute Engine
  * `gcloud compute instances create` creates instance with no scopes by
    default if project has no default service account.
  * `compute target-ssl-proxies list` deprecated `--regex` and names argument.
    Please use `--filter` flag instead.
  * `gcloud compute connect-to-serial-port` allows for interactive
    connections to the serial port for instances.
  * Promote `compute instances set-scopes` command from alpha to beta.
  + Google App Engine
  * Java SDK updated to 1.9.48. For more details, please see
    https://cloud.google.com/appengine/docs/java/release-notes
  * Python SDK updated to 1.9.49. For more details, please see
    https://cloud.google.com/appengine/docs/python/release-notes
  * `gcloud app describe` is now GA.
  * Added `gcloud beta app instances delete`, which deletes a specific
    App Engine instance.
  * Added `gcloud beta app versions migrate`.
  * Added support for `env: flex` (Flexible Environment) instances to
    `gcloud app instances enable-debug` and `gcloud app instances disable-debug`.
  * Added support for skip_files in Flexible Environment deployments.
  + Google Container Engine
  * Users can create clusters/nodepools with node autoupgrade enabled in
    Beta by adding `--enable-auto-upgrade`. Please refer to
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * node-pool upgrades can now be rolled back using the
    `gcloud alpha container node-pools rollback &lt;pool-name&gt;` command.
    See `gcloud alpha container node-pools rollback --help` for more details.
  + Google Cloud Container Builder
  * Container Builder timeouts are now unlimited (with a default of ten
    minutes), and can be specified with the --timeout flag.
  + Google Cloud Dataflow
  * The `gcloud dataflow jobs` command group now has the following commands
    in GA: cancel, describe, drain, list, show
  + Google Cloud Functions
  * Remove `gcloud alpha functions get-logs` command.
  * Remove deprecated flags --trigger-topic --trigger-bucket --source --bucket
  - -trigger-gs-uri from `gcloud alpha functions deploy` command.
- From version 137.0.1 (2016/12/08)
  + Google Cloud ML
  * `gcloud beta ml jobs submit training`: Fix crash when `--packages` was not
    specified.
- From version 137.0.0 (2016/12/07)
  + Google Cloud Functions
  * Add `gcloud alpha functions deploy` `--trigger-provider`,
    `--trigger-event`, `--trigger-resource` and `--trigger-params` flags.
  * Add `gcloud alpha functions event-types list` command.
  + Google Cloud ML
  * The `gcloud beta ml models versions` command group has been moved to
    `gcloud beta ml versions`. The old commands still work, but are
    deprecated.
  * The `--origin` flag for the `gcloud beta ml versions create` command now
    accepts local file paths in addition to Google Cloud Storage (`gs://`)
    paths.
  * `gcloud beta ml jobs training`: `--packages` now takes a comma-separated
    list instead of a space-separated list.
  + Google Compute Engine
  * Internal Load Balancing is now available in GA.
  * It is no longer allowed to pass an empty scope in
    `gcloud compute instances create --scopes` flag.
  + Google Container Engine
  * `gcloud container images describe` has some breaking changes to its
  - -format=JSON output.
  + Google Service Management
  * The gcloud service-management surface is now available in the GA and beta
    release tracks. Please use `gcloud service-management` instead of
    `gcloud beta service-management`.
- From version 136.0.0 (2016/12/01)
  + Cloud SDK
  * `gcloud config get-value` is now GA.
  + Google Cloud Service Management
  * Add `gcloud beta service-management undelete`.
  + Google Container Engine
  * Add `gcloud beta container image describe` to list container analysis
    data.
  * Update Google Container Engine's kubectl from version 1.4.4 to 1.4.6.
  + Google Cloud Container Builder
  * `gcloud container builds ...` are now GA.
  + Google Cloud Resource Manager
  * `gcloud organizations ...` are now GA.
  * Removed `gcloud organizations update`.
  + Google Cloud ML
  * Add `gcloud beta ml local predict` to do local prediction.
  * Deprecate '--instances' flag in `gcloud beta ml predict`.
  + Google App Engine
  * `gcloud app instances describe` is now GA.
  * `gcloud app services describe` is now GA.
  * `gcloud app logs read` will now show request logs by default as well as
    stdout, stderr, and crash.log.
  * Add `gcloud beta app describe`, which prints information about the
    current App Engine application.
  * `gcloud beta app deploy` can now deploy go apps, without the use of
    `aedeploy` or `goapp deploy`. Both App Engine Standard and Flexible
    environments are supported. If you are using `runtime: custom` with
    `aedeploy`, you will need to vendor your dependencies into the app
    directory manually.
  * Deprecated the configuration property `app/gsutil`. Affected users are
    warned during `gcloud app deploy` with instructions on how to update
    their configuration appropriately.
  * The App Engine flexible environment now defaults to Python 3.5 when
    Python 3 is requested. To temporarily revert to Python 3.4, specify
    `python_version: 3.4` in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml).
  * Updated app-engine-go component to the 1.9.48 SDK.
  + Google Compute Engine
  * Add `--service-label` flag to `gcloud alpha compute forwarding-rules
    create`.
  + Cloud Tools for Powershell
  * Add cmdlets to manage Cloud Storage ACLs.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Fixed `gcloud deployment-manager deployments describe` when resource
    expansion fails.
  + Bigtable Emulator
  * Bigtable emulator now supports `column_range_filter`.
  + Google Cloud Dataproc
  * Add `--service-account` flag to `gcloud dataproc clusters create`.
- From version 135.0.0 (2016/11/16)
  + Google Cloud Service Management
  * `gcloud service-management deploy` command now supports providing
    multiple service configuration or API specification inputs
    simultaneously. This change allows creating .proto and YAML based
    configurations for gRPC services.
  + Google Container Engine
  * Change the `gcloud container list-tags` command to support user-specified
    filters on occurrences and exposes a column summarizing vulnerability
    information.
  + Google Cloud Resource Manager
  * `gcloud organizations update` is now deprecated.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Runtime configuration variables can now be set and retrieved using text
    values.
  + Bigtable Emulator
  * Now supports macOS Sierra.
  + Google App Engine
  * The App Engine flexible environment now includes Python 3.5
    support (beta). To preview this runtime, specify `python_version: 3.5`
    in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml) file.
  * Added the `gcloud beta app services describe` command, which prints
    information about a given service.
- From version 134.0.0 (2016/11/09)
  + Cloud SDK
  * `gcloud info --run-diagnostics` flag is now available to diagnose common
    installation and local network issues.
  * `gcloud init` now has a `--skip-diagnostics` flag.
  + Google AppEngine
  * App Engine Java SDK updated to 1.9.46.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * Added `gcloud app create` command, which creates an App Engine app in the
    current project.
  * Added `gcloud app regions list` command, which lists support for
    App Engine Standard and Flexible environments for each geographical
    region.
  * `gcloud app deploy` now offers to create an App Engine app
    interactively, if the current project does not have an app yet.
  + Google Cloud BigQuery
  * Add support for specifying a null marker when loading data. See the
    `null_marker` flag within the `load` command.
  + Google Compute Engine
  * `gcloud compute instance-groups managed delete` shows clean error message
    instead of bare exception on attempt to delete zonal and regional Managed
    Instance Groups in one gcloud invocation. Old behavior was to accept and
    invoke such request and then fail on waiting for operation complete.
  * Remove OpenSUSE as a default image option. OpenSUSE images are still
    available in the opensuse-cloud project.
- From version 133.0.0 (2016/11/02)
  + Google Cloud Container Builder
  * `gcloud alpha container builds` promoted to beta. The following has
    changed:
  * The 'create' command is now called 'submit'.
  * The 'stream-logs' command is now called 'log', and will only stream
    the log if the '--stream' flag is used. Otherwise, it will print
    only the log contents available at the time the command was run.
  The alpha commands will remain, as is, until at least March of 2017.
  + Google Compute Engine
  * regional instance groups are now GA.
    `gcloud compute instance-groups managed`
  * Customer-Supplied Encryption Keys (CSEK) for image creation is now GA. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Update kubectl to version 1.4.4.
- From version 132.0.0 (2016/10/26)
  + Breaking Changes
  * (Cloud SDK-wide) Command line flag abbreviations are no longer supported.
  * (Cloud SDK-wide) Python 2.6 is no longer supported by the Cloud SDK and
    commands may not function correctly when run under an Python 2.6
    interpreter. Please update your Python installation to 2.7 to ensure
    compatibility.
  * If you have a 2.7 interpreter on your system that is not the default,
    you can use the CLOUDSDK_PYTHON environment variable to point to it.
  * The last version of the SDK that supports Python 2.6 is 131.0.0,
    which can be downloaded from our archive:
    &lt;https://cloud.google.com/sdk/downloads#earlier_versions&gt;
  * (Google Compute Engine/Google Cloud Source Repositories): Google Cloud
    Source Repositories scope no longer added by default on instance creation.
  * (Stackdriver Debugger) Changed the default to true for the `--all-users`
    option on `gcloud beta debug logpoints list` command.
  + Google Cloud Storage
  * Update gsutil component to 4.22
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.22/CHANGES.md&gt;
  + Google Compute Engine
  * Allow specifying both `--network` and `--subnet` for the same network
    interface card.
  + Google Cloud Dataproc
  * Jobs and clusters now support labels on creation
  * Jobs and clusters now support filtering by labels and state
  + Google Container Engine
  * Google Container Engine cluster upgrade operations can now be cancelled
    using the `gcloud alpha container operations cancel` command.  See
    `gcloud alpha container operations cancel --help` for more details.
  + Cloud Tools for Powershell
  * Fix a bug where the module is not picking up the active user credentials
    correctly.
  * Make `New-GcsObject` `-ObjectName` parameter optional when uploading a
    file.
  * Add ability to pipeline `GcsObject` to `Write-GcsObject` cmdlet.
- From version 131.0.0 (2016/10/19)
  + Cloud SDK
  * Added PowerShell provider for Google Cloud Storage; allows navigation of
    Google Cloud Storage buckets as if they were a local file system.
    When using Cloud Tools for PowerShell `cd` into gs:\ and type `dir` to
    begin. Learn more at
    https://cloud.google.com/tools/powershell/docs/backup.
  * App Engine updated to 1.9.45. Java SDK updated to 1.9.44.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * `gcloud config configurations create` will now automatically activate
    specified empty configuration. Use `gcloud config set` to populate its
    properties.
  + Google Cloud Compute
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine image creation is now available in the beta release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Added support for for creating new clusters and nodepools on preemptible
    VM instances in Beta by adding `--preemptible`. See
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * Fixed a bug in `gcloud alpha container clusters update` that
    prevented disabling cluster autoscaling. Cluster autoscaling
    can now be disabled by running:
    `gcloud alpha container clusters update --disable-autoscaling`
  * Update kubectl to version 1.4.1.
  + Google Cloud BigQuery
  * Added support for setting labels on query jobs.
    Example usage: `bq query --label "foo:bar" "select 123"`.
    The `show` command outputs any labels set on a job.
  + Google Source Repository
  * Change the Cloud Source Repositories scope given by default to
    Google Compute Engine Instances and Instance Templates to read_only
    from full control.
- From version 130.0.0 (2016/10/12)
  + Breaking Changes
  * Breaking change to --network-interface in `alpha compute instances
    create`, and `alpha compute instance-images create` commands. By default
    interfaces will have ephemeral IP (was: no external ip).
  + Google AppEngine
  * App Engine: The `gcloud app deploy` command no longer blocks when
    stopping the previous version; this should speed up deployment times.
    Instructions for checking the status of the stop-version operation are
    included in the command output.
  * Support ramdisk volumes in App Engine flexible environments Alpha.
  + Google Cloud Functions
  * Add `alpha functions regions list` command.
  + Google Cloud ML
  * Change '--instances=' to
    '(--json-instances=, --instances= | --text-instances=)' to allow
    `gcloud beta ml predict` to read files in UTF-8 encoded text format.
  + Google Cloud Platform Projects
  * Add the `gcloud alpha projects create` command.
  + Google Compute Engine
  * Add new key to --network-interface in `alpha compute instances create`,
    and `alpha compute instance-images create` commands: no-address.
  * Make flag --network-interface visible in `alpha compute instances create`,
    and `alpha compute instance-templates create` commands.
  + Google Container Engine
  * Fix a bug in `gcloud beta container images list-tags`.
  * Add support for kubernetes labels on new clusters and nodepools by passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud container clusters create --help` and
    `gcloud container nodepools create --help` for more details and
    examples.
- From version 129.0.0 (2016/10/05)
  + Google Cloud Bigtable
  * `gcloud alpha bigtable` commands are deprecated and will be removed in
    release 134.0.0. All users should migrate to `gcloud beta bigtable`
    commands.
  + Google Cloud ML
  * Add `gcloud beta ml jobs stream-logs` JOB [--allow-multiline-logs]
    [--polling-interval=POLLING_INTERVAL; default="60"] [GLOBAL-FLAG ...]
    to show logs from a running Cloud ML job.
  + Google Compute Engine
  * The --replacement flag is no longer required in the
    `gcloud compute images deprecate` command.
  * Add --create-disk flag to `gcloud alpha compute instances create`.
  * Add --create-disk flag to `gcloud alpha compute instance-templates
    create`.
  + Google Container Engine
  * Can now specify the cluster-version when creating Google Container Engine
    clusters.
  * Update kubectl to version 1.4.0.
  + Google Container Registry
  * `docker-credential-gcr` bug fixed.
  + Go SDK
  * Update Go SDK component to use 20160927 release, based on Go 1.6.3.
  + Stackdriver Logging
  * Added commands to manage logs-based metrics in Stackdriver Logging.
- From version 128.0.0 (2016/09/28)
  + Breaking Changes
  * The `gcloud auth application-default` commands are now in GA.
    `gcloud auth login` no longer writes Application Default Credentials, use
    `gcloud auth application-default login` instead.
  + Google AppEngine
  * Java apps that have no app.yaml file are now auto-detected based on a
    WEB-INF/appengine-web.xml file when launching the dev_appserver.
  * Fixed timestamp processing issue
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1121) in
    `gcloud app logs read`.
  + Google Cloud Functions
  * Added the `--memory` flag to `gcloud alpha functions deploy` to allow
    configuration of amount of memory available during function execution.
  + Google Cloud ML
  * Added `gcloud beta ml local train` command which runs user code
    locally and injects the environment variables necessary for running
    distributed TensorFlow jobs in subprocesses.
  * `gcloud beta ml jobs submit training` now takes a path to a python
    package, and either (1) builds from the setup.py file at the package
    root, or (2) generates a setup.py file and builds the package. It then
    uploads the generated tar.gz archives to Google Cloud Storage.
  + Google Compute Engine
  * Internal load balancing is now in beta.
  * Cloud Source Repositories control scope is now included in the list
    of default scopes granted to newly created instances and instance
    templates.
  * Added multi-nic support to `gcloud alpha compute instances create` and
    `gcloud alpha compute instance-templates create`.
  + Google Container Engine
  * Can now create temporary clusters with all kubernetes alpha features
    enabled using `gcloud alpha container clusters create
  - -enable-kubernetes-alpha`.
  * Added support for kubernetes labels on new clusters and nodepools by
    passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud alpha container clusters create --help` and
    `gcloud alpha container nodepools create --help` for more details and
    examples.
  + Google Container Repository
  * Added the ability to configure where (and in which order)
    docker-credential-gcr searches for Google Container Registry
    credentials. Run `docker-credential-gcr config --help` for more details.
- From version 127.0.0 (2016/09/21)
  + Google BigQuery
  * New load/query option in BigQuery client to support schema update
    within a load/query job.
  * New query option in BigQuery client to specify query parameters in
    Standard SQL.
  + Google Cloud Dataproc
  * `gcloud dataproc clusters create` flag
    `--preemptible-worker-boot-disk-size`
    can be used to specify future preemptible VM boot disk size.
  + Google Container Engine
  * Update kubectl to version 1.3.7.
  + Google Cloud ML
  * New `gcloud beta ml predict` command to do online prediction.
  * New `gcloud beta ml jobs submit prediction` command to submit batch
    prediction job.
  + Google Cloud SQL
  * New arguments to beta sql instances create/patch commands for Cloud SQL
    Second Generation instances:
  * `--storage-size` Sets storage size in GB.
  * `--maintenance-release-channel` Sets production or preview channel for
    maintenance window.
  * `--maintenance-window-day` Sets day of week for maintenance window.
  * `--maintenance-window-hour` Sets hour of day for maintenance window.
  * `--maintenance-window-any` (patch only) Clears maintenance window
    setting.
- From version 126.0.0 (2016/09/14)
  + Breaking changes
  * The HTTP error messages for these command groups have changed to a common
    format:
  * `gcloud dns`
  * `gcloud genomics`
  * `gcloud logging`
    Some command groups have not changed yet. That should happen in the next
    release. You can use `--log-http` to see the details of all HTTP
    requests and responses on the standard error.
  + Google Compute Engine
  * Add `--connection-draining-timeout` flag to `gcloud compute
    backend-services {create,update}` commands.
  * Added `gcloud alpha compute instance-groups managed update-instances` and
    `stop-proactive-update-instances` commands.
  + Google Cloud Debugger
  * The `gcloud beta debug source gen-repo-info-file` command, which
    generates repository information files for the Stackdriver Debugger,
    is now available.
  + Google Container Registry
  * The `gcloud container images` command group is now available in the beta
    release track.
  + Cloud SDK
  * Added `core/custom_ca_certs_file` property to allow use of a custom CA
    certificate file.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON for
    the v1 API. This version of the emulator resolves the deserialization
    issues in 123.0.0.
- From version 125.0.0 (2016/09/07)
  + Google BigQuery
  * `gcloud alpha bigquery` is no longer available.  To use BigQuery, use
    the `bq` tool shipped with the Cloud SDK.
  + Google Compute Engine
  * Add support to change the default service account on a Compute Engine
    project (alpha release) via the following command:
    `gcloud alpha compute project-info set-default-service-account`
  * Support multiple network interface cards in
    `gcloud alpha compute instances create` command.
  * Add `gcloud alpha compute instances set-scopes` command.
  + Google Container Engine
  * Update kubectl to version 1.3.6.
  + Google Container Repository
  * Released bug fixes for docker-credential-gcr as v1.0.1, please rerun
    `docker-credential-gcr configure-docker` after updating.
  + Google Cloud Logging
  * `gcloud logging create` and `gcloud logging update` echo back the writer
    identity associated with the sink.
  + Google Cloud Dataflow
  * The Dataflow CLI is now in Beta.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager manifests describe` with no manifest
    specified will show the latest manifest of the given deployment.
  + Emulators
  * `gcloud beta emulators datastore start` now defaults to the new
    version of the emulator which supports Cloud Datastore API v1 and
    v1beta3 over gRPC, proto-over-HTTP, and JSON-over-HTTP.
- From version 124.0.0 (2016/08/31)
  + Breaking Changes
  * Creating a Global Backend Service in Compute Engine will warn you if
    you don't use --global. In the future this will be required.
  * Major changes were made to `gcloud alpha dataflow` commands. See
    Google Cloud Dataflow section for more information
  + Google App Engine
  * Added endpointscfg.py to the app-engine-python component.
  * Skipped modules during upload will now be logged at INFO level instead of
    WARN.
  + Google Cloud Dataflow
  * Changes to `gcloud alpha dataflow` commands:
  * Changed the `jobs list` command now has a "status" filter. This
    change is from the JobsV1B3 API. You can now use the API's filter
    request as either "all", "terminated", or "active".
  * Added the `logs list` command. This dumps the log messages created
    from the workflow. Please see the help docs for more information.
  * Renamed `metrics tail` to `metrics list`.
  * Renamed `metrics list` --origin flag to --source. This can be either
    "user" for custom-made aggregates or "service" otherwise. This
    defaults to "all".
  * Added `metrics list` --transform flag. This filters all metrics that
    prefix regex matches the argument.
  * Removed `jobs list` --job-name flag.
  * Added `jobs list` --uri flag.
  + Cloud Tools for Powershell
  * Add Google Cloud Sql and Google Cloud Dns powershell cmdlets.
  + Google Cloud Deployment Manager
  * `deployment-manager deployments create` with a template file will copy
    the outputs specified in the schema to the generated config file.
  + Google Cloud Functions
  * Add alpha  functions logs read command
  + Google Container Repository
  * docker-credential-gcr (GCR's Docker credential helper) has been added
    as an optional component for GCR customers running Docker client v1.11
    or newer. Run `gcloud components install docker-credential-gcr`
    followed by `docker-credential-gcr configure-docker` in order to
    configure Docker. You may then use Docker normally, without any gcloud
    interaction at all (e.g. `docker pull gcr.io/myproject/myimage`)
  + Google Container Engine
  * Update kubectl to version 1.3.5.
  + Google Compute Engine
  * Added `gcloud compute instances stop` --discard-local-ssd flag.
  * Added windows-sql-cloud project to the default public image list.
  + Cloud SDK
  * `gcloud config get-value` is now available in the BETA release track.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON
    for the v1 API.
  + Cloud SQL
  * New commands added to beta:
  * `gcloud beta sql backups create`
  * `gcloud beta sql backups create`
  * `gcloud beta sql instances failover`
  * New flags for `gcloud beta sql instances create`:
  * --failover-replica-name
  * --replica-type
  * --storage-auto-increase
  * --storage-type
  * New flags for `gcloud beta sql instances patch`:
  * --storage-auto-increase
  * --no-storage-auto-increase
- From version  122.0.0 (2016/08/24)
  + Google App Engine
  * The `gcloud beta app regions list` command is now available. It
    shows support for the standard and flexible environments for each
    geographical region.
  * `gcloud app versions describe` now shows more extensive information
    about the deployed version, including the container used for
    App Engine Flexible.
  * Built-in versions will no longer appear when listing App Engine
    versions (`gcloud app versions list`).
  + Cloud SDK
  * Users can now make logs garbage collection optional by changing the
    value of the `core/max_log_days` property to 0.
  * The `gsutil` component has been upgraded to version 4.21.
  + Google Cloud Machine Learning
  * Added `gcloud alpha ml jobs submit training` command to start a
    Cloud ML training job.
  + Google Compute Engine/Networking
  * `compute networks switch-mode` and `compute networks expand-ip-range`
    commands are now in beta.
  + Google Container Engine
  * Image Type selection for `gcloud container` commands is now GA.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager deployments` will now display `INTENT`
    when applicable.
  + Emulators
  * A bug causing the rejection of unpadded base64-encoded bytes data in the
    Pub/Sub emulator (INVALID_ARGUMENT: "Payload isn't valid for request")
    has been fixed.
- From version  122.0.0 (2016/08/17)
  + Google App Engine
  * Added `gcloud beta app instances describe`, which shows information
    about a running App Engine Flexible instance.
  * Add new flags to `gcloud alpha functions deploy`, hide flags that
    are being replaced with new flags, log a warning when someone uses
    a flag to be replaced:
  * *--bucket    * to be replaced by *--stage-bucket*.
  * *--source    * to be replaced by *--local-path
  * (for code in local file system)
  * --source-path    * (for code in Google Code Storage).
  * *--trigger-gs-uri    * to be replaced by *--trigger-bucket*.
  + Cloud SDK
  * `gcloud init` now has an opt-in for listing all user projects, which
    could be in the hundreds. The user can now to opt-in to see all projects,
    or they can just type in a known project.
  + Google Cloud Machine Learning
  * Add `gcloud alpha ml models versions` group to manage Cloud ML model
    versions.
  * Add `gcloud alpha ml models` group to manage Cloud ML models
  * Add `gcloud alpha ml jobs` group to manage Cloud ML training and
    prediction jobs.
  + Google Cloud Genomics
  * The `gcloud genomics pipelines run` command now uses the default Compute
    Engine zone property if the *--zones    * flag is not specified.
  + Google Cloud Pub/Sub
  * Fixed error handling bug in `gcloud beta pubsub subscriptions create`
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1017).
  + Google Compute Engine
  * Enable *--health-checks
  * flag for the `gcloud beta compute backend-services`
    `create` and `update` commands.
  + Google Container Builder
  * *RepoSource    * is now available as a source for builds.
  * *BuildSteps    * now respect arbitrary dependencies on each other
    as defined by the `waitFor` field.
  + Google Container Engine
  * Update kubectl to version 1.3.4.
- From version  121.0.0 (2016/08/10)
  + Google App Engine
  * Cloud SDK dev_appserver.py supports running App Engine Standard Go
    applications.
  * `gcloud app instances disable-debug` now deletes the instance rather
    than restarting it. New instance(s) may spawn based on the app's
    scaling settings.
  + Google Cloud Dataproc
  * Added the `--preemptible-worker-boot-disk-size` flag to
    `gcloud dataproc clusters create`.
  + Google Compute Engine
  * `gcloud compute backend-services` session affinity flags have been
    promoted from beta to GA.
  + Google Container Engine
  * Changed the `container/use_client_certificate` property default value to
    `false`. This makes the `gcloud container clusters create` and
    `gcloud container clusters get-credentials` commands configure
    `kubectl` to use Google OAuth2 credentials by default instead of the
    legacy client certificate.
  + Google Cloud Dataflow
  * Added the `gcloud alpha dataflow jobs drain` command. The `drain` command
    takes a streaming job and stops receiving new data from the sources. It
    then processes the buffered data. For more information please see the
    documentation for stopping a running pipeline at
    &lt;https://cloud.google.com/dataflow/pipelines/stopping-a-pipeline&gt;.
  + Google Cloud DNS
  * Fix for issue reported in:
    &lt;http://stackoverflow.com/questions/38636010/removing-dns-entries-with-gcloud&gt;.
  + Stackdriver Error Reporting
  * Added `gcloud beta error-reporting events report` command for reporting
    errors.
- From version  120.0.0 (2016/08/03)
  + Deployment Manager
  * `deployment-manager resources list` will show INTENT when the
    resource STATE is `IN_PREVIEW`.
  * `deployment-manager deployments describe` will show output values in
    addition to listing the resources.
  + Emulators
  * Added a `gcloud beta emulators bigtable env-init` command to export
    environment variables required to communicate with the bigtable emulator.
  * The PubSub emulator now correctly starts the push loops when creating
    a push subscription.
  + Google Cloud DNS
  * `gcloud dns` now supports CAA records.
  + Google Cloud Storage
  * Update gsutil component to 4.20.
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.20/CHANGES.md&gt;
  + Google Compute Engine/Networking
  * `gcloud alpha compute instance-groups managed wait-for-stable`
    command waits until all `current_action` fields are set to none and
    there are only no `pending_actions` in managed instance group.
  * `gcloud compute xpn` commands now available in the alpha release track.
    These commands configure cross-project networking.
  * `gcloud compute networks subnets {get,set}-iam-policy` commands now
    available in alpha.
  + Google Container Engine
  * Update kubectl to 1.3.3.
- From version  119.0.0 (2016/07/27)
  + Google BigQuery
  * Added support for dataset labels. See:
    &lt;https://cloud.google.com/bigquery/docs/labeling-datasets&gt; for more
    details.
  * Now sending progress output to stderr and query output to stdout.
    This fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=780&gt;.
  + Google Cloud SDK
  * `gcloud auth login` will stop writing application default credentials
    in a future release. See:
    &lt;https://developers.google.com/identity/protocols/application-default-credentials#toolcloudsdk&gt; for more information.
  * Command line flag abbreviations are now deprecated and produce warning
    messages. Flag abbreviations will be completely disabled in release
    130.0.0. This pre-empts the problem of future flag additions making
    some flag abbreviations ambiguous, possibly breaking scripts.
  + Google Cloud SQL
  * Added the `gcloud beta sql users` command group with commands that enable
    management of users on Cloud SQL instances.
  + Google Cloud Platform Projects
  * `gcloud alpha projects update` now support labels.
  + Google Container Engine
  * Added the `delete` command to the `gcloud alpha container images` command
    group.
- From version  118.0.0 (2016/07/20)
  + Emulators
  * There is a new `gcloud beta emulators start bigtable` command for
    starting a Cloud Bigtable emulator.
  + Google Compute Engine/Networking
  * `gcloud alpha compute backend-services` and `forwarding-rules` commands
    now support the internal load balancing scheme. Please use
    `--load-balancing-scheme=internal` flag when creating these resources.
    In addition `gcloud alpha compute forwarding-rules create` supports
    `--backend-service` flag to allow forwarding to internal load balancers.
  * Beta release of `compute connect-to-serial-port` command for
    Interactive Serial Console support. See
    http://cloud.google.com/compute/docs/instances/interacting-with-serial-console for details.
  + Google Container Engine
  * Bump kubectl from 1.2.4 to 1.2.5.
  + SQL
  * `gcloud beta sql instances create` supports new database type MYSQL_5_7.
  + Windows support
  * Beta launch of Google Cloud PowerShell. PowerShell cmdlets for managing
    Google Cloud Storage and Google Compute Engine.
    For more information see
    https://googlecloudplatform.github.io/google-cloud-powershell.
- From version  117.0.0 (2016/07/13)
  + Google Compute Engine
  * Regional Managed Instance Groups commands are now in beta.
  * `target-ssl-proxies` commands are now in beta.
  * Connection-based load balancing commands are now in beta.
  * Added `--connection-draining-timeout` flag to
    `gcloud beta compute backend-services` `create` and `update` commands.
  * `health-checks` command group is now in beta.
  + Google Container Engine
  * Local SSDs are now supported for clusters via the `--local-ssd-count`
    flag (in beta).
  * Added `--additional-zones` flag to `gcloud beta container clusters
    update`.
  + Google Container Builder
  * The `gcloud alpha container builds create` command now supports using
    JSON or YAML config files to configure builds, using the `--config` flag.
- From version  116.0.0 (2016/06/29)
  + Breaking Changes
  * `gcloud alpha dataflow list-messages` datetime values are now
    displayed in ISO 8601 format: 2015-01-15T12:31:07 ('T' separating the
    date and time components).
  + Google App Engine
  * The `gcloud app` surface is now available in the GA and beta release
    tracks. Please use `gcloud app` instead of `gcloud preview app`
    (some features only available in the beta release track).
  * Add `gcloud app open-console` command, which opens the App Engine
    dashboard in a web browser.
  + Google Cloud Datastore emulator
  * The Cloud Datastore emulator can accept an IPv6 address for the
    `--host-port` argument.
  * Cloud Datastore emulator no longer fails when trying to load an
    index.yaml file.
  + Google Container Builder
  * The `gcloud alpha container builds` command group creates and manages
    builds using the Google Container Builder service. See
    https://cloud.google.com/container-builder/docs/ for API documentation.
  + Google Cloud Dataproc
  * Added `--preemptible-worker-boot-disk-size` flag, which allows
    configuration of preemptible worker boot disk, to `gcloud beta dataproc
    clusters create`.
  + Google BigQuery
  * New query option in BQ client to specify a limit on bytes billed for the
    query.
  + Google Cloud Bigtable
  * Added `gcloud beta bigtable instances` group to manage Bigtable
    instances.
  * Added `gcloud beta bigtable clusters` group to manage Bigtable clusters
    within instances.
  * Known issue: `gcloud beta bigtable instances create` is an asynchronous
    operation by default and will not block with or without the `--async`
    flag.
- From version  115.0.0 (2016/06/22)
  + Breaking Changes
  * (Google Compute Engine) The `debian-7` and `debian-7-backports` image
    aliases have been removed, as Debian 7 has reached end-of-life
  * (Google Compute Engine) The `--port-range` flag in the `gcloud compute
    forwarding-rules create` command has been deprecated; please use the
    `--ports` flag instead. At this time only consecutive ports can be
    specified.
  * (Google Compute Engine) `gcloud alpha compute rolling-updates` commands
    have been deprecated and removed.
  * (Google Container Engine) The `--wait` flag for the `gcloud container
    clusters` command group is now deprecated; please use the `--async` flag
    instead.
  + Cloud SDK
  * Users will now be prompted to set Cloud SDK proxy properties if network
    issues are detected while running `gcloud init`.
  + Google Compute Engine
  * `gcloud compute backend-services {create,update} --enable-cdn` flag
    has been promoted from beta to GA.
  * `gcloud compute url-maps invalidate-cdn-cache` has been promoted
    from beta to GA.
  * The `--remote-traffic-selector` flag in `gcloud compute vpn-tunnels
    create`, which allows specifying a list of CIDR blocks to be used
    during IKE\IPsec traffic selectors negotiation, is now available in
    the GA release track.
  + Google App Engine
  * Add `gcloud preview app versions describe` command.
  + Deployment Manager
  * (beta only) deployment-manager now supports rollbacks with the
    `--manifest-id` flag: `gcloud beta deployment-manager deployments update
    deployment-name --manifest-id=MANIFEST-ID`
  + Docker
  * `gcloud docker` now respects the `$DOCKER_CONFIG` environment variable
  + Emulators
  * The Cloud Datastore emulator now has an `env-unset` command which
    prints the commands to unset any environment variables set by running
    the commands in the output of the `env-init` command.
- From version  114.0.0 (2016/06/15)
  + Breaking Changes
  * (Google Compute Engine) Deprecated the use of image aliases. Please use
    image families instead. See https://cloud.google.com/compute/docs/images
    for more details.
  * (Google App Engine) Removed the deprecated and unused `--force` flag for
    `gcloud app deploy`.
  * (Google Cloud Debugger) Removed `gcloud alpha debug` command group;
    debug commands are now accessible solely using `gcloud beta debug`.
  + Google Compute Engine
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine disks is now available in the GA release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for more details.
  * Added autocompletion for the URL map name in
    `gcloud compute url-maps invalidate-cdn-cache`.
  * Added `gcloud alpha compute networks switch-mode` command.
  * Added `gcloud alpha compute networks subnets expand-ip-range` command.
  * Added `--remote-traffic-selector` flag, which allows specifying a list
    of CIDR blocks to be used during IKE\IPsec traffic selectors
    negotiation, to `gcloud beta compute vpn-tunnels create`
  * Fixed `gcloud compute routes list` command to display vpn-tunnel as
    `NEXT_HOP`.
  + Google App Engine
  * Parallelized source file uploads in `gcloud preview app deploy` for
    increased speed. To revert to the old behavior in event of a problem,
    please run `gcloud config set app/num_file_upload_processes 1`
    and report an issue here:
    https://code.google.com/p/google-cloud-sdk/issues/list
  * Google App Engine components updated to 1.9.38.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added support for Managed VMs instances in
    `gcloud preview app instances enable-debug` and
    `gcloud preview app instances disable-debug`.
  + Docker
  * Fixed a bug where Windows users experienced docker authentication issues
    when the `%HOME%` variable was set and differed from `%USERPROFILE%`
  + Emulators
  * Fixed behavior of pub/sub emulator subscription topic names when their
    respective topics are deleted. They should now be set to
    `_deleted-topic_`.
- From version  113.0.0 (2016/06/08)
  + Cloud SDK
  * gcloud now uses Internet Explorer proxy configuration settings when on
    Windows, or MacOSX SystemConfiguration proxy settings on Mac, if the
    gcloud configurations `proxy/*` are not set.
  + Google Compute Engine
  * `gcloud compute ssh` no longer generates keys when invoked with
  - -plain flag.
  * `gcloud compute routers` is now GA.
  + Google Genomics
  * `gcloud genomics pipelines run` command supports passing "inputs" and
    "outputs" as repeated parameters.
- From version  112.0.0 (2016/06/01)
  + Cloud SDK
  * Updated error messages for `gcloud projects` surface.
  * `gcloud docker` commands now take less time to execute when the
    Docker client is not configured to use a credential helper.
  + Google App Engine
  * The `--docker-build` flag and related `app/docker_build` property,
    as well as `app/use_cloud_build` property have been deprecated and will
    be removed in a future release. By default, Docker images are built
    remotely using Google Container Builder. To perform a Docker build on
    a different host, you can run:
    docker build -t gcr.io/project/service.version .
    gcloud docker push gcr.io/project/service.version
    gcloud preview app deploy --image-url=project/service.version
  + Google Compute Engine
  * Added `--licenses` flag to `gcloud compute images create`.
  + Google Container Engine
  * Fixed bug where only 16-bit kubectl was installed on Windows.
    Now Installs 32 and 64-bit.
  + Google Genomics
  * `gcloud alpha genomics datasets/callsets` name argument is a flag,
    instead of positional.
  * `gcloud alpha genomics pipelines run` command now accepts "zones"
    command-line argument.
  * `gcloud alpha genomics datasets restore/update` and
    `variantsets delete/describe` now take string IDs instead of ints.
  + Deployment Manager
  * `gcloud deployment-manager deployments describe` output only reports
    errors once, includes status for resources, and includes more useful
    fields.
- From version  111.0.0 (2016/05/25)
  + Google App Engine
  * `gcloud docker` commands are now less verbose during the authentication
    operation.
  + Google Container Engine
  * `gcloud container clusters update` command now GA.
  * `gcloud container node-pools` commands are now GA.
  + Google Compute Engine
  * Enabled Strict Host Key Checking for SSH connections (after the first
    connection) to instances. Also adds a new flag to `gcloud compute ssh`
    called `--strict-host-key-checking` to control the StrictHostKeyChecking
    option.
  * Add support for customer-supplied encryption keys to `gcloud beta compute
    instances start`. (in beta track)
  * Implemented backend-service connection based balancing mode.
  + Google Service Registry
  * Launched `gcloud alpha service-registry`. (alpha track)
    Users will need to sign up
    (https://docs.google.com/forms/d/11SfJGB3LUGgT_aSMlVzWoJ0ec2fHKwk0J4e-zTNw0Bs/viewform?edit_requested=true)
    before enabling this API in their projects.
  + Deployment Manager
  * Added `gcloud alpha deployment-manager runtime-configs`. Alpha
    commands for Deployment Manager's Runtime Config API.
  + Emulators
  * Adds a `--legacy` flag to gcloud beta emulators datastore. The flag
    is set by default and maintains existing behavior with support for
    Cloud Datastore API v1beta2. Passing `--no-legacy` uses a new version
    of the Cloud Datastore Emulator which supports Cloud Datastore API
    v1beta3 over gRPC, JSON, and proto-over-HTTP. The default behavior of
    the legacy flag will change in a future release.
  + Organizations
  * Launched `gcloud alpha orgranizations`. (alpha track)
- From version  110.0.0 (2016/05/18)
  + Google IAM
  * The `gcloud iam` command group is now available in GA. The
    `gcloud beta iam` will still be available for several more releases.
  + Google App Engine
  * Fixed issue with the `--docker-build=local` flag in the
    `gcloud preview app deploy` command with docker version 1.10+. Note
    that local Docker builds with Docker version 1.11 will still fail when
    using the new Docker external credentials; please downgrade to the
    plain credential store.
    https://code.google.com/p/google-cloud-sdk/issues/detail?id=802
  + Google Container Engine
  * `gcloud beta container` commands (e.g. `container create`) now support
    specifying ImageTypes.
  * The `gcloud container clusters list` command now sorts the clusters
    based on zone and then on cluster name.
  * The `gcloud container clusters create` command now allows specifying
  - -max-nodes-per-pool (default 1000) to create multiple node pools for
    large clusters.
  + Google Compute Engine
  * The `gcloud compute backend-services` backend commands now support
  - -instance-group-zone and --instance-group-region to qualify instance
    group specifically. Before --zone, --region was used to qualify all
    resource arguments, where as now it is used to qualify backend service.
  + Google Genomics
  * The `genomics variantsets create` command now supports the --name and
  - -description flags.
  * The `genomics variantsets delete` command displays the name of the
    variant set before prompting the user to delete it.
  * The genomics `variantsets describe/list` commands display variant set
    names and descriptions.
  + Emulators
  * The Google Cloud Datastore emulator supports a new environment variable
    for client library configuration.
  * The Google Cloud Datastore emulator flag --store-on-disk has been fixed to
    accept a false value using --no-store-on-disk. Previously,
  - -store-on-disk=False could be specified but wasn't respected.
  + Debug
  * The `The gcloud debug` command group is now in Beta.
  + Misc.
  * The Cloud SDK Windows installer is now dual signed SHA1 and SHA256. The
    executable is signed with both authenticode and RFC3161 signatures.
  * The winkeygen.exe executable is also now dual signed, like above.
- From version  109.0.0 (2016/05/11)
  + Google App Engine
  * Google App Engine components updated to 1.9.37.
  * Please visit the following release notes for details:
  * Python -
    https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed issue with failed uploads in gcloud preview app-deploy
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=784).
  * Deprecated --server flag for app commands; its use is unsupported.
  + Google Compute Engine
  * Removed the `gcloud alpha compute autoscaler` command group.
  * Removed deprecated `gcloud compute backend-services add-backend` --group
    flag in favor of --instance-group.
  * `gcloud compute copy-files` now exits with the return code of the called
    `scp` process.
  * Added support for customer-supplied encryption keys to the
    `gcloud beta compute disks snapshot` command.
  * Remove google-containers from default gcloud public image project.
  + Google Container Engine
  * Fixed bug listing clusters with no node pools.
  * `gcloud container resize` command now supports multi-zone clusters.
  + Google Error Reporting
  * Added the `gcloud beta error-reporting events delete` command to cleanup
    Stackdriver Error Reporting data.
- From version  108.0.0 (2016/05/04)
  + Breaking Changes
  * The `gcloud preview app modules get-logs` command is now deprecated.
    Please use the new command `gcloud preview app logs read` instead.
  + Google App Engine
  * Fixed a bug which caused `gcloud preview app deploy` to fail when run
    from a git directory.
  + Google Cloud SDK
  * Deprecated user property files (~/.config/gcloud/properties) will
    no longer be read by gcloud.  If you are not already using
    `configurations`, your properties will be automatically migrated for
    you.  No action is required on your part.
  * The `--format` flag now supports four more transforms: `extract`, `join`,
    `slice`, and `split`.
  + Google Cloud Debugger
  * Added the `gcloud alpha debug snapshots wait` command.
  + Google Compute Engine
  * The `gcloud alpha compute instance-groups managed list-instances` command
    output now includes the `INSTANCE_TEMPLATE` and `STATUS` columns.
  + Google Container Engine
  * Update kubectl to v1.2.3
  + Google Genomics
  * `gcloud alpha genomics variants describe/delete/update` commands now
    accept non-integer variant IDs.
- From version  107.0.0 (2016/04/27)
  + Google Compute Engine
  * Enable cursor ("start") support for get-serial-port-output in Beta.
  * Add tail-serial-port-output in Beta.
  * Image families are now in General Availability (GA).
  + Google App Engine
  * Google App Engine components updated to 1.9.36.
  * Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Deployment Manager
  * Creating and updating Deployments will now display output values
    in addition to listing the resources.
  + Google Container Engine
  * `gcloud container clusters resize` now allows specifying a node pool.
  + Cloud Debugger
  * Added `gcloud alpha debug` command surface to allow control of the
    Cloud Debugger from the command line.
  + Google BigQuery
  * BQ support for partitioned tables.
- From version  106.0.0 (2016/04/20)
  + Breaking Changes
  * Python 2.6 support in the Cloud SDK is deprecated and releases will stop
    supporting Python 2.6 on September 1, 2016.  Please update your Python
    installation to 2.7 to ensure compatibility with future Cloud SDK
    versions.
  * `gcloud preview app modules` commands are now deprecated (see "Google App
    Engine" section for more details).
  * `module` parameter in application .yaml files is now deprecated
    (see "Google App Engine" section for more details).
  * `--format` printer legend attributes are now deprecated (see "Cloud SDK"
    section for more details).
  + Cloud SDK
  * The --format printer legend attributes are deprecated and will be
    removed in release 124.0.0. The legend attribute docs have been removed.
  * The gcloud compute, functions, genomics, logging, and projects list
    commands now  support the `--filter` flag.
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.19/CHANGES.md)
  + Google App Engine
  * App Engine "modules" are being renamed to "services".
  * The `gcloud preview app modules` commands are now deprecated (except
    `gcloud preview app modules get-logs`). Please use the just-added
    `gcloud preview app versions`, `gcloud preview app services`, and
    `gcloud preview app instances` commands instead.
  * The 'module' parameter in application .yaml files is deprecated; please
    use 'service' instead.
  * Fixed `MaxRetrialsException` for `gcloud preview app deploy` of standard
    (not MVM or flexible) App Engine apps with `.git` directory present
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=727&gt;).
  * Fixed bug in `gcloud preview app deploy` where `--docker-build=local`
    did not work when `app/use_cloud_build` was enabled.
  + Google Compute Engine
  * Add `--no-creation-retries` flag to `compute instance-groups managed
    resize` command in alpha and beta.
  + Google Container Engine
  * Fix bug that caused kubectl component to be missing from components
    list on Windows.
  * `gcloud container clusters create` now allows specifying multiple zones
    within a region for your cluster's nodes to be created in.
  * Update kubectl to v1.2.2
- From version  105.0.0 (2016/04/13)
  + Breaking Changes
  * `health-checks` commands for protocol HTTP2 have been removed.
  * Rename the `alpha compute url-maps` `invalidate-cache` and
    `list-cache-invalidations` subcommands to `invalidate-cdn-cache` and
    `list-cdn-cache-invalidations`, respectively.
  + Cloud SDK
  * Suppress progress tracker animations if not outputting to a terminal.
  * `gcloud components list` now supports the `--filter` flag and queries
    like:
    `gcloud components list --filter=id:app-engine-java
  - -format="value(state.name)"`
  + Google Compute Engine
  * Promote Cloud CDN functionality from alpha to beta.
  + Google App Engine
  * File uploads during gcloud preview app deploy have been improved. If
    you have any trouble, you can revert to the old behavior with
    `gcloud config set app/use_gsutil true`.
- From version  104.0.0 (2016/04/06)
  + Cloud SDK
  * `gcloud init` no longer offers to clone
    [Google Cloud Repositories]
    (https://cloud.google.com/source-repositories/docs/).
    Please use `gcloud source repos clone` at any time after running
    `gcloud init`.
  + Google Compute Engine
  * `gcloud beta compute` commands now support image families.
  + Google App Engine
  * Users of `gcloud preview app deploy` can set the timeout for the
    Container Builder service using the app/cloud_build_timeout
    property.
  + Google Container Engine
  * kubectl component is now available for Windows (64-bit only).
  * `gcloud alpha container clusters update` now allows enabling/disabling
    addons for Container Engine clusters via `--update-addons` flag.
  * `gcloud container clusters create` now supports disabling
    HPA and Ingress controller addons via `--disable-addons` flag.
  + Google Genomics
  * `gcloud alpha genomics variants import` now supports configurable variant
    info field merging via the info_merge_config command line flag.
- From version  103.0.0 (2016/03/30)
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.18/CHANGES.md)
  + Google App Engine
  * Add fingerprinting support for PHP applications. You can now run
    `gcloud preview app gen-config` to auto-generate the necessary
    configuration for deploying PHP applications to the App Engine
    Flexible Environment.
  + Google Container Engine
  * gcloud container clusters create|get-credentials will warn/error
    respectively if the HOME env var isn't set. The variable
    is required to store kubectl credentials (kubeconfig).
  + Google Compute Engine
  * Enable support for: gcloud compute disks resize.
- From version  102.0.0 (2016/03/22)
  + Breaking Changes
  * The `gcloud alpha container nodepools` commands have been renamed to
    `node-pools`. Functionality and parameters haven't changed.
  * `gcloud beta iam list-grantable-roles` now returns a list of roles
    instead of a dictionary with a single key 'roles' with the value of
    a list of roles.
  * `gcloud config configuration describe` output has changed to include the
    configuration `name` and `is_active` fields. All configuration
    properties are now part of the `properties` field.
  + Cloud SDK
  * --format=json and --format=yaml now list resource attributes with
    null values.
  + Google App Engine
  * Use of the Google Container Builder service is now enabled by default for
    all managed VMs deployments.
    This change may require you to enable the Container Builder API. Visit
    https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=*PROJECT_ID*;
    to enable it, where *PROJECT_ID    * is your current project ID.
  * Updated Google App Engine components to 1.9.34.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Google Compute Engine
  * Added `gcloud compute backend-services` session affinity commands.
  * Added `gcloud compute http-health-checks` and `https-health-checks`
    commands.
  * Added `gcloud alpha compute target-ssl-proxies` commands.
  * Extended `gcloud compute forwarding-rules` to support
    `target-ssl-proxies`.
  + Google Container Engine
  * `gcloud container clusters list` will output a warning if there
    were zones for which it could not retrieve results.
  * Updated kubectl to version 1.2.0.
- From version  101.0.0 (2016/03/16)
  + Billing
  * Added [`gcloud alpha billing`]
    (https://cloud.google.com/sdk/gcloud/reference/alpha/billing/)
    command surface.
  + Google App Engine
  * App Engine components updated to 1.9.34. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for the
    Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
    for the Java release notes.
  + Google BigQuery
  * Updated the `bq` tool to version v2.0.24. Also includes fix for
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=632&gt;.
- From version  100.0.0 (2016/03/09)
  + Breaking Changes
  * `gcloud preview app deploy` deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the previous behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  + Cloud SDK
  * Providing no argument for list- and dict-type flags now results in a
    warning. Instead, please explicitly provide an empty string value. For
    instance, `gcloud command --flag` becomes `gcloud command --flag ''`
    (for list- and dict-type flags only).
  + IAM
  * Added `gcloud beta iam list-grantable-roles` command for given
    cloud resource.
  + Google App Engine
  * Fixed `WindowsError: [Error 32]` in the `gcloud preview app deploy`
    command on Windows. Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=554&gt;.
  + Google Container Engine
  * Added node pool support to enable heterogeneous clusters (alpha).
- From version  99.0.0 (2016/3/2)
  + Breaking Changes
  * Support for the deprecated workspace configurations feature has been
    removed. If you are using gcloud in a workspace, those properties will
    no longer be read.  See `gcloud topic configurations` for information
    on how to use configurations instead.
  + Cloud SDK
  * Enable gcloud to run in Cygwin 64 bit environments.
  * Fail gracefully on unreadable Google Compute Engine credential file.
    Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=460&gt;.
  + Google App Engine
  * App Engine components updated to 1.9.33. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for
    the Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt; for the Java
    release notes.
  * Added `gcloud preview app browse` command.
  * Fixed a race condition that caused errors while deploying App Engine
    Managed VM applications.
  * Fixed a TLS-related error during gcloud preview app deploy. Alleviates
    the problem in
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=559&gt;.
  + Google Compute Engine
  * `routers` surface moved to beta and is now accessible via
    `gcloud beta compute routers`
  + Google Cloud Dataproc
  * Add `--subnet` flag to `gcloud dataproc clusters create`.
  + Google Cloud Genomics
  * `genomics alpha operations cancel` assumes the `operations/` prefix
    if not present.
  + Google Cloud Storage
  * Update gsutil component to 4.17
- From version  98.0.0 (2016/2/24)
  * Release 95.0.0 introduced a bug that generated corrupt keys for
    Windows gcloud compute ssh|copy-files. Any keys generated on Windows
    between 95.0.0 and 97.0.0 inclusive are rejected by ssh servers.
    `gcloud compute` has been changed to:
  * Fix the winkeygen Windows key generator.
  * Recognize corrupt Windows keys and automatically regenerate them.
  * Fixed
    [#538](https://code.google.com/p/google-cloud-sdk/issues/detail?id=538).
    Users should no longer get "gsutil ImportError: No module named google"
    errors.
  + Google App Engine
  * MySqldb "latest" version changed from 1.24b4 to 1.2.5.
  + Emulators
  * Improves Pub/Sub emulator's ability to handle requests concurrent with
    HTTP pull requests.
  * The Pub/Sub emulator attempts to detect and inform users when an
    unsupported API version is used.
  * The Pub/Sub emulator now correctly handles absolute URIs in HTTP/Json
    requests.
  + Windows support
  * Google Cloud SDK no longer needs Python installed when using the Windows
    Installer. The SDK for Windows comes with Python bundled.
- From version  97.0.0 (2016/2/17)
  + Breaking Changes
    `gcloud alpha compute routers` now requires manual configuration of
    interfaces
  + Google Compute Engine
  * Added flag `--advertised-route-priority` to `gcloud alpha compute
    routers create`
  * Added support for regional instance groups in alpha
  + Google App Engine
  * Ruby runtime now uses the Rack "deployment" environment, instead
    of "none"
  + Google Container Engine
  * Added `--master` flag to `gcloud container clusters upgrade`
- From version  96.0.0 (2016/2/10)
  + Google App Engine
  * Google App Engine components updated to 1.9.32. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * The `gcloud preview app gen-config` command now offers to
    automatically update the runtime field in app.yaml if necessary.
  + IAM
  * The `gcloud beta iam` command group has launched.
  + Emulators
  * The Pub/Sub emulator now supports Gzip-encoded requests.
  + Google Compute Engine
  * The gcloud compute copy-files|scp commands on Windows now treat path
    arguments with a drive prefix as local files.
  + Configurations
  * The `config configurations delete` command now takes multiple
    configuration names.
  + Containers
  * kubectl is updated to v1.1.7.
  * Bugfix on the `gcloud container clusters get-credentials` when run
    from a client without edit permissions.
  + Misc. Changes
  * The default floating point output format precision is 6. Exponent
    notation is used for abs(n) &lt; 1e-04 and abs(n) &gt;= 1e+09.
  * The arrow and page up/down/home/end keys now work in the Windows help
    pager.
- From version  95.0.0 (2016/2/3)
  + Breaking Changes
  * Use `gcloud compute networks create --mode=legacy` to create non-subnet
    networks.
  + Google Compute Engine
  * `gcloud compute copy-files` and `gcloud compute ssh` on Windows now use
    standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone
    winkeygen.exe generates PuTTY and ssh compatible keys. The Windows
    PuTTY executables are up to date at version 0.66.
  + Google Compute Engine subnets
  * Added `gcloud compute networks subnets`.
  * Added `--mode` flag to `gcloud compute networks create`.
  * Added `--subnet` flag to `gcloud compute instances create` and
    `gcloud compute instance-templates create`.
  * Added `--local-traffic-selector` flag to `gcloud compute vpn-tunnels
    create`.
  + Google App Engine
  * Added support for streaming logs when the `use_cloud_build=1` property
    is set.
  * Moved the nodejs install script into the docker image.
  + Projects
  * `gcloud projects update|undelete|delete` have been moved to beta.
  + gcloud --format
  * Added nested table formatting by
    `--format="table(field1,listField2:format=FORMAT-STRING)"` where
    _FORMAT-STRING_ can be any format (json, table, ...).
    Try: `gcloud compute instances list
  - -format="table[box](name, disks:format='table[no-heading]
    (deviceName:sort=1, kind)')"`
  * Added list field aggregation formatting (similar to nested formatting) by
    `--format="table(listField2:format=FORMAT-STRING)"`. When the main table
    has no columns each nested format is aggregated into a single list.
    Try: `gcloud compute instances list
  - -format="table(disks:format='table[box](deviceName:sort=1, kind)')"`
- From version  94.0.0 (2016/1/27)
  + Google Compute Engine
  * Added `gcloud alpha compute url-maps list-cache-invalidations` command.
  + Google App Engine
  * Google App Engine components updated to 1.9.31. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added `--runtime` flag to `gcloud preview app gen-config` to specify
    a runtime when a directory identifies as multiple runtimes. This flag
    can be used in conjunction with `--custom`.
  + Google Container Engine
  * `gcloud container cluster describe` and `list` commands now notify
    the user when their cluster versions are about to go out of support or
    are unsupported.
  + Google Cloud Logging
  * `gcloud beta logging write` and `gcloud beta logging logs delete`
    commands now use the V2beta1 API. The `gcloud beta logging write`
    command now uses the global resource descriptor (which translates to
    "custom.googleapis.com" service in V1).
  + Cloud Dataproc
  * `gcloud beta dataproc clusters create` now supports `--tags` and
    `--metadata` flags to set instance tags and metadata on all instances
    in the Dataproc cluster.
  + PubSub Emulator
  * A new --host flag can be used to specify the address the emulator
    should bind as. The flag can be left unspecified, set to "localhost",
    a hostname, or an explicit IP address.
  + Projects
  * Added commands `get-iam-policy`, `set-iam-policy`,
    `add-iam-policy-binding`, and `remove-iam-policy-binding` for the
    `gcloud beta projects` surface.
  * Added the `gcloud projects list` command that can be used to list
    projects.
- From version  93.0.0 (2016/1/20)
  * kubectrl upgraded to 1.1.4.
  * `gcloud beta dataproc cluster create` now supports `--properties` flag
    to set properties for installed packages.
  * Datastore emulator's `DATASTORE_LOCAL_HOST` environment variable
    changed to `DATASTORE_EMULATOR_HOST`.
  * `gcloud source repos clone` now supports `--dry-run` flag to show
    equivalent git command.
- From version  92.0.0 (2016/1/13)
  * Because of the rollback of 91.0.0, this release contains all of the
    changes from 91.0.0 in addition to the changes listed below.
  + Breaking Changes
  * `gcloud preview app deploy`
  * Changed deployments to set the deployed versions to receive all
    traffic for their modules by default.
    To keep the old behavior (traffic split remains the same), use the
    `--no-promote` flag or run
    `gcloud config set app/promote_by_default true`.
    Note that your old versions are still running, and must be stopped
    manually. This behavior will change in a future release.
  * Removed deprecated `--set-default` flag.  Please use `--promote`
    instead.
  * `gcloud preview app deploy`: Removed deprecated `--env-vars` flag.
  * The output of the `gcloud preview app modules list` command has been
    changed to include the traffic split percentage instead of the 'default
    version' field.
  * Removed deprecated `gcloud preview app modules cancel-deployment`
    command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app modules download` command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app run` command. Please use
    `dev_appserver.py` instead.
  * Changed behavior of the `--zone`/`-z` flag in the
    `gcloud dns record-sets` command group. This flag can no longer precede
    the command. For instance,
    `gcloud dns record-sets -z=mz list` will not work, but
    `gcloud dns record-sets list -z=mz` will.
  * Changed `--password-file` option for `sql instances set-root-password`;
    password now does not include trailing newline from password file. This
    matches the documented behavior, but not the previous behavior.
    (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419)
  * Removed `meta/active_configuration` from the results of
    `gcloud config list` since it is not a property that can be set. You
    can continue to use the `gcloud config configurations` commands to
    view and manage your configurations.
  + Cloud SDK
  * Added `gcloud config` proxy settings. Users can configure `gcloud` to
    use a proxy via the following settings:
  * `gcloud config proxy/address`
  * `gcloud config proxy/password`
  * `gcloud config proxy/port`
  * `gcloud config proxy/type`
  * `gcloud config proxy/username`
  * Added `alpha` and `beta` components to Debian packages.
  * Removed unused config properties: `app/hosted_registry`, `app/host`,
    `app/admin_host`, `app/api_host`.
  + Google Cloud Logging
  * Migrated to
    [v2beta1](https://cloud.google.com/logging/docs/api/introduction_v2) API
    release.
  * Moved `gcloud beta logging sinks` commands to `v2beta1`.
  * Added `gcloud beta logging resource-descriptors` command to display
    supported resources from various services.
  * Added `gcloud beta logging read` command to retrieve log entries
    using filters.
  + Google Container Engine
  * Added `gcloud container clusters resize` for resizing Container Engine
    clusters.
  * Added notifications when node upgrades are available to `gcloud container
    cluster describe` and `list` commands.
  + Google App Engine
  * Fixed bug where initial deployments using `--image-url` failed.
  * Changed `gcloud preview app modules set_default` command to use the App
    Engine Admin API.
  * Changed `gcloud preview app modules list` command to use the App Engine
    Admin API.
- From version  91.0.1 (2015/12/16)
  * The Cloud SDK has been rolled back to 90.0.0.
- From version  91.0.0 (2015/12/16)
  + Breaking Changes
  * Deprecated command group `gcloud compute replica-pools` has been removed.
  * Deprecated command group `gcloud compute resource-views` has been removed.
  * App Engine API is now the only supported method for deploying in the
    `gcloud preview app deploy` command.
  + Google App Engine
  * `DEPLOYABLES` argument for `gcloud preview app deploy` is now
    optional. If not given, the command defaults to `app.yaml` in the
    current directory; if that is not found, it attempts to automatically
    generate necessary configuration files (such as app.yaml) in the
    current directory before deployment.
  * `--force` argument to `gcloud preview app deploy` is now deprecated
    and will be removed in a future release.
  + Container
  * `gcloud container` commands that poll long running operations
    (e.g create, delete, upgrade) now display progress details when
    available.
- From version  90.0.0 (2015/12/09)
  * Cloud SDK release version scheme has changed. Patch version is now
    treated as a major release version which corresponds to SDK weekly
    releases. Any updates/fixes to released version will increment
    minor/patch version number going forward.
  + Breaking Changes
  * The deprecated flag --clear-target-pool has been removed from
    `gcloud compute instance-groups managed set-target-pools` command.
  + Google App Engine
  * Components updated to 1.9.30.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed a bug caused by uploading invalid file names for vm: true
    applications.
  + Compute
  * Subnetwork support has been promoted from alpha to beta. For more
    information see https://cloud.google.com/compute/docs/subnetworks.
- From version  0.9.89 (2015/12/02)
  + Breaking Changes
  * Removed flag `--container-ipv4-cidr` for
    `gcloud container clusters create`; please use `--cluster-ipv4-cidr`
    instead.
  * Renamed `gcloud alpha compute vpn-tunnels create --ike-networks` to
    `--local-traffic-selector`.
  * `gcloud alpha compute resource-views` commands will soon be removed.
    Please use `gcloud compute instance-groups unmanaged` commands instead.
  * `gcloud alpha compute replica-pools` commands will soon be removed.
    Please use `gcloud compute instance-groups` commands instead.
  + `gcloud` Core
  * Changed behavior of `gcloud init` git repository clone option. It now
    takes as input a path to the destination directory for the repository,
    rather than the parent directory of the repository destination.
  + BigQuery
  * Fixed failure in `gcloud alpha biquery query
    "select     * from ..."` command while displaying query results.
  + Compute
  * Fixed `gcloud alpha compute instances set-machine-type` failure when
    supplying custom cpu/custom memory, but no zone.
  * Added a new scope alias for Cloud Monitoring: `monitoring-write`. This
    scope is on by default in all new VMs.
  + Google Cloud DNS
  * Added `--replace-origin-ns` flag to `gcloud dns record-sets import`
    command to allow importing NS records.
  + Google Cloud Storage
  * Updated `gsutil` component to 4.16.
  + Google Container Engine
  * Updated kubectl to version 1.1.2.
  * Increased `gcloud container clusters create/delete` timeouts from 20m to
    30m.
  * Added `--subnetwork` flag to `gcloud container clusters create` to
    allow creation of container clusters can now be created in a Google
    Compute Engine subnetwork
    (https://cloud.google.com/compute/docs/subnetworks).
- From version  0.9.88 (2015/11/25)
  + Breaking Changes
  * The `gcloud preview app run` command has now been removed. Please use
    the bundled `dev_appserver.py` script directly instead.
  * App Engine: The 'version' and 'application' fields in module and
    configuration files are now illegal. Project name should instead be
    specified either by `gcloud config set project MY_PROJECT` or by
    setting the `--project` flag on individual command executions. Versions
    are generated automatically by default but can also be manually
    specified by setting the `--version` flag on individual command
    executions.
  + App Engine
  * Don't do runtime identification for custom runtimes during deploy. This
    fixes issue [#387]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=387).
  * The `dev_appserver.py` script no longer requires the installation of
    all App Engine components. It will install only the necessary ones at
    run time. Fixes [#273]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=273)
  + Core
  * Added the `gcloud components install` command.  This allows you to
    install missing components at the version of the SDK you currently have
    (it does not update your SDK installation).  `gcloud components update`
    should now only be used to update your SDK to the latest version.
  * Fixes [#293]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=293)
    related SSL certificate validation issues.
  * Use zsh builtins in path.zsh.inc for faster/cleaner shell startup.</changelog>

</package>
<package pkgid="42722041aaac5003058c0178b5eb52a158b469bc4bfdc75cb56d928fa2993227" name="google-cloud-sdk" arch="src">
    <version epoch="0" ver="140.0.0" rel="13.1"/>

<changelog author="rschweikert@suse.com" date="1393243200">- Use the setup.py code of the "integrated" gsutil and gcutil code
  the toplevel gsutil and gcutil commands are useless wrappers that play
  extremely stupid tricks with the path and other stuff.
- Add patch gsutilHideDeps.patch and gcutilHideDeps.patch to hide the
  hard dependencies for gsutil and gcutil, respectively</changelog>
<changelog author="rschweikert@suse.com" date="1393243201">- Fix the gcutilHideDeps.patch to hide requirements on python versions &lt; 2.7
  this fixes build on SLE 11</changelog>
<changelog author="rschweikert@suse.com" date="1393416000">- Remove the dependency on python-oauth2, this is only needed when using
  the oauth2client delivered with the sdk tarball. However, we use the
  already packaged version of the client google-api-python-client which
  does not have that dependency. Thus the dependency is superfluos.</changelog>
<changelog author="rschweikert@suse.com" date="1393416001">- Add missing package dependencies</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1393502401">- Add missing dependency to python-setuptools</changelog>
<changelog author="rschweikert@suse.com" date="1394107200">- Support the new boto config option and recognize the "system"
  keyword. Set the certificates file to None to use the system
  implementation
- add patch: gsutilSupportBotoCfgKeyword.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107201">- Disable gcutil internal version check
- add patch: gcutilNoInternalVersionCheck.patch</changelog>
<changelog author="rschweikert@suse.com" date="1394107202">- Update to version 0.9.18
  + Updated all AppEngine tools to 1.9.0
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + New 'gcloud init' command
  - Creates a local workspace for your project with a git clone of
    your Google hosted repository.
  + Updated gcutil to 1.14.0
  - Switched to new, single API call for creating a virtual machine instance
    with a root persistent disk.
  - Added new command, 'setinstancediskautodelete', that sets the
    auto-delete option for persistent disks attached to virtual
    machine instances.
  - Added support for specifying a disk size when creating a disk using
    a snapshot.
  - Decreased the time spent waiting for SSH keys to propagate
    during initial instance creation from 120 seconds to 10 seconds.</changelog>
<changelog author="rschweikert@suse.com" date="1401969600">- Update to version 0.9.25
  + 'gcloud preview app deploy' and '... run' argument updates.
  + 'gcloud config *' argument updates.
  + Updated all AppEngine tools to 1.9.5
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + gcloud now has App Engine and Cloud Datastore integration.
  - Commands can be found under `gcloud preview app` and
    `gcloud preview datastore`
  + New `gcloud compute` tool for working with compute engine (RC)
  - Run `gcloud components update compute` to install
  - Run `gcloud help compute` for more information
  + Updated all AppEngine tools to 1.9.4
  - https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes
  - https://code.google.com/p/googleappengine/wiki/SdkForJavaReleaseNotes
  + Added color to error and warning messages (on Linux and Mac)
  - To disable, run `gcloud config set disable_color true`
  + New 'gcloud help command'
  - Displays man style extended help for commands (where available).
  + New 'gcloud auth activate-service-account' command
  - Used to authenticate with gcloud using a service account key file.
  - See: https://developers.google.com/storage/docs/authentication#service_accounts
- Enable "big query" install and use
  + add patch bqHideDeps.patch
- Fix use of gcloud command
  + add patch gcloudFixPath.patch</changelog>
<changelog author="rschweikert@suse.com" date="1402056000">- Remove unnecessary dependency on python-oauth2</changelog>
<changelog author="rschweikert@suse.com" date="1403006400">- Remove debug print from setup.py
- Include templated html files as data files, these are used by the
  auth setup workflow</changelog>
<changelog author="rschweikert@suse.com" date="1403352000">- Fix setup file to properly include package data embedded in
  googlecloudsdk package, previously *.json files were missing</changelog>
<changelog author="rschweikert@suse.com" date="1403870400">- Disable the Google built in "component" management and version upgrade
  mechanism
  + add hideImplicitVersionMgmt.patch</changelog>
<changelog author="rjschwei@suse.com" date="1422705600">- Add patches:
    + gsutil_noVersioCheckOrUpdate.patch
    + gsutil_respectBotoCfgKeyword.patch
    + hidePathMangeling.patch
  Remove patches:
  - gcloudFixPath.patch
  - gsutilSupportBotoCfgKeyword.patch
- Update to version 0.9.44   bnc#915479
  + Fixes applied to the google/appengine-gobase image for managed VMs.
  + Tab completion for gcloud SQL commands.
  + Support added for authenticating service accounts with JSON keys.
    If using JSON keys, PyOpenSSL is no longer a dependency.
  + Suport for local ssds in instance templates for gcloud compute.
  + Progress Bars.
  + Compute Instances start/ stop commands.
  + Bug Fixes.
  + Added support for local SSD.
  + Added support for Google Compute Engine Instance Templates in
    compute component.
  + Overhaul of 'gcloud sql'
    ~ Updated the output for all commands.
    ~ Updated usage for 'gcloud sql ssl-certs create'.
  + Added support for creating and maintaining Cloud SQL read replica instances.
    ~ Added --master-instance-name property that can be set during replica
    creation to indicate the replication master for the read replica instance.
    ~ Added --enable-database-replication, --no-enable-database-replication
    flags that can be used to start, stop replication for the read replica
    instance.
    ~ Added 'promote-replica' command that promotes a read replica instance into
    a stand-alone Cloud SQL instance.
  + Added several new features to the compute component:
    ~ Implemented new subcommands for interacting with HTTP load balancing:
  - gcloud compute url-maps add-host-rule
  - gcloud compute url-maps add-path-matcher
  - gcloud compute url-maps remove-host-rule
  - gcloud compute url-maps remove-path-matcher
  - gcloud compute url-maps set-default-service
    ~ Added support for automatically generating initial Windows username and
    password when creating a virtual machine instance from a Windows
    image or a disk initializaed from a Windows image.
    ~ Added a new scope alias for Cloud SQL administration: 'sql-admin'.
  + The compute component is now in General Availability.
    ~ Added new 'compute/zone' and 'compute/region' properties that
    can be used to set a default zone and region. To set the
    properties, run 'gcloud config set compute/zone ZONE' and 'gcloud
    config set compute/region REGION'.
    ~ Added support for overriding disk auto-deletion during instance
    deletion.
    ~ Updated the output of commands that mutate resources to be more
    human-friendly. The --format flag can be used for more verbose
    output.
    ~ Replaced all 'get' subcommands with 'describe' subcommands (e.g.,
    'gcloud compute instances get' has been replaced with 'gcloud
    compute instances describe').
    ~ Renamed the 'firewalls' collection to 'firewall-rules'.
    ~ Added support to the 'addresses' collection for interacting with
    global addresses.
  + Updated gcutil to 1.16.3 and various AppEngine runtimes to 1.9.7 binaries.
  + Support running several modules by gcloud app run and fixed output errors.
  + Limit gcloud upgrade nags to once per day.
  + Bring help files up to date (for example improved the documentation
    for DM 'templates create' and 'deployments create').
  + Added prompting for regions and zones to most subcommands of the
    compute component.
  + Added new subcommands to the compute component for adding and removing
    backends from backend services.
  + Added --ssh-flags to 'gcloud compute ssh' for passing additional flags
    to ssh.
  + Added image alias support for the --image flag in the compute component.
  + Added --shell mode to all gcloud commands
    ~ Type a partial command followed by '--shell' to drop into a sub shell
    at that point in the command tree.
    ~ Eg:
    $ gcloud compute --shell
    gcloud compute $ instances list
    gcloud compute $ copy-files ...
  + Updated gsutil to 4.3
  + Allow installed crcmod to be used by default with gsutil by enabling
    site packages</changelog>
<changelog author="rjschwei@suse.com" date="1448107200">- Remove patches:
  + gsutil_respectBotoCfgKeyword.patch
  + gsutilHideDeps.patch
  + gcutilHideDeps.patch
  + hideImplicitVersionMgmt.patch
  + gsutil_noVersioCheckOrUpdate.patch
  + gcutilNoInternalVersionCheck.patch
  + bqHideDeps.patch
- Update to version 0.9.87  (bsc#954690)
  [#]## Compute
  * `gcloud alpha compute instances create` now supports --custom-cpu and
  - -custom-memory flags to specify custom machine types.
  [#]## Dataproc
  * Added `gcloud beta dataproc clusters diagnose` command. See
    &lt;https://cloud.google.com/dataproc/support/diagnose-command&gt; for
    more info.
  [#]## Google Container Engine
  * Updated kubectl to version 1.1.1.
  * 0.9.86 (2015/11/11)
  [#]## App Engine
  * Generated node.js Dockerfiles now add the full application context before
    running install hooks.
  * For Google App Engine Node.js runtimes, install requested version of node
    prior to doing an npm install.
  [#]## Compute
  * `gcloud beta compute instances set-machine-type` has been promoted
    from alpha to beta,
  * From 0.9.85 (2015/11/04)
  * `gcloud alpha compute networks create` now requires --mode flag.
  (Backwards incompatible change)
  [#]## App Engine
  * Added the --output-directory option to gen-repo-info-file command.
    This option supersedes --output-file, which is deprecated and will
    be removed in a future release.
  * Improved error message when specified yaml file is not found.
  [#]## Compute
  * Launching `gcloud alpha compute networks subnets`.
  * `gcloud compute alpha instance-templates` and `instances` now support
    subnetworks.
  * New flag --ike-networks in `gcloud alpha compute vpn-tunnels create`.
  * `gcloud compute ssh` now passes through the exit code of the ssh
    command. This fixes issue [#146 ]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=146).
  [#]## Misc. Changes
  * Gracefully handle socket timeouts while checking for Google Compute
    Engine metadata server. This fixes issue [#339]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=339).
  * From 0.9.84 (2015/10/28)
  [#]## App Engine
  * Due to PageSpeed service deprecation, user will receive a warning when
    deploying a new version to App Engine.
  * Implemented fingerprinting support for Java.
  * The gen-config flag now generates only app.yaml for the matching
    runtime by default, you must use the --custom flag to generate an
    app.yaml with a runtime of "custom" and Dockerfile (and other configs).
  [#]## Compute
  * GA support for https load balancing features.
  * Deprecated --clear-target-pool flag from compute instance-groups managed
    set-target-pools command.
  [#]## Windows support
  * Windows Installer can now take a /logtofile flag to write installation
    logs to file CloudSDKInstall.log located in the same directory.
  * Windows installer now displays an error message when the installation
    does not succeed.
  [#]## Command Line Interface support
  * The [page=N] table format attribute prints one or more tables of at
    most N rows. Use this to view paged server data as it arrives at
    the client.
  * From 0.9.83 (2015/10/21)
  [#]## App Engine
  * In a future release, the `gcloud preview app deploy` command will
    no longer support deploying multiple modules in the same invocation.
  [#]## Compute
  * Ubuntu 14.10 is end of life: https://wiki.ubuntu.com/Releases
  * Fixed external issue [#291]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=291),
    related to handling network addresses on Windows.
  [#]## Container Engine
  * `gcloud container clusters list` now displays the current number of nodes
    for the cluster.
  [#]## Windows support
  * When running Cloud SDK tools from PowerShell the `gcloud-ps.ps1` wrapper
    scripts now can be used which no longer call to `cmd.exe`. Using
    `gcloud-ps`, complex arguments can be passed without escaping for
    Windows command line. Using `gcloud`, the following command would be
    correctly escaped when running gcloud in PowerShell:
    gcloud fun --arg='"test ^&lt; 123"'
    With the new `gcloud-ps`, the same command can be simply written as:
    gcloud-ps fun --arg='test &lt; 123'
    Permissions to run PowerShell scripts must be given to PowerShell
    before these will work. Permissions can be changed with
    `"Set-ExecutionPolicy RemoteSigned"`.
  * From 0.9.82 (2015/10/14)
  [#]## App Engine
  * The App Engine Admin API is now the default path for deployments in the
    `gcloud preview app deploy` command. This transition should be
    transparent, but if you experience any issues and would like to
    revert to the old behavior, please run `gcloud config set
    app/use_appengine_api false`.
    See &lt;https://cloud.google.com/appengine/docs/admin-api/&gt; for more
    information about this API.
  * With `env: 2`, valid python runtimes are `python` and `python-compat`.
  * Implemented fingerprinting support for python.
  [#]## Container Engine
  * `gcloud container clusters create`: The flag `--container-ipv4-cidr` has
    been deprecated; `--cluster-ipv4-cidr` should be used instead.
  [#]## SQL
  * `gcloud beta sql operations describe` and
    `gcloud beta sql operations wait` no longer need `--instance`
    flag (`gcloud beta sql operations list` still does).
  * Fixed issue with `gcloud sql instances clone` when `--bin-log-file-name`
    and `--bin-log-position` are set.
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=201&gt;).
  * From 0.9.81 (2015/10/07)
  [#]## Breaking Changes
  * If you are using a service account to run commands under
    `gcloud preview app`, you must enable the "App Engine Admin API" in the
    Developers Console (&lt;https://console.developers.google.com&gt;; navigate to
  * *APIs and Auth &gt; APIs**).
  * In a future Cloud SDK release, deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the current behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  * Removed `app get-resource-limits` command.
  [#]## App Engine
  * App Engine components updated to 1.9.27. Please see the following release
    notes for details:
  * Python: &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt;
  * Java: &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
  * The `gcloud preview app deploy` command now requires that users specify or
    omit the runtime: field from app.yaml if a Dockerfile is also specified.
  * The `gcloud preview app deploy` command now supports the "engines" field
    in package.json for node.js applications.
  [#]## Misc. Changes
  * Windows Installer has an option to run `gcloud init` after the
    installation finishes.
  * From 0.9.80 (2015/09/30)
  * `gcloud app`
  * Soon, deployments will set the deployed version to receive all traffic
    by default.  To keep the current behavior, use the `--no-promote` flag
    or run the following command:
    $ gcloud config set app/promote_by_default false
    To adopt the new behavior early, use the `--promote` flag or run the
    following command:
    $ gcloud config set app/promote_by_default true
  * The `--set-default` flag is deprecated. Please use the `--promote` flag
    instead.
  * In a future Cloud SDK release, deployments that promote the new version
    to receive all traffic will stop the previous version by default.  To
    keep the current behavior, pass the `--no-stop-previous-version` flag,
    or run the following command:
    $ gcloud config set app/stop_previous_version true
  * The `app run` command is deprecated and will soon be removed.  Please
    use dev_appserver (found in the same directory as the `gcloud command)
    instead.
  * The `gcloud preview app modules download command` is deprecated, and
    will be removed soon.
  * The Windows installer has an option to run `gcloud init` after the
    installation finishes.
  * The `preview` component has been removed.
  * The `gcloud preview app` commands remain available as usual and
    are still shipped through the `app` component.
  * Please use `gcloud compute instance-groups unmanaged` instead
    of `gcloud preview instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * Please use `gcloud compute instance-groups managed` instead of
    `gcloud preview managed-instance-groups`.  Note that you will need to
    modify some command invocations when switching to the non-preview
    commands.
  * All Google Compute User Accounts commands have moved to beta.
  * Deployment-manager list commands now support pagination.
  * Minor bug fixes.
  * From 0.9.79 (2015/09/23)
  * The following commands have been promoted from beta to GA:
  * gcloud config configurations ...
  * gcloud source repos clone
  * gcloud beta init. Old `gcloud init` behavior has been removed, and
    partially replaced by new gcloud init or directly via gcloud source
    repos clone.
  * Release gcloud beta dataproc.
  * The --env-vars flag in gcloud preview app deploy has been removed.
  * Automatic ssh key generation respects the --quiet flag.
  * The --format flag now supports extended format expressions. For
    details run
    $ gcloud topic formats.
  * Most commands now document the positive Boolean --FLAG form and accept
  - -no-FLAG to disable. For the past few releases --log-http accepted an
    optional true/false value. It has been restored to its original definition
    of being a Boolean flag that has no value.
  * `gcloud sql` operations are now automatically retried for 2s in case of
    HttpException: The Cloud SQL instance operation does not exist.
  * Update gcloud's kubectl from 1.0.5 to 1.0.6.
  * Deprecate `gcloud preview app get-resource-limits`.
  * From 0.9.78 (2015/09/16)
  * App Engine components updated to 1.9.26. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Increase the default boot disk size for remote build VMs in
    `gcloud preview app deploy`.
  * The `--instance` flag to the `gcloud preview app modules set-managed-by`
    command now takes an instance name instead of an index.
  * The V1Beta4 API for sqladmin can now be accessed through the
    `gcloud beta sql` surface.
  * Usability enhancements for `gcloud beta init` and named configurations.
  * From 0.9.77 (2015/09/09)
  * gcloud preview logging is now gcloud beta logging.
  * Update kubectl to version 1.0.5
  * Windows Cloud SDK installer improvements:
  * Now allows changing the installation mode. You can choose between a
    "current user" installation and an "all users" installation.
  * Now has an uninstaller and writes "Add/Remove Programs" uninstall
    entries.
  * Removal of unsupported --env-vars argument from gcloud preview app deploy.
  * gcloud compute instance groups: Allow --named-ports flag to be empty and
    clean named ports in set-named-ports commands.
  * Change in gcloud compute backend-services: introduce new flag
  - -instance-group which takes advantage of new Instance Groups API.
  * From 0.9.76 (2015/09/02)
  * Update gsutil component to 4.14.
  * Resource views commands have moved from preview to alpha. Please
    use `gcloud alpha compute resource-views` in place of
    `gcloud preview resource-views`.
  * Replica pool commands have moved from preview to alpha. Please use
    `gcloud alpha compute replica-pools` in place of
    `gcloud preview replica-pools`.
  * `gcloud beta source repo` was renamed to `gcloud beta source repos`
  * Created google-cloud-sdk-announce@googlegroups.com
    &lt;https://groups.google.com/d/forum/google-cloud-sdk-announce&gt; email
    group to announce new releases and other important information.
  * 'gcloud alpha init' command is now also in beta.
  * Add target size of managed instance group for "compute instance-groups
    managed list" command.
  * Fixed the removal of platform-specific components when running `gcloud
    components remove`.
  * Fixed a bug related to checking for SDK updates when the SDK is
    installed as root (like on Debian Compute Engine images).
  * Affected users should now see less frequent update messages and overall
    improved gcloud performance
  * `gcloud preview app deploy` won't update local images automatically
    anymore.
  * From 0.9.75 (2015/08/26)
  * Container Engine
  * Container Engine GA commands available under `gcloud container`.
  * `gcloud beta container get-credentials` now takes cluster name as
    argument instead of `--cluster` flag for consistency with other
    commands.
  * Added `gcloud alpha container clusters update &lt;cluster&gt;
  - -cloud-monitoring=&lt;val&gt;` command.
  * New release notes are printed on upgrade. (This won't take effect until
    an upgrade from this version to a later version.)
  * New `gcloud alpha genomics variantsets export` command.
  * Commands promoted from `gcloud alpha` to `gcloud beta`:
  * `gcloud beta config configurations ...`
  * `gcloud beta sources clone`
  * Improvements in error reporting and default output formatting.
  * From 0.9.74 (2015/08/19)
  * New list and import commands under `gcloud alpha genomics variants`.
  * Removed `--remote` flag. Instead, please use the `--docker-build=remote`
    flag (or use `--docker-build=local` to force a local build).
  * In this release, Docker builds are hosted by default. To opt-in to
    the old behavior, please use the `--docker-build=local` flag.
  * 0.9.73 (2015/08/12)
  * gcloud sql instances create default to MySQL 5.6
  * gcloud beta container get-credentials renamed to gcloud beta container
    clusters get-credentials
  * New commands
  * gcloud beta projects ...
  * gcloud alpha genomics callsets ...
  * gcloud beta emulators datastore ...
  * gcloud beta container get-server-config
  * gcloud alpha config configurations
  * From 0.9.72 (2015/08/05)
  * gcloud compute
  * initial surface changes for the backend-bucket.
  * `instance-groups set-named-ports`: introduced a new flag
    `--named-ports NAME:PORT,[NAME:PORT,...]` - no need to specify names
    and ports in separate flags.
  * gcloud preview app deploy
    Deprecate `--remote` flag in preparation for hosted Docker builds by
    default. Instead, please use the `--docker-build={remote,local}` flag.
    The default is still a local Docker build; in two releases, the default
    will switch to a hosted build.
  * New gcloud alpha genomics operations {list, cancel, describe} commands
  * From 0.9.71 (2015/07/29)
  * Launching `gcloud alpha pubsub` commands.
  * Moved `gcloud preview rolling-updates` to
    `gcloud alpha compute rolling-updates`.
  * `gcloud alpha compute disks resize` command enabling resizing of
    persistent disks.
  * Beta launch of customer supplied encryption keys for Compute Engine.
  * Updated kubectl to 1.0.1.
  * `gcloud alpha container` commands now target Container Engine v1 API.
    Options for `gcloud alpha container clusters create` updated accordingly:
  * `--user` renamed to `--username`
  * `--cluster-api-version` removed. Cluster version is not selectable in
    v1 API; new clusters always created at latest supported version.
  * `--image` option removed. Source image not selectable in v1 API;
    clusters are always created with latest supported ContainerVM image.
    Note that using an unsupported image (i.e. not ContainerVM) would
    result in an unusable cluster in most cases anyway.
  * Added `--no-enable-cloud-monitoring` to turn off cloud monitoring
    (on by default).
  * Added `--disk-size` option for specifying boot disk size of node vms.
  * App Engine components updated to 1.9.24. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
    For several months on the Managed VMs team we've been testing a new
    mode of `dockerless` local development on gcloud that makes developing
    a module for Python, Java and Go users similar to development of
    regular App Engine applications. This new mode relaxes the sandbox
    constraints present in the devappserver for `vm: false` applications,
    and does not require Docker to be installed.
    You can currently opt-into this behavior by setting
    GAE_LOCAL_VM_RUNTIME=1; In this release of the Cloud SDK, we will be
    making this behavior the default for Managed VM users who are using
    gcloud.
    You can still opt-out of this behavior by setting: GAE_LOCAL_VM_RUNTIME=0.
    For custom runtime users, if you are relying on the local Development
    Server to build your application, will now need to pass the
    `--custom-entrypoint` flag to `gcloud preview app run` to provide
    gcloud with the correct command to call.
    This does not affect users developing for non-managed VMs, or for
    users who are not using gcloud."
  * Bug fixes for:
  * `gcloud preview app deploy` file paths issue on Windows.
  * `gcloud compute instance-groups managed wait-until-stable` periodic user
    prompting for target zone.
  * From 0.9.70 (2015/07/22)
  * Add `gcloud compute instance-groups` commands.
  * Move `gcloud beta deployment-manager` commands to general availability as
    `gcloud deployment-manager` and update to use the v2beta3 API. This change
    does not alter the gcloud surface for users of the deployment-manager
    component.
  * Update kubectl to 1.0.0.
  * `gcloud alpha genomics` commands now use the genomics V1 API. The
  - -project-number flag for `dataset create` and `dataset list` is now
    obsolete. The configured --project-id is used instead and can be
    overridden with the --project-id flag.
  * Fix hang on errors in `gcloud preview app deploy`.
  * From 0.9.69 (2015/07/15)
  * Update kubectl to 0.20.2.
  * Fix an authentication issue with 'gcloud docker' affecting docker version
    1.7.0 and later.
  * Remove `gcloud preview dm-v2` command group.
  * Remove `gcloud preview deployment-manager` command group
    (`gcloud beta deployment-manager` still exists; see
    &lt;https://cloud.google.com/sdk/#install-version&gt; if you want to pin your
    installation to an old version).
  * Bug fixes.
  * From 0.9.68 (2015/07/08)
  * Deprecated gcutil tool is no longer distributed with Cloud SDK.
    It is still available via &lt;https://cloud.google.com/compute/docs/gcutil&gt;.
  * Added support for Container engine BETA commands under the
    `gcloud beta container` command group.  Existing `gcloud alpha container`
    commands are unchanged.
  * The standalone App Engine SDKs are no longer distributed through the
    Cloud SDK.
  * App Engine functionality can still be used through the
    `gcloud preview app` command group.
  * The gae-java, gae-python, gae-php, and gae-go components no longer
    exist in the component manager.
  * If you need to use appcfg or dev_appserver directly, these are still
    available in the App Engine SDK downloads that can be found here:
    &lt;https://cloud.google.com/appengine/downloads&gt;
  * Bug fixes.
  * From 0.9.67 (2015/07/01)
  * App Engine components updated to 1.9.23. Please visit
    &lt;https://code.google.com/p/googleappengine/wiki/SdkReleaseNotes&gt; for
    details.
  * Added the "gen-config" command to app surface to generate configuration
    files for node.js apps.
  * New `compute instance-groups unmanaged` commands group for Instance
    Groups which are not managed by Instance Group Manager
  * Moved `gcloud beta sql instances connect` to `gcloud beta sql connect`.
  * Smarter polling while waiting for SQL operations to finish, reducing the
    number of requests sent to the server.
  * Linux/Mac install script disables prompts if there is no controlling tty.
  * Linux/Mac install script now properly detects zsh and ksh RC files.
  * Bug fixes.
  * From 0.9.66 (2015/06/24)
  * New commands
  * `gcloud alpha compute instances set-machine-type` for managing types
  * `gcloud topic` for supplementary help topics.
  * `gcloud deployment-manager deployments delete` prompt defaults to false.
  * From 0.9.65 (2015/06/17)
  * Fixes `reset-windows-password` on Windows if `openssl` is present on the
    path.
  * `gcloud compute reset-windows-password` is now available as a GA command.
  * Prevent creation of a user that matches the machine name on Windows.
  * gsutil now runs properly from not-default drive letters on Windows.
  * kubectl updated to 0.18.1.
  * `gcloud preview docker` moved to `gcloud docker`.
  * From 0.9.64 (2015/06/10)
  * New commands
  * `gcloud beta compute scp` for secure copy.
  * `gcloud alpha genomics` commands (on datasets).
  * `gcloud alpha source list` to lists project repositories.
  * kubectl will no longer be installed by default.
  * Bug fixes for https load balancing.
  * The help pager is $PAGER or less(1) if available, otherwise a
    builtin pager.
  * Update of gsutil component to version 4.13.
  * From 0.9.63 (2015/06/03)
  * 2x faster command load times.
  * Fix to allow `preview app` to use oauth service accounts
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=133&gt;
  * From 0.9.62 (2015/05/27)
  * Not released.
  * From 0.9.61 (2015/05/20)
  * New kubectl component (installed by default)
  * Internal improvements to gcloud preview app deploy; includes changes to
    command output.
  * `gcloud preview projects` moved to `gcloud alpha projects`
  * Tab completion for `gcloud compute ssh`
  * From 0.9.60 (2015/05/13)
  * VPN moved to GA.
  * Preemptible VM support.
  * Bug fixes.
  * From 0.9.59 (2015/05/06)
  * Bug fixes.
  * From 0.9.58 (2015/04/29)
  * gcloud alpha bigquery launch.
  * Better error reporting in Customer Supplied Encryption Key files.
  * Bug fixes.
  * From 0.9.57 (2015/04/22)
  * gcloud beta deployment-manager launch.
  * gcloud app new deployment behavior.
  * deploy and run commands no longer take directories, only take a list of
    explicit yaml files.
  * gcloud beta compute reset-windows-password, support for new authentication
    scheme on Windows guest agent versions 3.0.0.0 and later.
  * Bug fixes.
  * From 0.9.56 (2015/04/15)
  * Bug fixes.
  * from 0.9.55 (2015/04/8)
  * New and improved gcloud dns surface including:
  * Transactions for scriptable editing of record-sets.
  * Importing record-sets from zone files and yaml files.
  * Exporting record-sets to zone files and yaml files.
  * VPN commands surfaced under gcloud compute.
  * Dataflow CLI commands launched under gcloud alpha!
  * From 0.9.52 (2015/03/18)
  * Bug Fixes.
  * From 0.9.51 (2015/03/11)
  * Bug Fixes.
  * From 0.9.50 (2015/03/04)
  * Introducing the `gcloud beta ...` command group
  * Existing gcloud commands will be replicated under this new group, but
    use the beta version of their API instead of the GA version.
  * New command behavior and features that are beta only will first appear
    under this group until the feature gets promoted to general
    availability.
  * Run `gcloud components update beta` to access the new commands, or it
    will be automatically installed for you on first run attempt.
  * `gcloud beta compute ...` is now available, using the compute 'beta' API.
    Cloud VPN.  See &lt;https://cloud.google.com/compute/docs/vpn&gt;
    for details.
  * Release of `gcloud compute instances move` and
    `gcloud compute disks move`.
  * From 0.9.49 (2015/02/25)
  * The Google Container Registry is now used by default for deployment of
    Managed VM applications. See here for more information:
    &lt;https://cloud.google.com/tools/container-registry/&gt;
  * We've increased the speed of the "image push" phase of Managed VM
    deployments.
  * The heavy lifting of retrieving the Go toolchain has been moved into the
    base Go Docker image which dramatically reduces the bandwidth consumed
    locally when running and deploying your images. You must delete your
    Dockerfile to pick up the changes.
  * We've fixed several bugs related to port forwarding in the local
    devappserver.
  * From 0.9.48 (2015/02/18)
  * A bug fix for running setup-managed-vms multiple times when using
    the Google Container Registry
  * From 0.9.47 (2015/02/11)
  * Bug fixes that allow tab completion to work for components in preview.
  * GCloud now auto installs components based on command execution.
  * From 0.9.46 (2015/02/04)
  * We've made significant improvements to the stability and speed of
    deploying Managed VMs by leveraging the new Google Container Registry.
    See this post for details on how to try it out today:
    &lt;https://groups.google.com/forum/#!topic/google-appengine/c543NHZGhKM&gt;
  * From 0.9.45 (2015/01/28)
  * Several bug fixes in the Dockerfile generated for the 'go' runtime.
    Delete the Dockerfile in your application directory and the Cloud SDK
    will copy the updated Dockerfile on your next deployment.
  * Several bug fixes related to flakiness in the setup-managed-vms command.</changelog>
<changelog author="rjschwei@suse.com" date="1448884800">- Provide a better message for "components" sub command being disabled
  + Added patch disableSelfUpdate.patch</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Update to version 140.0.0 (2017/01/18)  (bsc#1002895,bsc#1008328)
  + Remove hidePathMangeling.patch
  + Add gcsdk-gsutil-hide-deps.patch
  + Add gcsdk-gsutil-no-self-update-check.patch
  + Add gcsdk-gsutil-use-system-certs.patch
  + Add gcsdk-no-batch-limit.patch
  + Add gcsdk-no-http-no-tunnel-proxt.patch
  + Add gcsdk-bq-hide-deps.patch
  + Remove disableSelfUpdate.patch, disabled by default from upstream
  + Cloud SDK
  * `gcloud alpha search-help` is now available in alpha.
    Run `gcloud alpha search-help [TERM]` to find gcloud commands whose
    help text contains [TERM].
  + Google Cloud ML
  * `gcloud ml jobs submit training` now supports packages already in Google
    Cloud Storage via the `--packages` flag.
  + Google Cloud Datalab
  * Upgrade the Datalab CLI to the 20170110 build.
  + Google Cloud Debugger
  * The `gcloud debug` command group is now available in GA.
  + Google Container Registry
  * An issue that affected Docker client version parsing during
    `docker-credential-gcr configure-docker` has been fixed.
  + Google Cloud Deployment Manager
  * 'deployment-manager deployments update' can update deployments with a new
    description using --description flag.
  + Emulators
  * The pubsub emulator now accepts web-safe Base64 encoded data.
- From version 139.0.1 (2017/01/12)
  * Fixed crash in `gcloud dataproc clusters create`
  * https://code.google.com/p/google-cloud-sdk/issues/detail?id=1464
- From version 139.0.0 (2017/01/11)
  + Breaking Changes
  * (Google Cloud Logging) The default value of the `--unique-writer-identity`
    flag to `gcloud beta logging sinks create` and
    `gcloud beta logging sinks update` is now true. Please consult the
    documentation before using these commands.
  * (Google Cloud Logging) Remove 'struct' option from `gcloud logging write`.
    Use 'json' instead
  * (Google Cloud Logging) `logging beta metrics create` and
    `logging beta metrics update` commands have changed their flags and
    importantly now use Logging V2 filter syntax. See the help for more
    information.
  * (Google App Engine) Flexible deployments now skip files matching
    `node_modules` and `.git` by default, but no longer skip other hidden
    files by default. Standard deployments are not changing.
  * (Google Compute Engine)
    `gcloud compute target-pools set-backup --backup-pool` and
    `gcloud compute project-info set-usage-bucket --bucket` flags now warn
    if you provide an empty argument; use `--no-backup-pool` and
    `--no-bucket instead`.
  * (Google Cloud Bigtable) Removed `gcloud alpha bigtable` command group;
    please use `gcloud beta bigtable` for all Cloud Bigtable operations.
  * (Stackdriver Debugger) Added a `--location` option to several
    `gcloud beta debug` commands, to separate out the processing of resource
    IDs from filename patterns. These commands now take only resource IDs as
    positional parameters.
  + Google Cloud Datalab
  * Added the command-line tool for Google Cloud Datalab in the Cloud SDK;
    call it via the `datalab` script.
  + Google Cloud Key Management Service
  * Added the `gcloud beta kms` commands for key management.
  + Google Cloud Logging
  * Add `--billing-account` flag to `gcloud logging read`
  * gcloud beta logging metrics list/describe now output the version of the
    filter associated with the metric
  + Google Cloud ML
  * The `gcloud beta ml jobs submit training` now takes a `--scale-tier` flag.
  * Support gzipped TFRecord file type for
    `gcloud beta ml jobs submit prediction`.
  + Google App Engine
  * (Google App Engine) Fixed bug with `gcloud app instances describe`.
  - -service and --version flags are now required.
  * `gcloud beta app deploy` now uses multi-threading rather than
    multi-processing for file uploads; if you've been seeing issues on
    Windows, please try the `beta` command out.
  * `gcloud app versions migrate` is now GA.
  * `gcloud app instances delete` is now GA.
  * Added `gcloud beta app operations` commands.
  * Added `gcloud beta app instances delete` command.
  + Google Compute Engine
  * `gcloud beta compute images create` now has a `--guest-os-features`
    flag for enabling specific OS supported features.
  * Use the new scopes format (see `--help` for deetails) for
  - `gcloud alpha compute instances create`
  - `gcloud alpha compute instances create-from-container`
  - `gcloud alpha compute instance-templates create`
  - `gcloud alpha compute instance-templates create-from-container`
  - `gcloud beta compute instances create`
  - `gcloud beta compute instance-templates create`
  * Add `--custom-extensions` flag to:
    `gcloud alpha compute instances create`,
    `gcloud alpha compute instances set-machine-type`, and
    `gcloud alpha compute instance-templates create`
  + Google Compute Engine (Networking)
  * The `--host` flag for `gcloud alpha compute url-maps
    invalidate-cdn-cache` is now available in the GA version of the command.
  + Stackdriver Debugger
  * Fixed log view URLs in the debug logpoints commands to use the V2 query
    syntax.
  + Google Service Management
  * `--validate-only` flag added to `gcloud service-management deploy` command
  + Google Cloud Functions
  * The `--trigger-params` flag has been renamed to `--trigger-path`
    (the `path=` specifier is no longer necessary). The old flag has been
    deprecated and will be removed or `gcloud alpha functions deploy`.
  * Restore `gcloud alpha functions get-logs` command.
  * Restore deprecated flags `--trigger-topic`, `--trigger-bucket`,
    `--source`, `--bucket`, and `--trigger-gs-uri` to `gcloud alpha
    functions deploy` command.
  + Google Container Engine
  * Update Google Container Engine's kubectl from version 1.4.6 to 1.5.1.
  + Google Cloud Bigtable
  * The `cbt` command line tool component is now available. See:
    https://cloud.google.com/bigtable/docs/go/cbt-reference
  + Google Cloud Datastore
  * `gcloud datastore create-indexes` and `cleanup-indexes` are now GA
  + Google Container Registry
  * `docker-credential-gcr` has been upgraded to v1.3 and now supports Docker
    client v1.14 credential helpers. `docker-credential-gcr` will now
    preferentially act as a credential helper (as opposed to credential
    store) on Docker client versions 1.14+. Update (or install) the
    `docker-credential-gcr` component and run `docker-credential-gcr
    configure-docker` to configure your Docker client to use
    `docker-credential-gcr` to authenticate operations on your GCR
    repositories.
  + Google Cloud Deployment Manager
  * Added labels support to the
    `gcloud alpha deployment-manager deployments create` and `update` commands
    (via the `--labels` and `--{update,remove}-labels` flags respectively).
  * Introduce new syntax `key:val,foo:bar` for `--properties` flag in all
    `gcloud deployment-manager` commands. The old `key=val,foo=bar` syntax is
    deprecated.
- From version 138.0.0 (2016/12/14)
  + Cloud SDK
  * Introduce --(no-)force-key-file-overwrite flags to all gcloud commands
    using SSH key files. These new flags control overwrite behavior when
    SSH key files are broken. Without these flags, interactive sessions will
    ask for confirmation before regenerating key files. Old non-interactive
    behavior (permissive) is deprecated and will be removed in 6 months. To
    preserve old behavior in your scripts, use new flag
  - -force-key-file-overwrite (though this is discouraged).
  * Credential store format for service accounts has changed. Your
    credentials will get auto-upgraded to new format upon usage; however, if
    gcloud is downgraded to previous version those credentials will not be
    usable and users will have to reactivate their service account.
  + Google Cloud ML
  * `gcloud beta ml jobs submit training` is now blocking by default. Use the
    `--async` flag to finish immediately after job submission.
  + Google Compute Engine
  * `gcloud compute instances create` creates instance with no scopes by
    default if project has no default service account.
  * `compute target-ssl-proxies list` deprecated `--regex` and names argument.
    Please use `--filter` flag instead.
  * `gcloud compute connect-to-serial-port` allows for interactive
    connections to the serial port for instances.
  * Promote `compute instances set-scopes` command from alpha to beta.
  + Google App Engine
  * Java SDK updated to 1.9.48. For more details, please see
    https://cloud.google.com/appengine/docs/java/release-notes
  * Python SDK updated to 1.9.49. For more details, please see
    https://cloud.google.com/appengine/docs/python/release-notes
  * `gcloud app describe` is now GA.
  * Added `gcloud beta app instances delete`, which deletes a specific
    App Engine instance.
  * Added `gcloud beta app versions migrate`.
  * Added support for `env: flex` (Flexible Environment) instances to
    `gcloud app instances enable-debug` and `gcloud app instances disable-debug`.
  * Added support for skip_files in Flexible Environment deployments.
  + Google Container Engine
  * Users can create clusters/nodepools with node autoupgrade enabled in
    Beta by adding `--enable-auto-upgrade`. Please refer to
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * node-pool upgrades can now be rolled back using the
    `gcloud alpha container node-pools rollback &lt;pool-name&gt;` command.
    See `gcloud alpha container node-pools rollback --help` for more details.
  + Google Cloud Container Builder
  * Container Builder timeouts are now unlimited (with a default of ten
    minutes), and can be specified with the --timeout flag.
  + Google Cloud Dataflow
  * The `gcloud dataflow jobs` command group now has the following commands
    in GA: cancel, describe, drain, list, show
  + Google Cloud Functions
  * Remove `gcloud alpha functions get-logs` command.
  * Remove deprecated flags --trigger-topic --trigger-bucket --source --bucket
  - -trigger-gs-uri from `gcloud alpha functions deploy` command.
- From version 137.0.1 (2016/12/08)
  + Google Cloud ML
  * `gcloud beta ml jobs submit training`: Fix crash when `--packages` was not
    specified.
- From version 137.0.0 (2016/12/07)
  + Google Cloud Functions
  * Add `gcloud alpha functions deploy` `--trigger-provider`,
    `--trigger-event`, `--trigger-resource` and `--trigger-params` flags.
  * Add `gcloud alpha functions event-types list` command.
  + Google Cloud ML
  * The `gcloud beta ml models versions` command group has been moved to
    `gcloud beta ml versions`. The old commands still work, but are
    deprecated.
  * The `--origin` flag for the `gcloud beta ml versions create` command now
    accepts local file paths in addition to Google Cloud Storage (`gs://`)
    paths.
  * `gcloud beta ml jobs training`: `--packages` now takes a comma-separated
    list instead of a space-separated list.
  + Google Compute Engine
  * Internal Load Balancing is now available in GA.
  * It is no longer allowed to pass an empty scope in
    `gcloud compute instances create --scopes` flag.
  + Google Container Engine
  * `gcloud container images describe` has some breaking changes to its
  - -format=JSON output.
  + Google Service Management
  * The gcloud service-management surface is now available in the GA and beta
    release tracks. Please use `gcloud service-management` instead of
    `gcloud beta service-management`.
- From version 136.0.0 (2016/12/01)
  + Cloud SDK
  * `gcloud config get-value` is now GA.
  + Google Cloud Service Management
  * Add `gcloud beta service-management undelete`.
  + Google Container Engine
  * Add `gcloud beta container image describe` to list container analysis
    data.
  * Update Google Container Engine's kubectl from version 1.4.4 to 1.4.6.
  + Google Cloud Container Builder
  * `gcloud container builds ...` are now GA.
  + Google Cloud Resource Manager
  * `gcloud organizations ...` are now GA.
  * Removed `gcloud organizations update`.
  + Google Cloud ML
  * Add `gcloud beta ml local predict` to do local prediction.
  * Deprecate '--instances' flag in `gcloud beta ml predict`.
  + Google App Engine
  * `gcloud app instances describe` is now GA.
  * `gcloud app services describe` is now GA.
  * `gcloud app logs read` will now show request logs by default as well as
    stdout, stderr, and crash.log.
  * Add `gcloud beta app describe`, which prints information about the
    current App Engine application.
  * `gcloud beta app deploy` can now deploy go apps, without the use of
    `aedeploy` or `goapp deploy`. Both App Engine Standard and Flexible
    environments are supported. If you are using `runtime: custom` with
    `aedeploy`, you will need to vendor your dependencies into the app
    directory manually.
  * Deprecated the configuration property `app/gsutil`. Affected users are
    warned during `gcloud app deploy` with instructions on how to update
    their configuration appropriately.
  * The App Engine flexible environment now defaults to Python 3.5 when
    Python 3 is requested. To temporarily revert to Python 3.4, specify
    `python_version: 3.4` in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml).
  * Updated app-engine-go component to the 1.9.48 SDK.
  + Google Compute Engine
  * Add `--service-label` flag to `gcloud alpha compute forwarding-rules
    create`.
  + Cloud Tools for Powershell
  * Add cmdlets to manage Cloud Storage ACLs.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Fixed `gcloud deployment-manager deployments describe` when resource
    expansion fails.
  + Bigtable Emulator
  * Bigtable emulator now supports `column_range_filter`.
  + Google Cloud Dataproc
  * Add `--service-account` flag to `gcloud dataproc clusters create`.
- From version 135.0.0 (2016/11/16)
  + Google Cloud Service Management
  * `gcloud service-management deploy` command now supports providing
    multiple service configuration or API specification inputs
    simultaneously. This change allows creating .proto and YAML based
    configurations for gRPC services.
  + Google Container Engine
  * Change the `gcloud container list-tags` command to support user-specified
    filters on occurrences and exposes a column summarizing vulnerability
    information.
  + Google Cloud Resource Manager
  * `gcloud organizations update` is now deprecated.
  + Google Cloud Deployment Manager/Runtime Configuration
  * Runtime configuration variables can now be set and retrieved using text
    values.
  + Bigtable Emulator
  * Now supports macOS Sierra.
  + Google App Engine
  * The App Engine flexible environment now includes Python 3.5
    support (beta). To preview this runtime, specify `python_version: 3.5`
    in the `runtime_config` stanza of your
    [`app.yaml`](https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml) file.
  * Added the `gcloud beta app services describe` command, which prints
    information about a given service.
- From version 134.0.0 (2016/11/09)
  + Cloud SDK
  * `gcloud info --run-diagnostics` flag is now available to diagnose common
    installation and local network issues.
  * `gcloud init` now has a `--skip-diagnostics` flag.
  + Google AppEngine
  * App Engine Java SDK updated to 1.9.46.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * Added `gcloud app create` command, which creates an App Engine app in the
    current project.
  * Added `gcloud app regions list` command, which lists support for
    App Engine Standard and Flexible environments for each geographical
    region.
  * `gcloud app deploy` now offers to create an App Engine app
    interactively, if the current project does not have an app yet.
  + Google Cloud BigQuery
  * Add support for specifying a null marker when loading data. See the
    `null_marker` flag within the `load` command.
  + Google Compute Engine
  * `gcloud compute instance-groups managed delete` shows clean error message
    instead of bare exception on attempt to delete zonal and regional Managed
    Instance Groups in one gcloud invocation. Old behavior was to accept and
    invoke such request and then fail on waiting for operation complete.
  * Remove OpenSUSE as a default image option. OpenSUSE images are still
    available in the opensuse-cloud project.
- From version 133.0.0 (2016/11/02)
  + Google Cloud Container Builder
  * `gcloud alpha container builds` promoted to beta. The following has
    changed:
  * The 'create' command is now called 'submit'.
  * The 'stream-logs' command is now called 'log', and will only stream
    the log if the '--stream' flag is used. Otherwise, it will print
    only the log contents available at the time the command was run.
  The alpha commands will remain, as is, until at least March of 2017.
  + Google Compute Engine
  * regional instance groups are now GA.
    `gcloud compute instance-groups managed`
  * Customer-Supplied Encryption Keys (CSEK) for image creation is now GA. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Update kubectl to version 1.4.4.
- From version 132.0.0 (2016/10/26)
  + Breaking Changes
  * (Cloud SDK-wide) Command line flag abbreviations are no longer supported.
  * (Cloud SDK-wide) Python 2.6 is no longer supported by the Cloud SDK and
    commands may not function correctly when run under an Python 2.6
    interpreter. Please update your Python installation to 2.7 to ensure
    compatibility.
  * If you have a 2.7 interpreter on your system that is not the default,
    you can use the CLOUDSDK_PYTHON environment variable to point to it.
  * The last version of the SDK that supports Python 2.6 is 131.0.0,
    which can be downloaded from our archive:
    &lt;https://cloud.google.com/sdk/downloads#earlier_versions&gt;
  * (Google Compute Engine/Google Cloud Source Repositories): Google Cloud
    Source Repositories scope no longer added by default on instance creation.
  * (Stackdriver Debugger) Changed the default to true for the `--all-users`
    option on `gcloud beta debug logpoints list` command.
  + Google Cloud Storage
  * Update gsutil component to 4.22
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.22/CHANGES.md&gt;
  + Google Compute Engine
  * Allow specifying both `--network` and `--subnet` for the same network
    interface card.
  + Google Cloud Dataproc
  * Jobs and clusters now support labels on creation
  * Jobs and clusters now support filtering by labels and state
  + Google Container Engine
  * Google Container Engine cluster upgrade operations can now be cancelled
    using the `gcloud alpha container operations cancel` command.  See
    `gcloud alpha container operations cancel --help` for more details.
  + Cloud Tools for Powershell
  * Fix a bug where the module is not picking up the active user credentials
    correctly.
  * Make `New-GcsObject` `-ObjectName` parameter optional when uploading a
    file.
  * Add ability to pipeline `GcsObject` to `Write-GcsObject` cmdlet.
- From version 131.0.0 (2016/10/19)
  + Cloud SDK
  * Added PowerShell provider for Google Cloud Storage; allows navigation of
    Google Cloud Storage buckets as if they were a local file system.
    When using Cloud Tools for PowerShell `cd` into gs:\ and type `dir` to
    begin. Learn more at
    https://cloud.google.com/tools/powershell/docs/backup.
  * App Engine updated to 1.9.45. Java SDK updated to 1.9.44.
    Please visit the following release notes for details:
    https://cloud.google.com/appengine/docs/java/release-notes
  * `gcloud config configurations create` will now automatically activate
    specified empty configuration. Use `gcloud config set` to populate its
    properties.
  + Google Cloud Compute
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine image creation is now available in the beta release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for details.
  + Google Container Engine
  * Added support for for creating new clusters and nodepools on preemptible
    VM instances in Beta by adding `--preemptible`. See
    `gcloud beta container clusters create --help` and
    `gcloud beta container node-pools create --help` for more details.
  * Fixed a bug in `gcloud alpha container clusters update` that
    prevented disabling cluster autoscaling. Cluster autoscaling
    can now be disabled by running:
    `gcloud alpha container clusters update --disable-autoscaling`
  * Update kubectl to version 1.4.1.
  + Google Cloud BigQuery
  * Added support for setting labels on query jobs.
    Example usage: `bq query --label "foo:bar" "select 123"`.
    The `show` command outputs any labels set on a job.
  + Google Source Repository
  * Change the Cloud Source Repositories scope given by default to
    Google Compute Engine Instances and Instance Templates to read_only
    from full control.
- From version 130.0.0 (2016/10/12)
  + Breaking Changes
  * Breaking change to --network-interface in `alpha compute instances
    create`, and `alpha compute instance-images create` commands. By default
    interfaces will have ephemeral IP (was: no external ip).
  + Google AppEngine
  * App Engine: The `gcloud app deploy` command no longer blocks when
    stopping the previous version; this should speed up deployment times.
    Instructions for checking the status of the stop-version operation are
    included in the command output.
  * Support ramdisk volumes in App Engine flexible environments Alpha.
  + Google Cloud Functions
  * Add `alpha functions regions list` command.
  + Google Cloud ML
  * Change '--instances=' to
    '(--json-instances=, --instances= | --text-instances=)' to allow
    `gcloud beta ml predict` to read files in UTF-8 encoded text format.
  + Google Cloud Platform Projects
  * Add the `gcloud alpha projects create` command.
  + Google Compute Engine
  * Add new key to --network-interface in `alpha compute instances create`,
    and `alpha compute instance-images create` commands: no-address.
  * Make flag --network-interface visible in `alpha compute instances create`,
    and `alpha compute instance-templates create` commands.
  + Google Container Engine
  * Fix a bug in `gcloud beta container images list-tags`.
  * Add support for kubernetes labels on new clusters and nodepools by passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud container clusters create --help` and
    `gcloud container nodepools create --help` for more details and
    examples.
- From version 129.0.0 (2016/10/05)
  + Google Cloud Bigtable
  * `gcloud alpha bigtable` commands are deprecated and will be removed in
    release 134.0.0. All users should migrate to `gcloud beta bigtable`
    commands.
  + Google Cloud ML
  * Add `gcloud beta ml jobs stream-logs` JOB [--allow-multiline-logs]
    [--polling-interval=POLLING_INTERVAL; default="60"] [GLOBAL-FLAG ...]
    to show logs from a running Cloud ML job.
  + Google Compute Engine
  * The --replacement flag is no longer required in the
    `gcloud compute images deprecate` command.
  * Add --create-disk flag to `gcloud alpha compute instances create`.
  * Add --create-disk flag to `gcloud alpha compute instance-templates
    create`.
  + Google Container Engine
  * Can now specify the cluster-version when creating Google Container Engine
    clusters.
  * Update kubectl to version 1.4.0.
  + Google Container Registry
  * `docker-credential-gcr` bug fixed.
  + Go SDK
  * Update Go SDK component to use 20160927 release, based on Go 1.6.3.
  + Stackdriver Logging
  * Added commands to manage logs-based metrics in Stackdriver Logging.
- From version 128.0.0 (2016/09/28)
  + Breaking Changes
  * The `gcloud auth application-default` commands are now in GA.
    `gcloud auth login` no longer writes Application Default Credentials, use
    `gcloud auth application-default login` instead.
  + Google AppEngine
  * Java apps that have no app.yaml file are now auto-detected based on a
    WEB-INF/appengine-web.xml file when launching the dev_appserver.
  * Fixed timestamp processing issue
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1121) in
    `gcloud app logs read`.
  + Google Cloud Functions
  * Added the `--memory` flag to `gcloud alpha functions deploy` to allow
    configuration of amount of memory available during function execution.
  + Google Cloud ML
  * Added `gcloud beta ml local train` command which runs user code
    locally and injects the environment variables necessary for running
    distributed TensorFlow jobs in subprocesses.
  * `gcloud beta ml jobs submit training` now takes a path to a python
    package, and either (1) builds from the setup.py file at the package
    root, or (2) generates a setup.py file and builds the package. It then
    uploads the generated tar.gz archives to Google Cloud Storage.
  + Google Compute Engine
  * Internal load balancing is now in beta.
  * Cloud Source Repositories control scope is now included in the list
    of default scopes granted to newly created instances and instance
    templates.
  * Added multi-nic support to `gcloud alpha compute instances create` and
    `gcloud alpha compute instance-templates create`.
  + Google Container Engine
  * Can now create temporary clusters with all kubernetes alpha features
    enabled using `gcloud alpha container clusters create
  - -enable-kubernetes-alpha`.
  * Added support for kubernetes labels on new clusters and nodepools by
    passing
    `--node-labels=label1=value1,label2=value2...`. See
    `gcloud alpha container clusters create --help` and
    `gcloud alpha container nodepools create --help` for more details and
    examples.
  + Google Container Repository
  * Added the ability to configure where (and in which order)
    docker-credential-gcr searches for Google Container Registry
    credentials. Run `docker-credential-gcr config --help` for more details.
- From version 127.0.0 (2016/09/21)
  + Google BigQuery
  * New load/query option in BigQuery client to support schema update
    within a load/query job.
  * New query option in BigQuery client to specify query parameters in
    Standard SQL.
  + Google Cloud Dataproc
  * `gcloud dataproc clusters create` flag
    `--preemptible-worker-boot-disk-size`
    can be used to specify future preemptible VM boot disk size.
  + Google Container Engine
  * Update kubectl to version 1.3.7.
  + Google Cloud ML
  * New `gcloud beta ml predict` command to do online prediction.
  * New `gcloud beta ml jobs submit prediction` command to submit batch
    prediction job.
  + Google Cloud SQL
  * New arguments to beta sql instances create/patch commands for Cloud SQL
    Second Generation instances:
  * `--storage-size` Sets storage size in GB.
  * `--maintenance-release-channel` Sets production or preview channel for
    maintenance window.
  * `--maintenance-window-day` Sets day of week for maintenance window.
  * `--maintenance-window-hour` Sets hour of day for maintenance window.
  * `--maintenance-window-any` (patch only) Clears maintenance window
    setting.
- From version 126.0.0 (2016/09/14)
  + Breaking changes
  * The HTTP error messages for these command groups have changed to a common
    format:
  * `gcloud dns`
  * `gcloud genomics`
  * `gcloud logging`
    Some command groups have not changed yet. That should happen in the next
    release. You can use `--log-http` to see the details of all HTTP
    requests and responses on the standard error.
  + Google Compute Engine
  * Add `--connection-draining-timeout` flag to `gcloud compute
    backend-services {create,update}` commands.
  * Added `gcloud alpha compute instance-groups managed update-instances` and
    `stop-proactive-update-instances` commands.
  + Google Cloud Debugger
  * The `gcloud beta debug source gen-repo-info-file` command, which
    generates repository information files for the Stackdriver Debugger,
    is now available.
  + Google Container Registry
  * The `gcloud container images` command group is now available in the beta
    release track.
  + Cloud SDK
  * Added `core/custom_ca_certs_file` property to allow use of a custom CA
    certificate file.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON for
    the v1 API. This version of the emulator resolves the deserialization
    issues in 123.0.0.
- From version 125.0.0 (2016/09/07)
  + Google BigQuery
  * `gcloud alpha bigquery` is no longer available.  To use BigQuery, use
    the `bq` tool shipped with the Cloud SDK.
  + Google Compute Engine
  * Add support to change the default service account on a Compute Engine
    project (alpha release) via the following command:
    `gcloud alpha compute project-info set-default-service-account`
  * Support multiple network interface cards in
    `gcloud alpha compute instances create` command.
  * Add `gcloud alpha compute instances set-scopes` command.
  + Google Container Engine
  * Update kubectl to version 1.3.6.
  + Google Container Repository
  * Released bug fixes for docker-credential-gcr as v1.0.1, please rerun
    `docker-credential-gcr configure-docker` after updating.
  + Google Cloud Logging
  * `gcloud logging create` and `gcloud logging update` echo back the writer
    identity associated with the sink.
  + Google Cloud Dataflow
  * The Dataflow CLI is now in Beta.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager manifests describe` with no manifest
    specified will show the latest manifest of the given deployment.
  + Emulators
  * `gcloud beta emulators datastore start` now defaults to the new
    version of the emulator which supports Cloud Datastore API v1 and
    v1beta3 over gRPC, proto-over-HTTP, and JSON-over-HTTP.
- From version 124.0.0 (2016/08/31)
  + Breaking Changes
  * Creating a Global Backend Service in Compute Engine will warn you if
    you don't use --global. In the future this will be required.
  * Major changes were made to `gcloud alpha dataflow` commands. See
    Google Cloud Dataflow section for more information
  + Google App Engine
  * Added endpointscfg.py to the app-engine-python component.
  * Skipped modules during upload will now be logged at INFO level instead of
    WARN.
  + Google Cloud Dataflow
  * Changes to `gcloud alpha dataflow` commands:
  * Changed the `jobs list` command now has a "status" filter. This
    change is from the JobsV1B3 API. You can now use the API's filter
    request as either "all", "terminated", or "active".
  * Added the `logs list` command. This dumps the log messages created
    from the workflow. Please see the help docs for more information.
  * Renamed `metrics tail` to `metrics list`.
  * Renamed `metrics list` --origin flag to --source. This can be either
    "user" for custom-made aggregates or "service" otherwise. This
    defaults to "all".
  * Added `metrics list` --transform flag. This filters all metrics that
    prefix regex matches the argument.
  * Removed `jobs list` --job-name flag.
  * Added `jobs list` --uri flag.
  + Cloud Tools for Powershell
  * Add Google Cloud Sql and Google Cloud Dns powershell cmdlets.
  + Google Cloud Deployment Manager
  * `deployment-manager deployments create` with a template file will copy
    the outputs specified in the schema to the generated config file.
  + Google Cloud Functions
  * Add alpha  functions logs read command
  + Google Container Repository
  * docker-credential-gcr (GCR's Docker credential helper) has been added
    as an optional component for GCR customers running Docker client v1.11
    or newer. Run `gcloud components install docker-credential-gcr`
    followed by `docker-credential-gcr configure-docker` in order to
    configure Docker. You may then use Docker normally, without any gcloud
    interaction at all (e.g. `docker pull gcr.io/myproject/myimage`)
  + Google Container Engine
  * Update kubectl to version 1.3.5.
  + Google Compute Engine
  * Added `gcloud compute instances stop` --discard-local-ssd flag.
  * Added windows-sql-cloud project to the default public image list.
  + Cloud SDK
  * `gcloud config get-value` is now available in the BETA release track.
  + Emulators
  * Cloud Datastore emulator now supports proto-over-HTTP and JSON
    for the v1 API.
  + Cloud SQL
  * New commands added to beta:
  * `gcloud beta sql backups create`
  * `gcloud beta sql backups create`
  * `gcloud beta sql instances failover`
  * New flags for `gcloud beta sql instances create`:
  * --failover-replica-name
  * --replica-type
  * --storage-auto-increase
  * --storage-type
  * New flags for `gcloud beta sql instances patch`:
  * --storage-auto-increase
  * --no-storage-auto-increase
- From version  122.0.0 (2016/08/24)
  + Google App Engine
  * The `gcloud beta app regions list` command is now available. It
    shows support for the standard and flexible environments for each
    geographical region.
  * `gcloud app versions describe` now shows more extensive information
    about the deployed version, including the container used for
    App Engine Flexible.
  * Built-in versions will no longer appear when listing App Engine
    versions (`gcloud app versions list`).
  + Cloud SDK
  * Users can now make logs garbage collection optional by changing the
    value of the `core/max_log_days` property to 0.
  * The `gsutil` component has been upgraded to version 4.21.
  + Google Cloud Machine Learning
  * Added `gcloud alpha ml jobs submit training` command to start a
    Cloud ML training job.
  + Google Compute Engine/Networking
  * `compute networks switch-mode` and `compute networks expand-ip-range`
    commands are now in beta.
  + Google Container Engine
  * Image Type selection for `gcloud container` commands is now GA.
  + Google Cloud Deployment Manager
  * `gcloud deployment-manager deployments` will now display `INTENT`
    when applicable.
  + Emulators
  * A bug causing the rejection of unpadded base64-encoded bytes data in the
    Pub/Sub emulator (INVALID_ARGUMENT: "Payload isn't valid for request")
    has been fixed.
- From version  122.0.0 (2016/08/17)
  + Google App Engine
  * Added `gcloud beta app instances describe`, which shows information
    about a running App Engine Flexible instance.
  * Add new flags to `gcloud alpha functions deploy`, hide flags that
    are being replaced with new flags, log a warning when someone uses
    a flag to be replaced:
  * *--bucket    * to be replaced by *--stage-bucket*.
  * *--source    * to be replaced by *--local-path
  * (for code in local file system)
  * --source-path    * (for code in Google Code Storage).
  * *--trigger-gs-uri    * to be replaced by *--trigger-bucket*.
  + Cloud SDK
  * `gcloud init` now has an opt-in for listing all user projects, which
    could be in the hundreds. The user can now to opt-in to see all projects,
    or they can just type in a known project.
  + Google Cloud Machine Learning
  * Add `gcloud alpha ml models versions` group to manage Cloud ML model
    versions.
  * Add `gcloud alpha ml models` group to manage Cloud ML models
  * Add `gcloud alpha ml jobs` group to manage Cloud ML training and
    prediction jobs.
  + Google Cloud Genomics
  * The `gcloud genomics pipelines run` command now uses the default Compute
    Engine zone property if the *--zones    * flag is not specified.
  + Google Cloud Pub/Sub
  * Fixed error handling bug in `gcloud beta pubsub subscriptions create`
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=1017).
  + Google Compute Engine
  * Enable *--health-checks
  * flag for the `gcloud beta compute backend-services`
    `create` and `update` commands.
  + Google Container Builder
  * *RepoSource    * is now available as a source for builds.
  * *BuildSteps    * now respect arbitrary dependencies on each other
    as defined by the `waitFor` field.
  + Google Container Engine
  * Update kubectl to version 1.3.4.
- From version  121.0.0 (2016/08/10)
  + Google App Engine
  * Cloud SDK dev_appserver.py supports running App Engine Standard Go
    applications.
  * `gcloud app instances disable-debug` now deletes the instance rather
    than restarting it. New instance(s) may spawn based on the app's
    scaling settings.
  + Google Cloud Dataproc
  * Added the `--preemptible-worker-boot-disk-size` flag to
    `gcloud dataproc clusters create`.
  + Google Compute Engine
  * `gcloud compute backend-services` session affinity flags have been
    promoted from beta to GA.
  + Google Container Engine
  * Changed the `container/use_client_certificate` property default value to
    `false`. This makes the `gcloud container clusters create` and
    `gcloud container clusters get-credentials` commands configure
    `kubectl` to use Google OAuth2 credentials by default instead of the
    legacy client certificate.
  + Google Cloud Dataflow
  * Added the `gcloud alpha dataflow jobs drain` command. The `drain` command
    takes a streaming job and stops receiving new data from the sources. It
    then processes the buffered data. For more information please see the
    documentation for stopping a running pipeline at
    &lt;https://cloud.google.com/dataflow/pipelines/stopping-a-pipeline&gt;.
  + Google Cloud DNS
  * Fix for issue reported in:
    &lt;http://stackoverflow.com/questions/38636010/removing-dns-entries-with-gcloud&gt;.
  + Stackdriver Error Reporting
  * Added `gcloud beta error-reporting events report` command for reporting
    errors.
- From version  120.0.0 (2016/08/03)
  + Deployment Manager
  * `deployment-manager resources list` will show INTENT when the
    resource STATE is `IN_PREVIEW`.
  * `deployment-manager deployments describe` will show output values in
    addition to listing the resources.
  + Emulators
  * Added a `gcloud beta emulators bigtable env-init` command to export
    environment variables required to communicate with the bigtable emulator.
  * The PubSub emulator now correctly starts the push loops when creating
    a push subscription.
  + Google Cloud DNS
  * `gcloud dns` now supports CAA records.
  + Google Cloud Storage
  * Update gsutil component to 4.20.
    See: &lt;https://github.com/GoogleCloudPlatform/gsutil/blob/v4.20/CHANGES.md&gt;
  + Google Compute Engine/Networking
  * `gcloud alpha compute instance-groups managed wait-for-stable`
    command waits until all `current_action` fields are set to none and
    there are only no `pending_actions` in managed instance group.
  * `gcloud compute xpn` commands now available in the alpha release track.
    These commands configure cross-project networking.
  * `gcloud compute networks subnets {get,set}-iam-policy` commands now
    available in alpha.
  + Google Container Engine
  * Update kubectl to 1.3.3.
- From version  119.0.0 (2016/07/27)
  + Google BigQuery
  * Added support for dataset labels. See:
    &lt;https://cloud.google.com/bigquery/docs/labeling-datasets&gt; for more
    details.
  * Now sending progress output to stderr and query output to stdout.
    This fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=780&gt;.
  + Google Cloud SDK
  * `gcloud auth login` will stop writing application default credentials
    in a future release. See:
    &lt;https://developers.google.com/identity/protocols/application-default-credentials#toolcloudsdk&gt; for more information.
  * Command line flag abbreviations are now deprecated and produce warning
    messages. Flag abbreviations will be completely disabled in release
    130.0.0. This pre-empts the problem of future flag additions making
    some flag abbreviations ambiguous, possibly breaking scripts.
  + Google Cloud SQL
  * Added the `gcloud beta sql users` command group with commands that enable
    management of users on Cloud SQL instances.
  + Google Cloud Platform Projects
  * `gcloud alpha projects update` now support labels.
  + Google Container Engine
  * Added the `delete` command to the `gcloud alpha container images` command
    group.
- From version  118.0.0 (2016/07/20)
  + Emulators
  * There is a new `gcloud beta emulators start bigtable` command for
    starting a Cloud Bigtable emulator.
  + Google Compute Engine/Networking
  * `gcloud alpha compute backend-services` and `forwarding-rules` commands
    now support the internal load balancing scheme. Please use
    `--load-balancing-scheme=internal` flag when creating these resources.
    In addition `gcloud alpha compute forwarding-rules create` supports
    `--backend-service` flag to allow forwarding to internal load balancers.
  * Beta release of `compute connect-to-serial-port` command for
    Interactive Serial Console support. See
    http://cloud.google.com/compute/docs/instances/interacting-with-serial-console for details.
  + Google Container Engine
  * Bump kubectl from 1.2.4 to 1.2.5.
  + SQL
  * `gcloud beta sql instances create` supports new database type MYSQL_5_7.
  + Windows support
  * Beta launch of Google Cloud PowerShell. PowerShell cmdlets for managing
    Google Cloud Storage and Google Compute Engine.
    For more information see
    https://googlecloudplatform.github.io/google-cloud-powershell.
- From version  117.0.0 (2016/07/13)
  + Google Compute Engine
  * Regional Managed Instance Groups commands are now in beta.
  * `target-ssl-proxies` commands are now in beta.
  * Connection-based load balancing commands are now in beta.
  * Added `--connection-draining-timeout` flag to
    `gcloud beta compute backend-services` `create` and `update` commands.
  * `health-checks` command group is now in beta.
  + Google Container Engine
  * Local SSDs are now supported for clusters via the `--local-ssd-count`
    flag (in beta).
  * Added `--additional-zones` flag to `gcloud beta container clusters
    update`.
  + Google Container Builder
  * The `gcloud alpha container builds create` command now supports using
    JSON or YAML config files to configure builds, using the `--config` flag.
- From version  116.0.0 (2016/06/29)
  + Breaking Changes
  * `gcloud alpha dataflow list-messages` datetime values are now
    displayed in ISO 8601 format: 2015-01-15T12:31:07 ('T' separating the
    date and time components).
  + Google App Engine
  * The `gcloud app` surface is now available in the GA and beta release
    tracks. Please use `gcloud app` instead of `gcloud preview app`
    (some features only available in the beta release track).
  * Add `gcloud app open-console` command, which opens the App Engine
    dashboard in a web browser.
  + Google Cloud Datastore emulator
  * The Cloud Datastore emulator can accept an IPv6 address for the
    `--host-port` argument.
  * Cloud Datastore emulator no longer fails when trying to load an
    index.yaml file.
  + Google Container Builder
  * The `gcloud alpha container builds` command group creates and manages
    builds using the Google Container Builder service. See
    https://cloud.google.com/container-builder/docs/ for API documentation.
  + Google Cloud Dataproc
  * Added `--preemptible-worker-boot-disk-size` flag, which allows
    configuration of preemptible worker boot disk, to `gcloud beta dataproc
    clusters create`.
  + Google BigQuery
  * New query option in BQ client to specify a limit on bytes billed for the
    query.
  + Google Cloud Bigtable
  * Added `gcloud beta bigtable instances` group to manage Bigtable
    instances.
  * Added `gcloud beta bigtable clusters` group to manage Bigtable clusters
    within instances.
  * Known issue: `gcloud beta bigtable instances create` is an asynchronous
    operation by default and will not block with or without the `--async`
    flag.
- From version  115.0.0 (2016/06/22)
  + Breaking Changes
  * (Google Compute Engine) The `debian-7` and `debian-7-backports` image
    aliases have been removed, as Debian 7 has reached end-of-life
  * (Google Compute Engine) The `--port-range` flag in the `gcloud compute
    forwarding-rules create` command has been deprecated; please use the
    `--ports` flag instead. At this time only consecutive ports can be
    specified.
  * (Google Compute Engine) `gcloud alpha compute rolling-updates` commands
    have been deprecated and removed.
  * (Google Container Engine) The `--wait` flag for the `gcloud container
    clusters` command group is now deprecated; please use the `--async` flag
    instead.
  + Cloud SDK
  * Users will now be prompted to set Cloud SDK proxy properties if network
    issues are detected while running `gcloud init`.
  + Google Compute Engine
  * `gcloud compute backend-services {create,update} --enable-cdn` flag
    has been promoted from beta to GA.
  * `gcloud compute url-maps invalidate-cdn-cache` has been promoted
    from beta to GA.
  * The `--remote-traffic-selector` flag in `gcloud compute vpn-tunnels
    create`, which allows specifying a list of CIDR blocks to be used
    during IKE\IPsec traffic selectors negotiation, is now available in
    the GA release track.
  + Google App Engine
  * Add `gcloud preview app versions describe` command.
  + Deployment Manager
  * (beta only) deployment-manager now supports rollbacks with the
    `--manifest-id` flag: `gcloud beta deployment-manager deployments update
    deployment-name --manifest-id=MANIFEST-ID`
  + Docker
  * `gcloud docker` now respects the `$DOCKER_CONFIG` environment variable
  + Emulators
  * The Cloud Datastore emulator now has an `env-unset` command which
    prints the commands to unset any environment variables set by running
    the commands in the output of the `env-init` command.
- From version  114.0.0 (2016/06/15)
  + Breaking Changes
  * (Google Compute Engine) Deprecated the use of image aliases. Please use
    image families instead. See https://cloud.google.com/compute/docs/images
    for more details.
  * (Google App Engine) Removed the deprecated and unused `--force` flag for
    `gcloud app deploy`.
  * (Google Cloud Debugger) Removed `gcloud alpha debug` command group;
    debug commands are now accessible solely using `gcloud beta debug`.
  + Google Compute Engine
  * The Customer-Supplied Encryption Keys (CSEK) feature for Google Compute
    Engine disks is now available in the GA release track. See
    https://cloud.google.com/compute/docs/disks/customer-supplied-encryption
    for more details.
  * Added autocompletion for the URL map name in
    `gcloud compute url-maps invalidate-cdn-cache`.
  * Added `gcloud alpha compute networks switch-mode` command.
  * Added `gcloud alpha compute networks subnets expand-ip-range` command.
  * Added `--remote-traffic-selector` flag, which allows specifying a list
    of CIDR blocks to be used during IKE\IPsec traffic selectors
    negotiation, to `gcloud beta compute vpn-tunnels create`
  * Fixed `gcloud compute routes list` command to display vpn-tunnel as
    `NEXT_HOP`.
  + Google App Engine
  * Parallelized source file uploads in `gcloud preview app deploy` for
    increased speed. To revert to the old behavior in event of a problem,
    please run `gcloud config set app/num_file_upload_processes 1`
    and report an issue here:
    https://code.google.com/p/google-cloud-sdk/issues/list
  * Google App Engine components updated to 1.9.38.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added support for Managed VMs instances in
    `gcloud preview app instances enable-debug` and
    `gcloud preview app instances disable-debug`.
  + Docker
  * Fixed a bug where Windows users experienced docker authentication issues
    when the `%HOME%` variable was set and differed from `%USERPROFILE%`
  + Emulators
  * Fixed behavior of pub/sub emulator subscription topic names when their
    respective topics are deleted. They should now be set to
    `_deleted-topic_`.
- From version  113.0.0 (2016/06/08)
  + Cloud SDK
  * gcloud now uses Internet Explorer proxy configuration settings when on
    Windows, or MacOSX SystemConfiguration proxy settings on Mac, if the
    gcloud configurations `proxy/*` are not set.
  + Google Compute Engine
  * `gcloud compute ssh` no longer generates keys when invoked with
  - -plain flag.
  * `gcloud compute routers` is now GA.
  + Google Genomics
  * `gcloud genomics pipelines run` command supports passing "inputs" and
    "outputs" as repeated parameters.
- From version  112.0.0 (2016/06/01)
  + Cloud SDK
  * Updated error messages for `gcloud projects` surface.
  * `gcloud docker` commands now take less time to execute when the
    Docker client is not configured to use a credential helper.
  + Google App Engine
  * The `--docker-build` flag and related `app/docker_build` property,
    as well as `app/use_cloud_build` property have been deprecated and will
    be removed in a future release. By default, Docker images are built
    remotely using Google Container Builder. To perform a Docker build on
    a different host, you can run:
    docker build -t gcr.io/project/service.version .
    gcloud docker push gcr.io/project/service.version
    gcloud preview app deploy --image-url=project/service.version
  + Google Compute Engine
  * Added `--licenses` flag to `gcloud compute images create`.
  + Google Container Engine
  * Fixed bug where only 16-bit kubectl was installed on Windows.
    Now Installs 32 and 64-bit.
  + Google Genomics
  * `gcloud alpha genomics datasets/callsets` name argument is a flag,
    instead of positional.
  * `gcloud alpha genomics pipelines run` command now accepts "zones"
    command-line argument.
  * `gcloud alpha genomics datasets restore/update` and
    `variantsets delete/describe` now take string IDs instead of ints.
  + Deployment Manager
  * `gcloud deployment-manager deployments describe` output only reports
    errors once, includes status for resources, and includes more useful
    fields.
- From version  111.0.0 (2016/05/25)
  + Google App Engine
  * `gcloud docker` commands are now less verbose during the authentication
    operation.
  + Google Container Engine
  * `gcloud container clusters update` command now GA.
  * `gcloud container node-pools` commands are now GA.
  + Google Compute Engine
  * Enabled Strict Host Key Checking for SSH connections (after the first
    connection) to instances. Also adds a new flag to `gcloud compute ssh`
    called `--strict-host-key-checking` to control the StrictHostKeyChecking
    option.
  * Add support for customer-supplied encryption keys to `gcloud beta compute
    instances start`. (in beta track)
  * Implemented backend-service connection based balancing mode.
  + Google Service Registry
  * Launched `gcloud alpha service-registry`. (alpha track)
    Users will need to sign up
    (https://docs.google.com/forms/d/11SfJGB3LUGgT_aSMlVzWoJ0ec2fHKwk0J4e-zTNw0Bs/viewform?edit_requested=true)
    before enabling this API in their projects.
  + Deployment Manager
  * Added `gcloud alpha deployment-manager runtime-configs`. Alpha
    commands for Deployment Manager's Runtime Config API.
  + Emulators
  * Adds a `--legacy` flag to gcloud beta emulators datastore. The flag
    is set by default and maintains existing behavior with support for
    Cloud Datastore API v1beta2. Passing `--no-legacy` uses a new version
    of the Cloud Datastore Emulator which supports Cloud Datastore API
    v1beta3 over gRPC, JSON, and proto-over-HTTP. The default behavior of
    the legacy flag will change in a future release.
  + Organizations
  * Launched `gcloud alpha orgranizations`. (alpha track)
- From version  110.0.0 (2016/05/18)
  + Google IAM
  * The `gcloud iam` command group is now available in GA. The
    `gcloud beta iam` will still be available for several more releases.
  + Google App Engine
  * Fixed issue with the `--docker-build=local` flag in the
    `gcloud preview app deploy` command with docker version 1.10+. Note
    that local Docker builds with Docker version 1.11 will still fail when
    using the new Docker external credentials; please downgrade to the
    plain credential store.
    https://code.google.com/p/google-cloud-sdk/issues/detail?id=802
  + Google Container Engine
  * `gcloud beta container` commands (e.g. `container create`) now support
    specifying ImageTypes.
  * The `gcloud container clusters list` command now sorts the clusters
    based on zone and then on cluster name.
  * The `gcloud container clusters create` command now allows specifying
  - -max-nodes-per-pool (default 1000) to create multiple node pools for
    large clusters.
  + Google Compute Engine
  * The `gcloud compute backend-services` backend commands now support
  - -instance-group-zone and --instance-group-region to qualify instance
    group specifically. Before --zone, --region was used to qualify all
    resource arguments, where as now it is used to qualify backend service.
  + Google Genomics
  * The `genomics variantsets create` command now supports the --name and
  - -description flags.
  * The `genomics variantsets delete` command displays the name of the
    variant set before prompting the user to delete it.
  * The genomics `variantsets describe/list` commands display variant set
    names and descriptions.
  + Emulators
  * The Google Cloud Datastore emulator supports a new environment variable
    for client library configuration.
  * The Google Cloud Datastore emulator flag --store-on-disk has been fixed to
    accept a false value using --no-store-on-disk. Previously,
  - -store-on-disk=False could be specified but wasn't respected.
  + Debug
  * The `The gcloud debug` command group is now in Beta.
  + Misc.
  * The Cloud SDK Windows installer is now dual signed SHA1 and SHA256. The
    executable is signed with both authenticode and RFC3161 signatures.
  * The winkeygen.exe executable is also now dual signed, like above.
- From version  109.0.0 (2016/05/11)
  + Google App Engine
  * Google App Engine components updated to 1.9.37.
  * Please visit the following release notes for details:
  * Python -
    https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed issue with failed uploads in gcloud preview app-deploy
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=784).
  * Deprecated --server flag for app commands; its use is unsupported.
  + Google Compute Engine
  * Removed the `gcloud alpha compute autoscaler` command group.
  * Removed deprecated `gcloud compute backend-services add-backend` --group
    flag in favor of --instance-group.
  * `gcloud compute copy-files` now exits with the return code of the called
    `scp` process.
  * Added support for customer-supplied encryption keys to the
    `gcloud beta compute disks snapshot` command.
  * Remove google-containers from default gcloud public image project.
  + Google Container Engine
  * Fixed bug listing clusters with no node pools.
  * `gcloud container resize` command now supports multi-zone clusters.
  + Google Error Reporting
  * Added the `gcloud beta error-reporting events delete` command to cleanup
    Stackdriver Error Reporting data.
- From version  108.0.0 (2016/05/04)
  + Breaking Changes
  * The `gcloud preview app modules get-logs` command is now deprecated.
    Please use the new command `gcloud preview app logs read` instead.
  + Google App Engine
  * Fixed a bug which caused `gcloud preview app deploy` to fail when run
    from a git directory.
  + Google Cloud SDK
  * Deprecated user property files (~/.config/gcloud/properties) will
    no longer be read by gcloud.  If you are not already using
    `configurations`, your properties will be automatically migrated for
    you.  No action is required on your part.
  * The `--format` flag now supports four more transforms: `extract`, `join`,
    `slice`, and `split`.
  + Google Cloud Debugger
  * Added the `gcloud alpha debug snapshots wait` command.
  + Google Compute Engine
  * The `gcloud alpha compute instance-groups managed list-instances` command
    output now includes the `INSTANCE_TEMPLATE` and `STATUS` columns.
  + Google Container Engine
  * Update kubectl to v1.2.3
  + Google Genomics
  * `gcloud alpha genomics variants describe/delete/update` commands now
    accept non-integer variant IDs.
- From version  107.0.0 (2016/04/27)
  + Google Compute Engine
  * Enable cursor ("start") support for get-serial-port-output in Beta.
  * Add tail-serial-port-output in Beta.
  * Image families are now in General Availability (GA).
  + Google App Engine
  * Google App Engine components updated to 1.9.36.
  * Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Deployment Manager
  * Creating and updating Deployments will now display output values
    in addition to listing the resources.
  + Google Container Engine
  * `gcloud container clusters resize` now allows specifying a node pool.
  + Cloud Debugger
  * Added `gcloud alpha debug` command surface to allow control of the
    Cloud Debugger from the command line.
  + Google BigQuery
  * BQ support for partitioned tables.
- From version  106.0.0 (2016/04/20)
  + Breaking Changes
  * Python 2.6 support in the Cloud SDK is deprecated and releases will stop
    supporting Python 2.6 on September 1, 2016.  Please update your Python
    installation to 2.7 to ensure compatibility with future Cloud SDK
    versions.
  * `gcloud preview app modules` commands are now deprecated (see "Google App
    Engine" section for more details).
  * `module` parameter in application .yaml files is now deprecated
    (see "Google App Engine" section for more details).
  * `--format` printer legend attributes are now deprecated (see "Cloud SDK"
    section for more details).
  + Cloud SDK
  * The --format printer legend attributes are deprecated and will be
    removed in release 124.0.0. The legend attribute docs have been removed.
  * The gcloud compute, functions, genomics, logging, and projects list
    commands now  support the `--filter` flag.
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.19/CHANGES.md)
  + Google App Engine
  * App Engine "modules" are being renamed to "services".
  * The `gcloud preview app modules` commands are now deprecated (except
    `gcloud preview app modules get-logs`). Please use the just-added
    `gcloud preview app versions`, `gcloud preview app services`, and
    `gcloud preview app instances` commands instead.
  * The 'module' parameter in application .yaml files is deprecated; please
    use 'service' instead.
  * Fixed `MaxRetrialsException` for `gcloud preview app deploy` of standard
    (not MVM or flexible) App Engine apps with `.git` directory present
    (&lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=727&gt;).
  * Fixed bug in `gcloud preview app deploy` where `--docker-build=local`
    did not work when `app/use_cloud_build` was enabled.
  + Google Compute Engine
  * Add `--no-creation-retries` flag to `compute instance-groups managed
    resize` command in alpha and beta.
  + Google Container Engine
  * Fix bug that caused kubectl component to be missing from components
    list on Windows.
  * `gcloud container clusters create` now allows specifying multiple zones
    within a region for your cluster's nodes to be created in.
  * Update kubectl to v1.2.2
- From version  105.0.0 (2016/04/13)
  + Breaking Changes
  * `health-checks` commands for protocol HTTP2 have been removed.
  * Rename the `alpha compute url-maps` `invalidate-cache` and
    `list-cache-invalidations` subcommands to `invalidate-cdn-cache` and
    `list-cdn-cache-invalidations`, respectively.
  + Cloud SDK
  * Suppress progress tracker animations if not outputting to a terminal.
  * `gcloud components list` now supports the `--filter` flag and queries
    like:
    `gcloud components list --filter=id:app-engine-java
  - -format="value(state.name)"`
  + Google Compute Engine
  * Promote Cloud CDN functionality from alpha to beta.
  + Google App Engine
  * File uploads during gcloud preview app deploy have been improved. If
    you have any trouble, you can revert to the old behavior with
    `gcloud config set app/use_gsutil true`.
- From version  104.0.0 (2016/04/06)
  + Cloud SDK
  * `gcloud init` no longer offers to clone
    [Google Cloud Repositories]
    (https://cloud.google.com/source-repositories/docs/).
    Please use `gcloud source repos clone` at any time after running
    `gcloud init`.
  + Google Compute Engine
  * `gcloud beta compute` commands now support image families.
  + Google App Engine
  * Users of `gcloud preview app deploy` can set the timeout for the
    Container Builder service using the app/cloud_build_timeout
    property.
  + Google Container Engine
  * kubectl component is now available for Windows (64-bit only).
  * `gcloud alpha container clusters update` now allows enabling/disabling
    addons for Container Engine clusters via `--update-addons` flag.
  * `gcloud container clusters create` now supports disabling
    HPA and Ingress controller addons via `--disable-addons` flag.
  + Google Genomics
  * `gcloud alpha genomics variants import` now supports configurable variant
    info field merging via the info_merge_config command line flag.
- From version  103.0.0 (2016/03/30)
  + Google Cloud Storage
  * Update gsutil component to 4.18
    (https://github.com/GoogleCloudPlatform/gsutil/blob/v4.18/CHANGES.md)
  + Google App Engine
  * Add fingerprinting support for PHP applications. You can now run
    `gcloud preview app gen-config` to auto-generate the necessary
    configuration for deploying PHP applications to the App Engine
    Flexible Environment.
  + Google Container Engine
  * gcloud container clusters create|get-credentials will warn/error
    respectively if the HOME env var isn't set. The variable
    is required to store kubectl credentials (kubeconfig).
  + Google Compute Engine
  * Enable support for: gcloud compute disks resize.
- From version  102.0.0 (2016/03/22)
  + Breaking Changes
  * The `gcloud alpha container nodepools` commands have been renamed to
    `node-pools`. Functionality and parameters haven't changed.
  * `gcloud beta iam list-grantable-roles` now returns a list of roles
    instead of a dictionary with a single key 'roles' with the value of
    a list of roles.
  * `gcloud config configuration describe` output has changed to include the
    configuration `name` and `is_active` fields. All configuration
    properties are now part of the `properties` field.
  + Cloud SDK
  * --format=json and --format=yaml now list resource attributes with
    null values.
  + Google App Engine
  * Use of the Google Container Builder service is now enabled by default for
    all managed VMs deployments.
    This change may require you to enable the Container Builder API. Visit
    https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=*PROJECT_ID*;
    to enable it, where *PROJECT_ID    * is your current project ID.
  * Updated Google App Engine components to 1.9.34.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  + Google Compute Engine
  * Added `gcloud compute backend-services` session affinity commands.
  * Added `gcloud compute http-health-checks` and `https-health-checks`
    commands.
  * Added `gcloud alpha compute target-ssl-proxies` commands.
  * Extended `gcloud compute forwarding-rules` to support
    `target-ssl-proxies`.
  + Google Container Engine
  * `gcloud container clusters list` will output a warning if there
    were zones for which it could not retrieve results.
  * Updated kubectl to version 1.2.0.
- From version  101.0.0 (2016/03/16)
  + Billing
  * Added [`gcloud alpha billing`]
    (https://cloud.google.com/sdk/gcloud/reference/alpha/billing/)
    command surface.
  + Google App Engine
  * App Engine components updated to 1.9.34. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for the
    Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt;
    for the Java release notes.
  + Google BigQuery
  * Updated the `bq` tool to version v2.0.24. Also includes fix for
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=632&gt;.
- From version  100.0.0 (2016/03/09)
  + Breaking Changes
  * `gcloud preview app deploy` deployments that promote the new version to
    receive all traffic will stop the previous version by default.
    To keep the previous behavior, pass the `--no-stop-previous-version`
    flag, or run the following command:
    $ gcloud config set app/stop_previous_version false
  + Cloud SDK
  * Providing no argument for list- and dict-type flags now results in a
    warning. Instead, please explicitly provide an empty string value. For
    instance, `gcloud command --flag` becomes `gcloud command --flag ''`
    (for list- and dict-type flags only).
  + IAM
  * Added `gcloud beta iam list-grantable-roles` command for given
    cloud resource.
  + Google App Engine
  * Fixed `WindowsError: [Error 32]` in the `gcloud preview app deploy`
    command on Windows. Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=554&gt;.
  + Google Container Engine
  * Added node pool support to enable heterogeneous clusters (alpha).
- From version  99.0.0 (2016/3/2)
  + Breaking Changes
  * Support for the deprecated workspace configurations feature has been
    removed. If you are using gcloud in a workspace, those properties will
    no longer be read.  See `gcloud topic configurations` for information
    on how to use configurations instead.
  + Cloud SDK
  * Enable gcloud to run in Cygwin 64 bit environments.
  * Fail gracefully on unreadable Google Compute Engine credential file.
    Fixes
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=460&gt;.
  + Google App Engine
  * App Engine components updated to 1.9.33. Please visit
    &lt;https://cloud.google.com/appengine/docs/python/release-notes&gt; for
    the Python release notes and
    &lt;https://cloud.google.com/appengine/docs/java/release-notes&gt; for the Java
    release notes.
  * Added `gcloud preview app browse` command.
  * Fixed a race condition that caused errors while deploying App Engine
    Managed VM applications.
  * Fixed a TLS-related error during gcloud preview app deploy. Alleviates
    the problem in
    &lt;https://code.google.com/p/google-cloud-sdk/issues/detail?id=559&gt;.
  + Google Compute Engine
  * `routers` surface moved to beta and is now accessible via
    `gcloud beta compute routers`
  + Google Cloud Dataproc
  * Add `--subnet` flag to `gcloud dataproc clusters create`.
  + Google Cloud Genomics
  * `genomics alpha operations cancel` assumes the `operations/` prefix
    if not present.
  + Google Cloud Storage
  * Update gsutil component to 4.17
- From version  98.0.0 (2016/2/24)
  * Release 95.0.0 introduced a bug that generated corrupt keys for
    Windows gcloud compute ssh|copy-files. Any keys generated on Windows
    between 95.0.0 and 97.0.0 inclusive are rejected by ssh servers.
    `gcloud compute` has been changed to:
  * Fix the winkeygen Windows key generator.
  * Recognize corrupt Windows keys and automatically regenerate them.
  * Fixed
    [#538](https://code.google.com/p/google-cloud-sdk/issues/detail?id=538).
    Users should no longer get "gsutil ImportError: No module named google"
    errors.
  + Google App Engine
  * MySqldb "latest" version changed from 1.24b4 to 1.2.5.
  + Emulators
  * Improves Pub/Sub emulator's ability to handle requests concurrent with
    HTTP pull requests.
  * The Pub/Sub emulator attempts to detect and inform users when an
    unsupported API version is used.
  * The Pub/Sub emulator now correctly handles absolute URIs in HTTP/Json
    requests.
  + Windows support
  * Google Cloud SDK no longer needs Python installed when using the Windows
    Installer. The SDK for Windows comes with Python bundled.
- From version  97.0.0 (2016/2/17)
  + Breaking Changes
    `gcloud alpha compute routers` now requires manual configuration of
    interfaces
  + Google Compute Engine
  * Added flag `--advertised-route-priority` to `gcloud alpha compute
    routers create`
  * Added support for regional instance groups in alpha
  + Google App Engine
  * Ruby runtime now uses the Rack "deployment" environment, instead
    of "none"
  + Google Container Engine
  * Added `--master` flag to `gcloud container clusters upgrade`
- From version  96.0.0 (2016/2/10)
  + Google App Engine
  * Google App Engine components updated to 1.9.32. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * The `gcloud preview app gen-config` command now offers to
    automatically update the runtime field in app.yaml if necessary.
  + IAM
  * The `gcloud beta iam` command group has launched.
  + Emulators
  * The Pub/Sub emulator now supports Gzip-encoded requests.
  + Google Compute Engine
  * The gcloud compute copy-files|scp commands on Windows now treat path
    arguments with a drive prefix as local files.
  + Configurations
  * The `config configurations delete` command now takes multiple
    configuration names.
  + Containers
  * kubectl is updated to v1.1.7.
  * Bugfix on the `gcloud container clusters get-credentials` when run
    from a client without edit permissions.
  + Misc. Changes
  * The default floating point output format precision is 6. Exponent
    notation is used for abs(n) &lt; 1e-04 and abs(n) &gt;= 1e+09.
  * The arrow and page up/down/home/end keys now work in the Windows help
    pager.
- From version  95.0.0 (2016/2/3)
  + Breaking Changes
  * Use `gcloud compute networks create --mode=legacy` to create non-subnet
    networks.
  + Google Compute Engine
  * `gcloud compute copy-files` and `gcloud compute ssh` on Windows now use
    standard PuTTY plink.exe, pscp.exe and putty.exe. A standalone
    winkeygen.exe generates PuTTY and ssh compatible keys. The Windows
    PuTTY executables are up to date at version 0.66.
  + Google Compute Engine subnets
  * Added `gcloud compute networks subnets`.
  * Added `--mode` flag to `gcloud compute networks create`.
  * Added `--subnet` flag to `gcloud compute instances create` and
    `gcloud compute instance-templates create`.
  * Added `--local-traffic-selector` flag to `gcloud compute vpn-tunnels
    create`.
  + Google App Engine
  * Added support for streaming logs when the `use_cloud_build=1` property
    is set.
  * Moved the nodejs install script into the docker image.
  + Projects
  * `gcloud projects update|undelete|delete` have been moved to beta.
  + gcloud --format
  * Added nested table formatting by
    `--format="table(field1,listField2:format=FORMAT-STRING)"` where
    _FORMAT-STRING_ can be any format (json, table, ...).
    Try: `gcloud compute instances list
  - -format="table[box](name, disks:format='table[no-heading]
    (deviceName:sort=1, kind)')"`
  * Added list field aggregation formatting (similar to nested formatting) by
    `--format="table(listField2:format=FORMAT-STRING)"`. When the main table
    has no columns each nested format is aggregated into a single list.
    Try: `gcloud compute instances list
  - -format="table(disks:format='table[box](deviceName:sort=1, kind)')"`
- From version  94.0.0 (2016/1/27)
  + Google Compute Engine
  * Added `gcloud alpha compute url-maps list-cache-invalidations` command.
  + Google App Engine
  * Google App Engine components updated to 1.9.31. Please visit the
    following release notes for details:
    Python - https://cloud.google.com/appengine/docs/python/release-notes
    Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Added `--runtime` flag to `gcloud preview app gen-config` to specify
    a runtime when a directory identifies as multiple runtimes. This flag
    can be used in conjunction with `--custom`.
  + Google Container Engine
  * `gcloud container cluster describe` and `list` commands now notify
    the user when their cluster versions are about to go out of support or
    are unsupported.
  + Google Cloud Logging
  * `gcloud beta logging write` and `gcloud beta logging logs delete`
    commands now use the V2beta1 API. The `gcloud beta logging write`
    command now uses the global resource descriptor (which translates to
    "custom.googleapis.com" service in V1).
  + Cloud Dataproc
  * `gcloud beta dataproc clusters create` now supports `--tags` and
    `--metadata` flags to set instance tags and metadata on all instances
    in the Dataproc cluster.
  + PubSub Emulator
  * A new --host flag can be used to specify the address the emulator
    should bind as. The flag can be left unspecified, set to "localhost",
    a hostname, or an explicit IP address.
  + Projects
  * Added commands `get-iam-policy`, `set-iam-policy`,
    `add-iam-policy-binding`, and `remove-iam-policy-binding` for the
    `gcloud beta projects` surface.
  * Added the `gcloud projects list` command that can be used to list
    projects.
- From version  93.0.0 (2016/1/20)
  * kubectrl upgraded to 1.1.4.
  * `gcloud beta dataproc cluster create` now supports `--properties` flag
    to set properties for installed packages.
  * Datastore emulator's `DATASTORE_LOCAL_HOST` environment variable
    changed to `DATASTORE_EMULATOR_HOST`.
  * `gcloud source repos clone` now supports `--dry-run` flag to show
    equivalent git command.
- From version  92.0.0 (2016/1/13)
  * Because of the rollback of 91.0.0, this release contains all of the
    changes from 91.0.0 in addition to the changes listed below.
  + Breaking Changes
  * `gcloud preview app deploy`
  * Changed deployments to set the deployed versions to receive all
    traffic for their modules by default.
    To keep the old behavior (traffic split remains the same), use the
    `--no-promote` flag or run
    `gcloud config set app/promote_by_default true`.
    Note that your old versions are still running, and must be stopped
    manually. This behavior will change in a future release.
  * Removed deprecated `--set-default` flag.  Please use `--promote`
    instead.
  * `gcloud preview app deploy`: Removed deprecated `--env-vars` flag.
  * The output of the `gcloud preview app modules list` command has been
    changed to include the traffic split percentage instead of the 'default
    version' field.
  * Removed deprecated `gcloud preview app modules cancel-deployment`
    command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app modules download` command.
  * This command is no longer necessary due to recent improvements in the
    Deployment API.
  * Removed deprecated `gcloud preview app run` command. Please use
    `dev_appserver.py` instead.
  * Changed behavior of the `--zone`/`-z` flag in the
    `gcloud dns record-sets` command group. This flag can no longer precede
    the command. For instance,
    `gcloud dns record-sets -z=mz list` will not work, but
    `gcloud dns record-sets list -z=mz` will.
  * Changed `--password-file` option for `sql instances set-root-password`;
    password now does not include trailing newline from password file. This
    matches the documented behavior, but not the previous behavior.
    (Fixes https://code.google.com/p/google-cloud-sdk/issues/detail?id=419)
  * Removed `meta/active_configuration` from the results of
    `gcloud config list` since it is not a property that can be set. You
    can continue to use the `gcloud config configurations` commands to
    view and manage your configurations.
  + Cloud SDK
  * Added `gcloud config` proxy settings. Users can configure `gcloud` to
    use a proxy via the following settings:
  * `gcloud config proxy/address`
  * `gcloud config proxy/password`
  * `gcloud config proxy/port`
  * `gcloud config proxy/type`
  * `gcloud config proxy/username`
  * Added `alpha` and `beta` components to Debian packages.
  * Removed unused config properties: `app/hosted_registry`, `app/host`,
    `app/admin_host`, `app/api_host`.
  + Google Cloud Logging
  * Migrated to
    [v2beta1](https://cloud.google.com/logging/docs/api/introduction_v2) API
    release.
  * Moved `gcloud beta logging sinks` commands to `v2beta1`.
  * Added `gcloud beta logging resource-descriptors` command to display
    supported resources from various services.
  * Added `gcloud beta logging read` command to retrieve log entries
    using filters.
  + Google Container Engine
  * Added `gcloud container clusters resize` for resizing Container Engine
    clusters.
  * Added notifications when node upgrades are available to `gcloud container
    cluster describe` and `list` commands.
  + Google App Engine
  * Fixed bug where initial deployments using `--image-url` failed.
  * Changed `gcloud preview app modules set_default` command to use the App
    Engine Admin API.
  * Changed `gcloud preview app modules list` command to use the App Engine
    Admin API.
- From version  91.0.1 (2015/12/16)
  * The Cloud SDK has been rolled back to 90.0.0.
- From version  91.0.0 (2015/12/16)
  + Breaking Changes
  * Deprecated command group `gcloud compute replica-pools` has been removed.
  * Deprecated command group `gcloud compute resource-views` has been removed.
  * App Engine API is now the only supported method for deploying in the
    `gcloud preview app deploy` command.
  + Google App Engine
  * `DEPLOYABLES` argument for `gcloud preview app deploy` is now
    optional. If not given, the command defaults to `app.yaml` in the
    current directory; if that is not found, it attempts to automatically
    generate necessary configuration files (such as app.yaml) in the
    current directory before deployment.
  * `--force` argument to `gcloud preview app deploy` is now deprecated
    and will be removed in a future release.
  + Container
  * `gcloud container` commands that poll long running operations
    (e.g create, delete, upgrade) now display progress details when
    available.
- From version  90.0.0 (2015/12/09)
  * Cloud SDK release version scheme has changed. Patch version is now
    treated as a major release version which corresponds to SDK weekly
    releases. Any updates/fixes to released version will increment
    minor/patch version number going forward.
  + Breaking Changes
  * The deprecated flag --clear-target-pool has been removed from
    `gcloud compute instance-groups managed set-target-pools` command.
  + Google App Engine
  * Components updated to 1.9.30.
    Please visit the following release notes for details:
  * Python - https://cloud.google.com/appengine/docs/python/release-notes
  * Java - https://cloud.google.com/appengine/docs/java/release-notes
  * Fixed a bug caused by uploading invalid file names for vm: true
    applications.
  + Compute
  * Subnetwork support has been promoted from alpha to beta. For more
    information see https://cloud.google.com/compute/docs/subnetworks.
- From version  0.9.89 (2015/12/02)
  + Breaking Changes
  * Removed flag `--container-ipv4-cidr` for
    `gcloud container clusters create`; please use `--cluster-ipv4-cidr`
    instead.
  * Renamed `gcloud alpha compute vpn-tunnels create --ike-networks` to
    `--local-traffic-selector`.
  * `gcloud alpha compute resource-views` commands will soon be removed.
    Please use `gcloud compute instance-groups unmanaged` commands instead.
  * `gcloud alpha compute replica-pools` commands will soon be removed.
    Please use `gcloud compute instance-groups` commands instead.
  + `gcloud` Core
  * Changed behavior of `gcloud init` git repository clone option. It now
    takes as input a path to the destination directory for the repository,
    rather than the parent directory of the repository destination.
  + BigQuery
  * Fixed failure in `gcloud alpha biquery query
    "select     * from ..."` command while displaying query results.
  + Compute
  * Fixed `gcloud alpha compute instances set-machine-type` failure when
    supplying custom cpu/custom memory, but no zone.
  * Added a new scope alias for Cloud Monitoring: `monitoring-write`. This
    scope is on by default in all new VMs.
  + Google Cloud DNS
  * Added `--replace-origin-ns` flag to `gcloud dns record-sets import`
    command to allow importing NS records.
  + Google Cloud Storage
  * Updated `gsutil` component to 4.16.
  + Google Container Engine
  * Updated kubectl to version 1.1.2.
  * Increased `gcloud container clusters create/delete` timeouts from 20m to
    30m.
  * Added `--subnetwork` flag to `gcloud container clusters create` to
    allow creation of container clusters can now be created in a Google
    Compute Engine subnetwork
    (https://cloud.google.com/compute/docs/subnetworks).
- From version  0.9.88 (2015/11/25)
  + Breaking Changes
  * The `gcloud preview app run` command has now been removed. Please use
    the bundled `dev_appserver.py` script directly instead.
  * App Engine: The 'version' and 'application' fields in module and
    configuration files are now illegal. Project name should instead be
    specified either by `gcloud config set project MY_PROJECT` or by
    setting the `--project` flag on individual command executions. Versions
    are generated automatically by default but can also be manually
    specified by setting the `--version` flag on individual command
    executions.
  + App Engine
  * Don't do runtime identification for custom runtimes during deploy. This
    fixes issue [#387]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=387).
  * The `dev_appserver.py` script no longer requires the installation of
    all App Engine components. It will install only the necessary ones at
    run time. Fixes [#273]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=273)
  + Core
  * Added the `gcloud components install` command.  This allows you to
    install missing components at the version of the SDK you currently have
    (it does not update your SDK installation).  `gcloud components update`
    should now only be used to update your SDK to the latest version.
  * Fixes [#293]
    (https://code.google.com/p/google-cloud-sdk/issues/detail?id=293)
    related SSL certificate validation issues.
  * Use zsh builtins in path.zsh.inc for faster/cleaner shell startup.</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Use the more typical &gt;= operator for version comparisons
- Use find -exec over xargs</changelog>
<changelog author="rjschwei@suse.com" date="1504699200">- Fix gsutil (bsc#1054930)
  + Force VERSION and CHECKSUM file into the right place, settings from
    MANIFEST.in are being ignored
  + Remove the "gsutil test" command. The test command depends on third_party
    test implementation and is invoked during "regular" operation such
    as cp and ls. Testing should be loaded only for developers</changelog>

</package>
<package pkgid="f1609bdf411b26687da6aa029b85ec626366af3970c1c8230f301836c4c96caf" name="gotext" arch="x86_64">
    <version epoch="0" ver="1.5.2+git20161209.47a200a" rel="11.1"/>

<changelog author="i@marguerite.su" date="1425816000">- initial version 1.4.2+git20150306.f3f2426</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1436270400">- rename golang-org-x-text
- update version 1.4.2+git20150710.7c0e16d
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151217.cf49866:
  + : added bidi and htmlindex packages to gen.go
  + encoding/charmap: don't map U+FFFD in encoder
  + : upgrade to CLDR 28 and necessary adjustments
  + encoding: encoders return errors on out-of-repertoire runes
  + encoding: added Replacement identifier and htmlindex tests
  + : added .gitignore
  + display: remove package
  + : run long tests after a generated package
  + display: remove completely
  + encoding/htmlindex: use UTF-8 encoding</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1471435201">- Added subpackage for colcmp command</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161209.47a200a:
  * secure/precis: reduce allocations for non-changing input
  * unicode/norm: remove unreachable code
  * secure/precis: new comparison API
  * internal/export/idna: sanitize errors
  * internal/export/idna: finalize API
  * internal/gen: remove a workaround for golang.org/issue/13145.
  * unicode/runenames: new package to look up rune names.
  * secure/precis: add ascii fast path to enforce
  * internal/gen: work around long string concatenation.
  * secure/precis: manually define built in profiles</changelog>
<changelog author="thipp@suse.de" date="1484222400">- Add subpackage for gotext command
- Extend rpmlintrc</changelog>

</package>
<package pkgid="a1f396b5e7690981ef706d89a083c1ab0b255809ffd10d4cc42489c80aed677c" name="graphviz" arch="src">
    <version epoch="0" ver="2.38.0" rel="9.1"/>

<changelog author="pth@suse.de" date="1358337600">- Add BuildRequires for libXaw which isn't pulled in by x11 anymore
  (bnc#797258).</changelog>
<changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
<changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
<changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
<changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
<changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
<changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
<changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
<changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
<changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
<changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="cc0f54af8e6bb01f0007b7455d66269e2a03fb5d531a53c46514e86b450c107c" name="graphviz" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.1"/>

<changelog author="pth@suse.de" date="1358337600">- Add BuildRequires for libXaw which isn't pulled in by x11 anymore
  (bnc#797258).</changelog>
<changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
<changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
<changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
<changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
<changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
<changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
<changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
<changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
<changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
<changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="c7345d8bb5632759c7e65f57c8b3c9ab4db3d37485466ba4f23ea713235ccde4" name="graphviz-devel" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.1"/>

<changelog author="pth@suse.de" date="1358337600">- Add BuildRequires for libXaw which isn't pulled in by x11 anymore
  (bnc#797258).</changelog>
<changelog author="dmueller@suse.com" date="1363435200">- add aarch64-lib64-support.diff:
  * add aarch64 to the list of lib64 architectures</changelog>
<changelog author="pth@suse.de" date="1364472000">- Rename aarch64-lib64-support.diff to graphviz-aarch64_lib64_support.patch.
- Add graphviz-type_punning.patch to compile the code in lib/vmalloc
  with -fno-strict-aliasing as it does type punning.</changelog>
<changelog author="pth@suse.de" date="1378209600">- Update to 2.32.0. Changes since 2.28.0:
  2.32.0:
  - New version of xdot format, annotating gradient color schemes
  - Support for reading pdf images using poppler
  - Lefty/dotty/lneato now accept anonymous graphs
  - Add star node shape
  - Add two-tone (non-gradient) fill
  2.30.1:
  - various build fixes
  2.30.0:
  - Replaced libgraph with libcgraph; use of libgraph is now deprecated
  - New ranking algorithm that allows multiple subgraph constraints
  - Support edges using curved arcs.
  - Added new shapes used by the synthetic biology community.
  - For HTML-like labels, provide rounded cells, and dashed or dotted borders.
  - Add lcurve and rcurve arrowheads.
  - Add prototype pie chart and striped fills.
  - Support insets in treemaps to make containment clear
  - Add random rooted tree generation to gvgen
  - Allow GVPRPATH to specify that the default path be prepended or
    appended to it.
  - Support arbitrary lists of layers; allow the user to specify arbitrary
    layers for output.
  - A collection of gvpr scripts, which were part of the source package,
    are now installed in &lt;prefix&gt;/share/graphviz/gvpr, and the that path
    is used as part of th default built-in path for gvpr.
  - Update libexpr to reflect Glenn Fowler's changes including scopes for
    variables.
  - Add next graph variable to gvpr
  - Modify dot and fdp so that a cluster's margin attribute will affect
    the space between the bounding box and nodes
  - Modify the dijkstra tool to use only directed edges
  - Output numbers without quotes if quotes are not needed on input
  - Support gradient fill
  - Provide support for webp images
  - Fix tapered edges to use the dir attribute and arrowhead
  - Add imagepath attribute
  - Add help functionality to Graphviz.app
  - Add &lt;B&gt;,&lt;I&gt;,&lt;U&gt; to html strings via svg
  - Add tapered edges
  - Add support for external labels
  - Add initial implementation of graphml2gv
  - Add basic horizontal and vertical rules to html tables
- Remove graphviz-gd_png_check_sig.patch as the file to patch doesn't
  exist anymore.
- Add graphviz-buffer_overflow.patch to fix a buffer ovderflow in
  lib/common/shapes.c(round_corners) by increasing the number of
  elements in the array.
- Add graphviz-proper_prototypes.patch that changes dthdr.h to
  include ast_common.h to get __STD_C defined, which in turn
  enables proper prototypes.
- Run autoreconf to use -fno-strict-aliasing for libvmalloc sources
- Add patch tags in the spec files
- Upstreamed all patches that aren't SUSE specific.</changelog>
<changelog author="pth@suse.de" date="1378728000">- Update to 2.34.0:
  - Resolved bugs:
  * graphviz will hangs if only one point and attribute given (gvz#2326)
  * Inconsistent text position in xdot with HTML-like label (gvz#2333)
  * Graphviz createsedges not asked for, with rank=same (gvz#2334)
  * Graph padding rectangle too big (gvz#2337)
  * labelloc has no effect for HTML-like labels with formatting (gvz#2338)
  * Global search and replace operation in the documentation seems to
    have gone awry (gvz#2340)
  * Rotated graph not quite centered (gvz#2343)
  * When arrowType is list and contains none all subsequent
    arrowTypes are dropped (gvz#2345)
  * arrowType none when included as a multiple arrowtype fails to
    render empty space (gvz#2346)
  * Buffer overflow in lib/common/shapes.c(round_corners) (gvz#2349).
  * Add aarch64 to the architectures using lib64 (gvz#2350)
  * Ask guile-config for includes and libraries (gvz#2351).
  * If string.h present, don't declare memcmp and strcmp (gvz#2352).
  * Include ast_common.h in cdt sources (gvz#2353)
  * Alternative way to get python's version (gvz#2354)
  * Unportable test(1) construct in configure script (gvz#2357)
  * Use parantheses around qw() call in loop (gvz#2359)
  * Saving in Vimdot can crash the graphical window (rh#847458).
  - Added mingle command and library for edge bundling
- Removed Patches that where accepted upstream:
  graphviz-missing_headers.patch
  graphviz-aarch64_lib64_support.patch
  graphviz-type_punning.patch
  graphviz-buffer_overflow.patch
  graphviz-proper_prototypes.patch</changelog>
<changelog author="pth@suse.de" date="1378900800">- Split off gvedit to it's own spec to avoid circular dependency
  for graphviz and its sup packages.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
<changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
<changelog author="pth@suse.de" date="1381752000">- Remove gvedit files from filelist in grapfviz.spec.
- Remove build requirement for libqt4.</changelog>
<changelog author="pth@suse.de" date="1382529600">- Split off smyrna into its own package and spec to eliminate the
  dependency cycle for graphiz.</changelog>
<changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
<changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="2cd1aefbfd30c43961f657faa52d169ca5818da3e9fdb58e722297e097e56700" name="graphviz-doc" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="42476d0923ed6388765b9f61d3df327c9f7ab886b76a38ca860e1e948c7d0772" name="graphviz-gd" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="2b9b28861b49876a301e38c61255851fb3410c086afcb6e18c4d8e098ba3af74" name="graphviz-gnome" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="f979e4683d8570f13558c41ade4ed28b3eb330d92cf82e002edc3daa0509f1d3" name="graphviz-guile" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="b81080e34e503f3ab8cec05de733a26c0728cf3e3ae4739bd97c3b099eb43e6e" name="graphviz-gvedit" arch="src">
    <version epoch="0" ver="2.38.0" rel="9.1"/>

<changelog author="pth@suse.de" date="1378900800">- Initial package split off from graphviz.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
<changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1393588800">- Fix graphviz-gvedit.changes by removing all entries that only
  apply to graphviz.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="4e7158f202cb4dc9cd9a4b9314e653609bab7a1c6a6e555fd9ff7e4466969ce4" name="graphviz-gvedit" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.1"/>

<changelog author="pth@suse.de" date="1378900800">- Initial package split off from graphviz.
- Add graphviz-type_punning.patch which compiles the vmalloc sources
  with -fno-strict-aliasing.</changelog>
<changelog author="pth@suse.de" date="1378987200">- Add graphviz-python3_version.patch that put the call to print in
  Parentheses.</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1393588800">- Fix graphviz-gvedit.changes by removing all entries that only
  apply to graphviz.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="4ca0ce0e774781dd832156f9a7e1663cb57ed79fe0d77114e4f7a084557ddba5" name="graphviz-java" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="1d99a7d50b567b343cd999cbe0ee9cdb3c5e5f02be8b5469cb23c065acc51baa" name="graphviz-lua" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="d22b65c53634cbd408d01b28a57e7c2acf3f418e846bcc7900d2abf757fe7240" name="graphviz-perl" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="928c09fb9468cc1496ec9968d5450967fbb97d42010a98a31c41e3dddf7ff612" name="graphviz-php" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="133e73a56f7a5a5c8472d68bf81d33a2d775b2bc9f96523564ef2823716c1c2b" name="graphviz-plugins" arch="src">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="3681de3051b0550f0f53bff681ee16eb3172dbb4dc5b41352ad4028de2b3d991" name="graphviz-python" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="075a2ff4474e3c33ad4a44d36f664ae0c944a46cc283575eb6574d4676aeabf2" name="graphviz-ruby" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="d2f78d0dcb064e15b158e95024ddd34c96f69cd6f3e6530485283c37bdcf3288" name="graphviz-smyrna" arch="src">
    <version epoch="0" ver="2.38.0" rel="9.1"/>

<changelog author="pth@suse.de" date="1382616000">- Split off smyrna into its own package and spec file to eliminate
  the dependency cycle for the graphviz package.
- Add libGLU and libGL as libraries to link to which was missing.</changelog>
<changelog author="mrdocs@opensuse.org" date="1388664000">- drop BuildRequires:gtkglarea2-devel its not in Factory</changelog>
<changelog author="pth@suse.de" date="1391515200">- Update to 2.36,0.
- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="schwab@suse.de" date="1434715200">- Fix build on aarch64</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="82b612a490a8d9853069e13196c0290901fb98f722ce5e28101b6d58548e8420" name="graphviz-smyrna" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.1"/>

<changelog author="pth@suse.de" date="1382616000">- Split off smyrna into its own package and spec file to eliminate
  the dependency cycle for the graphviz package.
- Add libGLU and libGL as libraries to link to which was missing.</changelog>
<changelog author="mrdocs@opensuse.org" date="1388664000">- drop BuildRequires:gtkglarea2-devel its not in Factory</changelog>
<changelog author="pth@suse.de" date="1391515200">- Update to 2.36,0.
- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="schwab@suse.de" date="1434715200">- Fix build on aarch64</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="c62ae6ef7aafecb71b602f48b153d99602f81b415addbd993ba0f56bed4c0567" name="graphviz-tcl" arch="x86_64">
    <version epoch="0" ver="2.38.0" rel="9.3"/>

<changelog author="coolo@suse.com" date="1389441600">- remove unneeded ksh dependency</changelog>
<changelog author="dvlaeev@suse.com" date="1389700800">- Don't build C# binding without mono. Otherwise we get unpackaged
  files.</changelog>
<changelog author="coolo@suse.com" date="1390046400">- use global java bcond instead of an own now that it buildrequires
  jdk and no longer gcc</changelog>
<changelog author="coolo@suse.com" date="1390046401">- fix mono bcond. It's without, not !with</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use the right ruby macro</changelog>
<changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
<changelog author="pth@suse.de" date="1391860800">- Remove non-existing patch from spec.</changelog>
<changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 1.35.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
<changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
<changelog author="mrueckert@suse.de" date="1403006400">- instead of guessing the ruby paths. let's just use the existing
  variables or at least ask ruby for it.</changelog>
<changelog author="pth@suse.de" date="1403092800">- Apply patch from darix to ask ruby for directories.
- Fix install path for tcl plugins.
- Fix file list for gnome plugins.
- Remove graphviz-plugins-tcl_install_dir.patch as it's not needed
  anymore.
- Remove graphviz-getaddrinfo.patch as the patch is upstream.</changelog>
<changelog author="toddrme2178@gmail.com" date="1405425600">- Require gd-devel instead of libgd-devel.  That is the current
  name for the package.
- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch</changelog>
<changelog author="pth@suse.de" date="1405598400">- Change License to EPL-1.0.</changelog>
<changelog author="coolo@suse.com" date="1410177600">- remove conflict with lua 5.2, seems outdated</changelog>
<changelog author="dvlaeev@suse.com" date="1426766400">- Disable Mono by default</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1429272000">- Cleanup spec:
  * remove duplicate language binding files
  * fix fdupes invocation for doc files
  * remove statements without effect
  * silence warning messages on plugin deinstallation
  * fix %post/%pre Requires</changelog>
<changelog author="mpluskal@suse.com" date="1433937600">- Update gnome dependencies</changelog>
<changelog author="schwab@suse.de" date="1434369600">- Enable ocaml and java plugins on aarch64</changelog>
<changelog author="olaf@aepfle.de" date="1464004800">- Disable ocaml plugins, not ready for upstream ocaml (fate#320836)</changelog>
<changelog author="pth@suse.de" date="1511524800">- Add graphviz-fix_format_string_vulnerability.patch to fix CVE-2014-9157
  (bsc#908426).</changelog>

</package>
<package pkgid="67b8774823cb228a45573bd21eb5bbed93f05fddc20aa84cb7c958b68d0ae921" name="gsoap" arch="src">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>
<package pkgid="40c66fecab0f0dd24c6b373bb76c7fb82a370f55aa0041f4a0dbb089c6cac1fe" name="gsoap-devel" arch="x86_64">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>
<package pkgid="48c50ce7d3edd367df2beaccf3e1a82bdd1cb74a45a0d8b6a91606b6906b2ff2" name="gsoap-doc" arch="noarch">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>
<package pkgid="867b5a035ff7d1d730673b0034b6e79605b9242314adef10788286d09fd8776f" name="gtk3" arch="src">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="99adcb75b030fc0e683aa91b42abee16639163ea244dcd73de8e99458f053a4a" name="gtk3-branding-upstream" arch="noarch">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="be49daab7fccb3b8152c33c5d9d8fc8f436d89e8986f44aa74643d02ae680ab5" name="gtk3-data" arch="noarch">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="f2d2be7628f34dc19d60a06066a5c93f2517da6adb4b3b6161ef7b71a109c71c" name="gtk3-devel" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="1869f3414004a52ec0a0777388b225c3656152046ece034c0e649b6267f60fee" name="gtk3-devel-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="08ecd540adfe0c7ce94aa6baf6e0f2cc488dcff05b167a25db9d149c13d8c145" name="gtk3-immodule-amharic" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="8e5e37460d12c9a8755cd1a0c25fd5f1a2fdc1ac1aea7521b972a8cbee93b079" name="gtk3-immodule-amharic-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="e5db784b055a684293615a495a9864e376d6164d30f8cdbcac7480ceccc57580" name="gtk3-immodule-broadway" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="46dce083e7530093bba3126c07f0825f2e8c56b035e89620dc3ca6c998ab8c89" name="gtk3-immodule-inuktitut" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="be35222a8cfd3d3bbd4ca165a1ac4219b5eaed3ae34f9fb59e8c8d0f2cdb8733" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="23a3d4b496b9633ed047c32242d713c9e4c15b361a2d7824970a1783903210b1" name="gtk3-immodule-multipress" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="4f89d2ba42c4908643b06e67e22945322be95f6407ad498ac15220b6a0a0b105" name="gtk3-immodule-multipress-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="0ebf76a11b97f3dd40bedac4096f597cb22756c2add4869e404093fd3a5bb70c" name="gtk3-immodule-thai" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="5bff4d4988e0ec72826bddc100019140252227d696bf388a81a8768c502ec57a" name="gtk3-immodule-thai-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="dcfdc2458c60f96f25e06e7a9d10fe9a094d1e5203f6a2364144f68b56342ded" name="gtk3-immodule-vietnamese" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="536b0458739edb0988b22fb0f49242c9f20657076dc43e95efc62fb654c1a322" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="39515049b06ba7ffc509374f1bab51d966f35ce49e6580bfeacc7ee8659d678d" name="gtk3-immodule-xim" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="2f0c495f9adc7f79302d89fa10e1ae2832f8ba09b77603ceb5b63e563a5d74b7" name="gtk3-immodule-xim-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="9e64a56b27f1058f033cdf57ee7372671acb4efa1eb510f66010cc36aa44acb5" name="gtk3-immodules-tigrigna" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="117cca34e485cc6239490ec8092d3e286229d7b29fdd4c5c10bf672cf1996eee" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="6e1578d49548fa79d7ad820781f44a8fb56bb4c390f6315045d143520f287c3a" name="gtk3-lang" arch="noarch">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="9516dc15ccd0ee33f067a8c3b876fd4596693b0b54eb01714e7f48f80523799a" name="gtk3-tools" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="fe720c845011c4d676695e327124a8a1e32e3f0e0b8dd18f7fbbbb628af41abc" name="gtk3-tools-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="609716ed9b8421fd093b7e480a35125b197980afe5c8cb02ff2352a539f52d07" name="gzip" arch="src">
    <version epoch="0" ver="1.6" rel="14.1"/>

<changelog author="schwab@suse.de" date="1210248000">- Fix zdiff with two compressed files.</changelog>
<changelog author="schwab@suse.de" date="1231329600">- Fixup rsyncable patch.</changelog>
<changelog author="sf@suse.de" date="1236686400">- added doc files (README, TODO, ...) (bnc #414305)</changelog>
<changelog author="jengelh@medozas.de" date="1260100800">- enabled parallel make</changelog>
<changelog author="mseben@novell.com" date="1263470400">- added gzip-CVE-2009-2624.diff and gzip-CVE-2010-0001.diff  : fix
  possible denial of service and arbitrary code execution</changelog>
<changelog author="mseben@novell.com" date="1263902400">- updated to 1.3.13
  - gzip interprets an argument of "-" as indicating stdin, but when
    "-" is not the first name on the command line, it doesn't work.
  - remove useless if-before-free tests
  - remove useless casts to avoid "make syntax-check" failures
  - avoid spurious warnings from clang
  - avoid a leak on a error path
  - don't misinterpret a failing test as successful
  - avoid creating an undersized buffer for the hufts table
    A malformed input file can cause gzip to crash with a segmentation
    violation or hang in an endless loop.
  - avoid silent data loss e.g., on NFS, due to unchecked close of stdout
  - build require automake-1.11 and produce xz-compressed tarballs, too
- deprecated futimens.diff and CVE-2009-2624.diff</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 1.4:
  + gzip -d could segfault and/or clobber the stack, possibly
    leading to arbitrary code execution. This affects x86_64 but
    not 32-bit systems. This fixes CVE-2010-0001. See also
    rh#554418.
  + gzip -d would fail with a CRC error for some valid inputs.
    So far, the only valid input known to exhibit this failure was
    compressed "from FAT filesystem (MS-DOS, OS/2, NT)".  In
    addition, to trigger the failure, your memcpy implementation
    must copy in the "reverse" order.
- Drop gzip-CVE-2010-0001.diff: fixed upstream.
- Remove AutoReqProv: it's default now.
- Use %configure, %makeinstall, and %{_bindir}.
- Update zdiff.diff: some of the patch is upstream now. It's
  unclear to me if the rest is still needed :/ So leaving it.
- Rebase zgrep.diff.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1289649600">- disable silent rules.</changelog>
<changelog author="rschweikert@suse.com" date="1328616000">- keep binaries in /usr tree (UsrMerge project)</changelog>
<changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
<changelog author="vcizek@suse.com" date="1350388800">- update to 1.5
  - gzip -cdf mishandles some concatenated input streams: test it
  - gzip -cdf now handles concatenation of gzip'd and uncompressed data
  - gzip: fix a data-loss bug when decompressing with --suffix=''
  - gzip: fix nondeterministic compression results
  - fix "znew -K" to work without use of compress utility
  - Decode FHCRC flag properly, as per Internet RFC 1952.
  - zgrep: fix parsing of -Eh options
  - zgrep: terminate gracefully when a pipeline is interrupted by a signal
  - zgrep: fix shell portability bug with -f; fix mishandling of "-e -"
  - zless: decompress stdin too, if less 429 or later
- dropped gzip-stdio.in.patch, refreshed others</changelog>
<changelog author="vdziewiecki@suse.com" date="1359460800">- Add support for xz and lzma (bnc#799561 - zgrep silently fails on
  LZMA compressed files) - xz_lzma.patch</changelog>
<changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jengelh@inai.de" date="1370865600">- Update to new upstream release 1.6
  * The "--keep" (-k) option was added to not delete input files,
  similar to other tools such as xz, lzip, and bzip2.
  * A decompression issue with certain invalid data in the "pack"
  format was fixed.
  * An incorrect overwrite when compiled with optimization was fixed.
  * zgrep's handling of multi-digit context options was fixed.
  * zmore now acts more like "more".
- More robust make install call
- Provide files for signature verification (we do not actually do
  it because gzip is part of the bootstrap cycle; but if you have
  gpg-offline listed as Support or in ~/.oscrc, it will be done)</changelog>
<changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
<changelog author="sweet_f_a@gmx.de" date="1375185600">- add the correct project URL</changelog>
<changelog author="schwab@suse.de" date="1380196800">- Don't install twice</changelog>
<changelog author="vdziewiecki@suse.com" date="1399896000">- Remove unneeded update-alternatives requirement (bnc#876129)
- Clean spec</changelog>
<changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.6-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>

</package>
<package pkgid="9f054b21ba11ac56f9f18e1f7e7786c355dc1e3400c4ee94a5ce2fa5fabe60ee" name="gzip" arch="x86_64">
    <version epoch="0" ver="1.6" rel="14.1"/>

<changelog author="sf@suse.de" date="1236686400">- added doc files (README, TODO, ...) (bnc #414305)</changelog>
<changelog author="jengelh@medozas.de" date="1260100800">- enabled parallel make</changelog>
<changelog author="mseben@novell.com" date="1263470400">- added gzip-CVE-2009-2624.diff and gzip-CVE-2010-0001.diff  : fix
  possible denial of service and arbitrary code execution</changelog>
<changelog author="mseben@novell.com" date="1263902400">- updated to 1.3.13
  - gzip interprets an argument of "-" as indicating stdin, but when
    "-" is not the first name on the command line, it doesn't work.
  - remove useless if-before-free tests
  - remove useless casts to avoid "make syntax-check" failures
  - avoid spurious warnings from clang
  - avoid a leak on a error path
  - don't misinterpret a failing test as successful
  - avoid creating an undersized buffer for the hufts table
    A malformed input file can cause gzip to crash with a segmentation
    violation or hang in an endless loop.
  - avoid silent data loss e.g., on NFS, due to unchecked close of stdout
  - build require automake-1.11 and produce xz-compressed tarballs, too
- deprecated futimens.diff and CVE-2009-2624.diff</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 1.4:
  + gzip -d could segfault and/or clobber the stack, possibly
    leading to arbitrary code execution. This affects x86_64 but
    not 32-bit systems. This fixes CVE-2010-0001. See also
    rh#554418.
  + gzip -d would fail with a CRC error for some valid inputs.
    So far, the only valid input known to exhibit this failure was
    compressed "from FAT filesystem (MS-DOS, OS/2, NT)".  In
    addition, to trigger the failure, your memcpy implementation
    must copy in the "reverse" order.
- Drop gzip-CVE-2010-0001.diff: fixed upstream.
- Remove AutoReqProv: it's default now.
- Use %configure, %makeinstall, and %{_bindir}.
- Update zdiff.diff: some of the patch is upstream now. It's
  unclear to me if the rest is still needed :/ So leaving it.
- Rebase zgrep.diff.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1289649600">- disable silent rules.</changelog>
<changelog author="rschweikert@suse.com" date="1328616000">- keep binaries in /usr tree (UsrMerge project)</changelog>
<changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
<changelog author="vcizek@suse.com" date="1350388800">- update to 1.5
  - gzip -cdf mishandles some concatenated input streams: test it
  - gzip -cdf now handles concatenation of gzip'd and uncompressed data
  - gzip: fix a data-loss bug when decompressing with --suffix=''
  - gzip: fix nondeterministic compression results
  - fix "znew -K" to work without use of compress utility
  - Decode FHCRC flag properly, as per Internet RFC 1952.
  - zgrep: fix parsing of -Eh options
  - zgrep: terminate gracefully when a pipeline is interrupted by a signal
  - zgrep: fix shell portability bug with -f; fix mishandling of "-e -"
  - zless: decompress stdin too, if less 429 or later
- dropped gzip-stdio.in.patch, refreshed others</changelog>
<changelog author="vdziewiecki@suse.com" date="1359460800">- Add support for xz and lzma (bnc#799561 - zgrep silently fails on
  LZMA compressed files) - xz_lzma.patch</changelog>
<changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jengelh@inai.de" date="1370865600">- Update to new upstream release 1.6
  * The "--keep" (-k) option was added to not delete input files,
  similar to other tools such as xz, lzip, and bzip2.
  * A decompression issue with certain invalid data in the "pack"
  format was fixed.
  * An incorrect overwrite when compiled with optimization was fixed.
  * zgrep's handling of multi-digit context options was fixed.
  * zmore now acts more like "more".
- More robust make install call
- Provide files for signature verification (we do not actually do
  it because gzip is part of the bootstrap cycle; but if you have
  gpg-offline listed as Support or in ~/.oscrc, it will be done)</changelog>
<changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
<changelog author="sweet_f_a@gmx.de" date="1375185600">- add the correct project URL</changelog>
<changelog author="schwab@suse.de" date="1380196800">- Don't install twice</changelog>
<changelog author="vdziewiecki@suse.com" date="1399896000">- Remove unneeded update-alternatives requirement (bnc#876129)
- Clean spec</changelog>
<changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.6-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>

</package>
<package pkgid="85e5991c54339ebadfd9616cfe7397befee74667a6b6ef69c983cba3ef8e507c" name="h2i" arch="x86_64">
    <version epoch="0" ver="1.5.2+git20161213.cfae461" rel="11.1"/>

<changelog author="graham@andtech.eu" date="1331640000">- Update to weekly.2012-03-13</changelog>
<changelog author="graham@andtech.eu" date="1336392000">- LICENSE now in tarball, add AUTHORS, README etc to docs</changelog>
<changelog author="graham@andtech.eu" date="1353326400">- Update to hg6a42774d38e5
- Update websockets to hybi17 &amp; hixie76/hybi00
- New ipv4 package</changelog>
<changelog author="graham@andtech.eu" date="1362916800">- publicsuffix: rename exp/cookiejar as net/http/cookiejar.
- publicsuffix: build the full table from publicsuffix.org's
- html: don't use Go tip io.ByteWriter
- spdy: make use of MaxDataLength
- ipv4: fix sprious lookahead on IPConn-based PacketConn
- ipv4: simplify, drop unnecessary parentheses and slice indices
- html: move exp/html and exp/html/atom here to the go.net
- proxy: make proxy tests able to run with host protocol stack
- proxy: make use of constants
- proxy: fix typo
- spdy: update SPDY/2 to SPDY/3
- proxy: fix desired destination address in SOCKS5 CONNECT
- publicsuffix: add an EffectiveTLDPlus1 function.
- publicsuffix: distinguish ICANN domains from private domains;
- publicsuffix: tighten the encoding from 8 bytes per node to 4.
- ipv4: update doc
- ipv4: change I/O method signatures on PacketConn and RawConn
- publicsuffix: use IDNA.
- idna: new package.
- publicsuffix: new package.
- ipv4: remove arguments from example functions
- proxy: fix IP address determination
- go.net: gofmt -w -s
- ipv4: make supportsNewIPInput const
- spdy: disallow stream id 0
- net/spdy: handle corrupted zlib data on read
- ipv4: make variable names clear
- go.net: apply gofmt -w -s
- websocket: Use protocol parameter in websocket.Dial.
- ipv4: make RFC numbers in doc clickable on GoPkgDoc
- spdy: fix typo
- spdy: add package description</changelog>
<changelog author="graham@andtech.eu" date="1368532800">- go.net/ipv4: use testing.Skip{,f}
- go.net/websocket: update package comment to refer RFC 6455
- go.net/websocket: optimize frame masking code
- go.net/websocket: allow server configurable
- publicsuffix: update table to latest list from publicsuffix.org
- go.net/websocket: fix handshake error.</changelog>
<changelog author="speilicke@suse.com" date="1382097600">- Renamed to go-go.net (from go-net)
- Add _service file</changelog>
<changelog author="speilicke@suse.com" date="1382097601">- Update to version 1.1.2+hg20131014.85.355ff0aa1b2e:
  + No changelog</changelog>
<changelog author="speilicke@suse.com" date="1382097602">- Set version to 1.2rc2 after go update</changelog>
<changelog author="i@marguerite.su" date="1425816000">- update version 1.4.2+git20150304.6dc0abc
- package name changed: go-net</changelog>
<changelog author="i@marguerite.su" date="1426939200">- add xz as BuildRequires</changelog>
<changelog author="i@marguerite.su" date="1436270400">- rename to golang-org-x-net
- update version 1.4.2+git20150629.d9558e5
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451304000">- Update to version 1.5.2+git20151224.5d0a0f8:
  + http2: add server-side trailer support
  + http2: add support for Transport reading trailers from the server
  + html/charset: use x/text/encoding/htmlindex
  + html/charset: handle unsupported code points for encoding
  + http2: send client trailers
  + http2: make Transport's Response.Body.Close not wait for buffered data
  + html/charset: verify correct UTF-8 behavior
  + http2: reset DebugGoroutines after testing it
  + http2: fix readFrames goroutine spin between ConnectionError and conn close
  + http2: fix typo and simplify truncation of text in test</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451390400">- Update to version 1.5.2+git20151229.0cb26f7:
  + http2: move HEADERS/CONTINUATION order checking into Framer</changelog>
<changelog author="tboerger@suse.com" date="1467979200">- Refactoed spec with a new unified layout</changelog>
<changelog author="tboerger@suse.com" date="1471348800">- Applied latest changes for golang-packaging</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1471435201">- Create a separate subpackage for h2i</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Updated service definition</changelog>
<changelog author="tboerger@suse.com" date="1481630401">- Update to version 1.5.2+git20161213.cfae461:
  * ipv4: add support for linux/{mips,mipsle}
  * ipv6: add support for linux/{mips,mipsle}
  * nettest: update comment on MakePipe
  * ipv4: add missing IP_HDRINCL option on Windows
  * ipv4: deflake TestConnUnicastSocketOptions on Windows
  * http2: log Framer reads and writes when a server test fails
  * http2: allow Transport to connect to https://[v6literal]/ without port
  * http2: don't flush a stream's write queue in sc.resetStream
  * http2: speed up TestTransportFlowControl in short mode
  * context: deflake tests under Go 1.6</changelog>
<changelog author="thipp@suse.de" date="1488283200">- Update requirements</changelog>

</package>
<package pkgid="44074b1ba68a74de014b9c2729cff210fe8e8dd1ce699e28a840ffc4a7fb9ed7" name="hawk2" arch="src">
    <version epoch="0" ver="2.1.0+git.1505978564.e8d29bb3" rel="3.1"/>

<changelog author="kgronlund@suse.com" date="1476100800">- Update to version 2.0.0+git.1476083916.a1e9463:
  * Allow use of spring 2.0.0</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.0.0+git.1478101560.4ab8817:
  * High: Catch div by 0 when utilization attribute has no value set (bsc#1008104)
  * UI: Clearer error when creating group with no children (bsc#1006169)
  * UI: Fix issues with larger markers (bsc#1001357)</changelog>
<changelog author="kgronlund@suse.com" date="1478174400">- Update to version 2.0.0+git.1478179791.a7b6c5e:
  * UI: Use Recent events for both resources and nodes (bsc#1008268)
  * Cib: Add only node name to feature set map (bsc#1008321)</changelog>
<changelog author="kgronlund@suse.com" date="1478952000">- Update to version 2.0.0+git.1478971272.e716a0b:
  * UI: Fix typos in RC description for m/s (bsc#1009867)
  * UI: Hide ACL in mainnav if offline (bsc#1009869)
  * Batch Mode: Handle CSRF token (bsc#1009866)
  * Persist session across cluster nodes using attrd_updater (bsc#1009880)
  * Installation and Setup Quick Start (bsc#1006831)</changelog>
<changelog author="kgronlund@suse.com" date="1479384000">- Update to version 2.0.0+git.1479373464.68754a3:
  * Dashboard: Try persisted session before login (bsc#1009880)
  * Group: Don't duplicate object list on errors (bsc#1009748)
  * Reports: Show diff from the past, not to the future (bsc#1010602)</changelog>
<changelog author="kgronlund@suse.com" date="1480507200">- Update to version 2.0.0+git.1480523437.b6a234a:
  * UI: Every help entry needs a :html entry as well</changelog>
<changelog author="kgronlund@suse.com" date="1480939200">- Update to version 2.0.0+git.1480940121.2c59e4e:
  * Doc: Add missing link to HA quick guide
  * UI: Show local doc links as large buttons</changelog>
<changelog author="kgronlund@suse.com" date="1486382400">- Always bundle gems for hawk
- Add 0001-Don-t-drop-any-gems-from-bundle.patch</changelog>
<changelog author="kgronlund@suse.com" date="1488283200">- Update to version 2.1.0+git.1488276154.57dd3268:
  * Add fencing topology support (fate#321133)
  * Add documentation for fencing topology (fate#321133)
  * UI: Revise copy for login screen
  * UI: Anchor backlinks to correct tab
  * UI: Fix footer position issues
  * UI: Fix missing alerts attribute controls
  * Check and warn re: DRBD disk/connection status (fate#322043)
  * UI: Show recent event = running (master) as info, not danger
  * Increase size of eventcontrol markers (bsc#1001357)
  * Show transition node as DC for clarity (bsc#1010843)
  * Reports: Display times as UTC as consistently as possible (bsc#1010831)</changelog>
<changelog author="kgronlund@suse.com" date="1489579200">- Update to version 2.1.0+git.1489564721.15ee423b:
  * UI: Remove trailing brackets (bsc#1029271)
  * UI: Implement language list button and documentation, github and website link in footer</changelog>
<changelog author="kgronlund@suse.com" date="1490961600">- Update to version 2.1.0+git.1490950724.558e8212:
  * Escape body attrs correctly (bsc#1031822)</changelog>
<changelog author="kgronlund@suse.com" date="1491912000">- Update to version 2.1.0+git.1491892871.5d65a24d:
  * Updated multi-cluster dashboard (bsc#1029532)
  * Fix sidebar in low resolutions (bsc#1031816)</changelog>
<changelog author="kgronlund@suse.com" date="1492689600">- Update to version 2.1.0+git.1492690749.6147693e:
  * UI: Display output from wizard in modal (fate#320866)</changelog>
<changelog author="kgronlund@suse.com" date="1493121600">- Update to version 2.1.0+git.1493122558.004910fa:
  * Bug: Use cib_id parameter if provided (bsc#1029532)
  * Update translations</changelog>
<changelog author="kgronlund@suse.com" date="1493380800">- Update to version 2.1.0+git.1493367682.5e6c2dc5:
  * UI: Add filter, link and ticket buttons. (bsc#1036738)
  * UI: Add search box for cluster table (bsc#1036738)</changelog>
<changelog author="kgronlund@suse.com" date="1493380801">- Update to version 2.1.0+git.1493374455.0363b9be:
  * UI: Improve layout of Show/Edit/Graph buttons (bsc#1036761)</changelog>
<changelog author="kgronlund@suse.com" date="1494417600">- Update to version 2.1.0+git.1494403016.19b2aada:
  * Fix systemd usage (bsc#1038400)</changelog>
<changelog author="kgronlund@suse.com" date="1496404800">- Update to version 2.1.0+git.1496403895.2d3dbf1f:
  * Add have-watchdog to list of readonly options (bsc#1042361)
  * UI: Move sidebar down slightly when batch mode is enabled (bsc#1042360)</changelog>
<changelog author="kgronlund@suse.com" date="1500897600">- Update to version 2.1.0+git.1500894042.99eca950:
  * generate-ssl-cert: Make sure commonName isn't too long (bsc#1046820)</changelog>
<changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978564.e8d29bb3:
  * Show revoke action for locally granted tickets (bsc#1059662)
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)
  * Medium: Don't offset failure time by 10 minutes in notification (bsc#1056483)
  * Link error to report creation (bsc#1056483)
  * Remove the Strange char in Dashboard (bsc#1037430)</changelog>

</package>
<package pkgid="d208dde76c53d8ec424573d82d4b1b4ef6a984724bf84f4edff15f9441f322ec" name="hawk2" arch="x86_64">
    <version epoch="0" ver="2.1.0+git.1505978564.e8d29bb3" rel="3.1"/>

<changelog author="kgronlund@suse.com" date="1476100800">- Update to version 2.0.0+git.1476083916.a1e9463:
  * Allow use of spring 2.0.0</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 2.0.0+git.1478101560.4ab8817:
  * High: Catch div by 0 when utilization attribute has no value set (bsc#1008104)
  * UI: Clearer error when creating group with no children (bsc#1006169)
  * UI: Fix issues with larger markers (bsc#1001357)</changelog>
<changelog author="kgronlund@suse.com" date="1478174400">- Update to version 2.0.0+git.1478179791.a7b6c5e:
  * UI: Use Recent events for both resources and nodes (bsc#1008268)
  * Cib: Add only node name to feature set map (bsc#1008321)</changelog>
<changelog author="kgronlund@suse.com" date="1478952000">- Update to version 2.0.0+git.1478971272.e716a0b:
  * UI: Fix typos in RC description for m/s (bsc#1009867)
  * UI: Hide ACL in mainnav if offline (bsc#1009869)
  * Batch Mode: Handle CSRF token (bsc#1009866)
  * Persist session across cluster nodes using attrd_updater (bsc#1009880)
  * Installation and Setup Quick Start (bsc#1006831)</changelog>
<changelog author="kgronlund@suse.com" date="1479384000">- Update to version 2.0.0+git.1479373464.68754a3:
  * Dashboard: Try persisted session before login (bsc#1009880)
  * Group: Don't duplicate object list on errors (bsc#1009748)
  * Reports: Show diff from the past, not to the future (bsc#1010602)</changelog>
<changelog author="kgronlund@suse.com" date="1480507200">- Update to version 2.0.0+git.1480523437.b6a234a:
  * UI: Every help entry needs a :html entry as well</changelog>
<changelog author="kgronlund@suse.com" date="1480939200">- Update to version 2.0.0+git.1480940121.2c59e4e:
  * Doc: Add missing link to HA quick guide
  * UI: Show local doc links as large buttons</changelog>
<changelog author="kgronlund@suse.com" date="1486382400">- Always bundle gems for hawk
- Add 0001-Don-t-drop-any-gems-from-bundle.patch</changelog>
<changelog author="kgronlund@suse.com" date="1488283200">- Update to version 2.1.0+git.1488276154.57dd3268:
  * Add fencing topology support (fate#321133)
  * Add documentation for fencing topology (fate#321133)
  * UI: Revise copy for login screen
  * UI: Anchor backlinks to correct tab
  * UI: Fix footer position issues
  * UI: Fix missing alerts attribute controls
  * Check and warn re: DRBD disk/connection status (fate#322043)
  * UI: Show recent event = running (master) as info, not danger
  * Increase size of eventcontrol markers (bsc#1001357)
  * Show transition node as DC for clarity (bsc#1010843)
  * Reports: Display times as UTC as consistently as possible (bsc#1010831)</changelog>
<changelog author="kgronlund@suse.com" date="1489579200">- Update to version 2.1.0+git.1489564721.15ee423b:
  * UI: Remove trailing brackets (bsc#1029271)
  * UI: Implement language list button and documentation, github and website link in footer</changelog>
<changelog author="kgronlund@suse.com" date="1490961600">- Update to version 2.1.0+git.1490950724.558e8212:
  * Escape body attrs correctly (bsc#1031822)</changelog>
<changelog author="kgronlund@suse.com" date="1491912000">- Update to version 2.1.0+git.1491892871.5d65a24d:
  * Updated multi-cluster dashboard (bsc#1029532)
  * Fix sidebar in low resolutions (bsc#1031816)</changelog>
<changelog author="kgronlund@suse.com" date="1492689600">- Update to version 2.1.0+git.1492690749.6147693e:
  * UI: Display output from wizard in modal (fate#320866)</changelog>
<changelog author="kgronlund@suse.com" date="1493121600">- Update to version 2.1.0+git.1493122558.004910fa:
  * Bug: Use cib_id parameter if provided (bsc#1029532)
  * Update translations</changelog>
<changelog author="kgronlund@suse.com" date="1493380800">- Update to version 2.1.0+git.1493367682.5e6c2dc5:
  * UI: Add filter, link and ticket buttons. (bsc#1036738)
  * UI: Add search box for cluster table (bsc#1036738)</changelog>
<changelog author="kgronlund@suse.com" date="1493380801">- Update to version 2.1.0+git.1493374455.0363b9be:
  * UI: Improve layout of Show/Edit/Graph buttons (bsc#1036761)</changelog>
<changelog author="kgronlund@suse.com" date="1494417600">- Update to version 2.1.0+git.1494403016.19b2aada:
  * Fix systemd usage (bsc#1038400)</changelog>
<changelog author="kgronlund@suse.com" date="1496404800">- Update to version 2.1.0+git.1496403895.2d3dbf1f:
  * Add have-watchdog to list of readonly options (bsc#1042361)
  * UI: Move sidebar down slightly when batch mode is enabled (bsc#1042360)</changelog>
<changelog author="kgronlund@suse.com" date="1500897600">- Update to version 2.1.0+git.1500894042.99eca950:
  * generate-ssl-cert: Make sure commonName isn't too long (bsc#1046820)</changelog>
<changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978564.e8d29bb3:
  * Show revoke action for locally granted tickets (bsc#1059662)
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)
  * Medium: Don't offset failure time by 10 minutes in notification (bsc#1056483)
  * Link error to report creation (bsc#1056483)
  * Remove the Strange char in Dashboard (bsc#1037430)</changelog>

</package>
<package pkgid="002cb3e9787123e7f6f066ffb8ed9e7c3651fc065aa0d87962d15c2e6ddde760" name="hostapd" arch="src">
    <version epoch="0" ver="2.6" rel="8.1"/>

<changelog author="ro@suse.de" date="1222084800">- updae to version 0.5.10, changes:
  * fixed EAP-SIM and EAP-AKA message parser to validate attribute
    lengths properly to avoid potential crash caused by invalid messages
  * fixed Reassociation Response callback processing when using internal
    MLME (driver_{hostap,devicescape,test}.c)
  * fixed EAP-SIM/AKA realm processing to allow decorated usernames to
    be used
  * added a workaround for EAP-SIM/AKA peers that include incorrect null
    termination in the username
  * fixed EAP-SIM Start response processing for fast reauthentication
    case
  * copy optional Proxy-State attributes into RADIUS response when acting
    as a RADIUS authentication server
- update to version 0.5.9, changes:
  * updated EAP Generalized Pre-Shared Key (EAP-GPSK) to use the latest
    draft (draft-ietf-emu-eap-gpsk-07.txt)
  * fixed debugging code not to use potentially unaligned read to fetch
    IPv4 addresses</changelog>
<changelog author="ro@suse.de" date="1222171200">- drop buildreq for madwifi (dropped package)</changelog>
<changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
<changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
<changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
<changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
<changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
<changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
<changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
<changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
<changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
<changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
<changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
<changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>

</package>
<package pkgid="0dd7e6075e78c0f5e7e595d104ebddeaffca265a4021a22a94f0e75272580c98" name="hostapd" arch="x86_64">
    <version epoch="0" ver="2.6" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
<changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
<changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
<changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
<changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
<changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
<changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
<changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
<changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
<changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
<changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
<changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>

</package>
<package pkgid="1efe99ebb18ff9ebfd82f29d03170c75be9e8db96a31d2fd9eb2724d77d754a9" name="hwdata" arch="noarch">
    <version epoch="0" ver="0.301" rel="6.1"/>

<changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
<changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
<changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
<changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
<changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
<changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
<changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>

</package>
<package pkgid="3951b25ec29acda299f9170cd61f0ed38a933fb382cf376e1aac092ca5000415" name="hwdata" arch="src">
    <version epoch="0" ver="0.301" rel="6.1"/>

<changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
<changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
<changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
<changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
<changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
<changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
<changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>

</package>
<package pkgid="48cfdbd79f54e392fea782eddf5232b485c6bb34e59ac355e9a2f9c88dbc94a8" name="hwinfo" arch="src">
    <version epoch="0" ver="21.50" rel="3.1"/>

<changelog author="snwint@suse.com" date="1476964800">- aarch64: fix detection of usb controllers (bsc#1005428)
- 21.32</changelog>
<changelog author="snwint@suse.com" date="1478692800">- implement nvdimm support (bsc#970111)
- 21.33</changelog>
<changelog author="snwint@suse.com" date="1478692801">- update usb ids
- update script to parse usb id list correctly
- update pci ids (bsc#1006818)
- 21.34</changelog>
<changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
<changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
<changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
<changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
<changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
<changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
<changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
<changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
<changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
<changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
<changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
<changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
<changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
<changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
<changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
<changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>

</package>
<package pkgid="ef804a5f0ce82b55a0bd79eba673327e29d73df817d7155cdce76d173eb64fc7" name="hwinfo" arch="x86_64">
    <version epoch="0" ver="21.50" rel="3.1"/>

<changelog author="snwint@suse.com" date="1476964800">- aarch64: fix detection of usb controllers (bsc#1005428)
- 21.32</changelog>
<changelog author="snwint@suse.com" date="1478692800">- implement nvdimm support (bsc#970111)
- 21.33</changelog>
<changelog author="snwint@suse.com" date="1478692801">- update usb ids
- update script to parse usb id list correctly
- update pci ids (bsc#1006818)
- 21.34</changelog>
<changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
<changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
<changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
<changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
<changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
<changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
<changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
<changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
<changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
<changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
<changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
<changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
<changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
<changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
<changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
<changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>

</package>
<package pkgid="f8a9d0f300dc1a6e70a6b3efa52bd6ef76e10090eb36fb5722cbfa721d7acab4" name="hwinfo-devel" arch="x86_64">
    <version epoch="0" ver="21.50" rel="3.1"/>

<changelog author="snwint@suse.com" date="1476964800">- aarch64: fix detection of usb controllers (bsc#1005428)
- 21.32</changelog>
<changelog author="snwint@suse.com" date="1478692800">- implement nvdimm support (bsc#970111)
- 21.33</changelog>
<changelog author="snwint@suse.com" date="1478692801">- update usb ids
- update script to parse usb id list correctly
- update pci ids (bsc#1006818)
- 21.34</changelog>
<changelog author="snwint@suse.com" date="1478865600">- ensure network devices have a bus_id (bsc#1007172)
- 21.35</changelog>
<changelog author="snwint@suse.com" date="1479384000">- provide also HD_MINOR_VERSION in hd.h header file
- add permanent mac address field for network cards (bsc#1007172)
- 21.36</changelog>
<changelog author="snwint@suse.com" date="1479470400">- increase version
- look for dmi table also in sysfs (bsc#1010276)
- 21.37</changelog>
<changelog author="snwint@suse.com" date="1480939200">- increase version
- simplify code in smbios_get_info()
- look for smbios entry point also in efi settings (bsc#1010276)
- 21.38</changelog>
<changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
<changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
<changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
<changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
<changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
<changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
<changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
<changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
<changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
<changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
<changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
<changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>

</package>
<package pkgid="773bb20d7ca2cc4decddfce5140b2c3094eb5248174ab99be7af1df771d33c63" name="hylafax+" arch="src">
    <version epoch="0" ver="5.5.9" rel="12.1"/>

<changelog author="axel.braun@gmx.de" date="1415793600">- Adapt README.SUSE to renamed service files</changelog>
<changelog author="axel.braun@gmx.de" date="1415966400">-fix inclusion of initscript for SysV startup</changelog>
<changelog author="axel.braun@gmx.de" date="1418558400">- corrected typo (path) in README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1423742400">- fix for bnc#856906</changelog>
<changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
<changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
<changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
<changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
<changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
<changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
<changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
<changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
<changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
<changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
<changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
<changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
<changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
<changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
<changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
<changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>

</package>
<package pkgid="da7ee65df6b125e420d0ea4e94b4703094319701f1bff9d7e938c8456b2d082b" name="hylafax+" arch="x86_64">
    <version epoch="0" ver="5.5.9" rel="12.1"/>

<changelog author="axel.braun@gmx.de" date="1415793600">- Adapt README.SUSE to renamed service files</changelog>
<changelog author="axel.braun@gmx.de" date="1415966400">-fix inclusion of initscript for SysV startup</changelog>
<changelog author="axel.braun@gmx.de" date="1418558400">- corrected typo (path) in README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1423742400">- fix for bnc#856906</changelog>
<changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
<changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
<changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
<changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
<changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
<changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
<changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
<changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
<changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
<changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
<changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
<changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
<changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
<changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
<changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
<changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>

</package>
<package pkgid="3d57ea78a9764b0285d3c3d7928521a655c46e7651793a9b4506094fc9354db3" name="hylafax+-client" arch="x86_64">
    <version epoch="0" ver="5.5.9" rel="12.1"/>

<changelog author="axel.braun@gmx.de" date="1415793600">- Adapt README.SUSE to renamed service files</changelog>
<changelog author="axel.braun@gmx.de" date="1415966400">-fix inclusion of initscript for SysV startup</changelog>
<changelog author="axel.braun@gmx.de" date="1418558400">- corrected typo (path) in README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1423742400">- fix for bnc#856906</changelog>
<changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
<changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
<changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
<changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
<changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
<changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
<changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
<changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
<changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
<changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
<changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
<changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
<changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
<changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
<changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
<changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>

</package>
<package pkgid="efc58ad3647584ce4f40e13f01431ab9c83fb5dc000f9a2e367aaf44158330b8" name="hyper-v" arch="src">
    <version epoch="0" ver="7" rel="5.1"/>

<changelog author="ohering@suse.de" date="1378641600">- Update Supplements: modalias(dmi:*)</changelog>
<changelog author="ohering@suse.de" date="1387368000">- Use native systemd services for post 13.1 releases</changelog>
<changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
<changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
<changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
<changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
<changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
<changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
<changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
<changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
<changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
<changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
<changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
<changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
<changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
<changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
<changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
<changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
<changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>

</package>
<package pkgid="1ab20d6b447239cda564c245f37e43a16117bc64b619508c2d5c16e0f2c2df5a" name="hyper-v" arch="x86_64">
    <version epoch="0" ver="7" rel="5.1"/>

<changelog author="ohering@suse.de" date="1378641600">- Update Supplements: modalias(dmi:*)</changelog>
<changelog author="ohering@suse.de" date="1387368000">- Use native systemd services for post 13.1 releases</changelog>
<changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
<changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
<changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
<changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
<changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
<changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
<changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
<changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
<changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
<changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
<changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
<changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
<changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
<changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
<changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
<changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
<changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>

</package>
<package pkgid="862bf16429d82ddb1670f4fbf9665441811f05227f664e3bf2df92a84ae30a9e" name="icoutils" arch="src">
    <version epoch="0" ver="0.31.3" rel="13.1"/>

<changelog author="lazy.kent.suse@gmail.com" date="1235908800">- spec-file corrected</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1250251200">- update to 0.27.0
  * minor fixes</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1255608000">- spec-file corrected</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1256126400">- update to 0.28.0
  * license changed to GPLv3+</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1271073600">- update to 0.29.1
- added new author</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1283688000">- removed unnecessary build dependences
- marked manpages as docs
- minor spec formatting</changelog>
<changelog author="lazy.kent@opensuse.org" date="1302523200">- build requires libpng12-compat-devel for oS &gt; 11.2
- added COPYING</changelog>
<changelog author="lazy.kent@opensuse.org" date="1307275200">- use full URL for Source
- correct suse_version macro</changelog>
<changelog author="lazy.kent@opensuse.org" date="1322136000">- Corrected build dependencies (libpng12-compat-devel -&gt;
  libpng-devel).
- Corrected rpm group.
- Corrected License tag according to SPDX Standard.
- Spec clean up.</changelog>
<changelog author="lazy.kent@opensuse.org" date="1356004800">- Update to 0.30.0.
  * Fix crash with libpng version prior to 1.2.25.
  * Man page improvements.
  * Limit size of extracted icon to size of resource. Fixes a
    segfault (rh#701855).
- Correct build dependencies: remove zlib-devel; libpng-devel -&gt;
  pkgconfig(libpng).
- Verify GPG signature.</changelog>
<changelog author="lazy.kent@opensuse.org" date="1371556800">- Update to 0.31.0.
  * Change placement of libintl dependency.
  * Man page improvements.
- Remove gpg verification from bootstrap packages.</changelog>
<changelog author="lazy.kent@opensuse.org" date="1484136000">- Update to 0.31.1.
  * Security fixes: CVE-2017-5208, CVE-2017-5331, CVE-2017-5332,
    CVE-2017-5333 (boo#1018756).</changelog>
<changelog author="lazy.kent@opensuse.org" date="1501156800">- Update to 0.31.3.
  * Fixed wrestool being broken.
- Changes in 0.31.2.
  * Various security fixes: CVE-2017-6009, CVE-2017-6010,
    CVE-2017-6011 (boo#1025700, boo#1025703).</changelog>

</package>
<package pkgid="0f96deb91a6dcf5f4637155278fc9f429def6280b7d968b6fea564cf76627f49" name="icoutils" arch="x86_64">
    <version epoch="0" ver="0.31.3" rel="13.1"/>

<changelog author="lazy.kent.suse@gmail.com" date="1235908800">- spec-file corrected</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1250251200">- update to 0.27.0
  * minor fixes</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1255608000">- spec-file corrected</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1256126400">- update to 0.28.0
  * license changed to GPLv3+</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1271073600">- update to 0.29.1
- added new author</changelog>
<changelog author="lazy.kent.suse@gmail.com" date="1283688000">- removed unnecessary build dependences
- marked manpages as docs
- minor spec formatting</changelog>
<changelog author="lazy.kent@opensuse.org" date="1302523200">- build requires libpng12-compat-devel for oS &gt; 11.2
- added COPYING</changelog>
<changelog author="lazy.kent@opensuse.org" date="1307275200">- use full URL for Source
- correct suse_version macro</changelog>
<changelog author="lazy.kent@opensuse.org" date="1322136000">- Corrected build dependencies (libpng12-compat-devel -&gt;
  libpng-devel).
- Corrected rpm group.
- Corrected License tag according to SPDX Standard.
- Spec clean up.</changelog>
<changelog author="lazy.kent@opensuse.org" date="1356004800">- Update to 0.30.0.
  * Fix crash with libpng version prior to 1.2.25.
  * Man page improvements.
  * Limit size of extracted icon to size of resource. Fixes a
    segfault (rh#701855).
- Correct build dependencies: remove zlib-devel; libpng-devel -&gt;
  pkgconfig(libpng).
- Verify GPG signature.</changelog>
<changelog author="lazy.kent@opensuse.org" date="1371556800">- Update to 0.31.0.
  * Change placement of libintl dependency.
  * Man page improvements.
- Remove gpg verification from bootstrap packages.</changelog>
<changelog author="lazy.kent@opensuse.org" date="1484136000">- Update to 0.31.1.
  * Security fixes: CVE-2017-5208, CVE-2017-5331, CVE-2017-5332,
    CVE-2017-5333 (boo#1018756).</changelog>
<changelog author="lazy.kent@opensuse.org" date="1501156800">- Update to 0.31.3.
  * Fixed wrestool being broken.
- Changes in 0.31.2.
  * Various security fixes: CVE-2017-6009, CVE-2017-6010,
    CVE-2017-6011 (boo#1025700, boo#1025703).</changelog>

</package>
<package pkgid="de571e1702a77bf4a12da436b509b811fe90e710f70771ed278fccaffcf26a41" name="icu" arch="src">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="66dfab9d0c40c7867f2c733cb53c5d29bf4f6f65f9c09985fca9e31cc63142a2" name="icu" arch="x86_64">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="6ef4269c8dcc807050934c530d70f7c6af99868dc9cff0db627e211b9116f1c4" name="icu-data" arch="x86_64">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="236da11d5f616210608552ed744c53f94e82447fa30fa0b188588f81d6f61665" name="info2html" arch="noarch">
    <version epoch="0" ver="2.0" rel="223.1"/>

<changelog author="dmueller@suse.de" date="1129032000">- build as nonroot</changelog>
<changelog author="werner@suse.de" date="1129550400">- Add infocat script to cgi path (bug #127813)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="olh@suse.de" date="1152878400">- rename bzip2 archive from .gz to .bz2</changelog>
<changelog author="werner@suse.de" date="1156939200">- Update to version 2.0
  * Output HTML is tidier now. CSS added.
  * Minor bugfixes to the (de)escaping logic.
  * Minor typoes in comments fixed.</changelog>
<changelog author="werner@suse.de" date="1197892800">- Add info3html.css to file list (bug #349033)</changelog>
<changelog author="werner@suse.de" date="1289822400">- Change decription to reflect current usage of info2html (bnc#653449)</changelog>
<changelog author="werner@suse.de" date="1290081600">- Yet an other change of the decription</changelog>
<changelog author="werner@suse.de" date="1502107200">- Avoid DirnameCheck() as it breaks the info2html (boo#1052383)
- Avoid $* asignment with newer perl</changelog>
<changelog author="werner@suse.de" date="1502107201">- Readd a fixed version of DirnameCheck() for security
  that is allow access even if no path for the info files had
  been requested</changelog>

</package>
<package pkgid="6dceaf41ccdfb4a70258373321a815893f1804e6a76bb1e16395ae89cd1248cb" name="info2html" arch="src">
    <version epoch="0" ver="2.0" rel="223.1"/>

<changelog author="ro@suse.de" date="962020800">- adapted to susehelp color layout</changelog>
<changelog author="werner@suse.de" date="976795200">- Group tag</changelog>
<changelog author="werner@suse.de" date="1014206400">- Fix bug #13659: allow ++ in base names</changelog>
<changelog author="ro@suse.de" date="1016539200">- removed requires http_daemon, since the script can be called
  directly (konqueror knows "info:" url-type)</changelog>
<changelog author="ro@suse.de" date="1028203200">- adapt server-root</changelog>
<changelog author="coolo@suse.de" date="1050494400">- use BuildRoot</changelog>
<changelog author="kukuk@suse.de" date="1055851200">- Remove directories already part of filesystem
- Rename to info2html
- Make a noarch package</changelog>
<changelog author="ro@suse.de" date="1082289600">- build with apache2</changelog>
<changelog author="werner@suse.de" date="1114171200">- Avoid to be used with XSS attacks (bug #78956)</changelog>
<changelog author="werner@suse.de" date="1118232000">- Go forwared to version 1.4 and port our patches to</changelog>
<changelog author="dmueller@suse.de" date="1129032000">- build as nonroot</changelog>
<changelog author="werner@suse.de" date="1129550400">- Add infocat script to cgi path (bug #127813)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="olh@suse.de" date="1152878400">- rename bzip2 archive from .gz to .bz2</changelog>
<changelog author="werner@suse.de" date="1156939200">- Update to version 2.0
  * Output HTML is tidier now. CSS added.
  * Minor bugfixes to the (de)escaping logic.
  * Minor typoes in comments fixed.</changelog>
<changelog author="werner@suse.de" date="1197892800">- Add info3html.css to file list (bug #349033)</changelog>
<changelog author="werner@suse.de" date="1289822400">- Change decription to reflect current usage of info2html (bnc#653449)</changelog>
<changelog author="werner@suse.de" date="1290081600">- Yet an other change of the decription</changelog>
<changelog author="werner@suse.de" date="1502107200">- Avoid DirnameCheck() as it breaks the info2html (boo#1052383)
- Avoid $* asignment with newer perl</changelog>
<changelog author="werner@suse.de" date="1502107201">- Readd a fixed version of DirnameCheck() for security
  that is allow access even if no path for the info files had
  been requested</changelog>

</package>
<package pkgid="320e5e6d0d68a7bd6258076c4334fd82a64290fbc78e059eb01c257d03a29d41" name="iproute2" arch="src">
    <version epoch="0" ver="4.4" rel="6.1"/>

<changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
<changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
<changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
<changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
<changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
<changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
<changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
<changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
<changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
<changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
<changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
<changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>

</package>
<package pkgid="a67d215097ca5911906585d99de72ec5bed09c120b669d93d5f8cde5d0128f23" name="iproute2" arch="x86_64">
    <version epoch="0" ver="4.4" rel="6.1"/>

<changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
<changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
<changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
<changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
<changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
<changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
<changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
<changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
<changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
<changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
<changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
<changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>

</package>
<package pkgid="3781e9683046968e3a3bcade6e6e8c302f1f81b09605cc4b41167d5e99095358" name="iproute2-doc" arch="noarch">
    <version epoch="0" ver="4.4" rel="6.1"/>

<changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
<changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
<changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
<changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
<changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
<changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
<changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
<changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
<changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
<changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
<changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
<changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>

</package>
<package pkgid="1d96c537b867a7dd6469fb1212336f087ead2ae38e9a07f4cf03e1c896992692" name="iproute2-doc" arch="src">
    <version epoch="0" ver="4.4" rel="6.1"/>

<changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
<changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
<changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
<changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
<changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
<changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
<changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
<changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
<changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
<changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
<changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
<changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>

</package>
<package pkgid="0f2bb6a3cbf1b453f41d1edf16d3901630a5fbcd8692dd44d04c945a333abad3" name="iptables" arch="src">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="17c7332a089791f5a7616c14ab4a53f4af3fe145e531522938712648ffc3a5c4" name="iptables" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="58fc664e8bd20efdbabf49cb3dc89f9929a69e7381f6fa490a4154b6489bb315" name="irssi" arch="src">
    <version epoch="0" ver="1.0.5" rel="17.1"/>

<changelog author="mrueckert@suse.de" date="1405339200">- update to 0.8.16
  + Add -noautosendcmd to /SERVER and /CONNECT. Passing this option
    will force Irssi to not execute the content of the autosendcmd
    chatnet-setting upon connect.
  + Accept names replies with nick!user@host instead of just nick,
    if they are enabled (see bug #805).
  - Set window binds for channel items as sticky when re-creating
    window binds as part of /layout save. This fixes the bug where
    previously saved channel windows forgets their window number
    upon reconnect.
  + Add experimental support for DNSSEC DANE validation of
    certificates.
  + Strip the argument for boolean options (see bug #769).
  + Freenode have been readded to the list of networks in the
    default configuration file.
  + Disabled support for the insecure SSLv2 protocol.
  + Various documentation enhancements.
  + Add -ssl_pass to /connect and /server (see bug #305).
  - Fix crashing bug that can happen if the terminal height
    decreases before the first window is created.
  - Fixed minor compiler warnings.
  - Fixed possible crashing bug when processing an octal escape
    sequence.
  - Fixed the /ignore -network option (see bug #748).
  - Fixed signal handling for /exec'd commands. Irssi now sends the
    signal to the process group id instead of the process id.
  - Fixed segfault generated by SSL disconnections (see bug #752).
  - Fix compilation when build with -Werror=format-security. Patch
    by Jaroslav Skarvada.
- refreshed irssi-0.8.15-ssl-passphrase.patch to apply without fuzz
  again
- disable irssi-0.8.15_ssl_proxy.patch for now</changelog>
<changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
<changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
<changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
<changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
<changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
<changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
<changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
<changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
<changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
<changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
<changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
<changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
<changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
<changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
<changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
<changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>

</package>
<package pkgid="af716ac1b4b4023feaaba437c05e600728d20b1e7759d5b65500810728006d7a" name="irssi" arch="x86_64">
    <version epoch="0" ver="1.0.5" rel="17.1"/>

<changelog author="mrueckert@suse.de" date="1405339200">- update to 0.8.16
  + Add -noautosendcmd to /SERVER and /CONNECT. Passing this option
    will force Irssi to not execute the content of the autosendcmd
    chatnet-setting upon connect.
  + Accept names replies with nick!user@host instead of just nick,
    if they are enabled (see bug #805).
  - Set window binds for channel items as sticky when re-creating
    window binds as part of /layout save. This fixes the bug where
    previously saved channel windows forgets their window number
    upon reconnect.
  + Add experimental support for DNSSEC DANE validation of
    certificates.
  + Strip the argument for boolean options (see bug #769).
  + Freenode have been readded to the list of networks in the
    default configuration file.
  + Disabled support for the insecure SSLv2 protocol.
  + Various documentation enhancements.
  + Add -ssl_pass to /connect and /server (see bug #305).
  - Fix crashing bug that can happen if the terminal height
    decreases before the first window is created.
  - Fixed minor compiler warnings.
  - Fixed possible crashing bug when processing an octal escape
    sequence.
  - Fixed the /ignore -network option (see bug #748).
  - Fixed signal handling for /exec'd commands. Irssi now sends the
    signal to the process group id instead of the process id.
  - Fixed segfault generated by SSL disconnections (see bug #752).
  - Fix compilation when build with -Werror=format-security. Patch
    by Jaroslav Skarvada.
- refreshed irssi-0.8.15-ssl-passphrase.patch to apply without fuzz
  again
- disable irssi-0.8.15_ssl_proxy.patch for now</changelog>
<changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
<changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
<changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
<changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
<changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
<changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
<changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
<changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
<changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
<changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
<changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
<changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
<changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
<changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
<changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
<changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>

</package>
<package pkgid="ff64e842e4a89ad58ef0a1a52474dc4d3fbd4ef583ebdb4fbd448b029928b201" name="irssi-devel" arch="x86_64">
    <version epoch="0" ver="1.0.5" rel="17.1"/>

<changelog author="mrueckert@suse.de" date="1405339200">- update to 0.8.16
  + Add -noautosendcmd to /SERVER and /CONNECT. Passing this option
    will force Irssi to not execute the content of the autosendcmd
    chatnet-setting upon connect.
  + Accept names replies with nick!user@host instead of just nick,
    if they are enabled (see bug #805).
  - Set window binds for channel items as sticky when re-creating
    window binds as part of /layout save. This fixes the bug where
    previously saved channel windows forgets their window number
    upon reconnect.
  + Add experimental support for DNSSEC DANE validation of
    certificates.
  + Strip the argument for boolean options (see bug #769).
  + Freenode have been readded to the list of networks in the
    default configuration file.
  + Disabled support for the insecure SSLv2 protocol.
  + Various documentation enhancements.
  + Add -ssl_pass to /connect and /server (see bug #305).
  - Fix crashing bug that can happen if the terminal height
    decreases before the first window is created.
  - Fixed minor compiler warnings.
  - Fixed possible crashing bug when processing an octal escape
    sequence.
  - Fixed the /ignore -network option (see bug #748).
  - Fixed signal handling for /exec'd commands. Irssi now sends the
    signal to the process group id instead of the process id.
  - Fixed segfault generated by SSL disconnections (see bug #752).
  - Fix compilation when build with -Werror=format-security. Patch
    by Jaroslav Skarvada.
- refreshed irssi-0.8.15-ssl-passphrase.patch to apply without fuzz
  again
- disable irssi-0.8.15_ssl_proxy.patch for now</changelog>
<changelog author="mrueckert@suse.de" date="1406635200">- disable ssl_passphrase patch but keep it until the discussion
  with upstream ended:
  https://github.com/irssi/irssi/issues/103</changelog>
<changelog author="mrueckert@suse.de" date="1409832000">- add conditional to enable socks support but disable by default.
  unless we can find a way to have socks support so it works
  without an existing socks.conf.</changelog>
<changelog author="mrueckert@suse.de" date="1413547200">- update to 0.8.17
  + Document that SSL connections aren't properly handled during
    /UPGRADE. See Github PR #39.
  + Synchronize scripts with scripts.irssi.org.
  + Performance enhancement of the nicklist as well as the
    window_item_find function. See Github PR #24.
  + Disallow unloading of static modules.
  + Allow UTF-8 characters in /bind. See Github PR #18.
  + Split overlong outgoing messages instead of silently truncating
    them.
    Adds two new options: 'split_line_end' and 'split_line_start'.
  - 'split_line_end' contains a string added to the end of line
    fragments.
  - 'split_line_start' contains a string added to the beginning
    of line
    fragments. See Github PR #29.
  + Added special /ignore NO_ACT level to ignore only activity (see
    /help ignore).
  + Support for 256 and true color terminals (see Github PR #48).
  + Support for italics (see Github PR #58).
  + Rewrote many help files.
  - Fixed various compiler warnings and use of deprecated
    functions.
  - Fixed Perl API usage and added PERL_NO_GET_CONTEXT to reduce
    code size.
  - Fixed format_get_text Perl API. See Github PR #23.
  - Fixed gui_printtext_after and term_refresh_*() visibility. See
    Github PR #22.
  - Fixed issue where UTF-8 characters was corrupted once for every
    32k text. See Github PR #12.
  - Fixed redrawing issue with right-aligned statusbar.
  - Fixed use-after-free bug with cached settings values. See
    Github PR #147.</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
<changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
<changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
<changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
<changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
<changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
<changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
<changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
<changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
<changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
<changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
<changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
<changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
<changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>

</package>
<package pkgid="65b61e75c8cf8ee7ccc52fe9e50904975a75cb48a42b257ea5f76ebc5e0bb182" name="jasper" arch="src">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="2de44eaeda47c2d02d9080fd7295415c0a05c030609f3fd59af80bba2b6f8eab" name="jasper" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="918213953cf83c85c8fd310c350302554e6bf5e843688403c994c0df21c3c8ef" name="java-1_5_0-gcj-compat" arch="src">
    <version epoch="0" ver="1.5.0.0" rel="139.1"/>

<changelog author="ro@suse.de" date="1196424000">- added baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1196683200">- provide/obsolete also for the devel package</changelog>
<changelog author="ro@suse.de" date="1196683201">- fix typo in specfile</changelog>
<changelog author="ro@suse.de" date="1196683202">- also provide classpath in the main package for now</changelog>
<changelog author="ro@suse.de" date="1197633600">- also provide jta there</changelog>
<changelog author="skh@suse.de" date="1200571200">- provide a symlink to libgcj-tools-*.jar in -devel</changelog>
<changelog author="mvyskocil@suse.cz" date="1207742400">- fix a ppc64 build (defino a bits 64 macro for that arch)</changelog>
<changelog author="coolo@suse.de" date="1210161600">- mark the update path of classpath</changelog>
<changelog author="mvyskocil@suse.cz" date="1228478400">- fixed bnc#447342 - Missing GNU Java cacerts</changelog>
<changelog author="rguenther@suse.de" date="1234785600">- Use gkeytool%{gccbinsuffix} instead of invoking gkeytool-4.3 directly.</changelog>
<changelog author="rguenther@suse.de" date="1234872000">- Extract GCC version from the installed gcc package.</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="mvyskocil@suse.cz" date="1255521600">- workaround for bnc#546843 - gkeytool lack a support for ECC certificates</changelog>
<changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
<changelog author="mvyskocil@suse.cz" date="1269000000">- ignore gkeytool errors - robust workaround for bnc#546843</changelog>
<changelog author="mvyskocil@suse.com" date="1377086400">- use absolute path for update-alternatices</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- Drop gjdoc dependency and javadoc symlink
  * gcj-compat won't be able to generate javadoc</changelog>
<changelog author="tchvatal@suse.com" date="1402056000">- Version bump to latest gcj compat package 1.0.80 with few small
  fixes.
- Fedora retired this package completely now</changelog>
<changelog author="meissner@suse.com" date="1403524800">- buildrequire ca-certificates-mozilla for certificate store build</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1504267200">- Added Require: sed to fix installation problems. [bsc#1056718]</changelog>

</package>
<package pkgid="ded2387a71e641af26cc8771f00bd662593b1b17fe0fa0c21f36c615cc62761d" name="java-1_5_0-gcj-compat" arch="x86_64">
    <version epoch="0" ver="1.5.0.0" rel="139.1"/>

<changelog author="rguenther@suse.de" date="1234872000">- Extract GCC version from the installed gcc package.</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="mvyskocil@suse.cz" date="1255521600">- workaround for bnc#546843 - gkeytool lack a support for ECC certificates</changelog>
<changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
<changelog author="mvyskocil@suse.cz" date="1269000000">- ignore gkeytool errors - robust workaround for bnc#546843</changelog>
<changelog author="mvyskocil@suse.com" date="1377086400">- use absolute path for update-alternatices</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- Drop gjdoc dependency and javadoc symlink
  * gcj-compat won't be able to generate javadoc</changelog>
<changelog author="tchvatal@suse.com" date="1402056000">- Version bump to latest gcj compat package 1.0.80 with few small
  fixes.
- Fedora retired this package completely now</changelog>
<changelog author="meissner@suse.com" date="1403524800">- buildrequire ca-certificates-mozilla for certificate store build</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1504267200">- Added Require: sed to fix installation problems. [bsc#1056718]</changelog>

</package>
<package pkgid="f27e774fc64310c9a42ea279ee75cdff6ed0743379ba58a169d9fe5d95519461" name="java-1_5_0-gcj-compat-32bit" arch="x86_64">
    <version epoch="0" ver="1.5.0.0" rel="139.1"/>

<changelog author="rguenther@suse.de" date="1234872000">- Extract GCC version from the installed gcc package.</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="mvyskocil@suse.cz" date="1255521600">- workaround for bnc#546843 - gkeytool lack a support for ECC certificates</changelog>
<changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
<changelog author="mvyskocil@suse.cz" date="1269000000">- ignore gkeytool errors - robust workaround for bnc#546843</changelog>
<changelog author="mvyskocil@suse.com" date="1377086400">- use absolute path for update-alternatices</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- Drop gjdoc dependency and javadoc symlink
  * gcj-compat won't be able to generate javadoc</changelog>
<changelog author="tchvatal@suse.com" date="1402056000">- Version bump to latest gcj compat package 1.0.80 with few small
  fixes.
- Fedora retired this package completely now</changelog>
<changelog author="meissner@suse.com" date="1403524800">- buildrequire ca-certificates-mozilla for certificate store build</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1504267200">- Added Require: sed to fix installation problems. [bsc#1056718]</changelog>

</package>
<package pkgid="44e5b87ff27eb18de3cc71f323a50ccec0c7e4f432c16fa2ad261d67d8b4c742" name="java-1_5_0-gcj-compat-devel" arch="x86_64">
    <version epoch="0" ver="1.5.0.0" rel="139.1"/>

<changelog author="rguenther@suse.de" date="1234872000">- Extract GCC version from the installed gcc package.</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="mvyskocil@suse.cz" date="1255521600">- workaround for bnc#546843 - gkeytool lack a support for ECC certificates</changelog>
<changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
<changelog author="mvyskocil@suse.cz" date="1269000000">- ignore gkeytool errors - robust workaround for bnc#546843</changelog>
<changelog author="mvyskocil@suse.com" date="1377086400">- use absolute path for update-alternatices</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- Drop gjdoc dependency and javadoc symlink
  * gcj-compat won't be able to generate javadoc</changelog>
<changelog author="tchvatal@suse.com" date="1402056000">- Version bump to latest gcj compat package 1.0.80 with few small
  fixes.
- Fedora retired this package completely now</changelog>
<changelog author="meissner@suse.com" date="1403524800">- buildrequire ca-certificates-mozilla for certificate store build</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1504267200">- Added Require: sed to fix installation problems. [bsc#1056718]</changelog>

</package>
<package pkgid="721c9b5afcb9d3cc4761ca4e7c68e020e4925e8dd5ed3c3bcd1f6689a6e69857" name="java-1_8_0-openjdk" arch="src">
    <version epoch="0" ver="1.8.0.144" rel="13.3"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="1c30bc35c59a7d161db2f5b04d8119c673e46aa53d1e766141d02e6512801783" name="java-1_8_0-openjdk" arch="src">
    <version epoch="0" ver="1.8.0.144" rel="15.2"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="c611fbc5e2b3d079258ddf1e149684316727f5fe989e6bbe129f1e726cc1653b" name="java-1_8_0-openjdk" arch="src">
    <version epoch="0" ver="1.8.0.151" rel="18.1"/>

<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
<changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
<changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
<changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
<changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
<changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
<changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
<changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
<changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
<changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
<changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
<changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>

</package>
<package pkgid="25cc8c863bd6d3358de4febf2206fa97696a35fcb43ded0ccaee74f5ea63aa8a" name="java-1_8_0-openjdk" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="13.3"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="f31ffdf3e251af24d3a9be4f390b6a35cf2007ac0184cdedaab57a8938451af2" name="java-1_8_0-openjdk" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="15.2"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="f1cf59c045524898df23f5706cc40233dbaeb89edb4c48af5f6f250a8df82438" name="java-1_8_0-openjdk" arch="x86_64">
    <version epoch="0" ver="1.8.0.151" rel="18.1"/>

<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
<changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
<changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
<changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
<changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
<changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
<changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
<changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
<changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
<changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
<changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
<changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>

</package>
<package pkgid="c2288ec13ae790c2b197bc593fd1658e15dce299d0e5d62033a5ac89dbbcb34d" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="13.3"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="cf38b30b0145f0f4bf3da2eb968988b0be2cd5f3641d7dbbb4a402691561bff1" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="15.2"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="8f09c8832c9beec60a307d7c241a192d61d44d4a46d15478ea5348761dfb6cd6" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
    <version epoch="0" ver="1.8.0.151" rel="18.1"/>

<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
<changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
<changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
<changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
<changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
<changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
<changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
<changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
<changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
<changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
<changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
<changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>

</package>
<package pkgid="0feca36ea72e80f3f18e5840adf710e803702b22d7cdcbdedb95b945c3a89daf" name="java-1_8_0-openjdk-demo" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="13.3"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="ae788ee2008a2255068bd9a3ea47302484d21f0c31e907be22d6d631afa53aee" name="java-1_8_0-openjdk-demo" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="15.2"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="ed2b86cd6d665e163cfba0f4febdcaebe67da1b288710f285bd87598b3be2d05" name="java-1_8_0-openjdk-demo" arch="x86_64">
    <version epoch="0" ver="1.8.0.151" rel="18.1"/>

<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
<changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
<changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
<changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
<changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
<changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
<changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
<changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
<changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
<changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
<changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
<changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>

</package>
<package pkgid="564d1e400f42824374f99e4a1c94fe6a64e09f9526653aa48f06d1a670558db5" name="java-1_8_0-openjdk-devel" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="13.3"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="3361978de74477dcf832d42bdeebd85544d911b2c938c6a43e5a8f35073be574" name="java-1_8_0-openjdk-devel" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="15.2"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="af31e3d1a225cd0ec01795df7b0bb66b92b0bda20d8b45b7a4a49f927e83dd07" name="java-1_8_0-openjdk-devel" arch="x86_64">
    <version epoch="0" ver="1.8.0.151" rel="18.1"/>

<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
<changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
<changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
<changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
<changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
<changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
<changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
<changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
<changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
<changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
<changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
<changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>

</package>
<package pkgid="e9f750e9b295beb3044827f0dcc33c58d2941947929d807dd29d043705458670" name="java-1_8_0-openjdk-headless" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="13.3"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="dd8ac3931b65ec9cac9bf207f7e763e9b835252c0261813d4cb929d725427c6a" name="java-1_8_0-openjdk-headless" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="15.2"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="ffff23590b7abdef507a53c08aa1ec187f2343e469d95f751bd4c15f17b2df67" name="java-1_8_0-openjdk-headless" arch="x86_64">
    <version epoch="0" ver="1.8.0.151" rel="18.1"/>

<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
<changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
<changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
<changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
<changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
<changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
<changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
<changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
<changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
<changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
<changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
<changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>

</package>
<package pkgid="73dfb64fb020531329c5b2dcff2cf7cf2237072f6c1e9d40e5a7272989c60b75" name="java-1_8_0-openjdk-javadoc" arch="noarch">
    <version epoch="0" ver="1.8.0.144" rel="13.3"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="5d602d0e900b6efc89597082c34371c1288cc233d81afd6dce12c1a5f737e71a" name="java-1_8_0-openjdk-javadoc" arch="noarch">
    <version epoch="0" ver="1.8.0.144" rel="15.2"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="501933e821715ba0c6f93e288d7799ab19ed0492003af24929792f522dcc057c" name="java-1_8_0-openjdk-javadoc" arch="noarch">
    <version epoch="0" ver="1.8.0.151" rel="18.1"/>

<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
<changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
<changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
<changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
<changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
<changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
<changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
<changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
<changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
<changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
<changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
<changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>

</package>
<package pkgid="5c140215adad4ee1d266c4ee0688d720fc29c5dc01a529684bd349f37847f818" name="java-1_8_0-openjdk-src" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="13.3"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="c0f6379f4dd5148514f89bb3cee2e54080b717ce54c4c1d164549a2f8cfce8b5" name="java-1_8_0-openjdk-src" arch="x86_64">
    <version epoch="0" ver="1.8.0.144" rel="15.2"/>

<changelog author="fstrba@suse.com" date="1445515200">- Upgrade to upstream tag jdk8u65-b17
  * Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
  * CVE-2015-4734: A remote user can exploit a flaw in the Embedded
    JGSS component to partially access data
  * CVE-2015-4803: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4805: A remote user can exploit a flaw in the Embedded
    Serialization component to gain elevated privileges
  * CVE-2015-4806: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to partially access and partially
    modify data
  * CVE-2015-4835: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4842: A remote user can exploit a flaw in the Embedded
    JAXP component to partially access data
  * CVE-2015-4843: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4844: A remote user can exploit a flaw in the Embedded
    2D component to gain elevated privileges
  * CVE-2015-4860: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4872: A remote user can exploit a flaw in the JRockit
    Security component to partially modify data [].
  * CVE-2015-4881: A remote user can exploit a flaw in the Embedded
    CORBA component to gain elevated privileges
  * CVE-2015-4882: A remote user can exploit a flaw in the Embedded
    CORBA component to cause partial denial of service conditions
  * CVE-2015-4883: A remote user can exploit a flaw in the Embedded
    RMI component to gain elevated privileges
  * CVE-2015-4893: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4902: A remote user can exploit a flaw in the Java SE
    Deployment component to partially modify data
  * CVE-2015-4903: A remote user can exploit a flaw in the Embedded
    RMI component to partially access data
  * CVE-2015-4911: A remote user can exploit a flaw in the JRockit
    JAXP component to cause partial denial of service conditions
  * CVE-2015-4810: A local user can exploit a flaw in the Java SE
    Deployment component to gain elevated privileges
  * CVE-2015-4840: A remote user can exploit a flaw in the Embedded
    2D component to partially access data
  * CVE-2015-4868: A remote user can exploit a flaw in the Java SE
    Embedded Libraries component to gain elevated privileges
  * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
    component to gain elevated privileges
  * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
    component to partially access data
  * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
    component to partially access data
- Modified patch:
  * s390-size_t.patch
  - Account for an additional uintptr_t &lt;-&gt; size_t mismatch</changelog>
<changelog author="fstrba@suse.com" date="1453723200">- Upgrade to upstream tag jdk8u72-b15
  * Oracle Critical Patch Update of January 2016 (bsc#962743)
  * Using aarch64 hotspot tag aarch64-jdk8u72-b15
- Security issues fixed:
  * CVE-2015-7575: Mozilla Network Security Services (NSS) before
    3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox
    ESR 38.x before 38.5.2, does not reject MD5 signatures in Server
    Key Exchange messages in TLS 1.2 Handshake Protocol traffic,
    which makes it easier for man-in-the-middle attackers to spoof
    servers by triggering a collision.
  * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x
    and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x
    before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to
    cause a denial of service (application crash) or possibly have
    unspecified other impact via a small bit-depth value in an IHDR
    (aka image header) chunk in a PNG image.
  * CVE-2016-0402: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66 and Java SE Embedded 8u65 allows remote attackers to affect
    integrity via unknown vectors related to Networking.
  * CVE-2016-0448: Unspecified vulnerability in the Java SE and
    Java SE Embedded components in Oracle Java SE 6u105, 7u91, and
    8u66, and Java SE Embedded 8u65 allows remote authenticated
    users to affect confidentiality via vectors related to JMX.
  * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect availability via vectors related to
    JAXP.
  * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 8u66; Java SE
    Embedded 8u65; and JRockit R28.3.8 allows remote attackers to
    affect confidentiality and integrity via unknown vectors related
    to Libraries.
  * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE
    Embedded, and JRockit components in Oracle Java SE 6u105, 7u91,
    and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows
    remote attackers to affect confidentiality, integrity, and
    availability via vectors related to AWT.
  * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java
    SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66
    and Java SE Embedded 8u65 allows remote attackers to affect
    confidentiality, integrity, and availability via unknown vectors
    related to 2D.
- Modified patch:
  * s390-java-opts.patch
    + rediff to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1456488000">- Added patch:
  * ppc64le-8036767.patch
    + Change archinstall for ppc64le from ppc64 to ppc64le
    directory.</changelog>
<changelog author="fstrba@suse.com" date="1459339200">- Update to upstream tag jdk8u77-b03 (bsc#972468)
  * CVE-2016-0636: Improve MethodHandle consistency</changelog>
<changelog author="fstrba@suse.com" date="1461844800">- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340)
- Icedtea changes from 2.6.5
  * Security fixes
  - S8129952, CVE-2016-0686: Ensure thread consistency
  - S8132051, CVE-2016-0687: Better byte behavior
  - S8138593, CVE-2016-0695: Make DSA more fair
  - S8139008: Better state table management
  - S8143167, CVE-2016-3425: Better buffering of XML strings
  - S8143945, CVE-2016-3426: Better GCM validation
  - S8144430, CVE-2016-3427: Improve JMX connections
  - S8146494: Better ligature substitution
  - S8146498: Better device table adjustments
  * Import of OpenJDK 8 u91 build 14
  - S8002116: This JdbReadTwiceTest.sh gets an exit 1
  - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when
    invoked with NMT explicitly turned on
  - S8036132: Tab characters in test/com/sun/jdi files
  - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes
    misses processes
  - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when
    run under root
  - S8059661: Test SoftReference and OOM behavior
  - S8067422: Lambda method names are unnecessarily unstable
  - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java
    got OOME
  - S8074146: [TEST_BUG] jdb has succeded to read an unreadable
    file
  - S8130212: Thread::current() might access freed memory on
    Solaris
  - S8132890: Text Overlapping on Dot Matrix Printers
  - S8134297: NPE in GSSNameElement nameType check
  - S8134650: Xsl transformation gives different results in 8u66
  - S8134828: Scrollbar thumb disappears with Nimbus L&amp;F
  - S8138589: Correct limits on unlimited cryptography
  - S8138811: Construction of static protection domains
  - S8140268: Generate link to specification license for JavaDoc
    API documentation
  - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp
    of cmserr.c
  - S8143002: [Parfait] JNI exception pending in fontpath.c:1300
  - S8143959: Certificates requiring blacklisting
  - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again
  - S8146518: Zero interpreter broken with better byte behaviour
  - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java
    should use 4-args ProtectionDomain constructor
  - S8147567: InterpreterRuntime::post_field_access not updated
    for boolean in JDK-8132051
  - S8148446: (tz) Support tzdata2016a
  - S8148475: Missing SA Bytecode updates.
  - S8148487: PPC64: Better byte behavior
  - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo
  - S8149170: Better byte behavior for native arguments
  - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with
    IOE: Invalid encoding for PolicyQualifierInfo
  - S8150012: Better byte behavior for reflection
  - S8150790: 8u75 L10n resource file translation update
  * Backports
  - S8148752, PR2943: Compiled StringBuilder code throws
    StringIndexOutOfBoundsException
  - S8154210: Zero: Better byte behaviour
  - S8154413: AArch64: Better byte behaviour
  - S4890063, PR2304, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6425769, PR2859: Allow specifying an address to bind JMX
    remote connector
  - S8000650, PR2462: unpack200.exe should check gzip crc
  - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly
    resolves symbolic links
  - S8035341: Allow using a system installed libpng
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
    normal behavior
  - S8042159: Allow using a system-installed lcms2
  - S8042806: Splashscreen uses libjpeg-internal macros
  - S8043805: Allow using a system-installed libjpeg
  - S8044235: src.zip should include all sources
  - S8074839, PR2462: Resolve disabled warnings for libunpack and
    the unpack200 binary
  - S8074859, PR1937: Turn on warnings as error
  - S8087218, PR2740: Constant fold loads from final instance
    fields in VM anonymous classes
  - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow
    using a system-installed libjpeg]
  - S8140483, PR2740: Atomic*FieldUpdaters final fields should be
    trusted
  - S8140620, PR2769: Find and load default.sf2 as the default
    soundbank on Linux
  - S8145096, PR2854: Undefined behaviour in HotSpot
  - S8145982, PR2859: JMXInterfaceBindingTest is failing
    intermittently
  - S8146015, PR2859: JMXInterfaceBindingTest is failing
    intermittently for IPv6 addresses
  - S8148351, PR2842: Only display resolved symlink for compiler,
    do not change path
  - S8150954, PR2866, RH1176206: AWT Robot not compatible with
    GNOME Shell
  * Bug fixes
  - PR2933: Support ccache 3.2 and later
  - PR2934: SunEC provider throwing KeyException with current NSS
  - S8041658: Use of -fdevirtualize on macroAssembler_x86.o
    (via -O2) with gcc 4.9.0 creates broken VM
  - PR94: empty install target in Makefile.am
  - PR729: GTKLookAndFeel should be the system look&amp;feel on all
    GNU/Linux desktops
  - PR1275: Provide option to turn off downloading of tarballs
  - PR1281, RH513605: Updating/Installing OpenJDK should recreate
    the shared class-data archive
  - PR1289: Allow JARs to be optionally compressed by setting
    COMPRESS_JARS
  - PR1291: Ensure unlimited crypto policy is in place.
  - PR1325: Only add classes to rt-source-files.txt if actually
    needed
  - PR1341: Remove Rhino support
  - PR1346: Filter out -j option to make
  - PR1347: Update list of checked JDKs
  - PR1348: java -version output is broken
  - PR1357: Make XRender mandatory
  - PR1359: Check for /usr/lib64 JVMs and generic JPackage
    alternative
  - PR1364: Replace hgforest support
  - PR1367: Support using the system installation of LCMS
  - PR1368: Ensure debug data is available for all libraries and
    binaries without redundant files
  - PR1369: Remove outdated bootstrap configure tests or make them
    fail on error
  - PR1377: Forwardport javac detection / usability test from
    IcedTea 2.x
  - PR1379: Add build support for Zero AArch64
  - PR1413: Undefined reference to libz during link of unpack200
  - PR1741: Break PulseAudio provider out into IcedTea-Sound
  - PR1766: Expand architecture support
  - PR1774: Support GIF lib v5
  - PR1774: Correct #ifdef to #if
  - PR1796: make fails with "computed checksum did NOT match"
  - PR1806: Support Debian/Ubuntu 7 &amp; 8 OpenJDK Installs as Boot
    JDK
  - PR1812: Unable to locate HotSpot checksum when downloading
  - PR1813: HotSpot URL should be used with --enable-hg
  - PR1815: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1829: Support AM_MAINTAINER_MODE
  - PR1834, RH1022017: Report elliptic curves supported by NSS,
    not the SunEC library
  - PR1845: jstack.stp in OpenJDK8 is broken
  - PR1869: Avoid x86 workaround when running Zero rather than a
    JIT
  - PR1889: Allow tarball checksumming to be disabled
  - PR1935: HotSpot extraction needs to depend on the tarball
    being downloaded
  - PR1937: Add configure option for -Werror
  - PR1938: Zero broken by enforced use of -Werror
  - PR1942: Bug reports lack IcedTea version &amp; distribution
    packaging information
  - PR1950: Add build support for Zero SH
  - PR1965, G498288: Allow builds on PaX kernels
  - PR1968: Move to new OpenJDK bug URL format
  - PR1975: SystemTap probes for the garbage collector.
  - PR1977: Support using the system installation of Zlib
  - PR1979: Support using the system installation of libjpeg
  - PR1980: Support using the system installation of giflib
  - PR1981: Support using the system installation of libpng
  - PR1983: Support using the system installation of NSS with the
    SunEC provider
  - PR1994: make dist broken
  - PR2001: Synchronise HEAD tarball paths with release branch
    paths
  - PR2066: Unset OS before running OpenJDK build
  - PR2095, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2126: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2127: SunEC provider crashes when built using system NSS
  - PR2199: Support giflib 5.1.0
  - PR2212: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2237, RH1194378: ppc64le should report its os.arch as
    ppc64le so tools can detect it
  - PR2248: HotSpot tarball fails verification after download
  - PR2256: Add SystemTap tests
  - PR2257: clean-extract-nashorn rule is never run
  - PR2321: Checksum of policy JAR files changes on every build
  - PR2329: jamvm parallel unpack failures
  - PR2339: Fail early if there is no native HotSpot JIT &amp; all
    other options are disabled
  - PR2348: Avoid following symlinks for CACAO and JamVM patches
  - PR2351: Split CACAO rule into configure and make stages
  - PR2352: Split JamVM rule into configure, make and make install
    stages
  - PR2358: Add aliases for all stamp targets
  - PR2362: Update HACKING &amp; fsg.sh.in
  - PR2363: Remove EC source code prior to build
  - PR2369: SunEC provider is partially installed
  - PR2377: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2383: Location of docs directory in install-data-local is
    incorrect
  - PR2392: Make elliptic curve removal optional
  - PR2400, RH1206656: Zero JVM crashes on startup when built with
    GCC 5
  - PR2407: Fix automatic enabling of the Zero build on non-JIT
    architectures which don't use CACAO or JamVM
  - PR2408: Enable Zero when Shark is enabled
  - PR2409: Update Zero macro to match one in IcedTea 2.x
  - PR2410: Support PPC64 JIT on ppc64le
  - PR2411: Fix references to hotspot.map following PR2001
  - PR2413: OpenJDK doesn't auto-select Zero on architectures
    where no server JVM is available
  - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to
    OpenJDK build
  - PR2415: JVM -Xmx requirement is too high on s390
  - PR2428: OpenJDK build can't handle commas in LDFLAGS
  - PR2429: OpenJDK build does not copy a symlinked cacerts file
  - PR2432: ppc64 JIT doesn't support class data sharing
  - PR2433: ppc64le does not support -Xshare:dump
  - PR2434: SystemTap support is no longer optional
  - PR2439: NSS PKCS11 regression - due to java.security automatic
    loading
  - PR2443: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2447: Allow greater control of Javadoc installation
    directory
  - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2454: install-data-local needs to check that classes.jsa
    actually exists
  - PR2456: Installation path for hotspot_gc.stp is wrong, due to
    changed j2sdk-image location
  - PR2459: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2511: Reset success following calls in LayoutManager.cpp
  - PR2541: Allow the user to specify the cacerts file to use
  - PR2544: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2547: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2631: jvm.cfg missing for ppc64le
  - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
  - PR2675: Update ppc64le autotools infrastructure following
    PR2237
  - PR2691, G564746: ./configure is unable to compile using distcc
    for icedtea-3.0.0_pre06
  - PR2737: Allow multiple PKCS11 library initialisation to be a
    non-critical error.
  - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in
    java.library.path
  - PR2743: Remove bad AArch64 merge fragment
  - PR2759: LCMS library should be named javalcms, not lcms, to
    avoid potential conflicts with the system library
  - PR2766: Remove all references to GCJ
  - PR2767: Remove remaining rogue binaries from OpenJDK tree
  - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or
    discard if no longer needed
  - PR2777: Fix MAX/MIN template usage on s390
  - PR2804: test/tapset/jstaptest.pl should be executable
  - PR2815: Race condition in SunEC provider with system NSS
  - PR2825: Placement of -lfreebl matters when using bfd linker
  - PR2826: Provide option to disable SystemTap tests
  - PR2841: Parallelism issues resulting from PR2459
  - PR2863: IcedTea doesn't pass through build and host triplets
    to OpenJDK's configure
  - PR2865: Handle uninstallation.
  - PR2869: Revert CRC fix (S8000650) backported as part of PR2462
  - PR2873: Fix make distcheck.
  - PR2880: Add missing test directory in make check.
  - PR2885: Location of 'stap' executable is hard-coded
  - PR2888: OpenJDK should check for system cacerts database (e.g.
    /etc/pki/java/cacerts)
  - PR2899: Don't use WithSeed versions of NSS functions as they
    don't fully process the seed
  - PR2906: Support prefixed variants of GNU tools used on *BSD
    systems
  - PR2907: Replace --with-abs-install-dir with usual --prefix
  - PR2917: Don't pass --with-cacerts-file to build if
    USE_ALT_CACERTS_FILE is not set
  - PR2918: Makefile handles cacerts as a symlink, but the
    configure check doesn't
  - PR2920: PaX marking fails on filesystems which don't support
    extended attributes
  - PR2921: Uninstallation of docs deletes too much
  - Don't substitute 'j' for '-j' inside -I directives
  - Extend 8041658 to all files in the HotSpot build.
  - Remove jcheck
  * AArch64 port
  - PR1970: Imported from aarch64 jdk8 repository.
  - PR2853: Fix build for aarch64/zero
  - PR2853: Remaining miscellaneous synchronisation changes from
    aarch64/jdk8u
  - PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
  - PR2853: Remove some AArch64-specific code in share/.
  - PR2853: Remove some unnecessary divergences from jdk8u.
  - PR2853: Revert AArch64 jvm.cfg divergence
  - PR2853: Revert changes to libpng source code now 8078245 is in
    place.
  - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u
    (aarch64-jdk8u77-b03)
  - S8150652, PR2922: Remove unused code in AArch64 back end
  * JamVM
  - JSR 292: Invoke Dynamic
  - JSR 308: Type Annotations
  - JSR 335: Lambda Expressions
  - JSR 901: VM support for method parameter reflection
  - JEP 171: Implement fence methods in sun.misc.Unsafe
  - sun.misc.Unsafe: additional methods get/putAddress.
  - FreeClassData: adjust method count for Miranda methods
  - Fix invokesuper check in invokespecial opcode
  - Fix non-direct interpreter invokespecial super-class check
  - When GC'ing a native method don't try to free code
  - Do not free unprepared Miranda method code data
  - Set anonymous class protection domain
  - JVM_IsVMGeneratedMethodIx stub
  - Dummy implementation of sun.misc.Perf natives
  - JVM_NewMultiArray: element class may be an array
  - jtreg test java/lang/reflect/Array/ExceedMaxDim
  - OpenJDK: Fix Local/Anonymous class checks
  - classlibMarkThreadTerminated should return Object*
  - Fix race-condition in constant-pool resolution code
  - JSR 292: MethodHandle constant-pool refs may be resolved
  - JSR 292: bootstrap method args error handling
  - JSR 308: update to match OpenJDK changes
  - JSR 292: correct intrinsic cache COMPARE function
  - Race condition in setting up imethod table
  - GC: Minor performance improvement
  - PR2034: --enable-jamvm builds broken, missing
    JVM_GetTemporaryDirectory impl
  - PR2336: JamVM lacks JVM_FindClassFromCaller
  - PR2523: Add executable stack markings to callNative.S on JamVM
  - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  * CACAO
  - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where
    possible
  - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where
    possible
  - PR2035: --enable-cacao builds broken, missing
    JVM_GetTemporaryDirectory impl.
  - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on
    Gentoo
  - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low
    max heap size
  - PR2335: CACAO lacks JVM_FindClassFromCaller
  - PR2347: Fix CACAO patches to apply again
  - PR2349: 'struct jvm_version_info' has no member named
    'is_kernel_jvm'
  - PR2350: Update to latest CACAO
  - PR2354: stamps/cacao.stamp tries to touch a file in a
    directory which doesn't exist
  - PR2355: CACAO build fails to use JRE layout
  - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced
    by jdk8u40
  - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays:
    Assertion `dest &amp;&amp; result &amp;&amp; x.any &amp;&amp; y.any' failed
  - PR2908: Add missing functions for CACAO OpenJDK JVM
    implementation
  - PR2909: Install CACAO in same way as JamVM
  - PR2910: Add rudimentary support for OpenJDK 8 class files to
    CACAO
  - PR2916: Update CACAO drop to use the latest from cacao-staging
- Removed patches:
  * PStack-808293.patch
  * aarch64-misc.patch
  * disable-doclint-by-default.patch
  * include-all-srcs.patch
  * link-with-as-needed.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc64le-8036767.patch
  * s390-java-opts.patch
  * s390-size_t.patch
  * system-lcms.patch
  * system-libjpeg.patch
  * system-libpng.patch
  * zero-dummy.patch
  - Fixed upstream
- Added patches:
  * icedtea-3.0.1-sunec.patch
  - Adapt the nss detection to SUSE packaging of mozilla-nss
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Adapt the desktop files for SUSE needs
- Modified patches:
  * 1015432.patch
  * adlc-parser.patch
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * java-atk-wrapper-security.patch
  * ppc-zero-hotspot.patch
  * zero-javadoc-verbose.patch
  - Adapt to new directory structure</changelog>
<changelog author="fstrba@suse.com" date="1464696000">- Added patch:
  * java-1_8_0-openjdk-gcc6.patch
    + Fix build with gcc 6.1
- Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to
  avoid some crashes</changelog>
<changelog author="fstrba@suse.com" date="1464955200">- Added patch:
  * disable-doclint-by-default-patch
  - Disable Doclint while building javadoc by default. OpenJDK 8
    adds and enables doclint by default. This catches issues in
    javadoc comments. It is too strict, breaks javadoc compilation
    and, in general, breaks the build for old code known to build
    with previous versions of OpenJDK.
- Cycle make on i586 in order to prevent some random build errors
  that are not easily reproduceable and thus fixable.</changelog>
<changelog author="agraf@suse.com" date="1465905600">- Fix aarch64 running with 48 bits va space (bsc#984684)
  * hotspot-aarch64-fix-48bit-va.patch</changelog>
<changelog author="fstrba@suse.com" date="1467892800">- Fix script linking /usr/share/javazi/tzdb.dat for platform where
  it applies (bsc#987895)
- Enable SunEC for SLE12 and Leap</changelog>
<changelog author="fstrba@suse.com" date="1469534400">- Upgrade to version jdk8u101 (icedtea 3.1.0)
- New in release 3.1.0 (2016-07-25):
  * Security fixes
  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking
    (bsc#989732)
  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows
    only) (bsc#989734)
  - S8146514: Enforce GCM limits
  - S8147771: Construction of static protection domains under
    Javax custom policy
  - S8148872, CVE-2016-3500: Complete name checking (bsc#989730)
  - S8149070: Enforce update ordering
  - S8149962, CVE-2016-3508: Better delineation of XML processing
    (bsc#989731)
  - S8150752: Share Class Data
  - S8151925: Font reference improvements
  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)
  - S8153312: Constrain AppCDS behavior
  - S8154475, CVE-2016-3587: Clean up lookup visibility
    (bsc#989721)
  - S8155981, CVE-2016-3606: Bolster bytecode verification
    (bsc#989722)
  - S8155985, CVE-2016-3598: Persistent Parameter Processing
    (bsc#989723)
  - S8158571, CVE-2016-3610: Additional method handle validation
    (bsc#989725)
  - CVE-2016-3552 (bsc#989726)
  - CVE-2016-3511 (bsc#989727)
  - CVE-2016-3503 (bsc#989728)
  - CVE-2016-3498 (bsc#989729)
  * New features
  - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3
    on Linux
  - PR2821: Support building OpenJDK with --disable-headful
  - PR2931, G478960: Provide Infinality Support via fontconfig
  - PR3079: Provide option to build Shenandoah on x86_64
  * Import of OpenJDK 8 u92 build 14
  - S6869327: Add new C2 flag to keep safepoints in counted
    loops.
  - S8022865: [TESTBUG] Compressed Oops testing needs to be
    revised
  - S8029630: Thread id should be displayed as a hex number in
    error report
  - S8029726: On OS X some dtrace probe names are mismatched with
    Solaris
  - S8029727: On OS X dtrace probes
    Call&lt;type&gt;MethodA/Call&lt;type&gt;MethodV are not fired.
  - S8029728: On OS X dtrace probes SetStaticBooleanField are not
    fired
  - S8038184: XMLSignature throws StringIndexOutOfBoundsException
    if ID attribute value is empty String
  - S8038349: Signing XML with DSA throws Exception when key is
    larger than 1024 bits
  - S8041501: ImageIO reader is not capable of reading JPEGs
    without JFIF header
  - S8041900: [macosx] Java forces the use of discrete GPU
  - S8044363: Remove special build options for unpack200 executable
  - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value
    for hotspot ARCH
  - S8046611: Build errors with gcc on sparc/fastdebug
  - S8047763: Recognize sparc64 as a sparc platform
  - S8048232: Fix for 8046471 breaks PPC64 build
  - S8052396: Catch exceptions resulting from missing font cmap
  - S8058563: InstanceKlass::_dependencies list isn't cleared from
    empty nmethodBucket entries
  - S8061624: [TESTBUG] Some tests cannot be ran under compact
    profiles and therefore shall be excluded
  - S8062901: Iterators is spelled incorrectly in the Javadoc for
    Spliterator
  - S8064330: Remove SHA224 from the default support list if
    SunMSCAPI enabled
  - S8065579: WB method to start G1 concurrent mark cycle should
    be introduced
  - S8065986: Compiler fails to NullPointerException when calling
    super with Object&lt;&gt;()
  - S8066974: Compiler doesn't infer method's generic type
    information in lambda body
  - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for
    out of range years
  - S8068033: JNI exception pending in jdk/src/share/bin/java.c
  - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c
    for JNI pending
  - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed:
    OLD and/or OBSOLETE method(s) found
  - S8068254: Method reference uses wrong qualifying type
  - S8074696: Remote debugging session hangs for several minutes
    when calling findBootType
  - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421
    correctness, as jdk7 did
  - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java
    relies on system locale
  - S8080492: [Parfait] Uninitialised variable in
    jdk/src/java/desktop/windows/native/libawt/
  - S8080650: Enable stubs to use frame pointers correctly
  - S8122944: perfdata used is seen as too high on sparc zone with
    jdk1.9 and causes a test failure
  - S8129348: Debugger hangs in trace mode with TRACE_SENDS
  - S8129847: Compiling methods generated by Nashorn triggers high
    memory usage in C2
  - S8130506: javac AssertionError when invoking
    MethodHandle.invoke with lambda parameter
  - S8130910: hsperfdata file is created in wrong directory and
    not cleaned up if /tmp/hsperfdata_&lt;username&gt; has wrong permissions
  - S8131129: Attempt to define a duplicate BMH$Species class
  - S8131665: Bad exception message in HandshakeHash.getFinishedHash
  - S8131782: C1 Class.cast optimization breaks when Class is
    loaded from static final
  - S8132503: [macosx] Chinese full stop symbol cannot be entered
    with Pinyin IM on OS X
  - S8133207: ParallelProbes.java test fails after changes for
    JDK-8080115
  - S8133924: NPE may be thrown when xsltc select a non-existing
    node after JDK-8062518
  - S8134007: Improve string folding
  - S8134759: jdb: Incorrect stepping inside finally block
  - S8134963: [Newtest] New stress test for changing the coarseness
    level of G1 remembered set
  - S8136442: Don't tie Certificate signature algorithms to
    ciphersuites
  - S8137106: EUDC (End User Defined Characters) are not displayed
    on Windows with Java 8u60+
  - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory
    in HotSpot
  - S8138764: In some cases the usage of TreeLock can be replaced
    by other synchronization
  - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java
    failed with timeout
  - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc]
    void InstanceKlass::oop_oop_iterate_oop_maps_specialized&lt;true,oopDesc*,MarkAndPushClosure&gt;
  - S8139436: sun.security.mscapi.KeyStore might load incomplete
    data
  - S8139751: Javac crash with -XDallowStringFolding=false
  - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to
    8u-dev
  - S8139985: JNI exception pending in
    jdk/src/jdk/hprof/agent/share/native/libhprof
  - S8140031: SA: Searching for a value in Threads does not work
  - S8140249: JVM Crashing During startUp If Flight Recording is
    enabled
  - S8140344: add support for 3 digit update release numbers
  - S8140587: Atomic*FieldUpdaters should use Class.isInstance
    instead of direct class check
  - S8141260: isReachable crash in windows xp
  - S8143297: Nashorn compilation time reported in nanoseconds
  - S8143397: It looks like InetAddress.isReachable(timeout) works
    incorrectly
  - S8143855: Bad printf formatting in frame_zero.cpp
  - S8143896: java.lang.Long is implicitly converted to double
  - S8143963: improve ClassLoader::trace_class_path to accept an
    additional outputStream* arg
  - S8144020: Remove long as an internal numeric type
  - S8144131: ArrayData.getInt implementations do not convert to
    int32
  - S8144483: One long Safepoint pause directly after each GC log
    rotation
  - S8144487: PhaseIdealLoop::build_and_optimize() must restore
    major_progress flag if skip_loop_opts is true
  - S8144885: agent/src/os/linux/libproc.h needs to support
    Linux/SPARC builds
  - S8144935: C2: safepoint is pruned from a non-counted loop
  - S8144937: [TEST_BUG] testlibrary_tests should be excluded for
    compact1 and compact2 execution
  - S8145017: Add support for 3 digit hotspot minor version numbers
  - S8145099: Better error message when SA can't attach to a process
  - S8145442: Add the facility to verify remembered sets for G1
  - S8145466: javac: No line numbers in compilation error
  - S8145539: (coll) AbstractMap.keySet and .values should not be
    volatile
  - S8145550: Megamorphic invoke should use CompiledFunction
    variants without any LinkLogic
  - S8145669: apply2call optimized callsite fails after becoming
    megamorphic
  - S8145722: NullPointerException in javadoc
  - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not
    match AddI
  - S8146147: Java linker indexed property getter does not work
    for computed nashorn string
  - S8146566: OpenJDK build can't handle commas in LDFLAGS
  - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms
  - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u
    because 8072383 was badly backported before
  - S8147087: Race when reusing PerRegionTable bitmaps may result
    in dropped remembered set entries
  - S8147630: Wrong test result pushed to 8u-dev
  - S8147845: Varargs Array functions still leaking longs
  - S8147857: RMIConnector logs attribute names incorrectly
  - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC
  - S8150791: 8u76 L10n resource file translation update
  * Import of OpenJDK 8 u101 build 13
  - S6483657: MSCAPI provider does not create unique alias names
  - S6675699: need comprehensive fix for unconstrained ConvI2L
    with narrowed type
  - S8037557: test SessionCacheSizeTests.java timeout
  - S8038837: Add support to jarsigner for specifying timestamp
    hash algorithm
  - S8081778: Use Intel x64 CPU instructions for RSA acceleration
  - S8130150: Implement BigInteger.montgomeryMultiply intrinsic
  - S8130735: javax.swing.TimerQueue: timer fires late when
    another timer starts
  - S8143913: MSCAPI keystore should accept Certificate[] in
    setEntry()
  - S8144313: Test SessionTimeOutTests can be timeout
  - S8146240: Three nashorn files contain "GNU General Public
    License" header
  - S8146387: Test SSLSession/SessionCacheSizeTests socket accept
    timed out
  - S8146669: Test SessionTimeOutTests fails intermittently
  - S8146993: Several javax/management/remote/mandatory regression
    tests fail after JDK-8138811
  - S8147994: [macosx] JScrollPane jitters up/down during trackpad
    scrolling on MacOS/Aqua
  - S8151522: Disable 8130150 and 8081778 intrinsics by default
  - S8151876: (tz) Support tzdata2016d
  - S8152098: Fix 8151522 caused test
    compiler/intrinsics/squaretolen/TestSquareToLen.java to fail
  - S8157077: 8u101 L10n resource file updates
  * Backports
  - S6260348, PR3066: GTK+ L&amp;F JTextComponent not respecting
    desktop caret blink rate
  - S6778087, PR1061: getLocationOnScreen() always returns (0, 0)
    for mouse wheel events
  - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS
    string
  - S8008657, PR3077: JSpinner setComponentOrientation doesn't
    affect on text orientation
  - S8014212, PR2866: Robot captures black screen
  - S8029339, PR1061: Custom MultiResolution image support on
    HiDPI displays
  - S8031145, PR3077: Re-examine closed i18n tests to see it they
    can be moved to the jdk repository.
  - S8034856, PR3095: gcc warnings compiling
    src/solaris/native/sun/security/pkcs11
  - S8034857, PR3095: gcc warnings compiling
    src/solaris/native/sun/management
  - S8035054, PR3095: JarFacade.c should not include ctype.h
  - S8035287, PR3095: gcc warnings compiling various libraries
    files
  - S8038631, PR3077: Create wrapper for awt.Robot with additional
    functionality
  - S8039279, PR3077: Move awt tests to openjdk repository
  - S8041561, PR3077: Inconsistent opacity behaviour between
    JCheckBox and JRadioButton
  - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests
    to jdk
  - S8041915, PR3077: Move 8 awt tests to OpenJDK regression
    tests tree
  - S8043126, PR3077: move awt automated functional tests from
    AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository
  - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC
    functional AWT tests to regression tree
  - S8044157, PR3077: [TEST_BUG] Improve recently submitted
    AWT_Mixing tests
  - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and
    AltPlusNumberKeyCombinationsTest to jdk
  - S8044429, PR3077: move awt automated tests for AWT_Modality
    to OpenJDK repository
  - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out
  - S8044765, PR3077: Move functional tests
    AWT_SystemTray/Automated to openjdk repository
  - S8047180, PR3077: Move functional tests AWT_Headless/Automated
    to OpenJDK repository
  - S8047367, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 2
  - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional
    tests to OpenJDK
  - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out
    again
  - S8049617, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 3
  - S8049694, PR3077: Migrate functional
    AWT_DesktopProperties/Automated tests to OpenJDK
  - S8050885, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 4
  - S8051440, PR3077: move tests about maximizing undecorated to
    OpenJDK
  - S8052012, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 5
  - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3
    of 3)
  - S8053657, PR3077: [TEST_BUG] move some 5 tests related to
    undecorated Frame/JFrame to JDK
  - S8054143, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 6
  - S8054358, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 7
  - S8054359, PR3077: move awt automated tests from AWT_Modality
    to OpenJDK repository - part 8
  - S8055360, PR3077: Move the rest part of AWT
    ShapedAndTranslucent tests to OpenJDK
  - S8055664, PR3077: move 14 tests about setLocationRelativeTo
    to jdk
  - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 9
  - S8056911, PR3077: Remove internal API usage from ExtendedRobot
    class
  - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK
    repository - part 10
  - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java
    failed automatically
  - S8062606, PR3077: Fix a typo in java.awt.Robot class
  - S8063102, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063104, PR3077: Change open awt regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8063106, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 1
  - S8063107, PR3077: Change open swing regression tests to avoid
    sun.awt.SunToolkit.realSync, part 2
  - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java
    is asocial pressing VK_LEFT and not releasing
  - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java
    100 times press keys and never releases
  - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java
    contains a lot of keyPress and not a single keyRelease
  - S8067441, PR3077: Some tests fails with error: cannot find symbol
    getSystemMnemonicKeyCodes()
  - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest
    fails with GTKLookAndFeel
  - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not
    include scale factor
  - S8073320, PR1061: Windows HiDPI Graphics support
  - S8074807, PR3077: Fix some tests unnecessary using internal API
  - S8076315, PR3077: move 4 manual functional swing tests to
    regression suite
  - S8078504, PR3094: Zero lacks declaration of
    VM_Version::initialize()
  - S8129822, PR3077: Define "headful" jtreg keyword
  - S8132123, PR1061: MultiResolutionCachedImage unnecessarily
    creates base image to get its size
  - S8133539, PR1061: [TEST_BUG] Split
    java/awt/image/MultiResolutionImageTest.java in two to allow
    restricted access
  - S8137571, PR1061: Linux HiDPI Graphics support
  - S8142406, PR1061: [TEST] MultiResolution image: need test to
    cover the case when @2x image is corrupted
  - S8145188, PR2945: No LocalVariableTable generated for the
    entire JDK
  - S8150258, PR1061: [TEST] HiDPI: create a test for
    multiresolution menu items icons
  - S8150724, PR1061: [TEST] HiDPI: create a test for
    multiresolution icons
  - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should
    be taken into account for OS X
  - S8151841, PR2882: Build needs additional flags to compile with
    GCC 6 [plus parts of 8149647 &amp; 8032045]
  - S8155613, PR1061: [PIT] crash in
    AWT_Desktop/Automated/Exceptions/BasicTest
  - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD
    incorrectly
  - S8156128, PR1061: Tests for [AWT/Swing] Conditional support
    for GTK 3 on Linux
  - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can
    lead to the generation of illegal instructions (bsc#988651)
  - S8159244, PR3074: Partially initialized string object created
    by C2's string concat optimization may escape
  - S8159690, PR3077: [TESTBUG] Mark headful tests with @key
    headful.
  - S8160294, PR2882, PR3095: Some client libraries cannot be
    built with GCC 6
  * Bug fixes
  - PR1958: GTKLookAndFeel does not honor
    gtk-alternative-button-order
  - PR2822: Feed LIBS &amp; CFLAGS into configure rather than make to
    avoid re-discovery by OpenJDK configure
  - PR2932: Support ccache in a non-automagic manner
  - PR2933: Support ccache 3.2 and later
  - PR2964: Set system defaults based on OS
  - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF
    line endings rather than system line endings
  - PR3078: Remove duplicated line dating back to 6788347 and
    6894807
  - PR3083, RH1346460: Regression in SSL debug output without an
    ECC provider
  - PR3089: Remove old memory limits patch
  - PR3090, RH1204159: SystemTap is heavily confused by multiple
    JDKs
  - PR3095: Fix warnings in URLClassPath.c
  - PR3096: Remove dead --disable-optimizations option
  - PR3105: Use version from hotspot.map to create tarball filename
  - PR3106: Handle both correctly-spelt property
    "enableCustomValueHandler" introduced by S8079718 and typo
    version
  - PR3108: Shenandoah patches not included in release tarball
  - PR3110: Update hotspot.map documentation in INSTALL
  * AArch64 port
  - S8145320, PR3078: Create unsafe_arraycopy and
    generic_arraycopy for AArch64
  - S8148328, PR3078: aarch64: redundant lsr instructions in stub
    code.
  - S8148783, PR3078: aarch64: SEGV running SpecJBB2013
  - S8148948, PR3078: aarch64: generate_copy_longs calls align()
    incorrectly
  - S8149080, PR3078: AArch64: Recognise disjoint array copy in
    stub code
  - S8149365, PR3078: aarch64: memory copy does not prefetch on
    backwards copy
  - S8149907, PR3078: aarch64: use load/store pair instructions
    in call_stub
  - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when
    comparing narrow pointer with zero
  - S8150045, PR3078: arraycopy causes segfaults in SATB during
    garbage collection
  - S8150082, PR3078: aarch64: optimise small array copy
  - S8150229, PR3078: aarch64: pipeline class for several
    instructions is not set correctly
  - S8150313, PR3078: aarch64: optimise array copy using SIMD
    instructions
  - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS
    instructions
  - S8151340, PR3078: aarch64: prefetch the destination word for
    write prior to ldxr/stxr loops.
  - S8151502, PR3078: optimize pd_disjoint_words and
    pd_conjoint_words
  - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic
    operations
  - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when
    comparing unsigned values with zero.
  - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub
    routine
  - S8153713, PR3078: aarch64: improve short array clearing using
    store pair
  - S8153797, PR3078: aarch64: Add Arrays.fill stub code
  - S8154537, PR3078: AArch64: some integer rotate instructions
    are never emitted
  - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads
    in wrong mode
  - S8155015, PR3078: Aarch64: bad assert in spill generation
    code
  - S8155100, PR3078: AArch64: Relax alignment requirement for
    byte_map_base
  - S8155612, PR3078: Aarch64: vector nodes need to support
    misaligned offset
  - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA
  - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed
    with 8155612
  - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails
    due to _generic_arraycopy stub routine
  - S8157841, PR3078: aarch64: prefetch ignores cache line size
  - S8157906, PR3078: aarch64: some more integer rotate
    instructions are never emitted
  - S8158913, PR3078: aarch64: SEGV running Spark terasort
  - S8159052, PR3078: aarch64: optimise unaligned copies in
    pd_disjoint_words and pd_conjoint_words
  - S8159063, PR3078: aarch64: optimise unaligned array copy long
  - PR3078: Cleanup remaining differences from aarch64/jdk8u tree
- Removed patches:
  * compare-pointer-with-literal.patch
  * implicit-pointer-decl.patch
  * hotspot-aarch64-fix-48bit-va.patch
  - Fixed differently upsteam
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - Rediff to new context
- Remove hacks to make build on ix86, since it seems they are not
  needed anymore
- Remove special flags for gcc6, since they are handled upstream</changelog>
<changelog author="fstrba@suse.com" date="1474459200">- Added patch:
  * s390-java-opts.patch
  - Solve memory issues when building s390 version</changelog>
<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>

</package>
<package pkgid="0f8fd1959155a691794fa0f4100716a70e19067f934e0af5b60fba23cc67a044" name="java-1_8_0-openjdk-src" arch="x86_64">
    <version epoch="0" ver="1.8.0.151" rel="18.1"/>

<changelog author="fstrba@suse.com" date="1478692800">- Upgrade to version jdk8u111 (icedtea 3.2.0)
  * Security fixes
    + S8146490: Direct indirect CRL checks
    + S8151921: Improved page resolution
    + S8155968: Update command line options
    + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522)
    + S8156794: Extend data sharing
    + S8157176: Improved classfile parsing
    + S8157739, CVE-2016-5554: Classloader Consistency Checking
    (bsc#1005523)
    + S8157749: Improve handling of DNS error replies
    + S8157753: Audio replay enhancement
    + S8157759: LCMS Transform Sampling Enhancement
    + S8157764: Better handling of interpolation plugins
    + S8158302: Handle contextual glyph substitutions
    + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525)
    + S8159495: Fix index offsets
    + S8159503: Amend Annotation Actions
    + S8159511: Stack map validation
    + S8159515: Improve indy validation
    + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526)
    + S8160090: Better signature handling in pack200
    + S8160094: Improve pack200 layout
    + S8160098: Clean up color profiles
    + S8160591, CVE-2016-5582: Improve internal array handling
    (bsc#1005527)
    + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528)
    + PR3206, RH1367357: lcms2: Out-of-bounds read in
    Type_MLU_Read()
    + CVE-2016-5556 (bsc#1005524)
  * New features
    + PR1370: Provide option to build without debugging
    + PR1375: Provide option to strip and link debugging info after
    build
    + PR1537: Handle alternative Kerberos credential cache
    locations
    + PR1978: Allow use of system PCSC
    + PR2445: Support system libsctp
    + PR3182: Support building without pre-compiled headers
    + PR3183: Support Fedora/RHEL system crypto policy
    + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries
  * Import of OpenJDK 8 u102 build 14
    + S4515292: ReferenceType.isStatic() returns true for arrays
    + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when
    processing invokeMethod command
    + S6976636: JVM/TI test ex03t001 fails assertion
    + S7185591: jcmd-big-script.sh ERROR: could not find app's Java
    pid.
    + S8017462: G1: guarantee fails with
    UseDynamicNumberOfGCThreads
    + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong
    object
    + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java
    fails: Process exit code was 0, but error was expected.
    + S8041781: Need new regression tests for PBE keys
    + S8041787: Need new regressions tests for buffer handling for
    PBE algorithms
    + S8043836: Need new tests for AES cipher
    + S8044199: Tests for RSA keys and key specifications
    + S8044772: TempDirTest.java still times out with -Xcomp
    + S8046339: sun.rmi.transport.DGCAckHandler leaks memory
    + S8047031: Add SocketPermission tests for legacy socket types
    + S8048052: Permission tests for setFactory
    + S8048138: Tests for JAAS callbacks
    + S8048147: Privilege tests with JAAS Subject.doAs
    + S8048356: SecureRandom default provider tests
    + S8048357: PKCS basic tests
    + S8048360: Test signed jar files
    + S8048362: Tests for doPrivileged with accomplice
    + S8048596: Tests for AEAD ciphers
    + S8048599: Tests for key wrap and unwrap operations
    + S8048603: Additional tests for MAC algorithms
    + S8048604: Tests for strong crypto ciphers
    + S8048607: Test key generation of DES and DESEDE
    + S8048610: Implement regression test for bug fix of 4686632
    in JCE
    + S8048617: Tests for PKCS12 read operations
    + S8048618: Tests for PKCS12 write operations.
    + S8048619: Implement tests for converting PKCS12 keystores
    + S8048624: Tests for SealedObject
    + S8048819: Implement reliability test for DH algorithm
    + S8048820: Implement tests for SecretKeyFactory
    + S8048830: Implement tests for new functionality provided in
    JEP 166
    + S8049237: Need new tests for X509V3 certificates
    + S8049321: Support SHA256WithDSA in JSSE
    + S8049429: Tests for java client server communications with
    various TLS/SSL combinations.
    + S8049432: New tests for TLS property jdk.tls.client.protocols
    + S8049814: Additional SASL client-server tests
    + S8050281: New permission tests for JEP 140
    + S8050370: Need new regressions tests for messageDigest with
    DigestIOStream
    + S8050371: More MessageDigest tests
    + S8050374: More Signature tests
    + S8050427: LoginContext tests to cover JDK-4703361
    + S8050460: JAAS login/logout tests with LoginContext
    + S8050461: Tests for syntax checking of JAAS configuration
    file
    + S8054278: Refactor jps utility tests
    + S8055530: assert(_exits.control()-&gt;is_top() ||
    !_gvn.type(ret_phi)-&gt;empty()) failed: return value must be
    well defined
    + S8055844: [TESTBUG]
    test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java
    fails on Solaris Sparc due to incorrect page size being used
    + S8059677: Thread.getName() instantiates Strings
    + S8061464: A typo in CipherTestUtils test
    + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests
    + S8065076: java/net/SocketPermission/SocketPermissionTest.java
    fails intermittently
    + S8065078: NetworkInterface.getNetworkInterfaces() triggers
    intermittent test failures
    + S8066871: java.lang.VerifyError: Bad local variable type -
    local final String
    + S8068427: Hashtable deserialization reconstitutes table with
    wrong capacity
    + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs
    to be updated for JDK-8061210
    + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac
    + S8071125: Improve exception messages in URLPermission
    + S8072081: Supplementary characters are rejected in comments
    + S8072463: Remove requirement that AKID and SKID have to match
    when building certificate chain
    + S8072725: Provide more granular levels for GC verification
    + S8073400: Some Monospaced logical fonts have a different
    width
    + S8073872: Schemagen fails with StackOverflowError if element
    references containing class
    + S8074931: Additional tests for CertPath API
    + S8075286: Additional tests for signature algorithm OIDs and
    transformation string
    + S8076486: [TESTBUG]
    javax/security/auth/Subject/doAs/NestedActions.java fails if
    extra VM options are given
    + S8076545: Text size is twice bigger under Windows L&amp;F on Win
    8.1 with HiDPI display
    + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java
    failed with java.lang.RuntimeException: 'new_active_workers'
    missing from stdout/stderr
    + S8079138: Additional negative tests for XML signature
    processing
    + S8081512: Remove sun.invoke.anon classes, or move / co-locate
    them with tests
    + S8081771: ProcessTool.createJavaProcessBuilder() needs new
    addTestVmAndJavaOptions argument
    + S8129419: heapDumper.cpp: assert(length_in_bytes &gt; 0) failed:
    nothing to copy
    + S8130150: Implement BigInteger.montgomeryMultiply intrinsic
    + S8130242: DataFlavorComparator transitivity exception
    + S8130304: Inference: NodeNotFoundException thrown with deep
    generic method call chain
    + S8130425: libjvm crash due to stack overflow in executables
    with 32k tbss/tdata
    + S8133023: ParallelGCThreads is not calculated correctly
    + S8134111: Unmarshaller unmarshalls XML element which doesn't
    have the expected namespace
    + S8135259: InetAddress.getAllByName only reports "unknown
    error" instead of actual cause
    + S8136506: Include sun.arch.data.model as a property that can
    be queried by jtreg
    + S8137068: Tests added in JDK-8048604 fail to compile
    + S8139040: Fix initializations before ShouldNotReachHere()
    etc. and enable -Wuninitialized on linux.
    + S8139581: AWT components are not drawn after removal and
    addition to a container
    + S8141243: Unexpected timezone returned after parsing a date
    + S8141420: Compiler runtime entries don't hold Klass* from
    being GCed
    + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can
    generate unknown signal in hs_err file
    + S8141551: C2 can not handle returns with inccompatible
    interface arrays
    + S8143377: Test PKCS8Test.java fails
    + S8143647: Javac compiles method reference that allows results
    in an IllegalAccessError
    + S8144144: ORB destroy() leaks filedescriptors after
    unsuccessful connection
    + S8144593: Suppress not recognized property/feature warning
    messages from SAXParser
    + S8144957: Remove PICL warning message
    + S8145039: JAXB marshaller fails with ClassCastException on
    classes generated by xjc
    + S8145228: Java Access Bridge,
    getAccessibleStatesStringFromContext doesn't wrap the call to
    getAccessibleRole
    + S8145388: URLConnection.guessContentTypeFromStream returns
    image/jpg for some JPEG images
    + S8145974: XMLStreamWriter produces invalid XML for surrogate
    pairs on OutputStreamWriter
    + S8146035: Windows - With LCD antialiasing, some glyphs are
    not rendered correctly
    + S8146192: Add test for JDK-8049321
    + S8146274: Thread spinning on WeakHashMap.getEntry() with
    concurrent use of nashorn
    + S8147468: Allow users to bound the size of buffers cached in
    the per-thread buffer caches
    + S8147645: get_ctrl_no_update() code is wrong
    + S8147807: crash in libkcms.so on linux-sparc
    + S8148379: jdk.nashorn.api.scripting spec. adjustments,
    clarifications
    + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit
    platforms
    + S8148820: Missing @since Javadoc tag in Logger.log(Level,
    Supplier)
    + S8148926: Call site profiling fails on braces-wrapped
    anonymous function
    + S8149017: Delayed provider selection broken in RSA client key
    exchange
    + S8149029: Secure validation of XML based digital signature
    always enabled when checking wrapping attacks
    + S8149330: Capacity of StringBuilder should not get close to
    Integer.MAX_VALUE unless necessary
    + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an
    array containing two elements
    + S8149368: [hidpi] JLabel font is twice bigger than JTextArea
    font on Windows 7,HiDPI, Windows L&amp;F
    + S8149411: PKCS12KeyStore cannot extract AES Secret Keys
    + S8149417: Use final restricted flag
    + S8149450: LdapCtx.processReturnCode() throwing Null Pointer
    Exception
    + S8149453: [hidpi] JFileChooser does not scale properly on
    Windows with HiDPI display and Windows L&amp;F
    + S8149543: range check CastII nodes should not be split
    through Phi
    + S8149743: JVM crash after debugger hotswap with lambdas
    + S8149744: fix testng.jar delivery in Nashorn build.xml
    + S8149915: enabling validate-annotations feature for xsd
    schema with annotation causes NPE
    + S8150002: Check for the validity of oop before printing it in
    verify_remembered_set
    + S8150470: JCK: api/xsl/conf/copy/copy19 test failure
    + S8150518: G1 GC crashes at
    G1CollectedHeap::do_collection_pause_at_safepoint(double)
    + S8150533: Test
    java/util/logging/LogManagerAppContextDeadlock.java times out
    intermittently.
    + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when
    transforming with lots of temporary result trees
    + S8150780: Repeated offer and remove on ConcurrentLinkedQueue
    lead to an OutOfMemoryError
    + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails
    intermittently
    + S8151197: [TEST_BUG] Need to backport fix for
    test/javax/net/ssl/TLS/TestJSSE.java
    + S8151352: jdk/test/sample fails with "effective library path
    is outside the test suite"
    + S8151431: DateFormatSymbols triggers this.clone() in the
    constructor
    + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java
    should be modified to run with JTREG 4.1 b13
    + S8151731: Add new jtreg keywords to jdk 8
    + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round':
    identifier not found
    + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java
    reported
    + S8153252: SA: Hotspot build on Windows fails if make/closed
    folder does not exist
    + S8153531: Improve exception messaging for RSAClientKeyExchange
    + S8153641: assert(thread_state == _thread_in_native) failed:
    Assumed thread_in_native while heap dump
    + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never
    deleted when processing invokeMethod command
    + S8154304: NullpointerException at
    LdapReferralException.getReferralContext
    + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java
    fails
    + S8157078: 8u102 L10n resource file updates
    + S8157838: Personalized Windows Font Size is not taken into
    account in Java8u102
  * Import of OpenJDK 8 u111 build 14
    + S6882559: new JEditorPane("text/plain","") fails for null
    context class loader
    + S8049171: Additional tests for jarsigner's warnings
    + S8063086: Math.pow yields different results upon repeated
    calls
    + S8140530: Creating a VolatileImage with size 0,0 results in
    no longer working g2d.drawString
    + S8142926: OutputAnalyzer's shouldXXX() calls return this
    + S8147077: IllegalArgumentException thrown by
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    + S8148127: IllegalArgumentException thrown by JCK test
    api/java_awt/Component/FlipBufferStrategy/indexTGF_General
    in opengl pipeline
    + S8150611: Security problem on sun.misc.resources.Messages*
    + S8153399: Constrain AppCDS behavior (back port)
    + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
    + S8158734: JEditorPane.createEditorKitForContentType throws
    NPE after 6882559
    + S8158994: Service Menu services
    + S8159684: (tz) Support tzdata2016f
    + S8160904: Typo in code from 8079718 fix :
    enableCustomValueHanlde
    + S8160934: isnan() is not available on older MSVC compilers
    + S8161141: correct bugId for JDK-8158994 fix push
    + S8162411: Service Menu services 2
    + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh
    failing after JDK-8155968
    + S8162511: 8u111 L10n resource file updates
    + S8162792: Remove constraint DSA keySize &lt; 1024 from
    jdk.jar.disabledAlgorithms in jdk8
    + S8164452: 8u111 L10n resource file update - msgdrop 20
    + S8165816: jarsigner -verify shows jar unsigned if it was
    signed with a weak algorithm
    + S8166381: Back out changes to the java.security file to not
    disable MD5
  * Backports
    + S8078628, PR3208: Zero build fails with pre-compiled headers
    disabled
    + S8141491, PR3159, G592292: Unaligned memory access in Bits.c
    + S8157306, PR3121: Random infrequent null pointer exceptions
    in javac (enabled on AArch64 only)
    + S8162384, PR3122: Performance regression: bimorphic inlining
    may be bypassed by type speculation
  * Bug fixes
    + PR3123: Some object files built without -fPIC on x86 only
    + PR3126: pax-mark-vm script calls "exit -1" which is invalid
    in dash
    + PR3127, G590348: Only apply PaX markings by default on
    running PaX kernels
    + PR3199: Invalid nashorn URL
    + PR3201: Update infinality configure test
    + PR3218: PR3159 leads to build failure on clean tree
  * AArch64 port
    + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic
    + S8167200, PR3220: AArch64: Broken stack pointer adjustment in
    interpreter
    + S8167421, PR3220: AArch64: in one core system, fatal error:
    Illegal threadstate encountered
    + S8167595, PR3220: AArch64: SEGV in stub code
    cipherBlockChaining_decryptAESCrypt
    + S8168888, PR3220: Port 8160591: Improve internal array
    handling to AArch64.
  * Shenandoah
    + PR3224: Shenandoah broken when building without pre-compiled
    headers
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
    + rediff to a changed context
- Build against system kerberos for openSUSE 13.1 and greater and
  SLE12
- Build against system pcsc and sctp for openSUSE 13.2 and greater
  and SLE12</changelog>
<changelog author="fstrba@suse.com" date="1485691200">- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905
  * Security fixes
  - S8138725: Add options for Javadoc generation
  - S8140353: Improve signature checking
  - S8151934, CVE-2017-3231: Resolve class resolution
  - S8156804, CVE-2017-3241: Better constraint checking
  - S8158406: Limited Parameter Processing
  - S8158997: JNDI Protocols Switch
  - S8159507: RuntimeVisibleAnnotation validation
  - S8161218: Better bytecode loading
  - S8161743, CVE-2017-3252: Provide proper login context
  - S8162577: Standardize logging levels
  - S8162973: Better component components
  - S8164143, CVE-2017-3260: Improve components for menu items
  - S8164147, CVE-2017-3261: Improve streaming socket output
  - S8165071, CVE-2016-2183: Expand TLS support
  - S8165344, CVE-2017-3272: Update concurrency support
  - S8166988, CVE-2017-3253: Improve image processing performance
  - S8167104, CVE-2017-3289: Additional class construction
    refinements
  - S8167223, CVE-2016-5552: URL handling improvements
  - S8168705, CVE-2016-5547: Better ObjectIdentifier validation
  - S8168714, CVE-2016-5546: Tighten ECDSA validation
  - S8168728, CVE-2016-5548: DSA signing improvments
  - S8168724, CVE-2016-5549: ECDSA signing improvments
  * New features
  - PR3300: wget not required when downloading is disabled
  - PR3301: Support RHEL multilib installations which use the
    /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming
  - PR3303: Allow Kerberos to be detected by old libs &amp; headers
    method if pkg-config check fails
  * Import of OpenJDK 8 u112 build 16
  - S6477756: GraphicsDevice.getConfigurations() is slow taking 3
    or more seconds
  - S7172749: Xrender: Class cast exception in 2D code running an
    AWT regression test
  - S8017629: G1: UseSHM in combination with a G1HeapRegionSize &gt;
    os::large_page_size() falls back to use small pages
  - S8022203: Intermittent test failures in demo/jvmti/hprof
  - S8022582: Relax response flags checking in
    sun.security.krb5.KrbKdcRep.check.
  - S8027575: b113 causing a lot of memory allocation and
    regression for wls_webapp_atomics
  - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails
  - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves
    HelloServer behind
  - S8036630: Null ProtectionDomain in JVM can cause NPE because
    principals field is not initialized to an empty array
  - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with:
    assert(index &gt;=0 &amp;&amp; index &lt; _length) failed: symbol index
    overflow
  - S8044193: Need to add known answer tests for AES cipher
  - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java
    failed: assert(!res ||
    TypeEntriesAtCall::arguments_profiling_enabled()) failed: no
    profiling of arguments
  - S8048601: Tests for JCE crypto ciphers (part 1)
  - S8048621: Implement basic keystore tests
  - S8048622: Enhance tests for PKCS11 keystores with NSS
  - S8049021: Add smartcardio tests with APDU buffer
  - S8049312: AES/CICO test failed with on several modes
  - S8050402: Tests to check for use of policy files
  - S8050409: Test for JAAS getPrivateCredentials
  - S8054326: Confusing message in "Current rem set statistics"
  - S8055772: get_source.sh : version check assumes English
    localization
  - S8057791: Selection in JList is drawn with wrong colors in
    Nimbus L&amp;F
  - S8058865: JMX Test Refactoring
  - S8067964: Native2ascii doesn't close one of the streams it
    opens
  - S8071487:
    javax/management/monitor/GaugeMonitorDeadlockTest.java timed
    out
  - S8071909: Port testlibrary improvments in jdk/test to
    hotspot/test as required for DCMD test port
  - S8073542: File Leak in
    jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c
  - S8074784: Additional tests for XML DSig API
  - S8075007: Additional tests for krb5-related cipher suites
    with unbound server
  - S8075297: Tests for RFEs 4515853 and 4745056
  - S8075299: Additional tests for krb5 settings
  - S8075301: Tests for sun.security.krb5.principal system
    property
  - S8077276: allocating heap with UseLargePages and HugeTLBFS
    may trash existing memory mappings (linux)
  - S8078268: javax.swing.text.html.parser.Parser parseScript
    incorrectly optimized
  - S8078382: Wrong glyph is displayed for a derived font
  - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump
    to parent frame on focus
  - S8085903: New fix for memory leak in ProtectionDomain cache
  - S8098581: SecureRandom.nextBytes() hurts performance with
    small size requests
  - S8129740: Incorrect class file created when passing lambda in
    inner class constructor
  - S8130127: streamline input parameter of Nashorn scripting
    $EXEC function
  - S8130309: Need to bailout cleanly if creation of stubs fails
    when codecache is out of space
  - S8130317: "ant test" fails to complete on Windows when run
    under cygwin shell
  - S8133070: Hot lock on BulkCipher.isAvailable
  - S8133309: Some unicode characters do not display any more
    after upgrading to Windows 10
  - S8134232: KeyStore.load() throws an IOException with a wrong
    cause in case of wrong password
  - S8135322: ConstantPool::release_C_heap_structures not run in
    some circumstances
  - S8136998: JComboBox prevents wheel mouse scrolling of
    JScrollPane
  - S8137240: Negative lookahead in RegEx breaks backreference
  - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js
    intermittently fails.
  - S8141148: LDAP "follow" throws ClassCastException with Java 8
  - S8141541: Simplify Nashorn's Context class loader handling
  - S8143640: Showing incorrect result while passing specific
    argument in the Java launcher tools
  - S8143642: Nashorn shebang argument handling is broken
  - S8144160: Regression: two tests fail on Windows with "ant
    test" target
  - S8144221: fix Nashorn shebang argument handling on Mac/Linux
  - S8144703: ClassCastException: sun.font.CompositeFont cannot
    be cast to PhysicalFont
  - S8145305: fix Nashorn shebang handling on Cygwin
  - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks
  - S8146975: NullPointerException in
    IIOPInputStream.inputClassFields
  - S8147026: Convert an assert in ClassLoaderData to a guarantee
  - S8147451: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8147585: Annotations with lambda expressions has parameter
    result in wrong behavior.
  - S8147969: Print size of DH keysize when errors are encountered
  - S8148140: arguments are handled differently in apply for JS
    functions and AbstractJSObjects
  - S8148984: [macosx] Chinese Comma cannot be entered using
    Pinyin Input Method on OS X
  - S8150219: ReferenceError in 1.8.0_72
  - S8150234: Windows 10 App Containers disallow access to ICMP
    calls
  - S8150814: correct package declaration in Nashorn test
  - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh
    should be modified
  - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128
  - S8153192: (se) Selector.select(long) uses wrong timeout after
    EINTR (lnx)
  - S8153781: Issue in XMLScanner:
    EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping
    large DOCTYPE section with CRLF at wrong place
  - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with
    "Field length overflow"
  - S8154009: Some methods of java.security.Security require more
    permissions, than necessary
  - S8154069: Jaws reads wrong values from comboboxes when no
    element is selected
  - S8154144: Tests in com/sun/jdi fails intermittently with "jdb
    input stream closed prematurely"
  - S8154469: Update FSF address
  - S8154553: Incorrect GPL header in package-info.java reported
  - S8154558: Incorrect GPL header in ProcessEnvironment_md.c
    reported
  - S8154816: Caps Lock doesn't work as expected when using
    Pinyin Simplified input method
  - S8154831: CastII/ConvI2L for a range check is prematurely
    eliminated
  - S8155001: SystemTray.remove() leaks GDI Objects in Windows
  - S8155106: MHs.Lookup.findConstructor returns handles for
    array classes
  - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to
    exhausted code cache
  - S8156478: 3 Buffer overrun defect groups in jexec.c
  - S8156521: Minor fixes and cleanups in NetworkInterface.c
  - S8156714: Parsing issue with automatic semicolon insertion
  - S8156836: SIGSEGV: Test
    test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG
    4.2 b02
  - S8156896: Script stack trace should display function names
  - S8157160: JSON.stringify does not work on ScriptObjectMirror
    objects
  - S8157242: Some java/lang/invoke tests miss othervm
  - S8157444: exclude jjs shebang handling test from runs
  - S8157603: TestCipher.java doesn't check one of the decrypted
    message as expected
  - S8157680: Callback parameter of any JS builtin implementation
    should accept any Callable
  - S8157819: TypeError when a java.util.Comparator object is
    invoked as a function
  - S8158059: The fix for 8050402 was partially committed
  - S8158072: Need a test for JDK-7172749
  - S8158111: Make handling of 3rd party providers more stable
  - S8158178: java.awt.SplashScreen.getSize() returns incorrect
    size for high dpi splash screens
  - S8158338: Nashorn's ScriptLoader split delegation has to be
    adjusted
  - S8158373: SIGSEGV: Metadata::mark_on_stack
  - S8158467: AccessControlException is thrown on public Java
    class access if "script app loader" is set to null
  - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to
    sun.java2d.opengl.OGLSurfaceData
  - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong
    hash code
  - S8158871: Long response times with G1 and StringDeduplication
  - S8159822: Non-synchronized access to shared members of
    com.sun.jndi.ldap.pool.Pool
  - S8160122: Backport of JDK-8159244 used wrong version of the
    JDK 9 fix
  - S8160518: Semicolon is not recognized as comment starting
    character (Kerberos)
  - S8160693: ScriptRunData.java uses bitwise AND instead of
    logical AND
  - S8161144: Fix for JDK-8147451 failed: Crash in
    Method::checked_resolve_jmethod_id(_jmethodID*)
  - S8162510: 8u112 L10n resource file updates
  - S8164453: 8u112 L10n resource file update - msgdrop 20
  * Import of OpenJDK 8 u121 build 13
  - S8037099: [macosx] Remove all references to GC from native
    OBJ-C code
  - S8059212: Modify sun/security/smartcardio manual regression
    tests so that they do not just fail if no cardreader found
  - S8139565: Restrict certificates with DSA keys less than 1024
    bits
  - S8140422: Add mechanism to allow non default root CAs to be
    not subject to algorithm restrictions
  - S8148516: Improve the default strength of EC in JDK
  - S8151893: Add security property to configure XML Signature
    secure validation mode
  - S8152438: Threads may do significant work out of the
    non-shared overflow buffer
  - S8153438: Avoid repeated "Please insert a smart card" popup
    windows
  - S8154005: Add algorithm constraint that specifies the
    restriction date
  - S8154015: Apply algorithm constraints to timestamped code
  - S8159410: InetAddress.isReachable returns true for non
    existing IP adresses
  - S8160108: Implement Serialization Filtering
  - S8161228: URL objects with custom protocol handlers have port
    changed after deserializing
  - S8161571: Verifying ECDSA signatures permits trailing bytes
  - S8163304: jarsigner -verbose -verify should print the
    algorithms used to sign the jar
  - S8163583: [macosx] Press "To Back" button on the Dialog, the
    Dialog moves behind the Frame
  - S8164908: ReflectionFactory support for IIOP and custom
    serialization
  - S8165230: RMIConnection addNotificationListeners failing with
    specific inputs
  - S8166389: [TEST_BUG]
    closed/java/security/Security/ReadProp/ReadProp.sh failing
  - S8166393: disabledAlgorithms property should not be strictly
    parsed
  - S8166432: Bad 8u112 merge of
    sun/security/tools/jarsigner/warnings/Test.java
  - S8166591: [macos 10.12] Trackpad scrolling of text on OS X
    10.12 Sierra is very fast (Trackpad, Retina only)
  - S8166739: Improve extensibility of ObjectInputFilter
    information passed to the filter
  - S8166875: (tz) Support tzdata2016g
  - S8166878: Connection reset during TLS handshake
  - S8167356: Follow up fix for jdk8 backport of 8164143. Changes
    for CMenuComponent.m were missed
  - S8167459: Add debug output for indicating if a chosen
    ciphersuite was legacy
  - S8167472: Chrome interop regression with JDK-8148516
  - S8167591: Add MD5 to signed JAR restrictions
  - S8168861: AnchorCertificates uses hardcoded password for
    cacerts keystore
  - S8168963: Backout JDK-8154005
  - S8168993: JDK8u121 L10n resource file update
  - S8169072: Backout JDK-8154015
  - S8169191: (tz) Support tzdata2016i
  - S8169688: Backout (remove) MD5 from
    jdk.jar.disabledAlgorithms for January CPU
  - S8169911: Enhanced tests for jarsigner -verbose -verify after
    JDK-8163304
  - S8170131: Certificates not being blocked by
    jdk.tls.disabledAlgorithms property
  - S8170268: 8u121 L10n resource file update - msgdrop 20
  * Bug fixes
  - PR3271: Always round glyph advance in 26.6 space
  - PR3271: Fix compatibility with vanilla Fontconfig
  - PR3271: Fix glyph y advance
  - PR3271: Replace 'infinality' with 'improved font rendering'
    (--enable-improved-font-rendering)
  - PR3271: Simplify glyph advance handling
  - PR3286: -ffp-contract not available on older GCCs
  - PR3302: zip should be optional, as it's only used in the
    manually invoked dist-openjdk and dist-openjdk-fsg rules
  - PR3304: zip still a requirement of the underlying OpenJDK
    build
  * PPC port
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
  * AArch64 port
  - S8130309, PR3280: Need to bailout cleanly if creation of
    stubs fails when codecache is out of space (AArch64 changes)
  - S8132875, PR3280: AArch64: Fix error introduced into AArch64
    CodeCache by commit for 8130309
  - S8165673, PR3280: AArch64: Fix JNI floating point argument
    handling
  - S8170188, PR3280: jtreg test
    compiler/types/TestMeetIncompatibleInterfaceArrays.java causes
    JVM crash
  - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance
    due to non-optimized compilation
- Modified patch:
  * java-1_8_0-openjdk-gcc6.patch
  - rediff to changed context
- Require the exact version of mozilla-nss that the package was
  built against (bsc#1022053)</changelog>
<changelog author="fstrba@suse.com" date="1485950400">- Don't run bootstrap build for s390, since it is broken, instead
  introduce a little cycle on this platform, in order to have
  working openjdk8</changelog>
<changelog author="asn@cryptomilk.org" date="1487678400">- Add a test to check that ECC is working
  * new file TestECDSA.java</changelog>
<changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
<changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
<changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
<changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
<changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
<changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
<changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
<changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
<changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
<changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
<changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
<changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
<changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
<changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
<changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
<changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>

</package>
<package pkgid="338ecd9ace03b2a857ec6ebb4e46ab46f663e6c49d2cfca1b9902205b9f0aa4c" name="java-binfmt-misc" arch="src">
    <version epoch="0" ver="1.4" rel="12.1"/>

<changelog author="mvyskocil@suse.cz" date="1233835200">- Initial packaging of java-binfmt-misc (splitted from jpackage-utils)
- Test of existence a files in /proc/sys/fs/binfmt_misc/ before write in stop
  (the older version ends with an error if stop was called several times)
- New java-binfmt-misc.1 manual page (manual page of every available wrapper is
  a link to this page)
- Include a Documentation/java.txt
- Build a javaclassname command from source code and drop the ad-hoc binary
  from sources</changelog>
<changelog author="mvyskocil@suse.cz" date="1234267200">- Remove Java 64bit Webstart warning, as it's obsoleted by openjdk and Sun u12</changelog>
<changelog author="mvyskocil@suse.cz" date="1237982400">- fixed minor indentation in initscript [bnc#435514] using vim's =</changelog>
<changelog author="mvyskocil@suse.com" date="1375099200">- update to 1.4
  * add systemd-style binfmt.d config files
  * drop sysvinit script
  * rename and update readme file</changelog>
<changelog author="tchvatal@suse.com" date="1490097600">- Move the wrappers to libexec wrt bsc#1029650 (see binfmt.d(5))
- Format a bit with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1490529600">- Run desktop db scriptlet updates wrt bsc#1030903</changelog>

</package>
<package pkgid="f3b6e7f64b70ccaba6bc5dcffd10d131fd072ec082887945d8a0b2f64f8efb47" name="java-binfmt-misc" arch="x86_64">
    <version epoch="0" ver="1.4" rel="12.1"/>

<changelog author="mvyskocil@suse.cz" date="1233835200">- Initial packaging of java-binfmt-misc (splitted from jpackage-utils)
- Test of existence a files in /proc/sys/fs/binfmt_misc/ before write in stop
  (the older version ends with an error if stop was called several times)
- New java-binfmt-misc.1 manual page (manual page of every available wrapper is
  a link to this page)
- Include a Documentation/java.txt
- Build a javaclassname command from source code and drop the ad-hoc binary
  from sources</changelog>
<changelog author="mvyskocil@suse.cz" date="1234267200">- Remove Java 64bit Webstart warning, as it's obsoleted by openjdk and Sun u12</changelog>
<changelog author="mvyskocil@suse.cz" date="1237982400">- fixed minor indentation in initscript [bnc#435514] using vim's =</changelog>
<changelog author="mvyskocil@suse.com" date="1375099200">- update to 1.4
  * add systemd-style binfmt.d config files
  * drop sysvinit script
  * rename and update readme file</changelog>
<changelog author="tchvatal@suse.com" date="1490097600">- Move the wrappers to libexec wrt bsc#1029650 (see binfmt.d(5))
- Format a bit with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1490529600">- Run desktop db scriptlet updates wrt bsc#1030903</changelog>

</package>
<package pkgid="81481372424c3fa223c82a8bd3e14a7156d08b9b7170c78a946c7477ce526db5" name="javapackages-tools" arch="src">
    <version epoch="0" ver="2.0.1" rel="15.1"/>

<changelog author="mvyskocil@suse.com" date="1372766400">- Create javapackages-tools 0.15.0 from fc20
  * Added depmap for tools.jar
  * Added support for versioned autorequires
  * New plugin metadata from Maven Central
  * move to independent package from jpackage-utils</changelog>
<changelog author="mvyskocil@suse.com" date="1373630400">- make maven-local package build optional to not add unsatisfied
  dependencies to Factory</changelog>
<changelog author="mvyskocil@suse.com" date="1377086400">- update to 2.0.1
  * Fix creation of artifact aliases, resolves: rhbz#988462
- Update to upstream version 2.0.0
  * Merge functionality of jpackage-utils
  * Provide and obsolete jpackage-utils
  * %%add_maven_depmap macro now injects pom.properties to every JAR
  * %%add_to_maven_depmap and %%update_maven_depmap macros were removed
  * maven2jpp-mapdeps.xsl template has been removed
  * Macros related to installation of icons and desktop files were removed
  * 14 new manual pages were added
  * Documentation specific to JPackage was removed
  * Add BuildRequires: asciidoc, xmlto
  * Add lua to Requires
  * Add python-xml to Requires for xml.dom.minidom</changelog>
<changelog author="schwab@suse.de" date="1378900800">- depgen.patch: drain stdin in dependency generator</changelog>
<changelog author="aj@ajaissle.de" date="1383912000">- BuildRequires xz
- Remove '/etc/java' and '/usr/share/java' from file list (both owned by system)
- Url changed</changelog>
<changelog author="tchvatal@suse.com" date="1495195200">- Add provides on javapackages-local bsc#1039890</changelog>

</package>
<package pkgid="263e4117503f0a416443c3f896570fa4d2d331721600bd764d7e009c60bba5b7" name="javapackages-tools" arch="x86_64">
    <version epoch="0" ver="2.0.1" rel="15.1"/>

<changelog author="mvyskocil@suse.com" date="1372766400">- Create javapackages-tools 0.15.0 from fc20
  * Added depmap for tools.jar
  * Added support for versioned autorequires
  * New plugin metadata from Maven Central
  * move to independent package from jpackage-utils</changelog>
<changelog author="mvyskocil@suse.com" date="1373630400">- make maven-local package build optional to not add unsatisfied
  dependencies to Factory</changelog>
<changelog author="mvyskocil@suse.com" date="1377086400">- update to 2.0.1
  * Fix creation of artifact aliases, resolves: rhbz#988462
- Update to upstream version 2.0.0
  * Merge functionality of jpackage-utils
  * Provide and obsolete jpackage-utils
  * %%add_maven_depmap macro now injects pom.properties to every JAR
  * %%add_to_maven_depmap and %%update_maven_depmap macros were removed
  * maven2jpp-mapdeps.xsl template has been removed
  * Macros related to installation of icons and desktop files were removed
  * 14 new manual pages were added
  * Documentation specific to JPackage was removed
  * Add BuildRequires: asciidoc, xmlto
  * Add lua to Requires
  * Add python-xml to Requires for xml.dom.minidom</changelog>
<changelog author="schwab@suse.de" date="1378900800">- depgen.patch: drain stdin in dependency generator</changelog>
<changelog author="aj@ajaissle.de" date="1383912000">- BuildRequires xz
- Remove '/etc/java' and '/usr/share/java' from file list (both owned by system)
- Url changed</changelog>
<changelog author="tchvatal@suse.com" date="1495195200">- Add provides on javapackages-local bsc#1039890</changelog>

</package>
<package pkgid="5cf7915d7c8fd285d7ad83d09fd21fb066a977ed6dc08ceed75946e864464b3b" name="k3b" arch="src">
    <version epoch="0" ver="17.04.2" rel="4.1"/>

<changelog author="alarrosa@suse.com" date="1450958400">- Added Requires(post/un) hicolor-icon-theme since it's needed by
  %icon_theme_cache_post/un</changelog>
<changelog author="tittiatcoke@gmail.com" date="1451908800">- Use the internal ffmpeg package to build.
  This would prevent to swap k3b with the one from packman to have
  mp3 support</changelog>
<changelog author="dimstar@opensuse.org" date="1464177600">- Add k3b-2.0.3-gcc6.patch: Fix build with GCC 6. Patch copied from
  Gentoo.</changelog>
<changelog author="davejplater@gmail.com" date="1466856000">- Add k3b-ffmpeg3.patch from arch linux to fix build against
  ffmpeg 3x</changelog>
<changelog author="olaf@aepfle.de" date="1469448000">- Build with ffmpeg unconditional
- Remove unused ffmpeg pkgs</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="olaf@aepfle.de" date="1480420801">- Restore conditionals for lame and libmad</changelog>
<changelog author="wbauer@tmo.at" date="1480507200">- Obsolete k3b-codecs, the additional codecs are part of the main
  package now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="lbeltrame@kde.org" date="1490529600">- Update to 17.03.80
  * New feature release (KF5 based)
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 2.0.3:
  * Too many changes to list here
- Dropped patches (upstreamed or no longer applicable to the KF5 version):
  * building-docs-once-is-enough.patch
  * initial-preference.diff
  * fix-dvd-transcoding.patch
  * k3b-ffmpeg3.patch
  * k3b-2.0.3-gcc6.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * tests: Use QTEST_GUILESS_MAIN</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Only use the %kf5_find_htmldocs macro on Leap 42.3 and higher,
  this should fix the build for 42.2 on Packman</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1497268800">- Add Re-enable-transcode-support.patch to add back transcode
  support to rip DVDs, Packman's version seems to work fine
  (kde#381131)</changelog>
<changelog author="wbauer@tmo.at" date="1501070400">- Add Don-t-suggest-to-install-libburn.patch to not suggest to the
  user to install libburn on startup. The message is actually
  misleading as k3b would actually use cdrskin which is packaged
  separately in openSUSE. But let's stick to prefer the proven
  cdrecord for now, people can still install cdrskin if they'd
  prefer to use it. (boo#1050715)</changelog>
<changelog author="wbauer@tmo.at" date="1501588800">- Add upstream patches to not show the system configuration
  problems dialog if disabled (kde#381368, boo#1051368)
  * Fix-do-not-show-again.patch
  * Add-readCheckSystemConfig.patch</changelog>
<changelog author="wbauer@tmo.at" date="1501675200">- Add Add-forceCheck-for-ManualCheckSystem.patch to make the manual
  system check work again after the previous fix</changelog>
<changelog author="wbauer@tmo.at" date="1502539200">- Add Fix-creating-DVD-video-image.patch to fix creating Video DVDs
  (boo#1051338, kde#383011)</changelog>

</package>
<package pkgid="cad5a0dd1f63ec6615ee409f8cb0b64e11a89009e6d95c28ef45bc6920123aea" name="k3b" arch="src">
    <version epoch="0" ver="17.04.2" rel="7.1"/>

<changelog author="tittiatcoke@gmail.com" date="1451908800">- Use the internal ffmpeg package to build.
  This would prevent to swap k3b with the one from packman to have
  mp3 support</changelog>
<changelog author="dimstar@opensuse.org" date="1464177600">- Add k3b-2.0.3-gcc6.patch: Fix build with GCC 6. Patch copied from
  Gentoo.</changelog>
<changelog author="davejplater@gmail.com" date="1466856000">- Add k3b-ffmpeg3.patch from arch linux to fix build against
  ffmpeg 3x</changelog>
<changelog author="olaf@aepfle.de" date="1469448000">- Build with ffmpeg unconditional
- Remove unused ffmpeg pkgs</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="olaf@aepfle.de" date="1480420801">- Restore conditionals for lame and libmad</changelog>
<changelog author="wbauer@tmo.at" date="1480507200">- Obsolete k3b-codecs, the additional codecs are part of the main
  package now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="lbeltrame@kde.org" date="1490529600">- Update to 17.03.80
  * New feature release (KF5 based)
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 2.0.3:
  * Too many changes to list here
- Dropped patches (upstreamed or no longer applicable to the KF5 version):
  * building-docs-once-is-enough.patch
  * initial-preference.diff
  * fix-dvd-transcoding.patch
  * k3b-ffmpeg3.patch
  * k3b-2.0.3-gcc6.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * tests: Use QTEST_GUILESS_MAIN</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Only use the %kf5_find_htmldocs macro on Leap 42.3 and higher,
  this should fix the build for 42.2 on Packman</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1497268800">- Add Re-enable-transcode-support.patch to add back transcode
  support to rip DVDs, Packman's version seems to work fine
  (kde#381131)</changelog>
<changelog author="wbauer@tmo.at" date="1501070400">- Add Don-t-suggest-to-install-libburn.patch to not suggest to the
  user to install libburn on startup. The message is actually
  misleading as k3b would actually use cdrskin which is packaged
  separately in openSUSE. But let's stick to prefer the proven
  cdrecord for now, people can still install cdrskin if they'd
  prefer to use it. (boo#1050715)</changelog>
<changelog author="wbauer@tmo.at" date="1501588800">- Add upstream patches to not show the system configuration
  problems dialog if disabled (kde#381368, boo#1051368)
  * Fix-do-not-show-again.patch
  * Add-readCheckSystemConfig.patch</changelog>
<changelog author="wbauer@tmo.at" date="1501675200">- Add Add-forceCheck-for-ManualCheckSystem.patch to make the manual
  system check work again after the previous fix</changelog>
<changelog author="wbauer@tmo.at" date="1502539200">- Add Fix-creating-DVD-video-image.patch to fix creating Video DVDs
  (boo#1051338, kde#383011)</changelog>
<changelog author="aloisio@gmx.com" date="1512129600">- Add k3b-fix_extbins_segfault.patch and k3b-blank_BE.patch
  to avoid a segfault when refreshing the external programs list
  and to be able to rewrite on Blu-Ray discs respectively.</changelog>

</package>
<package pkgid="36409344f1ece20afb529862f28f61d0f959b31030e93c911c112438997d8e23" name="k3b" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="4.1"/>

<changelog author="alarrosa@suse.com" date="1450958400">- Added Requires(post/un) hicolor-icon-theme since it's needed by
  %icon_theme_cache_post/un</changelog>
<changelog author="tittiatcoke@gmail.com" date="1451908800">- Use the internal ffmpeg package to build.
  This would prevent to swap k3b with the one from packman to have
  mp3 support</changelog>
<changelog author="dimstar@opensuse.org" date="1464177600">- Add k3b-2.0.3-gcc6.patch: Fix build with GCC 6. Patch copied from
  Gentoo.</changelog>
<changelog author="davejplater@gmail.com" date="1466856000">- Add k3b-ffmpeg3.patch from arch linux to fix build against
  ffmpeg 3x</changelog>
<changelog author="olaf@aepfle.de" date="1469448000">- Build with ffmpeg unconditional
- Remove unused ffmpeg pkgs</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="olaf@aepfle.de" date="1480420801">- Restore conditionals for lame and libmad</changelog>
<changelog author="wbauer@tmo.at" date="1480507200">- Obsolete k3b-codecs, the additional codecs are part of the main
  package now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="lbeltrame@kde.org" date="1490529600">- Update to 17.03.80
  * New feature release (KF5 based)
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 2.0.3:
  * Too many changes to list here
- Dropped patches (upstreamed or no longer applicable to the KF5 version):
  * building-docs-once-is-enough.patch
  * initial-preference.diff
  * fix-dvd-transcoding.patch
  * k3b-ffmpeg3.patch
  * k3b-2.0.3-gcc6.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * tests: Use QTEST_GUILESS_MAIN</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Only use the %kf5_find_htmldocs macro on Leap 42.3 and higher,
  this should fix the build for 42.2 on Packman</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1497268800">- Add Re-enable-transcode-support.patch to add back transcode
  support to rip DVDs, Packman's version seems to work fine
  (kde#381131)</changelog>
<changelog author="wbauer@tmo.at" date="1501070400">- Add Don-t-suggest-to-install-libburn.patch to not suggest to the
  user to install libburn on startup. The message is actually
  misleading as k3b would actually use cdrskin which is packaged
  separately in openSUSE. But let's stick to prefer the proven
  cdrecord for now, people can still install cdrskin if they'd
  prefer to use it. (boo#1050715)</changelog>
<changelog author="wbauer@tmo.at" date="1501588800">- Add upstream patches to not show the system configuration
  problems dialog if disabled (kde#381368, boo#1051368)
  * Fix-do-not-show-again.patch
  * Add-readCheckSystemConfig.patch</changelog>
<changelog author="wbauer@tmo.at" date="1501675200">- Add Add-forceCheck-for-ManualCheckSystem.patch to make the manual
  system check work again after the previous fix</changelog>
<changelog author="wbauer@tmo.at" date="1502539200">- Add Fix-creating-DVD-video-image.patch to fix creating Video DVDs
  (boo#1051338, kde#383011)</changelog>

</package>
<package pkgid="c264edd69f44225ec2e031a487452ea1cebb385d4a94cde9a27dabdc4dfd2380" name="k3b" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="7.1"/>

<changelog author="tittiatcoke@gmail.com" date="1451908800">- Use the internal ffmpeg package to build.
  This would prevent to swap k3b with the one from packman to have
  mp3 support</changelog>
<changelog author="dimstar@opensuse.org" date="1464177600">- Add k3b-2.0.3-gcc6.patch: Fix build with GCC 6. Patch copied from
  Gentoo.</changelog>
<changelog author="davejplater@gmail.com" date="1466856000">- Add k3b-ffmpeg3.patch from arch linux to fix build against
  ffmpeg 3x</changelog>
<changelog author="olaf@aepfle.de" date="1469448000">- Build with ffmpeg unconditional
- Remove unused ffmpeg pkgs</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="olaf@aepfle.de" date="1480420801">- Restore conditionals for lame and libmad</changelog>
<changelog author="wbauer@tmo.at" date="1480507200">- Obsolete k3b-codecs, the additional codecs are part of the main
  package now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="lbeltrame@kde.org" date="1490529600">- Update to 17.03.80
  * New feature release (KF5 based)
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 2.0.3:
  * Too many changes to list here
- Dropped patches (upstreamed or no longer applicable to the KF5 version):
  * building-docs-once-is-enough.patch
  * initial-preference.diff
  * fix-dvd-transcoding.patch
  * k3b-ffmpeg3.patch
  * k3b-2.0.3-gcc6.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * tests: Use QTEST_GUILESS_MAIN</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Only use the %kf5_find_htmldocs macro on Leap 42.3 and higher,
  this should fix the build for 42.2 on Packman</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1497268800">- Add Re-enable-transcode-support.patch to add back transcode
  support to rip DVDs, Packman's version seems to work fine
  (kde#381131)</changelog>
<changelog author="wbauer@tmo.at" date="1501070400">- Add Don-t-suggest-to-install-libburn.patch to not suggest to the
  user to install libburn on startup. The message is actually
  misleading as k3b would actually use cdrskin which is packaged
  separately in openSUSE. But let's stick to prefer the proven
  cdrecord for now, people can still install cdrskin if they'd
  prefer to use it. (boo#1050715)</changelog>
<changelog author="wbauer@tmo.at" date="1501588800">- Add upstream patches to not show the system configuration
  problems dialog if disabled (kde#381368, boo#1051368)
  * Fix-do-not-show-again.patch
  * Add-readCheckSystemConfig.patch</changelog>
<changelog author="wbauer@tmo.at" date="1501675200">- Add Add-forceCheck-for-ManualCheckSystem.patch to make the manual
  system check work again after the previous fix</changelog>
<changelog author="wbauer@tmo.at" date="1502539200">- Add Fix-creating-DVD-video-image.patch to fix creating Video DVDs
  (boo#1051338, kde#383011)</changelog>
<changelog author="aloisio@gmx.com" date="1512129600">- Add k3b-fix_extbins_segfault.patch and k3b-blank_BE.patch
  to avoid a segfault when refreshing the external programs list
  and to be able to rewrite on Blu-Ray discs respectively.</changelog>

</package>
<package pkgid="01b2824a9f9c110fc539c99706ef99d800c62f34436ad4f2fee4b6be4f744d43" name="k3b-devel" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="4.1"/>

<changelog author="alarrosa@suse.com" date="1450958400">- Added Requires(post/un) hicolor-icon-theme since it's needed by
  %icon_theme_cache_post/un</changelog>
<changelog author="tittiatcoke@gmail.com" date="1451908800">- Use the internal ffmpeg package to build.
  This would prevent to swap k3b with the one from packman to have
  mp3 support</changelog>
<changelog author="dimstar@opensuse.org" date="1464177600">- Add k3b-2.0.3-gcc6.patch: Fix build with GCC 6. Patch copied from
  Gentoo.</changelog>
<changelog author="davejplater@gmail.com" date="1466856000">- Add k3b-ffmpeg3.patch from arch linux to fix build against
  ffmpeg 3x</changelog>
<changelog author="olaf@aepfle.de" date="1469448000">- Build with ffmpeg unconditional
- Remove unused ffmpeg pkgs</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="olaf@aepfle.de" date="1480420801">- Restore conditionals for lame and libmad</changelog>
<changelog author="wbauer@tmo.at" date="1480507200">- Obsolete k3b-codecs, the additional codecs are part of the main
  package now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="lbeltrame@kde.org" date="1490529600">- Update to 17.03.80
  * New feature release (KF5 based)
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 2.0.3:
  * Too many changes to list here
- Dropped patches (upstreamed or no longer applicable to the KF5 version):
  * building-docs-once-is-enough.patch
  * initial-preference.diff
  * fix-dvd-transcoding.patch
  * k3b-ffmpeg3.patch
  * k3b-2.0.3-gcc6.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * tests: Use QTEST_GUILESS_MAIN</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Only use the %kf5_find_htmldocs macro on Leap 42.3 and higher,
  this should fix the build for 42.2 on Packman</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1497268800">- Add Re-enable-transcode-support.patch to add back transcode
  support to rip DVDs, Packman's version seems to work fine
  (kde#381131)</changelog>
<changelog author="wbauer@tmo.at" date="1501070400">- Add Don-t-suggest-to-install-libburn.patch to not suggest to the
  user to install libburn on startup. The message is actually
  misleading as k3b would actually use cdrskin which is packaged
  separately in openSUSE. But let's stick to prefer the proven
  cdrecord for now, people can still install cdrskin if they'd
  prefer to use it. (boo#1050715)</changelog>
<changelog author="wbauer@tmo.at" date="1501588800">- Add upstream patches to not show the system configuration
  problems dialog if disabled (kde#381368, boo#1051368)
  * Fix-do-not-show-again.patch
  * Add-readCheckSystemConfig.patch</changelog>
<changelog author="wbauer@tmo.at" date="1501675200">- Add Add-forceCheck-for-ManualCheckSystem.patch to make the manual
  system check work again after the previous fix</changelog>
<changelog author="wbauer@tmo.at" date="1502539200">- Add Fix-creating-DVD-video-image.patch to fix creating Video DVDs
  (boo#1051338, kde#383011)</changelog>

</package>
<package pkgid="23cc5972a5a084a7e65d58ca4682a8db3acb37a9d7bf3448147c2ed7750dace8" name="k3b-devel" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="7.1"/>

<changelog author="tittiatcoke@gmail.com" date="1451908800">- Use the internal ffmpeg package to build.
  This would prevent to swap k3b with the one from packman to have
  mp3 support</changelog>
<changelog author="dimstar@opensuse.org" date="1464177600">- Add k3b-2.0.3-gcc6.patch: Fix build with GCC 6. Patch copied from
  Gentoo.</changelog>
<changelog author="davejplater@gmail.com" date="1466856000">- Add k3b-ffmpeg3.patch from arch linux to fix build against
  ffmpeg 3x</changelog>
<changelog author="olaf@aepfle.de" date="1469448000">- Build with ffmpeg unconditional
- Remove unused ffmpeg pkgs</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="olaf@aepfle.de" date="1480420801">- Restore conditionals for lame and libmad</changelog>
<changelog author="wbauer@tmo.at" date="1480507200">- Obsolete k3b-codecs, the additional codecs are part of the main
  package now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="lbeltrame@kde.org" date="1490529600">- Update to 17.03.80
  * New feature release (KF5 based)
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 2.0.3:
  * Too many changes to list here
- Dropped patches (upstreamed or no longer applicable to the KF5 version):
  * building-docs-once-is-enough.patch
  * initial-preference.diff
  * fix-dvd-transcoding.patch
  * k3b-ffmpeg3.patch
  * k3b-2.0.3-gcc6.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * tests: Use QTEST_GUILESS_MAIN</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Only use the %kf5_find_htmldocs macro on Leap 42.3 and higher,
  this should fix the build for 42.2 on Packman</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1497268800">- Add Re-enable-transcode-support.patch to add back transcode
  support to rip DVDs, Packman's version seems to work fine
  (kde#381131)</changelog>
<changelog author="wbauer@tmo.at" date="1501070400">- Add Don-t-suggest-to-install-libburn.patch to not suggest to the
  user to install libburn on startup. The message is actually
  misleading as k3b would actually use cdrskin which is packaged
  separately in openSUSE. But let's stick to prefer the proven
  cdrecord for now, people can still install cdrskin if they'd
  prefer to use it. (boo#1050715)</changelog>
<changelog author="wbauer@tmo.at" date="1501588800">- Add upstream patches to not show the system configuration
  problems dialog if disabled (kde#381368, boo#1051368)
  * Fix-do-not-show-again.patch
  * Add-readCheckSystemConfig.patch</changelog>
<changelog author="wbauer@tmo.at" date="1501675200">- Add Add-forceCheck-for-ManualCheckSystem.patch to make the manual
  system check work again after the previous fix</changelog>
<changelog author="wbauer@tmo.at" date="1502539200">- Add Fix-creating-DVD-video-image.patch to fix creating Video DVDs
  (boo#1051338, kde#383011)</changelog>
<changelog author="aloisio@gmx.com" date="1512129600">- Add k3b-fix_extbins_segfault.patch and k3b-blank_BE.patch
  to avoid a segfault when refreshing the external programs list
  and to be able to rewrite on Blu-Ray discs respectively.</changelog>

</package>
<package pkgid="f9771a932c9e3350d507449dee221cc0fbe1dc26caf59a256415eeb7412b60e2" name="k3b-lang" arch="noarch">
    <version epoch="0" ver="17.04.2" rel="4.1"/>

<changelog author="alarrosa@suse.com" date="1450958400">- Added Requires(post/un) hicolor-icon-theme since it's needed by
  %icon_theme_cache_post/un</changelog>
<changelog author="tittiatcoke@gmail.com" date="1451908800">- Use the internal ffmpeg package to build.
  This would prevent to swap k3b with the one from packman to have
  mp3 support</changelog>
<changelog author="dimstar@opensuse.org" date="1464177600">- Add k3b-2.0.3-gcc6.patch: Fix build with GCC 6. Patch copied from
  Gentoo.</changelog>
<changelog author="davejplater@gmail.com" date="1466856000">- Add k3b-ffmpeg3.patch from arch linux to fix build against
  ffmpeg 3x</changelog>
<changelog author="olaf@aepfle.de" date="1469448000">- Build with ffmpeg unconditional
- Remove unused ffmpeg pkgs</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="olaf@aepfle.de" date="1480420801">- Restore conditionals for lame and libmad</changelog>
<changelog author="wbauer@tmo.at" date="1480507200">- Obsolete k3b-codecs, the additional codecs are part of the main
  package now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="lbeltrame@kde.org" date="1490529600">- Update to 17.03.80
  * New feature release (KF5 based)
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 2.0.3:
  * Too many changes to list here
- Dropped patches (upstreamed or no longer applicable to the KF5 version):
  * building-docs-once-is-enough.patch
  * initial-preference.diff
  * fix-dvd-transcoding.patch
  * k3b-ffmpeg3.patch
  * k3b-2.0.3-gcc6.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * tests: Use QTEST_GUILESS_MAIN</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Only use the %kf5_find_htmldocs macro on Leap 42.3 and higher,
  this should fix the build for 42.2 on Packman</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1497268800">- Add Re-enable-transcode-support.patch to add back transcode
  support to rip DVDs, Packman's version seems to work fine
  (kde#381131)</changelog>
<changelog author="wbauer@tmo.at" date="1501070400">- Add Don-t-suggest-to-install-libburn.patch to not suggest to the
  user to install libburn on startup. The message is actually
  misleading as k3b would actually use cdrskin which is packaged
  separately in openSUSE. But let's stick to prefer the proven
  cdrecord for now, people can still install cdrskin if they'd
  prefer to use it. (boo#1050715)</changelog>
<changelog author="wbauer@tmo.at" date="1501588800">- Add upstream patches to not show the system configuration
  problems dialog if disabled (kde#381368, boo#1051368)
  * Fix-do-not-show-again.patch
  * Add-readCheckSystemConfig.patch</changelog>
<changelog author="wbauer@tmo.at" date="1501675200">- Add Add-forceCheck-for-ManualCheckSystem.patch to make the manual
  system check work again after the previous fix</changelog>
<changelog author="wbauer@tmo.at" date="1502539200">- Add Fix-creating-DVD-video-image.patch to fix creating Video DVDs
  (boo#1051338, kde#383011)</changelog>

</package>
<package pkgid="771b7f47053ffeb9469d8e0a4412f67065135b67d3e7aec486b16f15062ff466" name="k3b-lang" arch="noarch">
    <version epoch="0" ver="17.04.2" rel="7.1"/>

<changelog author="tittiatcoke@gmail.com" date="1451908800">- Use the internal ffmpeg package to build.
  This would prevent to swap k3b with the one from packman to have
  mp3 support</changelog>
<changelog author="dimstar@opensuse.org" date="1464177600">- Add k3b-2.0.3-gcc6.patch: Fix build with GCC 6. Patch copied from
  Gentoo.</changelog>
<changelog author="davejplater@gmail.com" date="1466856000">- Add k3b-ffmpeg3.patch from arch linux to fix build against
  ffmpeg 3x</changelog>
<changelog author="olaf@aepfle.de" date="1469448000">- Build with ffmpeg unconditional
- Remove unused ffmpeg pkgs</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="olaf@aepfle.de" date="1480420801">- Restore conditionals for lame and libmad</changelog>
<changelog author="wbauer@tmo.at" date="1480507200">- Obsolete k3b-codecs, the additional codecs are part of the main
  package now</changelog>
<changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
<changelog author="lbeltrame@kde.org" date="1490529600">- Update to 17.03.80
  * New feature release (KF5 based)
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 2.0.3:
  * Too many changes to list here
- Dropped patches (upstreamed or no longer applicable to the KF5 version):
  * building-docs-once-is-enough.patch
  * initial-preference.diff
  * fix-dvd-transcoding.patch
  * k3b-ffmpeg3.patch
  * k3b-2.0.3-gcc6.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * tests: Use QTEST_GUILESS_MAIN</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Only use the %kf5_find_htmldocs macro on Leap 42.3 and higher,
  this should fix the build for 42.2 on Packman</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1497268800">- Add Re-enable-transcode-support.patch to add back transcode
  support to rip DVDs, Packman's version seems to work fine
  (kde#381131)</changelog>
<changelog author="wbauer@tmo.at" date="1501070400">- Add Don-t-suggest-to-install-libburn.patch to not suggest to the
  user to install libburn on startup. The message is actually
  misleading as k3b would actually use cdrskin which is packaged
  separately in openSUSE. But let's stick to prefer the proven
  cdrecord for now, people can still install cdrskin if they'd
  prefer to use it. (boo#1050715)</changelog>
<changelog author="wbauer@tmo.at" date="1501588800">- Add upstream patches to not show the system configuration
  problems dialog if disabled (kde#381368, boo#1051368)
  * Fix-do-not-show-again.patch
  * Add-readCheckSystemConfig.patch</changelog>
<changelog author="wbauer@tmo.at" date="1501675200">- Add Add-forceCheck-for-ManualCheckSystem.patch to make the manual
  system check work again after the previous fix</changelog>
<changelog author="wbauer@tmo.at" date="1502539200">- Add Fix-creating-DVD-video-image.patch to fix creating Video DVDs
  (boo#1051338, kde#383011)</changelog>
<changelog author="aloisio@gmx.com" date="1512129600">- Add k3b-fix_extbins_segfault.patch and k3b-blank_BE.patch
  to avoid a segfault when refreshing the external programs list
  and to be able to rewrite on Blu-Ray discs respectively.</changelog>

</package>
<package pkgid="39ecda640b87210bab345fe06b924675ae3750c4b1a36d5823789671c57d0a21" name="kcoreaddons" arch="src">
    <version epoch="0" ver="5.32.0" rel="3.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * KAboutData: Allow https:// and other URL schemas in homepage.
    (kde#355508)
  * Repair MimeType property when using kcoreaddons_desktop_to_json()
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Add KAboutData::fromPluginMetaData(const KPluginMetaData &amp;plugin)
  * Add KPluginMetaData::copyrightText(), extraInformation() and
    otherContributors()
  * Add KPluginMetaData::translators() and KAboutPerson::fromJson()
  * Fix use-after-free in desktop file parser
  * Make KPluginMetaData constructible from a json path
  * desktoptojson: make missing service type file an error for the binary
  * Make calling kcoreaddons_add_plugin without SOURCES an error
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix Kdelibs4 config migration for Windows
  * Add API to get Frameworks runtime version info
  * KRandom: Don't use up 16K of /dev/urandom to seed rand()
    (kde#359485)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php
- Use %mime_database_post(un) macros</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Fix kcoreaddons_desktop_to_json() on windows
  * Fix linking to a Threads library
  * Add stubs to allow compilation on Android
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461758400">- Added 0001-Missing-rand-qrand.patch (kde#362161)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Provide a way to disable inotify use in KDirWatch
  * Fix KAboutData::applicationData() to init from current
    Q*Application metadata
  * Make clear that KRandom is not recommended for cryptography purposes
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php
- Drop upstreamed 0001-Missing-rand-qrand.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Print the failing plugin when notifying a cast warning
  * [kshareddatacache] Fix invalid use of &amp; to avoid unaligned reads
  * Kdelibs4ConfigMigrator: skip reparsing if nothing was migrated
  * krandom: Add testcase to catch bug 362161 (failure to auto-seed)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Install known licenses and find them at runtime (regression fix)
    (kde#353939)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475755200">- Added 0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch (CVE-2016-7966)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014400">- Update to 5.27.0
  * Register QPair&lt;QString,QString&gt; as metatype in KJobTrackerInterface
  * Don't convert as url an url which has a double-quote character
    (boo#1002977, CVE-2016-7966)
  * Windows compile fix
  * Fix very old bug when we remove space in url as "foo &lt;&lt;url&gt; &lt;url&gt;&gt;"
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed
  0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Display bad url
  * Load user avatars from AccountsServicePath if it exists
    (kde#370362)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * KTextToHtml: fix bug "[1] added at the end of a hyperlink"
    (kde#343275)
  * KUser: Only search for an avatar if loginName isn't empty
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1484136000">- Add parse-the-desktop-file-2-times.patch: keeping backward
  compatibility is backward</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php
- Drop parse-the-desktop-file-2-times.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6.
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Exclude (6)
  * Move the isDir() outside of the loop, as spotted by Milian.
  * KDirWatch: replace QList&lt;Client *&gt; by std::vector&lt;Client&gt; to save on new/delete.
  * Upgrade KF5 version to 5.32.0.
  * KDirWatch: fix memory leak on destruction.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Add patch to update de translations to the 5.39 level (boo#1053543):
  * update-de-translations.patch</changelog>

</package>
<package pkgid="2e683079fdb8ec356f1ae9b645a3021aea93f137821bb9366af58145c5a86af9" name="kcoreaddons" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * KAboutData: Allow https:// and other URL schemas in homepage.
    (kde#355508)
  * Repair MimeType property when using kcoreaddons_desktop_to_json()
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Add KAboutData::fromPluginMetaData(const KPluginMetaData &amp;plugin)
  * Add KPluginMetaData::copyrightText(), extraInformation() and
    otherContributors()
  * Add KPluginMetaData::translators() and KAboutPerson::fromJson()
  * Fix use-after-free in desktop file parser
  * Make KPluginMetaData constructible from a json path
  * desktoptojson: make missing service type file an error for the binary
  * Make calling kcoreaddons_add_plugin without SOURCES an error
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix Kdelibs4 config migration for Windows
  * Add API to get Frameworks runtime version info
  * KRandom: Don't use up 16K of /dev/urandom to seed rand()
    (kde#359485)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php
- Use %mime_database_post(un) macros</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Fix kcoreaddons_desktop_to_json() on windows
  * Fix linking to a Threads library
  * Add stubs to allow compilation on Android
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461758400">- Added 0001-Missing-rand-qrand.patch (kde#362161)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Provide a way to disable inotify use in KDirWatch
  * Fix KAboutData::applicationData() to init from current
    Q*Application metadata
  * Make clear that KRandom is not recommended for cryptography purposes
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php
- Drop upstreamed 0001-Missing-rand-qrand.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Print the failing plugin when notifying a cast warning
  * [kshareddatacache] Fix invalid use of &amp; to avoid unaligned reads
  * Kdelibs4ConfigMigrator: skip reparsing if nothing was migrated
  * krandom: Add testcase to catch bug 362161 (failure to auto-seed)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Install known licenses and find them at runtime (regression fix)
    (kde#353939)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475755200">- Added 0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch (CVE-2016-7966)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014400">- Update to 5.27.0
  * Register QPair&lt;QString,QString&gt; as metatype in KJobTrackerInterface
  * Don't convert as url an url which has a double-quote character
    (boo#1002977, CVE-2016-7966)
  * Windows compile fix
  * Fix very old bug when we remove space in url as "foo &lt;&lt;url&gt; &lt;url&gt;&gt;"
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed
  0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Display bad url
  * Load user avatars from AccountsServicePath if it exists
    (kde#370362)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * KTextToHtml: fix bug "[1] added at the end of a hyperlink"
    (kde#343275)
  * KUser: Only search for an avatar if loginName isn't empty
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1484136000">- Add parse-the-desktop-file-2-times.patch: keeping backward
  compatibility is backward</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php
- Drop parse-the-desktop-file-2-times.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6.
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Exclude (6)
  * Move the isDir() outside of the loop, as spotted by Milian.
  * KDirWatch: replace QList&lt;Client *&gt; by std::vector&lt;Client&gt; to save on new/delete.
  * Upgrade KF5 version to 5.32.0.
  * KDirWatch: fix memory leak on destruction.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Add patch to update de translations to the 5.39 level (boo#1053543):
  * update-de-translations.patch</changelog>

</package>
<package pkgid="00388abc27316bde76e4202451468f0320a260e9204296be7d425ad6a4cb390a" name="kcoreaddons-devel" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * KAboutData: Allow https:// and other URL schemas in homepage.
    (kde#355508)
  * Repair MimeType property when using kcoreaddons_desktop_to_json()
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Add KAboutData::fromPluginMetaData(const KPluginMetaData &amp;plugin)
  * Add KPluginMetaData::copyrightText(), extraInformation() and
    otherContributors()
  * Add KPluginMetaData::translators() and KAboutPerson::fromJson()
  * Fix use-after-free in desktop file parser
  * Make KPluginMetaData constructible from a json path
  * desktoptojson: make missing service type file an error for the binary
  * Make calling kcoreaddons_add_plugin without SOURCES an error
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix Kdelibs4 config migration for Windows
  * Add API to get Frameworks runtime version info
  * KRandom: Don't use up 16K of /dev/urandom to seed rand()
    (kde#359485)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php
- Use %mime_database_post(un) macros</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Fix kcoreaddons_desktop_to_json() on windows
  * Fix linking to a Threads library
  * Add stubs to allow compilation on Android
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461758400">- Added 0001-Missing-rand-qrand.patch (kde#362161)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Provide a way to disable inotify use in KDirWatch
  * Fix KAboutData::applicationData() to init from current
    Q*Application metadata
  * Make clear that KRandom is not recommended for cryptography purposes
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php
- Drop upstreamed 0001-Missing-rand-qrand.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Print the failing plugin when notifying a cast warning
  * [kshareddatacache] Fix invalid use of &amp; to avoid unaligned reads
  * Kdelibs4ConfigMigrator: skip reparsing if nothing was migrated
  * krandom: Add testcase to catch bug 362161 (failure to auto-seed)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Install known licenses and find them at runtime (regression fix)
    (kde#353939)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475755200">- Added 0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch (CVE-2016-7966)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014400">- Update to 5.27.0
  * Register QPair&lt;QString,QString&gt; as metatype in KJobTrackerInterface
  * Don't convert as url an url which has a double-quote character
    (boo#1002977, CVE-2016-7966)
  * Windows compile fix
  * Fix very old bug when we remove space in url as "foo &lt;&lt;url&gt; &lt;url&gt;&gt;"
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed
  0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Display bad url
  * Load user avatars from AccountsServicePath if it exists
    (kde#370362)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * KTextToHtml: fix bug "[1] added at the end of a hyperlink"
    (kde#343275)
  * KUser: Only search for an avatar if loginName isn't empty
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1484136000">- Add parse-the-desktop-file-2-times.patch: keeping backward
  compatibility is backward</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php
- Drop parse-the-desktop-file-2-times.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6.
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Exclude (6)
  * Move the isDir() outside of the loop, as spotted by Milian.
  * KDirWatch: replace QList&lt;Client *&gt; by std::vector&lt;Client&gt; to save on new/delete.
  * Upgrade KF5 version to 5.32.0.
  * KDirWatch: fix memory leak on destruction.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Add patch to update de translations to the 5.39 level (boo#1053543):
  * update-de-translations.patch</changelog>

</package>
<package pkgid="699c3509b23de78b093f4c6a77785d4aa600af92b59737d57718437520e8489a" name="kcoreaddons-devel-32bit" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * KAboutData: Allow https:// and other URL schemas in homepage.
    (kde#355508)
  * Repair MimeType property when using kcoreaddons_desktop_to_json()
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Add KAboutData::fromPluginMetaData(const KPluginMetaData &amp;plugin)
  * Add KPluginMetaData::copyrightText(), extraInformation() and
    otherContributors()
  * Add KPluginMetaData::translators() and KAboutPerson::fromJson()
  * Fix use-after-free in desktop file parser
  * Make KPluginMetaData constructible from a json path
  * desktoptojson: make missing service type file an error for the binary
  * Make calling kcoreaddons_add_plugin without SOURCES an error
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix Kdelibs4 config migration for Windows
  * Add API to get Frameworks runtime version info
  * KRandom: Don't use up 16K of /dev/urandom to seed rand()
    (kde#359485)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php
- Use %mime_database_post(un) macros</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Fix kcoreaddons_desktop_to_json() on windows
  * Fix linking to a Threads library
  * Add stubs to allow compilation on Android
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461758400">- Added 0001-Missing-rand-qrand.patch (kde#362161)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Provide a way to disable inotify use in KDirWatch
  * Fix KAboutData::applicationData() to init from current
    Q*Application metadata
  * Make clear that KRandom is not recommended for cryptography purposes
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php
- Drop upstreamed 0001-Missing-rand-qrand.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Print the failing plugin when notifying a cast warning
  * [kshareddatacache] Fix invalid use of &amp; to avoid unaligned reads
  * Kdelibs4ConfigMigrator: skip reparsing if nothing was migrated
  * krandom: Add testcase to catch bug 362161 (failure to auto-seed)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Install known licenses and find them at runtime (regression fix)
    (kde#353939)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475755200">- Added 0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch (CVE-2016-7966)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014400">- Update to 5.27.0
  * Register QPair&lt;QString,QString&gt; as metatype in KJobTrackerInterface
  * Don't convert as url an url which has a double-quote character
    (boo#1002977, CVE-2016-7966)
  * Windows compile fix
  * Fix very old bug when we remove space in url as "foo &lt;&lt;url&gt; &lt;url&gt;&gt;"
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed
  0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Display bad url
  * Load user avatars from AccountsServicePath if it exists
    (kde#370362)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * KTextToHtml: fix bug "[1] added at the end of a hyperlink"
    (kde#343275)
  * KUser: Only search for an avatar if loginName isn't empty
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1484136000">- Add parse-the-desktop-file-2-times.patch: keeping backward
  compatibility is backward</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php
- Drop parse-the-desktop-file-2-times.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6.
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Exclude (6)
  * Move the isDir() outside of the loop, as spotted by Milian.
  * KDirWatch: replace QList&lt;Client *&gt; by std::vector&lt;Client&gt; to save on new/delete.
  * Upgrade KF5 version to 5.32.0.
  * KDirWatch: fix memory leak on destruction.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Add patch to update de translations to the 5.39 level (boo#1053543):
  * update-de-translations.patch</changelog>

</package>
<package pkgid="a6d93e22bbcf9ab73f002156e0b41fa37fb183107654b97afd7b548bcb8336c3" name="kcoreaddons-lang" arch="noarch">
    <version epoch="0" ver="5.32.0" rel="3.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * KAboutData: Allow https:// and other URL schemas in homepage.
    (kde#355508)
  * Repair MimeType property when using kcoreaddons_desktop_to_json()
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Add KAboutData::fromPluginMetaData(const KPluginMetaData &amp;plugin)
  * Add KPluginMetaData::copyrightText(), extraInformation() and
    otherContributors()
  * Add KPluginMetaData::translators() and KAboutPerson::fromJson()
  * Fix use-after-free in desktop file parser
  * Make KPluginMetaData constructible from a json path
  * desktoptojson: make missing service type file an error for the binary
  * Make calling kcoreaddons_add_plugin without SOURCES an error
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix Kdelibs4 config migration for Windows
  * Add API to get Frameworks runtime version info
  * KRandom: Don't use up 16K of /dev/urandom to seed rand()
    (kde#359485)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php
- Use %mime_database_post(un) macros</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Fix kcoreaddons_desktop_to_json() on windows
  * Fix linking to a Threads library
  * Add stubs to allow compilation on Android
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461758400">- Added 0001-Missing-rand-qrand.patch (kde#362161)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Provide a way to disable inotify use in KDirWatch
  * Fix KAboutData::applicationData() to init from current
    Q*Application metadata
  * Make clear that KRandom is not recommended for cryptography purposes
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php
- Drop upstreamed 0001-Missing-rand-qrand.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Print the failing plugin when notifying a cast warning
  * [kshareddatacache] Fix invalid use of &amp; to avoid unaligned reads
  * Kdelibs4ConfigMigrator: skip reparsing if nothing was migrated
  * krandom: Add testcase to catch bug 362161 (failure to auto-seed)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Install known licenses and find them at runtime (regression fix)
    (kde#353939)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475755200">- Added 0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch (CVE-2016-7966)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014400">- Update to 5.27.0
  * Register QPair&lt;QString,QString&gt; as metatype in KJobTrackerInterface
  * Don't convert as url an url which has a double-quote character
    (boo#1002977, CVE-2016-7966)
  * Windows compile fix
  * Fix very old bug when we remove space in url as "foo &lt;&lt;url&gt; &lt;url&gt;&gt;"
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed
  0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Display bad url
  * Load user avatars from AccountsServicePath if it exists
    (kde#370362)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * KTextToHtml: fix bug "[1] added at the end of a hyperlink"
    (kde#343275)
  * KUser: Only search for an avatar if loginName isn't empty
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1484136000">- Add parse-the-desktop-file-2-times.patch: keeping backward
  compatibility is backward</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php
- Drop parse-the-desktop-file-2-times.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6.
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Exclude (6)
  * Move the isDir() outside of the loop, as spotted by Milian.
  * KDirWatch: replace QList&lt;Client *&gt; by std::vector&lt;Client&gt; to save on new/delete.
  * Upgrade KF5 version to 5.32.0.
  * KDirWatch: fix memory leak on destruction.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Add patch to update de translations to the 5.39 level (boo#1053543):
  * update-de-translations.patch</changelog>

</package>
<package pkgid="cbee36d2e4c12177186d54cbd2aad9d407748e7306500e0d5618ba91e0bfcd11" name="kdepim-addons" arch="src">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1467892800">- Update to KDE Applications 16.04.3
  * KDE Applications 16.04.3
  * https://www.kde.org/announcements/announce-applications-16.04.3.php</changelog>
<changelog author="wbauer@tmo.at" date="1469620800">- Cleanup build requirements</changelog>
<changelog author="tittiatcoke@gmail.com" date="1470657600">- Update to KDE Applications 16.07.90
  * KDE Applications 16.07.90 (16.08-RC)
  * https://www.kde.org/announcements/announce-applications-16.07.90.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1471003200">- Update to KDE Applications 16.08.0
  * KDE Applications 16.08.0
  * https://www.kde.org/announcements/announce-applications-16.08.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471953600">- Build only on architectures supported by libqt5-qtwebengine</changelog>
<changelog author="tittiatcoke@gmail.com" date="1473422400">- Update to KDE Applications 16.08.1
  * KDE Applications 16.08.1
  * https://www.kde.org/announcements/announce-applications-16.08.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1476187200">- KDE Applications 16.08.2
  https://www.kde.org/announcements/announce-applications-16.08.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1478692800">- Update to KDE Applications 16.08.3
  * KDE Applications 16.08.3
  * https://www.kde.org/announcements/announce-applications-16.08.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Don't build example in release official
  * Fix show "unable to load folder"
  * Try to fix "unable to load folder" message when we filter list of folder
  * Pass calendar from memento to itiphandler to avoid loading it all over again.
  * Make "todo akonadi port" message more precise
  * WKS: fix handling of WKS v3 publishing request emails</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Use QFileInfo::exists(...)
  * Use nullptr here
  * USe QFileInfo::exist method
  * Fix label when we start to load folders
  * Use nullptr</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Add debug + update copyright
  * Fix mem leak
  * Minor optimization
  * Use nullptr
  * Allow catching signal when we start eventLoop not before it. Otherwise we can exist from this code
  * USe nullptr
  * Verify that qstring is really empty
  * use isEmpty here
  * Fix split emails
  * Fix multi emails
  * Add debug info
  * Fix kmail documentation</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Fix Bug 379988 - TNEF attachments not properly represented in UI (kde#379988)
  * Make sure that it's not empty
  * Make sure that we don't add empty str
  * Add autotests
  * Fix list of emails</changelog>
<changelog author="wbauer@tmo.at" date="1501416000">- Fix saving the AdBlock plugin's settings if
  ~/.local/share/adblock/ does not exist (boo#1013566)
  Add fix-saving-adblock-settings.patch</changelog>

</package>
<package pkgid="e36ec4ac5953bd9ee0da8dce369c4b9afee2d22e80fde45ffd1096bf25685ed1" name="kdepim-addons" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1467892800">- Update to KDE Applications 16.04.3
  * KDE Applications 16.04.3
  * https://www.kde.org/announcements/announce-applications-16.04.3.php</changelog>
<changelog author="wbauer@tmo.at" date="1469620800">- Cleanup build requirements</changelog>
<changelog author="tittiatcoke@gmail.com" date="1470657600">- Update to KDE Applications 16.07.90
  * KDE Applications 16.07.90 (16.08-RC)
  * https://www.kde.org/announcements/announce-applications-16.07.90.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1471003200">- Update to KDE Applications 16.08.0
  * KDE Applications 16.08.0
  * https://www.kde.org/announcements/announce-applications-16.08.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471953600">- Build only on architectures supported by libqt5-qtwebengine</changelog>
<changelog author="tittiatcoke@gmail.com" date="1473422400">- Update to KDE Applications 16.08.1
  * KDE Applications 16.08.1
  * https://www.kde.org/announcements/announce-applications-16.08.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1476187200">- KDE Applications 16.08.2
  https://www.kde.org/announcements/announce-applications-16.08.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1478692800">- Update to KDE Applications 16.08.3
  * KDE Applications 16.08.3
  * https://www.kde.org/announcements/announce-applications-16.08.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Don't build example in release official
  * Fix show "unable to load folder"
  * Try to fix "unable to load folder" message when we filter list of folder
  * Pass calendar from memento to itiphandler to avoid loading it all over again.
  * Make "todo akonadi port" message more precise
  * WKS: fix handling of WKS v3 publishing request emails</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Use QFileInfo::exists(...)
  * Use nullptr here
  * USe QFileInfo::exist method
  * Fix label when we start to load folders
  * Use nullptr</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Add debug + update copyright
  * Fix mem leak
  * Minor optimization
  * Use nullptr
  * Allow catching signal when we start eventLoop not before it. Otherwise we can exist from this code
  * USe nullptr
  * Verify that qstring is really empty
  * use isEmpty here
  * Fix split emails
  * Fix multi emails
  * Add debug info
  * Fix kmail documentation</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Fix Bug 379988 - TNEF attachments not properly represented in UI (kde#379988)
  * Make sure that it's not empty
  * Make sure that we don't add empty str
  * Add autotests
  * Fix list of emails</changelog>
<changelog author="wbauer@tmo.at" date="1501416000">- Fix saving the AdBlock plugin's settings if
  ~/.local/share/adblock/ does not exist (boo#1013566)
  Add fix-saving-adblock-settings.patch</changelog>

</package>
<package pkgid="c1973d62a7d3c20a2b2dcb40d37c50b3fa5cbed2a8d218089476ec4e65834051" name="kdepim-addons-lang" arch="noarch">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1467892800">- Update to KDE Applications 16.04.3
  * KDE Applications 16.04.3
  * https://www.kde.org/announcements/announce-applications-16.04.3.php</changelog>
<changelog author="wbauer@tmo.at" date="1469620800">- Cleanup build requirements</changelog>
<changelog author="tittiatcoke@gmail.com" date="1470657600">- Update to KDE Applications 16.07.90
  * KDE Applications 16.07.90 (16.08-RC)
  * https://www.kde.org/announcements/announce-applications-16.07.90.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1471003200">- Update to KDE Applications 16.08.0
  * KDE Applications 16.08.0
  * https://www.kde.org/announcements/announce-applications-16.08.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471953600">- Build only on architectures supported by libqt5-qtwebengine</changelog>
<changelog author="tittiatcoke@gmail.com" date="1473422400">- Update to KDE Applications 16.08.1
  * KDE Applications 16.08.1
  * https://www.kde.org/announcements/announce-applications-16.08.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1476187200">- KDE Applications 16.08.2
  https://www.kde.org/announcements/announce-applications-16.08.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1478692800">- Update to KDE Applications 16.08.3
  * KDE Applications 16.08.3
  * https://www.kde.org/announcements/announce-applications-16.08.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Don't build example in release official
  * Fix show "unable to load folder"
  * Try to fix "unable to load folder" message when we filter list of folder
  * Pass calendar from memento to itiphandler to avoid loading it all over again.
  * Make "todo akonadi port" message more precise
  * WKS: fix handling of WKS v3 publishing request emails</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Use QFileInfo::exists(...)
  * Use nullptr here
  * USe QFileInfo::exist method
  * Fix label when we start to load folders
  * Use nullptr</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Add debug + update copyright
  * Fix mem leak
  * Minor optimization
  * Use nullptr
  * Allow catching signal when we start eventLoop not before it. Otherwise we can exist from this code
  * USe nullptr
  * Verify that qstring is really empty
  * use isEmpty here
  * Fix split emails
  * Fix multi emails
  * Add debug info
  * Fix kmail documentation</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Fix Bug 379988 - TNEF attachments not properly represented in UI (kde#379988)
  * Make sure that it's not empty
  * Make sure that we don't add empty str
  * Add autotests
  * Fix list of emails</changelog>
<changelog author="wbauer@tmo.at" date="1501416000">- Fix saving the AdBlock plugin's settings if
  ~/.local/share/adblock/ does not exist (boo#1013566)
  Add fix-saving-adblock-settings.patch</changelog>

</package>
<package pkgid="2e5145b06ee0242c6c7f093f1cce2353667a851b404bfa74ab5d071165609181" name="kdesvn" arch="src">
    <version epoch="0" ver="2.0.0" rel="4.1"/>

<changelog author="tittiatcoke@gmail.com" date="1270814400">- update to 1.5.3
  * fixed a problem with some svn servers where version of server
    and svn-filesystem differs (ticket #765)
  * fixed wrong default depth for update in svnqt and frontend</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282392000">- update to 1.5.4
  * fixed problem ssh-askpass environment</changelog>
<changelog author="wstephenson@novell.com" date="1295006400">- update to 1.5.5
  * fixed problems while updating view after a subversion update of working copy
  * KNotify progress messages of KIO operation may switched off</changelog>
<changelog author="mlin@suse.com" date="1314705600">- few fixes for RPMLINT warnings
  * add %fdupes for files duplicated
  * do not obsoletes itself
- remove redundant BuildRequires
- clean up the specfile formatting</changelog>
<changelog author="idoenmez@suse.de" date="1322654400">- Fix build with Qt 4.8</changelog>
<changelog author="dimstar@opensuse.org" date="1332590400">- Add kdesvn-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="mailaender@opensuse.org" date="1349179200">- update to 1.6.0
  * User may add (or remove) patterns to ignore recursive
  * greek translation
  * modified for working with subversion 1.7 interface
  * removed support for subversion less than version 1.5
  * revert commit in  working copy from within logwindow
  * fixed some problems with non canonical pathes and Urls which comes with subversion 1.7
  * re-added russian translation
- Remove the following patches, all upstream now:
  * kdesvn.diff
  * remove-nl.diff
  * kdesvn-virtual-inheritance.patch
  * kdesvn-gcc47.patch</changelog>
<changelog author="coolo@suse.com" date="1349438400">- use a macro for library to avoid broken renames</changelog>
<changelog author="tittiatcoke@gmail.com" date="1366027200">- Explicit require for kio_svn and remove the
  /usr/share/kde4/services/svn*.protocol files from this package
  to avoid conflicts</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373198400">- Add fix_bug_address.patch. Redirects bug reports to bugs.kde.org</changelog>
<changelog author="wbauer@tmo.at" date="1435406400">- Add fix_crash_when_getting_logs.patch: fixes a crash when getting
  logs with current subversion (boo#931401, kde#325074, kde#330624)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444478400">- Added let-kdelibs-create-uninstall-target.patch, fix build when
  CMake's CMP002 policy is set to NEW (with kdelibs4 &gt;= 4.14.11)</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1451390400">- Added KDE-BUG-357297-Run-ssh-add-every-time.patch, fix
  running ssh-add every time (kde#357297).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Only recommend the kio_svn instead of require it. On Tumbleweed
  the kio_svn is not building due to upstream changes of SVN itself.</changelog>
<changelog author="wbauer@tmo.at" date="1464696000">- update to 1.7.0
  * Bug 322021 - Action and notification strings are not really translatable
  * Bug 322182 - kdesvn mangles options passed to external conflict resolver
  * Bug 323403 - Add "Revert" option to context menu for files
  * Bug 323712 - Subversion 1.6.x support
  * Bug 324158 - kdesvn crash when a directory name contains the at (@) symbol
  * Bug 325074, 330624 - kdesvn crashed when getting logs.
  * Bug 332863 - Wish: Please add an "Unselect all"-buttton to commit dialoge
  * Bug 340772 - Committing two moves together leads to out-of-date errors
  * Bug 357297 - kdesvn crash after entering password
  * Bug 358032 - Crash after closing KDESVN
  * ubuntu bug: 619249 tcp ports specified in urls are being ignored when using svn:https
  * speedup db insertions into log-cache
  * various code cleanups (krazy, cppcheck, preparation for KF5)
  * libsvnqt is no longer a public api
  * remove last pieces from Qt3support
  * don't show disabled actions in contextmenu
  * highlight trailing spaces in diff output on modified lines
  * fix filtering in commit dialog
- Drop upstreamed patches:
  * fix_bug_address.patch
  * fix_crash_when_getting_logs.patch
  * let-kdelibs-create-uninstall-target.patch
  * KDE-BUG-357297-Run-ssh-add-every-time.patch
- Drop the libsvnqt7 and libsvnqt-devel subpackages, there is no
  shared libsvnqt andy more, and move its translations into the
  main package
- Add Do-not-install-svnqt-static-lib.patch from upstream, we don't
  want to install libsvnqt.a
- Adjust file lists</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="wbauer@tmo.at" date="1481112000">- update to 2.0.0
  * first release based on KDE Frameworks 5
  * no other relevant changes
- Drop Do-not-install-svnqt-static-lib.patch, it's included in this
  release</changelog>
<changelog author="wbauer@tmo.at" date="1485259200">- Add fix-startup.patch to fix starting kdesvn from the
  application menu (boo#1021486)</changelog>
<changelog author="wbauer@tmo.at" date="1495281600">- Add fix-crash.patch to fix a crash when there's a '@' in the path
  (kde#375655)</changelog>
<changelog author="ch.ehrlicher@gmx.de" date="1502020800">- Add fix-crash-root-path.patch to fix kded crash when the root
  path ('/') is checked for a working copy (kde#383187)</changelog>

</package>
<package pkgid="53637ad078103e13c26c213f0089d289aced804bf64ee2775b2227291de01d22" name="kdesvn" arch="x86_64">
    <version epoch="0" ver="2.0.0" rel="4.1"/>

<changelog author="tittiatcoke@gmail.com" date="1270814400">- update to 1.5.3
  * fixed a problem with some svn servers where version of server
    and svn-filesystem differs (ticket #765)
  * fixed wrong default depth for update in svnqt and frontend</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282392000">- update to 1.5.4
  * fixed problem ssh-askpass environment</changelog>
<changelog author="wstephenson@novell.com" date="1295006400">- update to 1.5.5
  * fixed problems while updating view after a subversion update of working copy
  * KNotify progress messages of KIO operation may switched off</changelog>
<changelog author="mlin@suse.com" date="1314705600">- few fixes for RPMLINT warnings
  * add %fdupes for files duplicated
  * do not obsoletes itself
- remove redundant BuildRequires
- clean up the specfile formatting</changelog>
<changelog author="idoenmez@suse.de" date="1322654400">- Fix build with Qt 4.8</changelog>
<changelog author="dimstar@opensuse.org" date="1332590400">- Add kdesvn-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="mailaender@opensuse.org" date="1349179200">- update to 1.6.0
  * User may add (or remove) patterns to ignore recursive
  * greek translation
  * modified for working with subversion 1.7 interface
  * removed support for subversion less than version 1.5
  * revert commit in  working copy from within logwindow
  * fixed some problems with non canonical pathes and Urls which comes with subversion 1.7
  * re-added russian translation
- Remove the following patches, all upstream now:
  * kdesvn.diff
  * remove-nl.diff
  * kdesvn-virtual-inheritance.patch
  * kdesvn-gcc47.patch</changelog>
<changelog author="coolo@suse.com" date="1349438400">- use a macro for library to avoid broken renames</changelog>
<changelog author="tittiatcoke@gmail.com" date="1366027200">- Explicit require for kio_svn and remove the
  /usr/share/kde4/services/svn*.protocol files from this package
  to avoid conflicts</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373198400">- Add fix_bug_address.patch. Redirects bug reports to bugs.kde.org</changelog>
<changelog author="wbauer@tmo.at" date="1435406400">- Add fix_crash_when_getting_logs.patch: fixes a crash when getting
  logs with current subversion (boo#931401, kde#325074, kde#330624)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444478400">- Added let-kdelibs-create-uninstall-target.patch, fix build when
  CMake's CMP002 policy is set to NEW (with kdelibs4 &gt;= 4.14.11)</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1451390400">- Added KDE-BUG-357297-Run-ssh-add-every-time.patch, fix
  running ssh-add every time (kde#357297).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Only recommend the kio_svn instead of require it. On Tumbleweed
  the kio_svn is not building due to upstream changes of SVN itself.</changelog>
<changelog author="wbauer@tmo.at" date="1464696000">- update to 1.7.0
  * Bug 322021 - Action and notification strings are not really translatable
  * Bug 322182 - kdesvn mangles options passed to external conflict resolver
  * Bug 323403 - Add "Revert" option to context menu for files
  * Bug 323712 - Subversion 1.6.x support
  * Bug 324158 - kdesvn crash when a directory name contains the at (@) symbol
  * Bug 325074, 330624 - kdesvn crashed when getting logs.
  * Bug 332863 - Wish: Please add an "Unselect all"-buttton to commit dialoge
  * Bug 340772 - Committing two moves together leads to out-of-date errors
  * Bug 357297 - kdesvn crash after entering password
  * Bug 358032 - Crash after closing KDESVN
  * ubuntu bug: 619249 tcp ports specified in urls are being ignored when using svn:https
  * speedup db insertions into log-cache
  * various code cleanups (krazy, cppcheck, preparation for KF5)
  * libsvnqt is no longer a public api
  * remove last pieces from Qt3support
  * don't show disabled actions in contextmenu
  * highlight trailing spaces in diff output on modified lines
  * fix filtering in commit dialog
- Drop upstreamed patches:
  * fix_bug_address.patch
  * fix_crash_when_getting_logs.patch
  * let-kdelibs-create-uninstall-target.patch
  * KDE-BUG-357297-Run-ssh-add-every-time.patch
- Drop the libsvnqt7 and libsvnqt-devel subpackages, there is no
  shared libsvnqt andy more, and move its translations into the
  main package
- Add Do-not-install-svnqt-static-lib.patch from upstream, we don't
  want to install libsvnqt.a
- Adjust file lists</changelog>
<changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
<changelog author="wbauer@tmo.at" date="1481112000">- update to 2.0.0
  * first release based on KDE Frameworks 5
  * no other relevant changes
- Drop Do-not-install-svnqt-static-lib.patch, it's included in this
  release</changelog>
<changelog author="wbauer@tmo.at" date="1485259200">- Add fix-startup.patch to fix starting kdesvn from the
  application menu (boo#1021486)</changelog>
<changelog author="wbauer@tmo.at" date="1495281600">- Add fix-crash.patch to fix a crash when there's a '@' in the path
  (kde#375655)</changelog>
<changelog author="ch.ehrlicher@gmx.de" date="1502020800">- Add fix-crash-root-path.patch to fix kded crash when the root
  path ('/') is checked for a working copy (kde#383187)</changelog>

</package>
<package pkgid="122dc404aa7b1fdba4ac767025813eeda16b8fbd0ab22a048afc7a82f5aee712" name="keepassxc" arch="src">
    <version epoch="0" ver="2.2.0" rel="4.1"/>

<changelog author="mpluskal@suse.com" date="1487246400">- Initial package for version 2.1.1 (boo#1024998):
  * based on package for keepassx</changelog>
<changelog author="jengelh@inai.de" date="1487678400">- Remove filler words from description</changelog>
<changelog author="mpluskal@suse.com" date="1488024000">- Update to version 2.1.2:
  * Ask for save location when creating a new database [#302]
  * Remove Libmicrohttpd dependency to clean up the code and ensure better OS X compatibility [#317, #265]
  * Prevent Qt from degrading Wifi network performance on certain platforms [#318]
  * Visually refine user interface on OS X and other platforms [#299]
  * Remove unusable tray icon setting on OS X [#293]
  * Fix compositing glitches on Ubuntu and prevent flashing when minimizing to the tray at startup [#307]
  * Fix AppImage tray icon on Ubuntu [#277, #273]
  * Fix global menu disappearing after restoring KeePassXC from the tray on Ubuntu [#276]
  * Fix result order in entry search [#320]
  * Enable HiDPI scaling on supported platforms [#315]
  * Remove empty directories from installation target [#282]</changelog>
<changelog author="mpluskal@suse.com" date="1488456000">- Update dependencies (fixes boo#1027653)</changelog>
<changelog author="mpluskal@suse.com" date="1488542400">- Update to version 2.1.3:
  * Fix possible overflow in zxcvbn library [#363]
  * Revert HiDPI setting to avoid problems on laptop screens [#332]
  * Set file meta properties in Windows executable [#330]
  * Suppress error message when auto-reloading a locked database [#345]
  * Improve usability of question dialog when database is already locked by a different instance [#346]
  * Fix compiler warnings in QHttp library [#351]
  * Use unified toolbar on Mac OS X [#361]
  * Fix an issue on X11 where the main window would be raised instead of closed on Alt+F4 [#362]</changelog>
<changelog author="mpluskal@suse.com" date="1491566400">- Fetch gpg key from web</changelog>
<changelog author="mpluskal@suse.com" date="1492430400">- Update to version 2.1.4:
  * Bumped KeePassHTTP version to 1.8.4.2
  * KeePassHTTP confirmation window comes to foreground [#466]</changelog>
<changelog author="mpluskal@suse.com" date="1498046400">- Fix building with Qt 5.9 - gh#keepassxreboot/keepassxc#528
  * keepassxc-qt5.9.patch</changelog>
<changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>

</package>
<package pkgid="9b9019bb338510b7baf9df374c04b40d39b1f3f2064968079ab024f0ecf21c47" name="keepassxc" arch="src">
    <version epoch="0" ver="2.2.4" rel="7.1"/>

<changelog author="mpluskal@suse.com" date="1487246400">- Initial package for version 2.1.1 (boo#1024998):
  * based on package for keepassx</changelog>
<changelog author="jengelh@inai.de" date="1487678400">- Remove filler words from description</changelog>
<changelog author="mpluskal@suse.com" date="1488024000">- Update to version 2.1.2:
  * Ask for save location when creating a new database [#302]
  * Remove Libmicrohttpd dependency to clean up the code and ensure better OS X compatibility [#317, #265]
  * Prevent Qt from degrading Wifi network performance on certain platforms [#318]
  * Visually refine user interface on OS X and other platforms [#299]
  * Remove unusable tray icon setting on OS X [#293]
  * Fix compositing glitches on Ubuntu and prevent flashing when minimizing to the tray at startup [#307]
  * Fix AppImage tray icon on Ubuntu [#277, #273]
  * Fix global menu disappearing after restoring KeePassXC from the tray on Ubuntu [#276]
  * Fix result order in entry search [#320]
  * Enable HiDPI scaling on supported platforms [#315]
  * Remove empty directories from installation target [#282]</changelog>
<changelog author="mpluskal@suse.com" date="1488456000">- Update dependencies (fixes boo#1027653)</changelog>
<changelog author="mpluskal@suse.com" date="1488542400">- Update to version 2.1.3:
  * Fix possible overflow in zxcvbn library [#363]
  * Revert HiDPI setting to avoid problems on laptop screens [#332]
  * Set file meta properties in Windows executable [#330]
  * Suppress error message when auto-reloading a locked database [#345]
  * Improve usability of question dialog when database is already locked by a different instance [#346]
  * Fix compiler warnings in QHttp library [#351]
  * Use unified toolbar on Mac OS X [#361]
  * Fix an issue on X11 where the main window would be raised instead of closed on Alt+F4 [#362]</changelog>
<changelog author="mpluskal@suse.com" date="1491566400">- Fetch gpg key from web</changelog>
<changelog author="mpluskal@suse.com" date="1492430400">- Update to version 2.1.4:
  * Bumped KeePassHTTP version to 1.8.4.2
  * KeePassHTTP confirmation window comes to foreground [#466]</changelog>
<changelog author="mpluskal@suse.com" date="1498046400">- Fix building with Qt 5.9 - gh#keepassxreboot/keepassxc#528
  * keepassxc-qt5.9.patch</changelog>
<changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
<changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
<changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
<changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
<changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (bsc#1072867)
- Fix filelist</changelog>

</package>
<package pkgid="33e921c9a34ebf37a913d9c85ff0887874f335f30d2c4b82b3b26f130171e29c" name="keepassxc" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="4.1"/>

<changelog author="mpluskal@suse.com" date="1487246400">- Initial package for version 2.1.1 (boo#1024998):
  * based on package for keepassx</changelog>
<changelog author="jengelh@inai.de" date="1487678400">- Remove filler words from description</changelog>
<changelog author="mpluskal@suse.com" date="1488024000">- Update to version 2.1.2:
  * Ask for save location when creating a new database [#302]
  * Remove Libmicrohttpd dependency to clean up the code and ensure better OS X compatibility [#317, #265]
  * Prevent Qt from degrading Wifi network performance on certain platforms [#318]
  * Visually refine user interface on OS X and other platforms [#299]
  * Remove unusable tray icon setting on OS X [#293]
  * Fix compositing glitches on Ubuntu and prevent flashing when minimizing to the tray at startup [#307]
  * Fix AppImage tray icon on Ubuntu [#277, #273]
  * Fix global menu disappearing after restoring KeePassXC from the tray on Ubuntu [#276]
  * Fix result order in entry search [#320]
  * Enable HiDPI scaling on supported platforms [#315]
  * Remove empty directories from installation target [#282]</changelog>
<changelog author="mpluskal@suse.com" date="1488456000">- Update dependencies (fixes boo#1027653)</changelog>
<changelog author="mpluskal@suse.com" date="1488542400">- Update to version 2.1.3:
  * Fix possible overflow in zxcvbn library [#363]
  * Revert HiDPI setting to avoid problems on laptop screens [#332]
  * Set file meta properties in Windows executable [#330]
  * Suppress error message when auto-reloading a locked database [#345]
  * Improve usability of question dialog when database is already locked by a different instance [#346]
  * Fix compiler warnings in QHttp library [#351]
  * Use unified toolbar on Mac OS X [#361]
  * Fix an issue on X11 where the main window would be raised instead of closed on Alt+F4 [#362]</changelog>
<changelog author="mpluskal@suse.com" date="1491566400">- Fetch gpg key from web</changelog>
<changelog author="mpluskal@suse.com" date="1492430400">- Update to version 2.1.4:
  * Bumped KeePassHTTP version to 1.8.4.2
  * KeePassHTTP confirmation window comes to foreground [#466]</changelog>
<changelog author="mpluskal@suse.com" date="1498046400">- Fix building with Qt 5.9 - gh#keepassxreboot/keepassxc#528
  * keepassxc-qt5.9.patch</changelog>
<changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>

</package>
<package pkgid="6cd0f16012e8421421e7f874dc4eefcb74f555bd534e3a1366ebaf51dfba8b32" name="keepassxc" arch="x86_64">
    <version epoch="0" ver="2.2.4" rel="7.1"/>

<changelog author="mpluskal@suse.com" date="1487246400">- Initial package for version 2.1.1 (boo#1024998):
  * based on package for keepassx</changelog>
<changelog author="jengelh@inai.de" date="1487678400">- Remove filler words from description</changelog>
<changelog author="mpluskal@suse.com" date="1488024000">- Update to version 2.1.2:
  * Ask for save location when creating a new database [#302]
  * Remove Libmicrohttpd dependency to clean up the code and ensure better OS X compatibility [#317, #265]
  * Prevent Qt from degrading Wifi network performance on certain platforms [#318]
  * Visually refine user interface on OS X and other platforms [#299]
  * Remove unusable tray icon setting on OS X [#293]
  * Fix compositing glitches on Ubuntu and prevent flashing when minimizing to the tray at startup [#307]
  * Fix AppImage tray icon on Ubuntu [#277, #273]
  * Fix global menu disappearing after restoring KeePassXC from the tray on Ubuntu [#276]
  * Fix result order in entry search [#320]
  * Enable HiDPI scaling on supported platforms [#315]
  * Remove empty directories from installation target [#282]</changelog>
<changelog author="mpluskal@suse.com" date="1488456000">- Update dependencies (fixes boo#1027653)</changelog>
<changelog author="mpluskal@suse.com" date="1488542400">- Update to version 2.1.3:
  * Fix possible overflow in zxcvbn library [#363]
  * Revert HiDPI setting to avoid problems on laptop screens [#332]
  * Set file meta properties in Windows executable [#330]
  * Suppress error message when auto-reloading a locked database [#345]
  * Improve usability of question dialog when database is already locked by a different instance [#346]
  * Fix compiler warnings in QHttp library [#351]
  * Use unified toolbar on Mac OS X [#361]
  * Fix an issue on X11 where the main window would be raised instead of closed on Alt+F4 [#362]</changelog>
<changelog author="mpluskal@suse.com" date="1491566400">- Fetch gpg key from web</changelog>
<changelog author="mpluskal@suse.com" date="1492430400">- Update to version 2.1.4:
  * Bumped KeePassHTTP version to 1.8.4.2
  * KeePassHTTP confirmation window comes to foreground [#466]</changelog>
<changelog author="mpluskal@suse.com" date="1498046400">- Fix building with Qt 5.9 - gh#keepassxreboot/keepassxc#528
  * keepassxc-qt5.9.patch</changelog>
<changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
<changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
<changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
<changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
<changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (bsc#1072867)
- Fix filelist</changelog>

</package>
<package pkgid="64fb8134b43321f689300c56a2f05d40eaf6803e353421449bbeed7cbf1d8007" name="keepassxc-lang" arch="noarch">
    <version epoch="0" ver="2.2.0" rel="4.1"/>

<changelog author="mpluskal@suse.com" date="1487246400">- Initial package for version 2.1.1 (boo#1024998):
  * based on package for keepassx</changelog>
<changelog author="jengelh@inai.de" date="1487678400">- Remove filler words from description</changelog>
<changelog author="mpluskal@suse.com" date="1488024000">- Update to version 2.1.2:
  * Ask for save location when creating a new database [#302]
  * Remove Libmicrohttpd dependency to clean up the code and ensure better OS X compatibility [#317, #265]
  * Prevent Qt from degrading Wifi network performance on certain platforms [#318]
  * Visually refine user interface on OS X and other platforms [#299]
  * Remove unusable tray icon setting on OS X [#293]
  * Fix compositing glitches on Ubuntu and prevent flashing when minimizing to the tray at startup [#307]
  * Fix AppImage tray icon on Ubuntu [#277, #273]
  * Fix global menu disappearing after restoring KeePassXC from the tray on Ubuntu [#276]
  * Fix result order in entry search [#320]
  * Enable HiDPI scaling on supported platforms [#315]
  * Remove empty directories from installation target [#282]</changelog>
<changelog author="mpluskal@suse.com" date="1488456000">- Update dependencies (fixes boo#1027653)</changelog>
<changelog author="mpluskal@suse.com" date="1488542400">- Update to version 2.1.3:
  * Fix possible overflow in zxcvbn library [#363]
  * Revert HiDPI setting to avoid problems on laptop screens [#332]
  * Set file meta properties in Windows executable [#330]
  * Suppress error message when auto-reloading a locked database [#345]
  * Improve usability of question dialog when database is already locked by a different instance [#346]
  * Fix compiler warnings in QHttp library [#351]
  * Use unified toolbar on Mac OS X [#361]
  * Fix an issue on X11 where the main window would be raised instead of closed on Alt+F4 [#362]</changelog>
<changelog author="mpluskal@suse.com" date="1491566400">- Fetch gpg key from web</changelog>
<changelog author="mpluskal@suse.com" date="1492430400">- Update to version 2.1.4:
  * Bumped KeePassHTTP version to 1.8.4.2
  * KeePassHTTP confirmation window comes to foreground [#466]</changelog>
<changelog author="mpluskal@suse.com" date="1498046400">- Fix building with Qt 5.9 - gh#keepassxreboot/keepassxc#528
  * keepassxc-qt5.9.patch</changelog>
<changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>

</package>
<package pkgid="40a13c9914ddf45d64098e6929076a9ee1237be6b6bad42aecc6a90fd697aae3" name="keepassxc-lang" arch="noarch">
    <version epoch="0" ver="2.2.4" rel="7.1"/>

<changelog author="mpluskal@suse.com" date="1487246400">- Initial package for version 2.1.1 (boo#1024998):
  * based on package for keepassx</changelog>
<changelog author="jengelh@inai.de" date="1487678400">- Remove filler words from description</changelog>
<changelog author="mpluskal@suse.com" date="1488024000">- Update to version 2.1.2:
  * Ask for save location when creating a new database [#302]
  * Remove Libmicrohttpd dependency to clean up the code and ensure better OS X compatibility [#317, #265]
  * Prevent Qt from degrading Wifi network performance on certain platforms [#318]
  * Visually refine user interface on OS X and other platforms [#299]
  * Remove unusable tray icon setting on OS X [#293]
  * Fix compositing glitches on Ubuntu and prevent flashing when minimizing to the tray at startup [#307]
  * Fix AppImage tray icon on Ubuntu [#277, #273]
  * Fix global menu disappearing after restoring KeePassXC from the tray on Ubuntu [#276]
  * Fix result order in entry search [#320]
  * Enable HiDPI scaling on supported platforms [#315]
  * Remove empty directories from installation target [#282]</changelog>
<changelog author="mpluskal@suse.com" date="1488456000">- Update dependencies (fixes boo#1027653)</changelog>
<changelog author="mpluskal@suse.com" date="1488542400">- Update to version 2.1.3:
  * Fix possible overflow in zxcvbn library [#363]
  * Revert HiDPI setting to avoid problems on laptop screens [#332]
  * Set file meta properties in Windows executable [#330]
  * Suppress error message when auto-reloading a locked database [#345]
  * Improve usability of question dialog when database is already locked by a different instance [#346]
  * Fix compiler warnings in QHttp library [#351]
  * Use unified toolbar on Mac OS X [#361]
  * Fix an issue on X11 where the main window would be raised instead of closed on Alt+F4 [#362]</changelog>
<changelog author="mpluskal@suse.com" date="1491566400">- Fetch gpg key from web</changelog>
<changelog author="mpluskal@suse.com" date="1492430400">- Update to version 2.1.4:
  * Bumped KeePassHTTP version to 1.8.4.2
  * KeePassHTTP confirmation window comes to foreground [#466]</changelog>
<changelog author="mpluskal@suse.com" date="1498046400">- Fix building with Qt 5.9 - gh#keepassxreboot/keepassxc#528
  * keepassxc-qt5.9.patch</changelog>
<changelog author="mpluskal@suse.com" date="1498478400">- Update to version 2.2.0:
  * Added YubiKey 2FA integration for unlocking databases [#127]
  * Added TOTP support [#519]
  * Added CSV import tool [#146, #490]
  * Added KeePassXC CLI tool [#254]
  * Added diceware password generator [#373]
  * Added support for entry references [#370, #378]
  * Added support for Twofish encryption [#167]
  * Enabled DEP and ASLR for in-memory protection [#371]
  * Enabled single instance mode [#510]
  * Enabled portable mode [#645]
  * Enabled database lock on screensaver and session lock [#545]
  * Redesigned welcome screen with common features and recent databases [#292]
  * Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]
  * Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]
  * Fixed auto-type errors on Linux [#550]
  * Prompt user prior to executing a cmd:// URL [#235]
  * Entry attributes can be protected (hidden) [#220]
  * Added extended ascii to password generator [#538]
  * Added new database icon to toolbar [#289]
  * Added context menu entry to empty recycle bin in databases [#520]
  * Added "apply" button to entry and group edit windows [#624]
  * Added macOS tray icon and enabled minimize on close [#583]
  * Fixed issues with unclean shutdowns [#170, #580]
  * Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]
  * Compare window title to entry URLs [#556]
  * Implemented inline error messages [#162]
  * Ignore group expansion and other minor changes when making database "dirty" [#464]
  * Updated license and copyright information on souce files [#632]
  * Added contributors list to about dialog [#629]
- Drop no longer needed keepassxc-qt5.9.patch
- Enforce locale setting for tests (gh#keepassxreboot/keepassxc#667)</changelog>
<changelog author="astieger@suse.com" date="1507809600">- update to 2.2.1:
  * Correct multiple snap issues
  * Correct multiple custom icon issues
  * Correct multiple Yubikey issues
  * Fix single instance preventing load on occasion
  * Keep entry history when merging databases
  * Prevent data loss if passwords were mismatched
  * Fix crash after merge
  * Add configurable auto-type default delay
  * Unlock database dialog window comes to front
  * Translation and compiling fixes</changelog>
<changelog author="mpluskal@suse.com" date="1509019200">- Update to version 2.2.2:
  * Fixed entries with empty URLs being reported to KeePassHTTP
    clients
  * Added AppStream description
  * Improved TOTP compatibility and added new Base32 implementation
  * Fixed error handling when processing invalid cipher stream
  * Fixed double warning display when opening a database
  * Fixed unlocking databases with --pw-stdin
  * Fixed transform seed not being regenerated when saving the
    database
  * Fixed only one YubiKey slot being polled
  * Corrected an issue with entry icons while merging
  * Corrected desktop and tray icons in Snap package
  * Fixed screen lock and Google fallback settings</changelog>
<changelog author="idonmez@suse.com" date="1513252800">- Update to version 2.2.4:
  * Prevent database corruption when locked
  * Fixes apply button not saving new entries
  * Switch to Consolas font on Windows for password edit
  * Fixes multiple memory leaks
  * Resize message close to 16x16 pixels</changelog>
<changelog author="mpluskal@suse.com" date="1513252801">- Update on Leap and in Backports (bsc#1072867)
- Fix filelist</changelog>

</package>
<package pkgid="bea20858fb5470e6e0edd61fd820ae9565f95652d81ebdefee469034b8e69377" name="kernel-debug" arch="src">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="e4f3f6bc8492e7866b48748378ca5822159d3edb583c77562dd6e0c59c8ddf04" name="kernel-debug" arch="src">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="ae427f393cd9e78b4ff8ce0946d6c429bbcca52d2abb2ccdf461c9fed1654c09" name="kernel-debug" arch="src">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="81a9c5332694a50c0bc44c59e73314b56ee015213587979eb2081b66961c523f" name="kernel-debug" arch="src">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="9ce80a244b162f4dfd40f4f49dd4c88a660a1bb5c0a7002eb4633392e48c8dca" name="kernel-debug" arch="src">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="6e96cfeec66d6d42a48d5386907edf6880a73924b35f989482338310b4ad542a" name="kernel-debug" arch="src">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="18444a2e7c7e6c9c9900e8c3111806d283d39dabca0163e8fbcce36190071a0c" name="kernel-debug" arch="src">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="d3d924a7badc52ad520c37e01bb9ad5bad22abb8f9248119b37f4d5b6b0fce95" name="kernel-debug" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="4dfac293fe5235f23638a39e7a5a1428c052f78a2df0659c0ad7f9797230baf6" name="kernel-debug" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="91acd1b9a0227cee09f0a3e9b5f0b93919ae19ef5c0101e88940db03a2aff41d" name="kernel-debug" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="bd9b5e4be520758597ce758e0cd9af3050ab76addd3e33d8863a1bbac33f6039" name="kernel-debug" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="01fd9c5280963cfb12e95ac39d845ea94d67a7ee022eb3b27a39f87ec5790a6a" name="kernel-debug" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="70f96fed6371db10ce71c2a2149ce1b1401933abf86fac83a7eb968e98e9b76d" name="kernel-debug" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="ab5afd95692405a8aaed59554e844726433836a39a096d1e694b6ffc5c88687d" name="kernel-debug" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="e2639a654c2051c06a085fb4dfe73f19dca25d30cdb774cfedd6f4924415be57" name="kernel-debug-base" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="763934084e611b288f3597fbb2ca76bdb97755e8d179f1cf1b314fe0a9fa1c46" name="kernel-debug-base" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="cc3ea55a1f05f34dbc16332bf42f5aae3c9e55e6194b798cab17cb9dbc0128bd" name="kernel-debug-base" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="8a303e6e7730d6d8b079fc5ba7b61ffbfdb7f949cc34b02c7e52d2f6b4383546" name="kernel-debug-base" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="1a579ac4d11c7585fefe7c3d1ce0f60273486e850df421626ffe05e831b48ff6" name="kernel-debug-base" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="71ce32df31a05f0aa80fd89bc2ccd901df6fdb96bf4e3878c03aa9a809891a09" name="kernel-debug-base" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="c6e142e95f35a920312c91bdf7a66a0cae49a681fed513d726fdc12810585f6a" name="kernel-debug-base" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="12e79c6541281c64e61bba6ff5df01612deb6b2c0e57e937c47cb4f2871a9222" name="kernel-debug-devel" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="1f4d369882e291cc3e34633e054d2a523d3959b0e29ed85100c03b74221eb70e" name="kernel-debug-devel" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="54df6f50ed248744fbd98a2a6bafa53415a41ae06e03f4e7d7d6c5263dd05562" name="kernel-debug-devel" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="c2b2ab0838657d003a8a2f664af8ae94aca90569bc1533beeb226b21b5121b0f" name="kernel-debug-devel" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="ac4f1edfb071666e1e60bb408502e65894331b875fe71fb868a8e19df895752b" name="kernel-debug-devel" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="96b5ebb1f1f4ecce308106353bf566f37c1c4c022f654138104252c28976fe07" name="kernel-debug-devel" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="ffacb0c5edcb7cc6aee299814d79306559761e346cdb15d7f1ccfc296d31fef4" name="kernel-debug-devel" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="7dd15105fc816ab3abae944cc381ee508bd5f3febe62bd50ccb6f38f5e163ce9" name="kernel-default" arch="src">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="0c009b408044dc4b43744f518a62939fabc4cc76c5c2f41aecb6024f13e51683" name="kernel-default" arch="src">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="b30ebf79fe4ab1870ad71287b602f0480bc533f239285d2d94e6321d9d9162f4" name="kernel-default" arch="src">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="5f2865f6cd4002513b25c5bc7016696b9e751bf15be37acb475a975fcc637eda" name="kernel-default" arch="src">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="3f169152ca5afbaf196c88724babe93d893482068caac0d4261bf0e904679e86" name="kernel-default" arch="src">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="35e53ba89743cb9fb0203bfbb47b9e4120a88795221c9890977401287b755c77" name="kernel-default" arch="src">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="4242946ad6ff43ece06c56dc74cb02d098d3aecf0b9bb8a975da947d4816edde" name="kernel-default" arch="src">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="7fb7db4fe0c291b02e4e6fd3c637a8f6de51afb8f916f68d9a91474ea8eebc4b" name="kernel-default" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="4798201d2d0077ad2d07748f03a43b6458119b8c229965d3e736dc961b3df35a" name="kernel-default" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="c7dc41453cca7ce50e0ffe50b1441b1283601147f2c79a52109e2641700dca64" name="kernel-default" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="634b73a2b97564f66491f9d7dbd863a65bea0fe3ebe0ce65ddc1327e337640c7" name="kernel-default" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="86136b05233b8dc15422f270c729fc7a471e767aa814d228df72986f01d24c72" name="kernel-default" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="9342ea9a0b1139336e23d29fff22cece5aff4028fa57991911606416ed1a3b75" name="kernel-default" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="5ab33a00bdccd653b2f1fa1a31d4e4339911e0295a67f177ccf3f898b3b564f3" name="kernel-default" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="1517a1f15a630112c49ed62949ec24f104ad9a22b2a7a422db3f327dd7cac027" name="kernel-default-base" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="2fa63662afc1dfc3a62f90a819b0c824215af6ee181f1e33456a79b206deb55d" name="kernel-default-base" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="ece098a0395e7c21622e0ca59802e51726c7517c37d902fff446d1a1c5fa156c" name="kernel-default-base" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="b6303f0c5314d2e5314763124da2ecda816498ce797e8dd90ae334772f8c9a03" name="kernel-default-base" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="91dbc0d1c9f5dc68f5ab68a58081e62e53f04776833927956812136bc3adec12" name="kernel-default-base" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="d985b2dacce7046912d2f7ca1880c40da254d5211d6bf063c14c1ace6a19a1aa" name="kernel-default-base" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="738878c2a98bc844b349a7dbf6d32caa90d7a999e1eed1bdc12f3b2008a19358" name="kernel-default-base" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="21dcaee99e6309f10ac11d11ac322387348f36a5dfa713e5160efeffeccb3c9e" name="kernel-default-devel" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="cf98ee029c80e1d9fc92e450582ff2e9d516fd2b8c02b065dea75a259291e5f3" name="kernel-default-devel" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="b894270f29dc5d90bbd74922b34bdce64792ed6f27077a47699fd72ec3004fbb" name="kernel-default-devel" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="f2e941fff0ece2d774fe03f5fc6fda0fb8b37380af6f54d3ab3fe1c1863567b0" name="kernel-default-devel" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="6a21e27a399f324cb41a2ffd927b0b266a959bf223c130fbeee790d92a4ea95c" name="kernel-default-devel" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="e02bc3c69ee2b3355f27fd58aa2079ed99c9ef02a596b33d126eb1c3de676ada" name="kernel-default-devel" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="f4ad39b227e6b93183f0a09e3255c8b0180a821f7accf483452e511728486797" name="kernel-default-devel" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="f7122ebd053e232bf37bb180ad35ce6a28eb72c55d2e91918dfe935a6b18e1be" name="kernel-devel" arch="noarch">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="213d1e87457d78bb785ba5de43b5320d18c189471919dc4ce2de7491641f0ae5" name="kernel-devel" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="9f2d3a9e23c63344d774e6909f7ff7f70a058193d7ff919843d48915e3767f81" name="kernel-devel" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="df38de47d0bd152a110f70caf2ce05d43675318f384cf557e5eca8fe4ff0f519" name="kernel-devel" arch="noarch">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="2ff5112d5036d770701154c6a112ecb155049702d3910972e6144ba112fc0e51" name="kernel-devel" arch="noarch">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="da179f4d95ae526e67f8b57956eff38eec22cbb06f68127f00ade6cca3056339" name="kernel-devel" arch="noarch">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="dd2a29245d6d54396cf282c9fba4887be725c6c153792b3abcd72c9f0238452d" name="kernel-devel" arch="noarch">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="e2e2fff416a0253fcdfba45032a916ecc3845d4662a50fc7a970f83af5623654" name="kernel-docs" arch="noarch">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="d9b5d30dc19b94f7074c596c433b9b06b7721752ab27cbd17658914344603b40" name="kernel-docs" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="19.2"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="35c8969c2b8a8e09e580080c6aa8b5dfd0443e8e6399f01ab1560e395f6ef497" name="kernel-docs" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="a1189df161392248bfb019d376166defe7ae7c3c16fb9151f99a82f55215b42c" name="kernel-docs" arch="noarch">
    <version epoch="0" ver="4.4.85" rel="22.3"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="945f0e235a3e0a83b75960dd26ddabed12114a4ced9ceba87d05ff07688a1db3" name="kernel-docs" arch="noarch">
    <version epoch="0" ver="4.4.87" rel="25.2"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="d5d71fca94c745874bc849b4a1411211c2c4b60f2ad8bae31e6dda5ac06e9cbc" name="kernel-docs" arch="noarch">
    <version epoch="0" ver="4.4.90" rel="28.2"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="4b782d8fb0435a2e6f950f28f1a7a9a638ee775d43eefac9e2d0e2ec904f6e60" name="kernel-docs" arch="noarch">
    <version epoch="0" ver="4.4.92" rel="31.2"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="daf3ff7d217c4f449e024a6ca70f8083b5883613989f67c3a8759ea9d2a5f28c" name="kernel-docs" arch="src">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="96f6ce4e1847c7a27998fb5bfbe4ff37043be347960fa25eaec27ba0e5492ab8" name="kernel-docs" arch="src">
    <version epoch="0" ver="4.4.79" rel="19.2"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="efed26f395bf8adeb673ccc98c7265415496c721fc99b8361f531a599f4824ef" name="kernel-docs" arch="src">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="bd7fc083bbb5eb5d1c8d18b12a2341dfa649b93522ff5aeed4c62b86309417b9" name="kernel-docs" arch="src">
    <version epoch="0" ver="4.4.85" rel="22.3"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="273cf29ea69043c339b711149686fd4a76b6723ed30e597ac72efe460f690cb7" name="kernel-docs" arch="src">
    <version epoch="0" ver="4.4.87" rel="25.2"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="66c61406ec714c91981e23458a172830a2af25f0f3601f18c4d4183e6ca36235" name="kernel-docs" arch="src">
    <version epoch="0" ver="4.4.90" rel="28.2"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="67683280c1c9cf198b20fa0f86ee52f5bf4104109e28af832251d65cf2c65205" name="kernel-docs" arch="src">
    <version epoch="0" ver="4.4.92" rel="31.2"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="7b9129d78680d15126942e7174c2453bbb2119e74a3b8300df172302bc965b70" name="kernel-docs-html" arch="noarch">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="a12a9c5133951adcad64221ff0981028375882afa4e953e44337826419fd7aff" name="kernel-docs-html" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="19.2"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="917baeef0630f258cef3346b9f59938a9eb2ffed1a3ec4d9d896079486976563" name="kernel-docs-html" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="44beb0ef35578acd0b4e625f57bae22df96cf4ddbf48ec33febb7f26c5a692e4" name="kernel-docs-html" arch="noarch">
    <version epoch="0" ver="4.4.85" rel="22.3"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="4402c4f0c5aa194df96f0d3a6875839e25fd2ec321f7d163d3f19d45aad8a4f2" name="kernel-docs-html" arch="noarch">
    <version epoch="0" ver="4.4.87" rel="25.2"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="80eb5cb582123ba5123b96484d7c38f0d2d3ca364e071fa3adedcf88259b01f4" name="kernel-docs-html" arch="noarch">
    <version epoch="0" ver="4.4.90" rel="28.2"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="d3c476f3500ee33f34078bff96c935dfe78190565c4f856e3ecb01296f9776de" name="kernel-docs-html" arch="noarch">
    <version epoch="0" ver="4.4.92" rel="31.2"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="42c92c55fbad9be16e6675dbb31eb219963dd9e71e1b209a2183643f4daaa3c8" name="kernel-docs-pdf" arch="noarch">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="895b205179632a9d4db5e9c5ddc4e3bbbe581bd155bf7270b6cc36964da0fc6b" name="kernel-docs-pdf" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="19.2"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="3fce95794ff5fcc9adccf2f6c9a3b4ba4c997df5dbbef75ab2d5a010433f45d2" name="kernel-docs-pdf" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="b191c54b804f90ada13958ccfe4587cd6afe3020ea491dfd8619f9b077582a8c" name="kernel-docs-pdf" arch="noarch">
    <version epoch="0" ver="4.4.85" rel="22.3"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="99daed4391a5124780539b5dbfdd9349ad5406ef8923513268be3ba1882b5254" name="kernel-docs-pdf" arch="noarch">
    <version epoch="0" ver="4.4.87" rel="25.2"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="b7184a1e8d5375d48608458e201cf5094847c17c1ae92382f6d3ff77f09f8add" name="kernel-docs-pdf" arch="noarch">
    <version epoch="0" ver="4.4.90" rel="28.2"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="f98c82681e54749a9f1c19cbb430e7b041d58dcac4c4ab464f0521188ea22570" name="kernel-docs-pdf" arch="noarch">
    <version epoch="0" ver="4.4.92" rel="31.2"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="b0913948de741ff7af72fd0ad0ba3bf8c2722221d8f7a4cb6622735195b034b7" name="kernel-firmware" arch="noarch">
    <version epoch="0" ver="20170530" rel="11.1"/>

<changelog author="glin@suse.com" date="1435320000">- Update QLogic bna firmware (bsc#922050, FATE#318601)
  + ctfw-3.2.5.1.bin, ct2fw-3.2.5.1.bin
- Exclude i586 and s390</changelog>
<changelog author="dchang@suse.com" date="1438776000">- Update Chelsio cxgb4 firmware to revision 1.13.32.0 for T4 and T5
  (bsc#924378 FATE#318565)
  - Add t4fw-1.13.32.0.bin and t5fw-1.13.32.0.bin</changelog>
<changelog author="dchang@suse.com" date="1439294400">- Update symlinks in cxgb4 subdirectory. (bsc#924378 FATE#318565)</changelog>
<changelog author="dchang@suse.com" date="1442232000">- cxgb4: update firmware to revision 1.14.4.0 for T4 and T5
  (bsc#945218)
  - Replaced cxgb4-update-firmware-to-revision-1.13.32.0-for-T4-a.patch
    with cxgb4-update-firmware-to-revision-1.14.4.0.patch
  - Replaced t4fw-1.13.32.0.bin and t5fw-1.13.32.0.bin with
    t4fw-1.14.4.0.bin and t5fw-1.14.4.0.bin</changelog>
<changelog author="mmarek@suse.cz" date="1452859200">- Update to version 20160112git (commit 40e9ae8) (fate#320305).
  No firmware files have been removed except for
  ti-connectivity/wl18xx-conf.bin, for which the driver has a
  fallback.
  Run git log --no-merges --oneline ce64fa89..40e9ae8 in linux-firmware.git
  to see the complete list of changes.
- Synced the spec file with openSUSE Factory.</changelog>
<changelog author="mmarek@suse.com" date="1459252800">- Update to version 20160317git (commit 5f8ca0c1db61) (fate#fate#320305).
  - Intel wifi and BT updates (fate#319955)
  - rtlwifi update
  - Intel SKL audio and graphics updates
  - Atheros AR3012 firmware
  - nvidia GM200, GM204, GM206 and GM20B signed firmware
  - wl18xx update
  - AMD family 15h processor update
  - Intel OPA hfi1 (fate#319251)</changelog>
<changelog author="mmarek@suse.cz" date="1462536000">- Update to version 20160429git / commit 8afadbe55301 (fate#fate#320305).
  - radeon and amdgpu updates
  - Intel Bluetooth 7265 / 8265 updates
  - ath10k updates</changelog>
<changelog author="mmarek@suse.com" date="1464264000">- Update to version 20160516git / commit 80d463be829a (fate#320305).
  - Intel SKL audio update
  - rt2800usb / rt2800pci update
  - amdgpu update
- Obsolete the SP1 compat-wireless-firmware package (bsc#975894).</changelog>
<changelog author="bpoirier@suse.com" date="1464868800">- Update Chelsio cxgb4 firmware to version 1.15.37.0 (bsc#975328)</changelog>
<changelog author="acho@suse.com" date="1471435200">- Update qlogic  qed/qede - update FW to version 8.10.5.0 (bsc#993873).</changelog>
<changelog author="hare@suse.de" date="1472212800">- Update qlogic qla2xxx firmware to 08.04.00 (bsc#993846)</changelog>
<changelog author="tiwai@suse.de" date="1480593600">- Update ASoC Intel SST Atom firmwares as of 20161201 (bsc#1010690)</changelog>
<changelog author="tiwai@suse.de" date="1486382400">- Update to version 20170113 (FATE#321353):
  including AMDGPU updates, Intel SST BYT/BSW, Intel SKL/BXT/KBL audio,
  Intel BT 7265 (C0/D0), 7265 (D1), 7260 (B3/B4/B5/B6), 8260 and 8265,
  qed FW 8.10.5.0 and 8.10.10.0, BRCM4356/4358, RTL8723BE/RTL8821AE,
  wl127x/wl128x, cxgb4 1.16.26.0, MT8173 VPU, rockchip dptx v3.1,
  radeon SMC, Marvell PCIe8997, ath10k QCA4019 hw1.0, QCA9887 hw1.0,
  QCA9888 hw2.0, QCA9984 hw1.0, QCA988X hw2.0 and QCA6174, rt2870sta
  rt3071.bin, RTL8822BE, i915 DMC 1.23 xhci-rcar R-Car H3 and M3-W,
  usbdux usbduxsigma, nvidia GP100, iwlwifi -17 and -22 firmwares,
- Add Provides for brcmfmac43430-sdio.bin formerly in bcm43xx-firmware
- Package new GPL-2 file
- Refresh qlogic-Update-to-08.04.00.patch
- Remove obsoleted files (already included in the updated tarball):
  cxgb4-update-firmware-to-revision-1.15.37.0.patch
  fw_sst_0f28.bin
  fw_sst_0f28_ssp0.bin
  fw_sst_22a8.bin
  qed-Add-FW-8.10.5.0.patch
  qed_init_values_zipped-8.10.5.0.bin
  t4fw-1.15.37.0.bin
  t5fw-1.15.37.0.bin</changelog>
<changelog author="mmarek@suse.cz" date="1491912000">- Update to version 20170404
  Firmware updates for qed (fate#321702), i195, amdgpu, radeon,
  rtlwifi, qla2xxx, cxgb4, Intel BT, ath10k, mwifiex, etc.
  Deleted qlogic-Update-to-08.04.00.patch, ql2400_fw.bin
  ql2500_fw.bin
- Add kernel-firmware-rpmlintrc as some firmware is binary</changelog>
<changelog author="trenn@suse.de" date="1493380800">- According to &lt;john.fleck@intel.com&gt; who submitted the patch mainline and
  already gave it a test (fate#321476 and 321477):
  I see an extra file in the firmware package related to the hfi1 driver.
  /lib/firmware/hfi1_platform.dat
  This file needs to be removed from the SLES distro.
  The other files look correct.</changelog>
<changelog author="tiwai@suse.de" date="1495454400">- Update to version 20170522 (commit df40d15d6ad6) (bsc#1039785):
  * linux-firmware: liquidio: update firmware to v1.5.1
  * linux-firmware: update Marvell SD8887 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * rtl_bt: Update firmware for BT part of rtl8822be
  * cxgb4: update firmware to revision 1.16.43.0
  * linux-firmware: add Marvell USB8997 firmware image
  * iwlwifi: update -22 firmware for 3168
  * Update firmware for 3168
  * qed: Add firmware 8.20.0.0
  * Update Intel OPA hfi1 firmware</changelog>
<changelog author="tiwai@suse.de" date="1496232000">- Cleanup spec file to reduce superfluous lines (bsc#1041354).
- Remove the superfluous isci/* devel sources</changelog>
<changelog author="tiwai@suse.de" date="1496318400">- Update to version 20170530 (bsc#1039310):
  * linux-firmware: add wil6210 firmware 4.1.0.55
  * cxgb4: update firmware to revision 1.16.45.0.</changelog>
<changelog author="tiwai@suse.de" date="1498564800">- Revert Intel OPA hfi1 firmware to production signed v0.47
  (bsc#1045856):
  hfi1_dc8051.fw
  Update-Intel-OPA-hfi1-firmware.patch</changelog>
<changelog author="tiwai@suse.de" date="1510747200">- Update Intel WiFi firmwares (CVE-2017-13080 CVE-2017-13081
  bsc#1066295):
  iwlwifi-3160-17.ucode
  iwlwifi-7260-17.ucode
  iwlwifi-7265-17.ucode</changelog>

</package>
<package pkgid="00fffe081f05238e9d13071cf1cb1ea05d16670d9a4d6f5873ef83c2a6a07c6a" name="kernel-firmware" arch="src">
    <version epoch="0" ver="20170530" rel="11.1"/>

<changelog author="glin@suse.com" date="1435320000">- Update QLogic bna firmware (bsc#922050, FATE#318601)
  + ctfw-3.2.5.1.bin, ct2fw-3.2.5.1.bin
- Exclude i586 and s390</changelog>
<changelog author="dchang@suse.com" date="1438776000">- Update Chelsio cxgb4 firmware to revision 1.13.32.0 for T4 and T5
  (bsc#924378 FATE#318565)
  - Add t4fw-1.13.32.0.bin and t5fw-1.13.32.0.bin</changelog>
<changelog author="dchang@suse.com" date="1439294400">- Update symlinks in cxgb4 subdirectory. (bsc#924378 FATE#318565)</changelog>
<changelog author="dchang@suse.com" date="1442232000">- cxgb4: update firmware to revision 1.14.4.0 for T4 and T5
  (bsc#945218)
  - Replaced cxgb4-update-firmware-to-revision-1.13.32.0-for-T4-a.patch
    with cxgb4-update-firmware-to-revision-1.14.4.0.patch
  - Replaced t4fw-1.13.32.0.bin and t5fw-1.13.32.0.bin with
    t4fw-1.14.4.0.bin and t5fw-1.14.4.0.bin</changelog>
<changelog author="mmarek@suse.cz" date="1452859200">- Update to version 20160112git (commit 40e9ae8) (fate#320305).
  No firmware files have been removed except for
  ti-connectivity/wl18xx-conf.bin, for which the driver has a
  fallback.
  Run git log --no-merges --oneline ce64fa89..40e9ae8 in linux-firmware.git
  to see the complete list of changes.
- Synced the spec file with openSUSE Factory.</changelog>
<changelog author="mmarek@suse.com" date="1459252800">- Update to version 20160317git (commit 5f8ca0c1db61) (fate#fate#320305).
  - Intel wifi and BT updates (fate#319955)
  - rtlwifi update
  - Intel SKL audio and graphics updates
  - Atheros AR3012 firmware
  - nvidia GM200, GM204, GM206 and GM20B signed firmware
  - wl18xx update
  - AMD family 15h processor update
  - Intel OPA hfi1 (fate#319251)</changelog>
<changelog author="mmarek@suse.cz" date="1462536000">- Update to version 20160429git / commit 8afadbe55301 (fate#fate#320305).
  - radeon and amdgpu updates
  - Intel Bluetooth 7265 / 8265 updates
  - ath10k updates</changelog>
<changelog author="mmarek@suse.com" date="1464264000">- Update to version 20160516git / commit 80d463be829a (fate#320305).
  - Intel SKL audio update
  - rt2800usb / rt2800pci update
  - amdgpu update
- Obsolete the SP1 compat-wireless-firmware package (bsc#975894).</changelog>
<changelog author="bpoirier@suse.com" date="1464868800">- Update Chelsio cxgb4 firmware to version 1.15.37.0 (bsc#975328)</changelog>
<changelog author="acho@suse.com" date="1471435200">- Update qlogic  qed/qede - update FW to version 8.10.5.0 (bsc#993873).</changelog>
<changelog author="hare@suse.de" date="1472212800">- Update qlogic qla2xxx firmware to 08.04.00 (bsc#993846)</changelog>
<changelog author="tiwai@suse.de" date="1480593600">- Update ASoC Intel SST Atom firmwares as of 20161201 (bsc#1010690)</changelog>
<changelog author="tiwai@suse.de" date="1486382400">- Update to version 20170113 (FATE#321353):
  including AMDGPU updates, Intel SST BYT/BSW, Intel SKL/BXT/KBL audio,
  Intel BT 7265 (C0/D0), 7265 (D1), 7260 (B3/B4/B5/B6), 8260 and 8265,
  qed FW 8.10.5.0 and 8.10.10.0, BRCM4356/4358, RTL8723BE/RTL8821AE,
  wl127x/wl128x, cxgb4 1.16.26.0, MT8173 VPU, rockchip dptx v3.1,
  radeon SMC, Marvell PCIe8997, ath10k QCA4019 hw1.0, QCA9887 hw1.0,
  QCA9888 hw2.0, QCA9984 hw1.0, QCA988X hw2.0 and QCA6174, rt2870sta
  rt3071.bin, RTL8822BE, i915 DMC 1.23 xhci-rcar R-Car H3 and M3-W,
  usbdux usbduxsigma, nvidia GP100, iwlwifi -17 and -22 firmwares,
- Add Provides for brcmfmac43430-sdio.bin formerly in bcm43xx-firmware
- Package new GPL-2 file
- Refresh qlogic-Update-to-08.04.00.patch
- Remove obsoleted files (already included in the updated tarball):
  cxgb4-update-firmware-to-revision-1.15.37.0.patch
  fw_sst_0f28.bin
  fw_sst_0f28_ssp0.bin
  fw_sst_22a8.bin
  qed-Add-FW-8.10.5.0.patch
  qed_init_values_zipped-8.10.5.0.bin
  t4fw-1.15.37.0.bin
  t5fw-1.15.37.0.bin</changelog>
<changelog author="mmarek@suse.cz" date="1491912000">- Update to version 20170404
  Firmware updates for qed (fate#321702), i195, amdgpu, radeon,
  rtlwifi, qla2xxx, cxgb4, Intel BT, ath10k, mwifiex, etc.
  Deleted qlogic-Update-to-08.04.00.patch, ql2400_fw.bin
  ql2500_fw.bin
- Add kernel-firmware-rpmlintrc as some firmware is binary</changelog>
<changelog author="trenn@suse.de" date="1493380800">- According to &lt;john.fleck@intel.com&gt; who submitted the patch mainline and
  already gave it a test (fate#321476 and 321477):
  I see an extra file in the firmware package related to the hfi1 driver.
  /lib/firmware/hfi1_platform.dat
  This file needs to be removed from the SLES distro.
  The other files look correct.</changelog>
<changelog author="tiwai@suse.de" date="1495454400">- Update to version 20170522 (commit df40d15d6ad6) (bsc#1039785):
  * linux-firmware: liquidio: update firmware to v1.5.1
  * linux-firmware: update Marvell SD8887 firmware image
  * linux-firmware: update Marvell SD8897-B0 firmware image
  * rtl_bt: Update firmware for BT part of rtl8822be
  * cxgb4: update firmware to revision 1.16.43.0
  * linux-firmware: add Marvell USB8997 firmware image
  * iwlwifi: update -22 firmware for 3168
  * Update firmware for 3168
  * qed: Add firmware 8.20.0.0
  * Update Intel OPA hfi1 firmware</changelog>
<changelog author="tiwai@suse.de" date="1496232000">- Cleanup spec file to reduce superfluous lines (bsc#1041354).
- Remove the superfluous isci/* devel sources</changelog>
<changelog author="tiwai@suse.de" date="1496318400">- Update to version 20170530 (bsc#1039310):
  * linux-firmware: add wil6210 firmware 4.1.0.55
  * cxgb4: update firmware to revision 1.16.45.0.</changelog>
<changelog author="tiwai@suse.de" date="1498564800">- Revert Intel OPA hfi1 firmware to production signed v0.47
  (bsc#1045856):
  hfi1_dc8051.fw
  Update-Intel-OPA-hfi1-firmware.patch</changelog>
<changelog author="tiwai@suse.de" date="1510747200">- Update Intel WiFi firmwares (CVE-2017-13080 CVE-2017-13081
  bsc#1066295):
  iwlwifi-3160-17.ucode
  iwlwifi-7260-17.ucode
  iwlwifi-7265-17.ucode</changelog>

</package>
<package pkgid="e04e74df70eef2c3d9bee9b3f39750d2bc5335e4584cca563c37e95e2093b2f7" name="kernel-macros" arch="noarch">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="ba71251ca1a446df79f1fc6a4f1c8c3563c5fb4633edc6b762fe8f0e1aa0daff" name="kernel-macros" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="28672613eab630f1e65649118e540c615ab39df066f0133262aa5e4ba173dfca" name="kernel-macros" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="83c034b59d9ec3710bb74e29760450c414251708ab17441e20deb4f333ee3ea9" name="kernel-macros" arch="noarch">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="850d03976df571e465a44a2c36a248aafa4122625efef8305d3b390826a62d53" name="kernel-macros" arch="noarch">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="a7e9086db8318b3241d66bf2752f6d72f52c907821076d4be51f4351e9a92ae8" name="kernel-macros" arch="noarch">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="20d56180debee16f44560f6e94ed77b64d58fc510801a408990f9b8ef7fe8e7c" name="kernel-macros" arch="noarch">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="cbed0a119702a4de64026ffa4928ffea8e2afb6b6981438840c25ae7503190ee" name="kernel-obs-build" arch="src">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="6b58367b493b6dd9fba3b151fdf05afef691ea11f91754bd08aef027df165632" name="kernel-obs-build" arch="src">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="30ed2cb9cb07e00f7e22aadc1fc3f7c989feb681f1db557d9ab505be31823bbf" name="kernel-obs-build" arch="src">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="ac2acbb36ea9f57869377f00af30ae055d0e4a8baa06696c34ce7f6fb2d960d2" name="kernel-obs-build" arch="src">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="827ae5fb43289422295c8b816187a7db6304ebbd4ddc5338fb66bc67a568ac70" name="kernel-obs-build" arch="src">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="e71a89c15e1f46678e464a843769dfba1781d79902c2dc5464820df641575682" name="kernel-obs-build" arch="src">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="5a3e66f523a97b003521041869bc38fba1804d48a1544d51ee210ebaf3a3cc33" name="kernel-obs-build" arch="src">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="cb3aa86869a51b63ca4a831e82e6445ac16f1cdf5ee1386d9078718e789c8e8a" name="kernel-obs-build" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="370099ac8a7eaf4d336d2497d13933098e99963c37b0fbe574559de01883ecac" name="kernel-obs-build" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="f34a149087f12e579fa107d1a63851771a86c1918dfd2df1707d9cd75b111b57" name="kernel-obs-build" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="c34dcc2bfca5e8b9663078ff6c61301394b68b1039393a1b3599383b8b6d4778" name="kernel-obs-build" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="a429f66b3490b55f549e3b576ba1ab38b7124ecf3359fc5f9129142a9774a974" name="kernel-obs-build" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="35573c539e07bbad688122d4d6a7160b1f1795ef7c49dad0b0e51bc9882dbdea" name="kernel-obs-build" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="eb8eb93e90bf4273ca84a7b92e4a81189baa531837e227495366dd9aa37b4cae" name="kernel-obs-build" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="579f3095cccbc3db3e73318602417e5d2b708f440f351e1b7c33b4cb14ab193e" name="kernel-obs-qa" arch="src">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="183a9e4f188cb17d9ea3ec03152e20cef65ab8bceb6b9dbd1038742d0c194c76" name="kernel-obs-qa" arch="src">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="b4e3e6e8e94869e169fdc11c2671ecc2ade28e089b2e6786f6da1f5eac9ea630" name="kernel-obs-qa" arch="src">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="22bfe351f2d06714351aaeadcef039c734086222ec135e245ec46bacb7cf98d7" name="kernel-obs-qa" arch="src">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="eb265e5f8b4b862c73b9e3ae515e056b13040eeb92ca7e91c6736f46945310a6" name="kernel-obs-qa" arch="src">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="0e210ce56892bc0cd2b63daf793d4bfd495efb9ee15ddb2f5456665bb9b3c8da" name="kernel-obs-qa" arch="src">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="50b9403ab7bd0a0f6e00c3408b843bea2a4931effc888b55cc5e18b1425ac61b" name="kernel-obs-qa" arch="src">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="3d8650df4f1be1582aaa2860cb7245f3b5be5447ec2e5f01c857f72392a5c253" name="kernel-obs-qa" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="f13473ab05342173857484756a88ef21d0913fe2a64052c7c7996db726ccaff0" name="kernel-obs-qa" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="f281335bce44930d5943eed708306931e5b6d39d56a2f89f1afac46afe33ba18" name="kernel-obs-qa" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="3f58f427118e7e3e14be23f6e5d9b74c66961026f5c81fa5593bb099f11c82fa" name="kernel-obs-qa" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="2ef502c7a85d37d0a9d09a9d1bd7437a348562d358c374211397519377a48f89" name="kernel-obs-qa" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="591cea6cbfbc64d322519ee372263d292c37fb72884ea51a0c2b9d91837eef5e" name="kernel-obs-qa" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="94a241e34ed8aad8a5bad8187f0e58a73b22ecbdfb534ba219980cd118e3d8dd" name="kernel-obs-qa" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="4362fd67be4165c9893525171390e5b82ef0a7da36fb809217c116b7ccd03b47" name="kernel-source" arch="noarch">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="861cfd4305f069596b4b4347e7ecd8868949ce681bdd8f6f8d98a7cd08fbfb4f" name="kernel-source" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="0ad98e122ed33062205e314eb69efd41e9c988e6e627756efad0fc6de149a07a" name="kernel-source" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="0667d1adb630aba9c6abd19aec7cdde259f3f34ddd96a4e0f5378ce4ce70badf" name="kernel-source" arch="noarch">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="7ed33d879e62d9471271a768113ae103906b41420083dcaf3310975e41af0f9a" name="kernel-source" arch="noarch">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="d0a8bf5b2c91cf2087295ffd93a2a339de817f3c38f829318bf8c537d1d4c45e" name="kernel-source" arch="noarch">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="3ec2e0488e26b1118fd9e69b2bb67c6f2879dd3be9f6bb88efd5d860cbf559e7" name="kernel-source" arch="noarch">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="80aa5c10c1a94053a165e97bcf40212b23eedc1e664ce43132135ebe37034e93" name="kernel-source" arch="src">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="a495ecbaaa76598762af9fb5bb8d0942b2217866175f9d443a5a79a55596521f" name="kernel-source" arch="src">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="523c98e566db15ab8deef37f5348382e09a280d0b11a4f5ae232ecf69435dc2c" name="kernel-source" arch="src">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="72134a233c0f099f328e2eb36aef6737033f741b7e0839f462efa8c830a96678" name="kernel-source" arch="src">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="677cd6dd93cb78dac2f8d938282007ff24493302785d01100c2b122b89407e13" name="kernel-source" arch="src">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="815ac53ffe7435bde108d1fcc1229d43ce2c4634d56dbb17680ce99fbdcdd377" name="kernel-source" arch="src">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="5bc52ea2390ca7f38c727e3819af53e3da0b4f18286ed37b8468f0793d15c3f2" name="kernel-source" arch="src">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="06608492a580b7beb28a45fd1180c316984770ec1391598245c07d7bb1c0e28c" name="kernel-source-vanilla" arch="noarch">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="5c2317579d9c95801431774f82602487c53433055b075e9c9af576eefe740017" name="kernel-source-vanilla" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="8c812cac3056c79a555033fe38545b6684514264bee5ebad36424210efd76a43" name="kernel-source-vanilla" arch="noarch">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="1f7dd980de8ef1a45152219f027ff425587d2b8cd5820ea15e9e7d5e93aca498" name="kernel-source-vanilla" arch="noarch">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="ba282f64c82bb27f4552f1dba82581fc804093ab65ed5ddf1aecce7938f7b7fe" name="kernel-source-vanilla" arch="noarch">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="ec4619d4898b06e235085b938bad66af3f25cb58a48dc012dde6472070030980" name="kernel-source-vanilla" arch="noarch">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="bbe8bd3850664fce18c2f72031fd12b5cba322c80d2f8015377c9307a40164d6" name="kernel-source-vanilla" arch="noarch">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="d7004557806981268912577a495a1d9a2199e60736259931e03bca612032de09" name="kernel-syms" arch="src">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="73fe931208382bf024681edc0c1eb28f0c3c076d1cfe9c7083c05910e2137268" name="kernel-syms" arch="src">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="db6d10f0b64462f6121728bf6d029b1ca5fc2a92b126d8899a0be50b654d9533" name="kernel-syms" arch="src">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="bd744788e1e8adad961896f0749830e595fa2457010e6e693a838771235bbd3d" name="kernel-syms" arch="src">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="44760485e63cca944c7acf6fd88e9e411b54911e599f95b6e3f6f2fdc5facacc" name="kernel-syms" arch="src">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="3b6c0b2341309aaf5f7b6358c421fd9e26472c7f51f972b118e8c2bf47eb106b" name="kernel-syms" arch="src">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="b3d1a53a0d46115b0c6b2899b0715f8776ff2ef93133073a3a40a8f2932c3aec" name="kernel-syms" arch="src">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="37fdfeab68b6cada95ad4023a05f6e860b7984e4095379751a95f73a5bab0f43" name="kernel-syms" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="4bd5b49192ebf16ee9b83f2a97c42046f13c7119d0de466d37948dae4d894721" name="kernel-syms" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="29825c5b2c16d7cdcd35af403f75edee4ea93ad6b382216acf7d7e5a2a023ad6" name="kernel-syms" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="00b0df874077bb883c32175bb707ada60add64c007d510e8bd6442cfdf5f979b" name="kernel-syms" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="e73b5f43899a83c145443c321af40ba3e59d7dff2c0abe0336c7c156977cd544" name="kernel-syms" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="20e752e3ee47e214a3186a491f6d1a12036988bb950458ded50157ebb66b2d89" name="kernel-syms" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="c4897ee4e48e5274bf6061f1b0b12f31609033144bdaa0f5005760d36ef4f30e" name="kernel-syms" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="3ffe1bf1ae6691a85f4456f8e6bdd77641b8926586fd6c88fff9e1166197e0cc" name="kernel-vanilla" arch="src">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="de15ab68899350f0b682a0dad9e35e5841461e47211cc1342287bf44f253e7c5" name="kernel-vanilla" arch="src">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="215b28257a81adf0a5c1caa428d0b68c8a0d298fb42a24df30e37970cfb3665f" name="kernel-vanilla" arch="src">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="6abb14f88b1bfef3b33a23db33b8b833dd4607b9ba9ba3aa058a35f26180336a" name="kernel-vanilla" arch="src">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="5870d108506246dfff3988ca34b0d4312b34645d2e67fca9ae50c402b23d2a91" name="kernel-vanilla" arch="src">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="6474fcc92ad44c693ac54a9c5dbdcefc146f0b1416247ffc2482dff8d6b33fae" name="kernel-vanilla" arch="src">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="5e007d2b4e430b3c355482138a5fc545f25e900f77fba98fd9c2c19cc1893da4" name="kernel-vanilla" arch="src">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="869f59e6cea1ee0c6e378f85137dc21bd593a4156cf0f93298e55c67df960168" name="kernel-vanilla" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="b017090985ea1cde8af1ac4b449a127d29628381e5b9369462da4c3ae8e1911e" name="kernel-vanilla" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="940bb01bc0174e0b7d01f8e48cdb77626f9de1255db6580e7e6fee287b9cca79" name="kernel-vanilla" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="79ea099d6ed209df8074bef9aa52b2241c0c341f75a393055b0013e78bb167a7" name="kernel-vanilla" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="8b773572ac4f3755d2a058bc06a76c1f1e51d0fdaca888987f164d131c7df79c" name="kernel-vanilla" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="5edf12f39129abaf04d4426f01a11eda775a95631485115146e06990be1fe13b" name="kernel-vanilla" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="de9c560784a68a669607735803739f9147bcff852996dea643693997b9788090" name="kernel-vanilla" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="3d3eff4e28a082c931357441b632e2b0e036ce9ce9724c09123e9d5e7c755b17" name="kernel-vanilla-base" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="1d26d61f431fb04b471268ba1cc417e11b9e47c35e6b6dab4e62aa7e3676fc2a" name="kernel-vanilla-base" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="f291d93844d100a612ccaab8b0c716928efbafda81a98eb995eaaab9060a0b02" name="kernel-vanilla-base" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="8006192785b8634f29eb37bd0b0955e6ad4ae250050530b441ecc34ec07fb5ec" name="kernel-vanilla-base" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="bd74edd1b6ae381c1836f56ecbc955a4dc5311d1538a112f03da9809bfef379b" name="kernel-vanilla-base" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="6ffd3be20e0b1f29080cc1c8aeac8548650bd1d8839bf201838ded8f3c3d644c" name="kernel-vanilla-base" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="18b82aba5e4fcd62d8c5efad4b00ab16ad614a4319f3e156f7c51eb71bc2a4ed" name="kernel-vanilla-base" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="0cfed2a8ecbd151c6f76662860de1b4c1ab81070f9185b9f3d925d4eba90952a" name="kernel-vanilla-devel" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="2d6b20fbb772c984e76f440a41b6e12a7816116a106ca31f9c5273cd44934297" name="kernel-vanilla-devel" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="19.1"/>

<changelog author="msuchanek@suse.de" date="1502193600">- ibmvnic: Initialize SCRQ's during login renegotiation
  (bsc#1052223).
- commit d8105e2</changelog>
<changelog author="msuchanek@suse.de" date="1502193601">- ibmvnic: Check for transport event on driver resume
  (bsc#1051556, bsc#1052709).
- commit f9c29db</changelog>
<changelog author="msuchanek@suse.de" date="1502193602">- ibmvnic: Report rx buffer return codes as netdev_dbg
  (bsc#1052794).
- commit 76fd0c0</changelog>
<changelog author="jroedel@suse.de" date="1502193603">- x86/dmi: Switch dmi_remap() from ioremap() to ioremap_cache()
  (bsc#1051399).
- commit a53d8db</changelog>
<changelog author="msuchanek@suse.de" date="1502193604">- Fix warning in  patches.drivers/ibmvnic-104-Check-for-transport-event-on-driver-resume.patch.
- commit e88865d</changelog>
<changelog author="tonyj@suse.de" date="1502193605">- powerpc/perf: Fix oops when
  kthread execs user process (git-fixes
  0002-powerpc-perf-add-support-for-sampling-interrupt-register-state.patch
  (ed4a4ef85cf5b75231079501030db28dd59f920a)).
- commit 44892b6</changelog>
<changelog author="tiwai@suse.de" date="1502280000">- [media] saa7164: fix double fetch PCIe access condition
  (CVE-2017-8831 bsc#1037994).
- commit 913c459</changelog>
<changelog author="jthumshirn@suse.de" date="1502280001">- RDMA/bnxt_re: checking for NULL instead of IS_ERR()
  (bsc#1052925).
- commit df14ab7</changelog>
<changelog author="ohering@suse.de" date="1502280002">- netvsc: make sure and unregister datapath (fate#320485,
  bsc#1052899).
- commit 86ebb3c</changelog>
<changelog author="ohering@suse.de" date="1502280003">- Update hyperv patch headers to comply with Documentation/SubmittingPatches
- commit 1dad91a</changelog>
<changelog author="hare@suse.de" date="1502280004">- qeth: fix L3 next-hop im xmit qeth hdr (bnc#1052773,
  LTC#157374).
- commit c83bb73</changelog>
<changelog author="msuchanek@suse.de" date="1502280005">- Refresh fadump patches metadata and change to upstream order.
- commit d519325</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502280006">- i40e/i40evf: Fix use after free in Rx cleanup path
  (bsc#1051689).
- commit 1bf6211</changelog>
<changelog author="msuchanek@suse.de" date="1502280007">- powerpc/tm: Fix saving of TM SPRs in core dump (fate#318470,
  git-fixes 08e1c01d6aed).
- commit eaddcb7</changelog>
<changelog author="tonyj@suse.de" date="1502280008">- powerpc/perf: Fix SDAR_MODE value for continous sampling on
  Power9 (bsc#1053043 (git-fixes)).
- Update
  patches.fixes/powerpc-perf-fix-oops-when-kthread-execs-user-process.patch
  (bsc#1053043 (git-fixes)).
- commit 0fb1d20</changelog>
<changelog author="tbogendoerfer@suse.de" date="1502366400">- net/mlx4_core: Fixes missing capability bit in flags2 capability
  dump (bsc#1015337).
- net/mlx4_core: Fix namespace misalignment in QinQ VST support
  commit (bsc#1015337).
- net/mlx4_core: Fix sl_to_vl_change bit offset in flags2 dump
  (bsc#1015337).
- commit 5929479</changelog>
<changelog author="jthumshirn@suse.de" date="1502366401">- scsi: qedi: Fix return code in qedi_ep_connect() (bsc#1048912).
- scsi: lpfc: fix linking against modular NVMe support
  (bsc#1048912).
- scsi: lpfc: don't double count abort errors (bsc#1048912).
- scsi: aacraid: fix PCI error recovery path (bsc#1048912).
- commit 01f94a4</changelog>
<changelog author="jthumshirn@suse.de" date="1502366402">- kabi/severities: add drivers/scsi/hisi_sas to kabi severities
- commit 7a6dc53</changelog>
<changelog author="jthumshirn@suse.de" date="1502366403">- nvme: fabrics commands should use the fctype field for data
  direction (bsc#1043805).
- commit 80141ba</changelog>
<changelog author="jthumshirn@suse.de" date="1502366404">- libnvdimm: fix badblock range handling of ARS range
  (bsc#1023175).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
  (bsc#1023175).
- commit 0327dff</changelog>

</package>
<package pkgid="9fc8c41b18ebbc6150b49b5a595909663a09751fd11351b16629896427972d47" name="kernel-vanilla-devel" arch="x86_64">
    <version epoch="0" ver="4.4.79" rel="4.2"/>

<changelog author="jroedel@suse.de" date="1501588800">- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
  (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed
  devices only (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- commit 86146b7</changelog>
<changelog author="jroedel@suse.de" date="1501588801">- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq()
  (bsc#1051478).
- commit 15eb86e</changelog>
<changelog author="jroedel@suse.de" date="1501588802">- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN
  (bsc#1051478).
- commit d7147f2</changelog>
<changelog author="lhenriques@suse.com" date="1501588803">- gcov: support GCC 7.1 (bsc#1051663).
- gcov: add support for gcc version &gt;= 6 (bsc#1051663).
- commit a92dc4a</changelog>
<changelog author="jroedel@suse.de" date="1501588804">- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- commit a89be0a</changelog>
<changelog author="jroedel@suse.de" date="1501588805">- PCI: Enable ECRC only if device supports it (bsc#1051478).
- commit c96580c</changelog>
<changelog author="jroedel@suse.de" date="1501588806">- PCI / PM: Fix native PME handling during system suspend/resume
  (bsc#1051478).
- commit 383632d</changelog>
<changelog author="jroedel@suse.de" date="1501588807">- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures')
  This only fixes machines not supported by our kernels.
- commit 6d5803c</changelog>
<changelog author="jroedel@suse.de" date="1501588808">- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0
  x2APIC (bsc#1051478).
- commit 869f25a</changelog>
<changelog author="jroedel@suse.de" date="1501588809">- KVM: x86: avoid simultaneous queueing of both IRQ and SMI
  (bsc#1051478).
- commit dd4f667</changelog>
<changelog author="jroedel@suse.de" date="1501588810">- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- commit 7325a6e</changelog>
<changelog author="jroedel@suse.de" date="1501588811">- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls
  (bsc#1051478).
- commit 740ca35</changelog>
<changelog author="jroedel@suse.de" date="1501588812">- ACPI / processor: Avoid reserving IO regions too early
  (bsc#1051478).
- commit 4370a71</changelog>
<changelog author="tiwai@suse.de" date="1501675200">- PM / Hibernate: Fix scheduling while atomic during hibernation
  (bsc#1051059).
- commit d444c6c</changelog>
<changelog author="neilb@suse.com" date="1501761600">- NFS: Optimize fallocate by refreshing mapping when needed
  (git-fixes).
- NFS: invalidate file size when taking a lock (git-fixes).
- commit c4f79ce</changelog>
<changelog author="hare@suse.de" date="1501761601">- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state
  (bsc#1013887).
- commit 5afe7e1</changelog>
<changelog author="hare@suse.de" date="1501761602">- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Delete
  patches.drivers/scsi_transport_fc-do-not-call-queue_work-under-lock.patch.
- Delete
  patches.drivers/scsi_transport_fc-fixup-race-condition-in-fc_rport_f.patch.
- commit c4cc456</changelog>
<changelog author="hare@suse.de" date="1501761603">- scsi: kABI fix for new state STARGET_CREATED_REMOVE
  (bsc#1013887).
- commit 31b7cb2</changelog>
<changelog author="ohering@suse.de" date="1501761604">- apply mainline tags to some hyperv patches
- commit 6d7a038</changelog>
<changelog author="ohering@suse.de" date="1501761605">- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- commit 697559f</changelog>

</package>
<package pkgid="8cb94c334c6d7dffe7ce112b3307f133e0bddae9b3acc76607a1588cdea515cd" name="kernel-vanilla-devel" arch="x86_64">
    <version epoch="0" ver="4.4.85" rel="22.1"/>

<changelog author="tiwai@suse.de" date="1503921600">- ALSA: hda - Workaround for i915 KBL breakage
  (bsc#1048356,bsc#1047989,bsc#1055272).
- commit 59f558b</changelog>
<changelog author="jroedel@suse.de" date="1503921601">- KVM: x86: kABI workaround for PKRU fixes (bsc#1055935).
- KVM: x86: block guest protection keys unless the host has them
  enabled (bsc#1055935).
- KVM, pkeys: do not use PKRU value in vcpu-&gt;arch.guest_fpu.state
  (bsc#1055935).
- KVM: x86: simplify handling of PKRU (bsc#1055935).
- commit 73c5fa7</changelog>
<changelog author="jroedel@suse.de" date="1503921602">- x86/mm: Fix use-after-free of ldt_struct (bsc#1055963).
- commit 33a84c6</changelog>
<changelog author="mkubecek@suse.cz" date="1504008000">- netfilter: x_tables: pack percpu counter allocations
  (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct to counter
  allocator (bsc#1052888).
- netfilter: x_tables: pass xt_counters struct instead of packet
  counter (bsc#1052888).
- netfilter: fix IS_ERR_VALUE usage (bsc#1052888).
- commit b2becbc</changelog>
<changelog author="aaptel@suse.com" date="1504008001">- CIFS: Fix maximum SMB2 header size (bsc#1056185).
- commit 0e3a8ef</changelog>
<changelog author="msuchanek@suse.de" date="1504008002">- Update
  patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 5ca4c20cfd37).
- commit 55556f0</changelog>
<changelog author="msuchanek@suse.de" date="1504008003">- tpm: fix: return rc when devm_add_action() fails (bsc#1020645,
  fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes
  8e0ee3c9faed).
- commit 3adf95a</changelog>
<changelog author="msuchanek@suse.de" date="1504008004">- tpm_tis_core: convert max timeouts from msec to jiffies
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit 55a04c2</changelog>
<changelog author="msuchanek@suse.de" date="1504008005">- tpm: read burstcount from TPM_STS in one 32-bit transaction
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes 27084efee0c3).
- commit 2467e3d</changelog>
<changelog author="msuchanek@suse.de" date="1504008006">- tpm_tis_core: Choose appropriate timeout for reading burstcount
  (bsc#1020645, fate#321435, fate#321507, fate#321600,
  bsc#1034048, git-fixes aec04cbdf723).
- commit a45063d</changelog>
<changelog author="jthumshirn@suse.de" date="1504180800">- scsi: qedf: Fix a potential NULL pointer dereference
  (bsc#1048912).
- commit 93ddbac</changelog>
<changelog author="jthumshirn@suse.de" date="1504180801">- nvme: fix hostid parsing (bsc#1049272).
- commit a975e13</changelog>
<changelog author="tbogendoerfer@suse.de" date="1504180802">- i40e/i40evf: fix out-of-bounds read of cpumask (bsc#1053685).
- commit 8523863</changelog>
<changelog author="jthumshirn@suse.de" date="1504180803">- scsi: qla2xxx: Fix an integer overflow in sysfs code
  (bsc#1056588, CVE-2017-14051).
- commit d5f0195</changelog>
<changelog author="hare@suse.de" date="1504180804">- megaraid_sas: Fix probing cards without io port (bsc#1053681).
- commit 8490f6c</changelog>
<changelog author="jeffm@suse.com" date="1504180805">- xfs/dmapi: fix incorrect file-&gt;f_path.dentry-&gt;d_inode usage
  (bsc#1055896).
- commit ce994e5</changelog>
<changelog author="mgorman@suse.de" date="1504267200">- mm, madvise: ensure poisoned pages are removed from per-cpu
  lists (VM hw poison -- git fixes).
- commit 8ba842e</changelog>
<changelog author="jthumshirn@suse.de" date="1504267201">- dm mpath: do not lock up a CPU with requeuing activity
  (bsc#1048912).
- commit c765dac</changelog>
<changelog author="mbrugger@suse.com" date="1504267202">- drivers: net: xgene: Fix wrong logical operation (bsc#1056827).
- of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
  (bsc#1056827).
- commit 2a241ea</changelog>
<changelog author="jslaby@suse.cz" date="1504267203">- Linux 4.4.85 (bnc#1012382 bsc#1005917 bsc#1020657 bsc#1028819
  bsc#1031717 bsc#1031784).
- Refresh
  patches.fixes/0006-x86-ioapic-Fix-setup_res-failing-to-get-resource.patch.
- Delete
  patches.drivers/ACPI-APEI-Add-missing-synchronize_rcu-on-NOTIFY_SCI-.
- Delete
  patches.drivers/ALSA-hda-Add-stereo-mic-quirk-for-Lenovo-G50-70-17aa.
- Delete
  patches.drivers/ASoC-simple-card-don-t-fail-if-sysclk-setting-is-not.
- Delete
  patches.fixes/0001-acpi-ioapic-clear-on-stack-resource-before-using-it.
- Delete
  patches.fixes/Bluetooth-bnep-fix-possible-might-sleep-error-in-bne.patch.
- Delete
  patches.fixes/Bluetooth-cmtp-fix-possible-might-sleep-error-in-cmt.patch.
- Delete
  patches.fixes/Bluetooth-hidp-fix-possible-might-sleep-error-in-hid.patch.
- commit 0ec7e2c</changelog>

</package>
<package pkgid="426844d85d4bc8e0bbee460dac9b210cb554f8d52680478168cea63e8f56d26e" name="kernel-vanilla-devel" arch="x86_64">
    <version epoch="0" ver="4.4.87" rel="25.1"/>

<changelog author="tbogendoerfer@suse.de" date="1504612800">- cxgb4: Fix stack out-of-bounds read due to wrong size to
  t4_record_mbox() (bsc#1021424 bsc#1022743).
- commit 3c5ffd9</changelog>
<changelog author="dchang@suse.com" date="1504699200">- bnxt_en: Fix NULL pointer dereference in reopen failure path
  (bnc#1038583).
- bnxt_en: fix pci cleanup in bnxt_init_one() failure path
  (bnc#1038583).
- bnxt_en: Fix NULL pointer dereference in a failure path during
  open (bnc#1038583).
- bnxt_en: Refactor TPA code path (bnc#1038583).
- bnxt_en: Fix and clarify link_info-&gt;advertising (bnc#1038583).
- bnxt_en: Fix "uninitialized variable" bug in TPA code path
  (bnc#1038583).
- bnxt: do not busy-poll when link is down (bnc#1038583).
- bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583).
- bnxt: add a missing rcu synchronization (bnc#1038583).
- bnxt_en: Fix VF virtual link state (bnc#1038583).
- bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583).
- bnxt_en: Pad TX packets below 52 bytes (bnc#1038583).
- bnxt_en: Fix TX push operation on ARM64 (bnc#1038583).
- bnxt_en: Enable MRU enables bit when configuring VNIC MRU
  (bnc#1038583).
- bnxt_en: initialize rc to zero to avoid returning garbage
  (bnc#1038583).
- commit c8f062a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504699201">- arm64: CN99xx: refresh smmu workaround from mainline
- iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT
  model number definitions (bsc#1036060).
- ACPICA: IORT: Update SMMU models for revision C (bsc#1036060).
- Refresh
  patches.drivers/0002-ACPI-IORT-Fixup-SMMUv3-resource-size-for-Cavium-Thun.patch.
- Refresh
  patches.drivers/0002-iommu-arm-smmu-Plumb-in-new-ACPI-identifiers.patch.
- Refresh
  patches.drivers/0003-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0004-iommu-arm-smmu-v3-Add-workaround-for-Cavium-ThunderX.patch.
- Refresh
  patches.drivers/0007-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v2.patch.
- Refresh
  patches.drivers/0008-iommu-arm-smmu-ACPI-Enable-Cavium-SMMU-v3.patch.
- Delete
  patches.drivers/0009-acpi-iort-thunderx2-enable-smmu-resource-size-errata.patch.
- commit ebadc69</changelog>
<changelog author="jlee@suse.com" date="1504699202">- ACPICA: Namespace: fix operand cache leak (bsc#1049580,
  CVE-2017-11472).
- commit 967361f</changelog>
<changelog author="jslaby@suse.cz" date="1504785600">- Linux 4.4.87 (bnc#1012382 bsc#1057015).
- Delete patches.fixes/ceph-fix-readpage-from-fscache.patch.
- commit dd78184</changelog>
<changelog author="mkubecek@suse.cz" date="1504785601">- tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
  (CVE-2017-14106 bsc#1056982).
- commit a7aa21b</changelog>
<changelog author="mkubecek@suse.cz" date="1504785602">- rtnetlink: fix rtnl_vfinfo_size (bsc#1056261).
- commit c8c19d2</changelog>
<changelog author="jack@suse.cz" date="1504785603">- xfs: fix inobt inode allocation search optimization
  (bsc#1012829).
- commit 0fb3a7b</changelog>
<changelog author="jack@suse.cz" date="1504785604">- gfs2: Don't clear SGID when inheriting ACLs (bsc#1012829).
- commit 2fc4ee3</changelog>
<changelog author="jack@suse.cz" date="1504785605">- ubifs: Don't leak kernel memory to the MTD (bsc#1012829).
- commit c846123</changelog>
<changelog author="jack@suse.cz" date="1504785606">- ubifs: Correctly evict xattr inodes (bsc#1012829).
- commit bbe0c3c</changelog>
<changelog author="jthumshirn@suse.de" date="1504872000">- ahci: don't use MSI for devices with the silly Intel NVMe
  remapping scheme (bsc#1048912).
- commit 17b7276</changelog>
<changelog author="tiwai@suse.de" date="1504872001">- iwlwifi: mvm: don't send CTDP commands via debugfs if not
  supported (bsc#1031717).
- commit 13cab0a</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1504872002">- drivers: base: cacheinfo: fix boot error message when acpi is
  enabled (bsc#1057849).
- commit 7cd9f6f</changelog>
<changelog author="tiwai@suse.de" date="1504872003">- cpufreq: intel_pstate: Disable energy efficiency optimization
  (bsc#1054654).
- commit 5d621ee</changelog>
<changelog author="mgorman@suse.de" date="1505131200">- mm/page_alloc.c: apply gfp_allowed_mask before the first
  allocation attempt (bnc#971975 VM -- git fixes).
- commit 89e8220</changelog>
<changelog author="msuchanek@suse.de" date="1505131201">- ibmvnic: Clean up resources on probe failure (fate#323285,
  bsc#1058116).
- commit 2cb2b1b</changelog>
<changelog author="tiwai@suse.de" date="1505217600">- net/bluetooth: Validate output buffer length (CVE-2017-1000251,
  bsc#1057389).
- commit 545c055</changelog>
<changelog author="neilb@suse.com" date="1505304000">- md/raid5: fix a race condition in stripe batch (linux-stable).
- commit 5bedfa6</changelog>
<changelog author="neilb@suse.com" date="1505304001">- NFS: flush data when locking a file to ensure cache coherence
  for mmap (bsc#981309).
- commit 65980ce</changelog>

</package>
<package pkgid="40f4aa9026029232a3249fe4d77d0ce9039f1c1d64a36125048453bb609f40de" name="kernel-vanilla-devel" arch="x86_64">
    <version epoch="0" ver="4.4.90" rel="28.1"/>

<changelog author="yousaf.kaukab@suse.com" date="1506686400">- perf: xgene: Move PMU leaf functions into function pointer
  structure (bsc#1036737).
- perf: xgene: Parse PMU subnode from the match table
  (bsc#1036737).
- perf: xgene: Include module.h (bsc#1036737).
- commit 65d3a98</changelog>
<changelog author="mbrugger@suse.com" date="1506686401">- efi/fb: Correct PCI_STD_RESOURCE_END usage (bsc#1051987).
- efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
  (bsc#1051987).
- commit f6a3dee</changelog>
<changelog author="jroedel@suse.de" date="1506686402">- PCI: Allow PCI express root ports to find themselves
  (bsc#1061046).
- PCI: fix oops when try to find Root Port for a PCI device
  (bsc#1061046).
- commit 20af6d0</changelog>
<changelog author="jroedel@suse.de" date="1506686403">- PCI: Mark AMD Stoney GPU ATS as broken (bsc#1061046).
- commit 1dd56b0</changelog>
<changelog author="jroedel@suse.de" date="1506686404">- blacklist.conf: Blacklist d12fe87e62d7 signal/testing: Don't look for __SI_FAULT in userspace
  It just fixes a self-test.
- commit c7501f3</changelog>
<changelog author="jroedel@suse.de" date="1506686405">- genirq: Fix for_each_action_of_desc() macro (bsc#1061064).
- commit 58f59dc</changelog>
<changelog author="jroedel@suse.de" date="1506686406">- iommu/vt-d: Avoid calling virt_to_phys() on null pointer
  (bsc#1061067).
- commit 9a0b0e4</changelog>
<changelog author="gqjiang@suse.com" date="1506772800">- md/bitmap: disable bitmap_resize for file-backed bitmaps
  (bsc#1061172).
- commit df0593d</changelog>
<changelog author="tiwai@suse.de" date="1506945600">- README.BRANCH: Update maintainer
- commit f117f62</changelog>
<changelog author="jslaby@suse.cz" date="1506945601">- Linux 4.4.89 (bnc#1012382).
- Revert "ipv6: add rcu grace period before freeing fib6_node"
  (kabi).
- Revert "ipv6: fix sparse warning on rt6i_node" (kabi).
- Revert "Revert "net: fix percpu memory leaks"" (kabi).
- Revert "Revert "net: use lib/percpu_counter API for
  fragmentation mem accounting"" (kabi).
- ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
  (bnc#1012382).
- ipv6: add rcu grace period before freeing fib6_node
  (bnc#1012382).
- ipv6: fix sparse warning on rt6i_node (bnc#1012382).
- qlge: avoid memcpy buffer overflow (bnc#1012382).
- Revert "net: phy: Correctly process PHY_HALTED in
  phy_stop_machine()" (bnc#1012382).
- Revert "net: use lib/percpu_counter API for fragmentation mem
  accounting" (bnc#1012382).
- Revert "net: fix percpu memory leaks" (bnc#1012382).
- gianfar: Fix Tx flow control deactivation (bnc#1012382).
- ipv6: fix memory leak with multiple tables during netns
  destruction (bnc#1012382).
- ipv6: fix typo in fib6_net_exit() (bnc#1012382).
- f2fs: check hot_data for roll-forward recovery (bnc#1012382).
- x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core
  dumps (bnc#1012382).
- md/raid5: release/flush io in raid5_do_work() (bnc#1012382).
- nfsd: Fix general protection fault in release_lock_stateid()
  (bnc#1012382).
- mm: prevent double decrease of nr_reserved_highatomic
  (bnc#1012382).
- tty: improve tty_insert_flip_char() fast path (bnc#1012382).
- tty: improve tty_insert_flip_char() slow path (bnc#1012382).
- tty: fix __tty_insert_flip_char regression (bnc#1012382).
- Input: i8042 - add Gigabyte P57 to the keyboard reset table
  (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix quiet NaN
  propagation (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MAXA|MIN|MINA&gt;.&lt;D|S&gt;: Fix cases of both
  inputs zero (bnc#1012382).
- MIPS: math-emu: &lt;MAX|MIN&gt;.&lt;D|S&gt;: Fix cases of both inputs
  negative (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of input values
  with opposite signs (bnc#1012382).
- MIPS: math-emu: &lt;MAXA|MINA&gt;.&lt;D|S&gt;: Fix cases of both infinite
  inputs (bnc#1012382).
- MIPS: math-emu: MINA.&lt;D|S&gt;: Fix some cases of infinity and
  zero inputs (bnc#1012382).
- crypto: AF_ALG - remove SGL terminator indicator when chaining
  (bnc#1012382).
- ext4: fix incorrect quotaoff if the quota feature is enabled
  (bnc#1012382).
- ext4: fix quota inconsistency during orphan cleanup for
  read-only mounts (bnc#1012382).
- powerpc: Fix DAR reporting when alignment handler faults
  (bnc#1012382).
- block: Relax a check in blk_start_queue() (bnc#1012382).
- skd: Avoid that module unloading triggers a use-after-free
  (bnc#1012382).
- skd: Submit requests to firmware before triggering the doorbell
  (bnc#1012382).
- scsi: zfcp: fix queuecommand for scsi_eh commands when DIX
  enabled (bnc#1012382).
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress
  path (bnc#1012382).
- scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response
  trace records (bnc#1012382).
- scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to
  correlate with HBA (bnc#1012382).
- scsi: zfcp: fix missing trace records for early returns in
  TMF eh handlers (bnc#1012382).
- scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace
  records (bnc#1012382).
- scsi: zfcp: trace HBA FSF response by default on dismiss or
  timedout late response (bnc#1012382).
- scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
  (bnc#1012382).
- scsi: megaraid_sas: Check valid aen class range to avoid kernel
  panic (bnc#1012382).
- scsi: megaraid_sas: Return pended IOCTLs with cmd_status
  MFI_STAT_WRONG_STATE in case adapter is dead (bnc#1012382).
- scsi: storvsc: fix memory leak on ring buffer busy
  (bnc#1012382).
- scsi: sg: remove 'save_scat_len' (bnc#1012382).
- scsi: sg: use standard lists for sg_requests (bnc#1012382).
- scsi: sg: off by one in sg_ioctl() (bnc#1012382).
- scsi: sg: factor out sg_fill_request_table() (bnc#1012382).
- scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
  (bnc#1012382).
- ftrace: Fix selftest goto location on error (bnc#1012382).
- tracing: Apply trace_clock changes to instance max buffer
  (bnc#1012382).
- ARC: Re-enable MMU upon Machine Check exception (bnc#1012382).
- PCI: shpchp: Enable bridge bus mastering if MSI is enabled
  (bnc#1012382).
- media: v4l2-compat-ioctl32: Fix timespec conversion
  (bnc#1012382).
- media: uvcvideo: Prevent heap overflow when accessing mapped
  controls (bnc#1012382).
- bcache: initialize dirty stripes in flash_dev_run()
  (bnc#1012382).
- bcache: Fix leak of bdev reference (bnc#1012382).
- bcache: do not subtract sectors_to_gc for bypassed IO
  (bnc#1012382).
- bcache: correct cache_dirty_target in __update_writeback_rate()
  (bnc#1012382).
- bcache: Correct return value for sysfs attach errors
  (bnc#1012382).
- bcache: fix for gc and write-back race (bnc#1012382).
- bcache: fix bch_hprint crash and improve output (bnc#1012382).
- ftrace: Fix memleak when unregistering dynamic ops when tracing
  disabled (bnc#1012382).
- Refresh
  patches.drivers/0130-block-drivers-fs-rename-REQ_FLUSH-to-REQ_PREFLUSH.patch.
- Refresh
  patches.suse/msft-hv-1181-scsi-storvsc-Enable-multi-queue-support.patch.
- blacklist.conf: add one more
- commit 1a0854f</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1506945602">- Update config files.
- commit 6487281</changelog>
<changelog author="msuchanek@suse.de" date="1506945603">- powerpc/perf: Factor out PPMU_ONLY_COUNT_RUN check code from
  power8 (fate#321438, bsc#1053043, git-fixes efe881afdd999).
- commit 7e8512d</changelog>
<changelog author="msuchanek@suse.de" date="1506945604">- powerpc/perf: Cleanup of PM_BR_CMPL vs. PM_BRU_CMPL in Power9
  event list (bsc#1056686, fate#321438, bsc#1047238, git-fixes
  34922527a2bc).
- commit fe3b7de</changelog>
<changelog author="lduncan@suse.com" date="1507118400">- scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx
  doesn't parse nlmsg properly (bsc#1059051 CVE-2017-14489).
- commit 318fa1b</changelog>
<changelog author="jroedel@suse.de" date="1507204800">- perf/x86: Fix RDPMC vs. mm_struct tracking (bsc#1061831).
- x86/mm: Fix fault error path using unsafe vma pointer
  (fate#321300).
- commit 9eb68f6</changelog>
<changelog author="jroedel@suse.de" date="1507204801">- perf/x86: kABI Workaround for 'perf/x86: Fix RDPMC vs. mm_struct
  tracking' (bsc#1061831).
- commit 239215e</changelog>
<changelog author="jroedel@suse.de" date="1507204802">- x86/ldt: Fix off by one in get_segment_base() (bsc#1061872).
- commit 962661d</changelog>
<changelog author="tbogendoerfer@suse.de" date="1507291200">- iw_cxgb4: put ep reference in pass_accept_req() (bsc#321658
  FATE#1005778 bsc#321660 FATE#1005780 bsc#321661 FATE#1005781).
- commit efd2890</changelog>
<changelog author="jslaby@suse.cz" date="1507291201">- Linux 4.4.90 (bnc#1012382).
- cifs: release auth_key.response for reconnect (bnc#1012382).
- mac80211: flush hw_roc_start work before cancelling the ROC
  (bnc#1012382).
- KVM: PPC: Book3S: Fix race and leak in
  kvm_vm_ioctl_create_spapr_tce() (bnc#1012382).
- tracing: Fix trace_pipe behavior for instance traces
  (bnc#1012382).
- tracing: Erase irqsoff trace with empty write (bnc#1012382).
- md/raid5: preserve STRIPE_ON_UNPLUG_LIST in
  break_stripe_batch_list (bnc#1012382).
- crypto: talitos - Don't provide setkey for non hmac hashing algs
  (bnc#1012382).
- crypto: talitos - fix sha224 (bnc#1012382).
- KEYS: fix writing past end of user-supplied buffer in
  keyring_read() (bnc#1012382).
- KEYS: prevent creating a different user's keyrings
  (bnc#1012382).
- KEYS: prevent KEYCTL_READ on negative key (bnc#1012382).
- powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
  (bnc#1012382).
- Fix SMB3.1.1 guest authentication to Samba (bnc#1012382).
- SMB: Validate negotiate (to protect against downgrade) even
  if signing off (bnc#1012382).
- SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
  (bnc#1012382).
- vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
  (bnc#1012382).
- bsg-lib: don't free job in bsg_prepare_job (bnc#1012382).
- seccomp: fix the usage of get/put_seccomp_filter() in
  seccomp_get_filter() (bnc#1012382).
- arm64: Make sure SPsel is always set (bnc#1012382).
- arm64: fault: Route pte translation faults via
  do_translation_fault (bnc#1012382).
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
  (CVE-2017-1000252 bnc#1012382 bsc#1058038).
- PCI: Fix race condition with driver_override (bnc#1012382).
- btrfs: fix NULL pointer dereference from free_reloc_roots()
  (bnc#1012382).
- btrfs: propagate error to btrfs_cmp_data_prepare caller
  (bnc#1012382).
- btrfs: prevent to set invalid default subvolid (bnc#1012382).
- x86/fpu: Don't let userspace set bogus xcomp_bv (bnc#1012382).
- gfs2: Fix debugfs glocks dump (bnc#1012382).
- timer/sysclt: Restrict timer migration sysctl values to 0 and 1
  (bnc#1012382).
- cxl: Fix driver use count (bnc#1012382).
- dmaengine: mmp-pdma: add number of requestors (bnc#1012382).
- ARM: pxa: add the number of DMA requestor lines (bnc#1012382).
- ARM: pxa: fix the number of DMA requestor lines (bnc#1012382).
- KVM: VMX: use cmpxchg64 (bnc#1012382).
- video: fbdev: aty: do not leak uninitialized padding in clk
  to userspace (bnc#1012382).
- swiotlb-xen: implement xen_swiotlb_dma_mmap callback
  (bnc#1012382).
- fix xen_swiotlb_dma_mmap prototype (bnc#1012382).
- Refresh
  patches.arch/0004-kvm-pkeys-save-restore-pkru-when-guest-host-switches.
- Refresh
  patches.arch/cxl-Fix-coredump-generation-when-cxl_get_fd-is-used.patch.
- Refresh
  patches.arch/cxl-Introduce-implementation-specific-API.patch.
- Refresh
  patches.fixes/kvm-vmx-check-apicv-is-active-before-using-vt-d-posted-interrupt.
- Delete
  patches.fixes/0001-KVM-VMX-Do-not-BUG-on-out-of-bounds-guest-IRQ.patch.
- commit 4ca41b9</changelog>
<changelog author="jthumshirn@suse.de" date="1507291202">- RDMA/bnxt_re: Allocate multiple notification queues
  (bsc#1037579).
- RDMA/bnxt_re: Implement the alloc/get_hw_stats callback
  (bsc#1037579).
- commit e075f7e</changelog>

</package>
<package pkgid="8441fec05d5504ab33642d5c6fc1f862ebdcc83c4bd6c27da0ea3e690d866a99" name="kernel-vanilla-devel" arch="x86_64">
    <version epoch="0" ver="4.4.92" rel="31.1"/>

<changelog author="mhocko@suse.cz" date="1508155200">- mm: meminit: mark init_reserved_page as __meminit (bnc#1063509).
- commit 38dba8a</changelog>
<changelog author="jthumshirn@suse.de" date="1508155201">- nvme: fix sqhd reference when admin queue connect fails
  (bsc#1063349).
- nvmet: implement valid sqhd values in completions (bsc#1063349).
- nvme: allow timed-out ios to retry (bsc#1063349).
- nvme: stop aer posting if controller state not live
  (bsc#1063349).
- commit ee22c59</changelog>
<changelog author="jthumshirn@suse.de" date="1508155202">- KABI fixup struct nvmet_sq (bsc#1063349).
- commit a627ca6</changelog>
<changelog author="jthumshirn@suse.de" date="1508241600">- scsi: libfc: fix a deadlock in fc_rport_work (bsc#1063695).
- commit ae61c0c</changelog>
<changelog author="tiwai@suse.de" date="1508241601">- Rewrote KVM kABI fix patches for addressing regressions (bsc#1063570)
  Take another approach for fixing kABI breakage for KVM:
  patches.kabi/0001-kABI-Workaround-kABI-breakage-of-AMD-AVIC-fixes.patch
  patches.kabi/kabi-KVM-x86-kABI-workaround-for-PKRU-fixes.patch
- commit 5a2a299</changelog>
<changelog author="msuchanek@suse.de" date="1508241602">- blacklist 0e7736c6b806 powerpc/powernv: Fix data type for @r in
  pnv_ioda_parse_m64_window()
- commit 60bb40c</changelog>
<changelog author="mcgrof@suse.com" date="1508241603">- xfs: handle error if xfs_btree_get_bufs fails (bsc#1059863).
- commit 3a2bead</changelog>
<changelog author="dchang@suse.com" date="1508328000">- i40e: Initialize 64-bit statistics TX ring seqcount (bsc#1024346
  FATE#321239 bsc#1024373 FATE#321247).
- commit 406a575</changelog>
<changelog author="jthumshirn@suse.de" date="1508328001">- scsi: qla2xxx: Fix uninitialized work element
  (bsc#1019675,FATE#321701).
- commit a6fc1d5</changelog>
<changelog author="jthumshirn@suse.de" date="1508328002">- scsi: lpfc: Ensure io aborts interlocked with the target
  (bsc#1056587).
- commit fe3a315</changelog>
<changelog author="mgorman@suse.de" date="1508328003">- Revert "x86/acpi: Enable MADT APIs to return disabled apicids"
  (bnc#1056230).
- Revert "x86/acpi: Set persistent cpuid &lt;-&gt; nodeid mapping when
  booting" (bnc#1056230).
- acpi/processor: Check for duplicate processor ids at hotplug
  time (bnc#1056230).
- acpi/processor: Implement DEVICE operator for processor
  enumeration (bnc#1056230).
- x86/acpi: Restore the order of CPU IDs (bnc#1056230).
- x86/cpu: Remove unused and undefined __generic_processor_info()
  declaration (bnc#1056230).
- Refresh
  patches.arch/0370-ACPI-bus-Support-for-platform-initiated-graceful-shu.patch.
- Delete
  patches.fixes/x86-apic-Prevent-pointless-warning-messages.patch.
- commit 261e94c</changelog>
<changelog author="yousaf.kaukab@suse.com" date="1508328004">- supported.conf: enable dw_mmc-rockchip driver
  References: bsc#1064064
- commit 88a4fbb</changelog>
<changelog author="mcgrof@suse.com" date="1508328005">- mac80211: accept key reinstall without changing anything
  (CVE-2017-13080 bsc#1063667).
- commit 632ec59</changelog>
<changelog author="bpoirier@suse.com" date="1508328006">- Refresh
  patches.drivers/hns-0002-net-phy-Fix-lack-of-reference-count-on-PHY-driver.patch.
- Refresh
  patches.drivers/hns-0003-phy-fix-error-case-of-phy_led_triggers_-un-register.patch.
  Refresh patch order in sorted section. I've ignored some rdma patches which
  need updated upstream status.
- commit bbb1f9d</changelog>
<changelog author="bpoirier@suse.com" date="1508328007">- team: call netdev_change_features out of team lock
  (bsc#1055567).
- commit 9c31536</changelog>
<changelog author="jthumshirn@suse.de" date="1508414400">- nvmet: synchronize sqhd update (bsc#1063349).
- commit 2d5c7fb</changelog>
<changelog author="msuchanek@suse.de" date="1508500800">- Refresh metadata on ibmvnic patches.
- commit 3c75cec</changelog>
<changelog author="mkubecek@suse.cz" date="1508500801">- packet: in packet_do_bind, test fanout with bind_lock held
  (CVE-2017-15649 bsc#1064388).
- packet: hold bind lock when rebinding to fanout hook
  (CVE-2017-15649 bsc#1064388).
- commit 058e1ce</changelog>
<changelog author="msuchanek@suse.de" date="1508500802">- Remove superfluous hunk in bigmem backport (bsc#1064436).
  Refresh patches.arch/powerpc-bigmem-16-mm-Add-addr_limit-to-mm_context-and-use-it-t.patch.
- commit 719fcb6</changelog>
<changelog author="hare@suse.de" date="1508500803">- scsi: sg: only check for dxfer_len greater than 256M
  (bsc#1064206).
- scsi: sg: don't return bogus Sg_requests (bsc#1064206).
- scsi: sg: close race condition in sg_remove_sfp_usercontext()
  (bsc#1064206).
- commit a69df70</changelog>

</package>
<package pkgid="4588df439f84c60f034747d7e4164de463e1330dc4ac4e4c0314df19b8a2e2b1" name="kexec-tools" arch="src">
    <version epoch="0" ver="2.0.12" rel="6.1"/>

<changelog author="dmueller@suse.com" date="1391428800">- enable build for arm / aarch64
- add kexec-aarch64.patch
- add device-tree-buffer-overflows.patch</changelog>
<changelog author="dmueller@suse.com" date="1391515200">- add 0001-kexec-fs2dt-fix-endianess-conversion.patch:
  * fix ppc64 and arm
- refresh device-tree-buffer-overflows.patch with the version
  that went upstream</changelog>
<changelog author="tonyj@suse.com" date="1391601600">- Update to version 2.0.5
  Drop patch 'device-tree-buffer-overflows.patch' (upstream)
  Drop patch '0001-kexec-fs2dt-fix-endianess-conversion.patch' (upstream)
- Rename aarch64 patch to 'kexec-tools-enable-aarch64.patch' and rebase to
  version from Linaro git.
- Add 'kexec-tools-enable-aarch64-fixup.patch' to solve arm libfdt breakage
  with Linaro patch.
- Enable ppc64le
- Refresh patches for context.
- Add following patches (pending upstream):
  'kexec-tools-i386-bzimage_efi.patch' to fix i386 breakage.
  'kexec-tools-xen-e820-redefinition.patch' to fix xen/820 breakage.</changelog>
<changelog author="tonyj@suse.com" date="1391688000">- Drop obsolete /etc/init.d/kexec (bnc# 862143).
- Handle btrfs root subvolume (bnc# 862143c35)
- Create kexec-load.service (bnc# 862143)
- Update kexec-bootloader manpage (document reboot using kexec)
- Remove old 11.1 conditionals
- Update kexec-tools-i386-bzimage_efi.patch and
  kexec-tools-xen-e820-redefinition.patch with upstream commit ids</changelog>
<changelog author="tonyj@suse.com" date="1395144000">- Reserve mmconf areas for kdump kernel via memmap=X$Y in cmdline
  (bnc#819777 [original: bnc#804800]: fix still needed for SGI UV systems).
  New patch: kexec-tools-set-mmconf-reserved.patch
- Disable stack protector for ppc64le (bnc#869161)
  New patch: kexec-tools-ppc64-purgatory-disabling-gcc-stack-protection.patch
- Disable erroneous (efi memory descriptor version) message (bnc#867785c5)
  New patch: kexec-tools-zero-efi-info.patch</changelog>
<changelog author="tonyj@suse.com" date="1397217600">- Expose flattened device trees (ppc64le) to new kexec'd kernel in Big Endian
  format (bnc#873169)
    New patch: kexec-tools-fs2dt-fix-endianess-issue-with-initrd-base-and-size.patch
- Update patch headers to reflect upstream commit id's:
    Change patch: kexec-tools-ppc64-purgatory-disabling-gcc-stack-protection.patch
    Change patch: kexec-tools-zero-efi-info.patch</changelog>
<changelog author="tonyj@suse.com" date="1398945600">- Device tree values should be big endian for ppc64le (bnc#875485)
  New patch: kexec-tools-ppc64-purgatory-device-tree-values-should-be-read-stored-in-big-endian.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1405857600">- Remove insserv dependency; the package doesn't provide any sysvinit
  script</changelog>
<changelog author="tonyj@suse.com" date="1406376000">- Fix ELF header endianess for ppc64le kdump (bnc#888150)
  New patch: kexec-tools-kdump-fix-elf-header-endianess.patch</changelog>
<changelog author="tonyj@suse.com" date="1408104000">- Do not package kdump.8 as it is only a placeholder, full man page is provided
  by kdump package (bnc#892090)</changelog>
<changelog author="tonyj@suse.com" date="1408449600">- custom autoconf action was no longer setting HAVE_LIBXENCTRL (bnc#886873)</changelog>
<changelog author="jlee@suse.com" date="1430740800">- Add 'kexec-tools/kexec-tools-Provide-an-option-to-use-new-kexec-system-call.patch'
  to support kdump on secure boot. (fate#315018, bnc#884453)</changelog>
<changelog author="ptesarik@suse.com" date="1444132800">- kexec-tools-load-crash-kernel-high.patch: Load crash kernel high
  on x86 (bsc#946365).</changelog>
<changelog author="jlee@suse.com" date="1444824000">- kexec-tools-xen-inhibit-file-based-syscall.patch: To inhibit file
  based syscall on XEN, using old syscall to load crash kernel.
  (bsc#947172)</changelog>
<changelog author="ptesarik@suse.cz" date="1445860800">- kexec-tools-vmcoreinfo-in-xen.patch: Store XEN_VMCOREINFO in
  panic kernel ELF notes.
  (bsc#951740)</changelog>
<changelog author="ohering@suse.de" date="1462276800">- Adjust linking to libxenctrl to xen-4.7 API (fate#319989)</changelog>
<changelog author="ptesarik@suse.com" date="1464609600">- kexec-tools-ppc64-reduce-elf-loads.patch: ppc64: Reduce number of
  ELF LOAD segments (bsc#981339).</changelog>
<changelog author="tonyj@suse.com" date="1464955200">- Update to version 2.0.12 (FATE#320915, bsc#980545)
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.5..v2.0.12
  Drop following patches (upstream):
    kexec-tools-Provide-an-option-to-use-new-kexec-system-call.patch
    kexec-tools-fs2dt-fix-endianess-issue-with-initrd-base-and-size.patch
    kexec-tools-i386-bzimage_efi.patch
    kexec-tools-kdump-fix-elf-header-endianess.patch
    kexec-tools-load-crash-kernel-high.patch
    kexec-tools-ppc64-purgatory-device-tree-values-should-be-read-stored-in-big-endian.patch
    kexec-tools-zero-efi-info.patch
  Refresh following patches for SLE12 (context):
    kexec-tools-vmcoreinfo-in-xen.patch
    kexec-tools-xen-balloon-up.patch
    kexec-tools-xen-e820-redefinition.patch
    kexec-tools-xen-static.patch
  Temporarily disable following SGI patch pending further analysis
    kexec-tools-set-mmconf-reserved.patch</changelog>
<changelog author="carnold@suse.com" date="1494417600">- kexec-tools-xen-static.patch: xen breaks kexec-tools build
  (bsc#1037779)
  See also matching fix in xen-devel package</changelog>
<changelog author="bwiedemann@suse.com" date="1500984000">- fix kexec-bootloader with separate /boot partition (boo#1033599)</changelog>

</package>
<package pkgid="1c9a138fbd9d24a4b8f9baa7e9b16ae9ef2b5e84c49820dd9db02ed45ef87485" name="kexec-tools" arch="x86_64">
    <version epoch="0" ver="2.0.12" rel="6.1"/>

<changelog author="dmueller@suse.com" date="1391428800">- enable build for arm / aarch64
- add kexec-aarch64.patch
- add device-tree-buffer-overflows.patch</changelog>
<changelog author="dmueller@suse.com" date="1391515200">- add 0001-kexec-fs2dt-fix-endianess-conversion.patch:
  * fix ppc64 and arm
- refresh device-tree-buffer-overflows.patch with the version
  that went upstream</changelog>
<changelog author="tonyj@suse.com" date="1391601600">- Update to version 2.0.5
  Drop patch 'device-tree-buffer-overflows.patch' (upstream)
  Drop patch '0001-kexec-fs2dt-fix-endianess-conversion.patch' (upstream)
- Rename aarch64 patch to 'kexec-tools-enable-aarch64.patch' and rebase to
  version from Linaro git.
- Add 'kexec-tools-enable-aarch64-fixup.patch' to solve arm libfdt breakage
  with Linaro patch.
- Enable ppc64le
- Refresh patches for context.
- Add following patches (pending upstream):
  'kexec-tools-i386-bzimage_efi.patch' to fix i386 breakage.
  'kexec-tools-xen-e820-redefinition.patch' to fix xen/820 breakage.</changelog>
<changelog author="tonyj@suse.com" date="1391688000">- Drop obsolete /etc/init.d/kexec (bnc# 862143).
- Handle btrfs root subvolume (bnc# 862143c35)
- Create kexec-load.service (bnc# 862143)
- Update kexec-bootloader manpage (document reboot using kexec)
- Remove old 11.1 conditionals
- Update kexec-tools-i386-bzimage_efi.patch and
  kexec-tools-xen-e820-redefinition.patch with upstream commit ids</changelog>
<changelog author="tonyj@suse.com" date="1395144000">- Reserve mmconf areas for kdump kernel via memmap=X$Y in cmdline
  (bnc#819777 [original: bnc#804800]: fix still needed for SGI UV systems).
  New patch: kexec-tools-set-mmconf-reserved.patch
- Disable stack protector for ppc64le (bnc#869161)
  New patch: kexec-tools-ppc64-purgatory-disabling-gcc-stack-protection.patch
- Disable erroneous (efi memory descriptor version) message (bnc#867785c5)
  New patch: kexec-tools-zero-efi-info.patch</changelog>
<changelog author="tonyj@suse.com" date="1397217600">- Expose flattened device trees (ppc64le) to new kexec'd kernel in Big Endian
  format (bnc#873169)
    New patch: kexec-tools-fs2dt-fix-endianess-issue-with-initrd-base-and-size.patch
- Update patch headers to reflect upstream commit id's:
    Change patch: kexec-tools-ppc64-purgatory-disabling-gcc-stack-protection.patch
    Change patch: kexec-tools-zero-efi-info.patch</changelog>
<changelog author="tonyj@suse.com" date="1398945600">- Device tree values should be big endian for ppc64le (bnc#875485)
  New patch: kexec-tools-ppc64-purgatory-device-tree-values-should-be-read-stored-in-big-endian.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1405857600">- Remove insserv dependency; the package doesn't provide any sysvinit
  script</changelog>
<changelog author="tonyj@suse.com" date="1406376000">- Fix ELF header endianess for ppc64le kdump (bnc#888150)
  New patch: kexec-tools-kdump-fix-elf-header-endianess.patch</changelog>
<changelog author="tonyj@suse.com" date="1408104000">- Do not package kdump.8 as it is only a placeholder, full man page is provided
  by kdump package (bnc#892090)</changelog>
<changelog author="tonyj@suse.com" date="1408449600">- custom autoconf action was no longer setting HAVE_LIBXENCTRL (bnc#886873)</changelog>
<changelog author="jlee@suse.com" date="1430740800">- Add 'kexec-tools/kexec-tools-Provide-an-option-to-use-new-kexec-system-call.patch'
  to support kdump on secure boot. (fate#315018, bnc#884453)</changelog>
<changelog author="ptesarik@suse.com" date="1444132800">- kexec-tools-load-crash-kernel-high.patch: Load crash kernel high
  on x86 (bsc#946365).</changelog>
<changelog author="jlee@suse.com" date="1444824000">- kexec-tools-xen-inhibit-file-based-syscall.patch: To inhibit file
  based syscall on XEN, using old syscall to load crash kernel.
  (bsc#947172)</changelog>
<changelog author="ptesarik@suse.cz" date="1445860800">- kexec-tools-vmcoreinfo-in-xen.patch: Store XEN_VMCOREINFO in
  panic kernel ELF notes.
  (bsc#951740)</changelog>
<changelog author="ohering@suse.de" date="1462276800">- Adjust linking to libxenctrl to xen-4.7 API (fate#319989)</changelog>
<changelog author="ptesarik@suse.com" date="1464609600">- kexec-tools-ppc64-reduce-elf-loads.patch: ppc64: Reduce number of
  ELF LOAD segments (bsc#981339).</changelog>
<changelog author="tonyj@suse.com" date="1464955200">- Update to version 2.0.12 (FATE#320915, bsc#980545)
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.5..v2.0.12
  Drop following patches (upstream):
    kexec-tools-Provide-an-option-to-use-new-kexec-system-call.patch
    kexec-tools-fs2dt-fix-endianess-issue-with-initrd-base-and-size.patch
    kexec-tools-i386-bzimage_efi.patch
    kexec-tools-kdump-fix-elf-header-endianess.patch
    kexec-tools-load-crash-kernel-high.patch
    kexec-tools-ppc64-purgatory-device-tree-values-should-be-read-stored-in-big-endian.patch
    kexec-tools-zero-efi-info.patch
  Refresh following patches for SLE12 (context):
    kexec-tools-vmcoreinfo-in-xen.patch
    kexec-tools-xen-balloon-up.patch
    kexec-tools-xen-e820-redefinition.patch
    kexec-tools-xen-static.patch
  Temporarily disable following SGI patch pending further analysis
    kexec-tools-set-mmconf-reserved.patch</changelog>
<changelog author="carnold@suse.com" date="1494417600">- kexec-tools-xen-static.patch: xen breaks kexec-tools build
  (bsc#1037779)
  See also matching fix in xen-devel package</changelog>
<changelog author="bwiedemann@suse.com" date="1500984000">- fix kexec-bootloader with separate /boot partition (boo#1033599)</changelog>

</package>
<package pkgid="4820fb9ef4157d41b784b0f260f419630e46508d13c2690995c89c6af796ddae" name="kio" arch="src">
    <version epoch="0" ver="5.32.0" rel="5.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Fix KIO::linkAs() to work as advertised, i.e.
    fail if dest already exists
  * Fix KIO::put("file:///path") to respect the umask (kde#359581)
  * Fix KIO::pasteActionText for null dest item and for empty URL
  * Add support for undoing symlink creation
  * GUI option to configure global MarkPartial for KIO slaves
  * Fix MaxCacheSize limited to 99 KiB
  * Add clipboard buttons to checksums tab
  * KNewFileMenu: fix copying template file from embedded resource
    (kde#359581)
  * KNewFileMenu: Fix creating link to application (kde#363673)
  * KNewFileMenu: Fix suggestion of new filename when file
    already exist in desktop
  * KNewFileMenu: ensure fileCreated() is emitted for
    app desktop files too
  * KNewFileMenu: fix creating symlinks with a relative target
  * KPropertiesDialog: simplify button box usage,
    fix behavior on Esc
  * KProtocolInfo: refill cache to find newly installed protocols
  * KIO::CopyJob: port to qCDebug
    (with its own area, since this can be quite verbose)
  * KPropertiesDialog: add Checksums tab
  * Clean url's path before initializing KUrlNavigator
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1470657600">- Remove workaround to install "Create New" templates as actual
  files, the issues with using the embedded resource are fixed in
  5.25.0</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * KPropertiesDialog: remove warning note from docu,
    the bug is gone
  * [test program] resolve relative paths using QUrl::fromUserInput
  * KUrlRequester: fix error box when selecting a file and
    reopening the file dialog
  * Provide a fallback if slaves don't list the . entry
    (kde#366795)
  * Fix creating symlink over "desktop" protocol
  * KNewFileMenu: when creating symlinks use KIO::linkAs
    instead of KIO::link
  * KFileWidget: fix double '/' in path
  * KUrlRequester: use static connect() syntax, was inconsistent
  * KUrlRequester: pass window() as parent for the QFileDialog
  * Avoid calling connect(null, .....) from KUrlComboRequester
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475668800">- Added Fix-launching-terminal-desktop-files-with-konsole.patch
  (kde#368949, boo#1003125)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1476014400">- Add 0001-Fix-kio-using-only-tls1.0.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014401">- Update to 5.27.0
  * Fix KIO slaves using only tls1.0
  * Fix ABI break in kio
  * KFileItemActions: add addPluginActionsTo(QMenu *)
  * Show copy buttons only after checksum has been calculated
  * Add missing feedback when computing a checksum (kde#368520)
  * Fix KFileItem::overlays returning empty string values
  * Fix launching terminal .desktop files with konsole
  * Classify nfs4 mounts as probablySlow, like nfs/cifs/..
  * KNewFileMenu: show New Folder action shortcut (kde#366075)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed 0001-Fix-kio-using-only-tls1.0.patch and
  Fix-launching-terminal-desktop-files-with-konsole.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Fix HTTP date format sent by kio_http to always use the C locale
    (kde#372005)
  * KACL: fix memory leaks detected by ASAN
  * Fix memory leaks in KIO::Scheduler, detected by ASAN
  * Removed duplicate clear button (kde#369377)
  * Fix editing autostart entries when /usr/local/share/applications
    doesn't exist (kde#371194)
  * [KOpenWithDialog] Hide TreeView header
  * Sanitize the symlink name buffer size (kde#369275)
  * Properly finish DropJobs when triggered is not emitted
    (kde#363936)
  * ClipboardUpdater: fix another crash on Wayland (kde#359883)
  * ClipboardUpdater: fix crash on Wayland (kde#370520)
  * Support non integer scale factors in KFileDelegate (kde#366451)
  * kntlm: Distinguish between NULL and empty domain
  * Don't show overwrite dialog if file name is empty
  * kioexec: use friendly filenames
  * Fix focus ownership if url is changed before showing the widget
  * Major performance improvement when turning previews off in the
    file dialog (kde#346403)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Ported to categorized logging
  * Fix compilation against WinXP SDK
  * Allow uppercase checksums matching in Checksums tab
    (kde#372518)
  * Never stretch the last (=date) column in the file dialog
    (kde#312747)
  * Import and update kcontrol docbooks for code in kio from
    kde-runtime master
  * [OS X] make KDE's trash use the OS X trash
  * SlaveBase: add documentation about event loops and
    notifications and kded modules
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488369600">- Add patch to fix security issue with proxy configuration (boo#1027520)
  * sanitize-url-for-proxy.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Too many changes to list here
  * Commit translations from l10n-kf5
  * Cookies KCM: disable "delete" button when there is no current item
  * Use the new shared library exported by KDocTools
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Sanitize URLs before passing them to FindProxyForURL
  * make sure the cancel action is last
  * kio_help: use doOutputBuffer and simplify unicodeError
  * rename support: emit proper URL in FileRenamed
  * fix rename support: keep trashId rather than expecting it as input
  * remote: remove unused include
  * remote: remove redundant check
  * remote: rename kded module to allow co-installability with plasma-workspace &lt;= 5.9
  * remote: use QUrl::fromLocalFile()
  * remote: just check if file exists
  * remote: use QDir::mkpath() to create the remoteview folder
  * remote: drop Messages.sh
  * remote: use same debug category as other slaves
  * remote: use json protocol
  * remote: don't redefine TRANSLATION_DOMAIN
  * remote: slots -&gt; Q_SLOTS
  * Import remote ioslave from plasma-workspace
  * Fix TODO. We depend on Qt 5.3 by now
  * kio_trash: implement renaming of toplevel files and dirs
  * [PreviewJob] Remove maximum size for local files by default
  * allow to add application actions on an open menu
  * Port another use of QDateTime to QElapsedTimer. With proper / 1000 this time :)
  * Fixup previous commit to slave.cpp, divide by 1000 was missing.
  * [autotest] KTcpSocketTest was racy and leaky =&gt; simplify, fix.
  * Port from QDateTime::currentDateTime() to QElapsedTimer
  * Upgrade KF5 version to 5.32.0.
  * Fix double export in already-exported class
  * deprecate DrawFrame, as discussed in https://git.reviewboard.kde.org/r/129921/</changelog>
<changelog author="lbeltrame@kde.org" date="1490011200">- Drop sanitize-url-for-proxy.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1491998400">- Add enable-natural-sorting-in-KDirSortFilterProxyModel.patch to
  use natural sorting by default in the KDE file dialog and
  gwenview, configurable via the "NaturalSorting" option in
  kdeglobals (boo#1033668, kde#343452)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1496923200">- Add upstream patch to support running PIE binaries (kde#350018):
  * 0001-Identify-PIE-binaries-application-x-sharedlib-as-exe.patch</changelog>
<changelog author="wbauer@tmo.at" date="1498910400">- Add upstream patches to prevent /tmp getting filled up because
  full directories are copied to it when generating folder previews
  for remote locations and the trash (kde#208625, boo#969768)
  * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch
  * PreviewJob-skip-remote-directories.patch</changelog>
<changelog author="wbauer@tmo.at" date="1502798400">- Add fix-applying-special-file-attributes.patch to fix modifying
  advanced permissions in the file/folder properties dialog
  (boo#978935, kde#365795)</changelog>
<changelog author="wbauer@tmo.at" date="1503403200">- Add Really-rate-limit-INF_PROCESSED_SIZE-messages.patch to avoid
  high CPU load during file copies (kde#383843, boo#1016920,
  boo#1051349)
- Add KDesktopPropsPlugin-create-destination-dir.patch to fix
  modifying applications' .desktop files in the "Edit File Type"
  dialog if the corresponding directory doesn't exist in
  ~/.local/share/ (boo#1000946)</changelog>
<changelog author="wbauer@tmo.at" date="1509364800">- Add Always-reserve-space-for-icons.patch to fix file name
  overlapping with the icon in the file dialog if the generic
  fallback icon is used (kde#372207)</changelog>
<changelog author="wbauer@tmo.at" date="1509624000">- Add fix-handling-of-KCookieAdvice_AcceptForSession.patch to
  fix the "Accept For Session" cookie setting that was not properly
  respected (boo#1049975, kde#386325)</changelog>

</package>
<package pkgid="3ce6b8d12b7fa296a2f77dcbc2ecc44bbdd47ba00a06f903b3e3dc27b4ffd047" name="kio" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="5.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Fix KIO::linkAs() to work as advertised, i.e.
    fail if dest already exists
  * Fix KIO::put("file:///path") to respect the umask (kde#359581)
  * Fix KIO::pasteActionText for null dest item and for empty URL
  * Add support for undoing symlink creation
  * GUI option to configure global MarkPartial for KIO slaves
  * Fix MaxCacheSize limited to 99 KiB
  * Add clipboard buttons to checksums tab
  * KNewFileMenu: fix copying template file from embedded resource
    (kde#359581)
  * KNewFileMenu: Fix creating link to application (kde#363673)
  * KNewFileMenu: Fix suggestion of new filename when file
    already exist in desktop
  * KNewFileMenu: ensure fileCreated() is emitted for
    app desktop files too
  * KNewFileMenu: fix creating symlinks with a relative target
  * KPropertiesDialog: simplify button box usage,
    fix behavior on Esc
  * KProtocolInfo: refill cache to find newly installed protocols
  * KIO::CopyJob: port to qCDebug
    (with its own area, since this can be quite verbose)
  * KPropertiesDialog: add Checksums tab
  * Clean url's path before initializing KUrlNavigator
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1470657600">- Remove workaround to install "Create New" templates as actual
  files, the issues with using the embedded resource are fixed in
  5.25.0</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * KPropertiesDialog: remove warning note from docu,
    the bug is gone
  * [test program] resolve relative paths using QUrl::fromUserInput
  * KUrlRequester: fix error box when selecting a file and
    reopening the file dialog
  * Provide a fallback if slaves don't list the . entry
    (kde#366795)
  * Fix creating symlink over "desktop" protocol
  * KNewFileMenu: when creating symlinks use KIO::linkAs
    instead of KIO::link
  * KFileWidget: fix double '/' in path
  * KUrlRequester: use static connect() syntax, was inconsistent
  * KUrlRequester: pass window() as parent for the QFileDialog
  * Avoid calling connect(null, .....) from KUrlComboRequester
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475668800">- Added Fix-launching-terminal-desktop-files-with-konsole.patch
  (kde#368949, boo#1003125)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1476014400">- Add 0001-Fix-kio-using-only-tls1.0.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014401">- Update to 5.27.0
  * Fix KIO slaves using only tls1.0
  * Fix ABI break in kio
  * KFileItemActions: add addPluginActionsTo(QMenu *)
  * Show copy buttons only after checksum has been calculated
  * Add missing feedback when computing a checksum (kde#368520)
  * Fix KFileItem::overlays returning empty string values
  * Fix launching terminal .desktop files with konsole
  * Classify nfs4 mounts as probablySlow, like nfs/cifs/..
  * KNewFileMenu: show New Folder action shortcut (kde#366075)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed 0001-Fix-kio-using-only-tls1.0.patch and
  Fix-launching-terminal-desktop-files-with-konsole.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Fix HTTP date format sent by kio_http to always use the C locale
    (kde#372005)
  * KACL: fix memory leaks detected by ASAN
  * Fix memory leaks in KIO::Scheduler, detected by ASAN
  * Removed duplicate clear button (kde#369377)
  * Fix editing autostart entries when /usr/local/share/applications
    doesn't exist (kde#371194)
  * [KOpenWithDialog] Hide TreeView header
  * Sanitize the symlink name buffer size (kde#369275)
  * Properly finish DropJobs when triggered is not emitted
    (kde#363936)
  * ClipboardUpdater: fix another crash on Wayland (kde#359883)
  * ClipboardUpdater: fix crash on Wayland (kde#370520)
  * Support non integer scale factors in KFileDelegate (kde#366451)
  * kntlm: Distinguish between NULL and empty domain
  * Don't show overwrite dialog if file name is empty
  * kioexec: use friendly filenames
  * Fix focus ownership if url is changed before showing the widget
  * Major performance improvement when turning previews off in the
    file dialog (kde#346403)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Ported to categorized logging
  * Fix compilation against WinXP SDK
  * Allow uppercase checksums matching in Checksums tab
    (kde#372518)
  * Never stretch the last (=date) column in the file dialog
    (kde#312747)
  * Import and update kcontrol docbooks for code in kio from
    kde-runtime master
  * [OS X] make KDE's trash use the OS X trash
  * SlaveBase: add documentation about event loops and
    notifications and kded modules
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488369600">- Add patch to fix security issue with proxy configuration (boo#1027520)
  * sanitize-url-for-proxy.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Too many changes to list here
  * Commit translations from l10n-kf5
  * Cookies KCM: disable "delete" button when there is no current item
  * Use the new shared library exported by KDocTools
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Sanitize URLs before passing them to FindProxyForURL
  * make sure the cancel action is last
  * kio_help: use doOutputBuffer and simplify unicodeError
  * rename support: emit proper URL in FileRenamed
  * fix rename support: keep trashId rather than expecting it as input
  * remote: remove unused include
  * remote: remove redundant check
  * remote: rename kded module to allow co-installability with plasma-workspace &lt;= 5.9
  * remote: use QUrl::fromLocalFile()
  * remote: just check if file exists
  * remote: use QDir::mkpath() to create the remoteview folder
  * remote: drop Messages.sh
  * remote: use same debug category as other slaves
  * remote: use json protocol
  * remote: don't redefine TRANSLATION_DOMAIN
  * remote: slots -&gt; Q_SLOTS
  * Import remote ioslave from plasma-workspace
  * Fix TODO. We depend on Qt 5.3 by now
  * kio_trash: implement renaming of toplevel files and dirs
  * [PreviewJob] Remove maximum size for local files by default
  * allow to add application actions on an open menu
  * Port another use of QDateTime to QElapsedTimer. With proper / 1000 this time :)
  * Fixup previous commit to slave.cpp, divide by 1000 was missing.
  * [autotest] KTcpSocketTest was racy and leaky =&gt; simplify, fix.
  * Port from QDateTime::currentDateTime() to QElapsedTimer
  * Upgrade KF5 version to 5.32.0.
  * Fix double export in already-exported class
  * deprecate DrawFrame, as discussed in https://git.reviewboard.kde.org/r/129921/</changelog>
<changelog author="lbeltrame@kde.org" date="1490011200">- Drop sanitize-url-for-proxy.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1491998400">- Add enable-natural-sorting-in-KDirSortFilterProxyModel.patch to
  use natural sorting by default in the KDE file dialog and
  gwenview, configurable via the "NaturalSorting" option in
  kdeglobals (boo#1033668, kde#343452)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1496923200">- Add upstream patch to support running PIE binaries (kde#350018):
  * 0001-Identify-PIE-binaries-application-x-sharedlib-as-exe.patch</changelog>
<changelog author="wbauer@tmo.at" date="1498910400">- Add upstream patches to prevent /tmp getting filled up because
  full directories are copied to it when generating folder previews
  for remote locations and the trash (kde#208625, boo#969768)
  * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch
  * PreviewJob-skip-remote-directories.patch</changelog>
<changelog author="wbauer@tmo.at" date="1502798400">- Add fix-applying-special-file-attributes.patch to fix modifying
  advanced permissions in the file/folder properties dialog
  (boo#978935, kde#365795)</changelog>
<changelog author="wbauer@tmo.at" date="1503403200">- Add Really-rate-limit-INF_PROCESSED_SIZE-messages.patch to avoid
  high CPU load during file copies (kde#383843, boo#1016920,
  boo#1051349)
- Add KDesktopPropsPlugin-create-destination-dir.patch to fix
  modifying applications' .desktop files in the "Edit File Type"
  dialog if the corresponding directory doesn't exist in
  ~/.local/share/ (boo#1000946)</changelog>
<changelog author="wbauer@tmo.at" date="1509364800">- Add Always-reserve-space-for-icons.patch to fix file name
  overlapping with the icon in the file dialog if the generic
  fallback icon is used (kde#372207)</changelog>
<changelog author="wbauer@tmo.at" date="1509624000">- Add fix-handling-of-KCookieAdvice_AcceptForSession.patch to
  fix the "Accept For Session" cookie setting that was not properly
  respected (boo#1049975, kde#386325)</changelog>

</package>
<package pkgid="64a30adb6d8d7d3a8ce8cf07faad50da609974d4cc0f0443b3bfdcdbf53a09e3" name="kio-32bit" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="5.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Fix KIO::linkAs() to work as advertised, i.e.
    fail if dest already exists
  * Fix KIO::put("file:///path") to respect the umask (kde#359581)
  * Fix KIO::pasteActionText for null dest item and for empty URL
  * Add support for undoing symlink creation
  * GUI option to configure global MarkPartial for KIO slaves
  * Fix MaxCacheSize limited to 99 KiB
  * Add clipboard buttons to checksums tab
  * KNewFileMenu: fix copying template file from embedded resource
    (kde#359581)
  * KNewFileMenu: Fix creating link to application (kde#363673)
  * KNewFileMenu: Fix suggestion of new filename when file
    already exist in desktop
  * KNewFileMenu: ensure fileCreated() is emitted for
    app desktop files too
  * KNewFileMenu: fix creating symlinks with a relative target
  * KPropertiesDialog: simplify button box usage,
    fix behavior on Esc
  * KProtocolInfo: refill cache to find newly installed protocols
  * KIO::CopyJob: port to qCDebug
    (with its own area, since this can be quite verbose)
  * KPropertiesDialog: add Checksums tab
  * Clean url's path before initializing KUrlNavigator
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1470657600">- Remove workaround to install "Create New" templates as actual
  files, the issues with using the embedded resource are fixed in
  5.25.0</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * KPropertiesDialog: remove warning note from docu,
    the bug is gone
  * [test program] resolve relative paths using QUrl::fromUserInput
  * KUrlRequester: fix error box when selecting a file and
    reopening the file dialog
  * Provide a fallback if slaves don't list the . entry
    (kde#366795)
  * Fix creating symlink over "desktop" protocol
  * KNewFileMenu: when creating symlinks use KIO::linkAs
    instead of KIO::link
  * KFileWidget: fix double '/' in path
  * KUrlRequester: use static connect() syntax, was inconsistent
  * KUrlRequester: pass window() as parent for the QFileDialog
  * Avoid calling connect(null, .....) from KUrlComboRequester
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475668800">- Added Fix-launching-terminal-desktop-files-with-konsole.patch
  (kde#368949, boo#1003125)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1476014400">- Add 0001-Fix-kio-using-only-tls1.0.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014401">- Update to 5.27.0
  * Fix KIO slaves using only tls1.0
  * Fix ABI break in kio
  * KFileItemActions: add addPluginActionsTo(QMenu *)
  * Show copy buttons only after checksum has been calculated
  * Add missing feedback when computing a checksum (kde#368520)
  * Fix KFileItem::overlays returning empty string values
  * Fix launching terminal .desktop files with konsole
  * Classify nfs4 mounts as probablySlow, like nfs/cifs/..
  * KNewFileMenu: show New Folder action shortcut (kde#366075)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed 0001-Fix-kio-using-only-tls1.0.patch and
  Fix-launching-terminal-desktop-files-with-konsole.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Fix HTTP date format sent by kio_http to always use the C locale
    (kde#372005)
  * KACL: fix memory leaks detected by ASAN
  * Fix memory leaks in KIO::Scheduler, detected by ASAN
  * Removed duplicate clear button (kde#369377)
  * Fix editing autostart entries when /usr/local/share/applications
    doesn't exist (kde#371194)
  * [KOpenWithDialog] Hide TreeView header
  * Sanitize the symlink name buffer size (kde#369275)
  * Properly finish DropJobs when triggered is not emitted
    (kde#363936)
  * ClipboardUpdater: fix another crash on Wayland (kde#359883)
  * ClipboardUpdater: fix crash on Wayland (kde#370520)
  * Support non integer scale factors in KFileDelegate (kde#366451)
  * kntlm: Distinguish between NULL and empty domain
  * Don't show overwrite dialog if file name is empty
  * kioexec: use friendly filenames
  * Fix focus ownership if url is changed before showing the widget
  * Major performance improvement when turning previews off in the
    file dialog (kde#346403)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Ported to categorized logging
  * Fix compilation against WinXP SDK
  * Allow uppercase checksums matching in Checksums tab
    (kde#372518)
  * Never stretch the last (=date) column in the file dialog
    (kde#312747)
  * Import and update kcontrol docbooks for code in kio from
    kde-runtime master
  * [OS X] make KDE's trash use the OS X trash
  * SlaveBase: add documentation about event loops and
    notifications and kded modules
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488369600">- Add patch to fix security issue with proxy configuration (boo#1027520)
  * sanitize-url-for-proxy.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Too many changes to list here
  * Commit translations from l10n-kf5
  * Cookies KCM: disable "delete" button when there is no current item
  * Use the new shared library exported by KDocTools
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Sanitize URLs before passing them to FindProxyForURL
  * make sure the cancel action is last
  * kio_help: use doOutputBuffer and simplify unicodeError
  * rename support: emit proper URL in FileRenamed
  * fix rename support: keep trashId rather than expecting it as input
  * remote: remove unused include
  * remote: remove redundant check
  * remote: rename kded module to allow co-installability with plasma-workspace &lt;= 5.9
  * remote: use QUrl::fromLocalFile()
  * remote: just check if file exists
  * remote: use QDir::mkpath() to create the remoteview folder
  * remote: drop Messages.sh
  * remote: use same debug category as other slaves
  * remote: use json protocol
  * remote: don't redefine TRANSLATION_DOMAIN
  * remote: slots -&gt; Q_SLOTS
  * Import remote ioslave from plasma-workspace
  * Fix TODO. We depend on Qt 5.3 by now
  * kio_trash: implement renaming of toplevel files and dirs
  * [PreviewJob] Remove maximum size for local files by default
  * allow to add application actions on an open menu
  * Port another use of QDateTime to QElapsedTimer. With proper / 1000 this time :)
  * Fixup previous commit to slave.cpp, divide by 1000 was missing.
  * [autotest] KTcpSocketTest was racy and leaky =&gt; simplify, fix.
  * Port from QDateTime::currentDateTime() to QElapsedTimer
  * Upgrade KF5 version to 5.32.0.
  * Fix double export in already-exported class
  * deprecate DrawFrame, as discussed in https://git.reviewboard.kde.org/r/129921/</changelog>
<changelog author="lbeltrame@kde.org" date="1490011200">- Drop sanitize-url-for-proxy.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1491998400">- Add enable-natural-sorting-in-KDirSortFilterProxyModel.patch to
  use natural sorting by default in the KDE file dialog and
  gwenview, configurable via the "NaturalSorting" option in
  kdeglobals (boo#1033668, kde#343452)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1496923200">- Add upstream patch to support running PIE binaries (kde#350018):
  * 0001-Identify-PIE-binaries-application-x-sharedlib-as-exe.patch</changelog>
<changelog author="wbauer@tmo.at" date="1498910400">- Add upstream patches to prevent /tmp getting filled up because
  full directories are copied to it when generating folder previews
  for remote locations and the trash (kde#208625, boo#969768)
  * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch
  * PreviewJob-skip-remote-directories.patch</changelog>
<changelog author="wbauer@tmo.at" date="1502798400">- Add fix-applying-special-file-attributes.patch to fix modifying
  advanced permissions in the file/folder properties dialog
  (boo#978935, kde#365795)</changelog>
<changelog author="wbauer@tmo.at" date="1503403200">- Add Really-rate-limit-INF_PROCESSED_SIZE-messages.patch to avoid
  high CPU load during file copies (kde#383843, boo#1016920,
  boo#1051349)
- Add KDesktopPropsPlugin-create-destination-dir.patch to fix
  modifying applications' .desktop files in the "Edit File Type"
  dialog if the corresponding directory doesn't exist in
  ~/.local/share/ (boo#1000946)</changelog>
<changelog author="wbauer@tmo.at" date="1509364800">- Add Always-reserve-space-for-icons.patch to fix file name
  overlapping with the icon in the file dialog if the generic
  fallback icon is used (kde#372207)</changelog>
<changelog author="wbauer@tmo.at" date="1509624000">- Add fix-handling-of-KCookieAdvice_AcceptForSession.patch to
  fix the "Accept For Session" cookie setting that was not properly
  respected (boo#1049975, kde#386325)</changelog>

</package>
<package pkgid="ad51a5b6316846fed475d41e6a554aede2083e7b881a1d75b8577afb92f8a139" name="kio-core" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="5.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Fix KIO::linkAs() to work as advertised, i.e.
    fail if dest already exists
  * Fix KIO::put("file:///path") to respect the umask (kde#359581)
  * Fix KIO::pasteActionText for null dest item and for empty URL
  * Add support for undoing symlink creation
  * GUI option to configure global MarkPartial for KIO slaves
  * Fix MaxCacheSize limited to 99 KiB
  * Add clipboard buttons to checksums tab
  * KNewFileMenu: fix copying template file from embedded resource
    (kde#359581)
  * KNewFileMenu: Fix creating link to application (kde#363673)
  * KNewFileMenu: Fix suggestion of new filename when file
    already exist in desktop
  * KNewFileMenu: ensure fileCreated() is emitted for
    app desktop files too
  * KNewFileMenu: fix creating symlinks with a relative target
  * KPropertiesDialog: simplify button box usage,
    fix behavior on Esc
  * KProtocolInfo: refill cache to find newly installed protocols
  * KIO::CopyJob: port to qCDebug
    (with its own area, since this can be quite verbose)
  * KPropertiesDialog: add Checksums tab
  * Clean url's path before initializing KUrlNavigator
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1470657600">- Remove workaround to install "Create New" templates as actual
  files, the issues with using the embedded resource are fixed in
  5.25.0</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * KPropertiesDialog: remove warning note from docu,
    the bug is gone
  * [test program] resolve relative paths using QUrl::fromUserInput
  * KUrlRequester: fix error box when selecting a file and
    reopening the file dialog
  * Provide a fallback if slaves don't list the . entry
    (kde#366795)
  * Fix creating symlink over "desktop" protocol
  * KNewFileMenu: when creating symlinks use KIO::linkAs
    instead of KIO::link
  * KFileWidget: fix double '/' in path
  * KUrlRequester: use static connect() syntax, was inconsistent
  * KUrlRequester: pass window() as parent for the QFileDialog
  * Avoid calling connect(null, .....) from KUrlComboRequester
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475668800">- Added Fix-launching-terminal-desktop-files-with-konsole.patch
  (kde#368949, boo#1003125)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1476014400">- Add 0001-Fix-kio-using-only-tls1.0.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014401">- Update to 5.27.0
  * Fix KIO slaves using only tls1.0
  * Fix ABI break in kio
  * KFileItemActions: add addPluginActionsTo(QMenu *)
  * Show copy buttons only after checksum has been calculated
  * Add missing feedback when computing a checksum (kde#368520)
  * Fix KFileItem::overlays returning empty string values
  * Fix launching terminal .desktop files with konsole
  * Classify nfs4 mounts as probablySlow, like nfs/cifs/..
  * KNewFileMenu: show New Folder action shortcut (kde#366075)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed 0001-Fix-kio-using-only-tls1.0.patch and
  Fix-launching-terminal-desktop-files-with-konsole.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Fix HTTP date format sent by kio_http to always use the C locale
    (kde#372005)
  * KACL: fix memory leaks detected by ASAN
  * Fix memory leaks in KIO::Scheduler, detected by ASAN
  * Removed duplicate clear button (kde#369377)
  * Fix editing autostart entries when /usr/local/share/applications
    doesn't exist (kde#371194)
  * [KOpenWithDialog] Hide TreeView header
  * Sanitize the symlink name buffer size (kde#369275)
  * Properly finish DropJobs when triggered is not emitted
    (kde#363936)
  * ClipboardUpdater: fix another crash on Wayland (kde#359883)
  * ClipboardUpdater: fix crash on Wayland (kde#370520)
  * Support non integer scale factors in KFileDelegate (kde#366451)
  * kntlm: Distinguish between NULL and empty domain
  * Don't show overwrite dialog if file name is empty
  * kioexec: use friendly filenames
  * Fix focus ownership if url is changed before showing the widget
  * Major performance improvement when turning previews off in the
    file dialog (kde#346403)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Ported to categorized logging
  * Fix compilation against WinXP SDK
  * Allow uppercase checksums matching in Checksums tab
    (kde#372518)
  * Never stretch the last (=date) column in the file dialog
    (kde#312747)
  * Import and update kcontrol docbooks for code in kio from
    kde-runtime master
  * [OS X] make KDE's trash use the OS X trash
  * SlaveBase: add documentation about event loops and
    notifications and kded modules
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488369600">- Add patch to fix security issue with proxy configuration (boo#1027520)
  * sanitize-url-for-proxy.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Too many changes to list here
  * Commit translations from l10n-kf5
  * Cookies KCM: disable "delete" button when there is no current item
  * Use the new shared library exported by KDocTools
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Sanitize URLs before passing them to FindProxyForURL
  * make sure the cancel action is last
  * kio_help: use doOutputBuffer and simplify unicodeError
  * rename support: emit proper URL in FileRenamed
  * fix rename support: keep trashId rather than expecting it as input
  * remote: remove unused include
  * remote: remove redundant check
  * remote: rename kded module to allow co-installability with plasma-workspace &lt;= 5.9
  * remote: use QUrl::fromLocalFile()
  * remote: just check if file exists
  * remote: use QDir::mkpath() to create the remoteview folder
  * remote: drop Messages.sh
  * remote: use same debug category as other slaves
  * remote: use json protocol
  * remote: don't redefine TRANSLATION_DOMAIN
  * remote: slots -&gt; Q_SLOTS
  * Import remote ioslave from plasma-workspace
  * Fix TODO. We depend on Qt 5.3 by now
  * kio_trash: implement renaming of toplevel files and dirs
  * [PreviewJob] Remove maximum size for local files by default
  * allow to add application actions on an open menu
  * Port another use of QDateTime to QElapsedTimer. With proper / 1000 this time :)
  * Fixup previous commit to slave.cpp, divide by 1000 was missing.
  * [autotest] KTcpSocketTest was racy and leaky =&gt; simplify, fix.
  * Port from QDateTime::currentDateTime() to QElapsedTimer
  * Upgrade KF5 version to 5.32.0.
  * Fix double export in already-exported class
  * deprecate DrawFrame, as discussed in https://git.reviewboard.kde.org/r/129921/</changelog>
<changelog author="lbeltrame@kde.org" date="1490011200">- Drop sanitize-url-for-proxy.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1491998400">- Add enable-natural-sorting-in-KDirSortFilterProxyModel.patch to
  use natural sorting by default in the KDE file dialog and
  gwenview, configurable via the "NaturalSorting" option in
  kdeglobals (boo#1033668, kde#343452)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1496923200">- Add upstream patch to support running PIE binaries (kde#350018):
  * 0001-Identify-PIE-binaries-application-x-sharedlib-as-exe.patch</changelog>
<changelog author="wbauer@tmo.at" date="1498910400">- Add upstream patches to prevent /tmp getting filled up because
  full directories are copied to it when generating folder previews
  for remote locations and the trash (kde#208625, boo#969768)
  * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch
  * PreviewJob-skip-remote-directories.patch</changelog>
<changelog author="wbauer@tmo.at" date="1502798400">- Add fix-applying-special-file-attributes.patch to fix modifying
  advanced permissions in the file/folder properties dialog
  (boo#978935, kde#365795)</changelog>
<changelog author="wbauer@tmo.at" date="1503403200">- Add Really-rate-limit-INF_PROCESSED_SIZE-messages.patch to avoid
  high CPU load during file copies (kde#383843, boo#1016920,
  boo#1051349)
- Add KDesktopPropsPlugin-create-destination-dir.patch to fix
  modifying applications' .desktop files in the "Edit File Type"
  dialog if the corresponding directory doesn't exist in
  ~/.local/share/ (boo#1000946)</changelog>
<changelog author="wbauer@tmo.at" date="1509364800">- Add Always-reserve-space-for-icons.patch to fix file name
  overlapping with the icon in the file dialog if the generic
  fallback icon is used (kde#372207)</changelog>
<changelog author="wbauer@tmo.at" date="1509624000">- Add fix-handling-of-KCookieAdvice_AcceptForSession.patch to
  fix the "Accept For Session" cookie setting that was not properly
  respected (boo#1049975, kde#386325)</changelog>

</package>
<package pkgid="375296d94477575faa07c97dff0e7d5e5c7724abe558f88c45090a3df8daed7f" name="kio-core-32bit" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="5.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Fix KIO::linkAs() to work as advertised, i.e.
    fail if dest already exists
  * Fix KIO::put("file:///path") to respect the umask (kde#359581)
  * Fix KIO::pasteActionText for null dest item and for empty URL
  * Add support for undoing symlink creation
  * GUI option to configure global MarkPartial for KIO slaves
  * Fix MaxCacheSize limited to 99 KiB
  * Add clipboard buttons to checksums tab
  * KNewFileMenu: fix copying template file from embedded resource
    (kde#359581)
  * KNewFileMenu: Fix creating link to application (kde#363673)
  * KNewFileMenu: Fix suggestion of new filename when file
    already exist in desktop
  * KNewFileMenu: ensure fileCreated() is emitted for
    app desktop files too
  * KNewFileMenu: fix creating symlinks with a relative target
  * KPropertiesDialog: simplify button box usage,
    fix behavior on Esc
  * KProtocolInfo: refill cache to find newly installed protocols
  * KIO::CopyJob: port to qCDebug
    (with its own area, since this can be quite verbose)
  * KPropertiesDialog: add Checksums tab
  * Clean url's path before initializing KUrlNavigator
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1470657600">- Remove workaround to install "Create New" templates as actual
  files, the issues with using the embedded resource are fixed in
  5.25.0</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * KPropertiesDialog: remove warning note from docu,
    the bug is gone
  * [test program] resolve relative paths using QUrl::fromUserInput
  * KUrlRequester: fix error box when selecting a file and
    reopening the file dialog
  * Provide a fallback if slaves don't list the . entry
    (kde#366795)
  * Fix creating symlink over "desktop" protocol
  * KNewFileMenu: when creating symlinks use KIO::linkAs
    instead of KIO::link
  * KFileWidget: fix double '/' in path
  * KUrlRequester: use static connect() syntax, was inconsistent
  * KUrlRequester: pass window() as parent for the QFileDialog
  * Avoid calling connect(null, .....) from KUrlComboRequester
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475668800">- Added Fix-launching-terminal-desktop-files-with-konsole.patch
  (kde#368949, boo#1003125)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1476014400">- Add 0001-Fix-kio-using-only-tls1.0.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014401">- Update to 5.27.0
  * Fix KIO slaves using only tls1.0
  * Fix ABI break in kio
  * KFileItemActions: add addPluginActionsTo(QMenu *)
  * Show copy buttons only after checksum has been calculated
  * Add missing feedback when computing a checksum (kde#368520)
  * Fix KFileItem::overlays returning empty string values
  * Fix launching terminal .desktop files with konsole
  * Classify nfs4 mounts as probablySlow, like nfs/cifs/..
  * KNewFileMenu: show New Folder action shortcut (kde#366075)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed 0001-Fix-kio-using-only-tls1.0.patch and
  Fix-launching-terminal-desktop-files-with-konsole.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Fix HTTP date format sent by kio_http to always use the C locale
    (kde#372005)
  * KACL: fix memory leaks detected by ASAN
  * Fix memory leaks in KIO::Scheduler, detected by ASAN
  * Removed duplicate clear button (kde#369377)
  * Fix editing autostart entries when /usr/local/share/applications
    doesn't exist (kde#371194)
  * [KOpenWithDialog] Hide TreeView header
  * Sanitize the symlink name buffer size (kde#369275)
  * Properly finish DropJobs when triggered is not emitted
    (kde#363936)
  * ClipboardUpdater: fix another crash on Wayland (kde#359883)
  * ClipboardUpdater: fix crash on Wayland (kde#370520)
  * Support non integer scale factors in KFileDelegate (kde#366451)
  * kntlm: Distinguish between NULL and empty domain
  * Don't show overwrite dialog if file name is empty
  * kioexec: use friendly filenames
  * Fix focus ownership if url is changed before showing the widget
  * Major performance improvement when turning previews off in the
    file dialog (kde#346403)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Ported to categorized logging
  * Fix compilation against WinXP SDK
  * Allow uppercase checksums matching in Checksums tab
    (kde#372518)
  * Never stretch the last (=date) column in the file dialog
    (kde#312747)
  * Import and update kcontrol docbooks for code in kio from
    kde-runtime master
  * [OS X] make KDE's trash use the OS X trash
  * SlaveBase: add documentation about event loops and
    notifications and kded modules
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488369600">- Add patch to fix security issue with proxy configuration (boo#1027520)
  * sanitize-url-for-proxy.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Too many changes to list here
  * Commit translations from l10n-kf5
  * Cookies KCM: disable "delete" button when there is no current item
  * Use the new shared library exported by KDocTools
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Sanitize URLs before passing them to FindProxyForURL
  * make sure the cancel action is last
  * kio_help: use doOutputBuffer and simplify unicodeError
  * rename support: emit proper URL in FileRenamed
  * fix rename support: keep trashId rather than expecting it as input
  * remote: remove unused include
  * remote: remove redundant check
  * remote: rename kded module to allow co-installability with plasma-workspace &lt;= 5.9
  * remote: use QUrl::fromLocalFile()
  * remote: just check if file exists
  * remote: use QDir::mkpath() to create the remoteview folder
  * remote: drop Messages.sh
  * remote: use same debug category as other slaves
  * remote: use json protocol
  * remote: don't redefine TRANSLATION_DOMAIN
  * remote: slots -&gt; Q_SLOTS
  * Import remote ioslave from plasma-workspace
  * Fix TODO. We depend on Qt 5.3 by now
  * kio_trash: implement renaming of toplevel files and dirs
  * [PreviewJob] Remove maximum size for local files by default
  * allow to add application actions on an open menu
  * Port another use of QDateTime to QElapsedTimer. With proper / 1000 this time :)
  * Fixup previous commit to slave.cpp, divide by 1000 was missing.
  * [autotest] KTcpSocketTest was racy and leaky =&gt; simplify, fix.
  * Port from QDateTime::currentDateTime() to QElapsedTimer
  * Upgrade KF5 version to 5.32.0.
  * Fix double export in already-exported class
  * deprecate DrawFrame, as discussed in https://git.reviewboard.kde.org/r/129921/</changelog>
<changelog author="lbeltrame@kde.org" date="1490011200">- Drop sanitize-url-for-proxy.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1491998400">- Add enable-natural-sorting-in-KDirSortFilterProxyModel.patch to
  use natural sorting by default in the KDE file dialog and
  gwenview, configurable via the "NaturalSorting" option in
  kdeglobals (boo#1033668, kde#343452)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1496923200">- Add upstream patch to support running PIE binaries (kde#350018):
  * 0001-Identify-PIE-binaries-application-x-sharedlib-as-exe.patch</changelog>
<changelog author="wbauer@tmo.at" date="1498910400">- Add upstream patches to prevent /tmp getting filled up because
  full directories are copied to it when generating folder previews
  for remote locations and the trash (kde#208625, boo#969768)
  * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch
  * PreviewJob-skip-remote-directories.patch</changelog>
<changelog author="wbauer@tmo.at" date="1502798400">- Add fix-applying-special-file-attributes.patch to fix modifying
  advanced permissions in the file/folder properties dialog
  (boo#978935, kde#365795)</changelog>
<changelog author="wbauer@tmo.at" date="1503403200">- Add Really-rate-limit-INF_PROCESSED_SIZE-messages.patch to avoid
  high CPU load during file copies (kde#383843, boo#1016920,
  boo#1051349)
- Add KDesktopPropsPlugin-create-destination-dir.patch to fix
  modifying applications' .desktop files in the "Edit File Type"
  dialog if the corresponding directory doesn't exist in
  ~/.local/share/ (boo#1000946)</changelog>
<changelog author="wbauer@tmo.at" date="1509364800">- Add Always-reserve-space-for-icons.patch to fix file name
  overlapping with the icon in the file dialog if the generic
  fallback icon is used (kde#372207)</changelog>
<changelog author="wbauer@tmo.at" date="1509624000">- Add fix-handling-of-KCookieAdvice_AcceptForSession.patch to
  fix the "Accept For Session" cookie setting that was not properly
  respected (boo#1049975, kde#386325)</changelog>

</package>
<package pkgid="48ca3db0a8821b98183df9f082412818f7c4226e97601b58fd9ef4c726f16a00" name="kio-devel" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="5.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Fix KIO::linkAs() to work as advertised, i.e.
    fail if dest already exists
  * Fix KIO::put("file:///path") to respect the umask (kde#359581)
  * Fix KIO::pasteActionText for null dest item and for empty URL
  * Add support for undoing symlink creation
  * GUI option to configure global MarkPartial for KIO slaves
  * Fix MaxCacheSize limited to 99 KiB
  * Add clipboard buttons to checksums tab
  * KNewFileMenu: fix copying template file from embedded resource
    (kde#359581)
  * KNewFileMenu: Fix creating link to application (kde#363673)
  * KNewFileMenu: Fix suggestion of new filename when file
    already exist in desktop
  * KNewFileMenu: ensure fileCreated() is emitted for
    app desktop files too
  * KNewFileMenu: fix creating symlinks with a relative target
  * KPropertiesDialog: simplify button box usage,
    fix behavior on Esc
  * KProtocolInfo: refill cache to find newly installed protocols
  * KIO::CopyJob: port to qCDebug
    (with its own area, since this can be quite verbose)
  * KPropertiesDialog: add Checksums tab
  * Clean url's path before initializing KUrlNavigator
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1470657600">- Remove workaround to install "Create New" templates as actual
  files, the issues with using the embedded resource are fixed in
  5.25.0</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * KPropertiesDialog: remove warning note from docu,
    the bug is gone
  * [test program] resolve relative paths using QUrl::fromUserInput
  * KUrlRequester: fix error box when selecting a file and
    reopening the file dialog
  * Provide a fallback if slaves don't list the . entry
    (kde#366795)
  * Fix creating symlink over "desktop" protocol
  * KNewFileMenu: when creating symlinks use KIO::linkAs
    instead of KIO::link
  * KFileWidget: fix double '/' in path
  * KUrlRequester: use static connect() syntax, was inconsistent
  * KUrlRequester: pass window() as parent for the QFileDialog
  * Avoid calling connect(null, .....) from KUrlComboRequester
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475668800">- Added Fix-launching-terminal-desktop-files-with-konsole.patch
  (kde#368949, boo#1003125)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1476014400">- Add 0001-Fix-kio-using-only-tls1.0.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014401">- Update to 5.27.0
  * Fix KIO slaves using only tls1.0
  * Fix ABI break in kio
  * KFileItemActions: add addPluginActionsTo(QMenu *)
  * Show copy buttons only after checksum has been calculated
  * Add missing feedback when computing a checksum (kde#368520)
  * Fix KFileItem::overlays returning empty string values
  * Fix launching terminal .desktop files with konsole
  * Classify nfs4 mounts as probablySlow, like nfs/cifs/..
  * KNewFileMenu: show New Folder action shortcut (kde#366075)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed 0001-Fix-kio-using-only-tls1.0.patch and
  Fix-launching-terminal-desktop-files-with-konsole.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Fix HTTP date format sent by kio_http to always use the C locale
    (kde#372005)
  * KACL: fix memory leaks detected by ASAN
  * Fix memory leaks in KIO::Scheduler, detected by ASAN
  * Removed duplicate clear button (kde#369377)
  * Fix editing autostart entries when /usr/local/share/applications
    doesn't exist (kde#371194)
  * [KOpenWithDialog] Hide TreeView header
  * Sanitize the symlink name buffer size (kde#369275)
  * Properly finish DropJobs when triggered is not emitted
    (kde#363936)
  * ClipboardUpdater: fix another crash on Wayland (kde#359883)
  * ClipboardUpdater: fix crash on Wayland (kde#370520)
  * Support non integer scale factors in KFileDelegate (kde#366451)
  * kntlm: Distinguish between NULL and empty domain
  * Don't show overwrite dialog if file name is empty
  * kioexec: use friendly filenames
  * Fix focus ownership if url is changed before showing the widget
  * Major performance improvement when turning previews off in the
    file dialog (kde#346403)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Ported to categorized logging
  * Fix compilation against WinXP SDK
  * Allow uppercase checksums matching in Checksums tab
    (kde#372518)
  * Never stretch the last (=date) column in the file dialog
    (kde#312747)
  * Import and update kcontrol docbooks for code in kio from
    kde-runtime master
  * [OS X] make KDE's trash use the OS X trash
  * SlaveBase: add documentation about event loops and
    notifications and kded modules
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488369600">- Add patch to fix security issue with proxy configuration (boo#1027520)
  * sanitize-url-for-proxy.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Too many changes to list here
  * Commit translations from l10n-kf5
  * Cookies KCM: disable "delete" button when there is no current item
  * Use the new shared library exported by KDocTools
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Sanitize URLs before passing them to FindProxyForURL
  * make sure the cancel action is last
  * kio_help: use doOutputBuffer and simplify unicodeError
  * rename support: emit proper URL in FileRenamed
  * fix rename support: keep trashId rather than expecting it as input
  * remote: remove unused include
  * remote: remove redundant check
  * remote: rename kded module to allow co-installability with plasma-workspace &lt;= 5.9
  * remote: use QUrl::fromLocalFile()
  * remote: just check if file exists
  * remote: use QDir::mkpath() to create the remoteview folder
  * remote: drop Messages.sh
  * remote: use same debug category as other slaves
  * remote: use json protocol
  * remote: don't redefine TRANSLATION_DOMAIN
  * remote: slots -&gt; Q_SLOTS
  * Import remote ioslave from plasma-workspace
  * Fix TODO. We depend on Qt 5.3 by now
  * kio_trash: implement renaming of toplevel files and dirs
  * [PreviewJob] Remove maximum size for local files by default
  * allow to add application actions on an open menu
  * Port another use of QDateTime to QElapsedTimer. With proper / 1000 this time :)
  * Fixup previous commit to slave.cpp, divide by 1000 was missing.
  * [autotest] KTcpSocketTest was racy and leaky =&gt; simplify, fix.
  * Port from QDateTime::currentDateTime() to QElapsedTimer
  * Upgrade KF5 version to 5.32.0.
  * Fix double export in already-exported class
  * deprecate DrawFrame, as discussed in https://git.reviewboard.kde.org/r/129921/</changelog>
<changelog author="lbeltrame@kde.org" date="1490011200">- Drop sanitize-url-for-proxy.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1491998400">- Add enable-natural-sorting-in-KDirSortFilterProxyModel.patch to
  use natural sorting by default in the KDE file dialog and
  gwenview, configurable via the "NaturalSorting" option in
  kdeglobals (boo#1033668, kde#343452)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1496923200">- Add upstream patch to support running PIE binaries (kde#350018):
  * 0001-Identify-PIE-binaries-application-x-sharedlib-as-exe.patch</changelog>
<changelog author="wbauer@tmo.at" date="1498910400">- Add upstream patches to prevent /tmp getting filled up because
  full directories are copied to it when generating folder previews
  for remote locations and the trash (kde#208625, boo#969768)
  * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch
  * PreviewJob-skip-remote-directories.patch</changelog>
<changelog author="wbauer@tmo.at" date="1502798400">- Add fix-applying-special-file-attributes.patch to fix modifying
  advanced permissions in the file/folder properties dialog
  (boo#978935, kde#365795)</changelog>
<changelog author="wbauer@tmo.at" date="1503403200">- Add Really-rate-limit-INF_PROCESSED_SIZE-messages.patch to avoid
  high CPU load during file copies (kde#383843, boo#1016920,
  boo#1051349)
- Add KDesktopPropsPlugin-create-destination-dir.patch to fix
  modifying applications' .desktop files in the "Edit File Type"
  dialog if the corresponding directory doesn't exist in
  ~/.local/share/ (boo#1000946)</changelog>
<changelog author="wbauer@tmo.at" date="1509364800">- Add Always-reserve-space-for-icons.patch to fix file name
  overlapping with the icon in the file dialog if the generic
  fallback icon is used (kde#372207)</changelog>
<changelog author="wbauer@tmo.at" date="1509624000">- Add fix-handling-of-KCookieAdvice_AcceptForSession.patch to
  fix the "Accept For Session" cookie setting that was not properly
  respected (boo#1049975, kde#386325)</changelog>

</package>
<package pkgid="229ddf7d18093cb2f85c75d11ef10b16c5c31df94ff9c3c35da7b94808a8f7af" name="kio-devel-32bit" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="5.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Fix KIO::linkAs() to work as advertised, i.e.
    fail if dest already exists
  * Fix KIO::put("file:///path") to respect the umask (kde#359581)
  * Fix KIO::pasteActionText for null dest item and for empty URL
  * Add support for undoing symlink creation
  * GUI option to configure global MarkPartial for KIO slaves
  * Fix MaxCacheSize limited to 99 KiB
  * Add clipboard buttons to checksums tab
  * KNewFileMenu: fix copying template file from embedded resource
    (kde#359581)
  * KNewFileMenu: Fix creating link to application (kde#363673)
  * KNewFileMenu: Fix suggestion of new filename when file
    already exist in desktop
  * KNewFileMenu: ensure fileCreated() is emitted for
    app desktop files too
  * KNewFileMenu: fix creating symlinks with a relative target
  * KPropertiesDialog: simplify button box usage,
    fix behavior on Esc
  * KProtocolInfo: refill cache to find newly installed protocols
  * KIO::CopyJob: port to qCDebug
    (with its own area, since this can be quite verbose)
  * KPropertiesDialog: add Checksums tab
  * Clean url's path before initializing KUrlNavigator
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1470657600">- Remove workaround to install "Create New" templates as actual
  files, the issues with using the embedded resource are fixed in
  5.25.0</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * KPropertiesDialog: remove warning note from docu,
    the bug is gone
  * [test program] resolve relative paths using QUrl::fromUserInput
  * KUrlRequester: fix error box when selecting a file and
    reopening the file dialog
  * Provide a fallback if slaves don't list the . entry
    (kde#366795)
  * Fix creating symlink over "desktop" protocol
  * KNewFileMenu: when creating symlinks use KIO::linkAs
    instead of KIO::link
  * KFileWidget: fix double '/' in path
  * KUrlRequester: use static connect() syntax, was inconsistent
  * KUrlRequester: pass window() as parent for the QFileDialog
  * Avoid calling connect(null, .....) from KUrlComboRequester
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475668800">- Added Fix-launching-terminal-desktop-files-with-konsole.patch
  (kde#368949, boo#1003125)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1476014400">- Add 0001-Fix-kio-using-only-tls1.0.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014401">- Update to 5.27.0
  * Fix KIO slaves using only tls1.0
  * Fix ABI break in kio
  * KFileItemActions: add addPluginActionsTo(QMenu *)
  * Show copy buttons only after checksum has been calculated
  * Add missing feedback when computing a checksum (kde#368520)
  * Fix KFileItem::overlays returning empty string values
  * Fix launching terminal .desktop files with konsole
  * Classify nfs4 mounts as probablySlow, like nfs/cifs/..
  * KNewFileMenu: show New Folder action shortcut (kde#366075)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed 0001-Fix-kio-using-only-tls1.0.patch and
  Fix-launching-terminal-desktop-files-with-konsole.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Fix HTTP date format sent by kio_http to always use the C locale
    (kde#372005)
  * KACL: fix memory leaks detected by ASAN
  * Fix memory leaks in KIO::Scheduler, detected by ASAN
  * Removed duplicate clear button (kde#369377)
  * Fix editing autostart entries when /usr/local/share/applications
    doesn't exist (kde#371194)
  * [KOpenWithDialog] Hide TreeView header
  * Sanitize the symlink name buffer size (kde#369275)
  * Properly finish DropJobs when triggered is not emitted
    (kde#363936)
  * ClipboardUpdater: fix another crash on Wayland (kde#359883)
  * ClipboardUpdater: fix crash on Wayland (kde#370520)
  * Support non integer scale factors in KFileDelegate (kde#366451)
  * kntlm: Distinguish between NULL and empty domain
  * Don't show overwrite dialog if file name is empty
  * kioexec: use friendly filenames
  * Fix focus ownership if url is changed before showing the widget
  * Major performance improvement when turning previews off in the
    file dialog (kde#346403)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Ported to categorized logging
  * Fix compilation against WinXP SDK
  * Allow uppercase checksums matching in Checksums tab
    (kde#372518)
  * Never stretch the last (=date) column in the file dialog
    (kde#312747)
  * Import and update kcontrol docbooks for code in kio from
    kde-runtime master
  * [OS X] make KDE's trash use the OS X trash
  * SlaveBase: add documentation about event loops and
    notifications and kded modules
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488369600">- Add patch to fix security issue with proxy configuration (boo#1027520)
  * sanitize-url-for-proxy.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Too many changes to list here
  * Commit translations from l10n-kf5
  * Cookies KCM: disable "delete" button when there is no current item
  * Use the new shared library exported by KDocTools
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Sanitize URLs before passing them to FindProxyForURL
  * make sure the cancel action is last
  * kio_help: use doOutputBuffer and simplify unicodeError
  * rename support: emit proper URL in FileRenamed
  * fix rename support: keep trashId rather than expecting it as input
  * remote: remove unused include
  * remote: remove redundant check
  * remote: rename kded module to allow co-installability with plasma-workspace &lt;= 5.9
  * remote: use QUrl::fromLocalFile()
  * remote: just check if file exists
  * remote: use QDir::mkpath() to create the remoteview folder
  * remote: drop Messages.sh
  * remote: use same debug category as other slaves
  * remote: use json protocol
  * remote: don't redefine TRANSLATION_DOMAIN
  * remote: slots -&gt; Q_SLOTS
  * Import remote ioslave from plasma-workspace
  * Fix TODO. We depend on Qt 5.3 by now
  * kio_trash: implement renaming of toplevel files and dirs
  * [PreviewJob] Remove maximum size for local files by default
  * allow to add application actions on an open menu
  * Port another use of QDateTime to QElapsedTimer. With proper / 1000 this time :)
  * Fixup previous commit to slave.cpp, divide by 1000 was missing.
  * [autotest] KTcpSocketTest was racy and leaky =&gt; simplify, fix.
  * Port from QDateTime::currentDateTime() to QElapsedTimer
  * Upgrade KF5 version to 5.32.0.
  * Fix double export in already-exported class
  * deprecate DrawFrame, as discussed in https://git.reviewboard.kde.org/r/129921/</changelog>
<changelog author="lbeltrame@kde.org" date="1490011200">- Drop sanitize-url-for-proxy.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1491998400">- Add enable-natural-sorting-in-KDirSortFilterProxyModel.patch to
  use natural sorting by default in the KDE file dialog and
  gwenview, configurable via the "NaturalSorting" option in
  kdeglobals (boo#1033668, kde#343452)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1496923200">- Add upstream patch to support running PIE binaries (kde#350018):
  * 0001-Identify-PIE-binaries-application-x-sharedlib-as-exe.patch</changelog>
<changelog author="wbauer@tmo.at" date="1498910400">- Add upstream patches to prevent /tmp getting filled up because
  full directories are copied to it when generating folder previews
  for remote locations and the trash (kde#208625, boo#969768)
  * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch
  * PreviewJob-skip-remote-directories.patch</changelog>
<changelog author="wbauer@tmo.at" date="1502798400">- Add fix-applying-special-file-attributes.patch to fix modifying
  advanced permissions in the file/folder properties dialog
  (boo#978935, kde#365795)</changelog>
<changelog author="wbauer@tmo.at" date="1503403200">- Add Really-rate-limit-INF_PROCESSED_SIZE-messages.patch to avoid
  high CPU load during file copies (kde#383843, boo#1016920,
  boo#1051349)
- Add KDesktopPropsPlugin-create-destination-dir.patch to fix
  modifying applications' .desktop files in the "Edit File Type"
  dialog if the corresponding directory doesn't exist in
  ~/.local/share/ (boo#1000946)</changelog>
<changelog author="wbauer@tmo.at" date="1509364800">- Add Always-reserve-space-for-icons.patch to fix file name
  overlapping with the icon in the file dialog if the generic
  fallback icon is used (kde#372207)</changelog>
<changelog author="wbauer@tmo.at" date="1509624000">- Add fix-handling-of-KCookieAdvice_AcceptForSession.patch to
  fix the "Accept For Session" cookie setting that was not properly
  respected (boo#1049975, kde#386325)</changelog>

</package>
<package pkgid="86af52b6e96fa64786f17e9569dda8b20d706b17c9dd2dc1ceddfcda8a6289fc" name="kio-lang" arch="noarch">
    <version epoch="0" ver="5.32.0" rel="5.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Fix KIO::linkAs() to work as advertised, i.e.
    fail if dest already exists
  * Fix KIO::put("file:///path") to respect the umask (kde#359581)
  * Fix KIO::pasteActionText for null dest item and for empty URL
  * Add support for undoing symlink creation
  * GUI option to configure global MarkPartial for KIO slaves
  * Fix MaxCacheSize limited to 99 KiB
  * Add clipboard buttons to checksums tab
  * KNewFileMenu: fix copying template file from embedded resource
    (kde#359581)
  * KNewFileMenu: Fix creating link to application (kde#363673)
  * KNewFileMenu: Fix suggestion of new filename when file
    already exist in desktop
  * KNewFileMenu: ensure fileCreated() is emitted for
    app desktop files too
  * KNewFileMenu: fix creating symlinks with a relative target
  * KPropertiesDialog: simplify button box usage,
    fix behavior on Esc
  * KProtocolInfo: refill cache to find newly installed protocols
  * KIO::CopyJob: port to qCDebug
    (with its own area, since this can be quite verbose)
  * KPropertiesDialog: add Checksums tab
  * Clean url's path before initializing KUrlNavigator
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1470657600">- Remove workaround to install "Create New" templates as actual
  files, the issues with using the embedded resource are fixed in
  5.25.0</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * KPropertiesDialog: remove warning note from docu,
    the bug is gone
  * [test program] resolve relative paths using QUrl::fromUserInput
  * KUrlRequester: fix error box when selecting a file and
    reopening the file dialog
  * Provide a fallback if slaves don't list the . entry
    (kde#366795)
  * Fix creating symlink over "desktop" protocol
  * KNewFileMenu: when creating symlinks use KIO::linkAs
    instead of KIO::link
  * KFileWidget: fix double '/' in path
  * KUrlRequester: use static connect() syntax, was inconsistent
  * KUrlRequester: pass window() as parent for the QFileDialog
  * Avoid calling connect(null, .....) from KUrlComboRequester
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475668800">- Added Fix-launching-terminal-desktop-files-with-konsole.patch
  (kde#368949, boo#1003125)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1476014400">- Add 0001-Fix-kio-using-only-tls1.0.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014401">- Update to 5.27.0
  * Fix KIO slaves using only tls1.0
  * Fix ABI break in kio
  * KFileItemActions: add addPluginActionsTo(QMenu *)
  * Show copy buttons only after checksum has been calculated
  * Add missing feedback when computing a checksum (kde#368520)
  * Fix KFileItem::overlays returning empty string values
  * Fix launching terminal .desktop files with konsole
  * Classify nfs4 mounts as probablySlow, like nfs/cifs/..
  * KNewFileMenu: show New Folder action shortcut (kde#366075)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed 0001-Fix-kio-using-only-tls1.0.patch and
  Fix-launching-terminal-desktop-files-with-konsole.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Fix HTTP date format sent by kio_http to always use the C locale
    (kde#372005)
  * KACL: fix memory leaks detected by ASAN
  * Fix memory leaks in KIO::Scheduler, detected by ASAN
  * Removed duplicate clear button (kde#369377)
  * Fix editing autostart entries when /usr/local/share/applications
    doesn't exist (kde#371194)
  * [KOpenWithDialog] Hide TreeView header
  * Sanitize the symlink name buffer size (kde#369275)
  * Properly finish DropJobs when triggered is not emitted
    (kde#363936)
  * ClipboardUpdater: fix another crash on Wayland (kde#359883)
  * ClipboardUpdater: fix crash on Wayland (kde#370520)
  * Support non integer scale factors in KFileDelegate (kde#366451)
  * kntlm: Distinguish between NULL and empty domain
  * Don't show overwrite dialog if file name is empty
  * kioexec: use friendly filenames
  * Fix focus ownership if url is changed before showing the widget
  * Major performance improvement when turning previews off in the
    file dialog (kde#346403)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Ported to categorized logging
  * Fix compilation against WinXP SDK
  * Allow uppercase checksums matching in Checksums tab
    (kde#372518)
  * Never stretch the last (=date) column in the file dialog
    (kde#312747)
  * Import and update kcontrol docbooks for code in kio from
    kde-runtime master
  * [OS X] make KDE's trash use the OS X trash
  * SlaveBase: add documentation about event loops and
    notifications and kded modules
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488369600">- Add patch to fix security issue with proxy configuration (boo#1027520)
  * sanitize-url-for-proxy.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Too many changes to list here
  * Commit translations from l10n-kf5
  * Cookies KCM: disable "delete" button when there is no current item
  * Use the new shared library exported by KDocTools
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Sanitize URLs before passing them to FindProxyForURL
  * make sure the cancel action is last
  * kio_help: use doOutputBuffer and simplify unicodeError
  * rename support: emit proper URL in FileRenamed
  * fix rename support: keep trashId rather than expecting it as input
  * remote: remove unused include
  * remote: remove redundant check
  * remote: rename kded module to allow co-installability with plasma-workspace &lt;= 5.9
  * remote: use QUrl::fromLocalFile()
  * remote: just check if file exists
  * remote: use QDir::mkpath() to create the remoteview folder
  * remote: drop Messages.sh
  * remote: use same debug category as other slaves
  * remote: use json protocol
  * remote: don't redefine TRANSLATION_DOMAIN
  * remote: slots -&gt; Q_SLOTS
  * Import remote ioslave from plasma-workspace
  * Fix TODO. We depend on Qt 5.3 by now
  * kio_trash: implement renaming of toplevel files and dirs
  * [PreviewJob] Remove maximum size for local files by default
  * allow to add application actions on an open menu
  * Port another use of QDateTime to QElapsedTimer. With proper / 1000 this time :)
  * Fixup previous commit to slave.cpp, divide by 1000 was missing.
  * [autotest] KTcpSocketTest was racy and leaky =&gt; simplify, fix.
  * Port from QDateTime::currentDateTime() to QElapsedTimer
  * Upgrade KF5 version to 5.32.0.
  * Fix double export in already-exported class
  * deprecate DrawFrame, as discussed in https://git.reviewboard.kde.org/r/129921/</changelog>
<changelog author="lbeltrame@kde.org" date="1490011200">- Drop sanitize-url-for-proxy.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1491998400">- Add enable-natural-sorting-in-KDirSortFilterProxyModel.patch to
  use natural sorting by default in the KDE file dialog and
  gwenview, configurable via the "NaturalSorting" option in
  kdeglobals (boo#1033668, kde#343452)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1496923200">- Add upstream patch to support running PIE binaries (kde#350018):
  * 0001-Identify-PIE-binaries-application-x-sharedlib-as-exe.patch</changelog>
<changelog author="wbauer@tmo.at" date="1498910400">- Add upstream patches to prevent /tmp getting filled up because
  full directories are copied to it when generating folder previews
  for remote locations and the trash (kde#208625, boo#969768)
  * PreviewJob-clean-up-empty-temp-file-when-get-fails.patch
  * PreviewJob-skip-remote-directories.patch</changelog>
<changelog author="wbauer@tmo.at" date="1502798400">- Add fix-applying-special-file-attributes.patch to fix modifying
  advanced permissions in the file/folder properties dialog
  (boo#978935, kde#365795)</changelog>
<changelog author="wbauer@tmo.at" date="1503403200">- Add Really-rate-limit-INF_PROCESSED_SIZE-messages.patch to avoid
  high CPU load during file copies (kde#383843, boo#1016920,
  boo#1051349)
- Add KDesktopPropsPlugin-create-destination-dir.patch to fix
  modifying applications' .desktop files in the "Edit File Type"
  dialog if the corresponding directory doesn't exist in
  ~/.local/share/ (boo#1000946)</changelog>
<changelog author="wbauer@tmo.at" date="1509364800">- Add Always-reserve-space-for-icons.patch to fix file name
  overlapping with the icon in the file dialog if the generic
  fallback icon is used (kde#372207)</changelog>
<changelog author="wbauer@tmo.at" date="1509624000">- Add fix-handling-of-KCookieAdvice_AcceptForSession.patch to
  fix the "Accept For Session" cookie setting that was not properly
  respected (boo#1049975, kde#386325)</changelog>

</package>
<package pkgid="8cc3d1d42b0d62197d6f6aad098d660a5bc3cfaeba7a76cb2657a7c894a086f8" name="kiwi-boot-requires" arch="x86_64">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="5a0634ea85b98e5667cbea43981fd68e04dc91e2f7756a4e9a34aaa016c3a942" name="kiwi-man-pages" arch="x86_64">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="072bea89babdd942c844f1c29de63fbb1bbfea7cfc4cde39cc337ef0dff3bcbe" name="kiwi-pxeboot" arch="x86_64">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="f517155edcbe9c1f202ebbcd7258ec1aafa510a9fecadcceb912497cb784dc2a" name="kiwi-tools" arch="x86_64">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="c39551c9bed2116e7a487b0cc0cd82028f8fbfc7630acc9a4bfe09f514b1afb9" name="kmail" arch="src">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1480248000">- Update spec-files to be consistent wiht KA</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1482580800">- Recommend akonadi-import-wizard (instead of
  akonadi-import-wizards), that's how the package is called</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Use isEmpty() directly</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491566400">- Remove unnecessary ldconfig calls for ktnef</changelog>
<changelog author="wbauer@tmo.at" date="1491566401">- Unconditionally build with libgpgmepp-devel/libqgpgme-devel,
  gpgmepp5 is no longer supported</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * It was an error to hide maximumattachmentsize feature
  * Minor optimization
  * Fix includes/Minor optimization</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * SearchDialog: improve performance by caching collection full paths.
  * Use QFileInfo::exists(...) static method
  * Migrate some files
  * Use QByteArrayLiteral here
  * Don't allow to edit collection name in this dialogbox
  * USe new signal from indexing agent
  * Minor optimization. If collection id is not remove we don't need to call
  * Use nullptr</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use a mCurrentCollection variable as discussed with david.
  * Clean stylesheet when we select a valid folder
  * Allow to add more file after --attach</changelog>
<changelog author="lbeltrame@kde.org" date="1495195200">- Add 0001-Add-missing-helper_p-include.patch: upstream patch
  to fix building with Qt 5.6</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure that we use plugin when we use sendlater feature
  * Remove old option
  * Add missing helper_p include
  * Fix list when we have empty string
  * Fix create list of emails
  * Fix typo
  * Rename methods
- Dropped upstreamed patches:
  * 0001-Add-missing-helper_p-include.patch</changelog>
<changelog author="wbauer@tmo.at" date="1506340800">- Add delay-filtering.patch to fix some problems with local
  filtering of mails (boo#1054205)</changelog>
<changelog author="wbauer@tmo.at" date="1506600000">- Recommend akonadi-search to make index-related functionality
  work out of the box (boo#1053540, boo#1013687)</changelog>

</package>
<package pkgid="24801302acc658a854e120d64d083b074813c3e813c07695edd5428e712f0426" name="kmail" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1480248000">- Update spec-files to be consistent wiht KA</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1482580800">- Recommend akonadi-import-wizard (instead of
  akonadi-import-wizards), that's how the package is called</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Use isEmpty() directly</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491566400">- Remove unnecessary ldconfig calls for ktnef</changelog>
<changelog author="wbauer@tmo.at" date="1491566401">- Unconditionally build with libgpgmepp-devel/libqgpgme-devel,
  gpgmepp5 is no longer supported</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * It was an error to hide maximumattachmentsize feature
  * Minor optimization
  * Fix includes/Minor optimization</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * SearchDialog: improve performance by caching collection full paths.
  * Use QFileInfo::exists(...) static method
  * Migrate some files
  * Use QByteArrayLiteral here
  * Don't allow to edit collection name in this dialogbox
  * USe new signal from indexing agent
  * Minor optimization. If collection id is not remove we don't need to call
  * Use nullptr</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use a mCurrentCollection variable as discussed with david.
  * Clean stylesheet when we select a valid folder
  * Allow to add more file after --attach</changelog>
<changelog author="lbeltrame@kde.org" date="1495195200">- Add 0001-Add-missing-helper_p-include.patch: upstream patch
  to fix building with Qt 5.6</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure that we use plugin when we use sendlater feature
  * Remove old option
  * Add missing helper_p include
  * Fix list when we have empty string
  * Fix create list of emails
  * Fix typo
  * Rename methods
- Dropped upstreamed patches:
  * 0001-Add-missing-helper_p-include.patch</changelog>
<changelog author="wbauer@tmo.at" date="1506340800">- Add delay-filtering.patch to fix some problems with local
  filtering of mails (boo#1054205)</changelog>
<changelog author="wbauer@tmo.at" date="1506600000">- Recommend akonadi-search to make index-related functionality
  work out of the box (boo#1053540, boo#1013687)</changelog>

</package>
<package pkgid="26f50d38098e334a2108fc92e1454bef6dd2ce46e1a0d87e5b80602f6f1ef0a0" name="kmail-application-icons" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1480248000">- Update spec-files to be consistent wiht KA</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1482580800">- Recommend akonadi-import-wizard (instead of
  akonadi-import-wizards), that's how the package is called</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Use isEmpty() directly</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491566400">- Remove unnecessary ldconfig calls for ktnef</changelog>
<changelog author="wbauer@tmo.at" date="1491566401">- Unconditionally build with libgpgmepp-devel/libqgpgme-devel,
  gpgmepp5 is no longer supported</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * It was an error to hide maximumattachmentsize feature
  * Minor optimization
  * Fix includes/Minor optimization</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * SearchDialog: improve performance by caching collection full paths.
  * Use QFileInfo::exists(...) static method
  * Migrate some files
  * Use QByteArrayLiteral here
  * Don't allow to edit collection name in this dialogbox
  * USe new signal from indexing agent
  * Minor optimization. If collection id is not remove we don't need to call
  * Use nullptr</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use a mCurrentCollection variable as discussed with david.
  * Clean stylesheet when we select a valid folder
  * Allow to add more file after --attach</changelog>
<changelog author="lbeltrame@kde.org" date="1495195200">- Add 0001-Add-missing-helper_p-include.patch: upstream patch
  to fix building with Qt 5.6</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure that we use plugin when we use sendlater feature
  * Remove old option
  * Add missing helper_p include
  * Fix list when we have empty string
  * Fix create list of emails
  * Fix typo
  * Rename methods
- Dropped upstreamed patches:
  * 0001-Add-missing-helper_p-include.patch</changelog>
<changelog author="wbauer@tmo.at" date="1506340800">- Add delay-filtering.patch to fix some problems with local
  filtering of mails (boo#1054205)</changelog>
<changelog author="wbauer@tmo.at" date="1506600000">- Recommend akonadi-search to make index-related functionality
  work out of the box (boo#1053540, boo#1013687)</changelog>

</package>
<package pkgid="eede6851de64d7dffa023455364bff3af8919da1d01913f54c95f61842e7b56a" name="kmail-lang" arch="noarch">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1480248000">- Update spec-files to be consistent wiht KA</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1482580800">- Recommend akonadi-import-wizard (instead of
  akonadi-import-wizards), that's how the package is called</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Use isEmpty() directly</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491566400">- Remove unnecessary ldconfig calls for ktnef</changelog>
<changelog author="wbauer@tmo.at" date="1491566401">- Unconditionally build with libgpgmepp-devel/libqgpgme-devel,
  gpgmepp5 is no longer supported</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * It was an error to hide maximumattachmentsize feature
  * Minor optimization
  * Fix includes/Minor optimization</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * SearchDialog: improve performance by caching collection full paths.
  * Use QFileInfo::exists(...) static method
  * Migrate some files
  * Use QByteArrayLiteral here
  * Don't allow to edit collection name in this dialogbox
  * USe new signal from indexing agent
  * Minor optimization. If collection id is not remove we don't need to call
  * Use nullptr</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use a mCurrentCollection variable as discussed with david.
  * Clean stylesheet when we select a valid folder
  * Allow to add more file after --attach</changelog>
<changelog author="lbeltrame@kde.org" date="1495195200">- Add 0001-Add-missing-helper_p-include.patch: upstream patch
  to fix building with Qt 5.6</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure that we use plugin when we use sendlater feature
  * Remove old option
  * Add missing helper_p include
  * Fix list when we have empty string
  * Fix create list of emails
  * Fix typo
  * Rename methods
- Dropped upstreamed patches:
  * 0001-Add-missing-helper_p-include.patch</changelog>
<changelog author="wbauer@tmo.at" date="1506340800">- Add delay-filtering.patch to fix some problems with local
  filtering of mails (boo#1054205)</changelog>
<changelog author="wbauer@tmo.at" date="1506600000">- Recommend akonadi-search to make index-related functionality
  work out of the box (boo#1053540, boo#1013687)</changelog>

</package>
<package pkgid="a560f63d0264385842d4d72f3c1b6070bdb9006035ffbba0880f5de7c1cf1485" name="koan" arch="noarch">
    <version epoch="0" ver="2.6.6" rel="11.1"/>

<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>
<changelog author="mihai.dinca@suse.com" date="1507204800">- fix setup.py to identify SUSE OS correctly bsc#1046679
  Added:
  * fix-os-release.patch</changelog>
<changelog author="mc@suse.com" date="1507291200">- fix koan wait parameter initialization
  Added:
  * fix-wait.patch</changelog>

</package>
<package pkgid="91019c4832cfc12c7bba4248b03974837aec0f1720ea6af54bb411530ce92514" name="koan" arch="noarch">
    <version epoch="0" ver="2.6.6" rel="8.2"/>

<changelog author="mc@suse.de" date="1456920000">- support modprobe.d on RHEL6
  * cobbler-modprobe-d.patch
- fix cobbler yaboot handling (bsc#968406, bsc#966622)
  * fix-cobbler-yaboot-handling.patch</changelog>
<changelog author="mc@suse.de" date="1457092800">- fix format error while provisioning of a virtual machine
  (bsc#969541)
  Update: koan-improve-virt-install-error-reports.patch</changelog>
<changelog author="mc@suse.de" date="1457352000">- fix error message in cobblerd status when cobbler-web is
  not installed (bsc#966841)</changelog>
<changelog author="mc@suse.de" date="1458129600">- add ppc64le to archs
  * 0001-cobbler-add-little-endian-powerpc-support.patch</changelog>
<changelog author="mc@suse.de" date="1459425600">- handle list value for kernel options correctly (bsc#973413)</changelog>
<changelog author="mc@suse.de" date="1461326400">- add logrotate file for cobbler (bsc#976826)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1463140800">- Disabling 'get-loaders' command and 'check' fixed. bsc#973418
  Added:
  * cobbler-check-and-get-loaders-fix.patch</changelog>
<changelog author="mc@suse.de" date="1463486400">- remove grubby-compat because perl-Bootloader gets dropped
  Remove:
  * grubby-compat.diff
  * do_not_use_grubby_compat_when_grub2_is_in_use.diff
  Add:
  * use_grub2_on_suse.diff</changelog>
<changelog author="mc@suse.de" date="1466164800">- convert bootoption "text" into "textmode=1" for SUSE systems
  (bsc#984998)
  Add:
  * fix-textmode-for-SUSE.dif</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1472731200">- Enabling PXE grub2 support for PowerPC (bsc#986978)
  Add:
  * adding-grub2-support-for-ppc.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1479988800">- Using "chain.c32" instead of "LOCALBOOT -1" for the local boot
  entry in pxe menu (bsc#988889)
  Add:
  * localboot-fix-using-chain-c32.patch</changelog>
<changelog author="mantel@suse.de" date="1489492800">- fix handling of name_servers_search in networking.xml bsc#1029276</changelog>
<changelog author="mantel@suse.de" date="1489492801">- name_servers needs the same fix (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579200">- some more occurrences of same problem fixed (bsc#1029276)</changelog>
<changelog author="mantel@suse.de" date="1489579201">- refresh patch for fuzzless appliance</changelog>
<changelog author="mantel@suse.de" date="1490097600">- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)</changelog>
<changelog author="mc@suse.de" date="1491307200">- support UEFI boot with cobbler generated tftp tree (bsc#1020376)</changelog>
<changelog author="mihai.dinca@suse.com" date="1496836800">- fix script endpoint security bug CVE-2016-9605 (bsc#1030582)
  Add:
  * fix-script-endpoint-security-bug-1030582.patch</changelog>
<changelog author="mseidl@suse.de" date="1502280000">- (bsc#1048183) fix missing args and location for xen</changelog>
<changelog author="mseidl@suse.de" date="1502280001">- missed applying last patch in spec file</changelog>

</package>
<package pkgid="bf41bdaf2f2ae091ff68f35f9fd8475265e3e8681a341ee64750707739a8b0bf" name="konversation" arch="src">
    <version epoch="0" ver="1.7.4" rel="3.1"/>

<changelog author="coolo@suse.com" date="1323259200">- fix license to be in spdx.org format</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 1.5-rc1
  * Performance optimizations and code cleanup for processing NAMES
  messages from the server.
  * The bundled 'media' script has been rewritten from scratch to
  implement the MPRIS2 standard for interfacing with media players -
  and only the MPRIS2 standard. This means losing support for a
  number of legacy players which do not support MPRIS2
  * The bundled 'sayclip' script has been rewritten from scratch,
  removing the now-redundant flood handling found in the old version
  * The bundled 'bug' script has been rewritten from scratch, featuring
  improved error handling and adding internationalization support.
  * The bundled 'sysinfo' script has been rewritten from scratch.
  * All types of tabs which sport a prominent input widget will now see
  focus moved to that widget and the first keypress redirected when
  focus is on the treelist version of the tab bar while starting to
  type.
  * Performance improvements have been applied to hotpaths in the
  protocol implementation.
  * A '/umode' convenience command to set modes on self has been added.
  * The 'Mode change' notification event now sports a proper text
  payload describing what has happened.
  * The system tray icon now shows an overlay icon when global away
  is enabled.
  * The behavior of the 'Show/Hide Konversation' action has been
  simplified and tuned to do the correct thing in more scenarios.
  * A basic framework to support the IRC Client Capabilities Extension
  ("CAP") has been added.
  * The user interface for the Auto Identify settings in the Identities
  dialog has been extended by a combo box that allows choosing the
  type of authentification to be performed.
  * SASL PLAIN authentification is now supported.
  * Standard NickServ authentification has been further improved.
  * The server password-based authentification supported by some
  networks is now configurable in the Identities dialog as well,
  making it more discoverable and allowing to keep Auto Identify
  settings generally with the Identity rather than requiring going
  through the Edit Server dialog.
  * Added an option to restrict logging to private conversations
  (queries, DCC chats).
  * Both the regular tab bar and its listview version now implement
  "spring-loading".
  * Added support for authenticating via a SSL Client Certificate in
  the form of a PEM file if Konversation is built against KDE
  Platform v4.8.3 or higher.
  * Konversation now depends on KDE Platform v4.6.0 or higher and
  Qt v4.7.0 or higher.
  * Raw log tabs now use color coding to visually differenciate inbound
  and outbound messages, using the server message and channel message
  colors from the color settings respectively.
  * Queries now start with an info message listing the channels you
  and the other side have in common, i.e. that both of you are
  presently in.
  * The DCC Status transfer list update interval now depends on the
  graphics effects level setting in KDE System Settings
  * Fixed a bug causing the input box height not to be adjusted
  appropriately to fit the contents when the "Input box expands with text"
  option is enabled and the window is resized horizontally, causing
  the text to rewrap.
  * Fixed a bug causing the context menu for an item in the DCC Status
  transfer list to appear in the wrong position.
  * The list of placeholders available in Quick Button patterns now
  mention the previously undocumented "%k" placeholder for the current
  channel's key and is sorted alphabetically.
  * When a Quick Button pattern replaces the current input box contents
  (due to the presence of the "%n" expando in the pattern) they are
  now added to the input box history first.
  * Quick Button patterns now support a new "%i" placeholder that
  is replaced with the current contents of the input box.
  * The double-click action command for Watched Nicks list entries now
  supports command aliases.
  * Fixed a bug causing wildcard expansion to be performed on the
  input box contents when they start with a Command Alias
  * The Quick Buttons options now feature a new checkbox that
  toggles whether Quick Buttons that operate on nicknames will be
  shown alongside other nickname-related actions in context menus
  throughout Konversation.
  * The Topic tab in the Channel Options dialog has been redesigned and
  rewritten from scratch, featuring a much improved UI and many bug fixes
  * The size of the Channel Options dialog is now synchronized between
  the dialogs for different channels and remembered across application
  restarts.
  * The widths of the columns in the Ban List tab in the Channel Options
  dialog is now synchronized across all Channel Options dialogs.
  * Fixed a bug causing the topic at the top of channel tabs not to return
  to its encrypted form after the decryption key for a channel has
  been deleted.
  * Debug builds of Konversation now understand a "--nui" command line
  argument to disable the check for whether Konversation is already
  running, thus allowing multiple instances of Konversation to be started.
  * Part and Quit messages now show the hostmask of the subject, consistent
  with Join messages.
  * Fixed a bug causing the What's This help tooltip for nickname lists
  to show the regular user icon instead of the away icon as the away
  icon example.
  * The desktop notification for a completed incoming DCC file transfer
  now offers an action to open/run the received file.
  * The nickname list theme preview in the configuration dialog now
  uses the same background color as the actual nickname lists.
  * Various fixed to tab stops and margins in the configuration dialog pages.
  * Minor UI fixes for the Queue Tuner (opened by /queuetuner), correcting
  icon use and button labels.
  * Removed excess white space from several warning dialog messages.
  * Fixed a bug causing the Watched Nicks to spam the active tab with
  repeated WHOIS requests for someone on the Watched Nicks List after
  opening a query tab to them while they were offline.
  * Added an action to manually apply the user-configured auto-replace rules
  to the input box contents without sending the message, enabling user
  review before doing so.
  * Added the ability to set a different spell-checking language for every
  tab, from the context menu of the input box.
  * Fixed several bugs in preserving per-tab encoding settings across
  application restarts.
  * Link opening now properly respects KDE's file type associating
  settings instead of always opening a web browser.
  * Fix Konversation not saving the unchecked "... a channel invitation
  is received" warning dialog option in the Warning Dialogs list in the
  configuration dialog
  * Unchecking the "... a channel invitation is received" warning dialog
  option in the Warning Dialogs list in the configuration dialog now
  sets the behavior for future channel join invitations to always
  joining them.
  * The default behavior upon receiving a channel join invitation is
  now to ask the user, instead of silently accepting the invitation.
  * Server status tabs for networks listed in the Server List dialog
  now have a "Connect at Startup" checkbox in their context menu, similar
  to the "Join  on Connect" checkbox in the context menu of channel tabs.
  * Added a workaround for behavior in the Phonon multimedia library that
  could lead to crashes on application quit when using custom highlight
  notification sounds.
  * Fixed a bug causing an ambiguous shortcut warning dialog when using the
  default ESC keyboard shortcut to invoke the Focus Input Box action
  after the search has been opened and the Focus New Tabs option was
  disabled while a new tab was opened.
  * Fixed a bug causing multiple ignore list entries with the same pattern
  not to be preserved across application restarts.
  * Fixed a bug causing the tab label for open log viewer tabs to be
  set to "ChatWindowObject" when switching the tab bar position between
  top or bottom and left.
  * Markup cleanups in the handbook and visual improvements to handbook
  icons in the PDF export on http://doc.kde.org.
  * Code cleanups for warnings issued by clang.
  * Build system improvements for kdepimlibs includes handling.
  * Made the code turning channel names into clickable links more strict
  about what types of trailing punctuation it incorporates into the link.
  * Fixed bugs causing currently joined channels not to react correctly to
  changes in the enabled state of the Automatic User Information Lookup
  setting.
  * The reaction to a change of the Automatic User Information Lookup interval
  setting has been improved considerably
  * All forms of opening a query (the '/query' command, clicking a nickname
  in the chat text display, double-clicking in the nickname list or the
  nickname list context menu action) now consistently move focus to an
  existing matching query tab, matching the behavior of various forms of
  joining an already-joined channel.
  * Minor visual (the selection decoration for server items now spans the
  whole row) and behavioral (when collapsing a network while one of its a
  server is selected, the selection is now moved to the network item instead
  of becoming invisible)
  * Fixed a bug causing the option to automatically focus new query tabs
  not to work correctly.
  * Fixed a bug causing IRC formatting state not to be reset at the end
  of a topic when showing it in a channel's chat text display, potentially
  causing the rest of the line to be malformatted.
  * Fixed a compilation problem on 64bit Windows.
  * If built against KDE Platform v4.8.3 or higher, the date column
  in the Url Catcher will now immediately reflect changes to the date
  format made in KDE's System Settings application.
  * Fixed a bug causing an application crash in response to an (illegal)
  '/unban &lt;#channel&gt;' command.
  * Removing newlines in the Edit Paste dialog can now handle Windows-style
  carriage return line breaks and whitespace characters other than
  ASCII 0x20.
  * Showing line and paragraph indicators in the Edit Paste dialog's
  text entry field unfortunately had to be disabled for the time being
  due to a bug in the underlying Qt code.
  * Leaving the "Use custom version reply" option's text field empty now
  disables responding to CTCP VERSION requests entirely instead of sending
  empty responses.</changelog>
<changelog author="coolo@suse.com" date="1364126400">- readd download URL</changelog>
<changelog author="pgajdos@suse.com" date="1386072000">- use png_fix macro [bnc#852862]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389182400">- Update to 1.5-rc2
  * The bundled 'sysinfo' script now tries harder to determine the
  current CPU clock frequencies (it now looks at
  sys/.../cpufreq/scaling_cur_freq in addition to /proc/cpuinfo).
  * Fixed a bug causing the flood fill tool in DCC Whiteboard tabs
  not to use the correct color after using the color picker tool
  to set it.
  * Launching the default browser when clicking on links now works
  properly again on Windows.
  * Fixed a bug causing certain combinations of sorting and
  filtering in Channel List tabs not to work correctly, leading
  to partially unsorted list entries.
  * Minor rewordings and cleanups in UI text and the handbook for
  clarity and correctness, e.g. the "Notify" notification event
  is now known as "Nick on-line".
  * More information sources are now taken into account to update
  Konversation's idea of whether a particular nick is identified
  with services or not (information from IRC numeric 330 was
  previously discarded).
  * Fixed a bug causing Konversation to attempt to PART a channel
  that's no longer actually joined when closing a channel tab
  after having been kicked from the channel.
  * Some included PNG image files were badly encoded, this has
  been addressed.
  * Fixed a bug causing the file URL for an authentication
  certificate in the Identities dialog to be forgotten across
  application restarts.
  * The warning about text in the topic editor exceeding the
  server-allowed limit now calculates the threshold more
  correctly, taking encoding and IRC formatting expandos
  into account.
  * Konversation now depends on KDE Platform v4.7.0 or higher
  and Qt v4.7.0 or higher.
- Drop png_fix macro, icon has been fixed upstream
- Bump libkde4-devel BuildRequires to &gt;= 4.7.0</changelog>
<changelog author="hpj@urpla.net" date="1390219200">- Update to 1.5
  * Expanded interface translations</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1394798400">- Konversation can operate without kdepim4-runtime, so make it a
  Recommends instead of requires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1415102400">- Update to 1.5.1
  * Konversation 1.5.1 is a maintenance release containing only bug
  fixes. The included changes address several minor behavioral
  defects and a low-risk DoS security defect in the Blowfish
  ECB support. The KDE Platform version dependency has increased
  to v4.9.0 to gain access to newer Qt socket transport
  security flags.
  * Fixed a bug causing wildcards in command alias replacement
  patterns not to be expanded.
  * Fixed a bug causing auto-joining of channels not starting
  in # or &amp; to sometimes fail because the auto-join command
  was generated before we got the CHANTYPES pronouncement
  by the server.
  * Added a size sanity check for incoming Blowfish ECB blocks.
  The blind assumption of incoming blocks being the expected
  12 bytes could lead to a crash or up to 11 byte information
  leak due to an out-of-bounds read. CVE-2014-8483.
  * Enabling SSL/TLS support for connections will now advertise
  the protocols Qt considers secure by default, instead of
  being hardcoded to TLSv1.
  * Fixed the bundled 'sysinfo' script not coping with empty
  lines in /etc/os-release.
  * Made disk space info in the bundled 'sysinfo' script more
  robust by forcing the C locale for 'df'.
  * Added an audio player type hint for Cantata to the bundled
  'media' script.
  * Fixed some minor comparison logic errors turned up by
  static analysis.
  * Konversation now depends on KDE Platform v4.9.0 or higher.
- Bump libkde4-devel BuildRequires to 4.9.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1430395200">- Update to 1.6:
  * Improved support for character set aliases via KCharsets.
  * Improved behavior when reconnecting and Konversation had to use
    an alternate nickname for the previous connection because the
    preferred nickname was already in use: Konversation will now
    try harder to go back to nicknames sorted earlier in the
    identity's nickname list, instead of advancing down the list
    without checking whether earlier nicknames have become
    available again.
  * Konversation will no longer give up trying to connect when only
    a single nickname is configured and not available at connection
    time. Instead, it will do as many reconnection attempts as
    allowed by user configuration.
  * Fixed incorrect size calculations for the channel topic text
    label causing cut-off text and unwanted collapsing of the topic
    area.
  * Fixed a bug causing auto-connect not to connect to networks in
    the order they are listed in the Server List dialog.
  * Fixed a bug causing the main window not to be raised when an
    Konversation is started an additional time and the window is
    currently minimized.
  * The default tabs position is now 'Left', i.e. the treelist
    version of the tab bar.
  * Tabs can now be reordered by drag and drop again.
  * Fixed various rendering issues in the treelist version of the
    tab bar and made it high-DPI scaling-capable.
  * Fixed a bug causing Channel List tabs not to be sorted below
    the status tab of the server they belong to in the treelist
    version of the tab bar, and corrupt its contents.
  * Fixed margins in the Edit Network dialog.
  * Improved wording and correctness of several interface messages.
  * Fixed a bug causing some interface messages and labels not to
    use their translated versions when running with a language
    other than US English.
  * Fixed a bug causing Konversation not to generate default
    command aliases for installed scripts at startup anymore.
  * The bundled 'cmd' script now defaults to trying to decode
    command output as Utf-8 even when run on Python 2.
  * Fixed the bundled 'bug' script not working.
  * Fixed naming of bundled icons.
  * Konversation now opts into Qt's high-DPI pixmap handling.
  * Adjusted build system to use co-installable version of qca-qt5.
  * Fixed build failures on Windows.
  * Konversation now depends on KDE Frameworks v5.2.0 and Qt
    v5.3.0.
  * The default nickname list theme has been updated to KDE's new
    Breeze visual identity.
  * Notification events now have non-generic titles to prevent
    Plasma Desktop 5 from merging events from different sources.
  * Fixed a bug causing the "Focus Input Bar" action to be
    enabled/disabled at incorrect times.
- Package ported to KF5. Updated build and runtime requirements to
  the KF5 ones.
- Removed support for old openSUSE versions.</changelog>
<changelog author="wbauer@tmo.at" date="1469361600">- Update to 1.6.1:
  * Added an option to allow a server to bypass the global proxy settings.
  * Fixed a crash when changing the Qt style engine.
  * Fixed a crash when running "/exec -showpath" with no script name.
  * Fixed notification events for DCC Chats not working.
  * Fixed crash when closing the DCC Status tab.
  * Fixed crashes with the ISO-2022-JP encoding.
  * Fixed the "Close All Open Queries" action not working properly.
  * Minor UI polish, e.g. the margin under the nicklist when the Quick Button
    grid is disabled or emtpy.
  * Fixed missing icons on the Next/Previous buttons in the search bar.
  * On screens to small to fit Konversation's configuration dialog, the
    dialog will now show scrollbars around its content instead of the dialog
    buttons being forced off-screen.
  * Konversation now sets its window icon in a way that causes a hi-res icon
    to be available in window switchers such as Plasma's Alt+Tab UI.
  * Removed the spell checking language submenu from the context menu of the
    input bar - KDE Frameworks 5 now contains this upstream, leading to two
    submenus.
  * Fixed installing the Oxygen nickname list theme.
  * Fixed changes to the tab bar font's font weight being applied to the chat
    text area.
  * Minor changes to tooltips to support the Wayland windowing system better.
  * Fixed the Windows build.
  * Added KCrash (DrKonqi) support.
  * Improved support for the KDE Kiosk framework, fixing checks for the
    "shell_command" privilege.
  * Added AppData metadata for app stores.</changelog>
<changelog author="wbauer@tmo.at" date="1470225600">- Update to 1.6.2 hotfix release:
  * Fixed a bug causing various operations on server list data to crash,
    e.g. pressing "Edit" on a server sub-item in the Server List dialog.
  * Translations for AppData metadata added in v1.6.1.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488715200">- Add upstream patch to fix crash on exit:
  * fix-crash-on-quit.patch</changelog>
<changelog author="wbauer@tmo.at" date="1492344000">- Update to 1.7:
  * Two-finger scroll on the vertical channel list is now less sensitive.
  * Fixed execution of bundled scripts showing an error about locating
    translation files when running on a system without kde4-config installed.
  * Fixed a bug in executable command line parsing for passed URLs.
  * Fixed Konversation failing to start on Windows systems without D-Bus
    (it would previously exit if it failed to initialize its D-Bus service).
  * Ported from deprecated KDE Frameworks APIs to 5.24+ API
    (v1.7 requires Frameworks 5.25 or higher).
  * Improved support for CAP negotiation
  * Output for CAP LS and CAP LIST is now shown in the server status view
  * Added support for IRCv3 CAP MULTI-PREFIX
  * Added support for IRCv3 CAP AWAY-NOTIFY
  * Added support for IRCv3 CAP ACCOUNT-NOTIFY
  * Added support for IRCv3 CAP EXTENDED-JOIN
  * Added support for IRCv3 CAP USERHOST-IN-NAMES
  * Added support for extended WHO
  * Added support for server-time and message tags
  * Added support for znc.in/server-time-iso, making buffer playback from ZNC
    much nicer
  * Added support for the SASL EXTERNAL authentication mechanism,
    e.g. needed for using Tor with freenode.
  * Redesigned search bar in chat views
  * Added support for font zooming to chat views
  * Improved bi-di text handling in chat views
  * The --restart command line argument works again
  * Fixed command line argument parsing when Konversation is already running
  * Fixed tab completion not working when pressing tab after a full
    existing nickname as prefix
  * Fixed the topic editor not updating when the topic changes
  * Fixed nickname links including the pipe character
  * Fixed the Invite dialog not closing on OK
  * Fixed angle bracket display in OSD message bubbles
  * Fixes to core protocol handling, e.g. in prefix parsing
  * Fixed crash on close when the nick menu has been shown
  * Fixed crash on quit
  * Fixed crash when closing views
  * Fixed crash in DCC resume dialogs without a Retry button
  * Fixed incorrect icon for the global away action
  * Minor UI layout cleanups, e.g. in the Behavior -&gt; Chat Window settings
    page and fixes to tooltips
  * Code cleanups, e.g. removal of unused settings and related code paths,
    porting away from deprecated API, and more
  * Overhauled and corrected handbook &amp; refreshed handbook screenshots to
    Frameworks 5 version
  * Build fixes for Windows (MSVC compatibility and winsock linking)
  * The Windows and Mac builds now have app icons
  * Improved code portability by using different byte swapping routines
  * Updated AppStream metadata
  * Konversation now depends on Qt 5.5+ and KDE Frameworks 5.25+
- Drop fix-crash-on-quit.patch, fixed upstream</changelog>
<changelog author="wbauer@tmo.at" date="1493899200">- No need to define _kf5_appstreamdir any more, it doesn't build on
  42.1 anyway as it requires newer KDE Frameworks
- Update Qt build requirements to 5.5.0 or higher</changelog>
<changelog author="wbauer@tmo.at" date="1494417600">- Update to 1.7.2:
  * no code changes
  * incomplete and badly maintained translations removed that were
    accidentally included with the v1.7.1 release
- Update to 1.7.1:
  * Fixed requesting the znc.in/server-time-iso capability from the server.
  * Fixed SASL EXTERNAL authentication without an account name set in the
    Identity settings.
  * Fixed clicking on nickname links containing the ` character.
  * Fixed the Highlight page in the Configure Konversation dialog
    not enabling/disabling the Apply button correctly.
  * Minor cleanups in application metadata setup code.</changelog>
<changelog author="wbauer@tmo.at" date="1494504000">- Specify minimum KF5 version for build requirements
- Remove no longer used/necessary sonnet-devel BuildRequires
- Change package summary: it's "by" KDE, not "for" KDE</changelog>
<changelog author="jengelh@inai.de" date="1494936000">- Trim description from redundant phrasing, and ensure neutrality.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1503662400">- Add patch to fix prefix handling for channel types (kde#383801):
  * fix-prefix-addressed-message-handling.patch</changelog>
<changelog author="wbauer@tmo.at" date="1510315200">- Update to 1.7.3:
  * Added a copy action to the context menu of nicknames in the
    chat text view.
  * Re-enabled channel mode buttons.
  * Reduced emission of Unicode directional control characters in
    the chat text view. Unnecessary control characters could
    sometimes cause problems with copying text from Konversation
    and pasting it into terminal applications, confusing them.
  * Fixed handling of nick and channel prefix characters
    potentially using the same set of symbols.
  * Removed redundant escaping of angle brackets in GECOS
    ("realname") field.
  * The nickname combobox will no longer change the nickname to
    the current value whenvever it loses focus.
  * Fixed color scheme handling in the treelist version on the tab
    bar, fixing an issue where the background and text color of
    the selected item would sometimes be the same, rendering the
    item unreadable.
  * Fixed handling of IRC URLs for channels starting with more
    than one #, addressing a percent-encoding problem with
    bookmarks of them.
  * Fixed custom chat text view font family reverting to system
    default font family upon using the increase/decrease font size
    actions.
  * Fixed chat text view font size adjusted via the
    increase/decrease font size actions reverting to configuration
    default when OK'ing the config dialog.
  * Fixed incorrect checkbox states in the Channel Invite dialog.
  * Fixed a crash in IRC v3 extended-join parsing.
  * Fixed a crash in parsing IRC color formatting codes.
    (CVE-2017-15923 boo#1068097)
  * Fixed a minor memory leak in the Join Channel dialog code.
  * Removed unnecessary nickname list debug message sent as
    warning.
- Drop fix-prefix-addressed-message-handling.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1510747200">- Update to 1.7.4:
  * Fixed a bug causing the size of a custom chat text view font
    set via the configuration dialog to be ignored. A font size
    modification done via the Enlarge/Decrease Font Size actions
    is now applied on top of the configured size (or the system
    default font size, respectively).</changelog>

</package>
<package pkgid="ee383cfad9770de81e4b8e45b3bff4a9c1cf62e6f4b84bf53dc0d82a2caeef52" name="konversation" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="3.1"/>

<changelog author="coolo@suse.com" date="1323259200">- fix license to be in spdx.org format</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 1.5-rc1
  * Performance optimizations and code cleanup for processing NAMES
  messages from the server.
  * The bundled 'media' script has been rewritten from scratch to
  implement the MPRIS2 standard for interfacing with media players -
  and only the MPRIS2 standard. This means losing support for a
  number of legacy players which do not support MPRIS2
  * The bundled 'sayclip' script has been rewritten from scratch,
  removing the now-redundant flood handling found in the old version
  * The bundled 'bug' script has been rewritten from scratch, featuring
  improved error handling and adding internationalization support.
  * The bundled 'sysinfo' script has been rewritten from scratch.
  * All types of tabs which sport a prominent input widget will now see
  focus moved to that widget and the first keypress redirected when
  focus is on the treelist version of the tab bar while starting to
  type.
  * Performance improvements have been applied to hotpaths in the
  protocol implementation.
  * A '/umode' convenience command to set modes on self has been added.
  * The 'Mode change' notification event now sports a proper text
  payload describing what has happened.
  * The system tray icon now shows an overlay icon when global away
  is enabled.
  * The behavior of the 'Show/Hide Konversation' action has been
  simplified and tuned to do the correct thing in more scenarios.
  * A basic framework to support the IRC Client Capabilities Extension
  ("CAP") has been added.
  * The user interface for the Auto Identify settings in the Identities
  dialog has been extended by a combo box that allows choosing the
  type of authentification to be performed.
  * SASL PLAIN authentification is now supported.
  * Standard NickServ authentification has been further improved.
  * The server password-based authentification supported by some
  networks is now configurable in the Identities dialog as well,
  making it more discoverable and allowing to keep Auto Identify
  settings generally with the Identity rather than requiring going
  through the Edit Server dialog.
  * Added an option to restrict logging to private conversations
  (queries, DCC chats).
  * Both the regular tab bar and its listview version now implement
  "spring-loading".
  * Added support for authenticating via a SSL Client Certificate in
  the form of a PEM file if Konversation is built against KDE
  Platform v4.8.3 or higher.
  * Konversation now depends on KDE Platform v4.6.0 or higher and
  Qt v4.7.0 or higher.
  * Raw log tabs now use color coding to visually differenciate inbound
  and outbound messages, using the server message and channel message
  colors from the color settings respectively.
  * Queries now start with an info message listing the channels you
  and the other side have in common, i.e. that both of you are
  presently in.
  * The DCC Status transfer list update interval now depends on the
  graphics effects level setting in KDE System Settings
  * Fixed a bug causing the input box height not to be adjusted
  appropriately to fit the contents when the "Input box expands with text"
  option is enabled and the window is resized horizontally, causing
  the text to rewrap.
  * Fixed a bug causing the context menu for an item in the DCC Status
  transfer list to appear in the wrong position.
  * The list of placeholders available in Quick Button patterns now
  mention the previously undocumented "%k" placeholder for the current
  channel's key and is sorted alphabetically.
  * When a Quick Button pattern replaces the current input box contents
  (due to the presence of the "%n" expando in the pattern) they are
  now added to the input box history first.
  * Quick Button patterns now support a new "%i" placeholder that
  is replaced with the current contents of the input box.
  * The double-click action command for Watched Nicks list entries now
  supports command aliases.
  * Fixed a bug causing wildcard expansion to be performed on the
  input box contents when they start with a Command Alias
  * The Quick Buttons options now feature a new checkbox that
  toggles whether Quick Buttons that operate on nicknames will be
  shown alongside other nickname-related actions in context menus
  throughout Konversation.
  * The Topic tab in the Channel Options dialog has been redesigned and
  rewritten from scratch, featuring a much improved UI and many bug fixes
  * The size of the Channel Options dialog is now synchronized between
  the dialogs for different channels and remembered across application
  restarts.
  * The widths of the columns in the Ban List tab in the Channel Options
  dialog is now synchronized across all Channel Options dialogs.
  * Fixed a bug causing the topic at the top of channel tabs not to return
  to its encrypted form after the decryption key for a channel has
  been deleted.
  * Debug builds of Konversation now understand a "--nui" command line
  argument to disable the check for whether Konversation is already
  running, thus allowing multiple instances of Konversation to be started.
  * Part and Quit messages now show the hostmask of the subject, consistent
  with Join messages.
  * Fixed a bug causing the What's This help tooltip for nickname lists
  to show the regular user icon instead of the away icon as the away
  icon example.
  * The desktop notification for a completed incoming DCC file transfer
  now offers an action to open/run the received file.
  * The nickname list theme preview in the configuration dialog now
  uses the same background color as the actual nickname lists.
  * Various fixed to tab stops and margins in the configuration dialog pages.
  * Minor UI fixes for the Queue Tuner (opened by /queuetuner), correcting
  icon use and button labels.
  * Removed excess white space from several warning dialog messages.
  * Fixed a bug causing the Watched Nicks to spam the active tab with
  repeated WHOIS requests for someone on the Watched Nicks List after
  opening a query tab to them while they were offline.
  * Added an action to manually apply the user-configured auto-replace rules
  to the input box contents without sending the message, enabling user
  review before doing so.
  * Added the ability to set a different spell-checking language for every
  tab, from the context menu of the input box.
  * Fixed several bugs in preserving per-tab encoding settings across
  application restarts.
  * Link opening now properly respects KDE's file type associating
  settings instead of always opening a web browser.
  * Fix Konversation not saving the unchecked "... a channel invitation
  is received" warning dialog option in the Warning Dialogs list in the
  configuration dialog
  * Unchecking the "... a channel invitation is received" warning dialog
  option in the Warning Dialogs list in the configuration dialog now
  sets the behavior for future channel join invitations to always
  joining them.
  * The default behavior upon receiving a channel join invitation is
  now to ask the user, instead of silently accepting the invitation.
  * Server status tabs for networks listed in the Server List dialog
  now have a "Connect at Startup" checkbox in their context menu, similar
  to the "Join  on Connect" checkbox in the context menu of channel tabs.
  * Added a workaround for behavior in the Phonon multimedia library that
  could lead to crashes on application quit when using custom highlight
  notification sounds.
  * Fixed a bug causing an ambiguous shortcut warning dialog when using the
  default ESC keyboard shortcut to invoke the Focus Input Box action
  after the search has been opened and the Focus New Tabs option was
  disabled while a new tab was opened.
  * Fixed a bug causing multiple ignore list entries with the same pattern
  not to be preserved across application restarts.
  * Fixed a bug causing the tab label for open log viewer tabs to be
  set to "ChatWindowObject" when switching the tab bar position between
  top or bottom and left.
  * Markup cleanups in the handbook and visual improvements to handbook
  icons in the PDF export on http://doc.kde.org.
  * Code cleanups for warnings issued by clang.
  * Build system improvements for kdepimlibs includes handling.
  * Made the code turning channel names into clickable links more strict
  about what types of trailing punctuation it incorporates into the link.
  * Fixed bugs causing currently joined channels not to react correctly to
  changes in the enabled state of the Automatic User Information Lookup
  setting.
  * The reaction to a change of the Automatic User Information Lookup interval
  setting has been improved considerably
  * All forms of opening a query (the '/query' command, clicking a nickname
  in the chat text display, double-clicking in the nickname list or the
  nickname list context menu action) now consistently move focus to an
  existing matching query tab, matching the behavior of various forms of
  joining an already-joined channel.
  * Minor visual (the selection decoration for server items now spans the
  whole row) and behavioral (when collapsing a network while one of its a
  server is selected, the selection is now moved to the network item instead
  of becoming invisible)
  * Fixed a bug causing the option to automatically focus new query tabs
  not to work correctly.
  * Fixed a bug causing IRC formatting state not to be reset at the end
  of a topic when showing it in a channel's chat text display, potentially
  causing the rest of the line to be malformatted.
  * Fixed a compilation problem on 64bit Windows.
  * If built against KDE Platform v4.8.3 or higher, the date column
  in the Url Catcher will now immediately reflect changes to the date
  format made in KDE's System Settings application.
  * Fixed a bug causing an application crash in response to an (illegal)
  '/unban &lt;#channel&gt;' command.
  * Removing newlines in the Edit Paste dialog can now handle Windows-style
  carriage return line breaks and whitespace characters other than
  ASCII 0x20.
  * Showing line and paragraph indicators in the Edit Paste dialog's
  text entry field unfortunately had to be disabled for the time being
  due to a bug in the underlying Qt code.
  * Leaving the "Use custom version reply" option's text field empty now
  disables responding to CTCP VERSION requests entirely instead of sending
  empty responses.</changelog>
<changelog author="coolo@suse.com" date="1364126400">- readd download URL</changelog>
<changelog author="pgajdos@suse.com" date="1386072000">- use png_fix macro [bnc#852862]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389182400">- Update to 1.5-rc2
  * The bundled 'sysinfo' script now tries harder to determine the
  current CPU clock frequencies (it now looks at
  sys/.../cpufreq/scaling_cur_freq in addition to /proc/cpuinfo).
  * Fixed a bug causing the flood fill tool in DCC Whiteboard tabs
  not to use the correct color after using the color picker tool
  to set it.
  * Launching the default browser when clicking on links now works
  properly again on Windows.
  * Fixed a bug causing certain combinations of sorting and
  filtering in Channel List tabs not to work correctly, leading
  to partially unsorted list entries.
  * Minor rewordings and cleanups in UI text and the handbook for
  clarity and correctness, e.g. the "Notify" notification event
  is now known as "Nick on-line".
  * More information sources are now taken into account to update
  Konversation's idea of whether a particular nick is identified
  with services or not (information from IRC numeric 330 was
  previously discarded).
  * Fixed a bug causing Konversation to attempt to PART a channel
  that's no longer actually joined when closing a channel tab
  after having been kicked from the channel.
  * Some included PNG image files were badly encoded, this has
  been addressed.
  * Fixed a bug causing the file URL for an authentication
  certificate in the Identities dialog to be forgotten across
  application restarts.
  * The warning about text in the topic editor exceeding the
  server-allowed limit now calculates the threshold more
  correctly, taking encoding and IRC formatting expandos
  into account.
  * Konversation now depends on KDE Platform v4.7.0 or higher
  and Qt v4.7.0 or higher.
- Drop png_fix macro, icon has been fixed upstream
- Bump libkde4-devel BuildRequires to &gt;= 4.7.0</changelog>
<changelog author="hpj@urpla.net" date="1390219200">- Update to 1.5
  * Expanded interface translations</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1394798400">- Konversation can operate without kdepim4-runtime, so make it a
  Recommends instead of requires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1415102400">- Update to 1.5.1
  * Konversation 1.5.1 is a maintenance release containing only bug
  fixes. The included changes address several minor behavioral
  defects and a low-risk DoS security defect in the Blowfish
  ECB support. The KDE Platform version dependency has increased
  to v4.9.0 to gain access to newer Qt socket transport
  security flags.
  * Fixed a bug causing wildcards in command alias replacement
  patterns not to be expanded.
  * Fixed a bug causing auto-joining of channels not starting
  in # or &amp; to sometimes fail because the auto-join command
  was generated before we got the CHANTYPES pronouncement
  by the server.
  * Added a size sanity check for incoming Blowfish ECB blocks.
  The blind assumption of incoming blocks being the expected
  12 bytes could lead to a crash or up to 11 byte information
  leak due to an out-of-bounds read. CVE-2014-8483.
  * Enabling SSL/TLS support for connections will now advertise
  the protocols Qt considers secure by default, instead of
  being hardcoded to TLSv1.
  * Fixed the bundled 'sysinfo' script not coping with empty
  lines in /etc/os-release.
  * Made disk space info in the bundled 'sysinfo' script more
  robust by forcing the C locale for 'df'.
  * Added an audio player type hint for Cantata to the bundled
  'media' script.
  * Fixed some minor comparison logic errors turned up by
  static analysis.
  * Konversation now depends on KDE Platform v4.9.0 or higher.
- Bump libkde4-devel BuildRequires to 4.9.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1430395200">- Update to 1.6:
  * Improved support for character set aliases via KCharsets.
  * Improved behavior when reconnecting and Konversation had to use
    an alternate nickname for the previous connection because the
    preferred nickname was already in use: Konversation will now
    try harder to go back to nicknames sorted earlier in the
    identity's nickname list, instead of advancing down the list
    without checking whether earlier nicknames have become
    available again.
  * Konversation will no longer give up trying to connect when only
    a single nickname is configured and not available at connection
    time. Instead, it will do as many reconnection attempts as
    allowed by user configuration.
  * Fixed incorrect size calculations for the channel topic text
    label causing cut-off text and unwanted collapsing of the topic
    area.
  * Fixed a bug causing auto-connect not to connect to networks in
    the order they are listed in the Server List dialog.
  * Fixed a bug causing the main window not to be raised when an
    Konversation is started an additional time and the window is
    currently minimized.
  * The default tabs position is now 'Left', i.e. the treelist
    version of the tab bar.
  * Tabs can now be reordered by drag and drop again.
  * Fixed various rendering issues in the treelist version of the
    tab bar and made it high-DPI scaling-capable.
  * Fixed a bug causing Channel List tabs not to be sorted below
    the status tab of the server they belong to in the treelist
    version of the tab bar, and corrupt its contents.
  * Fixed margins in the Edit Network dialog.
  * Improved wording and correctness of several interface messages.
  * Fixed a bug causing some interface messages and labels not to
    use their translated versions when running with a language
    other than US English.
  * Fixed a bug causing Konversation not to generate default
    command aliases for installed scripts at startup anymore.
  * The bundled 'cmd' script now defaults to trying to decode
    command output as Utf-8 even when run on Python 2.
  * Fixed the bundled 'bug' script not working.
  * Fixed naming of bundled icons.
  * Konversation now opts into Qt's high-DPI pixmap handling.
  * Adjusted build system to use co-installable version of qca-qt5.
  * Fixed build failures on Windows.
  * Konversation now depends on KDE Frameworks v5.2.0 and Qt
    v5.3.0.
  * The default nickname list theme has been updated to KDE's new
    Breeze visual identity.
  * Notification events now have non-generic titles to prevent
    Plasma Desktop 5 from merging events from different sources.
  * Fixed a bug causing the "Focus Input Bar" action to be
    enabled/disabled at incorrect times.
- Package ported to KF5. Updated build and runtime requirements to
  the KF5 ones.
- Removed support for old openSUSE versions.</changelog>
<changelog author="wbauer@tmo.at" date="1469361600">- Update to 1.6.1:
  * Added an option to allow a server to bypass the global proxy settings.
  * Fixed a crash when changing the Qt style engine.
  * Fixed a crash when running "/exec -showpath" with no script name.
  * Fixed notification events for DCC Chats not working.
  * Fixed crash when closing the DCC Status tab.
  * Fixed crashes with the ISO-2022-JP encoding.
  * Fixed the "Close All Open Queries" action not working properly.
  * Minor UI polish, e.g. the margin under the nicklist when the Quick Button
    grid is disabled or emtpy.
  * Fixed missing icons on the Next/Previous buttons in the search bar.
  * On screens to small to fit Konversation's configuration dialog, the
    dialog will now show scrollbars around its content instead of the dialog
    buttons being forced off-screen.
  * Konversation now sets its window icon in a way that causes a hi-res icon
    to be available in window switchers such as Plasma's Alt+Tab UI.
  * Removed the spell checking language submenu from the context menu of the
    input bar - KDE Frameworks 5 now contains this upstream, leading to two
    submenus.
  * Fixed installing the Oxygen nickname list theme.
  * Fixed changes to the tab bar font's font weight being applied to the chat
    text area.
  * Minor changes to tooltips to support the Wayland windowing system better.
  * Fixed the Windows build.
  * Added KCrash (DrKonqi) support.
  * Improved support for the KDE Kiosk framework, fixing checks for the
    "shell_command" privilege.
  * Added AppData metadata for app stores.</changelog>
<changelog author="wbauer@tmo.at" date="1470225600">- Update to 1.6.2 hotfix release:
  * Fixed a bug causing various operations on server list data to crash,
    e.g. pressing "Edit" on a server sub-item in the Server List dialog.
  * Translations for AppData metadata added in v1.6.1.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488715200">- Add upstream patch to fix crash on exit:
  * fix-crash-on-quit.patch</changelog>
<changelog author="wbauer@tmo.at" date="1492344000">- Update to 1.7:
  * Two-finger scroll on the vertical channel list is now less sensitive.
  * Fixed execution of bundled scripts showing an error about locating
    translation files when running on a system without kde4-config installed.
  * Fixed a bug in executable command line parsing for passed URLs.
  * Fixed Konversation failing to start on Windows systems without D-Bus
    (it would previously exit if it failed to initialize its D-Bus service).
  * Ported from deprecated KDE Frameworks APIs to 5.24+ API
    (v1.7 requires Frameworks 5.25 or higher).
  * Improved support for CAP negotiation
  * Output for CAP LS and CAP LIST is now shown in the server status view
  * Added support for IRCv3 CAP MULTI-PREFIX
  * Added support for IRCv3 CAP AWAY-NOTIFY
  * Added support for IRCv3 CAP ACCOUNT-NOTIFY
  * Added support for IRCv3 CAP EXTENDED-JOIN
  * Added support for IRCv3 CAP USERHOST-IN-NAMES
  * Added support for extended WHO
  * Added support for server-time and message tags
  * Added support for znc.in/server-time-iso, making buffer playback from ZNC
    much nicer
  * Added support for the SASL EXTERNAL authentication mechanism,
    e.g. needed for using Tor with freenode.
  * Redesigned search bar in chat views
  * Added support for font zooming to chat views
  * Improved bi-di text handling in chat views
  * The --restart command line argument works again
  * Fixed command line argument parsing when Konversation is already running
  * Fixed tab completion not working when pressing tab after a full
    existing nickname as prefix
  * Fixed the topic editor not updating when the topic changes
  * Fixed nickname links including the pipe character
  * Fixed the Invite dialog not closing on OK
  * Fixed angle bracket display in OSD message bubbles
  * Fixes to core protocol handling, e.g. in prefix parsing
  * Fixed crash on close when the nick menu has been shown
  * Fixed crash on quit
  * Fixed crash when closing views
  * Fixed crash in DCC resume dialogs without a Retry button
  * Fixed incorrect icon for the global away action
  * Minor UI layout cleanups, e.g. in the Behavior -&gt; Chat Window settings
    page and fixes to tooltips
  * Code cleanups, e.g. removal of unused settings and related code paths,
    porting away from deprecated API, and more
  * Overhauled and corrected handbook &amp; refreshed handbook screenshots to
    Frameworks 5 version
  * Build fixes for Windows (MSVC compatibility and winsock linking)
  * The Windows and Mac builds now have app icons
  * Improved code portability by using different byte swapping routines
  * Updated AppStream metadata
  * Konversation now depends on Qt 5.5+ and KDE Frameworks 5.25+
- Drop fix-crash-on-quit.patch, fixed upstream</changelog>
<changelog author="wbauer@tmo.at" date="1493899200">- No need to define _kf5_appstreamdir any more, it doesn't build on
  42.1 anyway as it requires newer KDE Frameworks
- Update Qt build requirements to 5.5.0 or higher</changelog>
<changelog author="wbauer@tmo.at" date="1494417600">- Update to 1.7.2:
  * no code changes
  * incomplete and badly maintained translations removed that were
    accidentally included with the v1.7.1 release
- Update to 1.7.1:
  * Fixed requesting the znc.in/server-time-iso capability from the server.
  * Fixed SASL EXTERNAL authentication without an account name set in the
    Identity settings.
  * Fixed clicking on nickname links containing the ` character.
  * Fixed the Highlight page in the Configure Konversation dialog
    not enabling/disabling the Apply button correctly.
  * Minor cleanups in application metadata setup code.</changelog>
<changelog author="wbauer@tmo.at" date="1494504000">- Specify minimum KF5 version for build requirements
- Remove no longer used/necessary sonnet-devel BuildRequires
- Change package summary: it's "by" KDE, not "for" KDE</changelog>
<changelog author="jengelh@inai.de" date="1494936000">- Trim description from redundant phrasing, and ensure neutrality.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1503662400">- Add patch to fix prefix handling for channel types (kde#383801):
  * fix-prefix-addressed-message-handling.patch</changelog>
<changelog author="wbauer@tmo.at" date="1510315200">- Update to 1.7.3:
  * Added a copy action to the context menu of nicknames in the
    chat text view.
  * Re-enabled channel mode buttons.
  * Reduced emission of Unicode directional control characters in
    the chat text view. Unnecessary control characters could
    sometimes cause problems with copying text from Konversation
    and pasting it into terminal applications, confusing them.
  * Fixed handling of nick and channel prefix characters
    potentially using the same set of symbols.
  * Removed redundant escaping of angle brackets in GECOS
    ("realname") field.
  * The nickname combobox will no longer change the nickname to
    the current value whenvever it loses focus.
  * Fixed color scheme handling in the treelist version on the tab
    bar, fixing an issue where the background and text color of
    the selected item would sometimes be the same, rendering the
    item unreadable.
  * Fixed handling of IRC URLs for channels starting with more
    than one #, addressing a percent-encoding problem with
    bookmarks of them.
  * Fixed custom chat text view font family reverting to system
    default font family upon using the increase/decrease font size
    actions.
  * Fixed chat text view font size adjusted via the
    increase/decrease font size actions reverting to configuration
    default when OK'ing the config dialog.
  * Fixed incorrect checkbox states in the Channel Invite dialog.
  * Fixed a crash in IRC v3 extended-join parsing.
  * Fixed a crash in parsing IRC color formatting codes.
    (CVE-2017-15923 boo#1068097)
  * Fixed a minor memory leak in the Join Channel dialog code.
  * Removed unnecessary nickname list debug message sent as
    warning.
- Drop fix-prefix-addressed-message-handling.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1510747200">- Update to 1.7.4:
  * Fixed a bug causing the size of a custom chat text view font
    set via the configuration dialog to be ignored. A font size
    modification done via the Enlarge/Decrease Font Size actions
    is now applied on top of the configured size (or the system
    default font size, respectively).</changelog>

</package>
<package pkgid="7c3242d06c5f1a18dd1440982f1ebe3f1b2ecfe750d89ddba1a2c93ba6ddda12" name="konversation-lang" arch="noarch">
    <version epoch="0" ver="1.7.4" rel="3.1"/>

<changelog author="coolo@suse.com" date="1323259200">- fix license to be in spdx.org format</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 1.5-rc1
  * Performance optimizations and code cleanup for processing NAMES
  messages from the server.
  * The bundled 'media' script has been rewritten from scratch to
  implement the MPRIS2 standard for interfacing with media players -
  and only the MPRIS2 standard. This means losing support for a
  number of legacy players which do not support MPRIS2
  * The bundled 'sayclip' script has been rewritten from scratch,
  removing the now-redundant flood handling found in the old version
  * The bundled 'bug' script has been rewritten from scratch, featuring
  improved error handling and adding internationalization support.
  * The bundled 'sysinfo' script has been rewritten from scratch.
  * All types of tabs which sport a prominent input widget will now see
  focus moved to that widget and the first keypress redirected when
  focus is on the treelist version of the tab bar while starting to
  type.
  * Performance improvements have been applied to hotpaths in the
  protocol implementation.
  * A '/umode' convenience command to set modes on self has been added.
  * The 'Mode change' notification event now sports a proper text
  payload describing what has happened.
  * The system tray icon now shows an overlay icon when global away
  is enabled.
  * The behavior of the 'Show/Hide Konversation' action has been
  simplified and tuned to do the correct thing in more scenarios.
  * A basic framework to support the IRC Client Capabilities Extension
  ("CAP") has been added.
  * The user interface for the Auto Identify settings in the Identities
  dialog has been extended by a combo box that allows choosing the
  type of authentification to be performed.
  * SASL PLAIN authentification is now supported.
  * Standard NickServ authentification has been further improved.
  * The server password-based authentification supported by some
  networks is now configurable in the Identities dialog as well,
  making it more discoverable and allowing to keep Auto Identify
  settings generally with the Identity rather than requiring going
  through the Edit Server dialog.
  * Added an option to restrict logging to private conversations
  (queries, DCC chats).
  * Both the regular tab bar and its listview version now implement
  "spring-loading".
  * Added support for authenticating via a SSL Client Certificate in
  the form of a PEM file if Konversation is built against KDE
  Platform v4.8.3 or higher.
  * Konversation now depends on KDE Platform v4.6.0 or higher and
  Qt v4.7.0 or higher.
  * Raw log tabs now use color coding to visually differenciate inbound
  and outbound messages, using the server message and channel message
  colors from the color settings respectively.
  * Queries now start with an info message listing the channels you
  and the other side have in common, i.e. that both of you are
  presently in.
  * The DCC Status transfer list update interval now depends on the
  graphics effects level setting in KDE System Settings
  * Fixed a bug causing the input box height not to be adjusted
  appropriately to fit the contents when the "Input box expands with text"
  option is enabled and the window is resized horizontally, causing
  the text to rewrap.
  * Fixed a bug causing the context menu for an item in the DCC Status
  transfer list to appear in the wrong position.
  * The list of placeholders available in Quick Button patterns now
  mention the previously undocumented "%k" placeholder for the current
  channel's key and is sorted alphabetically.
  * When a Quick Button pattern replaces the current input box contents
  (due to the presence of the "%n" expando in the pattern) they are
  now added to the input box history first.
  * Quick Button patterns now support a new "%i" placeholder that
  is replaced with the current contents of the input box.
  * The double-click action command for Watched Nicks list entries now
  supports command aliases.
  * Fixed a bug causing wildcard expansion to be performed on the
  input box contents when they start with a Command Alias
  * The Quick Buttons options now feature a new checkbox that
  toggles whether Quick Buttons that operate on nicknames will be
  shown alongside other nickname-related actions in context menus
  throughout Konversation.
  * The Topic tab in the Channel Options dialog has been redesigned and
  rewritten from scratch, featuring a much improved UI and many bug fixes
  * The size of the Channel Options dialog is now synchronized between
  the dialogs for different channels and remembered across application
  restarts.
  * The widths of the columns in the Ban List tab in the Channel Options
  dialog is now synchronized across all Channel Options dialogs.
  * Fixed a bug causing the topic at the top of channel tabs not to return
  to its encrypted form after the decryption key for a channel has
  been deleted.
  * Debug builds of Konversation now understand a "--nui" command line
  argument to disable the check for whether Konversation is already
  running, thus allowing multiple instances of Konversation to be started.
  * Part and Quit messages now show the hostmask of the subject, consistent
  with Join messages.
  * Fixed a bug causing the What's This help tooltip for nickname lists
  to show the regular user icon instead of the away icon as the away
  icon example.
  * The desktop notification for a completed incoming DCC file transfer
  now offers an action to open/run the received file.
  * The nickname list theme preview in the configuration dialog now
  uses the same background color as the actual nickname lists.
  * Various fixed to tab stops and margins in the configuration dialog pages.
  * Minor UI fixes for the Queue Tuner (opened by /queuetuner), correcting
  icon use and button labels.
  * Removed excess white space from several warning dialog messages.
  * Fixed a bug causing the Watched Nicks to spam the active tab with
  repeated WHOIS requests for someone on the Watched Nicks List after
  opening a query tab to them while they were offline.
  * Added an action to manually apply the user-configured auto-replace rules
  to the input box contents without sending the message, enabling user
  review before doing so.
  * Added the ability to set a different spell-checking language for every
  tab, from the context menu of the input box.
  * Fixed several bugs in preserving per-tab encoding settings across
  application restarts.
  * Link opening now properly respects KDE's file type associating
  settings instead of always opening a web browser.
  * Fix Konversation not saving the unchecked "... a channel invitation
  is received" warning dialog option in the Warning Dialogs list in the
  configuration dialog
  * Unchecking the "... a channel invitation is received" warning dialog
  option in the Warning Dialogs list in the configuration dialog now
  sets the behavior for future channel join invitations to always
  joining them.
  * The default behavior upon receiving a channel join invitation is
  now to ask the user, instead of silently accepting the invitation.
  * Server status tabs for networks listed in the Server List dialog
  now have a "Connect at Startup" checkbox in their context menu, similar
  to the "Join  on Connect" checkbox in the context menu of channel tabs.
  * Added a workaround for behavior in the Phonon multimedia library that
  could lead to crashes on application quit when using custom highlight
  notification sounds.
  * Fixed a bug causing an ambiguous shortcut warning dialog when using the
  default ESC keyboard shortcut to invoke the Focus Input Box action
  after the search has been opened and the Focus New Tabs option was
  disabled while a new tab was opened.
  * Fixed a bug causing multiple ignore list entries with the same pattern
  not to be preserved across application restarts.
  * Fixed a bug causing the tab label for open log viewer tabs to be
  set to "ChatWindowObject" when switching the tab bar position between
  top or bottom and left.
  * Markup cleanups in the handbook and visual improvements to handbook
  icons in the PDF export on http://doc.kde.org.
  * Code cleanups for warnings issued by clang.
  * Build system improvements for kdepimlibs includes handling.
  * Made the code turning channel names into clickable links more strict
  about what types of trailing punctuation it incorporates into the link.
  * Fixed bugs causing currently joined channels not to react correctly to
  changes in the enabled state of the Automatic User Information Lookup
  setting.
  * The reaction to a change of the Automatic User Information Lookup interval
  setting has been improved considerably
  * All forms of opening a query (the '/query' command, clicking a nickname
  in the chat text display, double-clicking in the nickname list or the
  nickname list context menu action) now consistently move focus to an
  existing matching query tab, matching the behavior of various forms of
  joining an already-joined channel.
  * Minor visual (the selection decoration for server items now spans the
  whole row) and behavioral (when collapsing a network while one of its a
  server is selected, the selection is now moved to the network item instead
  of becoming invisible)
  * Fixed a bug causing the option to automatically focus new query tabs
  not to work correctly.
  * Fixed a bug causing IRC formatting state not to be reset at the end
  of a topic when showing it in a channel's chat text display, potentially
  causing the rest of the line to be malformatted.
  * Fixed a compilation problem on 64bit Windows.
  * If built against KDE Platform v4.8.3 or higher, the date column
  in the Url Catcher will now immediately reflect changes to the date
  format made in KDE's System Settings application.
  * Fixed a bug causing an application crash in response to an (illegal)
  '/unban &lt;#channel&gt;' command.
  * Removing newlines in the Edit Paste dialog can now handle Windows-style
  carriage return line breaks and whitespace characters other than
  ASCII 0x20.
  * Showing line and paragraph indicators in the Edit Paste dialog's
  text entry field unfortunately had to be disabled for the time being
  due to a bug in the underlying Qt code.
  * Leaving the "Use custom version reply" option's text field empty now
  disables responding to CTCP VERSION requests entirely instead of sending
  empty responses.</changelog>
<changelog author="coolo@suse.com" date="1364126400">- readd download URL</changelog>
<changelog author="pgajdos@suse.com" date="1386072000">- use png_fix macro [bnc#852862]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389182400">- Update to 1.5-rc2
  * The bundled 'sysinfo' script now tries harder to determine the
  current CPU clock frequencies (it now looks at
  sys/.../cpufreq/scaling_cur_freq in addition to /proc/cpuinfo).
  * Fixed a bug causing the flood fill tool in DCC Whiteboard tabs
  not to use the correct color after using the color picker tool
  to set it.
  * Launching the default browser when clicking on links now works
  properly again on Windows.
  * Fixed a bug causing certain combinations of sorting and
  filtering in Channel List tabs not to work correctly, leading
  to partially unsorted list entries.
  * Minor rewordings and cleanups in UI text and the handbook for
  clarity and correctness, e.g. the "Notify" notification event
  is now known as "Nick on-line".
  * More information sources are now taken into account to update
  Konversation's idea of whether a particular nick is identified
  with services or not (information from IRC numeric 330 was
  previously discarded).
  * Fixed a bug causing Konversation to attempt to PART a channel
  that's no longer actually joined when closing a channel tab
  after having been kicked from the channel.
  * Some included PNG image files were badly encoded, this has
  been addressed.
  * Fixed a bug causing the file URL for an authentication
  certificate in the Identities dialog to be forgotten across
  application restarts.
  * The warning about text in the topic editor exceeding the
  server-allowed limit now calculates the threshold more
  correctly, taking encoding and IRC formatting expandos
  into account.
  * Konversation now depends on KDE Platform v4.7.0 or higher
  and Qt v4.7.0 or higher.
- Drop png_fix macro, icon has been fixed upstream
- Bump libkde4-devel BuildRequires to &gt;= 4.7.0</changelog>
<changelog author="hpj@urpla.net" date="1390219200">- Update to 1.5
  * Expanded interface translations</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1394798400">- Konversation can operate without kdepim4-runtime, so make it a
  Recommends instead of requires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1415102400">- Update to 1.5.1
  * Konversation 1.5.1 is a maintenance release containing only bug
  fixes. The included changes address several minor behavioral
  defects and a low-risk DoS security defect in the Blowfish
  ECB support. The KDE Platform version dependency has increased
  to v4.9.0 to gain access to newer Qt socket transport
  security flags.
  * Fixed a bug causing wildcards in command alias replacement
  patterns not to be expanded.
  * Fixed a bug causing auto-joining of channels not starting
  in # or &amp; to sometimes fail because the auto-join command
  was generated before we got the CHANTYPES pronouncement
  by the server.
  * Added a size sanity check for incoming Blowfish ECB blocks.
  The blind assumption of incoming blocks being the expected
  12 bytes could lead to a crash or up to 11 byte information
  leak due to an out-of-bounds read. CVE-2014-8483.
  * Enabling SSL/TLS support for connections will now advertise
  the protocols Qt considers secure by default, instead of
  being hardcoded to TLSv1.
  * Fixed the bundled 'sysinfo' script not coping with empty
  lines in /etc/os-release.
  * Made disk space info in the bundled 'sysinfo' script more
  robust by forcing the C locale for 'df'.
  * Added an audio player type hint for Cantata to the bundled
  'media' script.
  * Fixed some minor comparison logic errors turned up by
  static analysis.
  * Konversation now depends on KDE Platform v4.9.0 or higher.
- Bump libkde4-devel BuildRequires to 4.9.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1430395200">- Update to 1.6:
  * Improved support for character set aliases via KCharsets.
  * Improved behavior when reconnecting and Konversation had to use
    an alternate nickname for the previous connection because the
    preferred nickname was already in use: Konversation will now
    try harder to go back to nicknames sorted earlier in the
    identity's nickname list, instead of advancing down the list
    without checking whether earlier nicknames have become
    available again.
  * Konversation will no longer give up trying to connect when only
    a single nickname is configured and not available at connection
    time. Instead, it will do as many reconnection attempts as
    allowed by user configuration.
  * Fixed incorrect size calculations for the channel topic text
    label causing cut-off text and unwanted collapsing of the topic
    area.
  * Fixed a bug causing auto-connect not to connect to networks in
    the order they are listed in the Server List dialog.
  * Fixed a bug causing the main window not to be raised when an
    Konversation is started an additional time and the window is
    currently minimized.
  * The default tabs position is now 'Left', i.e. the treelist
    version of the tab bar.
  * Tabs can now be reordered by drag and drop again.
  * Fixed various rendering issues in the treelist version of the
    tab bar and made it high-DPI scaling-capable.
  * Fixed a bug causing Channel List tabs not to be sorted below
    the status tab of the server they belong to in the treelist
    version of the tab bar, and corrupt its contents.
  * Fixed margins in the Edit Network dialog.
  * Improved wording and correctness of several interface messages.
  * Fixed a bug causing some interface messages and labels not to
    use their translated versions when running with a language
    other than US English.
  * Fixed a bug causing Konversation not to generate default
    command aliases for installed scripts at startup anymore.
  * The bundled 'cmd' script now defaults to trying to decode
    command output as Utf-8 even when run on Python 2.
  * Fixed the bundled 'bug' script not working.
  * Fixed naming of bundled icons.
  * Konversation now opts into Qt's high-DPI pixmap handling.
  * Adjusted build system to use co-installable version of qca-qt5.
  * Fixed build failures on Windows.
  * Konversation now depends on KDE Frameworks v5.2.0 and Qt
    v5.3.0.
  * The default nickname list theme has been updated to KDE's new
    Breeze visual identity.
  * Notification events now have non-generic titles to prevent
    Plasma Desktop 5 from merging events from different sources.
  * Fixed a bug causing the "Focus Input Bar" action to be
    enabled/disabled at incorrect times.
- Package ported to KF5. Updated build and runtime requirements to
  the KF5 ones.
- Removed support for old openSUSE versions.</changelog>
<changelog author="wbauer@tmo.at" date="1469361600">- Update to 1.6.1:
  * Added an option to allow a server to bypass the global proxy settings.
  * Fixed a crash when changing the Qt style engine.
  * Fixed a crash when running "/exec -showpath" with no script name.
  * Fixed notification events for DCC Chats not working.
  * Fixed crash when closing the DCC Status tab.
  * Fixed crashes with the ISO-2022-JP encoding.
  * Fixed the "Close All Open Queries" action not working properly.
  * Minor UI polish, e.g. the margin under the nicklist when the Quick Button
    grid is disabled or emtpy.
  * Fixed missing icons on the Next/Previous buttons in the search bar.
  * On screens to small to fit Konversation's configuration dialog, the
    dialog will now show scrollbars around its content instead of the dialog
    buttons being forced off-screen.
  * Konversation now sets its window icon in a way that causes a hi-res icon
    to be available in window switchers such as Plasma's Alt+Tab UI.
  * Removed the spell checking language submenu from the context menu of the
    input bar - KDE Frameworks 5 now contains this upstream, leading to two
    submenus.
  * Fixed installing the Oxygen nickname list theme.
  * Fixed changes to the tab bar font's font weight being applied to the chat
    text area.
  * Minor changes to tooltips to support the Wayland windowing system better.
  * Fixed the Windows build.
  * Added KCrash (DrKonqi) support.
  * Improved support for the KDE Kiosk framework, fixing checks for the
    "shell_command" privilege.
  * Added AppData metadata for app stores.</changelog>
<changelog author="wbauer@tmo.at" date="1470225600">- Update to 1.6.2 hotfix release:
  * Fixed a bug causing various operations on server list data to crash,
    e.g. pressing "Edit" on a server sub-item in the Server List dialog.
  * Translations for AppData metadata added in v1.6.1.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1488715200">- Add upstream patch to fix crash on exit:
  * fix-crash-on-quit.patch</changelog>
<changelog author="wbauer@tmo.at" date="1492344000">- Update to 1.7:
  * Two-finger scroll on the vertical channel list is now less sensitive.
  * Fixed execution of bundled scripts showing an error about locating
    translation files when running on a system without kde4-config installed.
  * Fixed a bug in executable command line parsing for passed URLs.
  * Fixed Konversation failing to start on Windows systems without D-Bus
    (it would previously exit if it failed to initialize its D-Bus service).
  * Ported from deprecated KDE Frameworks APIs to 5.24+ API
    (v1.7 requires Frameworks 5.25 or higher).
  * Improved support for CAP negotiation
  * Output for CAP LS and CAP LIST is now shown in the server status view
  * Added support for IRCv3 CAP MULTI-PREFIX
  * Added support for IRCv3 CAP AWAY-NOTIFY
  * Added support for IRCv3 CAP ACCOUNT-NOTIFY
  * Added support for IRCv3 CAP EXTENDED-JOIN
  * Added support for IRCv3 CAP USERHOST-IN-NAMES
  * Added support for extended WHO
  * Added support for server-time and message tags
  * Added support for znc.in/server-time-iso, making buffer playback from ZNC
    much nicer
  * Added support for the SASL EXTERNAL authentication mechanism,
    e.g. needed for using Tor with freenode.
  * Redesigned search bar in chat views
  * Added support for font zooming to chat views
  * Improved bi-di text handling in chat views
  * The --restart command line argument works again
  * Fixed command line argument parsing when Konversation is already running
  * Fixed tab completion not working when pressing tab after a full
    existing nickname as prefix
  * Fixed the topic editor not updating when the topic changes
  * Fixed nickname links including the pipe character
  * Fixed the Invite dialog not closing on OK
  * Fixed angle bracket display in OSD message bubbles
  * Fixes to core protocol handling, e.g. in prefix parsing
  * Fixed crash on close when the nick menu has been shown
  * Fixed crash on quit
  * Fixed crash when closing views
  * Fixed crash in DCC resume dialogs without a Retry button
  * Fixed incorrect icon for the global away action
  * Minor UI layout cleanups, e.g. in the Behavior -&gt; Chat Window settings
    page and fixes to tooltips
  * Code cleanups, e.g. removal of unused settings and related code paths,
    porting away from deprecated API, and more
  * Overhauled and corrected handbook &amp; refreshed handbook screenshots to
    Frameworks 5 version
  * Build fixes for Windows (MSVC compatibility and winsock linking)
  * The Windows and Mac builds now have app icons
  * Improved code portability by using different byte swapping routines
  * Updated AppStream metadata
  * Konversation now depends on Qt 5.5+ and KDE Frameworks 5.25+
- Drop fix-crash-on-quit.patch, fixed upstream</changelog>
<changelog author="wbauer@tmo.at" date="1493899200">- No need to define _kf5_appstreamdir any more, it doesn't build on
  42.1 anyway as it requires newer KDE Frameworks
- Update Qt build requirements to 5.5.0 or higher</changelog>
<changelog author="wbauer@tmo.at" date="1494417600">- Update to 1.7.2:
  * no code changes
  * incomplete and badly maintained translations removed that were
    accidentally included with the v1.7.1 release
- Update to 1.7.1:
  * Fixed requesting the znc.in/server-time-iso capability from the server.
  * Fixed SASL EXTERNAL authentication without an account name set in the
    Identity settings.
  * Fixed clicking on nickname links containing the ` character.
  * Fixed the Highlight page in the Configure Konversation dialog
    not enabling/disabling the Apply button correctly.
  * Minor cleanups in application metadata setup code.</changelog>
<changelog author="wbauer@tmo.at" date="1494504000">- Specify minimum KF5 version for build requirements
- Remove no longer used/necessary sonnet-devel BuildRequires
- Change package summary: it's "by" KDE, not "for" KDE</changelog>
<changelog author="jengelh@inai.de" date="1494936000">- Trim description from redundant phrasing, and ensure neutrality.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1503662400">- Add patch to fix prefix handling for channel types (kde#383801):
  * fix-prefix-addressed-message-handling.patch</changelog>
<changelog author="wbauer@tmo.at" date="1510315200">- Update to 1.7.3:
  * Added a copy action to the context menu of nicknames in the
    chat text view.
  * Re-enabled channel mode buttons.
  * Reduced emission of Unicode directional control characters in
    the chat text view. Unnecessary control characters could
    sometimes cause problems with copying text from Konversation
    and pasting it into terminal applications, confusing them.
  * Fixed handling of nick and channel prefix characters
    potentially using the same set of symbols.
  * Removed redundant escaping of angle brackets in GECOS
    ("realname") field.
  * The nickname combobox will no longer change the nickname to
    the current value whenvever it loses focus.
  * Fixed color scheme handling in the treelist version on the tab
    bar, fixing an issue where the background and text color of
    the selected item would sometimes be the same, rendering the
    item unreadable.
  * Fixed handling of IRC URLs for channels starting with more
    than one #, addressing a percent-encoding problem with
    bookmarks of them.
  * Fixed custom chat text view font family reverting to system
    default font family upon using the increase/decrease font size
    actions.
  * Fixed chat text view font size adjusted via the
    increase/decrease font size actions reverting to configuration
    default when OK'ing the config dialog.
  * Fixed incorrect checkbox states in the Channel Invite dialog.
  * Fixed a crash in IRC v3 extended-join parsing.
  * Fixed a crash in parsing IRC color formatting codes.
    (CVE-2017-15923 boo#1068097)
  * Fixed a minor memory leak in the Join Channel dialog code.
  * Removed unnecessary nickname list debug message sent as
    warning.
- Drop fix-prefix-addressed-message-handling.patch, merged upstream</changelog>
<changelog author="wbauer@tmo.at" date="1510747200">- Update to 1.7.4:
  * Fixed a bug causing the size of a custom chat text view font
    set via the configuration dialog to be ignored. A font size
    modification done via the Enlarge/Decrease Font Size actions
    is now applied on top of the configured size (or the system
    default font size, respectively).</changelog>

</package>
<package pkgid="60fcefcb2f1b7efcec861ca587a5b2d2cff77bb861eb623709e08ea2e41143f3" name="kopano" arch="src">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="e60870c4e841f974d1510a65a3496679dce533399de10e6571ed6f0d6f4cb2b8" name="kopano-archiver" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="5923c92fed32b194cabea6be9d8f5cf243ee8b71d99fa96a450d2c2c54ba2451" name="kopano-backup" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="2d396dd879f8b7cce279a2af85228653dc47d6eb96810a6735801dbe5cd8cd8e" name="kopano-bash-completion" arch="noarch">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="83bb713ab21d78f3382430e5326d1db6d0f2f38d239e8e7dd3867b3167b83a21" name="kopano-client" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="d38e0615410d0ec2764b6156c3dd2a181da4d408e4070e4492688bb7494ed470" name="kopano-common" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="cb274cdbb11d4a9b88c199bfd85db7f107f628c661b88f1349248c5b4685ef49" name="kopano-compat" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="626963ad622c2efa2afeded38bb7ee21b4682ac0f5098881a73160b94d0192af" name="kopano-contacts" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="bff523d45e62c51db74177670e6b34d5d7ac2a2e107704497730d809cd310dcc" name="kopano-dagent" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="8f9dfb8d657d32900c41742cd4aff1eeb8fd91bebea6385150daec36891ff453" name="kopano-devel" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="e07201ff1ac775e3d3cc17307727e91bb1230037de1fb9df0c04a46a2dff7c2f" name="kopano-gateway" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="77f60067912bfa5cb5bb4e843fb485714fa74828d0e31ad94ca2ac3c80477c49" name="kopano-ical" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="55cf067e0768b0d3053f425aa83fbfd60f161b37d58a7af40db5962da7d08e72" name="kopano-lang" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="984b5db2d9b3b58abbb422b2d2c43acf0963cc6a18800fd38c9b1f36add5cf5c" name="kopano-migration-imap" arch="noarch">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="68b5075c00ebc8b512c84a0417aaa6dea3310096c15fe3ac45df030293f4b9e5" name="kopano-migration-pst" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="a62c07eee7eea34fab7aae330b78692854c25f052329fe90771400d7eb19dba7" name="kopano-monitor" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="3e484ac6af03d01c70948bc9976795f152ff9c25e4233890e610c5ce1a70db99" name="kopano-presence" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="1fc3d7195d8915360e2ad2f16fcf1e78c3e0dfcc417da4b842c58ffc92cf4c13" name="kopano-search" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="d8f0b58fd8971c74da9e5f0bd505552565b215bcdc386b0c7315eaf97116129e" name="kopano-server" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="b1e702c02b4c731ac80a394f4837f8037a5270e4c083e5a829c4a0db407775fa" name="kopano-server-packages" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="3606517b81c29ac286266f19920382853ba6055b340ec7e605de1d184e86efaf" name="kopano-spooler" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="36b1ad0b9008988c791607bbe43e38e1fbc4cc1ccd2824e7a9c6a61d1af0abe2" name="kopano-utils" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="65999457b72729b785c5d53c741a3a07eb1b4662c3ce34cccab83c83992fd7ca" name="kopano-webapp" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="bbe588e6c57ef800efd0992c3fc966c558db4bdd26b4deda0549986feefde4ad" name="kopano-webapp" arch="src">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="6559cfbf17c47d2e63e5837ff6b4d7ff3b62d0a796c639198193da417fce4aab" name="kopano-webapp-contactfax" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="2e5829891a628b8e09792266a48529457b440c4953b752b04ba679e4995a6e76" name="kopano-webapp-folderwidgets" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="214d84a74b4f07fe4bc154e5d4333ebcf73c8f072f02ca6c8edfe98a9fd7def0" name="kopano-webapp-gmaps" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="13c2bb69639fc5f160ad13771bd5fb3a34fb226876688fa93b880474a096e39b" name="kopano-webapp-lang" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="4a7fc6fbd3b0cf5e75ddefabb790fa6b0ef78be1478656abbe138298c456d16a" name="kopano-webapp-pimfolder" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="474318d5a5927633f9688c85f9923dc4c2b6d75a50dbb7d77e5e8937c3e553b9" name="kopano-webapp-quickitems" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="37d66345ad4cf8b6475b4286c7443a59af1ea888f68329db3ef589c2e85f48d7" name="kopano-webapp-titlecounter" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="faf77140ee80d0aba8a211b4c853a7500be1aa4b27c5ecb9c491b0f54425c80f" name="kopano-webapp-webappmanual" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="c4280fa2b1510f300b657c65dce8e3093a1c3c2f457cc7377935a8b1730a921b" name="kopano-webapp-zdeveloper" arch="noarch">
    <version epoch="0" ver="3.3.1" rel="3.1"/>

<changelog author="bosim@opensuse.org" date="1468843200">- Created package based on zarafa-webapp. Used 3.0.1 sources from
  bitbucket
- Added patch to support apache 2.4 config directives</changelog>
<changelog author="bosim@opensuse.org" date="1485432000">- Updated to 3.2 snapshot 149</changelog>
<changelog author="bosim@opensuse.org" date="1496145600">- Updated to 3.3 final, changelog:
  https://documentation.kopano.io/kopano_changelog/webapp.html
  [#]kopano-webapp-3-3-0-final
- Ran spec-cleaner</changelog>
<changelog author="bosim@opensuse.org" date="1500379200">- %prep will modify "version" file so webapp will show actual
  version instead of "devel".</changelog>
<changelog author="bosim@opensuse.org" date="1500379201">- Updated to 3.3.1 final, changelog:
  * Bugs:
  * KW-924 - Improve webapp presence cache by making it hash-based
  * KW-1162 - No ?save? notification when applying settings while
    having a mail pop-out window open
  * KW-1170 - Php error when adding recurrence to existing calendar
    item
  * KW-1198 - Empty body in webapp when parser breaks on minified
    javascript
  * KW-1216 - Business card filter can not be applied again when
    switching back and forth between contact folders
  * KW-1246 - Mail scroll bar resets when switching tabs
  * KW-1291 - Php 7.1 fatal error when opening signed or encrypted
    email
  * KW-1303 - Suggested contacts folder of shared store not closed
    even if the entire store is closed
  * KW-1407 - Rtl direction attribute is removed from html mail
  * KW-1419 - Original html message removed entirely when pressing
    enter
  * KW-1443 - Layout of task request breaks
  * KW-1469 - [sles12] invalid dirname and filename for italian
    spellchecker language pack
  * Improvement:
  * KW-1241 - ?what?s new? dialog in webapp
  * KW-1319 - Put the unit behind the value for the reload interval
    when configuring a widget
  * KW-1342 - Combo list should be the same styling as sub menu
  * KW-1399 - Improve task request message code so one sentence
    does not appear as two separate strings for translators
  * KW-1456 - [intranet plugin] disable the plugin by default
  * KW-1459 - Php 7.1 throws error when adding a non-numeric value
    to a string</changelog>

</package>
<package pkgid="199d8edfbe48b2ecd19ab03b87f41418b66e459518734b79f9c5bb0153fdd312" name="kpartx" arch="x86_64">
    <version epoch="0" ver="0.7.1+11+suse.246dd815" rel="3.1"/>

<changelog author="hare@suse.de" date="1472040000">- multipathd: start daemon after udev trigger (bsc#986734)
- Load device handler and multipath module at boot (bsc#991634)</changelog>
<changelog author="hare@suse.de" date="1472212800">- multipath: fixup check from udev rules (bsc#986734)</changelog>
<changelog author="hare@suse.de" date="1472212801">- Fixup module name in /usr/lib/modules-load.d (bsc#986734)</changelog>
<changelog author="jthumshirn@suse.com" date="1472472000">- libmultipath: fall back to search paths by devt (bsc#995645)</changelog>
<changelog author="hare@suse.de" date="1473336000">- Fixup glitch from patch 'fixup check from udev rules' (bsc#986734)
- Remove 0001-libmultipath-fall-back-to-search-paths-by-devt.patch;
  integrated into git repository</changelog>
<changelog author="hare@suse.de" date="1474286400">- libmultipath: Do not crash on empty features (bsc#994812)
- multipathd: Set CLI timeout correctly (bsc#999061)
- Moved multipath-tools repository to
  github.com:/openSUSE/multipath-tools.git</changelog>
<changelog author="hare@suse.de" date="1475064000">- multipath: avoid crash when using modified configuration
  (bsc#1000914)</changelog>
<changelog author="hare@suse.de" date="1475150400">- Implement support for 'multipath=off' and 'nompath'
  kernel commandline options (bsc#1001691)</changelog>
<changelog author="mwilck@suse.com" date="1475150401">- Update to version 0.6.2+suse20160928.8939fb6</changelog>
<changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous PreReq for insserv and fillup</changelog>
<changelog author="mwilck@suse.com" date="1488283200">- Update to version 0.6.4+101.f01ef4da (SLES12 SP2 changes wrt upstream):
  * Make libdmmp build optional
  * multipath.rules: use -i flag to multipath
  * kpartx: create symlinks for dmraid devices
  * kpartx: Add udev compability rules for SUSE
  * libmultipath/checkers: make RADOS checker optional
  * multipathd: fixup check for new path states (bsc#1019798)
  * tur: Add pthread_testcancel() (bsc#101979)
  * kpartx: sanitize delete partitions (bsc#100869)
  * libmultipath: coalesce_paths: trigger uevent if nothing done
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: differentiate ACT_NOTHING and ACT_IMPOSSIBLE
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: reload map if not known to udev
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: sysfs_attr_set_value: use const char*
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: select_action: check special features separately
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: treat aminio like assemble_map does
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: skip no_path_retry check
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: handle "retain_attached_hw_handler"
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: print log msg if no_path_retry cant be set
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_features: log msg if queue_if_no_path is ignored
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: use weaker "force_reload" at startup
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: imply -n if find_multipaths is set (bsc#1012910)
  * multipath: ignore -i if find_multipaths is set (bsc#1012910)
  * libmultipath: move suspend logic to _dm_flush_map (bsc#986838)
  * multipath -ll: set DI_SERIAL (bsc#991432)
  * libmultipath: use existing alias from bindings file (bsc#1005255)
  * libmultipath/discovery: do not cache 'access_state' sysfs attribute (bsc#1004858)
  * multipathd: issue systemd READY after initial configuration (bsc#1006469)
  * multipath: avoid crash when using modified configuration (bsc#1000914)
  * multipathd: Set CLI timeout correctly (bsc#999061)
  * libmultipath: Do not crash on empty features (bsc#994812)
  * libmultipath: fall back to search paths by devt (bsc#995645)
  * multipathd: set timeout for CLI commands correctly (bsc#999061)
  * Invalid error code when using multipathd CLI
  * multipath: do not check daemon from udev rules (bsc#986734)
  * Add support for "multipath=off" and "nompath" on kernel cmdline
  * multipathd: start daemon after udev trigger (bsc#98673)
  * multipathd.service: fixup Wants= and Before= statements (bsc#1019181, bsc#991742, bsc#986734)
- Update to current upstream (0.6.4-65-ga2675025)
  * Avoid that reloading a map sporadically triggers I/O errors
  * fix udev rules for failed multipath devices
  * multipathd: allow resetting stats
  * multipathd: add messages on delayed path addition
  * multipathd: don't update priority of failed paths
  * libmultipath: cleanup orphan device states
  * libmultipath: add detect_checker option
  * kpartx: don't keep creating recursive partitions
  * multipath-tools: Introducing multipath C API
  * multipath-tools: sync valgrind.h with 3.12 upstream
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * Fill NVMe specific path info
  * Don't blacklist nvme
  * multipath-tools: fix misspellings
  * multipath-tools: git should ignore rej and orig files
  * Include sys/sysmacros.h
  * Tolerate modprobe failures in multipathd.service
  * multipath-tools: Remove trailing and leading whitespaces
  * multipath-tools: Perform socket client uid check on IPC commands.
  * multipath-tools: Set errno mpath_recv_reply() when failure
  * multipath-tools: New way to limit the IPC command length.
  * multipath-tools: libmultipath: Removed unused functions.
  * multipath-tools: libmultipath: fix gcc link failure on rcu_register_thread_mb.
  * multipath-tools: multipathd: Fix memory leak on load_config().
  * [multipathd] Remove trailing whitespaces
  * multipathd: deterministic io throughput in multipath</changelog>
<changelog author="mwilck@suse.com" date="1488283201">- Update to version 0.6.4+102.df7d367e:
  * libmultipath/propsel: Do not select sysfs prioritizer for RDAC arrays
    (bsc#1004858)</changelog>
<changelog author="mwilck@suse.com" date="1488369600">- spec file changes: optional librados and libdmmp support
  * enabled by default on Factory and Leap
    (disable with --without-rados, --without-libdmmp)
  * disabled by default on SLES12
    (enable with --with-rados, --with-libdmmp)
  * libdmmp0_1_0 and libdmmp-devel as separate packages
  * minor fixes for RPMLINT warnings
- Update to version 0.6.4+102.0119472d:
  * rebased, code-wise identical to previous checkout</changelog>
<changelog author="mwilck@suse.com" date="1489147200">- Spec file: Added dependency on sg3_utils (#boo1028857)</changelog>
<changelog author="mwilck@suse.com" date="1489147201">- Update to version 0.6.4+103+suse.bcb5d0f4:
  * changed to official github repo openSUSE/multipath-tools
    (no changes code-wise)</changelog>
<changelog author="mwilck@suse.com" date="1490097600">- Spec file: disable librados for architectures for which ceph
  is not built
- Spec file: enable librados by default for SLES12 SP3, disable
  it on Leap &lt;= 42.1
- Update to version 0.6.4+104+suse.ac0df678:
  * multipathd: fix SIGUSR2 handling</changelog>
<changelog author="mwilck@suse.com" date="1490270400">- Enable rados for SLES only for x86_64 and aarch64 (ceph is currently
  disabled on SLES on s390x and ppc64le) (bsc#1030699)
- Downgrade to version 0.6.4+103+suse.bcb5d0f4:
  * temporarily remove commit "multipathd: fix SIGUSR2 handling"
  until it's merged in official repo (bsc#1030699)</changelog>
<changelog author="mwilck@suse.com" date="1490356800">- spec file changes suggested by factory review team (bsc#1030699)
  * RPM group adjustments.
  * Avoid %__ macro indirections</changelog>
<changelog author="mwilck@suse.com" date="1493294400">- spec file: Disable RADOS support for i586 on Leap 42.x (bsc#1036271)
- spec file: Move libdmmp to /usr/lib[64] (bsc#1036652)
- Update to version 0.7.1+7+suse.3edc5f7d:
  * kpartx: use mapname if no uuid is present (bsc#1033541)
  * kpartx: relax check when checking for a kpartx device (bsc#1033541)
  * libmpathpersist: use extern struct udev (bsc#1027188)
  * kpartx: include sys/sysmacros.h (fix compilation warning)
- Update to upstream version 0.7.1:
  * multipath-tools: improve processing efficiency for addition and deletion of multipath devices
  * uevent_can_discard: optimize devpath check
  * multipathd: fix SIGUSR2 handling
  * multipath-tools: clean up libdmmp/Makefile
  * multipath-tools: libdmmp: Fix incorrect use of __attribute__
  * multipath-tools: Remove trailing whitespaces
  * multipath-tools: add missing "-l" flag for pthread in libdmmp/Makefile
  * multipath-tools: build objects for libdmmp and libmpathpersist independently
  * libdmmp: minor Makefile cleanup
  * multipath-tools: remove incdir from Makefiles
  * libdmmp: don't disconnect from multipathd twice
  * multipathd: don't call strlen on NULL variables
  * libdmmp: move libdmmp.pc install location
  * multipathd: drop lock before calling uev_add_path
  * multipathd: allow devices to switch from RW to RO
  * libmultipath: don't set max_sectors_kb on reloads
  * Remove a trailing tab
  * multipath: fix segfault with disable_changed_wwids
  * multipath-tools: amend text from multipath/multipath.conf.5
  * Bump the version code and date
  * multipath-tools: replace multipath configuration output
  * Revert "multipathd: set timeout for CLI commands correctly"
  * libmultipath: fix skip_kpartx support for removing maps
  * Bump version to 0.7.1</changelog>
<changelog author="mwilck@suse.com" date="1500552000">- Update to version 0.7.1+11+suse.246dd815
  * libmultipath: get_udev_uid: make sure pp-&gt;wwid is 0-terminated
  (bsc#1048146)
  * libmultipath: drop uevent_can_discard_by_devpath (bsc#1048052)
  * libmultipath: only listen for uevents with DEVTYPE=disk
  (bsc#1048052)
  * libmultipath: fix over-long NVME WWIDs
  (bsc#1048146)
- _service: Pull this from the branch sles12-sp3-fixes (minimal set
  of fixes against SLE12-SP3 RC2). Use match-tag to generate correct
  version</changelog>

</package>
<package pkgid="4848be306c3399e48e9ac245890362cf83d19e74728acc2c9f1bb6e5f04f60bf" name="krb5" arch="src">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="d712fdfa202a0c8fd720f7891c46f8bb4a85e14848c061580efc66c6cccb4e0f" name="krb5" arch="src">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="c87fed712342f8d83f0fd2abd46fea24690239046ecb70a7ed295e78584f41cf" name="krb5" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="01639bc187548d00493ae8d1d2946a866af86cd1ba00e3681ccdae23104d1025" name="krb5" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="702388d2e963dc3434ca272857b0376b9a82bf7e18706126e923fc8e0eb30a49" name="krb5-32bit" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="a6ab52b6df680aad68183fa30fcdbbce9b7ba6f877397a4f1e920f3acd95ff1b" name="krb5-32bit" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="084f181ee3afdf61852d8ed7599a3fb41ebd2a7fafb53f5551669a7950a2f9b5" name="krb5-client" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="ed0c68c613f882f091825a7f1ac375bef2e55d9a54ca61ab0ee979449dc15bcf" name="krb5-client" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="2c412a96926b21bc895b96bfce484737825a574e125f0398057b2ff1c4739839" name="krb5-devel" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="6f9b1e75dd846cbb77e4f2021ddca8d82d5671457e60d4584fb9c08f038a8f04" name="krb5-devel" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="16ee95e88ce3fd114ef17f6e18e4aad5c0538b598eefbaab7a2d9653eff17aa6" name="krb5-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="91d480e3d4506ee458a6e5b8b89f01ab6f601504ea80b5936237252db256f98f" name="krb5-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="899373e36fc810f94dde603508c01c1f038e7c2385273e88f28e40665a324590" name="krb5-doc" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="87825ef1c589f3a184f3b5f4a641822c20b20e063214d21e3c0a9bfa931b1c7c" name="krb5-doc" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="e2a068ee33e2c0665c660286002dd80440f03c0a87580f3041008efddc1aa9a4" name="krb5-mini" arch="src">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5 pieces from spec file. Thus removing pre-checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Change package description to explain what "mini" means.
- Apply the following patches to catch up with krb5-server:
  0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
  0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
  0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="e517aa3fd12abce9cc4376a5d49809b21a0a29400c56aeb6f9b114d6fd46d275" name="krb5-mini" arch="src">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5 pieces from spec file. Thus removing pre-checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Change package description to explain what "mini" means.
- Apply the following patches to catch up with krb5-server:
  0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
  0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
  0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="41e7227167bd4850beafad4046d63b71aeeb38a4786e66470b757bc58f2d1483" name="krb5-mini" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5 pieces from spec file. Thus removing pre-checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Change package description to explain what "mini" means.
- Apply the following patches to catch up with krb5-server:
  0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
  0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
  0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="9a21d3c3b6dd5932a03053d470d5b3cd26139edd75fc6105028634044ddc90d2" name="krb5-mini" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5 pieces from spec file. Thus removing pre-checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Change package description to explain what "mini" means.
- Apply the following patches to catch up with krb5-server:
  0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
  0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
  0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="ac3d0861881fa2ff7d56ecc1570d1ab8b5feb9dcf91cb407d459d4b2cfa7b4e2" name="krb5-mini-devel" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5 pieces from spec file. Thus removing pre-checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Change package description to explain what "mini" means.
- Apply the following patches to catch up with krb5-server:
  0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
  0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
  0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="36ea2305ddc2cbfb7213855361a4375db364a1085b28f5d5d64fc51d876f71eb" name="krb5-mini-devel" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5 pieces from spec file. Thus removing pre-checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Change package description to explain what "mini" means.
- Apply the following patches to catch up with krb5-server:
  0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
  0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
  0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="42eb87e5874ef03f5cdf92152324b9b186f4a7a7f2f0fdc478d84a4be05772cc" name="krb5-plugin-kdb-ldap" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="61cf46b901711104a7b457a8951411d7a53898714c27e8105af99483866cf0dc" name="krb5-plugin-kdb-ldap" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="6d7558a47684072abb8331d66df8a5888820b8d43e1d4b0241d879cacc11e96c" name="krb5-plugin-preauth-otp" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="614449f62a2d0cc71375b6252f54b8cf2c94d09c40940061555ce9537f0ca6fb" name="krb5-plugin-preauth-otp" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="6ab7104a221eeaf05d4efc3bedf420c4caab4c63e7468225cf906a4bf7572ae5" name="krb5-plugin-preauth-pkinit" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="1a5d0f4cba1d98a9834efa5dda305e0cf320f70e7c8f22191ef10328bba39286" name="krb5-plugin-preauth-pkinit" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="6b71579896e8666559918805ac70bc6fa6acdbee63ec628a1235f2c5fbb2625f" name="krb5-server" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="12.1"/>

<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>
<changelog author="hguo@suse.com" date="1509105600">- Introduce patch 0110-Fix-PKINIT-cert-matching-data-construction.patch
  to fix CVE-2017-15088 of bsc#1065274.</changelog>

</package>
<package pkgid="1ea461a162a2808cf092585b7dde0ef0169a8a2450c530fc3bb4c28384b57138" name="krb5-server" arch="x86_64">
    <version epoch="0" ver="1.12.5" rel="9.1"/>

<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>
<changelog author="hguo@suse.com" date="1447156800">- Apply patch 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  to fix a memory corruption regression introduced by resolution of
  CVE-2015-2698. bsc#954204</changelog>
<changelog author="hguo@suse.com" date="1453982400">- Fix CVE-2015-8629: krb5: xdr_nullstring() doesn't check for
  terminating null character (bsc#963968)
  with patch 0104-Verify-decoded-kadmin-C-strings-CVE-2015-8629.patch
- Fix CVE-2015-8631: krb5: Memory leak caused by supplying a null
  principal name in request (bsc#963975)
  with patch 0105-Fix-leaks-in-kadmin-server-stubs-CVE-2015-8631.patch
- Fix CVE-2015-8630: krb5: krb5 doesn't check for null policy when
  KADM5_POLICY is set in the mask (bsc#963964)
  with patch 0106-Check-for-null-kadm5-policy-name-CVE-2015-8630.patch</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade from version 1.12.1 to 1.12.5.
  The new maintenance release brings accumulated defect fixes.
- The following patches are now present in the source bundle,
  thus removed from build individual patch files:
  * 0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch
  * 0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch
  * 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  * 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  * 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  * 0103-Fix-IAKERB-context-export-import-CVE-2015-2698.patch
  * bnc#912002.diff
  * krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
  * krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  * krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch
  * krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch
  * krb5-1.12.2-CVE-2014-5353.patch
  * krb5-1.12.2-CVE-2014-5354.patch
  * krb5-master-keyring-kdcsync.patch
- Line numbers in the following patches are slightly adjusted to fit
  into this new source version:
  * krb5-1.6.3-ktutil-manpage.dif
  * krb5-1.7-doublelog.patch
- Remove krb5-mini pieces from spec file. Thus removing pre_checkin.sh
- Remove expired macros and other minor clean-ups in spec file.
- Use system libverto to substitute built-in libverto.
  Implement fate#320326</changelog>
<changelog author="hguo@suse.com" date="1458734400">- Introduce patch
  0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  to fix CVE-2016-3119 (bsc#971942)</changelog>
<changelog author="hguo@suse.com" date="1465819200">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
<changelog author="foss@grueninger.de" date="1467460800">- Fix build with doxygen 1.8.8 - adding krb5-1.12-doxygen.patch
  from rev128 of network/krb5 (bsc#982313#c2)</changelog>
<changelog author="hguo@suse.com" date="1469793600">- Fix CVE-2016-3120 (bsc#991088) with patch:
  0108-Fix-S4U2Self-KDC-crash-when-anon-is-restricted.patch</changelog>
<changelog author="hguo@suse.com" date="1471262400">- Remove unneeded prerequisites from spec file. (bsc#992853)</changelog>
<changelog author="hguo@suse.com" date="1496232000">- Remove main package's dependency on systemd. (bsc#1032680)</changelog>
<changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
<changelog author="hguo@suse.com" date="1502971200">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
<changelog author="hguo@suse.com" date="1504612800">- Introduce patch 0109-Preserve-GSS-context-on-init-accept-failure.patch
  to fix CVE-2017-11462 of bsc#1056995.</changelog>

</package>
<package pkgid="e872dfaf39a5defdfdfd40ec6a2000a01f806756b0d3bc3eeb9b22771b9422f9" name="kselftests-kmp-debug" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="ea021edb1eb3f9a4056d079e5a1daa6a41dcdb0d3e9a2916cdd9de415cba911c" name="kselftests-kmp-default" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="0db80b518aaaf56b639dbbc77d594a6cf04653d6123933881eee3221fa401dab" name="kselftests-kmp-vanilla" arch="x86_64">
    <version epoch="0" ver="4.4.103" rel="36.1"/>

<changelog author="lhenriques@suse.com" date="1512648000">- blaclist.conf: ignore s2mpa01 regulator fix 33f0698a52d9
  This module is not compiled in any config.  Besides, it fixes a compilation
  error that occurs "In some rare configurations".
- commit f8fe2e2</changelog>
<changelog author="jslaby@suse.cz" date="1512734400">- Linux 4.4.103 (bnc#1012382).
- kABI: protect structs rt_rq+root_domain (kabi).
- s390: fix transactional execution control register handling
  (bnc#1012382).
- s390/runtime instrumention: fix possible memory corruption
  (bnc#1012382).
- s390/disassembler: add missing end marker for e7 table
  (bnc#1012382).
- s390/disassembler: increase show_code buffer size (LTC#161577
  bnc#1012382 bnc#1070825).
- ipv6: only call ip6_route_dev_notify() once for
  NETDEV_UNREGISTER (bnc#1012382).
- vsock: use new wait API for vsock_stream_sendmsg()
  (bnc#1012382).
- sched: Make resched_cpu() unconditional (bnc#1012382).
- lib/mpi: call cond_resched() from mpi_powm() loop (bnc#1012382).
- x86/decoder: Add new TEST instruction pattern (bnc#1012382).
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
  (bnc#1012382).
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
  (bnc#1012382).
- MIPS: ralink: Fix MT7628 pinmux (bnc#1012382).
- MIPS: ralink: Fix typo in mt7628 pinmux function (bnc#1012382).
- ALSA: hda: Add Raven PCI ID (bnc#1012382).
- dm bufio: fix integer overflow when limiting maximum cache size
  (bnc#1012382).
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
  (bnc#1012382).
- MIPS: Fix an n32 core file generation regset support regression
  (bnc#1012382).
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1 (bnc#1012382).
- nilfs2: fix race condition that causes file system corruption
  (bnc#1012382).
- bcache: check ca-&gt;alloc_thread initialized before wake up it
  (bnc#1012382).
- isofs: fix timestamps beyond 2027 (bnc#1012382).
- NFS: Fix typo in nomigration mount option (bnc#1012382).
- nfs: Fix ugly referral attributes (bnc#1012382).
- nfsd: deal with revoked delegations appropriately (bnc#1012382).
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
  (bnc#1012382).
- rtlwifi: fix uninitialized rtlhal-&gt;last_suspend_sec time
  (bnc#1012382).
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
  (bnc#1012382).
- ext4: fix interaction between i_size, fallocate, and delalloc
  after a crash (bnc#1012382).
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
  (bnc#1012382).
- iscsi-target: Fix non-immediate TMR reference leak
  (bnc#1012382).
- target: Fix QUEUE_FULL + SCSI task attribute handling
  (bnc#1012382).
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
  (bnc#1012382).
- KVM: SVM: obey guest PAT (bnc#1012382).
- SUNRPC: Fix tracepoint storage issues with svc_recv and
  svc_rqst_status (bnc#1012382).
- clk: ti: dra7-atl-clock: Fix of_node reference counting
  (bnc#1012382).
- clk: ti: dra7-atl-clock: fix child-node lookups (bnc#1012382).
- libnvdimm, namespace: fix label initialization to use valid
  seq numbers (bnc#1012382).
- libnvdimm, namespace: make 'resource' attribute only readable
  by root (bnc#1012382).
- IB/srpt: Do not accept invalid initiator port names
  (bnc#1012382).
- NFC: fix device-allocation error return (bnc#1012382).
- i40e: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- igb: Use smp_rmb rather than read_barrier_depends (bnc#1012382).
- igbvf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbevf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- i40evf: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- fm10k: Use smp_rmb rather than read_barrier_depends
  (bnc#1012382).
- ixgbe: Fix skb list corruption on Power systems (bnc#1012382).
- parisc: Fix validity check of pointer size argument in new
  CAS implementation (bnc#1012382).
- media: Don't do DMA on stack for firmware upload in the AS102
  driver (bnc#1012382).
- media: rc: check for integer overflow (bnc#1012382).
- media: v4l2-ctrl: Fix flags field on Control events
  (bnc#1012382).
- sched/rt: Simplify the IPI based RT balancing logic
  (bnc#1012382).
- fscrypt: lock mutex before checking for bounce page pool
  (bnc#1012382).
- net/9p: Switch to wait_event_killable() (bnc#1012382).
- PM / OPP: Add missing of_node_put(np) (bnc#1012382).
- e1000e: Fix error path in link detection (bnc#1012382).
- e1000e: Fix return value test (bnc#1012382).
- e1000e: Separate signaling for link check/link up (bnc#1012382).
- RDS: RDMA: return appropriate error on rdma map failures
  (bnc#1012382).
- PCI: Apply _HPX settings only to relevant devices (bnc#1012382).
- dmaengine: zx: set DMA_CYCLIC cap_mask bit (bnc#1012382).
- net: Allow IP_MULTICAST_IF to set index to L3 slave
  (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: make return values more
  specific (bnc#1012382).
- net: 3com: typhoon: typhoon_init_one: fix incorrect return
  values (bnc#1012382).
- drm/armada: Fix compile fail (bnc#1012382).
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
  (bnc#1012382).
- ath10k: ignore configuring the incorrect board_id (bnc#1012382).
- ath10k: fix potential memory leak in
  ath10k_wmi_tlv_op_pull_fw_stats() (bnc#1012382).
- ath10k: set CTS protection VDEV param only if VDEV is up
  (bnc#1012382).
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
  (bnc#1012382).
- drm: Apply range restriction after color adjustment when
  allocation (bnc#1012382).
- mac80211: Remove invalid flag operations in mesh TSF
  synchronization (bnc#1012382).
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
  (bnc#1012382).
- iio: light: fix improper return value (bnc#1012382).
- staging: iio: cdc: fix improper return value (bnc#1012382).
- spi: SPI_FSL_DSPI should depend on HAS_DMA (bnc#1012382).
- netfilter: nft_queue: use raw_smp_processor_id() (bnc#1012382).
- netfilter: nf_tables: fix oob access (bnc#1012382).
- ASoC: rsnd: don't double free kctrl (bnc#1012382).
- btrfs: return the actual error value from from
  btrfs_uuid_tree_iterate (bnc#1012382).
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading
  region data (bnc#1012382).
- s390/kbuild: enable modversions for symbols exported from asm
  (bnc#1012382).
- xen: xenbus driver must not accept invalid transaction ids
  (bnc#1012382).
- Revert "sctp: do not peel off an assoc from one netns to
  another one" (bnc#1012382).
- Delete
  patches.arch/s390-sles12sp3-06-01-s390-disassembler-increase-show_code-buffer-size.patch.
- ath10k: convert warning about non-existent OTP board id to
  debug message (git-fixes).
- mac80211: Fix addition of mesh configuration element
  (git-fixes).
- commit 81d5809</changelog>
<changelog author="jthumshirn@suse.de" date="1512734401">- scsi: aacraid: Check for PCI state of device in a generic way
  (bsc#1022607, FATE#321673).
- commit ef24f1d</changelog>
<changelog author="tiwai@suse.de" date="1512820800">- Disable IPMI fix patches due to regression (bsc#0171833)
- commit 02d2fe1</changelog>
<changelog author="tiwai@suse.de" date="1512907200">- Remove buggy IPMI patch (bsc#1071833)
  The broken fix was identified and removed/blacklisted now.
  Also re-enable the rest IPMI fixes that have been disabled.
- commit 42f6416</changelog>
<changelog author="oneukum@suse.com" date="1512993600">- blacklist.conf: blacklist optimization for a rare math operation
- commit df9670b</changelog>
<changelog author="oneukum@suse.com" date="1512993601">- blacklist.conf: breaks ABI
- commit 3a24f5b</changelog>
<changelog author="tbogendoerfer@suse.de" date="1512993602">- net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
  (bsc#1069583).
- bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg()
  (bsc#1053309).
- bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown
  (bsc#1053309).
- e1000e: Avoid receiver overrun interrupt bursts (bsc#969470
  FATE#319819).
- commit 057c3b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080000">- Update patches.kernel.org/patch-4.4.86-87 rerferences (add CVE-2017-11600 bsc#1050231).
- commit d4ca9ac</changelog>
<changelog author="mkubecek@suse.cz" date="1513080001">- Update
  patches.kernel.org/4.4.100-007-sctp-do-not-peel-off-an-assoc-from-one-netns-.patch
  references (add CVE-2017-15115 bsc#1068671).
- commit 8277a6f</changelog>
<changelog author="mkubecek@suse.cz" date="1513080002">- dccp: CVE-2017-8824: use-after-free in DCCP code (CVE-2017-8824
  bsc#1070771).
- commit ffb372d</changelog>
<changelog author="oneukum@suse.com" date="1513080003">- crypto: rsa - fix buffer overread when stripping leading zeroes
  (bsc#1048317).
- commit c7cf7ed</changelog>
<changelog author="mkubecek@suse.cz" date="1513080004">- netfilter: nfnetlink_cthelper: Add missing permission checks
  (CVE-2017-17448 bsc#1071693).
- commit 60de6b3</changelog>
<changelog author="mkubecek@suse.cz" date="1513080005">- netlink: Add netns check on taps (CVE-2017-17449 bsc#1071694).
- commit 34b86ff</changelog>
<changelog author="mkubecek@suse.cz" date="1513080006">- netfilter: xt_osf: Add missing permission checks (CVE-2017-17450
  bsc#1071695).
- commit 72901c9</changelog>
<changelog author="jdelvare@suse.de" date="1513080007">- blacklist.conf: clarify the problem with c0a32fe13cd3
- commit bfdb5b4</changelog>
<changelog author="mkubecek@suse.cz" date="1513080008">- Update patches.kernel.org/patch-4.4.74-75 references (add CVE-2017-7482 bsc#1046107).
- commit 4d1fd5f</changelog>
<changelog author="bp@suse.de" date="1513080009">- x86/microcode/AMD: Add support for fam17h microcode loading
  (bsc#1068032).
- commit e2519b0</changelog>
<changelog author="dbueso@suse.de" date="1513166400">- epoll: remove ep_call_nested() from ep_eventpoll_poll()
  (bsc#1056427).
- epoll: avoid calling ep_call_nested() from ep_poll_safewake()
  (bsc#1056427).
- commit c99ced4</changelog>
<changelog author="hare@suse.de" date="1513166401">- scsi: check for device state in __scsi_remove_target()
  (bsc#1072589).
- commit e430cfc</changelog>

</package>
<package pkgid="6636ba4289db6588d01e44b5f11978935cbaaa92229951c0affe11fadc61e0c5" name="ktexteditor" arch="src">
    <version epoch="0" ver="5.32.0" rel="3.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * Add syntax highlighting for TaskJuggler and PL/I
  * Make it possible to disable keyword-completion via
    the config interface.
  * Resize the tree when the completion model got reset.
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Syntax h/l for pli: builtin functions added, expandable regions added
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * Better behaviour for "insert braces around" autobrace feature
  * Change option key to enforce new default,
    Newline at End of File = true
  * Remove some suspicious setUpdatesEnabled calls (kde#353088)
  * Delay emitting of verticalScrollPositionChanged until all stuff
    is consistent for folding (kde#342512)
  * Patch updating tag substitution (kde#330634)
  * Only update the palette once for the change event
    belonging to qApp (kde#358526)
  * Append newlines at EOF by default
  * Add NSIS syntax highlighting file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix highlighting of all occurences in ReadOnlyPart
  * Don't iterate over a QString as if it was a QStringList
  * Properly initialize static QMaps
  * Prefer toDisplayString(QUrl::PreferLocalFile)
  * Support surrogate character sending from input method
  * Do not crash on shutdown when text animation is still running
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459080000">- Added 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Revert "Open/Save config page: Use term "Folder" instead
    of "Directory""
  * Open/Save config page: Use term "Folder" instead of "Directory"
  * kateschemaconfig.cpp: use correct filters with open/save dialogs
    (kde#343327)
  * c.xml: use default style for control flow keywords
  * isocpp.xml: use default style "dsControlFlow" for control
    flow keywords
  * c/isocpp: add more C standard types
  * KateRenderer::lineHeight() returns an int
  * printing: use font size from selected printing schema
    (kde#356110)
  * cmake.xml speedup: Use WordDetect instead of RegExpr
  * Change tab with to 4 instead of 8
  * Fix changing the current line number color
  * Fix selecting completion item with the mouse (kde#307052)
  * Add syntax highlighting for gcode
  * Fix the MiniMap selection background painting
  * Fix encoding for gap.xml (use UTF-8)
  * Fix nested comment blocks (kde#358692)
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php
- Drop upstreamed 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Use proper char syntax '"' instead of '\"'
  * doxygen.xml: Use default style dsAnnotation for "Custom Tags"
    as well (less hard-coded colors)
  * Add option to show the counter of words
  * Improved foreground color contrast for search &amp; replace
    highlightings
  * Fix crash when closing Kate through dbus while the print
    dialog is open (kde##356813)
  * Cursor::isValid(): add note about isValidTextPosition()
  * Add API {Cursor, Range}::{toString, static fromString}
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Fix default encoding to UTF-8 (kde#62604)
  * Fix color configurability of default style "Error"
  * Search &amp; Replace: Fix replace background color (regression
    introduced in v5.22) (kde#63441)
  * New color scheme "Breeze Dark", see https://kate-editor.org/?post=3745
  * KateUndoManager::setUndoRedoCursorOfLastGroup(): pass Cursor
    as const reference
  * sql-postgresql.xml improve syntax highlighting by
    ignoring multiline function bodies
  * Add syntax highlighting for Elixir and Kotlin
  * VHDL syntax highlighting in ktexteditor: add support for
    functions inside architecture statements
  * vimode: Don't crash when given a range for a nonexistent
    command (kde#60418)
  * Properly remove composed characters when using Indic locales
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * Show Scrollbar Text Preview after a delay of 250ms
  * Hide preview and stuff on view content scrolling
  * Set parent + toolview, I think this is needed to avoid task
    switcher entry in Win10
  * Remove "KDE-Standard" from encoding box
  * Folding preview on per default
  * Avoid dashed underline for preview &amp; avoid poisoning of
    line layout cache
  * Always enable "Show preview of folded text" option
  * TextPreview: Adjust the grooveRect-height when
    scrollPastEnd is enabled
  * Scrollbar preview: use groove rect if scrollbar does
    not use full height
  * Add KTE::MovingRange::numberOfLines() just like KTE::Range has
  * Code folding preview: set popup height so that
    all hidden lines fit
  * Add option to disable preview of folded text
  * Add modeline 'folding-preview' of type bool
  * View ConfigInterface: support 'folding-preview' of type bool
  * Add bool KateViewConfig::foldingPreview() and
    setFoldingPreview(bool)
  * Feature: Show text preview when hovering over folded code block
  * KateTextPreview: add setShowFoldedLines() and showFoldedLines()
  * Add modelines 'scrollbar-minimap' [bool], and
    'scrollbar-preview' [bool]
  * Enable mini-map scrollbar by default
  * New feature: Show text preview when hovering over the scrollbar
  * KateUndoGroup::editEnd(): pass KTE::Range by const ref
  * Fix vim-mode shortcut handling,
    after behaviour changes in Qt 5.5 (kde#353332)
  * Autobrace: don't insert ' character in text
  * ConfigInterface: add scrollbar-minimap config key to
    enable/disable scrollbar mini map
  * Fix KTE::View::cursorToCoordinate() when top message widget
    is visible
  * Refactoring of the Emulated Command Bar
  * Fix drawing artifacts when scrolling while notifications
    are visible (kde#363220)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Do not ask for overwriting a file twice with native dialogs
  * Added FASTQ syntax
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Remove accel clash (kde#363738)
  * Fix email address highlighting in doxygen (kde#363186)
  * Detect some more json files, like our own projects ;)
  * Improve mime-type detection (kde#357902)
  * Bug 363280 - highlighting: c++: #if 1 #endif #if defined (A) aaa
    [#]elif defined (B) bbb #endif (kde#363280)
  * Bug 351496 - Python folding is not working during initial typing
    (kde#351496)
  * Bug 365171 - Python syntax highlighting: not working correctly
    for escape sequences (kde#365171)
  * Bug 344276 - php nowdoc not folded correctly (kde#344276)
  * Bug 359613 - Some CSS3 properties are not supported in
    syntax highlight (kde#359613)
  * Bug 367821 - wineHQ syntax: The section in a reg file isn't
    highlighted correctly (kde#367821)
  * Improve swap file handling if swap directory specified
  * Fix crash when reloading documents with auto-wrapped line due
    to line length limit (kde#366493)
  * Fix constant crashes related to the vi command bar
    (kde#367786)
  * Fix: Line numbers in printed documents now starts at 1
    (kde#366579)
  * Backup Remote Files: Treat mounted files also as remote files
  * Cleanup logic for searchbar creation
  * Add highlighting for Magma
  * Allows only one level of recursion
  * Fix broken swap-file on windows
  * Patch: add bitbake support for syntax highlighting engine
  * Autobrace: look at spellcheck attribute where the character
    was entered (kde#367539)
  * Highlight QMAKE_CFLAGS
  * Don't pop out of the main context
  * Add some executable names that are commonly used
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * XML files: remove hard-coded color for values
  * XML: Remove hard-coded color for values
  * XML Schema Definition: Turn 'version' into an xs:integer
  * Highlighting definition files: round version up to next integer
  * Support multi char captures only in {xxx} to avoid regressions
  * Support regular expressions replaces with captures &gt; \9, e.g. I
    (kde#365124)
  * Fix rendering of characters spanning into next line,
    e.g. underlines are no longer cut off with some fonts/font-sizes
    (kde#335079)
  * Fix crash: Make sure the display cursor is valid after text folding
    (kde#367466)
  * KateNormalInputMode needs to rerun SearchBar enter methods
  * try to "fixup" rendering of underlines and stuff like that
    (kde#335079)
  * Show "View Difference" button only, if 'diff' is installed
  * Use non-modal message widget for externally
    modified file notifications (kde#353712)
  * Fix regression: testNormal did only work because of
    test execution at once
  * Split the indent test into separate runs
  * Support "Unfold Toplevel Nodes" action again (kde#335590)
  * Fix crash when showing top or bottom messages multiple times
  * Fix eol setting in mode lines (kde#365705)
  * Highlight .nix files as bash, guess can't hurt (kde#365006)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Breeze Dark: Darken current-line background color for
    better readability (kde#371042)
  * Sorted Dockerfile instructions
  * Breeze (Dark): Make comments a bit lighter for
    better readability (kde#371042)
  * Fix CStyle and C++/boost indenters when automatic
    brackets enabled (kde#370715)
  * Add modeline 'auto-brackets'
  * Fix inserting text after end of file (rare case)
  * Fix invalid xml highlighting files
  * Maxima: Remove hard-coded colors, fix itemData Label
  * Add OBJ, PLY and STL syntax definitions
  * Add syntax highlighting support for Praat
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Prevent Qt warnings about an unsupported clipboard mode on Mac
  * Use syntax definitions from KF5::SyntaxHighlighting
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Remember file type set by user over sessions
  * Reset filetype when opening url
  * Added getter for word-count configuration value
  * vimode_completion unit test failure
  * Consistent conversion from/to cursor to/from coordinates
  * Update file type on save only if path changes
  * EditorConfig support
  * add FindEditorConfig to ktexteditor if that proves to be useful, can be moved to extra-cmake-modules, thought I see its use is rather specialized to ktexteditor
  * Fix: emmetToggleComment action doesn't work
  * Use sentence style capitalization with label texts of edit fields
  * Reverse meaning of :split, :vsplit to match vi and Kate actions.
  * Use C++11 log2() instead of log() / log(2)
  * KateSaveConfigTab: put spacer behind last group on Advanced tab, not inside
  * KateSaveConfigTab: Remove wrong margin around content of Advanced tab
  * Borders config subpage: fix scrollbar visibility combobox being off-placed
  * Upgrade KF5 version to 5.32.0.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1490443200">- Enable editorconfig support</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491652800">- Enable editorconfig support only on TW and Leap &gt;= 42.2</changelog>
<changelog author="wbauer@tmo.at" date="1508846400">- Add Fix-missing-spell-check-bar.patch to fix the spell checking
  panel not appearing properly (boo#992035, kde#359682)</changelog>

</package>
<package pkgid="4809e843a3b9519b4bec7d6dec1efd41d9f4bbe4c2234284090131ad5529642a" name="ktexteditor" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * Add syntax highlighting for TaskJuggler and PL/I
  * Make it possible to disable keyword-completion via
    the config interface.
  * Resize the tree when the completion model got reset.
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Syntax h/l for pli: builtin functions added, expandable regions added
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * Better behaviour for "insert braces around" autobrace feature
  * Change option key to enforce new default,
    Newline at End of File = true
  * Remove some suspicious setUpdatesEnabled calls (kde#353088)
  * Delay emitting of verticalScrollPositionChanged until all stuff
    is consistent for folding (kde#342512)
  * Patch updating tag substitution (kde#330634)
  * Only update the palette once for the change event
    belonging to qApp (kde#358526)
  * Append newlines at EOF by default
  * Add NSIS syntax highlighting file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix highlighting of all occurences in ReadOnlyPart
  * Don't iterate over a QString as if it was a QStringList
  * Properly initialize static QMaps
  * Prefer toDisplayString(QUrl::PreferLocalFile)
  * Support surrogate character sending from input method
  * Do not crash on shutdown when text animation is still running
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459080000">- Added 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Revert "Open/Save config page: Use term "Folder" instead
    of "Directory""
  * Open/Save config page: Use term "Folder" instead of "Directory"
  * kateschemaconfig.cpp: use correct filters with open/save dialogs
    (kde#343327)
  * c.xml: use default style for control flow keywords
  * isocpp.xml: use default style "dsControlFlow" for control
    flow keywords
  * c/isocpp: add more C standard types
  * KateRenderer::lineHeight() returns an int
  * printing: use font size from selected printing schema
    (kde#356110)
  * cmake.xml speedup: Use WordDetect instead of RegExpr
  * Change tab with to 4 instead of 8
  * Fix changing the current line number color
  * Fix selecting completion item with the mouse (kde#307052)
  * Add syntax highlighting for gcode
  * Fix the MiniMap selection background painting
  * Fix encoding for gap.xml (use UTF-8)
  * Fix nested comment blocks (kde#358692)
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php
- Drop upstreamed 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Use proper char syntax '"' instead of '\"'
  * doxygen.xml: Use default style dsAnnotation for "Custom Tags"
    as well (less hard-coded colors)
  * Add option to show the counter of words
  * Improved foreground color contrast for search &amp; replace
    highlightings
  * Fix crash when closing Kate through dbus while the print
    dialog is open (kde##356813)
  * Cursor::isValid(): add note about isValidTextPosition()
  * Add API {Cursor, Range}::{toString, static fromString}
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Fix default encoding to UTF-8 (kde#62604)
  * Fix color configurability of default style "Error"
  * Search &amp; Replace: Fix replace background color (regression
    introduced in v5.22) (kde#63441)
  * New color scheme "Breeze Dark", see https://kate-editor.org/?post=3745
  * KateUndoManager::setUndoRedoCursorOfLastGroup(): pass Cursor
    as const reference
  * sql-postgresql.xml improve syntax highlighting by
    ignoring multiline function bodies
  * Add syntax highlighting for Elixir and Kotlin
  * VHDL syntax highlighting in ktexteditor: add support for
    functions inside architecture statements
  * vimode: Don't crash when given a range for a nonexistent
    command (kde#60418)
  * Properly remove composed characters when using Indic locales
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * Show Scrollbar Text Preview after a delay of 250ms
  * Hide preview and stuff on view content scrolling
  * Set parent + toolview, I think this is needed to avoid task
    switcher entry in Win10
  * Remove "KDE-Standard" from encoding box
  * Folding preview on per default
  * Avoid dashed underline for preview &amp; avoid poisoning of
    line layout cache
  * Always enable "Show preview of folded text" option
  * TextPreview: Adjust the grooveRect-height when
    scrollPastEnd is enabled
  * Scrollbar preview: use groove rect if scrollbar does
    not use full height
  * Add KTE::MovingRange::numberOfLines() just like KTE::Range has
  * Code folding preview: set popup height so that
    all hidden lines fit
  * Add option to disable preview of folded text
  * Add modeline 'folding-preview' of type bool
  * View ConfigInterface: support 'folding-preview' of type bool
  * Add bool KateViewConfig::foldingPreview() and
    setFoldingPreview(bool)
  * Feature: Show text preview when hovering over folded code block
  * KateTextPreview: add setShowFoldedLines() and showFoldedLines()
  * Add modelines 'scrollbar-minimap' [bool], and
    'scrollbar-preview' [bool]
  * Enable mini-map scrollbar by default
  * New feature: Show text preview when hovering over the scrollbar
  * KateUndoGroup::editEnd(): pass KTE::Range by const ref
  * Fix vim-mode shortcut handling,
    after behaviour changes in Qt 5.5 (kde#353332)
  * Autobrace: don't insert ' character in text
  * ConfigInterface: add scrollbar-minimap config key to
    enable/disable scrollbar mini map
  * Fix KTE::View::cursorToCoordinate() when top message widget
    is visible
  * Refactoring of the Emulated Command Bar
  * Fix drawing artifacts when scrolling while notifications
    are visible (kde#363220)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Do not ask for overwriting a file twice with native dialogs
  * Added FASTQ syntax
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Remove accel clash (kde#363738)
  * Fix email address highlighting in doxygen (kde#363186)
  * Detect some more json files, like our own projects ;)
  * Improve mime-type detection (kde#357902)
  * Bug 363280 - highlighting: c++: #if 1 #endif #if defined (A) aaa
    [#]elif defined (B) bbb #endif (kde#363280)
  * Bug 351496 - Python folding is not working during initial typing
    (kde#351496)
  * Bug 365171 - Python syntax highlighting: not working correctly
    for escape sequences (kde#365171)
  * Bug 344276 - php nowdoc not folded correctly (kde#344276)
  * Bug 359613 - Some CSS3 properties are not supported in
    syntax highlight (kde#359613)
  * Bug 367821 - wineHQ syntax: The section in a reg file isn't
    highlighted correctly (kde#367821)
  * Improve swap file handling if swap directory specified
  * Fix crash when reloading documents with auto-wrapped line due
    to line length limit (kde#366493)
  * Fix constant crashes related to the vi command bar
    (kde#367786)
  * Fix: Line numbers in printed documents now starts at 1
    (kde#366579)
  * Backup Remote Files: Treat mounted files also as remote files
  * Cleanup logic for searchbar creation
  * Add highlighting for Magma
  * Allows only one level of recursion
  * Fix broken swap-file on windows
  * Patch: add bitbake support for syntax highlighting engine
  * Autobrace: look at spellcheck attribute where the character
    was entered (kde#367539)
  * Highlight QMAKE_CFLAGS
  * Don't pop out of the main context
  * Add some executable names that are commonly used
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * XML files: remove hard-coded color for values
  * XML: Remove hard-coded color for values
  * XML Schema Definition: Turn 'version' into an xs:integer
  * Highlighting definition files: round version up to next integer
  * Support multi char captures only in {xxx} to avoid regressions
  * Support regular expressions replaces with captures &gt; \9, e.g. I
    (kde#365124)
  * Fix rendering of characters spanning into next line,
    e.g. underlines are no longer cut off with some fonts/font-sizes
    (kde#335079)
  * Fix crash: Make sure the display cursor is valid after text folding
    (kde#367466)
  * KateNormalInputMode needs to rerun SearchBar enter methods
  * try to "fixup" rendering of underlines and stuff like that
    (kde#335079)
  * Show "View Difference" button only, if 'diff' is installed
  * Use non-modal message widget for externally
    modified file notifications (kde#353712)
  * Fix regression: testNormal did only work because of
    test execution at once
  * Split the indent test into separate runs
  * Support "Unfold Toplevel Nodes" action again (kde#335590)
  * Fix crash when showing top or bottom messages multiple times
  * Fix eol setting in mode lines (kde#365705)
  * Highlight .nix files as bash, guess can't hurt (kde#365006)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Breeze Dark: Darken current-line background color for
    better readability (kde#371042)
  * Sorted Dockerfile instructions
  * Breeze (Dark): Make comments a bit lighter for
    better readability (kde#371042)
  * Fix CStyle and C++/boost indenters when automatic
    brackets enabled (kde#370715)
  * Add modeline 'auto-brackets'
  * Fix inserting text after end of file (rare case)
  * Fix invalid xml highlighting files
  * Maxima: Remove hard-coded colors, fix itemData Label
  * Add OBJ, PLY and STL syntax definitions
  * Add syntax highlighting support for Praat
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Prevent Qt warnings about an unsupported clipboard mode on Mac
  * Use syntax definitions from KF5::SyntaxHighlighting
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Remember file type set by user over sessions
  * Reset filetype when opening url
  * Added getter for word-count configuration value
  * vimode_completion unit test failure
  * Consistent conversion from/to cursor to/from coordinates
  * Update file type on save only if path changes
  * EditorConfig support
  * add FindEditorConfig to ktexteditor if that proves to be useful, can be moved to extra-cmake-modules, thought I see its use is rather specialized to ktexteditor
  * Fix: emmetToggleComment action doesn't work
  * Use sentence style capitalization with label texts of edit fields
  * Reverse meaning of :split, :vsplit to match vi and Kate actions.
  * Use C++11 log2() instead of log() / log(2)
  * KateSaveConfigTab: put spacer behind last group on Advanced tab, not inside
  * KateSaveConfigTab: Remove wrong margin around content of Advanced tab
  * Borders config subpage: fix scrollbar visibility combobox being off-placed
  * Upgrade KF5 version to 5.32.0.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1490443200">- Enable editorconfig support</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491652800">- Enable editorconfig support only on TW and Leap &gt;= 42.2</changelog>
<changelog author="wbauer@tmo.at" date="1508846400">- Add Fix-missing-spell-check-bar.patch to fix the spell checking
  panel not appearing properly (boo#992035, kde#359682)</changelog>

</package>
<package pkgid="1a01ba72077b1154718e57b73face4b80a4a407d869a1c266f558dc2e182dae1" name="ktexteditor-32bit" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * Add syntax highlighting for TaskJuggler and PL/I
  * Make it possible to disable keyword-completion via
    the config interface.
  * Resize the tree when the completion model got reset.
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Syntax h/l for pli: builtin functions added, expandable regions added
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * Better behaviour for "insert braces around" autobrace feature
  * Change option key to enforce new default,
    Newline at End of File = true
  * Remove some suspicious setUpdatesEnabled calls (kde#353088)
  * Delay emitting of verticalScrollPositionChanged until all stuff
    is consistent for folding (kde#342512)
  * Patch updating tag substitution (kde#330634)
  * Only update the palette once for the change event
    belonging to qApp (kde#358526)
  * Append newlines at EOF by default
  * Add NSIS syntax highlighting file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix highlighting of all occurences in ReadOnlyPart
  * Don't iterate over a QString as if it was a QStringList
  * Properly initialize static QMaps
  * Prefer toDisplayString(QUrl::PreferLocalFile)
  * Support surrogate character sending from input method
  * Do not crash on shutdown when text animation is still running
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459080000">- Added 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Revert "Open/Save config page: Use term "Folder" instead
    of "Directory""
  * Open/Save config page: Use term "Folder" instead of "Directory"
  * kateschemaconfig.cpp: use correct filters with open/save dialogs
    (kde#343327)
  * c.xml: use default style for control flow keywords
  * isocpp.xml: use default style "dsControlFlow" for control
    flow keywords
  * c/isocpp: add more C standard types
  * KateRenderer::lineHeight() returns an int
  * printing: use font size from selected printing schema
    (kde#356110)
  * cmake.xml speedup: Use WordDetect instead of RegExpr
  * Change tab with to 4 instead of 8
  * Fix changing the current line number color
  * Fix selecting completion item with the mouse (kde#307052)
  * Add syntax highlighting for gcode
  * Fix the MiniMap selection background painting
  * Fix encoding for gap.xml (use UTF-8)
  * Fix nested comment blocks (kde#358692)
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php
- Drop upstreamed 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Use proper char syntax '"' instead of '\"'
  * doxygen.xml: Use default style dsAnnotation for "Custom Tags"
    as well (less hard-coded colors)
  * Add option to show the counter of words
  * Improved foreground color contrast for search &amp; replace
    highlightings
  * Fix crash when closing Kate through dbus while the print
    dialog is open (kde##356813)
  * Cursor::isValid(): add note about isValidTextPosition()
  * Add API {Cursor, Range}::{toString, static fromString}
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Fix default encoding to UTF-8 (kde#62604)
  * Fix color configurability of default style "Error"
  * Search &amp; Replace: Fix replace background color (regression
    introduced in v5.22) (kde#63441)
  * New color scheme "Breeze Dark", see https://kate-editor.org/?post=3745
  * KateUndoManager::setUndoRedoCursorOfLastGroup(): pass Cursor
    as const reference
  * sql-postgresql.xml improve syntax highlighting by
    ignoring multiline function bodies
  * Add syntax highlighting for Elixir and Kotlin
  * VHDL syntax highlighting in ktexteditor: add support for
    functions inside architecture statements
  * vimode: Don't crash when given a range for a nonexistent
    command (kde#60418)
  * Properly remove composed characters when using Indic locales
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * Show Scrollbar Text Preview after a delay of 250ms
  * Hide preview and stuff on view content scrolling
  * Set parent + toolview, I think this is needed to avoid task
    switcher entry in Win10
  * Remove "KDE-Standard" from encoding box
  * Folding preview on per default
  * Avoid dashed underline for preview &amp; avoid poisoning of
    line layout cache
  * Always enable "Show preview of folded text" option
  * TextPreview: Adjust the grooveRect-height when
    scrollPastEnd is enabled
  * Scrollbar preview: use groove rect if scrollbar does
    not use full height
  * Add KTE::MovingRange::numberOfLines() just like KTE::Range has
  * Code folding preview: set popup height so that
    all hidden lines fit
  * Add option to disable preview of folded text
  * Add modeline 'folding-preview' of type bool
  * View ConfigInterface: support 'folding-preview' of type bool
  * Add bool KateViewConfig::foldingPreview() and
    setFoldingPreview(bool)
  * Feature: Show text preview when hovering over folded code block
  * KateTextPreview: add setShowFoldedLines() and showFoldedLines()
  * Add modelines 'scrollbar-minimap' [bool], and
    'scrollbar-preview' [bool]
  * Enable mini-map scrollbar by default
  * New feature: Show text preview when hovering over the scrollbar
  * KateUndoGroup::editEnd(): pass KTE::Range by const ref
  * Fix vim-mode shortcut handling,
    after behaviour changes in Qt 5.5 (kde#353332)
  * Autobrace: don't insert ' character in text
  * ConfigInterface: add scrollbar-minimap config key to
    enable/disable scrollbar mini map
  * Fix KTE::View::cursorToCoordinate() when top message widget
    is visible
  * Refactoring of the Emulated Command Bar
  * Fix drawing artifacts when scrolling while notifications
    are visible (kde#363220)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Do not ask for overwriting a file twice with native dialogs
  * Added FASTQ syntax
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Remove accel clash (kde#363738)
  * Fix email address highlighting in doxygen (kde#363186)
  * Detect some more json files, like our own projects ;)
  * Improve mime-type detection (kde#357902)
  * Bug 363280 - highlighting: c++: #if 1 #endif #if defined (A) aaa
    [#]elif defined (B) bbb #endif (kde#363280)
  * Bug 351496 - Python folding is not working during initial typing
    (kde#351496)
  * Bug 365171 - Python syntax highlighting: not working correctly
    for escape sequences (kde#365171)
  * Bug 344276 - php nowdoc not folded correctly (kde#344276)
  * Bug 359613 - Some CSS3 properties are not supported in
    syntax highlight (kde#359613)
  * Bug 367821 - wineHQ syntax: The section in a reg file isn't
    highlighted correctly (kde#367821)
  * Improve swap file handling if swap directory specified
  * Fix crash when reloading documents with auto-wrapped line due
    to line length limit (kde#366493)
  * Fix constant crashes related to the vi command bar
    (kde#367786)
  * Fix: Line numbers in printed documents now starts at 1
    (kde#366579)
  * Backup Remote Files: Treat mounted files also as remote files
  * Cleanup logic for searchbar creation
  * Add highlighting for Magma
  * Allows only one level of recursion
  * Fix broken swap-file on windows
  * Patch: add bitbake support for syntax highlighting engine
  * Autobrace: look at spellcheck attribute where the character
    was entered (kde#367539)
  * Highlight QMAKE_CFLAGS
  * Don't pop out of the main context
  * Add some executable names that are commonly used
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * XML files: remove hard-coded color for values
  * XML: Remove hard-coded color for values
  * XML Schema Definition: Turn 'version' into an xs:integer
  * Highlighting definition files: round version up to next integer
  * Support multi char captures only in {xxx} to avoid regressions
  * Support regular expressions replaces with captures &gt; \9, e.g. I
    (kde#365124)
  * Fix rendering of characters spanning into next line,
    e.g. underlines are no longer cut off with some fonts/font-sizes
    (kde#335079)
  * Fix crash: Make sure the display cursor is valid after text folding
    (kde#367466)
  * KateNormalInputMode needs to rerun SearchBar enter methods
  * try to "fixup" rendering of underlines and stuff like that
    (kde#335079)
  * Show "View Difference" button only, if 'diff' is installed
  * Use non-modal message widget for externally
    modified file notifications (kde#353712)
  * Fix regression: testNormal did only work because of
    test execution at once
  * Split the indent test into separate runs
  * Support "Unfold Toplevel Nodes" action again (kde#335590)
  * Fix crash when showing top or bottom messages multiple times
  * Fix eol setting in mode lines (kde#365705)
  * Highlight .nix files as bash, guess can't hurt (kde#365006)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Breeze Dark: Darken current-line background color for
    better readability (kde#371042)
  * Sorted Dockerfile instructions
  * Breeze (Dark): Make comments a bit lighter for
    better readability (kde#371042)
  * Fix CStyle and C++/boost indenters when automatic
    brackets enabled (kde#370715)
  * Add modeline 'auto-brackets'
  * Fix inserting text after end of file (rare case)
  * Fix invalid xml highlighting files
  * Maxima: Remove hard-coded colors, fix itemData Label
  * Add OBJ, PLY and STL syntax definitions
  * Add syntax highlighting support for Praat
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Prevent Qt warnings about an unsupported clipboard mode on Mac
  * Use syntax definitions from KF5::SyntaxHighlighting
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Remember file type set by user over sessions
  * Reset filetype when opening url
  * Added getter for word-count configuration value
  * vimode_completion unit test failure
  * Consistent conversion from/to cursor to/from coordinates
  * Update file type on save only if path changes
  * EditorConfig support
  * add FindEditorConfig to ktexteditor if that proves to be useful, can be moved to extra-cmake-modules, thought I see its use is rather specialized to ktexteditor
  * Fix: emmetToggleComment action doesn't work
  * Use sentence style capitalization with label texts of edit fields
  * Reverse meaning of :split, :vsplit to match vi and Kate actions.
  * Use C++11 log2() instead of log() / log(2)
  * KateSaveConfigTab: put spacer behind last group on Advanced tab, not inside
  * KateSaveConfigTab: Remove wrong margin around content of Advanced tab
  * Borders config subpage: fix scrollbar visibility combobox being off-placed
  * Upgrade KF5 version to 5.32.0.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1490443200">- Enable editorconfig support</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491652800">- Enable editorconfig support only on TW and Leap &gt;= 42.2</changelog>
<changelog author="wbauer@tmo.at" date="1508846400">- Add Fix-missing-spell-check-bar.patch to fix the spell checking
  panel not appearing properly (boo#992035, kde#359682)</changelog>

</package>
<package pkgid="6d3c16ac654cb894dd2591020f0b0f5b241913793bb9ba4dc01e751bd90aeb98" name="ktexteditor-devel" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * Add syntax highlighting for TaskJuggler and PL/I
  * Make it possible to disable keyword-completion via
    the config interface.
  * Resize the tree when the completion model got reset.
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Syntax h/l for pli: builtin functions added, expandable regions added
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * Better behaviour for "insert braces around" autobrace feature
  * Change option key to enforce new default,
    Newline at End of File = true
  * Remove some suspicious setUpdatesEnabled calls (kde#353088)
  * Delay emitting of verticalScrollPositionChanged until all stuff
    is consistent for folding (kde#342512)
  * Patch updating tag substitution (kde#330634)
  * Only update the palette once for the change event
    belonging to qApp (kde#358526)
  * Append newlines at EOF by default
  * Add NSIS syntax highlighting file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix highlighting of all occurences in ReadOnlyPart
  * Don't iterate over a QString as if it was a QStringList
  * Properly initialize static QMaps
  * Prefer toDisplayString(QUrl::PreferLocalFile)
  * Support surrogate character sending from input method
  * Do not crash on shutdown when text animation is still running
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459080000">- Added 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Revert "Open/Save config page: Use term "Folder" instead
    of "Directory""
  * Open/Save config page: Use term "Folder" instead of "Directory"
  * kateschemaconfig.cpp: use correct filters with open/save dialogs
    (kde#343327)
  * c.xml: use default style for control flow keywords
  * isocpp.xml: use default style "dsControlFlow" for control
    flow keywords
  * c/isocpp: add more C standard types
  * KateRenderer::lineHeight() returns an int
  * printing: use font size from selected printing schema
    (kde#356110)
  * cmake.xml speedup: Use WordDetect instead of RegExpr
  * Change tab with to 4 instead of 8
  * Fix changing the current line number color
  * Fix selecting completion item with the mouse (kde#307052)
  * Add syntax highlighting for gcode
  * Fix the MiniMap selection background painting
  * Fix encoding for gap.xml (use UTF-8)
  * Fix nested comment blocks (kde#358692)
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php
- Drop upstreamed 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Use proper char syntax '"' instead of '\"'
  * doxygen.xml: Use default style dsAnnotation for "Custom Tags"
    as well (less hard-coded colors)
  * Add option to show the counter of words
  * Improved foreground color contrast for search &amp; replace
    highlightings
  * Fix crash when closing Kate through dbus while the print
    dialog is open (kde##356813)
  * Cursor::isValid(): add note about isValidTextPosition()
  * Add API {Cursor, Range}::{toString, static fromString}
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Fix default encoding to UTF-8 (kde#62604)
  * Fix color configurability of default style "Error"
  * Search &amp; Replace: Fix replace background color (regression
    introduced in v5.22) (kde#63441)
  * New color scheme "Breeze Dark", see https://kate-editor.org/?post=3745
  * KateUndoManager::setUndoRedoCursorOfLastGroup(): pass Cursor
    as const reference
  * sql-postgresql.xml improve syntax highlighting by
    ignoring multiline function bodies
  * Add syntax highlighting for Elixir and Kotlin
  * VHDL syntax highlighting in ktexteditor: add support for
    functions inside architecture statements
  * vimode: Don't crash when given a range for a nonexistent
    command (kde#60418)
  * Properly remove composed characters when using Indic locales
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * Show Scrollbar Text Preview after a delay of 250ms
  * Hide preview and stuff on view content scrolling
  * Set parent + toolview, I think this is needed to avoid task
    switcher entry in Win10
  * Remove "KDE-Standard" from encoding box
  * Folding preview on per default
  * Avoid dashed underline for preview &amp; avoid poisoning of
    line layout cache
  * Always enable "Show preview of folded text" option
  * TextPreview: Adjust the grooveRect-height when
    scrollPastEnd is enabled
  * Scrollbar preview: use groove rect if scrollbar does
    not use full height
  * Add KTE::MovingRange::numberOfLines() just like KTE::Range has
  * Code folding preview: set popup height so that
    all hidden lines fit
  * Add option to disable preview of folded text
  * Add modeline 'folding-preview' of type bool
  * View ConfigInterface: support 'folding-preview' of type bool
  * Add bool KateViewConfig::foldingPreview() and
    setFoldingPreview(bool)
  * Feature: Show text preview when hovering over folded code block
  * KateTextPreview: add setShowFoldedLines() and showFoldedLines()
  * Add modelines 'scrollbar-minimap' [bool], and
    'scrollbar-preview' [bool]
  * Enable mini-map scrollbar by default
  * New feature: Show text preview when hovering over the scrollbar
  * KateUndoGroup::editEnd(): pass KTE::Range by const ref
  * Fix vim-mode shortcut handling,
    after behaviour changes in Qt 5.5 (kde#353332)
  * Autobrace: don't insert ' character in text
  * ConfigInterface: add scrollbar-minimap config key to
    enable/disable scrollbar mini map
  * Fix KTE::View::cursorToCoordinate() when top message widget
    is visible
  * Refactoring of the Emulated Command Bar
  * Fix drawing artifacts when scrolling while notifications
    are visible (kde#363220)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Do not ask for overwriting a file twice with native dialogs
  * Added FASTQ syntax
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Remove accel clash (kde#363738)
  * Fix email address highlighting in doxygen (kde#363186)
  * Detect some more json files, like our own projects ;)
  * Improve mime-type detection (kde#357902)
  * Bug 363280 - highlighting: c++: #if 1 #endif #if defined (A) aaa
    [#]elif defined (B) bbb #endif (kde#363280)
  * Bug 351496 - Python folding is not working during initial typing
    (kde#351496)
  * Bug 365171 - Python syntax highlighting: not working correctly
    for escape sequences (kde#365171)
  * Bug 344276 - php nowdoc not folded correctly (kde#344276)
  * Bug 359613 - Some CSS3 properties are not supported in
    syntax highlight (kde#359613)
  * Bug 367821 - wineHQ syntax: The section in a reg file isn't
    highlighted correctly (kde#367821)
  * Improve swap file handling if swap directory specified
  * Fix crash when reloading documents with auto-wrapped line due
    to line length limit (kde#366493)
  * Fix constant crashes related to the vi command bar
    (kde#367786)
  * Fix: Line numbers in printed documents now starts at 1
    (kde#366579)
  * Backup Remote Files: Treat mounted files also as remote files
  * Cleanup logic for searchbar creation
  * Add highlighting for Magma
  * Allows only one level of recursion
  * Fix broken swap-file on windows
  * Patch: add bitbake support for syntax highlighting engine
  * Autobrace: look at spellcheck attribute where the character
    was entered (kde#367539)
  * Highlight QMAKE_CFLAGS
  * Don't pop out of the main context
  * Add some executable names that are commonly used
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * XML files: remove hard-coded color for values
  * XML: Remove hard-coded color for values
  * XML Schema Definition: Turn 'version' into an xs:integer
  * Highlighting definition files: round version up to next integer
  * Support multi char captures only in {xxx} to avoid regressions
  * Support regular expressions replaces with captures &gt; \9, e.g. I
    (kde#365124)
  * Fix rendering of characters spanning into next line,
    e.g. underlines are no longer cut off with some fonts/font-sizes
    (kde#335079)
  * Fix crash: Make sure the display cursor is valid after text folding
    (kde#367466)
  * KateNormalInputMode needs to rerun SearchBar enter methods
  * try to "fixup" rendering of underlines and stuff like that
    (kde#335079)
  * Show "View Difference" button only, if 'diff' is installed
  * Use non-modal message widget for externally
    modified file notifications (kde#353712)
  * Fix regression: testNormal did only work because of
    test execution at once
  * Split the indent test into separate runs
  * Support "Unfold Toplevel Nodes" action again (kde#335590)
  * Fix crash when showing top or bottom messages multiple times
  * Fix eol setting in mode lines (kde#365705)
  * Highlight .nix files as bash, guess can't hurt (kde#365006)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Breeze Dark: Darken current-line background color for
    better readability (kde#371042)
  * Sorted Dockerfile instructions
  * Breeze (Dark): Make comments a bit lighter for
    better readability (kde#371042)
  * Fix CStyle and C++/boost indenters when automatic
    brackets enabled (kde#370715)
  * Add modeline 'auto-brackets'
  * Fix inserting text after end of file (rare case)
  * Fix invalid xml highlighting files
  * Maxima: Remove hard-coded colors, fix itemData Label
  * Add OBJ, PLY and STL syntax definitions
  * Add syntax highlighting support for Praat
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Prevent Qt warnings about an unsupported clipboard mode on Mac
  * Use syntax definitions from KF5::SyntaxHighlighting
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Remember file type set by user over sessions
  * Reset filetype when opening url
  * Added getter for word-count configuration value
  * vimode_completion unit test failure
  * Consistent conversion from/to cursor to/from coordinates
  * Update file type on save only if path changes
  * EditorConfig support
  * add FindEditorConfig to ktexteditor if that proves to be useful, can be moved to extra-cmake-modules, thought I see its use is rather specialized to ktexteditor
  * Fix: emmetToggleComment action doesn't work
  * Use sentence style capitalization with label texts of edit fields
  * Reverse meaning of :split, :vsplit to match vi and Kate actions.
  * Use C++11 log2() instead of log() / log(2)
  * KateSaveConfigTab: put spacer behind last group on Advanced tab, not inside
  * KateSaveConfigTab: Remove wrong margin around content of Advanced tab
  * Borders config subpage: fix scrollbar visibility combobox being off-placed
  * Upgrade KF5 version to 5.32.0.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1490443200">- Enable editorconfig support</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491652800">- Enable editorconfig support only on TW and Leap &gt;= 42.2</changelog>
<changelog author="wbauer@tmo.at" date="1508846400">- Add Fix-missing-spell-check-bar.patch to fix the spell checking
  panel not appearing properly (boo#992035, kde#359682)</changelog>

</package>
<package pkgid="978c20fd3dab48ea04ac9df48d94e02dd18d30cfb193448bae977829f3935abf" name="ktexteditor-devel-32bit" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * Add syntax highlighting for TaskJuggler and PL/I
  * Make it possible to disable keyword-completion via
    the config interface.
  * Resize the tree when the completion model got reset.
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Syntax h/l for pli: builtin functions added, expandable regions added
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * Better behaviour for "insert braces around" autobrace feature
  * Change option key to enforce new default,
    Newline at End of File = true
  * Remove some suspicious setUpdatesEnabled calls (kde#353088)
  * Delay emitting of verticalScrollPositionChanged until all stuff
    is consistent for folding (kde#342512)
  * Patch updating tag substitution (kde#330634)
  * Only update the palette once for the change event
    belonging to qApp (kde#358526)
  * Append newlines at EOF by default
  * Add NSIS syntax highlighting file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix highlighting of all occurences in ReadOnlyPart
  * Don't iterate over a QString as if it was a QStringList
  * Properly initialize static QMaps
  * Prefer toDisplayString(QUrl::PreferLocalFile)
  * Support surrogate character sending from input method
  * Do not crash on shutdown when text animation is still running
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459080000">- Added 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Revert "Open/Save config page: Use term "Folder" instead
    of "Directory""
  * Open/Save config page: Use term "Folder" instead of "Directory"
  * kateschemaconfig.cpp: use correct filters with open/save dialogs
    (kde#343327)
  * c.xml: use default style for control flow keywords
  * isocpp.xml: use default style "dsControlFlow" for control
    flow keywords
  * c/isocpp: add more C standard types
  * KateRenderer::lineHeight() returns an int
  * printing: use font size from selected printing schema
    (kde#356110)
  * cmake.xml speedup: Use WordDetect instead of RegExpr
  * Change tab with to 4 instead of 8
  * Fix changing the current line number color
  * Fix selecting completion item with the mouse (kde#307052)
  * Add syntax highlighting for gcode
  * Fix the MiniMap selection background painting
  * Fix encoding for gap.xml (use UTF-8)
  * Fix nested comment blocks (kde#358692)
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php
- Drop upstreamed 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Use proper char syntax '"' instead of '\"'
  * doxygen.xml: Use default style dsAnnotation for "Custom Tags"
    as well (less hard-coded colors)
  * Add option to show the counter of words
  * Improved foreground color contrast for search &amp; replace
    highlightings
  * Fix crash when closing Kate through dbus while the print
    dialog is open (kde##356813)
  * Cursor::isValid(): add note about isValidTextPosition()
  * Add API {Cursor, Range}::{toString, static fromString}
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Fix default encoding to UTF-8 (kde#62604)
  * Fix color configurability of default style "Error"
  * Search &amp; Replace: Fix replace background color (regression
    introduced in v5.22) (kde#63441)
  * New color scheme "Breeze Dark", see https://kate-editor.org/?post=3745
  * KateUndoManager::setUndoRedoCursorOfLastGroup(): pass Cursor
    as const reference
  * sql-postgresql.xml improve syntax highlighting by
    ignoring multiline function bodies
  * Add syntax highlighting for Elixir and Kotlin
  * VHDL syntax highlighting in ktexteditor: add support for
    functions inside architecture statements
  * vimode: Don't crash when given a range for a nonexistent
    command (kde#60418)
  * Properly remove composed characters when using Indic locales
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * Show Scrollbar Text Preview after a delay of 250ms
  * Hide preview and stuff on view content scrolling
  * Set parent + toolview, I think this is needed to avoid task
    switcher entry in Win10
  * Remove "KDE-Standard" from encoding box
  * Folding preview on per default
  * Avoid dashed underline for preview &amp; avoid poisoning of
    line layout cache
  * Always enable "Show preview of folded text" option
  * TextPreview: Adjust the grooveRect-height when
    scrollPastEnd is enabled
  * Scrollbar preview: use groove rect if scrollbar does
    not use full height
  * Add KTE::MovingRange::numberOfLines() just like KTE::Range has
  * Code folding preview: set popup height so that
    all hidden lines fit
  * Add option to disable preview of folded text
  * Add modeline 'folding-preview' of type bool
  * View ConfigInterface: support 'folding-preview' of type bool
  * Add bool KateViewConfig::foldingPreview() and
    setFoldingPreview(bool)
  * Feature: Show text preview when hovering over folded code block
  * KateTextPreview: add setShowFoldedLines() and showFoldedLines()
  * Add modelines 'scrollbar-minimap' [bool], and
    'scrollbar-preview' [bool]
  * Enable mini-map scrollbar by default
  * New feature: Show text preview when hovering over the scrollbar
  * KateUndoGroup::editEnd(): pass KTE::Range by const ref
  * Fix vim-mode shortcut handling,
    after behaviour changes in Qt 5.5 (kde#353332)
  * Autobrace: don't insert ' character in text
  * ConfigInterface: add scrollbar-minimap config key to
    enable/disable scrollbar mini map
  * Fix KTE::View::cursorToCoordinate() when top message widget
    is visible
  * Refactoring of the Emulated Command Bar
  * Fix drawing artifacts when scrolling while notifications
    are visible (kde#363220)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Do not ask for overwriting a file twice with native dialogs
  * Added FASTQ syntax
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Remove accel clash (kde#363738)
  * Fix email address highlighting in doxygen (kde#363186)
  * Detect some more json files, like our own projects ;)
  * Improve mime-type detection (kde#357902)
  * Bug 363280 - highlighting: c++: #if 1 #endif #if defined (A) aaa
    [#]elif defined (B) bbb #endif (kde#363280)
  * Bug 351496 - Python folding is not working during initial typing
    (kde#351496)
  * Bug 365171 - Python syntax highlighting: not working correctly
    for escape sequences (kde#365171)
  * Bug 344276 - php nowdoc not folded correctly (kde#344276)
  * Bug 359613 - Some CSS3 properties are not supported in
    syntax highlight (kde#359613)
  * Bug 367821 - wineHQ syntax: The section in a reg file isn't
    highlighted correctly (kde#367821)
  * Improve swap file handling if swap directory specified
  * Fix crash when reloading documents with auto-wrapped line due
    to line length limit (kde#366493)
  * Fix constant crashes related to the vi command bar
    (kde#367786)
  * Fix: Line numbers in printed documents now starts at 1
    (kde#366579)
  * Backup Remote Files: Treat mounted files also as remote files
  * Cleanup logic for searchbar creation
  * Add highlighting for Magma
  * Allows only one level of recursion
  * Fix broken swap-file on windows
  * Patch: add bitbake support for syntax highlighting engine
  * Autobrace: look at spellcheck attribute where the character
    was entered (kde#367539)
  * Highlight QMAKE_CFLAGS
  * Don't pop out of the main context
  * Add some executable names that are commonly used
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * XML files: remove hard-coded color for values
  * XML: Remove hard-coded color for values
  * XML Schema Definition: Turn 'version' into an xs:integer
  * Highlighting definition files: round version up to next integer
  * Support multi char captures only in {xxx} to avoid regressions
  * Support regular expressions replaces with captures &gt; \9, e.g. I
    (kde#365124)
  * Fix rendering of characters spanning into next line,
    e.g. underlines are no longer cut off with some fonts/font-sizes
    (kde#335079)
  * Fix crash: Make sure the display cursor is valid after text folding
    (kde#367466)
  * KateNormalInputMode needs to rerun SearchBar enter methods
  * try to "fixup" rendering of underlines and stuff like that
    (kde#335079)
  * Show "View Difference" button only, if 'diff' is installed
  * Use non-modal message widget for externally
    modified file notifications (kde#353712)
  * Fix regression: testNormal did only work because of
    test execution at once
  * Split the indent test into separate runs
  * Support "Unfold Toplevel Nodes" action again (kde#335590)
  * Fix crash when showing top or bottom messages multiple times
  * Fix eol setting in mode lines (kde#365705)
  * Highlight .nix files as bash, guess can't hurt (kde#365006)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Breeze Dark: Darken current-line background color for
    better readability (kde#371042)
  * Sorted Dockerfile instructions
  * Breeze (Dark): Make comments a bit lighter for
    better readability (kde#371042)
  * Fix CStyle and C++/boost indenters when automatic
    brackets enabled (kde#370715)
  * Add modeline 'auto-brackets'
  * Fix inserting text after end of file (rare case)
  * Fix invalid xml highlighting files
  * Maxima: Remove hard-coded colors, fix itemData Label
  * Add OBJ, PLY and STL syntax definitions
  * Add syntax highlighting support for Praat
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Prevent Qt warnings about an unsupported clipboard mode on Mac
  * Use syntax definitions from KF5::SyntaxHighlighting
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Remember file type set by user over sessions
  * Reset filetype when opening url
  * Added getter for word-count configuration value
  * vimode_completion unit test failure
  * Consistent conversion from/to cursor to/from coordinates
  * Update file type on save only if path changes
  * EditorConfig support
  * add FindEditorConfig to ktexteditor if that proves to be useful, can be moved to extra-cmake-modules, thought I see its use is rather specialized to ktexteditor
  * Fix: emmetToggleComment action doesn't work
  * Use sentence style capitalization with label texts of edit fields
  * Reverse meaning of :split, :vsplit to match vi and Kate actions.
  * Use C++11 log2() instead of log() / log(2)
  * KateSaveConfigTab: put spacer behind last group on Advanced tab, not inside
  * KateSaveConfigTab: Remove wrong margin around content of Advanced tab
  * Borders config subpage: fix scrollbar visibility combobox being off-placed
  * Upgrade KF5 version to 5.32.0.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1490443200">- Enable editorconfig support</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491652800">- Enable editorconfig support only on TW and Leap &gt;= 42.2</changelog>
<changelog author="wbauer@tmo.at" date="1508846400">- Add Fix-missing-spell-check-bar.patch to fix the spell checking
  panel not appearing properly (boo#992035, kde#359682)</changelog>

</package>
<package pkgid="3577dceb13a887ef7ffb94ff72eb45c041b84486dd6abc7c7f7f111ca179020c" name="ktexteditor-lang" arch="noarch">
    <version epoch="0" ver="5.32.0" rel="3.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * Add syntax highlighting for TaskJuggler and PL/I
  * Make it possible to disable keyword-completion via
    the config interface.
  * Resize the tree when the completion model got reset.
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Syntax h/l for pli: builtin functions added, expandable regions added
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * Better behaviour for "insert braces around" autobrace feature
  * Change option key to enforce new default,
    Newline at End of File = true
  * Remove some suspicious setUpdatesEnabled calls (kde#353088)
  * Delay emitting of verticalScrollPositionChanged until all stuff
    is consistent for folding (kde#342512)
  * Patch updating tag substitution (kde#330634)
  * Only update the palette once for the change event
    belonging to qApp (kde#358526)
  * Append newlines at EOF by default
  * Add NSIS syntax highlighting file
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix highlighting of all occurences in ReadOnlyPart
  * Don't iterate over a QString as if it was a QStringList
  * Properly initialize static QMaps
  * Prefer toDisplayString(QUrl::PreferLocalFile)
  * Support surrogate character sending from input method
  * Do not crash on shutdown when text animation is still running
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459080000">- Added 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Revert "Open/Save config page: Use term "Folder" instead
    of "Directory""
  * Open/Save config page: Use term "Folder" instead of "Directory"
  * kateschemaconfig.cpp: use correct filters with open/save dialogs
    (kde#343327)
  * c.xml: use default style for control flow keywords
  * isocpp.xml: use default style "dsControlFlow" for control
    flow keywords
  * c/isocpp: add more C standard types
  * KateRenderer::lineHeight() returns an int
  * printing: use font size from selected printing schema
    (kde#356110)
  * cmake.xml speedup: Use WordDetect instead of RegExpr
  * Change tab with to 4 instead of 8
  * Fix changing the current line number color
  * Fix selecting completion item with the mouse (kde#307052)
  * Add syntax highlighting for gcode
  * Fix the MiniMap selection background painting
  * Fix encoding for gap.xml (use UTF-8)
  * Fix nested comment blocks (kde#358692)
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php
- Drop upstreamed 0001-Fix-Clazy-fix-mistake-that-broke-selection-handling-.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Use proper char syntax '"' instead of '\"'
  * doxygen.xml: Use default style dsAnnotation for "Custom Tags"
    as well (less hard-coded colors)
  * Add option to show the counter of words
  * Improved foreground color contrast for search &amp; replace
    highlightings
  * Fix crash when closing Kate through dbus while the print
    dialog is open (kde##356813)
  * Cursor::isValid(): add note about isValidTextPosition()
  * Add API {Cursor, Range}::{toString, static fromString}
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Fix default encoding to UTF-8 (kde#62604)
  * Fix color configurability of default style "Error"
  * Search &amp; Replace: Fix replace background color (regression
    introduced in v5.22) (kde#63441)
  * New color scheme "Breeze Dark", see https://kate-editor.org/?post=3745
  * KateUndoManager::setUndoRedoCursorOfLastGroup(): pass Cursor
    as const reference
  * sql-postgresql.xml improve syntax highlighting by
    ignoring multiline function bodies
  * Add syntax highlighting for Elixir and Kotlin
  * VHDL syntax highlighting in ktexteditor: add support for
    functions inside architecture statements
  * vimode: Don't crash when given a range for a nonexistent
    command (kde#60418)
  * Properly remove composed characters when using Indic locales
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * Show Scrollbar Text Preview after a delay of 250ms
  * Hide preview and stuff on view content scrolling
  * Set parent + toolview, I think this is needed to avoid task
    switcher entry in Win10
  * Remove "KDE-Standard" from encoding box
  * Folding preview on per default
  * Avoid dashed underline for preview &amp; avoid poisoning of
    line layout cache
  * Always enable "Show preview of folded text" option
  * TextPreview: Adjust the grooveRect-height when
    scrollPastEnd is enabled
  * Scrollbar preview: use groove rect if scrollbar does
    not use full height
  * Add KTE::MovingRange::numberOfLines() just like KTE::Range has
  * Code folding preview: set popup height so that
    all hidden lines fit
  * Add option to disable preview of folded text
  * Add modeline 'folding-preview' of type bool
  * View ConfigInterface: support 'folding-preview' of type bool
  * Add bool KateViewConfig::foldingPreview() and
    setFoldingPreview(bool)
  * Feature: Show text preview when hovering over folded code block
  * KateTextPreview: add setShowFoldedLines() and showFoldedLines()
  * Add modelines 'scrollbar-minimap' [bool], and
    'scrollbar-preview' [bool]
  * Enable mini-map scrollbar by default
  * New feature: Show text preview when hovering over the scrollbar
  * KateUndoGroup::editEnd(): pass KTE::Range by const ref
  * Fix vim-mode shortcut handling,
    after behaviour changes in Qt 5.5 (kde#353332)
  * Autobrace: don't insert ' character in text
  * ConfigInterface: add scrollbar-minimap config key to
    enable/disable scrollbar mini map
  * Fix KTE::View::cursorToCoordinate() when top message widget
    is visible
  * Refactoring of the Emulated Command Bar
  * Fix drawing artifacts when scrolling while notifications
    are visible (kde#363220)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Do not ask for overwriting a file twice with native dialogs
  * Added FASTQ syntax
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * Remove accel clash (kde#363738)
  * Fix email address highlighting in doxygen (kde#363186)
  * Detect some more json files, like our own projects ;)
  * Improve mime-type detection (kde#357902)
  * Bug 363280 - highlighting: c++: #if 1 #endif #if defined (A) aaa
    [#]elif defined (B) bbb #endif (kde#363280)
  * Bug 351496 - Python folding is not working during initial typing
    (kde#351496)
  * Bug 365171 - Python syntax highlighting: not working correctly
    for escape sequences (kde#365171)
  * Bug 344276 - php nowdoc not folded correctly (kde#344276)
  * Bug 359613 - Some CSS3 properties are not supported in
    syntax highlight (kde#359613)
  * Bug 367821 - wineHQ syntax: The section in a reg file isn't
    highlighted correctly (kde#367821)
  * Improve swap file handling if swap directory specified
  * Fix crash when reloading documents with auto-wrapped line due
    to line length limit (kde#366493)
  * Fix constant crashes related to the vi command bar
    (kde#367786)
  * Fix: Line numbers in printed documents now starts at 1
    (kde#366579)
  * Backup Remote Files: Treat mounted files also as remote files
  * Cleanup logic for searchbar creation
  * Add highlighting for Magma
  * Allows only one level of recursion
  * Fix broken swap-file on windows
  * Patch: add bitbake support for syntax highlighting engine
  * Autobrace: look at spellcheck attribute where the character
    was entered (kde#367539)
  * Highlight QMAKE_CFLAGS
  * Don't pop out of the main context
  * Add some executable names that are commonly used
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475409600">- Update to 5.27.0
  * XML files: remove hard-coded color for values
  * XML: Remove hard-coded color for values
  * XML Schema Definition: Turn 'version' into an xs:integer
  * Highlighting definition files: round version up to next integer
  * Support multi char captures only in {xxx} to avoid regressions
  * Support regular expressions replaces with captures &gt; \9, e.g. I
    (kde#365124)
  * Fix rendering of characters spanning into next line,
    e.g. underlines are no longer cut off with some fonts/font-sizes
    (kde#335079)
  * Fix crash: Make sure the display cursor is valid after text folding
    (kde#367466)
  * KateNormalInputMode needs to rerun SearchBar enter methods
  * try to "fixup" rendering of underlines and stuff like that
    (kde#335079)
  * Show "View Difference" button only, if 'diff' is installed
  * Use non-modal message widget for externally
    modified file notifications (kde#353712)
  * Fix regression: testNormal did only work because of
    test execution at once
  * Split the indent test into separate runs
  * Support "Unfold Toplevel Nodes" action again (kde#335590)
  * Fix crash when showing top or bottom messages multiple times
  * Fix eol setting in mode lines (kde#365705)
  * Highlight .nix files as bash, guess can't hurt (kde#365006)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Breeze Dark: Darken current-line background color for
    better readability (kde#371042)
  * Sorted Dockerfile instructions
  * Breeze (Dark): Make comments a bit lighter for
    better readability (kde#371042)
  * Fix CStyle and C++/boost indenters when automatic
    brackets enabled (kde#370715)
  * Add modeline 'auto-brackets'
  * Fix inserting text after end of file (rare case)
  * Fix invalid xml highlighting files
  * Maxima: Remove hard-coded colors, fix itemData Label
  * Add OBJ, PLY and STL syntax definitions
  * Add syntax highlighting support for Praat
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * Prevent Qt warnings about an unsupported clipboard mode on Mac
  * Use syntax definitions from KF5::SyntaxHighlighting
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Remember file type set by user over sessions
  * Reset filetype when opening url
  * Added getter for word-count configuration value
  * vimode_completion unit test failure
  * Consistent conversion from/to cursor to/from coordinates
  * Update file type on save only if path changes
  * EditorConfig support
  * add FindEditorConfig to ktexteditor if that proves to be useful, can be moved to extra-cmake-modules, thought I see its use is rather specialized to ktexteditor
  * Fix: emmetToggleComment action doesn't work
  * Use sentence style capitalization with label texts of edit fields
  * Reverse meaning of :split, :vsplit to match vi and Kate actions.
  * Use C++11 log2() instead of log() / log(2)
  * KateSaveConfigTab: put spacer behind last group on Advanced tab, not inside
  * KateSaveConfigTab: Remove wrong margin around content of Advanced tab
  * Borders config subpage: fix scrollbar visibility combobox being off-placed
  * Upgrade KF5 version to 5.32.0.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1490443200">- Enable editorconfig support</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491652800">- Enable editorconfig support only on TW and Leap &gt;= 42.2</changelog>
<changelog author="wbauer@tmo.at" date="1508846400">- Add Fix-missing-spell-check-bar.patch to fix the spell checking
  panel not appearing properly (boo#992035, kde#359682)</changelog>

</package>
<package pkgid="9eb0a0a2ac54bb557b26b7c82215de2280c7fb50decac0dab3737f90fdcd7118" name="ktnef" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1480248000">- Update spec-files to be consistent wiht KA</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="wbauer@tmo.at" date="1482580800">- Recommend akonadi-import-wizard (instead of
  akonadi-import-wizards), that's how the package is called</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Use isEmpty() directly</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="fabian@ritter-vogt.de" date="1491566400">- Remove unnecessary ldconfig calls for ktnef</changelog>
<changelog author="wbauer@tmo.at" date="1491566401">- Unconditionally build with libgpgmepp-devel/libqgpgme-devel,
  gpgmepp5 is no longer supported</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * It was an error to hide maximumattachmentsize feature
  * Minor optimization
  * Fix includes/Minor optimization</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * SearchDialog: improve performance by caching collection full paths.
  * Use QFileInfo::exists(...) static method
  * Migrate some files
  * Use QByteArrayLiteral here
  * Don't allow to edit collection name in this dialogbox
  * USe new signal from indexing agent
  * Minor optimization. If collection id is not remove we don't need to call
  * Use nullptr</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use a mCurrentCollection variable as discussed with david.
  * Clean stylesheet when we select a valid folder
  * Allow to add more file after --attach</changelog>
<changelog author="lbeltrame@kde.org" date="1495195200">- Add 0001-Add-missing-helper_p-include.patch: upstream patch
  to fix building with Qt 5.6</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure that we use plugin when we use sendlater feature
  * Remove old option
  * Add missing helper_p include
  * Fix list when we have empty string
  * Fix create list of emails
  * Fix typo
  * Rename methods
- Dropped upstreamed patches:
  * 0001-Add-missing-helper_p-include.patch</changelog>
<changelog author="wbauer@tmo.at" date="1506340800">- Add delay-filtering.patch to fix some problems with local
  filtering of mails (boo#1054205)</changelog>
<changelog author="wbauer@tmo.at" date="1506600000">- Recommend akonadi-search to make index-related functionality
  work out of the box (boo#1053540, boo#1013687)</changelog>

</package>
<package pkgid="d840e07ce6759b5b764339ece7121b49a6234d432cab3f3f0582cda4c26887b1" name="ktorrent" arch="src">
    <version epoch="0" ver="5.0.1" rel="9.1"/>

<changelog author="mlin@suse.com" date="1331035200">- Update to version 4.2.0, also lists changes what changed in rc1
  * Add new group switcher combobox in toolbar
  * Make kio-magnet optional
  * Improve handing magnet uris in search plugin
  * Fix bug causing kio-magnet to deselect all files
  * Close current scan widget when a new one is started for a torrent
  * Fix syndication plugin not handling relative urls properly
  * Fix magnet uri's not being handled properly in load torrent feature of webinterface
  * Make it possible to check individual files of a torrent
  * Data checks for multiple torrents can now get started at the same time
  * Make links clickable in the status tab comments field
  * Revamp UPnP plugin
  * Fix bug making it possible to add conflicting items to the schedule
  * Make it possible for schedule items to span multiple days
  * Include disk usage of existing files when calculating bytes left after download in FileSelectDlg
  * Disable scripts in GUI, if no interpreter could be found for the script
  * Show shutdown plugin's config dialog when no rules are present and the enable button is pressed
  * Make it possible to wait for several events before activating the shutdown action
  * Fix wrong required diskspace calculation in some rare circumstances
  * Revamp scanfolder plugin
  * Revamp GUI of mediaplayer plugin
  * Make properties extender a dialog
  * Fix bug causing scripts not to be selectable in scripting plugin
  * Show info hash in status tab
  * Improve video streaming support
  * Add Open With option to FileView context menu
  * Fix bug causing views to not get properly restored when the application language changes
  * Check if new trackers have a supported protocol
  * Remove usage of several deprecated KDE3 networking classes
  * Remove obsolete config options of datacheck during upload feature
  * Improve error display of syndication plugin errors
  * Remove multiple views support
  * Relabel Change Tracker button into Switch Tracker to avoid user confusion
  * Revamp IP filter widget
  * Fix scanfolder moving to loaded directory causing a flurry of popups about the torrent already being loaded
  * Only enable the infowidget plugin by default
  * Add force start option
  * Add torrent search bar for view
  * Make it possible to hide uploads, downloads and not queued torrents in the queue manager
  * Merge status and name column into one column and use icons to show the status
  * Highlight in bold and scroll to newly added torrents
  * Show torrent names in remove torrent and data confirmation dialog
  * Enable select new location button when all non excluded files are missing instead of when all files are missing
  * Hide chunkbar when download of stream is complete
  * Suspend/resume queue when middle clicking on tray icon
  * Use dbus to show ktorrent window from plasma applet
  * Fix crash due to dangling pointer
  * Always make already loaded message of a torrent a passive popup
  * Make torrent properties dialog modal
  * Allow i2p addresses as a custom ip in tracker announces
  * Fix bug causing homepage of search plugin not the render properly
- Refresh suse-dht-warning.diff
- Drop out ktorrent-bug287309.patch since its included</changelog>
<changelog author="dmueller@suse.com" date="1334491200">- fix buildrequires (taglib-&gt;libtag)</changelog>
<changelog author="idonmez@suse.com" date="1336392000">- Fix taglib requires for older distros</changelog>
<changelog author="mlin@suse.com" date="1340193600">- Update to version 4.2.1
  * Fix IP filter widget list not getting registered at startup (281245)
  * Fix Queue Manager widget getting the priorities wrong (296536)</changelog>
<changelog author="mlin@suse.com" date="1346846400">- Update to version 4.3.0
  * Change default blocklist url to iblocklist.org (kde#305109)
  * Add support for magnet links in the syndication plugin
  * Add search line to download order dialog
  * Add move top and bottom option to download order dialog (kde#295341)
  * Make sure that move up and move down in the download order dialog
    work with multiple items (kde#295341)
  * Also update file priorities when normal priority file completes
    downloading in download order plugin (kde#296576)
  * Add automatic sorting options to download order plugin (name,
    seasons and episodes, album track number) (kde#295341)
  * Make float comparison factor smaller in ViewModel when checking if
    share ratio has changed (kde#297931)
  * Show torrent count next to group in GroupView (kde#176173)
  * Add new GroupSwitcher widget
  * Add edit group policy button to GroupSwitcher
  * Remove html tooltips from ui files
  * Tracker grouping script now uses the domain name of the tracker
    (kde#227430)
  * Catch SIGINT and SIGTERM and do a clean shutdown (kde#296835)
  * Add bytes left to download column in View (kde#152070)
  * Add new add trackers dialog with url completion (kde#269563)
  * Delete key now also works in the MagnetView (kde#295173)
  * Fix sorting of time left column (kde#298542)
  * Add support for removable storage (kde#286120)
  * Fix typos in several strings (kde#300969, kde#300781, kde#300782)
  * Fix suspended overlay not shown on tray icon when ktorrent is
    started up suspended (kde#301042)
  * Make sure default size of main window, tracker column in tracker
    view and filename column in file view are sensible (kde#300057)
  * Fix crash in syndication plugin (kde#301117)
  * Fix close search tab button not getting disabled when only one is
    left after closing another one (kde#302896)
  * Fix crash when looking up country for IP address (kde#303340)
  * Fix size after download calculation in FileSelectDlg when file
    already exists (kde#304595)
  * Use default browser instead of application associated to test/html
    when clicking on a links in the comments field of the status tab
    (kde#305005)</changelog>
<changelog author="mlin@suse.com" date="1347019200">- give it hard build dependence with libktorrent</changelog>
<changelog author="ctrippe@opensuse.org" date="1351857600">- Install the english handbook only with the lang-package as otherwise
  translations will not be displayed when they are provided by
  bundle-lang-kde-* (bnc#695108)</changelog>
<changelog author="nico.kruber@gmail.com" date="1358510400">- Update to version 4.3.1
  * Fix new custom groups not appearing in add to group submenu
    (kde#307230)
  * Fix crash when right clicking on some locations in the
    GroupView due to 0 pointer (kde#307160)
  * Force KDirWatch to use polling when watching NFS filesystems
    (kde#301381)
  * Fix crash due to bus error in ip filter plugin (kde#307854)
  * First check for missing files then for unmounted storage
    (kde#308638)
  * Use extended selection mode in syndication plugin so ctrl
    key works as expected (kde#308672)
  * Fix crash in GroupViewModel when dragging torrents over
    groups (kde#308733)
  * Sort by total leechers and seeders, if connected seeders and
    leechers is equal (kde#311470)</changelog>
<changelog author="vindex17@outlook.it" date="1392811200">- Added upstream bugfix patch - ipfilter_bugfix.diff:
    Fix gzip not working in ipfilter plugin due to wrong mimetype,
    kde#315239</changelog>
<changelog author="coolo@suse.com" date="1402920000">- remove backup file of mogrify calls</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1422705600">- Add properly-support-x-scheme-handler-magnet-mimetype.patch,
  make ktorrent support magnet mimetype outside KDE4</changelog>
<changelog author="lbeltrame@kde.org" date="1444564800">- Add remove-plasma.diff: Disable building the plasma applet,
  which is totally non functional in Plasma 5 and adds an
  unnecessary dependency on kdebase4-workspace</changelog>
<changelog author="lbeltrame@kde.org" date="1444564801">- Ensure the Plasma applet removal only occurs on Tumbleweed and
  Leap</changelog>
<changelog author="bwiedemann@suse.com" date="1457438400">- Strip png timestamps to fix build-compare</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460808000">- Update to version 5.0
  * Qt5/KF5 port
  * QHttp-based tracker communication was dropped in favour of
    KIO-based one
  * fix issues found by Coverity static analyzer
  * improve naming of few UI items
  * initiate sequential download of media content automatically
    when it is opened from filelist view
- Drop upstream patches
  * ipfilter_bugfix.diff
  * properly-support-x-scheme-handler-magnet-mimetype.patch
- Drop patch no longer needed:
  * remove-plasma.diff
  * icons.tar.bz2</changelog>
<changelog author="lbeltrame@kde.org" date="1467028800">- Add fix-build-with-newer-kconfig.diff: build (backwards-compatible)
  with newer KConfig from frameworks</changelog>
<changelog author="astieger@suse.com" date="1472990400">- KTorrent 5.0.1:
  * Store interface name as a string in cfg
  * Port stats plugin</changelog>
<changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Add fix-crash-when-loading-bandwidth-scheduler-plugin.patch and
  fix-crashes-in-bwscheduler-plugin.patch from upstream to fix
  ktorrent crashing when the bandwidth scheduler plugin is
  activated/used (kde#361863, boo#1040379)</changelog>
<changelog author="wbauer@tmo.at" date="1505304000">- Drop suse-dht-warning.diff, it was broken anyway (boo#1002948)</changelog>

</package>
<package pkgid="f2a4d9a919d5396b2e92dca4d2fac2c97fe84e7963cbb0ca6a28305e3a746ba1" name="ktorrent" arch="x86_64">
    <version epoch="0" ver="5.0.1" rel="9.1"/>

<changelog author="mlin@suse.com" date="1331035200">- Update to version 4.2.0, also lists changes what changed in rc1
  * Add new group switcher combobox in toolbar
  * Make kio-magnet optional
  * Improve handing magnet uris in search plugin
  * Fix bug causing kio-magnet to deselect all files
  * Close current scan widget when a new one is started for a torrent
  * Fix syndication plugin not handling relative urls properly
  * Fix magnet uri's not being handled properly in load torrent feature of webinterface
  * Make it possible to check individual files of a torrent
  * Data checks for multiple torrents can now get started at the same time
  * Make links clickable in the status tab comments field
  * Revamp UPnP plugin
  * Fix bug making it possible to add conflicting items to the schedule
  * Make it possible for schedule items to span multiple days
  * Include disk usage of existing files when calculating bytes left after download in FileSelectDlg
  * Disable scripts in GUI, if no interpreter could be found for the script
  * Show shutdown plugin's config dialog when no rules are present and the enable button is pressed
  * Make it possible to wait for several events before activating the shutdown action
  * Fix wrong required diskspace calculation in some rare circumstances
  * Revamp scanfolder plugin
  * Revamp GUI of mediaplayer plugin
  * Make properties extender a dialog
  * Fix bug causing scripts not to be selectable in scripting plugin
  * Show info hash in status tab
  * Improve video streaming support
  * Add Open With option to FileView context menu
  * Fix bug causing views to not get properly restored when the application language changes
  * Check if new trackers have a supported protocol
  * Remove usage of several deprecated KDE3 networking classes
  * Remove obsolete config options of datacheck during upload feature
  * Improve error display of syndication plugin errors
  * Remove multiple views support
  * Relabel Change Tracker button into Switch Tracker to avoid user confusion
  * Revamp IP filter widget
  * Fix scanfolder moving to loaded directory causing a flurry of popups about the torrent already being loaded
  * Only enable the infowidget plugin by default
  * Add force start option
  * Add torrent search bar for view
  * Make it possible to hide uploads, downloads and not queued torrents in the queue manager
  * Merge status and name column into one column and use icons to show the status
  * Highlight in bold and scroll to newly added torrents
  * Show torrent names in remove torrent and data confirmation dialog
  * Enable select new location button when all non excluded files are missing instead of when all files are missing
  * Hide chunkbar when download of stream is complete
  * Suspend/resume queue when middle clicking on tray icon
  * Use dbus to show ktorrent window from plasma applet
  * Fix crash due to dangling pointer
  * Always make already loaded message of a torrent a passive popup
  * Make torrent properties dialog modal
  * Allow i2p addresses as a custom ip in tracker announces
  * Fix bug causing homepage of search plugin not the render properly
- Refresh suse-dht-warning.diff
- Drop out ktorrent-bug287309.patch since its included</changelog>
<changelog author="dmueller@suse.com" date="1334491200">- fix buildrequires (taglib-&gt;libtag)</changelog>
<changelog author="idonmez@suse.com" date="1336392000">- Fix taglib requires for older distros</changelog>
<changelog author="mlin@suse.com" date="1340193600">- Update to version 4.2.1
  * Fix IP filter widget list not getting registered at startup (281245)
  * Fix Queue Manager widget getting the priorities wrong (296536)</changelog>
<changelog author="mlin@suse.com" date="1346846400">- Update to version 4.3.0
  * Change default blocklist url to iblocklist.org (kde#305109)
  * Add support for magnet links in the syndication plugin
  * Add search line to download order dialog
  * Add move top and bottom option to download order dialog (kde#295341)
  * Make sure that move up and move down in the download order dialog
    work with multiple items (kde#295341)
  * Also update file priorities when normal priority file completes
    downloading in download order plugin (kde#296576)
  * Add automatic sorting options to download order plugin (name,
    seasons and episodes, album track number) (kde#295341)
  * Make float comparison factor smaller in ViewModel when checking if
    share ratio has changed (kde#297931)
  * Show torrent count next to group in GroupView (kde#176173)
  * Add new GroupSwitcher widget
  * Add edit group policy button to GroupSwitcher
  * Remove html tooltips from ui files
  * Tracker grouping script now uses the domain name of the tracker
    (kde#227430)
  * Catch SIGINT and SIGTERM and do a clean shutdown (kde#296835)
  * Add bytes left to download column in View (kde#152070)
  * Add new add trackers dialog with url completion (kde#269563)
  * Delete key now also works in the MagnetView (kde#295173)
  * Fix sorting of time left column (kde#298542)
  * Add support for removable storage (kde#286120)
  * Fix typos in several strings (kde#300969, kde#300781, kde#300782)
  * Fix suspended overlay not shown on tray icon when ktorrent is
    started up suspended (kde#301042)
  * Make sure default size of main window, tracker column in tracker
    view and filename column in file view are sensible (kde#300057)
  * Fix crash in syndication plugin (kde#301117)
  * Fix close search tab button not getting disabled when only one is
    left after closing another one (kde#302896)
  * Fix crash when looking up country for IP address (kde#303340)
  * Fix size after download calculation in FileSelectDlg when file
    already exists (kde#304595)
  * Use default browser instead of application associated to test/html
    when clicking on a links in the comments field of the status tab
    (kde#305005)</changelog>
<changelog author="mlin@suse.com" date="1347019200">- give it hard build dependence with libktorrent</changelog>
<changelog author="ctrippe@opensuse.org" date="1351857600">- Install the english handbook only with the lang-package as otherwise
  translations will not be displayed when they are provided by
  bundle-lang-kde-* (bnc#695108)</changelog>
<changelog author="nico.kruber@gmail.com" date="1358510400">- Update to version 4.3.1
  * Fix new custom groups not appearing in add to group submenu
    (kde#307230)
  * Fix crash when right clicking on some locations in the
    GroupView due to 0 pointer (kde#307160)
  * Force KDirWatch to use polling when watching NFS filesystems
    (kde#301381)
  * Fix crash due to bus error in ip filter plugin (kde#307854)
  * First check for missing files then for unmounted storage
    (kde#308638)
  * Use extended selection mode in syndication plugin so ctrl
    key works as expected (kde#308672)
  * Fix crash in GroupViewModel when dragging torrents over
    groups (kde#308733)
  * Sort by total leechers and seeders, if connected seeders and
    leechers is equal (kde#311470)</changelog>
<changelog author="vindex17@outlook.it" date="1392811200">- Added upstream bugfix patch - ipfilter_bugfix.diff:
    Fix gzip not working in ipfilter plugin due to wrong mimetype,
    kde#315239</changelog>
<changelog author="coolo@suse.com" date="1402920000">- remove backup file of mogrify calls</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1422705600">- Add properly-support-x-scheme-handler-magnet-mimetype.patch,
  make ktorrent support magnet mimetype outside KDE4</changelog>
<changelog author="lbeltrame@kde.org" date="1444564800">- Add remove-plasma.diff: Disable building the plasma applet,
  which is totally non functional in Plasma 5 and adds an
  unnecessary dependency on kdebase4-workspace</changelog>
<changelog author="lbeltrame@kde.org" date="1444564801">- Ensure the Plasma applet removal only occurs on Tumbleweed and
  Leap</changelog>
<changelog author="bwiedemann@suse.com" date="1457438400">- Strip png timestamps to fix build-compare</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460808000">- Update to version 5.0
  * Qt5/KF5 port
  * QHttp-based tracker communication was dropped in favour of
    KIO-based one
  * fix issues found by Coverity static analyzer
  * improve naming of few UI items
  * initiate sequential download of media content automatically
    when it is opened from filelist view
- Drop upstream patches
  * ipfilter_bugfix.diff
  * properly-support-x-scheme-handler-magnet-mimetype.patch
- Drop patch no longer needed:
  * remove-plasma.diff
  * icons.tar.bz2</changelog>
<changelog author="lbeltrame@kde.org" date="1467028800">- Add fix-build-with-newer-kconfig.diff: build (backwards-compatible)
  with newer KConfig from frameworks</changelog>
<changelog author="astieger@suse.com" date="1472990400">- KTorrent 5.0.1:
  * Store interface name as a string in cfg
  * Port stats plugin</changelog>
<changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Add fix-crash-when-loading-bandwidth-scheduler-plugin.patch and
  fix-crashes-in-bwscheduler-plugin.patch from upstream to fix
  ktorrent crashing when the bandwidth scheduler plugin is
  activated/used (kde#361863, boo#1040379)</changelog>
<changelog author="wbauer@tmo.at" date="1505304000">- Drop suse-dht-warning.diff, it was broken anyway (boo#1002948)</changelog>

</package>
<package pkgid="fcd79e620f17708e95ec4ed8282397bea9335c3cef199db20f4afc8b215b4116" name="ktorrent-lang" arch="noarch">
    <version epoch="0" ver="5.0.1" rel="9.1"/>

<changelog author="mlin@suse.com" date="1331035200">- Update to version 4.2.0, also lists changes what changed in rc1
  * Add new group switcher combobox in toolbar
  * Make kio-magnet optional
  * Improve handing magnet uris in search plugin
  * Fix bug causing kio-magnet to deselect all files
  * Close current scan widget when a new one is started for a torrent
  * Fix syndication plugin not handling relative urls properly
  * Fix magnet uri's not being handled properly in load torrent feature of webinterface
  * Make it possible to check individual files of a torrent
  * Data checks for multiple torrents can now get started at the same time
  * Make links clickable in the status tab comments field
  * Revamp UPnP plugin
  * Fix bug making it possible to add conflicting items to the schedule
  * Make it possible for schedule items to span multiple days
  * Include disk usage of existing files when calculating bytes left after download in FileSelectDlg
  * Disable scripts in GUI, if no interpreter could be found for the script
  * Show shutdown plugin's config dialog when no rules are present and the enable button is pressed
  * Make it possible to wait for several events before activating the shutdown action
  * Fix wrong required diskspace calculation in some rare circumstances
  * Revamp scanfolder plugin
  * Revamp GUI of mediaplayer plugin
  * Make properties extender a dialog
  * Fix bug causing scripts not to be selectable in scripting plugin
  * Show info hash in status tab
  * Improve video streaming support
  * Add Open With option to FileView context menu
  * Fix bug causing views to not get properly restored when the application language changes
  * Check if new trackers have a supported protocol
  * Remove usage of several deprecated KDE3 networking classes
  * Remove obsolete config options of datacheck during upload feature
  * Improve error display of syndication plugin errors
  * Remove multiple views support
  * Relabel Change Tracker button into Switch Tracker to avoid user confusion
  * Revamp IP filter widget
  * Fix scanfolder moving to loaded directory causing a flurry of popups about the torrent already being loaded
  * Only enable the infowidget plugin by default
  * Add force start option
  * Add torrent search bar for view
  * Make it possible to hide uploads, downloads and not queued torrents in the queue manager
  * Merge status and name column into one column and use icons to show the status
  * Highlight in bold and scroll to newly added torrents
  * Show torrent names in remove torrent and data confirmation dialog
  * Enable select new location button when all non excluded files are missing instead of when all files are missing
  * Hide chunkbar when download of stream is complete
  * Suspend/resume queue when middle clicking on tray icon
  * Use dbus to show ktorrent window from plasma applet
  * Fix crash due to dangling pointer
  * Always make already loaded message of a torrent a passive popup
  * Make torrent properties dialog modal
  * Allow i2p addresses as a custom ip in tracker announces
  * Fix bug causing homepage of search plugin not the render properly
- Refresh suse-dht-warning.diff
- Drop out ktorrent-bug287309.patch since its included</changelog>
<changelog author="dmueller@suse.com" date="1334491200">- fix buildrequires (taglib-&gt;libtag)</changelog>
<changelog author="idonmez@suse.com" date="1336392000">- Fix taglib requires for older distros</changelog>
<changelog author="mlin@suse.com" date="1340193600">- Update to version 4.2.1
  * Fix IP filter widget list not getting registered at startup (281245)
  * Fix Queue Manager widget getting the priorities wrong (296536)</changelog>
<changelog author="mlin@suse.com" date="1346846400">- Update to version 4.3.0
  * Change default blocklist url to iblocklist.org (kde#305109)
  * Add support for magnet links in the syndication plugin
  * Add search line to download order dialog
  * Add move top and bottom option to download order dialog (kde#295341)
  * Make sure that move up and move down in the download order dialog
    work with multiple items (kde#295341)
  * Also update file priorities when normal priority file completes
    downloading in download order plugin (kde#296576)
  * Add automatic sorting options to download order plugin (name,
    seasons and episodes, album track number) (kde#295341)
  * Make float comparison factor smaller in ViewModel when checking if
    share ratio has changed (kde#297931)
  * Show torrent count next to group in GroupView (kde#176173)
  * Add new GroupSwitcher widget
  * Add edit group policy button to GroupSwitcher
  * Remove html tooltips from ui files
  * Tracker grouping script now uses the domain name of the tracker
    (kde#227430)
  * Catch SIGINT and SIGTERM and do a clean shutdown (kde#296835)
  * Add bytes left to download column in View (kde#152070)
  * Add new add trackers dialog with url completion (kde#269563)
  * Delete key now also works in the MagnetView (kde#295173)
  * Fix sorting of time left column (kde#298542)
  * Add support for removable storage (kde#286120)
  * Fix typos in several strings (kde#300969, kde#300781, kde#300782)
  * Fix suspended overlay not shown on tray icon when ktorrent is
    started up suspended (kde#301042)
  * Make sure default size of main window, tracker column in tracker
    view and filename column in file view are sensible (kde#300057)
  * Fix crash in syndication plugin (kde#301117)
  * Fix close search tab button not getting disabled when only one is
    left after closing another one (kde#302896)
  * Fix crash when looking up country for IP address (kde#303340)
  * Fix size after download calculation in FileSelectDlg when file
    already exists (kde#304595)
  * Use default browser instead of application associated to test/html
    when clicking on a links in the comments field of the status tab
    (kde#305005)</changelog>
<changelog author="mlin@suse.com" date="1347019200">- give it hard build dependence with libktorrent</changelog>
<changelog author="ctrippe@opensuse.org" date="1351857600">- Install the english handbook only with the lang-package as otherwise
  translations will not be displayed when they are provided by
  bundle-lang-kde-* (bnc#695108)</changelog>
<changelog author="nico.kruber@gmail.com" date="1358510400">- Update to version 4.3.1
  * Fix new custom groups not appearing in add to group submenu
    (kde#307230)
  * Fix crash when right clicking on some locations in the
    GroupView due to 0 pointer (kde#307160)
  * Force KDirWatch to use polling when watching NFS filesystems
    (kde#301381)
  * Fix crash due to bus error in ip filter plugin (kde#307854)
  * First check for missing files then for unmounted storage
    (kde#308638)
  * Use extended selection mode in syndication plugin so ctrl
    key works as expected (kde#308672)
  * Fix crash in GroupViewModel when dragging torrents over
    groups (kde#308733)
  * Sort by total leechers and seeders, if connected seeders and
    leechers is equal (kde#311470)</changelog>
<changelog author="vindex17@outlook.it" date="1392811200">- Added upstream bugfix patch - ipfilter_bugfix.diff:
    Fix gzip not working in ipfilter plugin due to wrong mimetype,
    kde#315239</changelog>
<changelog author="coolo@suse.com" date="1402920000">- remove backup file of mogrify calls</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1422705600">- Add properly-support-x-scheme-handler-magnet-mimetype.patch,
  make ktorrent support magnet mimetype outside KDE4</changelog>
<changelog author="lbeltrame@kde.org" date="1444564800">- Add remove-plasma.diff: Disable building the plasma applet,
  which is totally non functional in Plasma 5 and adds an
  unnecessary dependency on kdebase4-workspace</changelog>
<changelog author="lbeltrame@kde.org" date="1444564801">- Ensure the Plasma applet removal only occurs on Tumbleweed and
  Leap</changelog>
<changelog author="bwiedemann@suse.com" date="1457438400">- Strip png timestamps to fix build-compare</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460808000">- Update to version 5.0
  * Qt5/KF5 port
  * QHttp-based tracker communication was dropped in favour of
    KIO-based one
  * fix issues found by Coverity static analyzer
  * improve naming of few UI items
  * initiate sequential download of media content automatically
    when it is opened from filelist view
- Drop upstream patches
  * ipfilter_bugfix.diff
  * properly-support-x-scheme-handler-magnet-mimetype.patch
- Drop patch no longer needed:
  * remove-plasma.diff
  * icons.tar.bz2</changelog>
<changelog author="lbeltrame@kde.org" date="1467028800">- Add fix-build-with-newer-kconfig.diff: build (backwards-compatible)
  with newer KConfig from frameworks</changelog>
<changelog author="astieger@suse.com" date="1472990400">- KTorrent 5.0.1:
  * Store interface name as a string in cfg
  * Port stats plugin</changelog>
<changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="wbauer@tmo.at" date="1495540800">- Add fix-crash-when-loading-bandwidth-scheduler-plugin.patch and
  fix-crashes-in-bwscheduler-plugin.patch from upstream to fix
  ktorrent crashing when the bandwidth scheduler plugin is
  activated/used (kde#361863, boo#1040379)</changelog>
<changelog author="wbauer@tmo.at" date="1505304000">- Drop suse-dht-warning.diff, it was broken anyway (boo#1002948)</changelog>

</package>
<package pkgid="390fd3349f70722b205790daa5833823759b03232b7f8d4c173ee8e812b6b4ad" name="kwave" arch="src">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1480248000">- Update spec-files to be consistent wiht KA</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1503489600">- Fix desktop file categories (boo#1055344)</changelog>

</package>
<package pkgid="dc6531e314b3adfec5e1e13bdb5e45e708ddc6856a31b78d4bddc160bcc60bae" name="kwave" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1480248000">- Update spec-files to be consistent wiht KA</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1503489600">- Fix desktop file categories (boo#1055344)</changelog>

</package>
<package pkgid="278e64a3ef5ee3c4e0a8db39de7fc99478b079bd8535a3eb2937671d94253746" name="kwave-lang" arch="noarch">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1480248000">- Update spec-files to be consistent wiht KA</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * None</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
<changelog author="wbauer@tmo.at" date="1503489600">- Fix desktop file categories (boo#1055344)</changelog>

</package>
<package pkgid="7c196c8b8f231c076f208ca1b27ae817f995fd1d4cf702aa4719d6463157784a" name="lame" arch="src">
    <version epoch="0" ver="3.99.5" rel="2.1"/>

<changelog author="henne@links2linux.de" date="1101556800">- make spec file lib/lib64 clean</changelog>
<changelog author="henne@links2linux.de" date="1141128000">- package missing include dir</changelog>
<changelog author="henne@links2linux.de" date="1166616000">- update to version 3.97
- build against libm for k3b</changelog>
<changelog author="guru@unixtech.be" date="1215950400">- added ldconfig in post and postun
- changed release to 0.pm.1 (instead of 1)
- split off shared library and -devel packages (still Requires by lame for
  backwards compatibility, may change later)
- fixed Group:
- added BuildRequires
- added debuginfo support
- revamped spec file</changelog>
<changelog author="guru@unixtech.be" date="1222171200">- added Authors: in description blocks
- use libsndfile for fileio, as it seems to be the prefered default now
- update to 3.98.2:
  * adds some quality improvements to the generated audio files
  * enables the user to choose fractional variable bitrate qualities
  * upgraded support for libsndfile1 (and, in turn, can use many file formats as input, including FLAC files)
  * includes many bugfixes, including peripheral tools for user convenience</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1243684800">- patch from cvs to fix buffer problems with ffmpeg</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups cvs patch
- removed static library</changelog>
<changelog author="pascal@links2linux.de" date="1267358400">- update to 3.98.3:
  * a very important interaction with the FhG decoder was fixed
  * the hip audio decoding library is used to perform a better job
    when reencoding MP3 files to MP3 files
  * bugs were worked around to improve compatibility with ffmpeg
  * many fixes were made regarding ID3 tags, including correct
    specification of the length of the tracks
- dropped cvs patch, merged upstream</changelog>
<changelog author="pascal@links2linux.de" date="1269691200">- update to 3.98.4:
  * fix for #2973877, a problem regarding the new drain code</changelog>
<changelog author="lnussel@suse.de" date="1276862400">- disable use of gtk in 11.3, was dropped</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1299499200">- add Gentoo patch that fixes reading from stdin
- add rpmlintrc
- split out documentation into subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1321963200">- disable sndfile for IO, causes more issues than anything else (warnings and
  issues in several applications that use lame)
- lame-tgetstr.patch: fix build on openSUSE &gt; 12.1, tput and friends are now in
  libtinfo</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1342526400">- update to 3.99.5: fixed build on 12.2</changelog>
<changelog author="reddwarf@opensuse.org" date="1342699200">- Fix bug reporting link
- BuildRequires nasm only in x86-32 (there is no assembly available
  for other archs)
- Stop BuildRequiring flac-devel, it's not used
- Remove autoreconf call and related BuildRequires and patches
- Remove old compatibility Provides
- Run spec-cleaner
- Removed all patches (unneeded)
- Replace some documentation and let the build system install its
  own</changelog>
<changelog author="obs@botter.cc" date="1381838400">- Fix pkgconfig(gtk+-2.0) for &gt;= 11.4</changelog>
<changelog author="hvogel@opensuse.org" date="1383220800">- Fix the conditional building of gtk1 binaries</changelog>
<changelog author="obs@botter.cc" date="1383307200">- Fix logical issue in hvogel's fix</changelog>
<changelog author="scarabeus@opensuse.org" date="1422964800">- Redux the conditionals for not building gtk1 anywhere anymore</changelog>
<changelog author="olaf@aepfle.de" date="1434801600">- Add patch for SSE
- Add check for invalid input sample rate
- Avoid malformed wav causing floating point exception (integer divide by zero)
- Fix warning on 64 bit machines. Explicitely set variables as unsigned ints.
- Enable functions with SSE instructions to maintain their own properly aligned stack
- Fix decision if sample rate ratio is an integer value or not
- run autoreconf, set GTK_CFLAGS
- Add patch to remove ansi2knr instead of using sed</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Rename %soname to %sover to better reflect its use.
- Replace goals with what the software really does.</changelog>

</package>
<package pkgid="9693ee4f5cb6f9b2f96bae9f8101d22be13ecc41e6f8d92681b337e7d2262e5b" name="lame" arch="x86_64">
    <version epoch="0" ver="3.99.5" rel="2.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1243684800">- patch from cvs to fix buffer problems with ffmpeg</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups cvs patch
- removed static library</changelog>
<changelog author="pascal@links2linux.de" date="1267358400">- update to 3.98.3:
  * a very important interaction with the FhG decoder was fixed
  * the hip audio decoding library is used to perform a better job
    when reencoding MP3 files to MP3 files
  * bugs were worked around to improve compatibility with ffmpeg
  * many fixes were made regarding ID3 tags, including correct
    specification of the length of the tracks
- dropped cvs patch, merged upstream</changelog>
<changelog author="pascal@links2linux.de" date="1269691200">- update to 3.98.4:
  * fix for #2973877, a problem regarding the new drain code</changelog>
<changelog author="lnussel@suse.de" date="1276862400">- disable use of gtk in 11.3, was dropped</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1299499200">- add Gentoo patch that fixes reading from stdin
- add rpmlintrc
- split out documentation into subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1321963200">- disable sndfile for IO, causes more issues than anything else (warnings and
  issues in several applications that use lame)
- lame-tgetstr.patch: fix build on openSUSE &gt; 12.1, tput and friends are now in
  libtinfo</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1342526400">- update to 3.99.5: fixed build on 12.2</changelog>
<changelog author="reddwarf@opensuse.org" date="1342699200">- Fix bug reporting link
- BuildRequires nasm only in x86-32 (there is no assembly available
  for other archs)
- Stop BuildRequiring flac-devel, it's not used
- Remove autoreconf call and related BuildRequires and patches
- Remove old compatibility Provides
- Run spec-cleaner
- Removed all patches (unneeded)
- Replace some documentation and let the build system install its
  own</changelog>
<changelog author="obs@botter.cc" date="1381838400">- Fix pkgconfig(gtk+-2.0) for &gt;= 11.4</changelog>
<changelog author="hvogel@opensuse.org" date="1383220800">- Fix the conditional building of gtk1 binaries</changelog>
<changelog author="obs@botter.cc" date="1383307200">- Fix logical issue in hvogel's fix</changelog>
<changelog author="scarabeus@opensuse.org" date="1422964800">- Redux the conditionals for not building gtk1 anywhere anymore</changelog>
<changelog author="olaf@aepfle.de" date="1434801600">- Add patch for SSE
- Add check for invalid input sample rate
- Avoid malformed wav causing floating point exception (integer divide by zero)
- Fix warning on 64 bit machines. Explicitely set variables as unsigned ints.
- Enable functions with SSE instructions to maintain their own properly aligned stack
- Fix decision if sample rate ratio is an integer value or not
- run autoreconf, set GTK_CFLAGS
- Add patch to remove ansi2knr instead of using sed</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Rename %soname to %sover to better reflect its use.
- Replace goals with what the software really does.</changelog>

</package>
<package pkgid="3896b846459c1050ae4fc8f299ea35df373d3cc86d3718dfef0300f8b4c139b3" name="lame-doc" arch="x86_64">
    <version epoch="0" ver="3.99.5" rel="2.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1243684800">- patch from cvs to fix buffer problems with ffmpeg</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups cvs patch
- removed static library</changelog>
<changelog author="pascal@links2linux.de" date="1267358400">- update to 3.98.3:
  * a very important interaction with the FhG decoder was fixed
  * the hip audio decoding library is used to perform a better job
    when reencoding MP3 files to MP3 files
  * bugs were worked around to improve compatibility with ffmpeg
  * many fixes were made regarding ID3 tags, including correct
    specification of the length of the tracks
- dropped cvs patch, merged upstream</changelog>
<changelog author="pascal@links2linux.de" date="1269691200">- update to 3.98.4:
  * fix for #2973877, a problem regarding the new drain code</changelog>
<changelog author="lnussel@suse.de" date="1276862400">- disable use of gtk in 11.3, was dropped</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1299499200">- add Gentoo patch that fixes reading from stdin
- add rpmlintrc
- split out documentation into subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1321963200">- disable sndfile for IO, causes more issues than anything else (warnings and
  issues in several applications that use lame)
- lame-tgetstr.patch: fix build on openSUSE &gt; 12.1, tput and friends are now in
  libtinfo</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1342526400">- update to 3.99.5: fixed build on 12.2</changelog>
<changelog author="reddwarf@opensuse.org" date="1342699200">- Fix bug reporting link
- BuildRequires nasm only in x86-32 (there is no assembly available
  for other archs)
- Stop BuildRequiring flac-devel, it's not used
- Remove autoreconf call and related BuildRequires and patches
- Remove old compatibility Provides
- Run spec-cleaner
- Removed all patches (unneeded)
- Replace some documentation and let the build system install its
  own</changelog>
<changelog author="obs@botter.cc" date="1381838400">- Fix pkgconfig(gtk+-2.0) for &gt;= 11.4</changelog>
<changelog author="hvogel@opensuse.org" date="1383220800">- Fix the conditional building of gtk1 binaries</changelog>
<changelog author="obs@botter.cc" date="1383307200">- Fix logical issue in hvogel's fix</changelog>
<changelog author="scarabeus@opensuse.org" date="1422964800">- Redux the conditionals for not building gtk1 anywhere anymore</changelog>
<changelog author="olaf@aepfle.de" date="1434801600">- Add patch for SSE
- Add check for invalid input sample rate
- Avoid malformed wav causing floating point exception (integer divide by zero)
- Fix warning on 64 bit machines. Explicitely set variables as unsigned ints.
- Enable functions with SSE instructions to maintain their own properly aligned stack
- Fix decision if sample rate ratio is an integer value or not
- run autoreconf, set GTK_CFLAGS
- Add patch to remove ansi2knr instead of using sed</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Rename %soname to %sover to better reflect its use.
- Replace goals with what the software really does.</changelog>

</package>
<package pkgid="a2eee82a76f8b02b032fdd6bd94fdaf352216e314cd1b549b3284885279fdb75" name="lame-mp3rtp" arch="x86_64">
    <version epoch="0" ver="3.99.5" rel="2.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1243684800">- patch from cvs to fix buffer problems with ffmpeg</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups cvs patch
- removed static library</changelog>
<changelog author="pascal@links2linux.de" date="1267358400">- update to 3.98.3:
  * a very important interaction with the FhG decoder was fixed
  * the hip audio decoding library is used to perform a better job
    when reencoding MP3 files to MP3 files
  * bugs were worked around to improve compatibility with ffmpeg
  * many fixes were made regarding ID3 tags, including correct
    specification of the length of the tracks
- dropped cvs patch, merged upstream</changelog>
<changelog author="pascal@links2linux.de" date="1269691200">- update to 3.98.4:
  * fix for #2973877, a problem regarding the new drain code</changelog>
<changelog author="lnussel@suse.de" date="1276862400">- disable use of gtk in 11.3, was dropped</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1299499200">- add Gentoo patch that fixes reading from stdin
- add rpmlintrc
- split out documentation into subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1321963200">- disable sndfile for IO, causes more issues than anything else (warnings and
  issues in several applications that use lame)
- lame-tgetstr.patch: fix build on openSUSE &gt; 12.1, tput and friends are now in
  libtinfo</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1342526400">- update to 3.99.5: fixed build on 12.2</changelog>
<changelog author="reddwarf@opensuse.org" date="1342699200">- Fix bug reporting link
- BuildRequires nasm only in x86-32 (there is no assembly available
  for other archs)
- Stop BuildRequiring flac-devel, it's not used
- Remove autoreconf call and related BuildRequires and patches
- Remove old compatibility Provides
- Run spec-cleaner
- Removed all patches (unneeded)
- Replace some documentation and let the build system install its
  own</changelog>
<changelog author="obs@botter.cc" date="1381838400">- Fix pkgconfig(gtk+-2.0) for &gt;= 11.4</changelog>
<changelog author="hvogel@opensuse.org" date="1383220800">- Fix the conditional building of gtk1 binaries</changelog>
<changelog author="obs@botter.cc" date="1383307200">- Fix logical issue in hvogel's fix</changelog>
<changelog author="scarabeus@opensuse.org" date="1422964800">- Redux the conditionals for not building gtk1 anywhere anymore</changelog>
<changelog author="olaf@aepfle.de" date="1434801600">- Add patch for SSE
- Add check for invalid input sample rate
- Avoid malformed wav causing floating point exception (integer divide by zero)
- Fix warning on 64 bit machines. Explicitely set variables as unsigned ints.
- Enable functions with SSE instructions to maintain their own properly aligned stack
- Fix decision if sample rate ratio is an integer value or not
- run autoreconf, set GTK_CFLAGS
- Add patch to remove ansi2knr instead of using sed</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Rename %soname to %sover to better reflect its use.
- Replace goals with what the software really does.</changelog>

</package>
<package pkgid="d0f721aa9ad1393b5135fe3121208ef82ba0b8fc10cf4921db363b389c155a7b" name="ldirectord" arch="x86_64">
    <version epoch="0" ver="4.0.1+git.1495055229.643177f1" rel="3.1"/>

<changelog author="kgronlund@suse.com" date="1453118400">- Update to version 3.9.6+git.1452867140.fc8ace0:
  + SAPDatabase: Add Oracle 12 to list of supported databases (bsc#953991)
  + High: clvm: fix issue with only first option of daemon_options being used
  + High: mysql: fix grep failure on MySQL5.6 or higher when checking read_only variable
  + Medium: sg_persist: remove uncalled for ocf_run calls
  + Medium: ocf_shellfuncs: suppress bash specific trace_ra log on dash
  + Medium: ocf-rarun: replace error log messages with calls to ocf_exit_reason
  + Medium: nfsserver: do redhat specific stuff on redhat
  + Medium: iscsi: replace error log messages with calls to ocf_exit_reason
  + Medium: oracle/oralsnr: replace error log messages with calls to ocf_exit_reason
  + Medium: pingd: replace error log messages with calls to ocf_exit_reason
  + Medium: Raid1: replace error log messages with calls to ocf_exit_reason
  + Medium: pgsql: replace error log messages with calls to ocf_exit_reason
  + Medium: exportfs: don't increment fsid for single directory
  + Medium: Filesystem: add overlay as supported filesystem
  + Medium: mysql: When mysql has been already stopped, mysql is finished normally.
  + Low: pgsql: fix to be used valid charcters when the invalid characters is used in replication_slot_name.
  + Low: mysql: fix missing variables
  + Low: mysql: tmpfile is leaking when set the OCF_CHECK_LEVEL to 10
  + Low: nfsserver: prevent error messages on platforms without rpcuser (again)
  + Low: pgsql : fix invalid log message
  + Low: apache-conf: handle parsing includes with values in quotes
  + Low: pgsql: properly show default values in meta-data
  + Low : Changed the check handling of pid to the common function.
  + Low : Changed it that the message which pid file deleted repeated and did not appear
  + Low: pgsql: fix grep failure when using pacemaker 1.1.12
  + LVM: Allow vgck failures if partial
  + LVM: Correct grammar in partial_activation descriptions
  + IPaddr2: Add IPv6 DAD collision detection
  + VirtualDomain: New resource attributes migration_speed and migration_downtime
  + Nagios Resource Agent
  + Fix 90s wait/killing of databases containing the name of the database being killed, and added cleanup code to kill remaining listener process.
  + mysql.sh: wait up to startup_wait seconds before failing if mysqld startup is slow
- Remove patches that have been merged upstream
  - Remove 0001-nfsserver-Add-EXEC_MODE-for-systemd-without-nfs-lock.patch
  - Remove 0002-nfsserver-Use-rpc-statd.service-for-NFS-locking-in-E.patch</changelog>
<changelog author="kgronlund@suse.com" date="1453982400">- Update to version 3.9.7~rc1+git.1453889774.3446b99:
  + Low: ldirectord: Fix unset failcount error (bsc#962795)</changelog>
<changelog author="kgronlund@suse.com" date="1454500800">- Update to version 3.9.7+git.1454497075.e697f43:
  + Medium: nfsserver: fix monitor for systemd
  + galera: force crash recovery if needed during last commit detection
  + galera: prevent recovered nodes from bootstrapping cluster when possible
  + galera: remove bashism
  + Add portal check to open_iscsi_get_session_id()</changelog>
<changelog author="kgronlund@suse.com" date="1455883200">- Update to version 3.9.7+git.1454950092.6f56933:
  + Dev: ocft: include runocft to the tarball</changelog>
<changelog author="kgronlund@suse.com" date="1458561600">- Update to version 3.9.7+git.1458512170.48350a9:
  + High: SAPDatabase: Add support for Oracle 12c (bsc#967380)
  + High: sapdb.sh evaluate parameter DBOSUSER also in start and stop methods (bsc#971914)
  + Low: SAPInstance: Update version support statement (bsc#965872)
  + Low: apache: ensure readable $TESTCONFFILE
  + Added iSER enabled portal support
  + quote vgchange options
  + Added pgagent RA
  + galera: fix monitoring of joining node for long running SST
  + galera: don't bootstrap from a node with no grastate.dat when possible
  + oralsnr: fix status check fail when username is more than 8 characters long</changelog>
<changelog author="kgronlund@suse.com" date="1461672000">- Update to version 3.9.7+git.1461679689.18a78f5:
  + Medium: symlink: Handle missing directories in target (bsc#973054)
  + oracle: "shutdown immediate;" is needed after cleanup to be able to recover from the ORA-01081 error
  + oracle: inform user that monprofile must start with C## for container databases
  + tickle_tcp: Fix "Failed to open raw socket (Invalid argument)" issue</changelog>
<changelog author="kgronlund@suse.com" date="1462276800">- Update to version 3.9.7+git.1461938976.cb7c36a:
  + High: managing "Elastic IP" for EC2 instances
  + High: managing "Secondary Private IP" for EC2 instances
  + Low: VirtualDomain: fix unnecessary error when probing nonexistent domain
  + Low: mysql: Handle non-standard mysql server port
  + Low: Fix protential error for RA:nagios
  + Medium: iSCSILogicalUnit: Fix when using rbd store.
  + Low: iSCSILogicalUnit: Add tgt_bsopts parameter.
  + Low: Don't send Inaccessible real server e-mails in fork=yes mode</changelog>
<changelog author="jengelh@inai.de" date="1463745600">- Remove redundant %clean section. Ensure systemd-tmpfiles is run.</changelog>
<changelog author="kgronlund@suse.com" date="1464609600">- Medium: ldirectord: Remove IPv6 workaround (bsc#977193)
- Medium: CTDB: Use --logging syntax for ctdbd (bsc#981863)
- Add 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
- Add 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1467115200">- exportfs: Add pseudo resource factor (bsc#978680)
- Add 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="tchvatal@suse.com" date="1467288000">- Remove unused conditions from the spec-file as we build only on
  new enough distributions
- Sort all variables with spec-cleaner for better readability
- Enable monitoring subpkg as we now have all the needed dependencies
- Convert to pkgconfig style dependencies where applicable</changelog>
<changelog author="kgronlund@suse.com" date="1470916800">- Use non-libnet version of send_arp for IB support (bsc#985486)</changelog>
<changelog author="kgronlund@suse.com" date="1475755200">- Update to version 3.9.7+git.1475676827.4af1003:
  * High: rabbitmq-cluster: forget stopped rmq nodes with notify=true
  * [rabbitmq-cluster] Backup and restore rabbitmq users during resource restart
  * RabbitMQ: New error code - 69
  * RabbitMQ: Forget node before 2nd joining attempt
  * rabbitmq: Allow automatic cluster recovery before forcing it
  * oracle: fix MONPROFILE to use monprofile parameter when set
  * oracle: fix issue with C## in monprofile (bsc#1005424)
  * oracle: add quotes for monuser and monpassword
  * Medium: pgsql: change stop_escalate parameter as usable value
  * Low: pgsql: adjust stop_escalate time when it is longer than the timeout
  * [galera] Add /etc/default/clustercheck importation
  * Medium: ldirectord: Fix the issue in IPv4/IPv6 mixed environment
  * ldirectord: Do an initial check of all services in when in 'starting' status
  * Low NFS: add more default init scripts to check
  * exportfs: Add pseudo resource factor (bsc#978680)
  * exportfs: Add IPv6 support
  * Low: extend support for AWS elastic ip association
  * Low: Rename ra-dev-guide.txt to ra-dev-guide.asc
  * garbd: Introduces garbd resource-agent
- Drop merged patches:
  * Remove 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
  * Remove 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="kgronlund@suse.com" date="1476792000">- Revert send_arp to libnet version (bsc#985486)
  * For infiniband support in IPaddr2, install ipoibtools</changelog>
<changelog author="kgronlund@suse.com" date="1476792001">- Update to version 3.9.7+git.1475827855.a95ea74:
  * High: nfsserver: Delete the temp file correctly.
  * Low: nfsserver: Prevent unnecessary log output</changelog>
<changelog author="kgronlund@suse.com" date="1478001600">- Update to version 3.9.7+git.1477655995.de4be97:
  * adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142)
  * Medium: docker: Use docker exec for monitor_cmd if supported (bsc#1007867)
  * sg_persist: fix matching of hex node ids
  * sg_persist: do not spill info output to stderr
  * lvm.sh: fix status clustered to check the specified logical volume
  * Delay: set default startdelay lower than start timeout to avoid it timing out before starting with default values
  * Low: Filesystem: Clearer exit reason if mount fails</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 3.9.7+git.1478106349.5ff08d4:
  * tomcat: Add force_systemd parameter to rely on systemd service
  * nfsserver: dont stop rpcbind, as other services might use it
  * ldirectord: a further fix for spurious reminder e-mails
  * Medium: docker: Reduce monitor log spam
  * Medium: mysql-proxy: Fix incorrect conditional reported by shellcheck
  * Medium: garbd: Fix broken probe check
  * Doc: docker: Clarify limitations of monitor_cmd in parameter description</changelog>
<changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
<changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>

</package>
<package pkgid="2c71955218c8e8aaccc135d97d60c4285892e518985f659b22be9aff2e7fd01e" name="ldirectord" arch="x86_64">
    <version epoch="0" ver="4.0.1+git.1495055229.643177f1" rel="6.1"/>

<changelog author="kgronlund@suse.com" date="1453982400">- Update to version 3.9.7~rc1+git.1453889774.3446b99:
  + Low: ldirectord: Fix unset failcount error (bsc#962795)</changelog>
<changelog author="kgronlund@suse.com" date="1454500800">- Update to version 3.9.7+git.1454497075.e697f43:
  + Medium: nfsserver: fix monitor for systemd
  + galera: force crash recovery if needed during last commit detection
  + galera: prevent recovered nodes from bootstrapping cluster when possible
  + galera: remove bashism
  + Add portal check to open_iscsi_get_session_id()</changelog>
<changelog author="kgronlund@suse.com" date="1455883200">- Update to version 3.9.7+git.1454950092.6f56933:
  + Dev: ocft: include runocft to the tarball</changelog>
<changelog author="kgronlund@suse.com" date="1458561600">- Update to version 3.9.7+git.1458512170.48350a9:
  + High: SAPDatabase: Add support for Oracle 12c (bsc#967380)
  + High: sapdb.sh evaluate parameter DBOSUSER also in start and stop methods (bsc#971914)
  + Low: SAPInstance: Update version support statement (bsc#965872)
  + Low: apache: ensure readable $TESTCONFFILE
  + Added iSER enabled portal support
  + quote vgchange options
  + Added pgagent RA
  + galera: fix monitoring of joining node for long running SST
  + galera: don't bootstrap from a node with no grastate.dat when possible
  + oralsnr: fix status check fail when username is more than 8 characters long</changelog>
<changelog author="kgronlund@suse.com" date="1461672000">- Update to version 3.9.7+git.1461679689.18a78f5:
  + Medium: symlink: Handle missing directories in target (bsc#973054)
  + oracle: "shutdown immediate;" is needed after cleanup to be able to recover from the ORA-01081 error
  + oracle: inform user that monprofile must start with C## for container databases
  + tickle_tcp: Fix "Failed to open raw socket (Invalid argument)" issue</changelog>
<changelog author="kgronlund@suse.com" date="1462276800">- Update to version 3.9.7+git.1461938976.cb7c36a:
  + High: managing "Elastic IP" for EC2 instances
  + High: managing "Secondary Private IP" for EC2 instances
  + Low: VirtualDomain: fix unnecessary error when probing nonexistent domain
  + Low: mysql: Handle non-standard mysql server port
  + Low: Fix protential error for RA:nagios
  + Medium: iSCSILogicalUnit: Fix when using rbd store.
  + Low: iSCSILogicalUnit: Add tgt_bsopts parameter.
  + Low: Don't send Inaccessible real server e-mails in fork=yes mode</changelog>
<changelog author="jengelh@inai.de" date="1463745600">- Remove redundant %clean section. Ensure systemd-tmpfiles is run.</changelog>
<changelog author="kgronlund@suse.com" date="1464609600">- Medium: ldirectord: Remove IPv6 workaround (bsc#977193)
- Medium: CTDB: Use --logging syntax for ctdbd (bsc#981863)
- Add 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
- Add 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1467115200">- exportfs: Add pseudo resource factor (bsc#978680)
- Add 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="tchvatal@suse.com" date="1467288000">- Remove unused conditions from the spec-file as we build only on
  new enough distributions
- Sort all variables with spec-cleaner for better readability
- Enable monitoring subpkg as we now have all the needed dependencies
- Convert to pkgconfig style dependencies where applicable</changelog>
<changelog author="kgronlund@suse.com" date="1470916800">- Use non-libnet version of send_arp for IB support (bsc#985486)</changelog>
<changelog author="kgronlund@suse.com" date="1475755200">- Update to version 3.9.7+git.1475676827.4af1003:
  * High: rabbitmq-cluster: forget stopped rmq nodes with notify=true
  * [rabbitmq-cluster] Backup and restore rabbitmq users during resource restart
  * RabbitMQ: New error code - 69
  * RabbitMQ: Forget node before 2nd joining attempt
  * rabbitmq: Allow automatic cluster recovery before forcing it
  * oracle: fix MONPROFILE to use monprofile parameter when set
  * oracle: fix issue with C## in monprofile (bsc#1005424)
  * oracle: add quotes for monuser and monpassword
  * Medium: pgsql: change stop_escalate parameter as usable value
  * Low: pgsql: adjust stop_escalate time when it is longer than the timeout
  * [galera] Add /etc/default/clustercheck importation
  * Medium: ldirectord: Fix the issue in IPv4/IPv6 mixed environment
  * ldirectord: Do an initial check of all services in when in 'starting' status
  * Low NFS: add more default init scripts to check
  * exportfs: Add pseudo resource factor (bsc#978680)
  * exportfs: Add IPv6 support
  * Low: extend support for AWS elastic ip association
  * Low: Rename ra-dev-guide.txt to ra-dev-guide.asc
  * garbd: Introduces garbd resource-agent
- Drop merged patches:
  * Remove 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
  * Remove 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="kgronlund@suse.com" date="1476792000">- Revert send_arp to libnet version (bsc#985486)
  * For infiniband support in IPaddr2, install ipoibtools</changelog>
<changelog author="kgronlund@suse.com" date="1476792001">- Update to version 3.9.7+git.1475827855.a95ea74:
  * High: nfsserver: Delete the temp file correctly.
  * Low: nfsserver: Prevent unnecessary log output</changelog>
<changelog author="kgronlund@suse.com" date="1478001600">- Update to version 3.9.7+git.1477655995.de4be97:
  * adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142)
  * Medium: docker: Use docker exec for monitor_cmd if supported (bsc#1007867)
  * sg_persist: fix matching of hex node ids
  * sg_persist: do not spill info output to stderr
  * lvm.sh: fix status clustered to check the specified logical volume
  * Delay: set default startdelay lower than start timeout to avoid it timing out before starting with default values
  * Low: Filesystem: Clearer exit reason if mount fails</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 3.9.7+git.1478106349.5ff08d4:
  * tomcat: Add force_systemd parameter to rely on systemd service
  * nfsserver: dont stop rpcbind, as other services might use it
  * ldirectord: a further fix for spurious reminder e-mails
  * Medium: docker: Reduce monitor log spam
  * Medium: mysql-proxy: Fix incorrect conditional reported by shellcheck
  * Medium: garbd: Fix broken probe check
  * Doc: docker: Clarify limitations of monitor_cmd in parameter description</changelog>
<changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
<changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
<changelog author="kgronlund@suse.com" date="1504612800">- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Add 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
- Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Add 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
- Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * Add 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
- High: galera: Backport fixes from upstream
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)
  * Add 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch</changelog>

</package>
<package pkgid="7f13925a00a68c90770a553eeac44a4739dea504188a8feb182a83e5bb8ec560" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="de0d665b83e17dddfc52147aa980d8f9896945d6bbe59e057772db51fb2ba54e" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="37f650a1c60006bb42b6546f500f0510ebd0bfc7cf5def5d3d0db4e2f56dbb7d" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="bd13d6821f791da916b9afbbbad3a439d4202cafd9ae21c071ca4c54b4f67e0b" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="a7f44e45953dcd8d11c2254b02f2d3c9098e609654677a2b221f2350c19561ef" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="35f1ca01157ad4194b66df813610a7caa176b6a72f29a0ddcf99b8c2618ad105" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="dc0deb4ebed97d6337e67ccaed568089f3e794589d73746642b93985dc3d11b7" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="650e14164013117d5745e8262d2cddbf87f14684f2d99041a8d733a62b1dfba4" name="libGraphicsMagick++-Q16-12" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="7d2e4329288e308cdce950c6aee72819adc65960b516dfc1022b918c2c225edb" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="a8993059a1e0091f7f2e7dcea67c955d592062981f37009ab0b6c775e7dfc5b4" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="10d49aa927b91dc4fbb805b065e25d5d421dcd9d2d1be4af649e138ca6db2e68" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="060175fcbcf160dba35ecc2d9809a7ca89de8edf385b8a50412c8a98c782b6b0" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="1808f84ae41e5a49b190e9de001b148eeda04716970cfc9f551955a997f7c17e" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="5c0bf4039f74a0204926f8b98c7f27c55c6cdf945985b1ab5ad9a34b37a89d79" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="16befe5673695a719e8ad4e8a2fb8d2b3735e1c3396077e5ee51dcc2763c6e43" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="7c8a5ccb3946409fd290abf7053ae6edae3ead6d389538ed9f493399ccb051c7" name="libGraphicsMagick++-devel" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="8f221e36372771f40194354cbdb65c61dbaeac449dd75a1540fcdbb670ca2501" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="ee6aef902a5259471517bfd400d9afc4fd3f8953d4ef707fd6fe73289643ff69" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="ddce343661c19f4ba68fffb74a5174708c92643f127a0413a37b841294c59651" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="a7a35c3cb8e88b4860a69ab8f6141794a58eb34f26210f1a8515e0c9d0c44282" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="0f72445a9b85ea3b1946d3d6c74aa643908ada8f671ee1301fbb3a6c1883ce00" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="86ac736eecf3d75959e3440dd524d088f689b73799461d52e875a9745b1d375a" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="a0e1b1bf0379cf5b5548f79ec3a0e88af86daa341044a98e7f0da4ea8546058f" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="0f1f3dd06f9f2364da14aad9d347583e2b0edf17dc616772b8b7c43c3cfa6b4a" name="libGraphicsMagick-Q16-3" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="29345a90702ae67d669f2961fb25aff16e005b75cd015e8236ad98e135f399ed" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="eda84fd9362070a26ba3ba591d928bcad658a4dd4e4ebd8226505a607c236e94" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="ec459cf4fa43ef009a9280752894f82729aa63707fa07317ae07aabb48bce9b5" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="8b09eb7845d66de7394bc0e186fcb56d826918f0e158e4b5b3eebba8bacffb9d" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="73ac9337dd8b97de27e51654484c781eb61b1856f6dfa5be28d353f7b3f879a3" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="8e6d30b6275205dce73d1e26814a300baafa19fd13a96d71c8f93c7bbff3aca7" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="fb5287c8fea531c6395fbe897da3fc757447ea127ef7abee19204cf31ffb3768" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="845feb28afe8a513a83b00b3eb460bf260952120ef9832115f1a319302d0af94" name="libGraphicsMagick3-config" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="14f86ee008fac24f90ea0954885d150e22e6e60dcf1c6423dac9df31b712ed81" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="397345e767e8063848c3a814c509172a5ddc68b7aeeef3ceb2a8f44865be29a4" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="3e3454f4aae828ca0d85bcebfb965f817e4e63b4995c953784ae1db4f248d956" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="1e90357cf1c1a6cc328dac592671b797366ddaac1a5e9bd79d87d9677b7e8c38" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="555766f12026a7c397eebafdbb5985885128df57041369c5a03f384cec4c3962" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="eb8e9ade83f48a8320ccdaf0f5256f64777bffe4c8e677859459cbf14fd5f420" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="908abf89121d970d5a316da437a349b93dce851da975ad43c00b8face1710e17" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="871af24b697afe0905dd8c2fbced603990267b3e63c7d41f8e8981cf527c0d63" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="1189d4dc42febc1eac5d36ff71f9861dae92e0e0e5acdaa7d237ce527a97d766" name="libKF5CoreAddons5" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * KAboutData: Allow https:// and other URL schemas in homepage.
    (kde#355508)
  * Repair MimeType property when using kcoreaddons_desktop_to_json()
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Add KAboutData::fromPluginMetaData(const KPluginMetaData &amp;plugin)
  * Add KPluginMetaData::copyrightText(), extraInformation() and
    otherContributors()
  * Add KPluginMetaData::translators() and KAboutPerson::fromJson()
  * Fix use-after-free in desktop file parser
  * Make KPluginMetaData constructible from a json path
  * desktoptojson: make missing service type file an error for the binary
  * Make calling kcoreaddons_add_plugin without SOURCES an error
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix Kdelibs4 config migration for Windows
  * Add API to get Frameworks runtime version info
  * KRandom: Don't use up 16K of /dev/urandom to seed rand()
    (kde#359485)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php
- Use %mime_database_post(un) macros</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Fix kcoreaddons_desktop_to_json() on windows
  * Fix linking to a Threads library
  * Add stubs to allow compilation on Android
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461758400">- Added 0001-Missing-rand-qrand.patch (kde#362161)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Provide a way to disable inotify use in KDirWatch
  * Fix KAboutData::applicationData() to init from current
    Q*Application metadata
  * Make clear that KRandom is not recommended for cryptography purposes
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php
- Drop upstreamed 0001-Missing-rand-qrand.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Print the failing plugin when notifying a cast warning
  * [kshareddatacache] Fix invalid use of &amp; to avoid unaligned reads
  * Kdelibs4ConfigMigrator: skip reparsing if nothing was migrated
  * krandom: Add testcase to catch bug 362161 (failure to auto-seed)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Install known licenses and find them at runtime (regression fix)
    (kde#353939)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475755200">- Added 0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch (CVE-2016-7966)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014400">- Update to 5.27.0
  * Register QPair&lt;QString,QString&gt; as metatype in KJobTrackerInterface
  * Don't convert as url an url which has a double-quote character
    (boo#1002977, CVE-2016-7966)
  * Windows compile fix
  * Fix very old bug when we remove space in url as "foo &lt;&lt;url&gt; &lt;url&gt;&gt;"
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed
  0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Display bad url
  * Load user avatars from AccountsServicePath if it exists
    (kde#370362)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * KTextToHtml: fix bug "[1] added at the end of a hyperlink"
    (kde#343275)
  * KUser: Only search for an avatar if loginName isn't empty
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1484136000">- Add parse-the-desktop-file-2-times.patch: keeping backward
  compatibility is backward</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php
- Drop parse-the-desktop-file-2-times.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6.
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Exclude (6)
  * Move the isDir() outside of the loop, as spotted by Milian.
  * KDirWatch: replace QList&lt;Client *&gt; by std::vector&lt;Client&gt; to save on new/delete.
  * Upgrade KF5 version to 5.32.0.
  * KDirWatch: fix memory leak on destruction.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Add patch to update de translations to the 5.39 level (boo#1053543):
  * update-de-translations.patch</changelog>

</package>
<package pkgid="b13a569d61c33c76d0729f8a7a14d078fe52aa22d34ae4be74aab6dd4c66788b" name="libKF5CoreAddons5-32bit" arch="x86_64">
    <version epoch="0" ver="5.32.0" rel="3.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1449748800">- Update to 5.17.0
  * KAboutData: Allow https:// and other URL schemas in homepage.
    (kde#355508)
  * Repair MimeType property when using kcoreaddons_desktop_to_json()
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.17.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1451736000">- Update to 5.18.0
  * Add KAboutData::fromPluginMetaData(const KPluginMetaData &amp;plugin)
  * Add KPluginMetaData::copyrightText(), extraInformation() and
    otherContributors()
  * Add KPluginMetaData::translators() and KAboutPerson::fromJson()
  * Fix use-after-free in desktop file parser
  * Make KPluginMetaData constructible from a json path
  * desktoptojson: make missing service type file an error for the binary
  * Make calling kcoreaddons_add_plugin without SOURCES an error
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.18.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1454760000">- Update to 5.19.0 (boo#967668)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.19.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1457265600">- Update to 5.20.0 (boo#970856)
  * Fix Kdelibs4 config migration for Windows
  * Add API to get Frameworks runtime version info
  * KRandom: Don't use up 16K of /dev/urandom to seed rand()
    (kde#359485)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.20.0.php
- Use %mime_database_post(un) macros</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1459771200">- Update to 5.21.0 (boo#974793)
  * Fix kcoreaddons_desktop_to_json() on windows
  * Fix linking to a Threads library
  * Add stubs to allow compilation on Android
  * Upgrade Qt version requirement to 5.4.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.21.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461758400">- Added 0001-Missing-rand-qrand.patch (kde#362161)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1462622400">- Update to 5.22.0 (boo#980066)
  * Provide a way to disable inotify use in KDirWatch
  * Fix KAboutData::applicationData() to init from current
    Q*Application metadata
  * Make clear that KRandom is not recommended for cryptography purposes
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.22.0.php
- Drop upstreamed 0001-Missing-rand-qrand.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1465214400">- Update to 5.23.0
  * Print the failing plugin when notifying a cast warning
  * [kshareddatacache] Fix invalid use of &amp; to avoid unaligned reads
  * Kdelibs4ConfigMigrator: skip reparsing if nothing was migrated
  * krandom: Add testcase to catch bug 362161 (failure to auto-seed)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.23.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1467806400">- Update to 5.24.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.24.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1470571200">- Update to 5.25.0
  * Qt &gt;= 5.5 is now required
  * Install known licenses and find them at runtime (regression fix)
    (kde#353939)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.25.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1473163200">- Update to 5.26.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.26.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1475755200">- Added 0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch (CVE-2016-7966)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1476014400">- Update to 5.27.0
  * Register QPair&lt;QString,QString&gt; as metatype in KJobTrackerInterface
  * Don't convert as url an url which has a double-quote character
    (boo#1002977, CVE-2016-7966)
  * Windows compile fix
  * Fix very old bug when we remove space in url as "foo &lt;&lt;url&gt; &lt;url&gt;&gt;"
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.27.0.php
- Drop upstreamed
  0001-Fix-very-old-bug-when-we-remove-space-in-url-as-foo-.patch
  0002-Don-t-convert-as-url-an-url-which-has-a.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1478347200">- Update to 5.28.0
  * Display bad url
  * Load user avatars from AccountsServicePath if it exists
    (kde#370362)
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.28.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * KTextToHtml: fix bug "[1] added at the end of a hyperlink"
    (kde#343275)
  * KUser: Only search for an avatar if loginName isn't empty
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1484136000">- Add parse-the-desktop-file-2-times.patch: keeping backward
  compatibility is backward</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php
- Drop parse-the-desktop-file-2-times.patch</changelog>
<changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Fix compilation with Qt 5.6.
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Exclude (6)
  * Move the isDir() outside of the loop, as spotted by Milian.
  * KDirWatch: replace QList&lt;Client *&gt; by std::vector&lt;Client&gt; to save on new/delete.
  * Upgrade KF5 version to 5.32.0.
  * KDirWatch: fix memory leak on destruction.</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Add patch to update de translations to the 5.39 level (boo#1053543):
  * update-de-translations.patch</changelog>

</package>
<package pkgid="f315ca852e0ed2e710d2ebc5e2a967b9acdd3655758b96c0e5cc60c7d3f2392f" name="libMagick++-6_Q16-3" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="3bc91e9b001ecb7a9a9dd5f9372ebb7b7e65fc75baa8a935a35fbbf3cd490802" name="libMagick++-6_Q16-3" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="b9b44f5600666f32a305349eae4d2dcfd28920a7b53e31359a3c7edb0f62f2b9" name="libMagick++-6_Q16-3" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="4fb58bd13e0d352b2afc43fa572a7d1d23f0dfa466b7ab2e027a973f3cfd5678" name="libMagick++-6_Q16-3-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="9f4f2c7073a3adfc05392ccf62759130c8c22d662cf1a897dfb066071accbac1" name="libMagick++-6_Q16-3-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="a2398bc55053f1e3120798a5c40c632d6f35beaf7bc27af75a4434820761852c" name="libMagick++-6_Q16-3-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="ae1a9e3349389c2101582eb2e0729b61aaefea77a022a67fd65120840ad59ec3" name="libMagick++-devel" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="02f576ac47cdedc3c55dd4af3aa0ff2ee62f114511885492189955dc0855ec0d" name="libMagick++-devel" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="e918047716a59f3cb83f4c9b536166fc4fd0d4a9eb53daba85def36823275441" name="libMagick++-devel" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="cec9cc96bb3129db560013e4b128f47556b6b7cb0ccf74de9934c69b6bd565b0" name="libMagick++-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="5ffaa5e65de00a719e269e53d58e3fb6d1cc66bc2cde43a23c90e4ff253320bd" name="libMagick++-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="625feb0311218fc70df84cb0888320c42d38cb3a7e0d5b5edb4b6d8b353fedb5" name="libMagick++-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="0854e8a525be0e70260ac64ddb92d549f3bb931f9a6152e8a4c1ab69a6aeb6e3" name="libMagickCore-6_Q16-1" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="3ef5277fd1dad7a96237b316b41ffa9bf1456f8d1ec183930a71f67f67e69040" name="libMagickCore-6_Q16-1" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="b60f5edca6d75e0216c193cd1439d569b73de51f88732534b230b013fa6e969f" name="libMagickCore-6_Q16-1" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="e6bfeb4300edfa96c1164be6c29cf01710e467562590c8d89c9cb26a547f28e1" name="libMagickCore-6_Q16-1-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="85f828493d52b0f50ff4021526e9652f7a63a801a8c4f3e7201211ed1149ca53" name="libMagickCore-6_Q16-1-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="465d959664615c8abe75a7280670308a9fde0e5c3a0f8b8d03cf440fb8aecd8b" name="libMagickCore-6_Q16-1-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="643d07b478492cf6db9af2f0ba6fa20d3ad7a64f8775faadb3824673b821edf1" name="libMagickWand-6_Q16-1" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="ed89d4688f45394e23efdb4fb8be1b8a4d30188cd44abda96aa01dd002529cc4" name="libMagickWand-6_Q16-1" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="290ac8ece4fd63bcad52e1380ba73109d47bf392af12289018fa04d7e836f789" name="libMagickWand-6_Q16-1" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="99ab6fe9bf675824bf09ff44e366f8abc573230f3fad26c662ef95cf738a47b3" name="libMagickWand-6_Q16-1-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="a9a46d85507112ddaf8277ed769c2498a4102c08fba08eec63e0ebdcd3bb4a31" name="libMagickWand-6_Q16-1-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="4e247f2e66ad5a346078579c7fa11ef9f847e3558b43335f2859802867b85cb3" name="libMagickWand-6_Q16-1-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="8ce7002edd22af3938812785200ed286019c692fb7c2429453f3b85a0a334c98" name="libOSMesa-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="9b7f1485a5f156e55667825c2e75580f3f39dc1d9195b80b40dc99131a842a0d" name="libOSMesa-devel-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="6ead5e0387fc2367807d69fd9aeca198c61a1e945fcaea43d77d8d1e9d5b825a" name="libOSMesa8" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="10d11c1ece203f94d19dea8d20bac2192e54c16c4a4d816e211c3a52b9dd8f16" name="libOSMesa8-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="6a5b6c4c55060865a9c3ec6d592a8bb6b02e29539c87af5d02f4039aa5e84923" name="libSDL2-2_0-0" arch="x86_64">
    <version epoch="0" ver="2.0.3" rel="14.1"/>

<changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL package</changelog>
<changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Reduce build dependencies
- Optional signature verification in local builds</changelog>
<changelog author="prusnak@opensuse.org" date="1382961600">- add SDL2 provides</changelog>
<changelog author="mailaender@opensuse.org" date="1383825600">- Update to version 2.0.1:
  * Added an API to get common filesystem paths in SDL_filesystem.h:
    SDL_GetBasePath(), SDL_GetPrefPath()
  * Added an API to do optimized YV12 and IYUV texture updates:
    SDL_UpdateYUVTexture()
  * Added an API to get the amount of RAM on the system:
    SDL_GetSystemRAM()
  * Added a macro to perform timestamp comparisons with SDL_GetTicks():
    SDL_TICKS_PASSED()
  * Dramatically improved OpenGL ES 2.0 rendering performance
  * Added OpenGL attribute SDL_GL_FRAMEBUFFER_SRGB_CAPABLE
  * Fixed float audio support with the PulseAudio driver
  * Fixed missing line endpoints in the OpenGL renderer on some drivers
  * X11 symbols are no longer defined to avoid collisions when linking statically</changelog>
<changelog author="mailaender@opensuse.org" date="1394712000">- Update to 2.0.2
  * Added SDL_GL_ResetAttributes() to reset OpenGL attributes to default values
  * Added an API to load a database of game controller mappings from a file:
    SDL_GameControllerAddMappingsFromFile(), SDL_GameControllerAddMappingsFromRW()
  * Added game controller mappings for the PS4 and OUYA controllers
  * Added SDL_GetDefaultAssertionHandler() and SDL_GetAssertionHandler()
  * Added SDL_DetachThread()
  * Added SDL_HasAVX() to determine if the CPU has AVX features
  * Added SDL_vsscanf(), SDL_acos(), and SDL_asin() to the stdlib routines
  * EGL can now create/manage OpenGL and OpenGL ES 1.x/2.x contexts, and share
    them using SDL_GL_SHARE_WITH_CURRENT_CONTEXT
  * Added a field "clicks" to the mouse button event which records whether the event is a single click, double click, etc.
  * The screensaver is now disabled by default, and there is a hint SDL_HINT_VIDEO_ALLOW_SCREENSAVER that can change that behavior.
  * Added a hint SDL_HINT_MOUSE_RELATIVE_MODE_WARP to specify whether mouse relative mode should be emulated using mouse warping.
  * testgl2 does not need to link with libGL anymore
  * Added testgles2 test program to demonstrate working with OpenGL ES 2.0
  * Added controllermap test program to visually map a game controller
  * Fixed fullscreen and focused behavior when receiving NotifyGrab events
  * Added experimental Wayland and Mir support, disabled by default
- Added SDL2-devel provides</changelog>
<changelog author="mailaender@opensuse.org" date="1401105600">- Use pkgconfig everywhere
- Fix the build on SLE using prjconf</changelog>
<changelog author="mailaender@opensuse.org" date="1401105601">- Added missing build dependencies
  * arts
  * dbus
  * udev
  * tslib
- Removed unrecognized options: --disable-video-svga, --disable-video-ps3</changelog>
<changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 2.0.3
  * This is a minor bugfix release to take care of creating an OpenGL
  context on Mac OS X.</changelog>
<changelog author="jengelh@inai.de" date="1418904000">- Remove SDL2 obsoletes (we never had packages of that name).
  Copy current Provides to baselibs.conf.</changelog>
<changelog author="jengelh@inai.de" date="1418990400">- Drop old arts/esound soundserver support.</changelog>
<changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
<changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch.
    Fix CVE-2017-2888, bnc#1062784</changelog>

</package>
<package pkgid="c12107568953644989647554d276f4c5238f5a8f23c3e60990917225d52bd38e" name="libSDL2-2_0-0-32bit" arch="x86_64">
    <version epoch="0" ver="2.0.3" rel="14.1"/>

<changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL package</changelog>
<changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Reduce build dependencies
- Optional signature verification in local builds</changelog>
<changelog author="prusnak@opensuse.org" date="1382961600">- add SDL2 provides</changelog>
<changelog author="mailaender@opensuse.org" date="1383825600">- Update to version 2.0.1:
  * Added an API to get common filesystem paths in SDL_filesystem.h:
    SDL_GetBasePath(), SDL_GetPrefPath()
  * Added an API to do optimized YV12 and IYUV texture updates:
    SDL_UpdateYUVTexture()
  * Added an API to get the amount of RAM on the system:
    SDL_GetSystemRAM()
  * Added a macro to perform timestamp comparisons with SDL_GetTicks():
    SDL_TICKS_PASSED()
  * Dramatically improved OpenGL ES 2.0 rendering performance
  * Added OpenGL attribute SDL_GL_FRAMEBUFFER_SRGB_CAPABLE
  * Fixed float audio support with the PulseAudio driver
  * Fixed missing line endpoints in the OpenGL renderer on some drivers
  * X11 symbols are no longer defined to avoid collisions when linking statically</changelog>
<changelog author="mailaender@opensuse.org" date="1394712000">- Update to 2.0.2
  * Added SDL_GL_ResetAttributes() to reset OpenGL attributes to default values
  * Added an API to load a database of game controller mappings from a file:
    SDL_GameControllerAddMappingsFromFile(), SDL_GameControllerAddMappingsFromRW()
  * Added game controller mappings for the PS4 and OUYA controllers
  * Added SDL_GetDefaultAssertionHandler() and SDL_GetAssertionHandler()
  * Added SDL_DetachThread()
  * Added SDL_HasAVX() to determine if the CPU has AVX features
  * Added SDL_vsscanf(), SDL_acos(), and SDL_asin() to the stdlib routines
  * EGL can now create/manage OpenGL and OpenGL ES 1.x/2.x contexts, and share
    them using SDL_GL_SHARE_WITH_CURRENT_CONTEXT
  * Added a field "clicks" to the mouse button event which records whether the event is a single click, double click, etc.
  * The screensaver is now disabled by default, and there is a hint SDL_HINT_VIDEO_ALLOW_SCREENSAVER that can change that behavior.
  * Added a hint SDL_HINT_MOUSE_RELATIVE_MODE_WARP to specify whether mouse relative mode should be emulated using mouse warping.
  * testgl2 does not need to link with libGL anymore
  * Added testgles2 test program to demonstrate working with OpenGL ES 2.0
  * Added controllermap test program to visually map a game controller
  * Fixed fullscreen and focused behavior when receiving NotifyGrab events
  * Added experimental Wayland and Mir support, disabled by default
- Added SDL2-devel provides</changelog>
<changelog author="mailaender@opensuse.org" date="1401105600">- Use pkgconfig everywhere
- Fix the build on SLE using prjconf</changelog>
<changelog author="mailaender@opensuse.org" date="1401105601">- Added missing build dependencies
  * arts
  * dbus
  * udev
  * tslib
- Removed unrecognized options: --disable-video-svga, --disable-video-ps3</changelog>
<changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 2.0.3
  * This is a minor bugfix release to take care of creating an OpenGL
  context on Mac OS X.</changelog>
<changelog author="jengelh@inai.de" date="1418904000">- Remove SDL2 obsoletes (we never had packages of that name).
  Copy current Provides to baselibs.conf.</changelog>
<changelog author="jengelh@inai.de" date="1418990400">- Drop old arts/esound soundserver support.</changelog>
<changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
<changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch.
    Fix CVE-2017-2888, bnc#1062784</changelog>

</package>
<package pkgid="d16d74f33ab3efce2852426880f5119f120c64731ca7fbaf8fb93d5d48a27570" name="libSDL2-devel" arch="x86_64">
    <version epoch="0" ver="2.0.3" rel="14.1"/>

<changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL package</changelog>
<changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Reduce build dependencies
- Optional signature verification in local builds</changelog>
<changelog author="prusnak@opensuse.org" date="1382961600">- add SDL2 provides</changelog>
<changelog author="mailaender@opensuse.org" date="1383825600">- Update to version 2.0.1:
  * Added an API to get common filesystem paths in SDL_filesystem.h:
    SDL_GetBasePath(), SDL_GetPrefPath()
  * Added an API to do optimized YV12 and IYUV texture updates:
    SDL_UpdateYUVTexture()
  * Added an API to get the amount of RAM on the system:
    SDL_GetSystemRAM()
  * Added a macro to perform timestamp comparisons with SDL_GetTicks():
    SDL_TICKS_PASSED()
  * Dramatically improved OpenGL ES 2.0 rendering performance
  * Added OpenGL attribute SDL_GL_FRAMEBUFFER_SRGB_CAPABLE
  * Fixed float audio support with the PulseAudio driver
  * Fixed missing line endpoints in the OpenGL renderer on some drivers
  * X11 symbols are no longer defined to avoid collisions when linking statically</changelog>
<changelog author="mailaender@opensuse.org" date="1394712000">- Update to 2.0.2
  * Added SDL_GL_ResetAttributes() to reset OpenGL attributes to default values
  * Added an API to load a database of game controller mappings from a file:
    SDL_GameControllerAddMappingsFromFile(), SDL_GameControllerAddMappingsFromRW()
  * Added game controller mappings for the PS4 and OUYA controllers
  * Added SDL_GetDefaultAssertionHandler() and SDL_GetAssertionHandler()
  * Added SDL_DetachThread()
  * Added SDL_HasAVX() to determine if the CPU has AVX features
  * Added SDL_vsscanf(), SDL_acos(), and SDL_asin() to the stdlib routines
  * EGL can now create/manage OpenGL and OpenGL ES 1.x/2.x contexts, and share
    them using SDL_GL_SHARE_WITH_CURRENT_CONTEXT
  * Added a field "clicks" to the mouse button event which records whether the event is a single click, double click, etc.
  * The screensaver is now disabled by default, and there is a hint SDL_HINT_VIDEO_ALLOW_SCREENSAVER that can change that behavior.
  * Added a hint SDL_HINT_MOUSE_RELATIVE_MODE_WARP to specify whether mouse relative mode should be emulated using mouse warping.
  * testgl2 does not need to link with libGL anymore
  * Added testgles2 test program to demonstrate working with OpenGL ES 2.0
  * Added controllermap test program to visually map a game controller
  * Fixed fullscreen and focused behavior when receiving NotifyGrab events
  * Added experimental Wayland and Mir support, disabled by default
- Added SDL2-devel provides</changelog>
<changelog author="mailaender@opensuse.org" date="1401105600">- Use pkgconfig everywhere
- Fix the build on SLE using prjconf</changelog>
<changelog author="mailaender@opensuse.org" date="1401105601">- Added missing build dependencies
  * arts
  * dbus
  * udev
  * tslib
- Removed unrecognized options: --disable-video-svga, --disable-video-ps3</changelog>
<changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 2.0.3
  * This is a minor bugfix release to take care of creating an OpenGL
  context on Mac OS X.</changelog>
<changelog author="jengelh@inai.de" date="1418904000">- Remove SDL2 obsoletes (we never had packages of that name).
  Copy current Provides to baselibs.conf.</changelog>
<changelog author="jengelh@inai.de" date="1418990400">- Drop old arts/esound soundserver support.</changelog>
<changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
<changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch.
    Fix CVE-2017-2888, bnc#1062784</changelog>

</package>
<package pkgid="f7cdfb2f7676f3d55d7ec3d01546d307bae5a1ce19eb93eec6ddfc2d36f2e8e3" name="libSDL2-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.0.3" rel="14.1"/>

<changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL package</changelog>
<changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Reduce build dependencies
- Optional signature verification in local builds</changelog>
<changelog author="prusnak@opensuse.org" date="1382961600">- add SDL2 provides</changelog>
<changelog author="mailaender@opensuse.org" date="1383825600">- Update to version 2.0.1:
  * Added an API to get common filesystem paths in SDL_filesystem.h:
    SDL_GetBasePath(), SDL_GetPrefPath()
  * Added an API to do optimized YV12 and IYUV texture updates:
    SDL_UpdateYUVTexture()
  * Added an API to get the amount of RAM on the system:
    SDL_GetSystemRAM()
  * Added a macro to perform timestamp comparisons with SDL_GetTicks():
    SDL_TICKS_PASSED()
  * Dramatically improved OpenGL ES 2.0 rendering performance
  * Added OpenGL attribute SDL_GL_FRAMEBUFFER_SRGB_CAPABLE
  * Fixed float audio support with the PulseAudio driver
  * Fixed missing line endpoints in the OpenGL renderer on some drivers
  * X11 symbols are no longer defined to avoid collisions when linking statically</changelog>
<changelog author="mailaender@opensuse.org" date="1394712000">- Update to 2.0.2
  * Added SDL_GL_ResetAttributes() to reset OpenGL attributes to default values
  * Added an API to load a database of game controller mappings from a file:
    SDL_GameControllerAddMappingsFromFile(), SDL_GameControllerAddMappingsFromRW()
  * Added game controller mappings for the PS4 and OUYA controllers
  * Added SDL_GetDefaultAssertionHandler() and SDL_GetAssertionHandler()
  * Added SDL_DetachThread()
  * Added SDL_HasAVX() to determine if the CPU has AVX features
  * Added SDL_vsscanf(), SDL_acos(), and SDL_asin() to the stdlib routines
  * EGL can now create/manage OpenGL and OpenGL ES 1.x/2.x contexts, and share
    them using SDL_GL_SHARE_WITH_CURRENT_CONTEXT
  * Added a field "clicks" to the mouse button event which records whether the event is a single click, double click, etc.
  * The screensaver is now disabled by default, and there is a hint SDL_HINT_VIDEO_ALLOW_SCREENSAVER that can change that behavior.
  * Added a hint SDL_HINT_MOUSE_RELATIVE_MODE_WARP to specify whether mouse relative mode should be emulated using mouse warping.
  * testgl2 does not need to link with libGL anymore
  * Added testgles2 test program to demonstrate working with OpenGL ES 2.0
  * Added controllermap test program to visually map a game controller
  * Fixed fullscreen and focused behavior when receiving NotifyGrab events
  * Added experimental Wayland and Mir support, disabled by default
- Added SDL2-devel provides</changelog>
<changelog author="mailaender@opensuse.org" date="1401105600">- Use pkgconfig everywhere
- Fix the build on SLE using prjconf</changelog>
<changelog author="mailaender@opensuse.org" date="1401105601">- Added missing build dependencies
  * arts
  * dbus
  * udev
  * tslib
- Removed unrecognized options: --disable-video-svga, --disable-video-ps3</changelog>
<changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 2.0.3
  * This is a minor bugfix release to take care of creating an OpenGL
  context on Mac OS X.</changelog>
<changelog author="jengelh@inai.de" date="1418904000">- Remove SDL2 obsoletes (we never had packages of that name).
  Copy current Provides to baselibs.conf.</changelog>
<changelog author="jengelh@inai.de" date="1418990400">- Drop old arts/esound soundserver support.</changelog>
<changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
<changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch.
    Fix CVE-2017-2888, bnc#1062784</changelog>

</package>
<package pkgid="07b2651e80a533cb73cb95a6c464f2d72f2bc70a800202df68dcb6a2ccd8136e" name="libXi" arch="src">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="fab628815bba86ff21e837fe90c2a227f3e4d089aa65f1d35b60849c71a07aa6" name="libXi-devel" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="1fd223bef278ff7fcb16b0101e184ecbd3e5dd884960a11461b2696a56a605c5" name="libXi-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="e426709ca0e06b9a82a88997eae2c786a19fe77f0b5e50e6725a3ca7f9a115c6" name="libXi6" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="1134c2f6a860ea3eadd5d50593a4ae7759fbb63110b58af209a511cee41cd101" name="libXi6-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.5" rel="8.1"/>

<changelog author="sndirsch@suse.de" date="1270209600">- use real version number instead of the one from X.Org</changelog>
<changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.3.1
  A few minor build system cleanups but I've cherry-picked only
  those that didn't require a macros update for this version. The
  requirements are thus the same as for 1.3.0.
  A couple of random other fixes, most notably two display lock
  fixes. The other fix that's quite prominent is the
  initialization of the extension with a server-specific number of
  events. Previously, libXi 1.3 running against a non-XI2 enabled
  server would result in mishandling of events (pending extension
  initialization order).
- update to release 1.3.2
  Brown paper bag release. Just one commit, fixing up a erroneous
  conflict resolution that resulted in an inverted condition for
  the asciidoc/xmlto checks and an error when building man pages.</changelog>
<changelog author="sndirsch@novell.com" date="1288785600">- update to release 1.4.0
  * This version doesn't add new features but has seen numerous
    packaging cleanups and a number of miscellaneous fixes.</changelog>
<changelog author="jengelh@medozas.de" date="1328443200">- Remove apparently unused (Build)Requires on Xau, Xdmcp, xtrans
- Add required runtime dependency on libXext-devel
  (XInput2.h uses libXext-devel:Xge.h)
- Use pkgconfig() symbols to pull in BuildRequires
- Remove redundant tags/sections like %clean
- Parallel build with %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1328788800">- Rename SRPM from libXi6 to libXi (no Obsoletes needed for BRPMs)</changelog>
<changelog author="sndirsch@suse.com" date="1328875200">- added provides/obsoletes for old libXi6-devel package</changelog>
<changelog author="sndirsch@suse.com" date="1328875201">- improved -devel provides/obsoletes for openSUSE 12.2</changelog>
<changelog author="jengelh@medozas.de" date="1329048000">- Update homepage URL and set a minimal package description
  (found one in tarball announcement mails)</changelog>
<changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.6.0:
  + Implement XI 2.2 (which provides multitouch)
  + Various cleanups and bug fixes
- Changes from version 1.5.0:
  + Implement XI 2.1 (which provides smooth scrolling)
  + Various cleanups and bug fixes
  + Man page improvements
- Changes from version 1.4.2:
  + Various cleanups and bug fixes
  + Build configuration improvements
- Changes from version 1.4.1:
  + Important fixes for bugs that cause clients to misbehave.</changelog>
<changelog author="vuntz@opensuse.org" date="1336564800">- Update to version 1.6.1:
  + Major bugs fixed:
  - wrong button and mask copy
  - raw event sourceid is now set
  + Small cleanups and bug fixes.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1362657600">- Update to version 1.7:
  The feature added in this revision is pointer barrier events and releases.
  Pointer barriers themselves are an XFixes 5 feature, XI 2.3 adds two
  disctinct features to barriers:
  + the ability for clients to get notified if pointer movement is restricted
    by a barrier
  + the ability for clients to allow a pointer to move through a barrier
    after it was constrained by the barrier
  For a more verbose explanation of these features please refer to:
  http://who-t.blogspot.com.au/2012/12/whats-new-in-xi-23-pointer-barrier.html</changelog>
<changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
<changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
<changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
<changelog author="sndirsch@suse.com" date="1475668800">- U_Properly-validate-server-responses.patch
  * insufficient validation of data from the X server can cause out
    of boundary memory access or endless loops (Denial of Service).
    (bnc#1002998, CVE-2016-7945, CVE-2016-7946)</changelog>
<changelog author="msrb@suse.com" date="1500638400">- U_SizeClassInfo-can-return-0-even-without-an-error.patch,
  U_XListInputDevices-dont-touch-ndevices-in-case-of-error.patch
  * Do not falsely return error for some devices (e.g. tablets).
    It can also cause crashes in GTK applications. (bnc#1049681)</changelog>

</package>
<package pkgid="850384a81e8a7788e15be9b15dad10dc68e3a7e7e9c8dc024eceb4b8d88619eb" name="libXvMC_nouveau" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="9dfab8d0c3ed2e78ecad5fdf913ea725bcfce7add57772268c629bd2b2553def" name="libXvMC_nouveau-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="31744c00d264e7e6a5b94ad6e4cd767fecf81b4d050efda8130a9dd4ac82a0c6" name="libXvMC_r600" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="a84ea24703982bdfb18e3bb39cf1b66adb9b9409099931255bae61c350119819" name="libXvMC_r600-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="3f6d156903fe6b01f0423e7b3092a897261a73e13c28cc0a33067da346486690" name="libXvnc-devel" arch="x86_64">
    <version epoch="0" ver="1.6.0" rel="21.1"/>

<changelog author="msrb@suse.com" date="1445515200">- U_support_ipv6.patch
  * Bind to both ipv4 and ipv6 addresses. (bnc#951281)</changelog>
<changelog author="msrb@suse.com" date="1459857600">- Update to tigervnc 1.6.0. (fate#319701, fate#319319, bnc#952057)
- N_tigervnc_revert_fltk_1_3_3_requirements.patch
  * Stay compatible with fltk 1.3.2.
- u_xserver118.patch
  * Build with X Server 1.18
- u_tigervnc_update_default_vncxstartup.patch
  * Update default VNC xstartup script.
- u_add_allowoverride_parameter.patch
  * Add option to to specify which parameters can be set from
    inside VNC session. (fate#319319)
- u_build_libXvnc_as_separate_library.patch
  * Allows other applications to use XVNC extension. (fate#319319)
- Remove upstreamed or obsolete patches:
  * U_support_ipv6.patch
  * n_tigervnc_Revert_Attempt_to_handle_Ctrl-key.patch
  * tigervnc-sf3495623.patch
  * u_syslog.patch
  * u_terminate_instead_of_ignoring_restart.patch
  * u_tigervnc-display-SHA-1-fingerprint-of-untrusted-certificate.patch
  * u_tigervnc-dont-send-ascii-control-characters.patch
  * u_tigervnc-prioritize-anon-ecdh.patch
  * u_tigervnc-send-special-keys-directly.patch
  * u_tigervnc-use-default-trust-manager-in-java-viewer-if-custom.patch
  * u_tigervnc-use_preferred_mode.patch
  * u_tigervnc-vncserver-clean-pid-files.patch</changelog>
<changelog author="sndirsch@suse.com" date="1460116800">- buildrequire specific xorg-x11-server-source version (currently
  1.18.3) in order to prevent incomprehensible patch failures</changelog>
<changelog author="msrb@suse.com" date="1460376000">- Remove unnecessary dependency on icewm.</changelog>
<changelog author="msrb@suse.com" date="1461758400">- Add dependency on xorg-x11-fonts-core. (bnc#977019)</changelog>
<changelog author="msrb@suse.com" date="1461844800">- Add u_tigervnc-show-unencrypted-warning.patch (fate#319701)</changelog>
<changelog author="msrb@suse.com" date="1463659200">- Add /etc/pam.d/vnc configuration and add vnc user to shadow
  group. (bnc#980326)</changelog>
<changelog author="msrb@suse.com" date="1465473600">- U_tigervnc_clear_up_zlibinstream_reset_behaviour.patch
  * Fix zlib stream reset in tight encoding. (bnc#963417)
- Marking bnc#964352 (xkbcomp dependency) as fixed.</changelog>
<changelog author="msrb@suse.com" date="1466078400">- Generate VNC key and certificate on first use, not during
  installation. (bnc#982349)</changelog>
<changelog author="msrb@suse.com" date="1484740800">- U_tigervnc-fix-buffer-overflow-in-ModifiablePixelBuffer-fillRect.patch,
  U_tigervnc-prevent-invalid-PixelBuffer-accesses.patch,
  U_tigervnc-check-invalid-RRE-rects.patch
  * Fix buffer overflow in client caused by malicious server.
    (bnc#1019274)</changelog>
<changelog author="msrb@suse.com" date="1486036800">- U_tigervnc_proper_global_init_deinit_of_GnuTLS.patch
  * Prevent crash caused by failed TLS connection. (bnc#1023012)</changelog>
<changelog author="msrb@suse.com" date="1488456000">- Readd index.vnc. (bnc#1026833)</changelog>
<changelog author="msrb@suse.com" date="1490616000">- U_tigervnc-restore-cropping-API-to-maskRect.patch,
  U_tigervnc-crop-cursor-before-calling-maskRect.patch
  * Prevent client disconnection caused by invalid cursor
    manipulation. (bnc#1024929, bnc#1031045)</changelog>
<changelog author="msrb@suse.com" date="1490961600">- U_tigervnc-delete-underlying-ssecurity-in-SSecurityVeNCrypt.patch,
  U_tigervnc-prevent-leak-of-SecurityServer-and-ClientServer.patch
  * Prevent leaks in VNC server. (bnc#bnc#1031886)
- U_tigervnc-fix-crash-from-integer-overflow-in-SMsgReader-readClientCutText.patch
  * Prevent clients crashing VNC server. (bnc#1031877)
- U_tigervnc-fix-checkNoWait-logic-in-SSecurityPlain.patch,
  U_tigervnc-limit-max-username-password-size-in-SSecurityPlain.patch
  * Prevent multiple security issues in security Plain. (bnc#1031879)
- U_tigervnc-prevent-double-free-by-crafted-fences.patch
  * Prevent double free in VNC server. (bnc#1031875)</changelog>
<changelog author="msrb@suse.com" date="1491393600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
<changelog author="msrb@suse.com" date="1491566400">- U_tigervnc-limit-size-of-cursor-accepted-by-client.patch
  * Prevent buffer overflow in VNC client.
    (bnc#1032880)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
<changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
<changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
<changelog author="msrb@suse.com" date="1504785600">- U_tigervnc-fix-race-problem-with-detecting-listening-inetd-sockets.patch
  (bnc#1054300)</changelog>

</package>
<package pkgid="4265af996211abf14c6c54547ae17dbc00842e420be9bd6d5e226d6e6e467a4b" name="libXvnc1" arch="x86_64">
    <version epoch="0" ver="1.6.0" rel="21.1"/>

<changelog author="msrb@suse.com" date="1445515200">- U_support_ipv6.patch
  * Bind to both ipv4 and ipv6 addresses. (bnc#951281)</changelog>
<changelog author="msrb@suse.com" date="1459857600">- Update to tigervnc 1.6.0. (fate#319701, fate#319319, bnc#952057)
- N_tigervnc_revert_fltk_1_3_3_requirements.patch
  * Stay compatible with fltk 1.3.2.
- u_xserver118.patch
  * Build with X Server 1.18
- u_tigervnc_update_default_vncxstartup.patch
  * Update default VNC xstartup script.
- u_add_allowoverride_parameter.patch
  * Add option to to specify which parameters can be set from
    inside VNC session. (fate#319319)
- u_build_libXvnc_as_separate_library.patch
  * Allows other applications to use XVNC extension. (fate#319319)
- Remove upstreamed or obsolete patches:
  * U_support_ipv6.patch
  * n_tigervnc_Revert_Attempt_to_handle_Ctrl-key.patch
  * tigervnc-sf3495623.patch
  * u_syslog.patch
  * u_terminate_instead_of_ignoring_restart.patch
  * u_tigervnc-display-SHA-1-fingerprint-of-untrusted-certificate.patch
  * u_tigervnc-dont-send-ascii-control-characters.patch
  * u_tigervnc-prioritize-anon-ecdh.patch
  * u_tigervnc-send-special-keys-directly.patch
  * u_tigervnc-use-default-trust-manager-in-java-viewer-if-custom.patch
  * u_tigervnc-use_preferred_mode.patch
  * u_tigervnc-vncserver-clean-pid-files.patch</changelog>
<changelog author="sndirsch@suse.com" date="1460116800">- buildrequire specific xorg-x11-server-source version (currently
  1.18.3) in order to prevent incomprehensible patch failures</changelog>
<changelog author="msrb@suse.com" date="1460376000">- Remove unnecessary dependency on icewm.</changelog>
<changelog author="msrb@suse.com" date="1461758400">- Add dependency on xorg-x11-fonts-core. (bnc#977019)</changelog>
<changelog author="msrb@suse.com" date="1461844800">- Add u_tigervnc-show-unencrypted-warning.patch (fate#319701)</changelog>
<changelog author="msrb@suse.com" date="1463659200">- Add /etc/pam.d/vnc configuration and add vnc user to shadow
  group. (bnc#980326)</changelog>
<changelog author="msrb@suse.com" date="1465473600">- U_tigervnc_clear_up_zlibinstream_reset_behaviour.patch
  * Fix zlib stream reset in tight encoding. (bnc#963417)
- Marking bnc#964352 (xkbcomp dependency) as fixed.</changelog>
<changelog author="msrb@suse.com" date="1466078400">- Generate VNC key and certificate on first use, not during
  installation. (bnc#982349)</changelog>
<changelog author="msrb@suse.com" date="1484740800">- U_tigervnc-fix-buffer-overflow-in-ModifiablePixelBuffer-fillRect.patch,
  U_tigervnc-prevent-invalid-PixelBuffer-accesses.patch,
  U_tigervnc-check-invalid-RRE-rects.patch
  * Fix buffer overflow in client caused by malicious server.
    (bnc#1019274)</changelog>
<changelog author="msrb@suse.com" date="1486036800">- U_tigervnc_proper_global_init_deinit_of_GnuTLS.patch
  * Prevent crash caused by failed TLS connection. (bnc#1023012)</changelog>
<changelog author="msrb@suse.com" date="1488456000">- Readd index.vnc. (bnc#1026833)</changelog>
<changelog author="msrb@suse.com" date="1490616000">- U_tigervnc-restore-cropping-API-to-maskRect.patch,
  U_tigervnc-crop-cursor-before-calling-maskRect.patch
  * Prevent client disconnection caused by invalid cursor
    manipulation. (bnc#1024929, bnc#1031045)</changelog>
<changelog author="msrb@suse.com" date="1490961600">- U_tigervnc-delete-underlying-ssecurity-in-SSecurityVeNCrypt.patch,
  U_tigervnc-prevent-leak-of-SecurityServer-and-ClientServer.patch
  * Prevent leaks in VNC server. (bnc#bnc#1031886)
- U_tigervnc-fix-crash-from-integer-overflow-in-SMsgReader-readClientCutText.patch
  * Prevent clients crashing VNC server. (bnc#1031877)
- U_tigervnc-fix-checkNoWait-logic-in-SSecurityPlain.patch,
  U_tigervnc-limit-max-username-password-size-in-SSecurityPlain.patch
  * Prevent multiple security issues in security Plain. (bnc#1031879)
- U_tigervnc-prevent-double-free-by-crafted-fences.patch
  * Prevent double free in VNC server. (bnc#1031875)</changelog>
<changelog author="msrb@suse.com" date="1491393600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
<changelog author="msrb@suse.com" date="1491566400">- U_tigervnc-limit-size-of-cursor-accepted-by-client.patch
  * Prevent buffer overflow in VNC client.
    (bnc#1032880)</changelog>
<changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
<changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
<changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
<changelog author="msrb@suse.com" date="1504785600">- U_tigervnc-fix-race-problem-with-detecting-listening-inetd-sockets.patch
  (bnc#1054300)</changelog>

</package>
<package pkgid="2f1df5d37822fa98dcc69b8e8e714162d80f7aced2f40b5e791a423c0e29c599" name="liba52-0" arch="x86_64">
    <version epoch="0" ver="0.7.5+svn613" rel="3.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
<changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
<changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
<changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
<changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
<changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
<changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
<changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>

</package>
<package pkgid="13f4097291dbae3ff27eafcc310895a067ea4038ecf34a1981d637d577d52b4b" name="liba52-0-32bit" arch="x86_64">
    <version epoch="0" ver="0.7.5+svn613" rel="3.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
<changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
<changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
<changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
<changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
<changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
<changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
<changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>

</package>
<package pkgid="b086b025c2fc2fadbfeb4ad8120b1629734e96d84a0eaff73d5d66749df9b61a" name="liba52-devel" arch="x86_64">
    <version epoch="0" ver="0.7.5+svn613" rel="3.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
<changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
<changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
<changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
<changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
<changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
<changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
<changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>

</package>
<package pkgid="7618d5dfeb61701496e5d40ca2e966d5b052eb1a994fd93f293640be04d95f51" name="libada48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="1104982fa33a82458451ea89fde1bcb501a25738621de3fd700e5ab7d983d6c9" name="libada48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="16d095b378e01740c494f3b18114eea6450ac693e1ca03f8cc7e218a542705d2" name="libada7" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="85e3b6fc8a9c5c21c8bb9f297e0908af27e8b2236c8c5b04213265f55095e015" name="libada7-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="9d6cc9cf58a548e9bd80ae15e135bdddc3505708463bd7d63357297804e35196" name="libapparmor-devel" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="d3653ad11c703fe13cc12136c53eb680529d546fcbb9479593e73483f3df3327" name="libapparmor1" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="546746878c16858cae0cd9823bc05975f167c49930091cbc0b5f61f2b724e1dc" name="libapparmor1-32bit" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="76c0893c20adaa6b7525d9ba2e9f557358d077155090aeac1fd08ede591670da" name="libapr-util1" arch="src">
    <version epoch="0" ver="1.5.3" rel="8.1"/>

<changelog author="jengelh@medozas.de" date="1260878400">- add baselibs for SPARC
- add baselibs.conf as a source</changelog>
<changelog author="idoenmez@novell.com" date="1303992000">- Add libapr-util1-1.3.9-gcc46.patch: fix ldap_set_rebind_proc
  detection with gcc 4.6</changelog>
<changelog author="cfarrell@novell.com" date="1305720000">- license update: Apache-2.0
  Updating to spdx.org syntax</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892800">- Update to aprutil 1.3.11
  * SECURITY: CVE-2010-1623 (cve.mitre.org)
  * SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
  * apr_thread_pool: Fix some potential deadlock situations.  PR 49709.
  * apr_thread_pool_create: Fix pool corruption caused by multithreaded
  use of the pool when multiple initial threads are created.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892801">- run make check
- fix pkgconfig build requires for auto dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306411200">- Update to 1.3.12, single bugfix release
  * ) apr_ldap: Fix crash because of NULL cleanup registered by
  apr_ldap_rebind_init().  [Rainer Jung]</changelog>
<changelog author="draht@suse.de" date="1314878400">- disable the (void)tmp; cast from %patch1.</changelog>
<changelog author="draht@suse.de" date="1316088000">- set -DLDAP_SET_REBIND_PROC_THREE for callback setting in Factory.</changelog>
<changelog author="dmueller@suse.de" date="1318420800">- fix build on Factory</changelog>
<changelog author="dmueller@suse.de" date="1318852800">- disable testsuite on qemu builds</changelog>
<changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="draht@suse.de" date="1327060800">- add Group tag to subpackages</changelog>
<changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
<changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
<changelog author="kstreitova@suse.com" date="1510056000">- add apr-util-1.5.3-CVE-2017-12618.patch for better database/page
  validation to fail cleanly when corrupted [bsc#1064990],
  CVE-2017-12618</changelog>

</package>
<package pkgid="8c009a8bce29a411c4e9ce461dd80777fd4079a77e9e5c34fb97bebca5ad55c9" name="libapr-util1" arch="x86_64">
    <version epoch="0" ver="1.5.3" rel="8.1"/>

<changelog author="jengelh@medozas.de" date="1260878400">- add baselibs for SPARC
- add baselibs.conf as a source</changelog>
<changelog author="idoenmez@novell.com" date="1303992000">- Add libapr-util1-1.3.9-gcc46.patch: fix ldap_set_rebind_proc
  detection with gcc 4.6</changelog>
<changelog author="cfarrell@novell.com" date="1305720000">- license update: Apache-2.0
  Updating to spdx.org syntax</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892800">- Update to aprutil 1.3.11
  * SECURITY: CVE-2010-1623 (cve.mitre.org)
  * SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
  * apr_thread_pool: Fix some potential deadlock situations.  PR 49709.
  * apr_thread_pool_create: Fix pool corruption caused by multithreaded
  use of the pool when multiple initial threads are created.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892801">- run make check
- fix pkgconfig build requires for auto dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306411200">- Update to 1.3.12, single bugfix release
  * ) apr_ldap: Fix crash because of NULL cleanup registered by
  apr_ldap_rebind_init().  [Rainer Jung]</changelog>
<changelog author="draht@suse.de" date="1314878400">- disable the (void)tmp; cast from %patch1.</changelog>
<changelog author="draht@suse.de" date="1316088000">- set -DLDAP_SET_REBIND_PROC_THREE for callback setting in Factory.</changelog>
<changelog author="dmueller@suse.de" date="1318420800">- fix build on Factory</changelog>
<changelog author="dmueller@suse.de" date="1318852800">- disable testsuite on qemu builds</changelog>
<changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="draht@suse.de" date="1327060800">- add Group tag to subpackages</changelog>
<changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
<changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
<changelog author="kstreitova@suse.com" date="1510056000">- add apr-util-1.5.3-CVE-2017-12618.patch for better database/page
  validation to fail cleanly when corrupted [bsc#1064990],
  CVE-2017-12618</changelog>

</package>
<package pkgid="f0a581eeeced56da936c738aee69fcf1a9115827dc9c820a1d944691cdcd2499" name="libapr-util1-dbd-mysql" arch="x86_64">
    <version epoch="0" ver="1.5.3" rel="8.1"/>

<changelog author="jengelh@medozas.de" date="1260878400">- add baselibs for SPARC
- add baselibs.conf as a source</changelog>
<changelog author="idoenmez@novell.com" date="1303992000">- Add libapr-util1-1.3.9-gcc46.patch: fix ldap_set_rebind_proc
  detection with gcc 4.6</changelog>
<changelog author="cfarrell@novell.com" date="1305720000">- license update: Apache-2.0
  Updating to spdx.org syntax</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892800">- Update to aprutil 1.3.11
  * SECURITY: CVE-2010-1623 (cve.mitre.org)
  * SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
  * apr_thread_pool: Fix some potential deadlock situations.  PR 49709.
  * apr_thread_pool_create: Fix pool corruption caused by multithreaded
  use of the pool when multiple initial threads are created.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892801">- run make check
- fix pkgconfig build requires for auto dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306411200">- Update to 1.3.12, single bugfix release
  * ) apr_ldap: Fix crash because of NULL cleanup registered by
  apr_ldap_rebind_init().  [Rainer Jung]</changelog>
<changelog author="draht@suse.de" date="1314878400">- disable the (void)tmp; cast from %patch1.</changelog>
<changelog author="draht@suse.de" date="1316088000">- set -DLDAP_SET_REBIND_PROC_THREE for callback setting in Factory.</changelog>
<changelog author="dmueller@suse.de" date="1318420800">- fix build on Factory</changelog>
<changelog author="dmueller@suse.de" date="1318852800">- disable testsuite on qemu builds</changelog>
<changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="draht@suse.de" date="1327060800">- add Group tag to subpackages</changelog>
<changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
<changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
<changelog author="kstreitova@suse.com" date="1510056000">- add apr-util-1.5.3-CVE-2017-12618.patch for better database/page
  validation to fail cleanly when corrupted [bsc#1064990],
  CVE-2017-12618</changelog>

</package>
<package pkgid="5f8cc55caa06f1444c8e4253a403b806ce11659f521c59acc3a7e7fa76d7f20e" name="libapr-util1-dbd-pgsql" arch="x86_64">
    <version epoch="0" ver="1.5.3" rel="8.1"/>

<changelog author="jengelh@medozas.de" date="1260878400">- add baselibs for SPARC
- add baselibs.conf as a source</changelog>
<changelog author="idoenmez@novell.com" date="1303992000">- Add libapr-util1-1.3.9-gcc46.patch: fix ldap_set_rebind_proc
  detection with gcc 4.6</changelog>
<changelog author="cfarrell@novell.com" date="1305720000">- license update: Apache-2.0
  Updating to spdx.org syntax</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892800">- Update to aprutil 1.3.11
  * SECURITY: CVE-2010-1623 (cve.mitre.org)
  * SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
  * apr_thread_pool: Fix some potential deadlock situations.  PR 49709.
  * apr_thread_pool_create: Fix pool corruption caused by multithreaded
  use of the pool when multiple initial threads are created.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892801">- run make check
- fix pkgconfig build requires for auto dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306411200">- Update to 1.3.12, single bugfix release
  * ) apr_ldap: Fix crash because of NULL cleanup registered by
  apr_ldap_rebind_init().  [Rainer Jung]</changelog>
<changelog author="draht@suse.de" date="1314878400">- disable the (void)tmp; cast from %patch1.</changelog>
<changelog author="draht@suse.de" date="1316088000">- set -DLDAP_SET_REBIND_PROC_THREE for callback setting in Factory.</changelog>
<changelog author="dmueller@suse.de" date="1318420800">- fix build on Factory</changelog>
<changelog author="dmueller@suse.de" date="1318852800">- disable testsuite on qemu builds</changelog>
<changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="draht@suse.de" date="1327060800">- add Group tag to subpackages</changelog>
<changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
<changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
<changelog author="kstreitova@suse.com" date="1510056000">- add apr-util-1.5.3-CVE-2017-12618.patch for better database/page
  validation to fail cleanly when corrupted [bsc#1064990],
  CVE-2017-12618</changelog>

</package>
<package pkgid="f6f420f72dfc5d8b4422efffa4fa29194990518e139e4c9fbbd79b55dc2629d3" name="libapr-util1-dbd-sqlite3" arch="x86_64">
    <version epoch="0" ver="1.5.3" rel="8.1"/>

<changelog author="jengelh@medozas.de" date="1260878400">- add baselibs for SPARC
- add baselibs.conf as a source</changelog>
<changelog author="idoenmez@novell.com" date="1303992000">- Add libapr-util1-1.3.9-gcc46.patch: fix ldap_set_rebind_proc
  detection with gcc 4.6</changelog>
<changelog author="cfarrell@novell.com" date="1305720000">- license update: Apache-2.0
  Updating to spdx.org syntax</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892800">- Update to aprutil 1.3.11
  * SECURITY: CVE-2010-1623 (cve.mitre.org)
  * SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
  * apr_thread_pool: Fix some potential deadlock situations.  PR 49709.
  * apr_thread_pool_create: Fix pool corruption caused by multithreaded
  use of the pool when multiple initial threads are created.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892801">- run make check
- fix pkgconfig build requires for auto dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306411200">- Update to 1.3.12, single bugfix release
  * ) apr_ldap: Fix crash because of NULL cleanup registered by
  apr_ldap_rebind_init().  [Rainer Jung]</changelog>
<changelog author="draht@suse.de" date="1314878400">- disable the (void)tmp; cast from %patch1.</changelog>
<changelog author="draht@suse.de" date="1316088000">- set -DLDAP_SET_REBIND_PROC_THREE for callback setting in Factory.</changelog>
<changelog author="dmueller@suse.de" date="1318420800">- fix build on Factory</changelog>
<changelog author="dmueller@suse.de" date="1318852800">- disable testsuite on qemu builds</changelog>
<changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="draht@suse.de" date="1327060800">- add Group tag to subpackages</changelog>
<changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
<changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
<changelog author="kstreitova@suse.com" date="1510056000">- add apr-util-1.5.3-CVE-2017-12618.patch for better database/page
  validation to fail cleanly when corrupted [bsc#1064990],
  CVE-2017-12618</changelog>

</package>
<package pkgid="51a048befde4da12941189d1e8e3edcd3e2b0db98ad9151c2e9ad1507b9e4d60" name="libapr-util1-devel" arch="x86_64">
    <version epoch="0" ver="1.5.3" rel="8.1"/>

<changelog author="jengelh@medozas.de" date="1260878400">- add baselibs for SPARC
- add baselibs.conf as a source</changelog>
<changelog author="idoenmez@novell.com" date="1303992000">- Add libapr-util1-1.3.9-gcc46.patch: fix ldap_set_rebind_proc
  detection with gcc 4.6</changelog>
<changelog author="cfarrell@novell.com" date="1305720000">- license update: Apache-2.0
  Updating to spdx.org syntax</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892800">- Update to aprutil 1.3.11
  * SECURITY: CVE-2010-1623 (cve.mitre.org)
  * SECURITY: CVE-2009-3560, CVE-2009-3720 (cve.mitre.org)
  * apr_thread_pool: Fix some potential deadlock situations.  PR 49709.
  * apr_thread_pool_create: Fix pool corruption caused by multithreaded
  use of the pool when multiple initial threads are created.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305892801">- run make check
- fix pkgconfig build requires for auto dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306411200">- Update to 1.3.12, single bugfix release
  * ) apr_ldap: Fix crash because of NULL cleanup registered by
  apr_ldap_rebind_init().  [Rainer Jung]</changelog>
<changelog author="draht@suse.de" date="1314878400">- disable the (void)tmp; cast from %patch1.</changelog>
<changelog author="draht@suse.de" date="1316088000">- set -DLDAP_SET_REBIND_PROC_THREE for callback setting in Factory.</changelog>
<changelog author="dmueller@suse.de" date="1318420800">- fix build on Factory</changelog>
<changelog author="dmueller@suse.de" date="1318852800">- disable testsuite on qemu builds</changelog>
<changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="draht@suse.de" date="1327060800">- add Group tag to subpackages</changelog>
<changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
<changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
<changelog author="kstreitova@suse.com" date="1510056000">- add apr-util-1.5.3-CVE-2017-12618.patch for better database/page
  validation to fail cleanly when corrupted [bsc#1064990],
  CVE-2017-12618</changelog>

</package>
<package pkgid="0451300bbed1e76cbea6cfa2ae2abd3e39fc0b7fe6bd4bf117689ae919a5b6d9" name="libasan0" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="444834d5c7ec940f21c53258d713d4e8e2c1ea7d8f3d5b6123a6223c8e315cfc" name="libasan0-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="097e58760b5befbe9d040d7de1765d090b00605ebcd80fdabdbd16d5b2c0ffc0" name="libasan4" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="34dbccd9a0fd2be23a263fa1e78164ddd4f08624a56b33d4726f6c64c4e5012c" name="libasan4-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="966c5ad73b238d4849c26ee3780f01feabb27a29e6e50fd481661e47fc1da66d" name="libatomic1" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="c100233c0dde50773bb86545059fcd8ac1f038831e27f1a1cd5eb9adc7bf4a3c" name="libatomic1-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="5e4eee601b09bcaeccb5666b36df1932f05eb120f89747a7c8c6d9eafcd25633" name="libaudit1" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
<changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
<changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
<changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
<changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>

</package>
<package pkgid="a4dc20b1414972390cd57790a3770e842a6a4e570b02479deadbeb36b02f4011" name="libaudit1-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
<changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
<changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
<changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
<changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>

</package>
<package pkgid="9d95b63d43ddc1f599caa9da1b37b12a1e60c5ed77188925c94c3884d075d0fb" name="libauparse0" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
<changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
<changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
<changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
<changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>

</package>
<package pkgid="a0a5dcb9855ef3d8b6d51ec79c06d96e2ae6aa225f7da0990a07eb286c2d231c" name="libauparse0-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="8.1"/>

<changelog author="aj@suse.de" date="1298289600">- Fix value of oom_score_adj.</changelog>
<changelog author="tonyj@novell.com" date="1303905600">- Update to version 2.1.1, upstream changelog:
  - 2.1.1
  - When ausearch is interpretting, output "as is" if no = is found
  - Correct socket setup in remote logging
  - Adjusted a couple default settings for remote logging and init script
  - Audispd was not marking restarted plugins as active
  - Audisp-remote should keep a capability if local_port &lt; 1024
  - When audispd restarts plugin, send event in its preferred format
  - In audisp-remote, make all I/O asynchronous
  - In audisp-remote, add sigusr1 handler to dump internal state
  - Fix autrace to use correct syscalls on s390 and s390x systems
  - Add shutdown syscall to remote logging teardowns
  - Correct autrace rule for 32 bits systems
  2.1
  - Update auditctl man page for new field on user filter
  - Fix crash in aulast when auid is foreign to the system
  - Code cleanups
  - Add store and forward model to audispd-remote (Mirek Trmac)
  - Free memory on failed startups in audisp-prelude
  - Fix memory leak in aureport
  - Fix parsing state problem in libauparse
  - Improve the robustness of libaudit field encoding functions
  - Update capability tables
  - In auditd, make failure action config checking consistent
  - In auditd, check that NULL is not being passed to safe_exec
  - In audisp-remote, overflow_action wasn't suspending if that action was chosen
  - Update interpretations for virt events
  - Improve remote logging warning and error messages
  - Add interpretations for netfilter events
  2.0.6
  - ausearch/report performance improvements
  - Synchronize all sample syscall rules to use action,list
  - If program name provided to audit_log_acct_message, escape it
  - Fix man page for the audit_encode_nv_string function (#647131)
  - If value is NULL, don't segfault (#647128)
  - Fix simple event parsing to not assume session id can't be last (Peng Haitao)
  - Add support for new mmap audit event type
  - Add ability for audispd syslog plugin to choose facility local0-7 (#593340)
  - Fix autrace to use correct syscalls on i386 systems (Peng Haitao)
  - On startup and reconfig, check for excess logs and unlink them
  - Add a couple missing parser debug messages
  - Fix error output resolving numeric address and update man page
  - Add netfilter event types
  - Fix spelling error in audit.rules man page (#667845)
  - Improve warning in auditctl regarding immutable mode (#654883)
  - Update syscall tables for the 2.6.37 kernel
  - In ausearch, allow searching for auid -1
  - Add queue overflow_action to audisp-remote to control queue overflows
  - Update sample rules for new syscalls and packages</changelog>
<changelog author="meissner@suse.de" date="1305115200">- Adjust license of libaudit and libauparse to be
  LGPLv2.1 or later.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add audit-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tonyj@suse.com" date="1330430400">- Update to version 2.1.3, upstream changelog:
  - 2.1.3
  - Fix parsing of EXECVE records to not escape argc field
  - If auditd's disk is full, send the right reason to client (#715315)
  - Add CAP_WAKE_ALARM to interpretations
  - Some updates to audisp-remote's remote-fgets function (Mirek Trmac)
  - Add detection of TTY events to audisp-prelude (Matteo Sessa)
  - Updated syscall tables for the 3.0 kernel
  - Update linker flags for better relro support
  - Make default size of logs bigger (#727310)
  - Extract obj from NETFILTER_PKT events
  - Disable 2 kerberos config options in audisp-remote.conf
  - 2.1.2
  - In ausearch/report, fix a segfault caused by MAC_POLICY_LOAD records
  - In ausearch/report, add and update parsers
  - In auditd, cleanup DAEMON_ACCEPT and DAEMON_CLOSE addr fields
  - In ausearch/report, parse addr field of DAEMON_ACCEPT &amp; DAEMON_CLOSE records
  - In auditd, move startup success to after events are registered
  - If auditd shutsdown due to failed tcp init, write a DAEMON_ABORT event
  - Update auditd to avoid the oom killer in new kernels (Andreas Jaeger)
  - Parse and interpret NETFILTER_PKT events correctly
  - Return error if auditctl -l fails (#709345)
  - In audisp-remote, replace glibc's fgets with custom implementation</changelog>
<changelog author="coolo@suse.com" date="1350043200">- update to 2.2.1, upstream changelog:
  2.2.1
  - Add more interpretations in auparse for syscall parameters
  - Add some interpretations to ausearch for syscall parameters
  - In ausearch/report and auparse, allocate extra space for node names
  - Update syscall tables for the 3.3.0 kernel
  - Update libev to 4.0.4
  - Reduce the size of some applications
  - In auditctl, check usage against euid rather than uid
  2.2
  - Correct all rules for clock_settime
  - Fix possible segfault in auparse library
  - Handle malformed socket addresses better
  - Improve performance in audit_log_user_message()
  - Improve performance in writing to the log file in auditd
  - Syscall update for accept4 and recvmmsg
  - Update autrace resource usage mode syscall list
  - Improved sample rules for recent syscalls
  - Add some debug info to audisp-remote startup and shutdown
  - Make compiling with Python optional
  - In auditd, if disk_error_action is ignore, don't syslog anything
  - Fix some memory leaks
  - If audispd is stopping, don't restart children
  - Add support in auditctl for shell escaped filenames (Alexander)
  - Add search support for virt events (Marcelo Cerri)
  - Update interpretation tables
  - Sync auparse's auditd config parser with auditd's parser
  - In ausearch, also use cwd fields in file name searchs
  - In ausearch, parse cwd in USER_CMD events
  - In ausearch, correct parsing of uid in user space events
  - In ausearch, update parsing of integrity events
  - Apply some text cleanups from Debian (Russell Coker)
  - In auditd, relax some permission checks for external apps
  - Add ROLE_MODIFY event type
  - In auditctl, new -c option to continue through bad rules but with failed exit
  - Add auvirt program to do special reporting on virt events (Marcelo Cerri)
  - Add interfield comparison support to auditctl (Peter Moody)
  - Update auparse type intepretation for apparmor (Marcelo Cerri)
  - Increase tcp_max_per_addr maximum to 1024.
- remove audit-no_python.patch, there is a configure switch for that now
- remove prereq on sysvinit</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547200">- Audit 2.2.2 , the purpose of this update is too add compatibility
  with systemd for 12.3
- In auditd, tcp_max_per_addr was allowing 1 more connection than specified
- In ausearch, fix matching of object records
- Auditctl was returning -1 when listing rules filtered on a key field
- Add interpretations for CAP_BLOCK_SUSPEND and CAP_COMPROMISE_KERNEL
- Add armv5tejl, armv5tel, armv6l and armv7l machine types (Nathaniel Husted)
- Updates for the 3.6 kernel
- Add auparse_feed_has_data function to libauparse
- Update audisp-prelude to use auparse_feed_has_data
- Add support to conditionally build auditd network listener (Tyler Hicks)
- In auditd, reset a flag after receiving USR1 signal info when rotating logs
- Add optional systemd init script support
- Add support for SECCOMP event type
- Don't interpret aN_len field in EXECVE records (#869555)
- In audisp-remote, do better job of draining queue
- Fix capability parsing in ausearch/auparse
- Interpret BPRM_FCAPS capability fields
- Add ANOM_LINK event type</changelog>
<changelog author="crrodriguez@opensuse.org" date="1359547201">- remove old tarball and update -secondary spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363953600">- remove sysvinit scripts.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212800">- Version 2.2.3
- Code cleanups
- In spec file, don't own lib64/audit
- Update man pages
- Aureport no longer reads auditd.conf when stdin is used
- Don't let systemd kill auditd if auditctl errors out
- Update syscall table for 3.7 and 3.8 kernels
- Add interpretation for setns and unshare syscalls
- Code cleanup (Tyler Hicks)
- Documentation cleanups (Laurent Bigonville)
- Add dirfd interpretation to the *at functions
- Add termination signal to clone flags interpretation
- Update stig.rules
- In auditctl, when listing rules don't print numeric value of dir fields
- Add support for rng resource type in auvirt
- Fix aulast bad login output (#922508)
- In ausearch, allow negative numbers for session and auid searches
- In audisp-remote, if disk_full_action is stop then stop sending (#908977)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364212801">- --with-libcap-ng=yes has no effect if libcap-ng is not
  buildrequired and the lack of those requires causes a broken
  configure script after autoreconf add pkgconfig(libcap-ng)
  to both audit and audit-secondary, cap-ng is actually only
  use in the latter.</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- audit-no_m4_dir.patch: Removed AC_CONFIG_MACRO_DIR([m4]) from
  configure.ac to fix build with new automake</changelog>
<changelog author="tonyj@suse.com" date="1372334400">- Eliminate build cycles. audit.spec now builds only libs/devel.
  Remainder (including daemon) built from audit-secondary.spec</changelog>
<changelog author="coolo@suse.com" date="1372420800">- remove libcap-ng too from audit.spec as it's only needed for plugins
  (and libcap-ng itself needs python to build bindings)</changelog>
<changelog author="tonyj@suse.com" date="1385467200">- Update to version 2.3.2
  Changelog 2.3.2
  - Put RefuseManualStop in the right systemd section (#969345)
  - Add legacy restart scripts for systemd support
  - Add more syscall argument interpretations
  - Add 'unset' keyword for uid &amp; gid values in auditctl
  - In ausearch, parse obj in IPC records
  - In ausearch, parse subj in DAEMON_ROTATE records
  - Fix interpretation of MQ_OPEN and MQ_NOTIFY events
  - In auditd, restart dispatcher on SIGHUP if it had previously exited
  - In audispd, exit when no active plugins are detected on reconfigure
  - In audispd, clear signal mask set by libev so that SIGHUP works again
  - In audispd, track binary plugins and restart if binary was updated
  - In audispd, make sure we send signals to the correct process
  - In auditd, clear signal mask when spawning any child process
  - In audispd, make builtin plugins respond to SIGHUP
  - In auparse, interpret mode flags of open syscall if O_CREAT is passed
  - In audisp-remote, don't make address lookup always a permanent failure
  - In audisp-remote, remove EOE events more efficiently
  - In auditd, log the reason when email account is not valid
  - In audisp-remote, change default remote_ending action to reconnect
  - Add support for Aarch64 processors
  Changelog 2.3.1
  - Rearrange auditd setting enabled and pid to avoid a race (#910568)
  - Interpret the ocomm field from OBJ_PID records
  - Fix missing 'then' statement in sysvinit script
  - Switch ausearch to use libauparse for interpretting fields
  - In libauparse, interpret prctl arg0, sched_setscheduler arg1
  - In auparse, check source_list isn't NULL when opening next file (Liequan Che)
  - In libauparse, interpret send* flags argument
  - In libauparse, interpret level and name options for set/getsockopt
  - In ausearch/report, don't flush events until last file (Burn Alting)
  - Don't use systemctl to stop the audit daemon
  Changelog 2.3
  - The clone(2) man page is really clone(3), fix interpretation of clone syscall
  - Add systemd support for reload (#901533)
  - Allow -F msgtype on the user filter
  - Add legacy support for resuming logging under systemd (#830780)
  - Add legacy support for rotating logs under systemd (#916611)
  - In auditd, collect SIGUSR2 info for DAEMON_RESUME events
  - Updated man pages
  - Update libev to 4.15
  - Update syscall tables for 3.9 kernel
  - Interpret MQ_OPEN events
  - Add augenrules support (Burn Alting)
  - Consume less stack sending audit events</changelog>
<changelog author="tonyj@suse.com" date="1391515200">- Update to version 2.3.3
  Changelog 2.3.3
  - Documentation updates
  - Add AUDIT_USER_MAC_CONFIG_CHANGE event for MAC policy changes
  - Update interpreting scheduler policy names
  - Update automake files to automake-1.13.4
  - Remove CAP_COMPROMISE_KERNEL interpretation
  - Parse name field in AVC's (#1049916)
  - Add missing typedef for auparse_type_t enumeration (#1053424)
  - Fix parsing encoded filenames in records
  - Parse SECCOMP events</changelog>
<changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.3.6
  Changelog 2.3.6
  - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing
  - Improve ARM and AARCH64 support (AKASHI Takahiro)
  - Add ausearch --checkpoint feature (Burn Alting)
  - Add --arch option to ausearch
  - Improve too long config line in audispd, auditd, and auparse (#1071580)
  - Fix aulast to accept the new AUDIT_LOGIN record format
  - Remove clear_config symbol in auparse
  Changelog 2.3.5
  - In CRYPTO_KEY_USER events, do not interpret the 'fp' field
  - Change formatting of rules listing in auditctl to look like audit.rules
  - Change auditctl to do all netlink comm and then print rules
  - Add a debug option to ausearch to find skipped events
  - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format)
  - In auditd, when shifting logs, ignore the num_logs setting (#950158)
  - Allow passing a directory as the input file for ausearch/report (LC Bruzenak)
  - Interpret syscall fields in SECCOMP events
  - Increase a couple buffers to handle longer input
  Changelog 2.3.4
  - Parse path in CONFIG_CHANGE events
  - In audisp-remote, fix retry logic for temporary network failures
  - In auparse, add get_type_name function
  - Add --no-config command option to aureport
  - Fix interpretting MCS seliunx contexts in ausearch (#970675)
  - In auparse, classify selinux contexts as MAC_LABEL field type
  - In ausearch/report parse vm-ctx and img-ctx as selinux labels
  - Update translation tables for the 3.14 kernel</changelog>
<changelog author="tonyj@suse.com" date="1409659200">- Add support for ppc64le (bnc#891861)
  New patch: audit-add-ppc64le-mach-support.patch</changelog>

</package>
<package pkgid="dac8c6fb68bd17d3b10c1a8e4460cb239efdcaf0d1dabc723433c515f0a85e4b" name="libavcodec-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="5ec7c6330610a5097e5e8dc1fc52e2c68223fb0878f57b7a1a12c593c479877f" name="libavcodec56" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="5af7ea54d8dd779a30a5f4a3ef47bfc3d1d072073ec982eacc80c037daf61887" name="libavcodec56-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="83e2ad6fb1585c9154787d5483ca5a52707e1454f8746763abcd2d75a3e04221" name="libavcodec57" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="3d63a2197bbf5829bb4e48005ce9b219d2f08de737c8612a5ab4c92409b15dcf" name="libavcodec57-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="fe7b61c6a9d03858b873de3bc6b49ab270e61896f921e89b333850c4a11b1dbc" name="libavdevice-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="358c328934da348870bd5f56ccf34cfe0526ee7f5d2dfa97fb4ebd49fe0bd3fc" name="libavdevice56" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="36acb8fa6abc18f81b332e8dc3dc66059666ad4d821971512fd3771fa8d7ff79" name="libavdevice56-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="8a54ceeaa1d03a067fd228980b20e98d3907556b1c23be95affa8bb174e38abe" name="libavdevice57" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="da69dd52c17de13e0ed5a09d6134b047fc143e4c146063df2baa17be60be12c6" name="libavdevice57-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="14fe6376ad9782b36793ffd9094cf067f1652f207340165c125f3900635c6fb5" name="libavfilter-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="d6c98eeb03473e64ba68da27eee42ff5f224a9eebaf77d0a1f02851ad634ce61" name="libavfilter5" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="7ccce245e30ca9bef0e131711b2c1bd0cf73305c4e7e521f0f39bcfac2d48cb1" name="libavfilter5-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="4fed758a5da3a76e8ad3898e5295ac9c4ca616d99c1aa497fad9689f5d492f7a" name="libavfilter6" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="ff413b6c62e4bc96dd14503de61c39a1ee3a0ecedd0e56239101e2039e5d869c" name="libavfilter6-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="493d359daf0b3b097fcb0b1406be23a1da6e8c637522f6f6daf4864d08bd5365" name="libavformat-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="20f585e2553ed5cb504e162928b3d69fc274584280b86c494971b86e78e19fe6" name="libavformat56" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="e8ad2538a6863e49b379c09ee0c6f694295022b8417112f58f0abea8ce033ba4" name="libavformat56-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="04dc629c1d942c19e15acf182925efdc5be3d3eadc21ce7cbf297c5c21ba112c" name="libavformat57" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="b4abc6aca2df71bb741932692ddffc73b21825df29f638eaf3cf63396b7952d1" name="libavformat57-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="e3e0498d9c6c8a2fad8d4c72d7b1ff683692cc8a4c87a40ba1bc37f50ca47272" name="libavresample-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="c8427cb443896dbf284f2ccb2cb78432fff9d8ed41b565bc4b00549ce61c0d88" name="libavresample2" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="24f3cd7358f5fb33fa7d4d352a7bdf3655548293827625ad92c64491f9881002" name="libavresample2-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="534537c97b7a71fd3c0f17a1df85c8bb7b1d0c552ada0e4f213d63f7773ffd49" name="libavresample3" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="66d7ddbd269a8c3ff19c27f4275a3c4ca2b835b435db88e726d6c1d3f2416f71" name="libavresample3-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="af6b4e8b355a0d96cf02662f72c3ccaf93b423cdd516e44220c8563081f34a4b" name="libavutil-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="caea3f96917ed5e44a91ea44c39c5ca5eb3db3bd2856ce8627d4eb31a1a69870" name="libavutil54" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="f1381242aa466c43a4735a105f02231e821ef36e9756be6ac7b2304229bbc57b" name="libavutil54-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="5c4633de6c09f2e06f47c7ba5cf8308ddf19a982b6ac63de74e75029f88510ac" name="libavutil55" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="a0fc56efa49aa7c8b1da1c131f274e8f9afd0a140f2b3e3b8b28cb1411965096" name="libavutil55-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="0b74ca217ec30829235e80450033a7057baffa5ba312a8487684088b4e861bf0" name="libblkid-devel" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="75e701fa06ee5f5bc27611c81949c401e5c2223c312ffa6ee2ce2ae7acf0ad3c" name="libblkid-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="c09317492c4d8cdc79efc3c4cb438202f6251a48a233b558b9f385e916a7edae" name="libblkid-devel-static" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="8c8539954ec63d24f6e2eb3ab89e5f381a40e746438a042b0d36e3fb145e40c9" name="libblkid1" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="f1f96ab4de710fe0e23f91785fc3f8895bf296644277ea5ac77144b3e9a84731" name="libblkid1-32bit" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="4b5e3586eb742637c1903ed7543e54af613e019abf97ea1e878a7664b12986f8" name="libbluetooth3" arch="x86_64">
    <version epoch="0" ver="5.41" rel="6.1"/>

<changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
<changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
<changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
<changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
<changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
<changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
<changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
<changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
<changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>

</package>
<package pkgid="e4c4c2a2c5eaa50b5c1f4121050c71599b14a5f80d48eb4a1132ed1d30cc71cd" name="libbluetooth3-32bit" arch="x86_64">
    <version epoch="0" ver="5.41" rel="6.1"/>

<changelog author="seife+obs@b1-systems.com" date="1422964800">- update to version 5.28
  Here?s the first BlueZ release in 2015. Most of the changes since
  the last one are bug fixes, but there?s actually quite many of
  them this time, including:
  * Fixes to GATT service discovery &amp; probing
  * Fix for bearer selection with dual-mode devices
  * Fix potential crash when removing devices
  * Fix issue with incomplete names in EIR data
  * Fix parsing GATT name characteristics
  * Fix AVCTP long press &amp; key repetition handling
  * Fixes for GATT notification handling
  Besides bug fixes we?ve now also got more extensive unit tests
  for new GATT code as well as better HCI decoders in btmon for
  some less used 4.1 and 4.2 features. The hid2hci tool gained
  support for CSR 8510 A10 devices and the hex2hcd tool received a
  complete rewrite with better command handling.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1426161600">- update to version 5.29
  This is a comparatively large release with over a month and 475
  commits since 5.28. There have been lots of fixes to the Android
  side. Our internal GATT library (used both by ?normal? BlueZ as
  well as the Android version) received lots of updates for this
  release. Other notable changes are a fix for AVCTP key repeat
  timeout as well as added support for the Multi Profile
  Specification (MPS).
- add 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch
  from bluez-devel for fixing test case failure (will be included in
  next bluez release)</changelog>
<changelog author="rguenther@suse.com" date="1427112000">- Build the testsuite with -fstack-reuse=none to workaround broken
  test setup.  [bnc#923768]</changelog>
<changelog author="seife+obs@b1-systems.com" date="1427889600">- update to version 5.30
  The highlight of this release is the completion of the GATT D-Bus
  APIs. We?ve now got both the client and server functionality in
  place, however it?s still behind the -E (--experimental) command
  line switch. The API is documented in doc/gatt-api.txt and there
  are several test tools for it in the tree (even bluetoothctl has
  support for it). Another new (and still experimental) D-Bus API
  that debuts with this release is one for managing LE Advertising,
  i.e. acting in peripheral role. The API is documented in
  doc/advertising-api.txt.
  Besides the new features, there are several fixes to AVCTP, AVDTP
  &amp; AVRCP.  There?s also a fix for C++ compiler compatibility with
  the library headers as well as a fix for device information not
  being stored in certain corner cases.
- add bluez-5.30-disable-broken-tests.diff to fix test suite
- remove -fstack-reuse=none workaround
- remove 20150312-PATCH_BlueZ_shared_gatt-client_Fix_invalid_read-56974.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1434456000">- update to version 5.31
  Fixes to many different areas, including networking, GATT, HID,
  A2DP and AVRCP. Feature-wise we?ve got support for security flags
  for the GATT database, allowing fine-grained security level
  control for D-Bus clients using the GATT D-Bus API. We?ve also
  got a new experimental device discovery filter interface which
  allows filtering for a specific remote service, RSSI threshold
  or transport (LE vs. BR/EDR). Another new experimental interface
  is for LE advertising, which also brings the LE peripheral role
  closer to feature completion on a D-Bus level
- remove obsolete bluez-5.30-disable-broken-tests.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436270400">- update to version 5.32:
  This is mostly a bug fix release rather than including many new
  features. The fixes fall in several different areas, including
  OPP, ATT and advertising (instance number handling in
  particular). There?s also a fix for handling a sudden disconnect
  when a connection setup process hasn?t yet completed. The one
  notable feature this release has is the ability to select between
  letting the stack handle ATT security elevation or doing the
  respective error handling in higher layers.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1438344000">- update to version 5.33:
  This release contains mostly bugfixes, particularly in areas such
  as the audio plugin, GATT and OBEX. The main feature additions
  are in the the emulator code which received improvelents to LE
  features. There?s also a new tool for testing the recently
  released Eddystone protocol from Google.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1441368000">- update to version 5.34:
  This release fixes a fairly important bug for the GATT D-Bus
  interface where automatic reconnections would not always occur
  for the client role. There?s also a fix for a missing attribute
  in PBAP &amp; MAP SDP records as well as a couple of audio related
  fixes. A new feature in this release is Media Player Selection
  support for the Target role of AVRCP (the Controller role already
  had this).</changelog>
<changelog author="dimstar@opensuse.org" date="1441886400">- Add bluez-no-duplicate-test-names.patch: Fix test suite when
  running against GLIB 2.45.x (test names are not to be used
  duplicated).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1443441600">- update to version 5.35:
  This release contains bugfixes to areas such as GATT, OBEX, HoG
  and AVRCP. From now on bluetoothd will cache more information of
  remote GATT databases and thereby avoid unnecessary rediscovery
  of remote services.
  A noteworthy new feature is the ability to configure bluetoothd
  to automatically enable (power on) all new adapters. One use of
  this is to replace unreliable "hciconfig hci0 up" commands that
  some distributions use in their init/udev scripts. The feature
  can be enabled by having "AutoEnable=true" under the "[Policy]"
  section of /etc/bluetooth/main.conf</changelog>
<changelog author="seife+obs@b1-systems.com" date="1446206400">- update to version 5.36:
  This release consists for the most part of bug fixes that target
  areas such as PBAP, AVRCP and GATT.
  Feature-wise a notable change is btmon support for vendor
  diagnostic messages which will be debuting with the 4.4 Linux
  kernel release. This feature will allow e.g. LMP tracing with
  specific controllers. For now there is preliminary support for
  Intel and Broadcom based controllers.
- update dbus-devel buildrequires from configure.ac
- remove obsolete bluez-no-duplicate-test-names.patch</changelog>
<changelog author="seife+obs@b1-systems.com" date="1451304000">- update to version 5.37:
  * Fix issue with registering external profiles.
  * Fix issue with connecting external profiles.
  * Fix issue with GATT service changed handling.
  * Fix issue with not emitting GattServices update.
  * Convert to unified HID over GATT profile support.
  * Convert to KeyboardDisplay as default IO capability.
  * Install btattach utility by default.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1458302400">- update to version 5.38:
  This release has lots of updates and fixes to the GATT D-Bus API.
  It should be working considerably better now. A key change to the
  GATT D-Bus API is that it is now fully conforming to the word of
  the D-Bus Object Manager specification. Instead of registering
  each service individually with an Object Manager interface per
  service path, all application services are now grouped together
  through a single RegisterApplication call. The details can be
  found in gatt-api.txt. Besides the D-Bus API change there are
  also numerous fixes to GATT functionality in general.
  Other areas that received fixes in this release are OBEX, AVRCP
  and 128-bit UUID handling. Feature-wise there isn?t anything
  groundbreaking, but a notable update is support for the Start
  Limited Discovery command in the btmgmt tool (this feature
  debuted with the 4.5 kernel release).
  * Fix issue with stack overflow and UUID handling.
  * Fix issue with ObjectManager interface and GATT.
  * Fix issue with GATT database and error handling.
  * Fix issue with GATT client notifications.
  * Fix issue with GATT object ordering.
  * Fix issue with GATT default MTU exchange.
  * Fix issue with device attribute clearing.
  * Fix issue with AVRCP capabilities request.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1460289600">- update to version 5.39:
  This is almost entirely a bug fix release with important fixes to
  GATT, HoG, AVRCP &amp; A2DP.
- install gatttool, needed for bluetooth 4.0 devices (boo#970628)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1464436800">- update to version 5.40:
  This is mostly a bug fix release fixing issues with GATT, paired
  devices and connection handling (particularly for accepting
  connections through the Profile D-Bus interface).
  One new feature is the ability to use btmon for reading HCI logs
  from a TTY device. Right now the creation of this kind of logs is
  available with Zephyr &lt;https://www.zephyrproject.org/&gt; in the
  form of a special console logging mode (more information
  available here
  https://www.zephyrproject.org/doc/board/arduino_101_ble.html#getting-hci-traces&gt;).
  The format of the protocol is a slight modification of what btmon
  normally receives from the kernel monitor sockets, and is
  documented in doc/btsnoop.txt).</changelog>
<changelog author="fbui@suse.com" date="1465300800">- Don't require systemd-devel but systemd-rpm-macros (bsc#983167)
  Bluez simply needs to know where the systemd default paths are, at
  build time. For that there's no need to build-require systemd or
  systemd-devel (and pull all theirs dependencies). Instead
  build-require systemd-rpm-macros, which has much less dependencies.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
<changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
<changelog author="acho@suse.com" date="1507291200">- Add bluez-sdp-Fix-Out-of-bounds-heap-read-in-service_search_at.patch
  * notable SDP fix for CVE-2017-1000250
  (part of the recently published BlueBorne vulnerabilities)
  (bsc#1057342)(CVE-2017-1000250)</changelog>
<changelog author="acho@suse.com" date="1507723200">- Add bluez-tools-csr-Fix-possible-buffer-overflow.patch
  * Fix possible buffer overflow, make sure we don't write past the
  end of the array.(bsc#1026652)(CVE-2016-7837)</changelog>

</package>
<package pkgid="55c8dd0859507bf18204aa74f0d5c6d452773c399ad619735869a009e3808f59" name="libcephfs-devel" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="043289e4e63f973185e668c1361760b8f082862b29fab20910c9cd2347099e66" name="libcephfs2" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="2d2d125a1aabaa54809c65d96b35c7f588f2cd8b3d37f5a0aba87ac0a44f26bb" name="libcilkrts5" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="4b9c5fdaecc5f23955d57b9f61e660392c6f4084b8471c699f909812fdd1ef4e" name="libcilkrts5-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="b4125cfb6de9f88d19e139e4b2cb58236a7192661fc71fd385ea42914a590066" name="libcorosync-devel" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="7.1"/>

<changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
<changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
<changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
<changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
<changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
<changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
<changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
<changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
<changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
<changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
<changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
<changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
<changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
<changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
<changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
<changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
<changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>

</package>
<package pkgid="98f445311b0b7d4e27a2e84925943a9674c9ac793bc5cd52c1eb14076a34e71f" name="libcorosync4" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="7.1"/>

<changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
<changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
<changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
<changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
<changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
<changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
<changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
<changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
<changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
<changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
<changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
<changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
<changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
<changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
<changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
<changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
<changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>

</package>
<package pkgid="7b2e8f0ad65276fd7a07ac405aec6e58642e53f948c82240e90f4251ad9c2cb1" name="libcorosync4-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.6" rel="7.1"/>

<changelog author="lmb@suse.com" date="1396612800">- Ensure that libopenais3 is removed on update of corosync
  (bnc#872122)</changelog>
<changelog author="lzhong@suse.com" date="1397217600">- Fix `systemctl stop pacemaker` leaves corosync running(bnc#872651)
  + bnc#872651-stop-cluster.patch</changelog>
<changelog author="lmb@suse.com" date="1397563200">- Add versioning to dependencies</changelog>
<changelog author="lzhong@suse.com" date="1402660800">- Update corosync.conf.example and corosync.conf.example.udpu(bnc#882449)
  - remove corosync-conf-example.patch
  + add bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="yzou@suse.com" date="1404129600">- Fixed shared memory leak.
  + bnc#881142-fix-shm-leak.patch</changelog>
<changelog author="lzhong@suse.com" date="1404388800">- comment out line: to_logfile:no (bnc#882449)
  work on patch bnc#882449-corosync-conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1435752000">- mv the place of corosync.conf.example*(fate#318190)</changelog>
<changelog author="bliu@suse.com" date="1437480000">update from v2.3.3 to v2.3.5 (bnc#939328)
  v2.3.5
- Log: Add logrotate configuration file
- totemsrp: Improve logging of left/down nodes
- totemconfig: Check for duplicate nodeids
- Really add cpghum
- cpg: Add support for messages larger than 1Mb
- Handle adding and removing UDPU members atomically
- added patches:
  * corosync-2.3.4-fix-bashisms.patch
- removed patches:
  * bnc#881142-fix-shm-leak.patch(as merged into v2.3.5)
  v2.3.4
- add patches:
  * corosync-cts-api-error.patch
  * bnc#867767-add-version.patch
- quorumtool: Sort output by nodeid
- YKD: Fix loading of YKD quorum module
- corosync-quorumtool: add sort options
- cleanup after test-driver
- be consistent in using CPPFLAGS vs CFLAGS
- totemsrp: Fix typo with cont gather
- cpg: Refactor mh_req_exec_cpg_procleave
- cpg: Make sure nodid is always logged as hex num
- cpg: Make sure left nodes are really removed
- mon: Make mon compilable with libstatgrab ver 0.9
- mon: Fix comparsion typo
- mon: Pass correct pointer to inst
- mon: Make monitoring work
- config: Handle totem_set_volatile_defaults errors
- config: Allow dynamic change of token_coefficient
- Log: Make reload of logging work
- Really clear totemconfig nodes on reload
- Add token_coefficient option
- init: Make init script configurable
- totemiba: Fix incorrect failed log message
- logsys: Log error if blackbox cannot be created
- logsys: Log warning if flightrecorder init fails
- Introduce get_run_dir function
- Move ringid store and load from totem library
- coroparse: More strict numbers parsing
- Doc: Enhance INSTALL file a bit
- Make config.reload_in_progress key read only
- Fix compiler warning introduced by previous patch
- totemconfig: Free ifaddrs list
- totemconfig: Make sure join timeout is less than consensus
- totemconfig: Key change process dependencies
- totemconfig: Log errors on key change and reload
- totemconfig: totem_config_get_ip_version
- totemconfig: refactor nodelist_to_interface func
- corosync-keygen: Replace printf/exit call with err
- votequorum: Add cmap key to reset wait_for_all
- votequorum: Return current ring id in callback
- votequorum: Add ring id to poll call
- votequorum: Do not process events during reload
- votequorum: Block sync until qdevice poll
- votequorum: Make qdev timeout in sync configurable
- votequorum: Properly initialize atb and atb_string
- ipc: Process votequorum messages during sync
- testvotequorum2: Opt for polling with old ringid
- TODO: Remove TODO file
- Makefile: Do not install TODO file
- totem: Inform RRP about membership changes
- totemnet: Add totemnet_member_set_active
- totemrrp: Implement *_membership_changed
- totemudpu: Implement member_set_active
- totemudpu: Send msgs to all members occasionally
- Cancel token holding while in retransmition
- upstart: Make job conf file configurable
- systemd: Config example for corosync wd service
- Install doc: Correct a typo
- init: change return value when starting corosync
- Free object allocated at quorum_register_callback
- corosync-cmapctl: Allow -p option to delete keys
- Implement config file testing mode
- Slightly rework corosync-keygen.
- totemiba: Add multicast recovery
- Indent: Remove space in negation of expression
- Indent: Remove newline before else branch start
- fix memory leak produced by 'corosync -v'
- Handle SIGSEGV and SIGABRT signals</changelog>
<changelog author="bliu@suse.com" date="1439812800">- remove git files from tarball(bnc#941910)
- modify corosync.spec to delete logrotate.d</changelog>
<changelog author="bliu@suse.com" date="1468497600">- corosync process still exists when stop pacemaker service(bnc#988683)
- remove corosync-devel and require lines from baselibs.conf</changelog>
<changelog author="bliu@suse.com" date="1474977600">- Default token timeout was 5000 ms in SLE 11 SP4, but is 1000 ms in SLE 12(bsc#1001164)
  Added: bsc#1001164-corosync.conf-example.patch</changelog>
<changelog author="bliu@suse.com" date="1481803200">upgrade corosync-v2.3.5 to corosync-v2.3.6, and backport patches from v2.4.2(FATE#322113, bsc#1020550)
  Added:
- Config-Flag-config-uidgid-entries.patch
- cfg-Prevents-use-of-uninitialized-buffer.patch
- cts-Make-it-run-with-pacemaker-1.13.patch
- get_cluster_mcast_addr-error-is-not-fatal.patch
- totemsrp-Addition-of-the-log.patch
  v2.3.6
- logconfig: Fix logging reload disabling logfiles
- wd: Warn if values are out of range
- parser: WD Read type correctly from corosync.conf
- Add some more RO keys
- Reapply config defaults corosync.conf reload
- schedwrk: Cleanup and make it work on PPC BE
- cmapctl: Handle corosync errors in print_key func
- Adds doxygen stubs to include directory
- Add clang-format configuration file
- wd: make watchdog device configurable
- logging: Use our own version of basename
- logsys: fix TOTEM logging when corosync built out of tree
- parser: Make config file parser more hierarchy
- totemconfig: Explicitly pass IP version
- cpg: Handle ipc error in cpg_zcb_alloc/free
- cpg: Memory not unmapped in cpg_zcb_free
- totempg: Fix memory leak
- Fix spelling errors
- Add section in manual title for cpg_zcb_free 3
- Add section in manual title for cpg_zcb_alloc 3
- Update corosync.spec source link
- Update gitignore files
- Remove all links to old ML
- totemsrp: Fix clang warning (tautological compare)
- configure.ac: Make location of .pc overrideable
- Remove a few unused variables and functions
- configure.ac: We don't need no C++ compiler
- configure.ac: Remove deprecated AC_PROG_LIBTOOL
- configure.ac: make foreign apply to all Makefiles
- Remove unused, obsolete check
- Fix detection of qb_log_thread_priority_set
- cpghum: Fix type of recv_crc
- Check for fdatasync
- Fix detection of warning flags for clang
- quorum: Display node id as unsigned int.
- cts: InitClusterManager is now BootCluster
- totemudp: Move udp bind() so that multicast works with IPv6
- cfgtool: Display nodeid as unsigned int
- votequorum: Don't send multiple callbacks when nodes join
- man: Add synopsis for cpg_zcb_alloc and free
- man html index: Update index
- votequorum: Make sure cs_error_t is defined
- Doxygen fix for cmap_iter_next()
- configure: Correct help entry for logdir
- totmesrp: Fix typo in log message
- configure: typo in include
- man page: Correct option letter for DBus
- wd: fix setting of watchdog timeouts
- CFG: Prevent CFG orignating messages during SYNC
  removed:
- corosync-cts-api-error.patch</changelog>
<changelog author="bliu@suse.com" date="1489406400">- L3-Question: corosync logging priority takes no effect(bsc#1023959)
  Added:
  0001-Logsys-Change-logsys-syslog_priority-priority.patch
  Fix-build-error.patch
  0001-logconfig.c-make-logging.syslog_priority-and-logging.patch</changelog>
<changelog author="bliu@suse.com" date="1491825600">- [upgrade] Changing the pre-upgrade role for node failed(bsc#1030437)
  Added: 0001-totemconfig.c-Fixed-Evicted-from-CPG-membership.patch
  removed: 0001-totemip.c-Fixed-Evicted-from-CPG-membership.patch</changelog>
<changelog author="bliu@suse.com" date="1494331200">- calling mlockall before corosync_tty_detach is noop when corosync is executed as a daemon(bsc#1038147)
  Added: 0002-Main-call-mlock-after-fork.patch</changelog>
<changelog author="bliu@suse.com" date="1494936000">- totemrrp: Fix situation when all rings are faulty(bsc#1039215)
  Added: 0003-totemrrp-Fix-situation-when-all-rings-are-faulty.patch</changelog>
<changelog author="bliu@suse.com" date="1496836800">-  some Fixes from upstream(bsc#1043045)
  Added: 0004-main-Display-reason-why-cluster-cannot-be-formed.patch
    0005-votequorum-Report-errors-from-votequorum_exec_send_r.patch
    0006-coroapi-Use-size_t-for-private_data_size.patch</changelog>
<changelog author="bliu@suse.com" date="1499688000">- some errors in spec file(bsc#1047862)
  Modified:corosync.spec
  1) as in SP3 GA, there are both %bcond_ and %define, to make it uniform, change %define to %bcond_without
  2) change service_del_postun to service_del_preun, since service_del_postun is not a right macro</changelog>
<changelog author="bliu@suse.com" date="1501588800">- L3: corosync: assert(sender_node != NULL) fails after tearing down a network interface(bsc#1032634)
    Added: 0007-fix-ifdown-udp.patch</changelog>
<changelog author="bliu@suse.com" date="1506600000">- wrong "service_del_postun corosync.service"(bsc#1060767)
    Modified: corosync.spec, remove service_del_postun in postun of corosync</changelog>

</package>
<package pkgid="420b0e361cdd3f1a88109577155950917a6c67952a0d0af694982b1e3b3bb6ae" name="libcpupower0" arch="x86_64">
    <version epoch="0" ver="4.10" rel="4.1"/>

<changelog author="trenn@suse.de" date="1391169600">- Update cpupower to latest kernel version (3.13-rc7, rc7 missed out,
  there won't be any changes in cpupower anymore and obs does not like
  - rc7 in version tag.
- All patches are now included mainline, therefore:
  Drop cpupower_make_get_idlestate_count_unsigned.patch
  Drop cpupower_disable_cstates.patch
  Drop introduce_cpupower_idle_set.patch
  Drop cpupower-haswell_support.patch
  Drop cpupower_hsw_special.patch
- Add turbostat utility (fate#315666):
  Add turbostat-3.13.tar.bz2
  Add turbostat_fix_man_perm.patch</changelog>
<changelog author="trenn@suse.de" date="1392379200">- turbostat is an x86 (in fact an Intel) only tool
  exclude it for other archs to fix building of the package there again</changelog>
<changelog author="trenn@suse.de" date="1394798400">- Introduce idle state disable-by-latency and enable-all
  Part of fate#316611
  Add cpupower_disable_by_latency.patch</changelog>
<changelog author="trenn@suse.de" date="1396008000">- Fix Makefile: Install latest cpupower-idle-* manpages
  Add add_idle_manpages_in_Makefile.patch</changelog>
<changelog author="trenn@suse.de" date="1396008001">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
<changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
<changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
<changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
<changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
<changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
<changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
<changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
<changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
<changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources (bsc#976983)
- Fix URL (bsc#976983)
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch
- Leave out latest library changes from factory for SLE12 SP2</changelog>
<changelog author="trenn@suse.de" date="1470398400">fate#315666
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1474977600">- Fix buffer overflow in rapl_monitor (bsc#996052)
  Modify: rapl_monitor.patch</changelog>
<changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
<changelog author="trenn@suse.de" date="1493985600">- Update to turbostat version 17.04.12 (fate#321286).</changelog>
<changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>

</package>
<package pkgid="3c1d1f6190f95112167a7c919b09c6a1c0dc13b0546996480fdb1f7cd5a8c596" name="libcrypto41" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="8c5fb516b29f3b0047b4615351badb0a1ce1a264a0a364d3bac7676e781d2de7" name="libcrypto41-32bit" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="9c7d2b950cfbfcf485e65065150edeaf32e9d767d6da001acc9a2f0b5a6dc488" name="libcurl-devel" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="20.1"/>

<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>

</package>
<package pkgid="ba4e980f657b5cf7771c5865ff4c12992aaa7be78c40909a422dcea9adb3c363" name="libcurl-devel" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="23.1"/>

<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>

</package>
<package pkgid="3770af9eeb0193295de0fcc7e22e4d0eb05ab7bf1ebc7d699b056bc3cb539bd2" name="libcurl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="20.1"/>

<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>

</package>
<package pkgid="8dc349aa8bef9f99cdb40def005cd829194657f9ecc4b216e1a7764079477229" name="libcurl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="23.1"/>

<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>

</package>
<package pkgid="83853b4c5b113cc558fb87ac49808d676e25d10678d9b8609428dad789125fb5" name="libcurl4" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="20.1"/>

<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>

</package>
<package pkgid="f7a26d2ff8bf0e30467103589f26449844d4d512dd9b88aec9cbb44475f536c0" name="libcurl4" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="23.1"/>

<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>

</package>
<package pkgid="bab6b5c796ba0996f3abf376dd2dabfaf6bcdc1e8d8abc84658494daf5f24643" name="libcurl4-32bit" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="20.1"/>

<changelog author="vcizek@suse.com" date="1385726400">- update to 7.33.0
  * fixes CVE-2013-4545 (bnc#849596)
    = curl: ssl cert checks unclear behaviour
  o test code for testing the event based API
  o CURLM_ADDED_ALREADY: new error code
  o test TFTP server: support "writedelay" within &lt;servercmd&gt;
  o krb4 support has been removed
  o imap/pop3/smtp: added basic SASL XOAUTH2 support
  o Pass password to OpenSSL engine by user interface
  o c-ares: Add support for various DNS binding options
  o cookies: add expiration
  o curl: added --oauth2-bearer option</changelog>
<changelog author="vcizek@suse.com" date="1391515200">- update to 7.35.0
  * security fix:
    CVE-2014-0015: re-use of wrong HTTP NTLM connection (bnc#858673)
  * changes:
    imap/pop3/smtp: Added support for SASL authentication downgrades
    imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
    TheArtOfHttpScripting: major update, converted layout and more
    mprintf: Added support for I, I32 and I64 size specifiers
    makefile: Added support for VC7, VC11 and VC12
    SSL: protocol version can be specified more precisely
    imap/pop3/smtp: Added graceful cancellation of SASL authentication
    Add "Happy Eyeballs" for IPv4/IPv6 dual connect attempts
    base64: Added validation of base64 input strings when decoding
    curl_easy_setopt: Added the ability to set the login options separately
    smtp: Added support for additional SMTP commands
    curl_easy_getinfo: Added CURLINFO_TLS_SESSION for accessing TLS internals
    nss: allow to use TLS &gt; 1.0 if built against recent NSS
    SECURITY: added this document to describe our security processes
    parseconfig: warn if unquoted white spaces are detected
  * and many bugfixes
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch
- refresh libcurl-ocloexec.patch</changelog>
<changelog author="kukuk@suse.de" date="1394712000">- Disable BuildRequires for openssh, only needed for test suite,
  but the test suite isn't able to start sshd anyways.
  Solves the problem that openssh checkins triggers a nearly full
  rebuild, too.</changelog>
<changelog author="vcizek@suse.com" date="1397044800">- update to 7.36
  * fixes CVE-2014-0138 (bnc#868627) and CVE-2014-0139 (bnc#868629)
  * NEW FEATURES:
    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    http2: build with current nghttp2 version
    openssl: info message with SSL version used
  * dropped curl-test172_cookie_expiration.patch (upstream)
  * added patches to make it build:
  - curl-mkhelp.patch
  - curl-test815.patch</changelog>
<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>

</package>
<package pkgid="7da6f416f3ab6dfeeccab429bdd16431189804842db9054c078ecf7f07050107" name="libcurl4-32bit" arch="x86_64">
    <version epoch="0" ver="7.37.0" rel="23.1"/>

<changelog author="vcizek@suse.com" date="1398427200">- adjust default cipher list (bnc#874986)
  * curl-DEFAULT_CIPHER_SELECTION.patch</changelog>
<changelog author="vcizek@suse.com" date="1402574400">- update to 7.37.0
  This release includes many bugfixes and the following changes:
  * URL parser: IPv6 zone identifiers are now supported
  * CURLOPT_PROXYHEADER: set headers for proxy-only
  * CURLOPT_HEADEROPT: added
  * curl: add --proxy-header
  * sasl: Added support for DIGEST-MD5 via Windows SSPI
  * sasl: Added DIGEST-MD5 qop-option validation in native challange handling
  * imap: Expanded mailbox SEARCH support to use URL query strings [7]
  * imap: Extended FETCH support to include PARTIAL URL specifier [7]
  * nss: implement non-blocking SSL handshake
  * build: Reworked Visual Studio project files
  * poll: enable poll on darwin13
  * mk-ca-bundle: added -p
  * libtests: add a wait_ms() function
  - dropped patches:
  * curl-mkhelp.patch (upstream)
  * curl-test815.patch (upstream)</changelog>
<changelog author="vcizek@suse.com" date="1410350400">- add fixes for two security vulnerabilities
  * CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * cookie leaks for ip addresses as domains and TLDs
  * added patches:
    curl-CVE-2014-3613.patch
    curl-CVE-2014-3620.patch</changelog>
<changelog author="vcizek@suse.com" date="1420200000">- fix for CVE-2014-8150 (bnc#911363)
  * request injection vulnerability
  * added curl-CVE-2014-8150.patch
- fix for CVE-2014-3707 (bnc#901924)
  * duphandle read out of bounds
  * added curl-CVE-2014-3707.patch</changelog>
<changelog author="vcizek@suse.com" date="1422964800">- allow md4 and md5 in fips mode (bnc#913209)
  * https://github.com/bagder/curl/pull/138
  * added curl-allow_md4_and_md5_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1429531200">- security update:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented
  * CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
  * added patches:
    + curl-CVE-2015-3143.patch
    + curl-CVE-2015-3144.patch
    + curl-CVE-2015-3145.patch
    + curl-CVE-2015-3148.patch
    + curl-CVE-2015-3153.patch
- fix baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1453377600">- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch
- fix a typo in curl-secure-getenv.patch (bsc#936676)
- run the testsuite during build (bsc#934333)
  * add curl-disable_failing_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1453377601">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch</changelog>
<changelog author="alarrosa@suse.com" date="1462449600">- Add fix-return-status-in-Curl_is_connected.patch . Fixes some error
  handling in Curl_is_connected by backporting some code from upstream.
- Add 0001-Fix-invalid-Network-is-unreachable-errors.patch.
  Fixes "Network is unreachable" errors in valid situations when ipv6
  is not available but ipv4 is working fine. This also fixes the same
  error from happening in applications using libcurl4 (like zypper).
  (bsc#915846)</changelog>
<changelog author="pjanouch@suse.de" date="1470139200">- Add curl-CVE-2016-5419.patch (bsc#991389 CVE-2016-5419)
- Add curl-CVE-2016-5420.patch (bsc#991390 CVE-2016-5420)
- Add curl-CVE-2016-5421.patch (bsc#991391 CVE-2016-5421)</changelog>
<changelog author="pjanouch@suse.de" date="1472040000">- Add curl-bsc991746.patch (bsc#991746) fixing a performance
  regression with FTP</changelog>
<changelog author="pjanouch@suse.de" date="1473249600">- Update curl-CVE-2016-5420.patch to fix incorrect reuse of client
  certificates with NSS (bsc#997420 CVE-2016-7141)</changelog>
<changelog author="vcizek@suse.com" date="1477396800">- Project cURL Security Advisory, November 2, 2016
  https://curl.haxx.se/docs/adv_20161102K.html
  * CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646)
  * CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645)
  * CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005643)
  * CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642)
  * CVE-2016-8620: glob parser write/read out of bounds (bsc#1005640)
  * CVE-2016-8619: double-free in krb5 code (bsc#1005638)
  * CVE-2016-8618: double-free in curl_maprintf (bsc#1005637)
  * CVE-2016-8617: OOB write via unchecked multiplication (bsc#1005635)
  * CVE-2016-8616: case insensitive password comparison (bsc#1005634)
  * CVE-2016-8615: cookie injection for other servers (bsc#1005633)
  * CVE-2016-7167: escape and unescape integer overflows (bsc#998760)
- added patches:
  * curl-CVE-2016-7167.patch
  * curl-CVE-2016-8615.patch
  * curl-CVE-2016-8616.patch
  * curl-CVE-2016-8617.patch
  * curl-CVE-2016-8618.patch
  * curl-CVE-2016-8619.patch
  * curl-CVE-2016-8620.patch
  * curl-CVE-2016-8621.patch
  * curl-CVE-2016-8622.patch
  * curl-CVE-2016-8623.patch
  * curl-CVE-2016-8624.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1490011200">- Project curl Security Advisory, December 21, 2016
  https://curl.haxx.se/docs/adv_20161221A.html
  * CVE-2016-9586: curl: libcurl printf floating point buffer
    overflow (bsc#1015332)
  * Added patch curl-7.37-CVE-2016-9586.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1491393600">- Project curl Security Advisory, April 3, 2017
  https://curl.haxx.se/docs/adv_20170403.html
  * CVE-2017-7407: --write-out out of buffer read (bsc#1032309)
- Bug bsc#1027712 switch to new client side cipher suite default
  * Updated default cipher suite from "DEFAULT" to "SUSE_DEFAULT"
  * Updates previous patch curl-DEFAULT_CIPHER_SELECTION.patch
- Added patches:
  * curl-7.37-CVE-2017-7407.patch
  * curl-DEFAULT_SUSE_SELECTION.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501588800">- Project curl Security Advisory, August 9th 2017
  https://curl.haxx.se/docs/adv_20170809B.html
- Security fix [bsc#1051644, CVE-2017-1000100]
  * TFTP sends more than buffer size
  * Added patch curl-7.37.0-CVE-2017-1000100.patch
- Security fix [bsc#1051643, CVE-2017-1000101]
  * URL globbing out of bounds read
  * Added patch curl-CVE-2017-1000101.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507550400">- Security fix [bsc#1061876, CVE-2017-1000254]
  * FTP PWD response parser out of bounds read
  * Added patch curl-7.37-CVE-2017-1000254.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507896000">- Fixed error "error:1408F10B:SSL routines" when connecting to ftps
  via proxy [bsc#1060653]
  * Added patch curl-7.37.0-connect-ftps-via-proxy.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241600">- Disabled test1086 that fails on ppc64le
  * Refreshed patch curl-disable_failing_tests.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1508241601">- Security fix [bsc#1063824, CVE-2017-1000257]
  * IMAP FETCH response out of bounds read
  * Added patch curl-CVE-2017-1000257.patch</changelog>

</package>
<package pkgid="e5b925a230fee295d4939322b084e460a860b97ba7198f12dec130435ecb62a6" name="libdcerpc-binding0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="860f72f39d16836d87f22d9186fc4489db363267fd15762d31ff24b5e3f13d3d" name="libdcerpc-binding0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="0c04165b8fb8590110676ca8ec99add5c6d1594a29c0697016370514f9bdd8eb" name="libdcerpc-binding0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="801b3ab24c2b317c38ece67643f5facd81ee99f0cabfc4428e8f47b981ff239d" name="libdcerpc-binding0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="963fe128aa4e4cc99bb006aab478f4bcb0ac821579d50d184381c3cab077bb75" name="libdcerpc-binding0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="56f89d177d86bdc3a931767ec926d45f4df23c41d1d3d6978e9ca8f953f6bd4a" name="libdcerpc-binding0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="8735c6d50749d8fbb87a85e442fe931474ba69adce2c4b02a14fb4a52248dd11" name="libdcerpc-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="a9850d6c4309a186336d7be9cc91ea65d25692517ead4bb731334ca13fbc1bef" name="libdcerpc-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="20779a4ce7890a7304610939a7918aad23ec077cb058bebc5754f45ce725cd59" name="libdcerpc-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="84a905a227e95a7a529d02587dcc219599e21c7988e328eee01651e3f34ab05b" name="libdcerpc-samr-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="cf291c55b1e292cf42faf44708da51793ac0cb57e2d873cbd7ac20ba9816e9d7" name="libdcerpc-samr-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="884e046c2d2fdbe1a3be02ff02703ca2c3844a5939f918715b65b0b4b49c1afe" name="libdcerpc-samr-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="8e0edc4cd8e0b5a231e5bc4c23f79302cac68437a7841ca486a5e3495f0850d9" name="libdcerpc-samr0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="a52742a283853ba37a74d53f8e57ceca8e13ea0a875e1df52382e8250b73b4fe" name="libdcerpc-samr0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="a9a799e528df885bbef3847fba8af8653af87cc245429ee2d85962f7b14cdbf9" name="libdcerpc-samr0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="46ee4216e96a1c1d56ef9b44893855c96b61062089df7119d4720c71df66ecb7" name="libdcerpc-samr0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="022912484ab0a07313d7246c13acb9bd64c4f18e9dfa2f33377e8a54350112ec" name="libdcerpc-samr0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="adc4df0e77634b2dcd95e0ab73cd5b0080a54b1683215074c24907324d4b311c" name="libdcerpc-samr0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="3cdead83046d7b34a71029bbaeb055f8cbaa220b7b514bcfe422727c904dbb9b" name="libdcerpc0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="02d72a243ac8533dc1ea56d50e916c6588ba43694410236335143640268a5de4" name="libdcerpc0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="cf70157f7ada97b1127d7803ec8a48af19681a3314730d966b8f9800e0443c43" name="libdcerpc0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="7a90bcc0a34d0cdc23c34fcf2a87f4b5444fde8ed2ec84cbb3e5ef089f16f233" name="libdcerpc0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="165684779e1328e7edda7289371b2d5ad651ea0bd089c35b6471f8598d81a66d" name="libdcerpc0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="3f2286c040dfa14f8450f7c61a8e0b79b15f22bf37199091409ea8b1c395f94b" name="libdcerpc0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="d202d5031704908d29e8435cf5c98439d06b8ecfb23f0ae319566c7f9f54ee77" name="libdmmp-devel" arch="x86_64">
    <version epoch="0" ver="0.7.1+11+suse.246dd815" rel="3.1"/>

<changelog author="hare@suse.de" date="1472040000">- multipathd: start daemon after udev trigger (bsc#986734)
- Load device handler and multipath module at boot (bsc#991634)</changelog>
<changelog author="hare@suse.de" date="1472212800">- multipath: fixup check from udev rules (bsc#986734)</changelog>
<changelog author="hare@suse.de" date="1472212801">- Fixup module name in /usr/lib/modules-load.d (bsc#986734)</changelog>
<changelog author="jthumshirn@suse.com" date="1472472000">- libmultipath: fall back to search paths by devt (bsc#995645)</changelog>
<changelog author="hare@suse.de" date="1473336000">- Fixup glitch from patch 'fixup check from udev rules' (bsc#986734)
- Remove 0001-libmultipath-fall-back-to-search-paths-by-devt.patch;
  integrated into git repository</changelog>
<changelog author="hare@suse.de" date="1474286400">- libmultipath: Do not crash on empty features (bsc#994812)
- multipathd: Set CLI timeout correctly (bsc#999061)
- Moved multipath-tools repository to
  github.com:/openSUSE/multipath-tools.git</changelog>
<changelog author="hare@suse.de" date="1475064000">- multipath: avoid crash when using modified configuration
  (bsc#1000914)</changelog>
<changelog author="hare@suse.de" date="1475150400">- Implement support for 'multipath=off' and 'nompath'
  kernel commandline options (bsc#1001691)</changelog>
<changelog author="mwilck@suse.com" date="1475150401">- Update to version 0.6.2+suse20160928.8939fb6</changelog>
<changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous PreReq for insserv and fillup</changelog>
<changelog author="mwilck@suse.com" date="1488283200">- Update to version 0.6.4+101.f01ef4da (SLES12 SP2 changes wrt upstream):
  * Make libdmmp build optional
  * multipath.rules: use -i flag to multipath
  * kpartx: create symlinks for dmraid devices
  * kpartx: Add udev compability rules for SUSE
  * libmultipath/checkers: make RADOS checker optional
  * multipathd: fixup check for new path states (bsc#1019798)
  * tur: Add pthread_testcancel() (bsc#101979)
  * kpartx: sanitize delete partitions (bsc#100869)
  * libmultipath: coalesce_paths: trigger uevent if nothing done
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: differentiate ACT_NOTHING and ACT_IMPOSSIBLE
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: reload map if not known to udev
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: sysfs_attr_set_value: use const char*
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: select_action: check special features separately
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: treat aminio like assemble_map does
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: skip no_path_retry check
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: handle "retain_attached_hw_handler"
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: print log msg if no_path_retry cant be set
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_features: log msg if queue_if_no_path is ignored
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: use weaker "force_reload" at startup
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: imply -n if find_multipaths is set (bsc#1012910)
  * multipath: ignore -i if find_multipaths is set (bsc#1012910)
  * libmultipath: move suspend logic to _dm_flush_map (bsc#986838)
  * multipath -ll: set DI_SERIAL (bsc#991432)
  * libmultipath: use existing alias from bindings file (bsc#1005255)
  * libmultipath/discovery: do not cache 'access_state' sysfs attribute (bsc#1004858)
  * multipathd: issue systemd READY after initial configuration (bsc#1006469)
  * multipath: avoid crash when using modified configuration (bsc#1000914)
  * multipathd: Set CLI timeout correctly (bsc#999061)
  * libmultipath: Do not crash on empty features (bsc#994812)
  * libmultipath: fall back to search paths by devt (bsc#995645)
  * multipathd: set timeout for CLI commands correctly (bsc#999061)
  * Invalid error code when using multipathd CLI
  * multipath: do not check daemon from udev rules (bsc#986734)
  * Add support for "multipath=off" and "nompath" on kernel cmdline
  * multipathd: start daemon after udev trigger (bsc#98673)
  * multipathd.service: fixup Wants= and Before= statements (bsc#1019181, bsc#991742, bsc#986734)
- Update to current upstream (0.6.4-65-ga2675025)
  * Avoid that reloading a map sporadically triggers I/O errors
  * fix udev rules for failed multipath devices
  * multipathd: allow resetting stats
  * multipathd: add messages on delayed path addition
  * multipathd: don't update priority of failed paths
  * libmultipath: cleanup orphan device states
  * libmultipath: add detect_checker option
  * kpartx: don't keep creating recursive partitions
  * multipath-tools: Introducing multipath C API
  * multipath-tools: sync valgrind.h with 3.12 upstream
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * Fill NVMe specific path info
  * Don't blacklist nvme
  * multipath-tools: fix misspellings
  * multipath-tools: git should ignore rej and orig files
  * Include sys/sysmacros.h
  * Tolerate modprobe failures in multipathd.service
  * multipath-tools: Remove trailing and leading whitespaces
  * multipath-tools: Perform socket client uid check on IPC commands.
  * multipath-tools: Set errno mpath_recv_reply() when failure
  * multipath-tools: New way to limit the IPC command length.
  * multipath-tools: libmultipath: Removed unused functions.
  * multipath-tools: libmultipath: fix gcc link failure on rcu_register_thread_mb.
  * multipath-tools: multipathd: Fix memory leak on load_config().
  * [multipathd] Remove trailing whitespaces
  * multipathd: deterministic io throughput in multipath</changelog>
<changelog author="mwilck@suse.com" date="1488283201">- Update to version 0.6.4+102.df7d367e:
  * libmultipath/propsel: Do not select sysfs prioritizer for RDAC arrays
    (bsc#1004858)</changelog>
<changelog author="mwilck@suse.com" date="1488369600">- spec file changes: optional librados and libdmmp support
  * enabled by default on Factory and Leap
    (disable with --without-rados, --without-libdmmp)
  * disabled by default on SLES12
    (enable with --with-rados, --with-libdmmp)
  * libdmmp0_1_0 and libdmmp-devel as separate packages
  * minor fixes for RPMLINT warnings
- Update to version 0.6.4+102.0119472d:
  * rebased, code-wise identical to previous checkout</changelog>
<changelog author="mwilck@suse.com" date="1489147200">- Spec file: Added dependency on sg3_utils (#boo1028857)</changelog>
<changelog author="mwilck@suse.com" date="1489147201">- Update to version 0.6.4+103+suse.bcb5d0f4:
  * changed to official github repo openSUSE/multipath-tools
    (no changes code-wise)</changelog>
<changelog author="mwilck@suse.com" date="1490097600">- Spec file: disable librados for architectures for which ceph
  is not built
- Spec file: enable librados by default for SLES12 SP3, disable
  it on Leap &lt;= 42.1
- Update to version 0.6.4+104+suse.ac0df678:
  * multipathd: fix SIGUSR2 handling</changelog>
<changelog author="mwilck@suse.com" date="1490270400">- Enable rados for SLES only for x86_64 and aarch64 (ceph is currently
  disabled on SLES on s390x and ppc64le) (bsc#1030699)
- Downgrade to version 0.6.4+103+suse.bcb5d0f4:
  * temporarily remove commit "multipathd: fix SIGUSR2 handling"
  until it's merged in official repo (bsc#1030699)</changelog>
<changelog author="mwilck@suse.com" date="1490356800">- spec file changes suggested by factory review team (bsc#1030699)
  * RPM group adjustments.
  * Avoid %__ macro indirections</changelog>
<changelog author="mwilck@suse.com" date="1493294400">- spec file: Disable RADOS support for i586 on Leap 42.x (bsc#1036271)
- spec file: Move libdmmp to /usr/lib[64] (bsc#1036652)
- Update to version 0.7.1+7+suse.3edc5f7d:
  * kpartx: use mapname if no uuid is present (bsc#1033541)
  * kpartx: relax check when checking for a kpartx device (bsc#1033541)
  * libmpathpersist: use extern struct udev (bsc#1027188)
  * kpartx: include sys/sysmacros.h (fix compilation warning)
- Update to upstream version 0.7.1:
  * multipath-tools: improve processing efficiency for addition and deletion of multipath devices
  * uevent_can_discard: optimize devpath check
  * multipathd: fix SIGUSR2 handling
  * multipath-tools: clean up libdmmp/Makefile
  * multipath-tools: libdmmp: Fix incorrect use of __attribute__
  * multipath-tools: Remove trailing whitespaces
  * multipath-tools: add missing "-l" flag for pthread in libdmmp/Makefile
  * multipath-tools: build objects for libdmmp and libmpathpersist independently
  * libdmmp: minor Makefile cleanup
  * multipath-tools: remove incdir from Makefiles
  * libdmmp: don't disconnect from multipathd twice
  * multipathd: don't call strlen on NULL variables
  * libdmmp: move libdmmp.pc install location
  * multipathd: drop lock before calling uev_add_path
  * multipathd: allow devices to switch from RW to RO
  * libmultipath: don't set max_sectors_kb on reloads
  * Remove a trailing tab
  * multipath: fix segfault with disable_changed_wwids
  * multipath-tools: amend text from multipath/multipath.conf.5
  * Bump the version code and date
  * multipath-tools: replace multipath configuration output
  * Revert "multipathd: set timeout for CLI commands correctly"
  * libmultipath: fix skip_kpartx support for removing maps
  * Bump version to 0.7.1</changelog>
<changelog author="mwilck@suse.com" date="1500552000">- Update to version 0.7.1+11+suse.246dd815
  * libmultipath: get_udev_uid: make sure pp-&gt;wwid is 0-terminated
  (bsc#1048146)
  * libmultipath: drop uevent_can_discard_by_devpath (bsc#1048052)
  * libmultipath: only listen for uevents with DEVTYPE=disk
  (bsc#1048052)
  * libmultipath: fix over-long NVME WWIDs
  (bsc#1048146)
- _service: Pull this from the branch sles12-sp3-fixes (minimal set
  of fixes against SLE12-SP3 RC2). Use match-tag to generate correct
  version</changelog>

</package>
<package pkgid="eb94615eaa2d23c949247d7d4c2103125af0cd0ebe79bcbefecb216caf67f9f2" name="libdmmp0_1_0" arch="x86_64">
    <version epoch="0" ver="0.7.1+11+suse.246dd815" rel="3.1"/>

<changelog author="hare@suse.de" date="1472040000">- multipathd: start daemon after udev trigger (bsc#986734)
- Load device handler and multipath module at boot (bsc#991634)</changelog>
<changelog author="hare@suse.de" date="1472212800">- multipath: fixup check from udev rules (bsc#986734)</changelog>
<changelog author="hare@suse.de" date="1472212801">- Fixup module name in /usr/lib/modules-load.d (bsc#986734)</changelog>
<changelog author="jthumshirn@suse.com" date="1472472000">- libmultipath: fall back to search paths by devt (bsc#995645)</changelog>
<changelog author="hare@suse.de" date="1473336000">- Fixup glitch from patch 'fixup check from udev rules' (bsc#986734)
- Remove 0001-libmultipath-fall-back-to-search-paths-by-devt.patch;
  integrated into git repository</changelog>
<changelog author="hare@suse.de" date="1474286400">- libmultipath: Do not crash on empty features (bsc#994812)
- multipathd: Set CLI timeout correctly (bsc#999061)
- Moved multipath-tools repository to
  github.com:/openSUSE/multipath-tools.git</changelog>
<changelog author="hare@suse.de" date="1475064000">- multipath: avoid crash when using modified configuration
  (bsc#1000914)</changelog>
<changelog author="hare@suse.de" date="1475150400">- Implement support for 'multipath=off' and 'nompath'
  kernel commandline options (bsc#1001691)</changelog>
<changelog author="mwilck@suse.com" date="1475150401">- Update to version 0.6.2+suse20160928.8939fb6</changelog>
<changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous PreReq for insserv and fillup</changelog>
<changelog author="mwilck@suse.com" date="1488283200">- Update to version 0.6.4+101.f01ef4da (SLES12 SP2 changes wrt upstream):
  * Make libdmmp build optional
  * multipath.rules: use -i flag to multipath
  * kpartx: create symlinks for dmraid devices
  * kpartx: Add udev compability rules for SUSE
  * libmultipath/checkers: make RADOS checker optional
  * multipathd: fixup check for new path states (bsc#1019798)
  * tur: Add pthread_testcancel() (bsc#101979)
  * kpartx: sanitize delete partitions (bsc#100869)
  * libmultipath: coalesce_paths: trigger uevent if nothing done
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: differentiate ACT_NOTHING and ACT_IMPOSSIBLE
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: reload map if not known to udev
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: sysfs_attr_set_value: use const char*
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: select_action: check special features separately
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: treat aminio like assemble_map does
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: skip no_path_retry check
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: handle "retain_attached_hw_handler"
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: print log msg if no_path_retry cant be set
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_features: log msg if queue_if_no_path is ignored
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: use weaker "force_reload" at startup
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: imply -n if find_multipaths is set (bsc#1012910)
  * multipath: ignore -i if find_multipaths is set (bsc#1012910)
  * libmultipath: move suspend logic to _dm_flush_map (bsc#986838)
  * multipath -ll: set DI_SERIAL (bsc#991432)
  * libmultipath: use existing alias from bindings file (bsc#1005255)
  * libmultipath/discovery: do not cache 'access_state' sysfs attribute (bsc#1004858)
  * multipathd: issue systemd READY after initial configuration (bsc#1006469)
  * multipath: avoid crash when using modified configuration (bsc#1000914)
  * multipathd: Set CLI timeout correctly (bsc#999061)
  * libmultipath: Do not crash on empty features (bsc#994812)
  * libmultipath: fall back to search paths by devt (bsc#995645)
  * multipathd: set timeout for CLI commands correctly (bsc#999061)
  * Invalid error code when using multipathd CLI
  * multipath: do not check daemon from udev rules (bsc#986734)
  * Add support for "multipath=off" and "nompath" on kernel cmdline
  * multipathd: start daemon after udev trigger (bsc#98673)
  * multipathd.service: fixup Wants= and Before= statements (bsc#1019181, bsc#991742, bsc#986734)
- Update to current upstream (0.6.4-65-ga2675025)
  * Avoid that reloading a map sporadically triggers I/O errors
  * fix udev rules for failed multipath devices
  * multipathd: allow resetting stats
  * multipathd: add messages on delayed path addition
  * multipathd: don't update priority of failed paths
  * libmultipath: cleanup orphan device states
  * libmultipath: add detect_checker option
  * kpartx: don't keep creating recursive partitions
  * multipath-tools: Introducing multipath C API
  * multipath-tools: sync valgrind.h with 3.12 upstream
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * Fill NVMe specific path info
  * Don't blacklist nvme
  * multipath-tools: fix misspellings
  * multipath-tools: git should ignore rej and orig files
  * Include sys/sysmacros.h
  * Tolerate modprobe failures in multipathd.service
  * multipath-tools: Remove trailing and leading whitespaces
  * multipath-tools: Perform socket client uid check on IPC commands.
  * multipath-tools: Set errno mpath_recv_reply() when failure
  * multipath-tools: New way to limit the IPC command length.
  * multipath-tools: libmultipath: Removed unused functions.
  * multipath-tools: libmultipath: fix gcc link failure on rcu_register_thread_mb.
  * multipath-tools: multipathd: Fix memory leak on load_config().
  * [multipathd] Remove trailing whitespaces
  * multipathd: deterministic io throughput in multipath</changelog>
<changelog author="mwilck@suse.com" date="1488283201">- Update to version 0.6.4+102.df7d367e:
  * libmultipath/propsel: Do not select sysfs prioritizer for RDAC arrays
    (bsc#1004858)</changelog>
<changelog author="mwilck@suse.com" date="1488369600">- spec file changes: optional librados and libdmmp support
  * enabled by default on Factory and Leap
    (disable with --without-rados, --without-libdmmp)
  * disabled by default on SLES12
    (enable with --with-rados, --with-libdmmp)
  * libdmmp0_1_0 and libdmmp-devel as separate packages
  * minor fixes for RPMLINT warnings
- Update to version 0.6.4+102.0119472d:
  * rebased, code-wise identical to previous checkout</changelog>
<changelog author="mwilck@suse.com" date="1489147200">- Spec file: Added dependency on sg3_utils (#boo1028857)</changelog>
<changelog author="mwilck@suse.com" date="1489147201">- Update to version 0.6.4+103+suse.bcb5d0f4:
  * changed to official github repo openSUSE/multipath-tools
    (no changes code-wise)</changelog>
<changelog author="mwilck@suse.com" date="1490097600">- Spec file: disable librados for architectures for which ceph
  is not built
- Spec file: enable librados by default for SLES12 SP3, disable
  it on Leap &lt;= 42.1
- Update to version 0.6.4+104+suse.ac0df678:
  * multipathd: fix SIGUSR2 handling</changelog>
<changelog author="mwilck@suse.com" date="1490270400">- Enable rados for SLES only for x86_64 and aarch64 (ceph is currently
  disabled on SLES on s390x and ppc64le) (bsc#1030699)
- Downgrade to version 0.6.4+103+suse.bcb5d0f4:
  * temporarily remove commit "multipathd: fix SIGUSR2 handling"
  until it's merged in official repo (bsc#1030699)</changelog>
<changelog author="mwilck@suse.com" date="1490356800">- spec file changes suggested by factory review team (bsc#1030699)
  * RPM group adjustments.
  * Avoid %__ macro indirections</changelog>
<changelog author="mwilck@suse.com" date="1493294400">- spec file: Disable RADOS support for i586 on Leap 42.x (bsc#1036271)
- spec file: Move libdmmp to /usr/lib[64] (bsc#1036652)
- Update to version 0.7.1+7+suse.3edc5f7d:
  * kpartx: use mapname if no uuid is present (bsc#1033541)
  * kpartx: relax check when checking for a kpartx device (bsc#1033541)
  * libmpathpersist: use extern struct udev (bsc#1027188)
  * kpartx: include sys/sysmacros.h (fix compilation warning)
- Update to upstream version 0.7.1:
  * multipath-tools: improve processing efficiency for addition and deletion of multipath devices
  * uevent_can_discard: optimize devpath check
  * multipathd: fix SIGUSR2 handling
  * multipath-tools: clean up libdmmp/Makefile
  * multipath-tools: libdmmp: Fix incorrect use of __attribute__
  * multipath-tools: Remove trailing whitespaces
  * multipath-tools: add missing "-l" flag for pthread in libdmmp/Makefile
  * multipath-tools: build objects for libdmmp and libmpathpersist independently
  * libdmmp: minor Makefile cleanup
  * multipath-tools: remove incdir from Makefiles
  * libdmmp: don't disconnect from multipathd twice
  * multipathd: don't call strlen on NULL variables
  * libdmmp: move libdmmp.pc install location
  * multipathd: drop lock before calling uev_add_path
  * multipathd: allow devices to switch from RW to RO
  * libmultipath: don't set max_sectors_kb on reloads
  * Remove a trailing tab
  * multipath: fix segfault with disable_changed_wwids
  * multipath-tools: amend text from multipath/multipath.conf.5
  * Bump the version code and date
  * multipath-tools: replace multipath configuration output
  * Revert "multipathd: set timeout for CLI commands correctly"
  * libmultipath: fix skip_kpartx support for removing maps
  * Bump version to 0.7.1</changelog>
<changelog author="mwilck@suse.com" date="1500552000">- Update to version 0.7.1+11+suse.246dd815
  * libmultipath: get_udev_uid: make sure pp-&gt;wwid is 0-terminated
  (bsc#1048146)
  * libmultipath: drop uevent_can_discard_by_devpath (bsc#1048052)
  * libmultipath: only listen for uevents with DEVTYPE=disk
  (bsc#1048052)
  * libmultipath: fix over-long NVME WWIDs
  (bsc#1048146)
- _service: Pull this from the branch sles12-sp3-fixes (minimal set
  of fixes against SLE12-SP3 RC2). Use match-tag to generate correct
  version</changelog>

</package>
<package pkgid="0f4b065b0ae29fd207099ae63a9af8940dee3b1bd630e278e53082580c805f65" name="libebml" arch="src">
    <version epoch="0" ver="1.3.5" rel="5.1"/>

<changelog author="cmorve69@yahoo.es" date="1275739200">- Update to version 1.0.0
  - Fix more issues which came to light with the recent push of
    WebM -- mostly regarding elements with unknown sizes.</changelog>
<changelog author="coolo@novell.com" date="1280318400">- fix build in renaming shared library package</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
<changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
<changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
<changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
<changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
<changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
<changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
<changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
<changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
<changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
<changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
<changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
<changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
<changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
<changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference. Fixes boo#1056669.</changelog>

</package>
<package pkgid="90656e875013d1d2b5bc46fbda88401dd4cb83c9444b30c978e094683e17ca33" name="libebml-devel" arch="x86_64">
    <version epoch="0" ver="1.3.5" rel="5.1"/>

<changelog author="cmorve69@yahoo.es" date="1275739200">- Update to version 1.0.0
  - Fix more issues which came to light with the recent push of
    WebM -- mostly regarding elements with unknown sizes.</changelog>
<changelog author="coolo@novell.com" date="1280318400">- fix build in renaming shared library package</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
<changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
<changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
<changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
<changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
<changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
<changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
<changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
<changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
<changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
<changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
<changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
<changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
<changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
<changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference. Fixes boo#1056669.</changelog>

</package>
<package pkgid="afa63305bce7675626b8185a1e721d4c007a9ebab5a5b123e7c2bb0c10c80b31" name="libebml4" arch="x86_64">
    <version epoch="0" ver="1.3.5" rel="5.1"/>

<changelog author="cmorve69@yahoo.es" date="1275739200">- Update to version 1.0.0
  - Fix more issues which came to light with the recent push of
    WebM -- mostly regarding elements with unknown sizes.</changelog>
<changelog author="coolo@novell.com" date="1280318400">- fix build in renaming shared library package</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
<changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
<changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
<changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
<changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
<changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
<changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
<changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
<changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
<changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
<changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
<changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
<changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
<changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
<changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference. Fixes boo#1056669.</changelog>

</package>
<package pkgid="20283c7a274d342b7ec623a099236f0df808dbaed98b67113647536d33149125" name="libebml4-32bit" arch="x86_64">
    <version epoch="0" ver="1.3.5" rel="5.1"/>

<changelog author="cmorve69@yahoo.es" date="1275739200">- Update to version 1.0.0
  - Fix more issues which came to light with the recent push of
    WebM -- mostly regarding elements with unknown sizes.</changelog>
<changelog author="coolo@novell.com" date="1280318400">- fix build in renaming shared library package</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
<changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
<changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
<changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
<changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
<changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
<changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
<changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
<changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
<changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
<changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
<changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
<changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
<changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
<changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference. Fixes boo#1056669.</changelog>

</package>
<package pkgid="f2045444aa9195dab556861842d36243cf93f462be8607365b199e01d9480095" name="libecpg6" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="0d7018244033dcda06049d655313c5ccc92cab3f01b7d2c2261937557fbc0e9a" name="libecpg6" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="ec056deddb553bde814d78e5b68d46c42946c671283f45b9bb4cf77936d17eeb" name="libecpg6-32bit" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="9829642480cb572a5a236bcce331262f9df4b4fb9265d4eac78b50284043d0b7" name="libecpg6-32bit" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="6f9d163e486e1962dac89bdab10c883e394bc8688766040fb1c8c5264940f115" name="libeditorconfig-devel" arch="x86_64">
    <version epoch="0" ver="0.12.1" rel="5.1"/>

<changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
<changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
<changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>

</package>
<package pkgid="930440c69ea465382a8960fdbf07710a2565d1d7e6ae35780dd9b3ce8f8b7ab0" name="libeditorconfig-devel-32bit" arch="x86_64">
    <version epoch="0" ver="0.12.1" rel="5.1"/>

<changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
<changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
<changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>

</package>
<package pkgid="503fd5d069bd3a4ccffc8fa512022464812abb1d6733890b1e9d018471bb8d91" name="libeditorconfig0" arch="x86_64">
    <version epoch="0" ver="0.12.1" rel="5.1"/>

<changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
<changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
<changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>

</package>
<package pkgid="563501984290c94b2a77be5639d85cb29c8dde8ed32ea5fe2c5f729fcd96f264" name="libeditorconfig0-32bit" arch="x86_64">
    <version epoch="0" ver="0.12.1" rel="5.1"/>

<changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
<changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
<changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>

</package>
<package pkgid="106ba5e8cf58a052be84afac6d5742014d38f7a7bd9d6b1b0f2ff01f154a2c28" name="libevdocument3-4" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="084419dc28ade973e361ac8c5797e50a8739e37ae8055a49126a4e8549809429" name="libevview3-3" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="fd8a840e2f840a03d22c08531c62f2ba788d03941a547ba3f1606d611f78c18f" name="libexiv2-14" arch="x86_64">
    <version epoch="0" ver="0.25" rel="10.1"/>

<changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
<changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
<changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
<changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
<changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
<changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
<changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
<changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
<changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
<changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
<changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
<changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
<changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
<changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
<changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
<changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
<changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>

</package>
<package pkgid="41c8809c413ad1a4980b5bbd68856486e6ed6515effa61d79f15e399fbd19dd7" name="libexiv2-14-32bit" arch="x86_64">
    <version epoch="0" ver="0.25" rel="10.1"/>

<changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
<changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
<changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
<changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
<changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
<changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
<changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
<changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
<changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
<changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
<changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
<changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
<changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
<changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
<changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
<changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
<changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>

</package>
<package pkgid="4870a09b7824acf215ac47cd7b3dfefb7852617433b5d9eaa87d783222c8e9be" name="libexiv2-devel" arch="x86_64">
    <version epoch="0" ver="0.25" rel="10.1"/>

<changelog author="dmueller@suse.de" date="1305892800">- update to 0.21.1:
  Cannot extract exif data from Pentax K-x DNG file.
  Crash when writing Exif.Image.Software.
  Assertion in XmpParser::encode should be an exception.
  Regression: Compilation error with EXV_HAVE_XMP_TOOLKIT undefined.
  Regression: Panasonic RW2 files are missing information.
  - Updated configuration files (config.guess, config.sub).
  - Added new Color Label value to digiKam 2.0.0 XMP namespace.</changelog>
<changelog author="coolo@suse.com" date="1316347200">- update to 0.22
  This release introduces support for Postscript (EPS) images.
  XMP metadata can be read and written from/to EPS images and
  previews are accessible.
  Further it includes a new build environment for MSVC 64 bit
  builds and a number of smaller features and bugfixes.</changelog>
<changelog author="coolo@suse.com" date="1316347201">- ran spec-cleaner</changelog>
<changelog author="jengelh@medozas.de" date="1316347202">- Add BuildRequires: graphviz to resolve "sh: dot: command not
  found" and make doxygen happy</changelog>
<changelog author="vuntz@opensuse.org" date="1335355200">- Update to version 0.23:
  + Add write support for Canon CR2 raw images.
  + Add support for CR2 IFD2 image preview.
  + Add support for Pentax makernotes in Pentax native DNG images.
  + Add several KIPI XMP properties.
  + Add support for Windows Live Photo Gallery face tags.
  + Add MS Photo RegionInfo and MetaWorkingGroup Regions schemas.
  + Update various lens lists
  + Exiv2 utility: Allow to add/set tags without a value with the
    command line tool.
  + Several new minor features.
  + Bugfixes.
- Rename libexiv2-11 subpackage to libexiv2-12 following upstream
  soversion change.</changelog>
<changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
<changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
<changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
<changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
<changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
<changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
<changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
<changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
<changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
<changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
<changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
<changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
<changelog author="dmueller@suse.com" date="1508241600">- add CVE-2017-11591.patch (fixes CVE-2017-11591, bsc#1050257)
- add CVE-2017-11683.patch (fixes CVE-2017-11683, bsc#1051188)
- add CVE-2017-14865-14862-14859.patch (fixes
    CVE-2017-14865 bsc#1061003,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000 )
- add Added-check-for-overflows-in-calculation-of-size.patch,
  add Added-exception-throw-on-Value-pointer-being-null.patch</changelog>

</package>
<package pkgid="c192d3698314789c57ee1763c2055d7ea48a472d423fcf1e4db2836827c72f02" name="libexpat-devel" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="24.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as a source</changelog>
<changelog author="prusnak@suse.cz" date="1262952000">- fix CVE-2009-3560.patch [bnc#566434]</changelog>
<changelog author="prusnak@opensuse.org" date="1298635200">- fix license (MIT) in spec file</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add libexpat-devel to baselibs</changelog>
<changelog author="crrodriguez@opensuse.org" date="1319976000">- Hide non public symbols reusing existing win32 API export/imports
- annotate malloc/realloc-like functions with attribute alloc_size
  to catch possible misuses in calling code.</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="crrodriguez@opensuse.org" date="1329048000">- Put libraries back to %{_libdir}, /usr merge project</changelog>
<changelog author="tabraham@novell.com" date="1331035200">- update to 2.1.0 beta
  * refreshed expat-visibility.patch
  * removed obsolete expat-CVE-2009-3560.patch
  * removed obsolete expat-CVE-2009-2625.patch
  - hash table DOS attack fix
  - accumulated bug fixes and some changes to the build system
  - new conditional feature to make byte offsets for attributes
    and attribute names available</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- update to 2.1.0
  - Bug Fixes:
    [#1742315]: Harmful XML_ParserCreateNS suggestion.
    [#2895533]: CVE-2012-1147 - Resource leak in readfilemap.c.
    [#1785430]: Expat build fails on linux-amd64 with gcc version&gt;=4.1 -O3.
    [#1983953], 2517952, 2517962, 2649838:
    Build modifications using autoreconf instead of buildconf.sh.
    [#2815947], #2884086: OBJEXT and EXEEXT support while building.
    [#1990430]: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
    [#2517938]: xmlwf should return non-zero exit status if not well-formed.
    [#2517946]: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
    [#2855609]: Dangling positionPtr after error.
    [#2894085]: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
    [#2958794]: CVE-2012-1148 - Memory leak in poolGrow.
    [#2990652]: CMake support.
    [#3010819]: UNEXPECTED_STATE with a trailing "%" in entity value.
    [#3206497]: Unitialized memory returned from XML_Parse.
    [#3287849]: make check fails on mingw-w64.
    [#3496608]: CVE-2012-0876 - Hash DOS attack.
  - Patches:
    [#1749198]: pkg-config support.
    [#3010222]: Fix for bug #3010819.
    [#3312568]: CMake support.
    [#3446384]: Report byte offsets for attr names and values.
  - New Features / API changes:
  * Added new API member XML_SetHashSalt() that allows setting an
    intial value (salt) for hash calculations. This is part of the
    fix for bug #3496608 to randomize hash parameters.
  * When compiled with XML_ATTR_INFO defined, adds new API member
    XML_GetAttributeInfo() that allows retrieving the byte
    offsets for attribute names and values (patch #3446384).
  * Added CMake build system.  See bug #2990652 and patch #3312568.
  * Added run-benchmark target to Makefile.in - relies on testdata
    module present in the same relative location as in the repository.</changelog>
<changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
<changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
<changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
<changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
<changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="kstreitova@suse.com" date="1462968000">- add expat-2.1.0-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="kstreitova@suse.com" date="1463486400">- add expat-2.1.0-heap_buffer_overflow.patch to fix multiple
  integer overflows [bnc#980391], [CVE-2015-1283]
- fix some issues with the current version of the
  expat-2.1.0-parser_crashes_on_malformed_input.patch
  [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="tchvatal@suse.com" date="1486036800">- Add patch to fix bnc#983216 and bnc#983215 CVE-2012-6702 CVE-2016-5300
  * expat-2.1.1-CVE-2012-6702.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501675200">- Security fix [bsc#1047236, CVE-2017-9233]
  * External Entity Vulnerability in Expat 2.2.0 And Earlier
  * Added patch expat-CVE-2017-9233.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501761600">- Security fix [bsc#1047240, CVE-2016-9063]
  * Possible integer overflow in XML_Parse
  * Added patch expat-2.1.0-CVE-2016-9063.patch</changelog>

</package>
<package pkgid="e2fe2215d68c96c75c3392d61b2802f2ef117e3da6e9ff300562e5be83487564" name="libexpat-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="24.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as a source</changelog>
<changelog author="prusnak@suse.cz" date="1262952000">- fix CVE-2009-3560.patch [bnc#566434]</changelog>
<changelog author="prusnak@opensuse.org" date="1298635200">- fix license (MIT) in spec file</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add libexpat-devel to baselibs</changelog>
<changelog author="crrodriguez@opensuse.org" date="1319976000">- Hide non public symbols reusing existing win32 API export/imports
- annotate malloc/realloc-like functions with attribute alloc_size
  to catch possible misuses in calling code.</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="crrodriguez@opensuse.org" date="1329048000">- Put libraries back to %{_libdir}, /usr merge project</changelog>
<changelog author="tabraham@novell.com" date="1331035200">- update to 2.1.0 beta
  * refreshed expat-visibility.patch
  * removed obsolete expat-CVE-2009-3560.patch
  * removed obsolete expat-CVE-2009-2625.patch
  - hash table DOS attack fix
  - accumulated bug fixes and some changes to the build system
  - new conditional feature to make byte offsets for attributes
    and attribute names available</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- update to 2.1.0
  - Bug Fixes:
    [#1742315]: Harmful XML_ParserCreateNS suggestion.
    [#2895533]: CVE-2012-1147 - Resource leak in readfilemap.c.
    [#1785430]: Expat build fails on linux-amd64 with gcc version&gt;=4.1 -O3.
    [#1983953], 2517952, 2517962, 2649838:
    Build modifications using autoreconf instead of buildconf.sh.
    [#2815947], #2884086: OBJEXT and EXEEXT support while building.
    [#1990430]: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
    [#2517938]: xmlwf should return non-zero exit status if not well-formed.
    [#2517946]: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
    [#2855609]: Dangling positionPtr after error.
    [#2894085]: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
    [#2958794]: CVE-2012-1148 - Memory leak in poolGrow.
    [#2990652]: CMake support.
    [#3010819]: UNEXPECTED_STATE with a trailing "%" in entity value.
    [#3206497]: Unitialized memory returned from XML_Parse.
    [#3287849]: make check fails on mingw-w64.
    [#3496608]: CVE-2012-0876 - Hash DOS attack.
  - Patches:
    [#1749198]: pkg-config support.
    [#3010222]: Fix for bug #3010819.
    [#3312568]: CMake support.
    [#3446384]: Report byte offsets for attr names and values.
  - New Features / API changes:
  * Added new API member XML_SetHashSalt() that allows setting an
    intial value (salt) for hash calculations. This is part of the
    fix for bug #3496608 to randomize hash parameters.
  * When compiled with XML_ATTR_INFO defined, adds new API member
    XML_GetAttributeInfo() that allows retrieving the byte
    offsets for attribute names and values (patch #3446384).
  * Added CMake build system.  See bug #2990652 and patch #3312568.
  * Added run-benchmark target to Makefile.in - relies on testdata
    module present in the same relative location as in the repository.</changelog>
<changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
<changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
<changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
<changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
<changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="kstreitova@suse.com" date="1462968000">- add expat-2.1.0-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="kstreitova@suse.com" date="1463486400">- add expat-2.1.0-heap_buffer_overflow.patch to fix multiple
  integer overflows [bnc#980391], [CVE-2015-1283]
- fix some issues with the current version of the
  expat-2.1.0-parser_crashes_on_malformed_input.patch
  [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="tchvatal@suse.com" date="1486036800">- Add patch to fix bnc#983216 and bnc#983215 CVE-2012-6702 CVE-2016-5300
  * expat-2.1.1-CVE-2012-6702.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501675200">- Security fix [bsc#1047236, CVE-2017-9233]
  * External Entity Vulnerability in Expat 2.2.0 And Earlier
  * Added patch expat-CVE-2017-9233.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501761600">- Security fix [bsc#1047240, CVE-2016-9063]
  * Possible integer overflow in XML_Parse
  * Added patch expat-2.1.0-CVE-2016-9063.patch</changelog>

</package>
<package pkgid="68917e9e8f7b8bd4717eb33f7ff2b3ea55d997c5eca2640a740c09ea0e1b7ffb" name="libexpat1" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="24.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as a source</changelog>
<changelog author="prusnak@suse.cz" date="1262952000">- fix CVE-2009-3560.patch [bnc#566434]</changelog>
<changelog author="prusnak@opensuse.org" date="1298635200">- fix license (MIT) in spec file</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add libexpat-devel to baselibs</changelog>
<changelog author="crrodriguez@opensuse.org" date="1319976000">- Hide non public symbols reusing existing win32 API export/imports
- annotate malloc/realloc-like functions with attribute alloc_size
  to catch possible misuses in calling code.</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="crrodriguez@opensuse.org" date="1329048000">- Put libraries back to %{_libdir}, /usr merge project</changelog>
<changelog author="tabraham@novell.com" date="1331035200">- update to 2.1.0 beta
  * refreshed expat-visibility.patch
  * removed obsolete expat-CVE-2009-3560.patch
  * removed obsolete expat-CVE-2009-2625.patch
  - hash table DOS attack fix
  - accumulated bug fixes and some changes to the build system
  - new conditional feature to make byte offsets for attributes
    and attribute names available</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- update to 2.1.0
  - Bug Fixes:
    [#1742315]: Harmful XML_ParserCreateNS suggestion.
    [#2895533]: CVE-2012-1147 - Resource leak in readfilemap.c.
    [#1785430]: Expat build fails on linux-amd64 with gcc version&gt;=4.1 -O3.
    [#1983953], 2517952, 2517962, 2649838:
    Build modifications using autoreconf instead of buildconf.sh.
    [#2815947], #2884086: OBJEXT and EXEEXT support while building.
    [#1990430]: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
    [#2517938]: xmlwf should return non-zero exit status if not well-formed.
    [#2517946]: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
    [#2855609]: Dangling positionPtr after error.
    [#2894085]: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
    [#2958794]: CVE-2012-1148 - Memory leak in poolGrow.
    [#2990652]: CMake support.
    [#3010819]: UNEXPECTED_STATE with a trailing "%" in entity value.
    [#3206497]: Unitialized memory returned from XML_Parse.
    [#3287849]: make check fails on mingw-w64.
    [#3496608]: CVE-2012-0876 - Hash DOS attack.
  - Patches:
    [#1749198]: pkg-config support.
    [#3010222]: Fix for bug #3010819.
    [#3312568]: CMake support.
    [#3446384]: Report byte offsets for attr names and values.
  - New Features / API changes:
  * Added new API member XML_SetHashSalt() that allows setting an
    intial value (salt) for hash calculations. This is part of the
    fix for bug #3496608 to randomize hash parameters.
  * When compiled with XML_ATTR_INFO defined, adds new API member
    XML_GetAttributeInfo() that allows retrieving the byte
    offsets for attribute names and values (patch #3446384).
  * Added CMake build system.  See bug #2990652 and patch #3312568.
  * Added run-benchmark target to Makefile.in - relies on testdata
    module present in the same relative location as in the repository.</changelog>
<changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
<changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
<changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
<changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
<changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="kstreitova@suse.com" date="1462968000">- add expat-2.1.0-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="kstreitova@suse.com" date="1463486400">- add expat-2.1.0-heap_buffer_overflow.patch to fix multiple
  integer overflows [bnc#980391], [CVE-2015-1283]
- fix some issues with the current version of the
  expat-2.1.0-parser_crashes_on_malformed_input.patch
  [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="tchvatal@suse.com" date="1486036800">- Add patch to fix bnc#983216 and bnc#983215 CVE-2012-6702 CVE-2016-5300
  * expat-2.1.1-CVE-2012-6702.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501675200">- Security fix [bsc#1047236, CVE-2017-9233]
  * External Entity Vulnerability in Expat 2.2.0 And Earlier
  * Added patch expat-CVE-2017-9233.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501761600">- Security fix [bsc#1047240, CVE-2016-9063]
  * Possible integer overflow in XML_Parse
  * Added patch expat-2.1.0-CVE-2016-9063.patch</changelog>

</package>
<package pkgid="3e3f6f65a3ea2028d8e79cc33d12a2f8f66ea66b08d9c47466a911198d4a8bf8" name="libexpat1-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="24.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as a source</changelog>
<changelog author="prusnak@suse.cz" date="1262952000">- fix CVE-2009-3560.patch [bnc#566434]</changelog>
<changelog author="prusnak@opensuse.org" date="1298635200">- fix license (MIT) in spec file</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add libexpat-devel to baselibs</changelog>
<changelog author="crrodriguez@opensuse.org" date="1319976000">- Hide non public symbols reusing existing win32 API export/imports
- annotate malloc/realloc-like functions with attribute alloc_size
  to catch possible misuses in calling code.</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="crrodriguez@opensuse.org" date="1329048000">- Put libraries back to %{_libdir}, /usr merge project</changelog>
<changelog author="tabraham@novell.com" date="1331035200">- update to 2.1.0 beta
  * refreshed expat-visibility.patch
  * removed obsolete expat-CVE-2009-3560.patch
  * removed obsolete expat-CVE-2009-2625.patch
  - hash table DOS attack fix
  - accumulated bug fixes and some changes to the build system
  - new conditional feature to make byte offsets for attributes
    and attribute names available</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- update to 2.1.0
  - Bug Fixes:
    [#1742315]: Harmful XML_ParserCreateNS suggestion.
    [#2895533]: CVE-2012-1147 - Resource leak in readfilemap.c.
    [#1785430]: Expat build fails on linux-amd64 with gcc version&gt;=4.1 -O3.
    [#1983953], 2517952, 2517962, 2649838:
    Build modifications using autoreconf instead of buildconf.sh.
    [#2815947], #2884086: OBJEXT and EXEEXT support while building.
    [#1990430]: CVE-2009-3720 - Parser crash with special UTF-8 sequences.
    [#2517938]: xmlwf should return non-zero exit status if not well-formed.
    [#2517946]: Wrong statement about XMLDecl in xmlwf.1 and xmlwf.sgml.
    [#2855609]: Dangling positionPtr after error.
    [#2894085]: CVE-2009-3560 - Buffer over-read and crash in big2_toUtf8().
    [#2958794]: CVE-2012-1148 - Memory leak in poolGrow.
    [#2990652]: CMake support.
    [#3010819]: UNEXPECTED_STATE with a trailing "%" in entity value.
    [#3206497]: Unitialized memory returned from XML_Parse.
    [#3287849]: make check fails on mingw-w64.
    [#3496608]: CVE-2012-0876 - Hash DOS attack.
  - Patches:
    [#1749198]: pkg-config support.
    [#3010222]: Fix for bug #3010819.
    [#3312568]: CMake support.
    [#3446384]: Report byte offsets for attr names and values.
  - New Features / API changes:
  * Added new API member XML_SetHashSalt() that allows setting an
    intial value (salt) for hash calculations. This is part of the
    fix for bug #3496608 to randomize hash parameters.
  * When compiled with XML_ATTR_INFO defined, adds new API member
    XML_GetAttributeInfo() that allows retrieving the byte
    offsets for attribute names and values (patch #3446384).
  * Added CMake build system.  See bug #2990652 and patch #3312568.
  * Added run-benchmark target to Makefile.in - relies on testdata
    module present in the same relative location as in the repository.</changelog>
<changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
<changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
<changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
<changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
<changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
<changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="kstreitova@suse.com" date="1462968000">- add expat-2.1.0-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="kstreitova@suse.com" date="1463486400">- add expat-2.1.0-heap_buffer_overflow.patch to fix multiple
  integer overflows [bnc#980391], [CVE-2015-1283]
- fix some issues with the current version of the
  expat-2.1.0-parser_crashes_on_malformed_input.patch
  [bnc#979441], [CVE-2016-0718]</changelog>
<changelog author="tchvatal@suse.com" date="1486036800">- Add patch to fix bnc#983216 and bnc#983215 CVE-2012-6702 CVE-2016-5300
  * expat-2.1.1-CVE-2012-6702.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501675200">- Security fix [bsc#1047236, CVE-2017-9233]
  * External Entity Vulnerability in Expat 2.2.0 And Earlier
  * Added patch expat-CVE-2017-9233.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501761600">- Security fix [bsc#1047240, CVE-2016-9063]
  * Possible integer overflow in XML_Parse
  * Added patch expat-2.1.0-CVE-2016-9063.patch</changelog>

</package>
<package pkgid="767168b76137d66368c65955def5b5c4063f19b300b50af53137a7746148dec5" name="libfaxutil5_5_9" arch="x86_64">
    <version epoch="0" ver="5.5.9" rel="12.1"/>

<changelog author="axel.braun@gmx.de" date="1415793600">- Adapt README.SUSE to renamed service files</changelog>
<changelog author="axel.braun@gmx.de" date="1415966400">-fix inclusion of initscript for SysV startup</changelog>
<changelog author="axel.braun@gmx.de" date="1418558400">- corrected typo (path) in README.SUSE</changelog>
<changelog author="axel.braun@gmx.de" date="1423742400">- fix for bnc#856906</changelog>
<changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
<changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
<changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
<changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
<changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
<changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
<changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
<changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
<changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
<changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
<changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
<changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
<changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
<changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
<changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
<changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>

</package>
<package pkgid="a62cdf0e383b812f2023dc441ba7a77581c9653bd348a165cdeb65d9952a5d08" name="libfdisk-devel" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="4d642eecda54a58dda7db72385338dc751cfe3077c0b7b2faf54c707aaf79103" name="libfdisk-devel-static" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="26f596dec5f5f468f1b953098c51fcea9ec0c78874e2220fbbd53f00c67bbf8d" name="libfdisk1" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="d1a50874bd9ceb61056c15fb6bcbcafb1215bc5eccec8a0e18e741e34fc2e1cc" name="libffi4-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.1"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="9606c99a782d4c34fb30b592832c8debf99314f03d4a4e1a7797075ec0ed0c16" name="libffi4-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.1"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="8330325b136dfe1e224d8bdf5eacf88563011a50a72286bf87a233760c6b99d0" name="libffi48" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.1"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="2258b1a29acc97a8fda2e861f12be69e4cb94011ba20c0bfd398c41ed023c0be" name="libffi48-devel" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.1"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="4cb6d7a61444d6021cffade3cabb7bc354e20d292845e9bbb8bc916cc7132643" name="libffi48-devel-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.1"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="a38235d7d038f4072935394b49fc8e0bb701253a6587baede81ca8905260d0fe" name="libfreebl3" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="255fef915a216204bfa758637cbe7c9471b52593ecb019daadc3fda853a10266" name="libfreebl3-32bit" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="8743430e96391c0e8bc3472d3fff623b1544bd763cafd1b7b01d8a9d79a6aea1" name="libfreerdp2" arch="x86_64">
    <version epoch="0" ver="2.0.0~git.1463131968.4e66df7" rel="6.1"/>

<changelog author="zawertun@gmail.com" date="1333108800">- added freerdp-fix-bitmap-cache.patch fixing a problem with the
  bitmap cache resulting in garbled images
  (https://github.com/FreeRDP/FreeRDP/issues/348)</changelog>
<changelog author="gber@opensuse.org" date="1334836800">- applied fix for a bug in freerdp-fix-bitmap-cache.patch from
  upstream git</changelog>
<changelog author="gber@opensuse.org" date="1335096000">- added freerdp-fix-FindPCSC-macro.patch which fixes the build by
  setting PCSC_LIBRARIES and PCSC_INCLUDE_DIRS variables explicitly
  which are otherwise empty
  (https://github.com/FreeRDP/FreeRDP/issues/562)</changelog>
<changelog author="zawertun@gmail.com" date="1335700800">- added freerdp-fix-incorrect-numlock-state.patch which fixes
  incorrect num lock state when connecting
  (https://github.com/FreeRDP/FreeRDP/pull/564)</changelog>
<changelog author="gber@opensuse.org" date="1350475200">- added freerdp-fix-linking-with-libpulse.patch in order to link
  correctly with libpulse
  (https://github.com/FreeRDP/FreeRDP/issues/418, bnc#785437)</changelog>
<changelog author="gber@opensuse.org" date="1351771200">- added freerdp-fix-pulse-no-device-name.patch in order to fix a
  segfault in case device name is not provided (bnc#785437)</changelog>
<changelog author="gber@opensuse.org" date="1356609600">- build with WITH_SSE2=ON as freerdp now uses runtime detection
  (bnc#793611)</changelog>
<changelog author="dvaleev@suse.com" date="1356696000">- disable SSE2 for powerpc</changelog>
<changelog author="dvaleev@suse.com" date="1356696001">- disable SSE2 for ARM as well</changelog>
<changelog author="dmueller@suse.com" date="1356696002">- only enable SSE2 on x86*</changelog>
<changelog author="kkaempf@suse.com" date="1359028800">- update to 1.0.2
  - bugfix release (no changelog posted)
  - drop patches that are upstream</changelog>
<changelog author="bruno@ioda-net.ch" date="1362657600">- Added patch for issue #811 fixing divide key (/) on keypad for
  1.0x series,
  commit https://github.com/bmiklautz/FreeRDP/commit/e0cc1e60657b5883a907e5da2f70eb27bf0b91f1
- Added changelog
  FreeRDP 1.0.2 is a maintenance release which contains several bug
  and stability fixes.
  * xfreerdp:
  * new parameter --from-stdin - prompts for unspecified arguments
    username, password, domain and host.
  * fix compability with x2go
  * fix keyboard state in remote app
  * documentation fixes
  * fixed crash when started with --authonly (#843)
  * libfreerdp-core:
  * several memory leaks and double frees were fixed
  * support for FastPath PDUs up to 32767
  * register audio only if plugin is registered
  * load extensions after argument parsing
  * libfreerdp-utils:
  * fixed crash when HOME environment variable wasn't set
  * xfreerdp-server:
  * deadlock fixed
  * accept TLSv1 and SSLv3
  * smartcard:
  * don't incorrectly set SCARD_STATE_IGNORE
  * libfreerdp-codec:
  * performance improvement
  * libfreerdp-gdi:
  * support for PatBlt DPa operation
  * plugin:
  * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent
    possible crash
  For a detailed list of changes use "git log 1.0.1..1.0.2"
  known problems:
  * If windows input language is set to german pressing the divde
    key (/) on the keypad results in minus (-) (see issue #811)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378987200">- build with -DOPENSSL_LOAD_CONF so among other things
  the application respects the system's openSSL configuration.</changelog>
<changelog author="lnt-sysadmin@lists.lrz.de" date="1383220800">- Allow build on SLES11:
  * converted pkgconfig() BuildRequires to package names
  * added FindALSA.cmake
  * use 'make install' instead of '%make_install' macro</changelog>
<changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
<changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
<changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
<changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
<changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
<changelog author="fezhang@suse.com" date="1501502400">- Add freerdp-Fix-TALOS-issues.patch: Backport 8292b45, fix a bunch
  of security issues:
  + Out-of-bounds write in license_recv() (bsc#1050714,
    CVE-2017-2834)
  + Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712,
    CVE-2017-2835)
  + Rdp Client Read Server Proprietary Certificate Denial of
    Service (bsc#1050699, CVE-2017-2836)
  + Client GCC Read Server Security Data DoS (bsc#1050704,
    CVE-2017-2837)
  + Client License Read Product Info Denial of Service
    Vulnerability (bsc#1050708, CVE-2017-2838)
  + Client License Read Challenge Packet Denial of Service
    (bsc#1050711, CVE-2017-2839)</changelog>

</package>
<package pkgid="0e643495c4dfa971a21268633df0e366ed180b832b62a8608f56e138d10a4ab8" name="libfreexl1" arch="x86_64">
    <version epoch="0" ver="1.0.4" rel="5.1"/>

<changelog author="tzotsos@opensuse.org" date="1331035200">- Initial build</changelog>
<changelog author="opensuse@dstoecker.de" date="1344686400">- update to 1.0.0d</changelog>
<changelog author="tzotsos@opensuse.org" date="1373198400">- update to 1.0.0e</changelog>
<changelog author="mpluskal@suse.com" date="1422878400">- Cleanup spec file with spec-cleaner
- Enable tests execution during build
- Build documentation
- Update to 1.0.0h (no changelog provided by upstream</changelog>
<changelog author="mpluskal@suse.com" date="1423051200">- Update licence information (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
- Remove static library.</changelog>
<changelog author="mpluskal@suse.com" date="1425729600">- Update to 1.0.0i
  * no changelog provided by upstream</changelog>
<changelog author="opensuse@dstoecker.de" date="1429531200">- update to 1.0.1 (boo#986614)
  * CVE-2015-2753: denial of service (stack corruption) or possibly
    execution of arbitrary code via a crafted sector
    in a workbook
  * CVE-2015-2754: denial of service (stack corruption) and possibly
    execution of arbitrary code via a crafted
    workbook, related to a "premature EOF."
  * CVE-2015-2776: denial of service (memory consumption) via a
    crafted shared strings table in a workbook.</changelog>
<changelog author="mpluskal@suse.com" date="1446292800">- Update to 1.0.2
  * no changelog provided by upstream</changelog>
<changelog author="mpluskal@suse.com" date="1467028800">- Drop html documentation
- Small spec file cleanups
- Referencing security issues fixed in 1.0.1</changelog>
<changelog author="mpluskal@suse.com" date="1505304000">- Update to version 1.0.4:
  * No chagelog provided by upstream
  * CVE-2017-2924 (boo#1058433) from 1.0.3 is fixed
  * CVE-2017-2923 (boo#1058431) from 1.0.3 is fixed
- Small packaging cleanup</changelog>

</package>
<package pkgid="e04c81488a106b73ab1a29a513e4ec8806ae2069de263d0cdf16d0a9db79c12a" name="libgbm-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="e8ec1b3e06c8d627e387ab7b349e8fa9bd5aa5d32c1b3886341105c3b1522c16" name="libgbm-devel-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="bd5d9d56ced9ee88c205888feff285a1e4739305c62f3399335e9ac66490d31b" name="libgbm1" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="4ffbc7af115a7ca961f9df00cb8d3454a1383150c5251643ec1a324e72a693aa" name="libgbm1-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="3d8aff40fdff236eb27a78049b3de2f54ef489280d054573213758b33467cc00" name="libgcc_s1" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="6a17323f8636d406fc09a74d6269d18f3e0ed6711c9f31e4bf83eb8993e243ea" name="libgcc_s1-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="a04917851ca71a2ee95971aeed43ea31581a83fce2b3cae36cf2c662bdea4e82" name="libgcj48" arch="src">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="5d9e9af7ca7bae1d7b01f435b7d483af6b9926129030e1376de179af6878d75b" name="libgcj48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="2c74946561e94f5d03c67a4dc51bbd9f6e77b67c61f0376687f9f9cbe4d36c07" name="libgcj48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="db148ed849c1e17dcf26874ee76594adebbeec88ce56bef93a88e031f2de6baf" name="libgcj48-devel" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="49e2c4f3b4c7c90f53a2da08ff632314fc6eb7029742feaddcc7b7c64f4caa57" name="libgcj48-devel-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="335ef639b2cd6bb57e5dea449092e98ba8c67f7c1704d642dc4349fb70b8c467" name="libgcj48-jar" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="56d47f9609f9f4d36aca175788eb4e1ce0a9ae33d5392b019c07e4e060120079" name="libgcj_bc1" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="8bd3975e48f5f19ebaf44782919d1bed4fc55b0fb662cdf39e3f89d4b9220886" name="libgck-modules-gnome-keyring" arch="x86_64">
    <version epoch="0" ver="3.20.0" rel="7.1"/>

<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 3.17.4:
  + Remove temporary files on failure (bgo#746334).
  + Migrate DBus code to GVariant and GDBus (bgo#622905).
  + Remove the GnuPG agent (bgo#750514).
  + Updated translations.
- Remove %bcond_with gpgagent and all related macros, it has been
  dropped upstream.
- Drop pkgconfig(dbus-1) BuildRequires: No longer needed as
  upstream has migrated it away.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="zaitor@opensuse.org" date="1441454400">- Update to version 3.17.91:
  + More fixes for GDBus migration (bgo#622905).
  + Fix a memory leak (bgo#752919).</changelog>
<changelog author="zaitor@opensuse.org" date="1443528000">- Update to version 3.18.0:
  + Fix test crash (bgo#731802).</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.18.1:
  + Fix regression initializing gnome-keyring-daemon (bgo#756059).
  + Fix regression racing for DBus name during startup
    (bgo#756006).
  + Build and testing fixes (bgo#755873).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.2:
  + Fix regression in ported GDBus prompting (bgo#756032).
  + Other minor fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1445860800">- Add
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fix firefox passwordmanager coupled with non-default keyring,
  also silence a bit of logspam (bgo#756865).</changelog>
<changelog author="zaitor@opensuse.org" date="1446292800">- Update to version 3.18.3:
  + Fix regression looking up secrets in non-default keyring
    (bgo#756865).
  + Fix manpage typos (bgo#756812).
  + Updated translations.
- Drop
  gnome-keyring-dbus-handle-alias-paths-in-lookup_collection.patch:
  Fixed upstream.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add gnome-keyring-bsc932232-use-libgcrypt-allocators.patch and
  gnome-keyring-bsc932232-use-non-fips-md5.patch (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1452600000">- Add gnome-keyring-bsc961271-secmem-mismatch.patch (bsc#961271).
  This fixes a crash caused by mixed calls to egg_secure_free()
  and gcry_free().</changelog>
<changelog author="dimstar@opensuse.org" date="1453204800">- boo#962480: Add mdm as valid display manager to unlock gkr.</changelog>
<changelog author="dimstar@opensuse.org" date="1453204801">- Update to version 3.19.4:
  + Fix up startup and initialization (bgo#756324).
  + Fix DBus "Type" property of org.freedesktop.Secret.Item
    (bgo#759399).
  + Build fixes (bgo#753698).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1455710400">- Update to version 3.19.90:
  + Accept empty passwords for --unlock (bgo#762095).
  + srcdir != builddir fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1457006400">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#966229, bsc#966225). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1462363200">- Rebase gnome-keyring-bsc932232-use-non-fips-md5.patch for
  version 3.20.0 (bsc#932232, bsc#966229, bsc#966225).
- Drop gnome-keyring-bsc961271-secmem-mismatch.patch (fixed
  upstream).</changelog>
<changelog author="fezhang@suse.com" date="1471694400">- Merge
  bnc#903966-SEGV-in-gnome-keyring-daemon-caused-by-calling-free-on-static-string.patch
  into gnome-keyring-896818-reduce-head-msg-length.patch:
  bsc#903966 is just a regression caused by bsc#896818 anyway
  (bsc#896818, bsc#903966, bgo#770170).</changelog>
<changelog author="hpj@suse.com" date="1475236800">- Update gnome-keyring-bsc932232-use-non-fips-md5.patch
  (bsc#994988). Fixes inability to decrypt private ssh
  keys and corruption in stored keyrings. Fix by Michal Koutny
  &lt;michal.koutny@suse.com&gt;.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add gnome-keyring-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="473f2896547158b1b9639a3698003f054a4d510ca1f70eaa3ce49dc6c8635da7" name="libgcrypt" arch="src">
    <version epoch="0" ver="1.6.1" rel="39.1"/>

<changelog author="jmatejek@suse.com" date="1426507200">- updated %post and %postun scripts with correct .info filenames</changelog>
<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="eb925f98f6ef2d3d65e44a94c22cd04ed3470e4d1e17a1abdb47625ebdca84d3" name="libgcrypt" arch="src">
    <version epoch="0" ver="1.6.1" rel="42.1"/>

<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>
<changelog author="vcizek@suse.com" date="1511179200">- Fix a regression in the fix for bsc#1043333 which caused libgcrypt
  to leak file descriptors (bsc#1059723)
  * add libgcrypt-fips_avoid_clash_with_gkd.patch
  * drop libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="6ae786800fe8420ed6975f3aac09aa6077b04f09900ea4fa274925c3c6a2d614" name="libgcrypt-cavs" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="39.1"/>

<changelog author="jmatejek@suse.com" date="1426507200">- updated %post and %postun scripts with correct .info filenames</changelog>
<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="6f93aec08bc9772e590d8075f181e3908613ab64fca695e84efa843d4ea53a13" name="libgcrypt-cavs" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="42.1"/>

<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>
<changelog author="vcizek@suse.com" date="1511179200">- Fix a regression in the fix for bsc#1043333 which caused libgcrypt
  to leak file descriptors (bsc#1059723)
  * add libgcrypt-fips_avoid_clash_with_gkd.patch
  * drop libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="61ba81167e0f25e9c1ba9d952e12124c41c89c1fcee2b2c9d5c007a4023c6fb2" name="libgcrypt-devel" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="39.1"/>

<changelog author="jmatejek@suse.com" date="1426507200">- updated %post and %postun scripts with correct .info filenames</changelog>
<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="3a9ac29c944a4c7938ece893d5e0c23ee3e0a9f7183e10c53b2ce774677aa360" name="libgcrypt-devel" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="42.1"/>

<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>
<changelog author="vcizek@suse.com" date="1511179200">- Fix a regression in the fix for bsc#1043333 which caused libgcrypt
  to leak file descriptors (bsc#1059723)
  * add libgcrypt-fips_avoid_clash_with_gkd.patch
  * drop libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="2ba7b69d4d8c479bfb384f9ab0e50c7d91c80e860f1588c97be43e542de759b4" name="libgcrypt-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="39.1"/>

<changelog author="jmatejek@suse.com" date="1426507200">- updated %post and %postun scripts with correct .info filenames</changelog>
<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="59aecefc6b05cfb4d37c88c4297de2a7ddbae9b1da69730c1dfe7b0afd49b8d9" name="libgcrypt-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="42.1"/>

<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>
<changelog author="vcizek@suse.com" date="1511179200">- Fix a regression in the fix for bsc#1043333 which caused libgcrypt
  to leak file descriptors (bsc#1059723)
  * add libgcrypt-fips_avoid_clash_with_gkd.patch
  * drop libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="c441b1be47c65ea0e40f775f1b00a098adb00a9dcdbcf68947e23e1c7d3717b9" name="libgcrypt20" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="39.1"/>

<changelog author="jmatejek@suse.com" date="1426507200">- updated %post and %postun scripts with correct .info filenames</changelog>
<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="bee48b6e1ca37c2fc7733f00c0a73728c909f930f114378d8140ba18c2d25dd0" name="libgcrypt20" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="42.1"/>

<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>
<changelog author="vcizek@suse.com" date="1511179200">- Fix a regression in the fix for bsc#1043333 which caused libgcrypt
  to leak file descriptors (bsc#1059723)
  * add libgcrypt-fips_avoid_clash_with_gkd.patch
  * drop libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="10944fd7364f04e9495dca756d62d43c880e849f0fbef5d5aa713360255c3672" name="libgcrypt20-32bit" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="39.1"/>

<changelog author="jmatejek@suse.com" date="1426507200">- updated %post and %postun scripts with correct .info filenames</changelog>
<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="ac767742bf5a472f37a33fb87412b512cb9e8e2b7503d9673a764963f30d2f60" name="libgcrypt20-32bit" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="42.1"/>

<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>
<changelog author="vcizek@suse.com" date="1511179200">- Fix a regression in the fix for bsc#1043333 which caused libgcrypt
  to leak file descriptors (bsc#1059723)
  * add libgcrypt-fips_avoid_clash_with_gkd.patch
  * drop libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="10e73784d1418f82a0c93510cb7a960a3ea4fb2ce46abff923304ca19ba2c3ec" name="libgcrypt20-hmac" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="39.1"/>

<changelog author="jmatejek@suse.com" date="1426507200">- updated %post and %postun scripts with correct .info filenames</changelog>
<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="0864819a87f93cc5fe61f2a460f757601becdf4dc83919267b92a1d461c7736b" name="libgcrypt20-hmac" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="42.1"/>

<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>
<changelog author="vcizek@suse.com" date="1511179200">- Fix a regression in the fix for bsc#1043333 which caused libgcrypt
  to leak file descriptors (bsc#1059723)
  * add libgcrypt-fips_avoid_clash_with_gkd.patch
  * drop libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="909865d8fbdca031acd9a5d261840373bcc3c6f48b4877e2ae34841d4eec9ed9" name="libgcrypt20-hmac-32bit" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="39.1"/>

<changelog author="jmatejek@suse.com" date="1426507200">- updated %post and %postun scripts with correct .info filenames</changelog>
<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="463449b990cbf13e3cccd51e0dcdecaa1a43866c51c3d1126924ef7ac06c8d8c" name="libgcrypt20-hmac-32bit" arch="x86_64">
    <version epoch="0" ver="1.6.1" rel="42.1"/>

<changelog author="vcizek@suse.com" date="1430136000">- perform selftests if the module is complete (checksum files are
  installed) (bnc#928740)
  * changed libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="vcizek@suse.com" date="1432209600">- add possibility to specify salt length for RSASSA-PSS verification
  * added libgcrypt-fips_pss.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296000">- enable DRBG reseeding
  * added libgcrypt-1.6.1-drbg-reseeding.patch
  * added drbg_test-reseeding.patch</changelog>
<changelog author="abergmann@suse.com" date="1432296001">- update local cavs_driver.pl copy to the latest version</changelog>
<changelog author="abergmann@suse.com" date="1432296002">- remove obsolete drbg_test.patch added Aug 22 2014, now covered by
  libgcrypt-fips_add_drbg_cavs_test.patch
  * removed drbg_test.patch</changelog>
<changelog author="vcizek@suse.com" date="1432814400">- the RSA decryption needs p &lt; q for CRT to work
  (bnc#929919)
  * added libgcrypt-fips_rsa_p_less_than_q.patch
- minor changes to the testsuite
  * modified libgcrypt-fips_testsuite.patch</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- don't drop privileges when locking secure memory (bsc#938343)
  * added libgcrypt-secmem_dont_drop_privilege.patch</changelog>
<changelog author="vcizek@suse.com" date="1439553600">- fix for CVE-2015-0837 (bsc#920057)
  * Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]
  * added patches:
    libgcrypt-CVE-2015-0837-1.patch
    libgcrypt-CVE-2015-0837-2.patch
    libgcrypt-CVE-2015-0837-3.patch</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#932232).</changelog>
<changelog author="hpj@suse.com" date="1458043200">- Update libgcrypt-bsc932232-avoid-drbg-crash-with-fips.patch
  (bsc#970882). Fixes crashes with GPG key generation.</changelog>
<changelog author="pjanouch@suse.de" date="1459771200">- Add libgcrypt-CVE-2015-7511.patch (bsc#965902),
  fixing side-channel attack on ECDH with Weierstrass curves</changelog>
<changelog author="pjanouch@suse.de" date="1463486400">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
<changelog author="pjanouch@suse.de" date="1471953600">- Add libgcrypt-CVE-2016-6313-1.patch and
  libgcrypt-CVE-2016-6313-2.patch (bsc#994157 CVE-2016-6313)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
<changelog author="vcizek@suse.com" date="1497009600">- Don't require secure memory for the fips selftests (bsc#931932)
  * prevents "Oops, secure memory pool already initialized" warning
- modified libgcrypt-fips_run_selftest_at_constructor.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498824000">- Security fix [CVE-2017-7526, bsc#1046607]
  * libgcrypt-CVE-2017-7526-1.6.1-2.patch
  - Hardening against local side-channel attack
  * libgcrypt-CVE-2017-7526-1.6.1-1.patch
  - Factored code for function (secret) and added new functions
    (secret_core_std, secret_core_crt) in cipher/rsa.c</changelog>
<changelog author="vcizek@suse.com" date="1499169600">- dlsym returns PLT address on s390x, dlopen libgcrypt20.so before
  calling dlsym (bsc#1047008)
  * add libgcrypt-fips-use_dlopen_to_get_hmac_path.patch</changelog>
<changelog author="vcizek@suse.com" date="1499947200">- Avoid seeding the DRBG during FIPS power-up selftests (bsc#1046659)
  * don't call gcry_drbg_instantiate() in healthcheck sanity test to
  save entropy
  * turn off blinding for RSA decryption in selftests_rsa to avoid
    allocation of a random integer
  * add libgcrypt-fips_dont_seed_drbg_in_selftests.patch
- fix a bug in gcry_drbg_healthcheck_sanity() which caused skipping
  some of the tests
  * libgcrypt-fips_drbg_healthcheck_sanity_bug.patch (bsc#1046659#c4)</changelog>
<changelog author="vcizek@suse.com" date="1501070400">- libgcrypt stored an open file descriptor to the random device in
  a static variable between invocations.
  gnome-keyring-daemon on initialization reopens descriptors 0-2
  with /dev/null which caused an infinite loop when libgcrypt
  attempted to read from the random device (bsc#1043333)
  add libgcrypt-fips_no_static_fd_random.patch</changelog>
<changelog author="vcizek@suse.com" date="1511179200">- Fix a regression in the fix for bsc#1043333 which caused libgcrypt
  to leak file descriptors (bsc#1059723)
  * add libgcrypt-fips_avoid_clash_with_gkd.patch
  * drop libgcrypt-fips_no_static_fd_random.patch</changelog>

</package>
<package pkgid="a9568612e3f325511e15280a6ae505a0844ad60027dda39b34e56922ee1b767d" name="libgdk_pixbuf-2_0-0" arch="x86_64">
    <version epoch="0" ver="2.34.0" rel="10.1"/>

<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
<changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
<changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
<changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
<changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
<changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>

</package>
<package pkgid="b4b5ba9e75a1e908389e2cce6809c312bde285e896a9c45b7882f5d8ec01db2c" name="libgdk_pixbuf-2_0-0-32bit" arch="x86_64">
    <version epoch="0" ver="2.34.0" rel="10.1"/>

<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 2.31.4:
  + SVGZ icons in notification GNOME3 (bgo#648815).
  + gdk_pixbuf_apply_embedded_orientation is not working
    (bgo#725582).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 2.31.5:
  + Add support for g_autoptr for all object types (bgo#750497).
  + Avoid a possible divide-by-zero in the pixbuf loader
    (bgo#750440).
  + Remove gettext .pot file hack (bgo#743574).
  + Be more careful about integer overflow (bgo#752297).
  + Updated translations.
- Drop README from docs as it is now empty.
- Add generic www.gnome.org URL to silence a few lint warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1439985600">- Update to version 2.31.6:
  + Really fix bgo#752297. This is CVE-2015-4491.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Update to version 2.31.7:
  + Fix several integer overflows (bgo#753908, bgo#753569).
  + Fix build failure with --disable-modules (bgo#740912).
  + Port animations to GTask.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1442232000">- Add gdk-pixbuf-bgo752297.patch: Check for overflow before
  allocating memory when scaling (bsc#942801 CVE-2015-4491).
  Taken from upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442923200">- Update to version 2.32.0:
  + Fix build issues (bgo#754154).
  + Fix animation loading (bgo#755269).
  + More overflow fixes in the scaling code (bgo#754387).
  + Fix a crash in the tga loader.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1443182400">- Update to version 2.32.1:
  + Make relocations optional.
  + Fix a crash due to overflow when scaling.
  + Drop loaders for some rare image formats: wbmp, ras, pcx.
  + Prevent testsuite failures due to lack of memory.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1444046400">- Add gdk-pixbuf-bsc948790-tga-dos.patch: fix an overflow and DoS
  with a TGA (bsc#948790 CVE-2015-7673).
- Add
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch: Fix
  overflow when scaling a gif (bsc#948791 CVE-2015-7674).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 2.32.2:
  + Avoid some integer overflow possibilities in scaling code.
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1448452800">- Add
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch:
  Fix some more overflows scaling a gif (bsc#948791 CVE-2015-7673).</changelog>
<changelog author="mgorse@suse.com" date="1450699200">- Update to version 2.32.3:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + ico: integer overflow fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 2.33.1:
  + Improve various tests.
  + ico: integer overflow fixes.
  + tga: rewrite the loader, introducing a buffer queue
    abstraction.
  + gif: fix thumbnailing animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1450785601">- Update to version 2.33.2:
  + Fix two crashes in the bmp loader (bgo#747605, bgo#758991).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1451908800">- Add gdk-pixbuf-bsc960155-divide-by-zero.patch -- fix a possible
  divide by zero (bsc#960155).
- Add gdk-pixbuf-2-32-overflow-fixes.patch,
  0001-ico-Protect-against-overflow.patch,
  gdk-pixbuf-bgo747605.patch, and gdk-pixbuf-bgo758991.patch:
  fix various overflows (bsc#958963 CVE-2015-7552).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.34.0:
  + Don't force no static builds on Win32 (bgo#760369).
  + Updated translations.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstreamed patches: gdk-pixbuf-bgo758991.patch,
  0001-pixops-Don-t-overflow-variables-when-shifting-them.patch,
  gdk-pixbuf-bgo747605.patch, gdk-pixbuf-bgo752297.patch,
  0001-ico-Protect-against-overflow.patch,
  0001-pixops-use-gint64-in-more-places-to-avoid-overflow-w.patch,
  gdk-pixbuf-bsc960155-divide-by-zero.patch,
  gdk-pixbuf-bsc948790-tga-dos.patch and
  gdk-pixbuf-2-32-overflow-fixes.patch.</changelog>
<changelog author="mgorse@suse.com" date="1472558400">- Add fixes for some crashes, taken from upstream git (bsc#988745
  bsc#991450 CVE-2016-6352):
  gdk-pixbuf-bgo768688-bmp-overflow.patch
  gdk-pixbuf-bgo768484-ico-set-errors.patch
  gdk-pixbuf-bgo769738-bmp-overflow.patch
  gdk-pixbuf-bgo769170-ico-headers.patch</changelog>
<changelog author="mstaudt@suse.com" date="1481544000">- u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch
  Fix RGBA conversion for big endian X11 environments.
  Fixes (boo#929462), (bsc#1010497)</changelog>
<changelog author="hpj@suse.com" date="1500206400">- Add fixes for crashes, taken from upstream git
  (CVE-2017-2862 bsc#1048289 bgo#784866,
  CVE-2017-2870 bsc#1048544 bgo#780269,
  CVE-2017-6312 bsc#1027024 bgo#779016,
  CVE-2017-6313 bsc#1027025 bgo#779020,
  CVE-2017-6314 bsc#1027026 bgo#779012):
  gdk-pixbuf-cve-2017-2862-jpeg-channels.patch,
  gdk-pixbuf-cve-2017-2870-tiff-mul-overflow.patch,
  gdk-pixbuf-cve-2017-6312-ico-integer-overflow.patch,
  gdk-pixbuf-cve-2017-6313-icns-integer-underflow.patch,
  gdk-pixbuf-cve-2017-6314-tiff-infinite-loop.patch.</changelog>
<changelog author="hpj@suse.com" date="1501156800">- Update gdk-pixbuf-cve-2017-2862-jpeg-channels.patch to fix
  grayscale JPEG breakage (bsc#1049877, bgo#785171).</changelog>

</package>
<package pkgid="0d239064c8714b8724ad9da1a9d8f2b0514ddcb57706d6475ffe064f6279227d" name="libgfortran4" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="194f241c6c2038da3bf04b5800e5079251fb7d222d902d8eaf00c0b902c7c40b" name="libgfortran4-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="99a0dff4e3d20b8c7af88fb789f2d57029bacc11d4e296d3ba216ab16a81b3ab" name="libgnome-desktop-3-12" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
<changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
<changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
<changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>

</package>
<package pkgid="f5cf01f71f1efe98293aa0986ccc296157f8f30b64f1e127fa8827c85458bfa4" name="libgnome-desktop-3-12-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
<changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
<changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
<changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>

</package>
<package pkgid="c409121a54648b024079dbef7c6766e4178fc7ebbce05c8cec08f33a302eb481" name="libgnome-desktop-3-devel" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
<changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
<changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
<changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>

</package>
<package pkgid="040ccbc67e23b4806201f5ff68ed2e059f38b2d21cf9fd0cf82cf43c5cdf3c84" name="libgnome-desktop-3_0-common" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1439899200">- Update to version 3.17.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1441281600">- Update to version 3.17.91:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Support g_autoptr() for all libgnome-desktop object types.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 3.18.1:
  + Drop unneeded includes.
  + gnome-rr: Fix turning off tiled monitors.
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1446206400">- Added
  bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  (bnc#952146, bgo#722664).</changelog>
<changelog author="zaitor@opensuse.org" date="1447070400">- Update to version 3.18.2:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 3.19.1:
  + Fix turning off tiled monitors.
  + Fix thumbnailing of animations.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 3.19.2:
  + Updated translations.</changelog>
<changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 3.19.3:
  + Fixed compiler warning in gnome-rr.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Only version update.
- Changes from version 3.19.4:
  + Capitalize language and territory names.
  + Add default keyboard layout for Mexico and Guatemala.
  + Avoid a crash when thumbnailing.
  + Be more careful when parsing locales.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1457006400">- Update to version 3.19.91:
  + Reduce log spam in thumbnailing.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1457956800">- Update to version 3.19.92:
  + Only version update.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.93:
  + Add a way to get the frequency for a mode as a floating number.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.1:
  + No changes.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Refresh gnome-desktop-bnc896687-benq-pnp-id.patch
- Remove upstream patches:
  + bnc952146-wall-clock-replace-ratio-with-colon-on-non-UTF-8-locales.patch
  + gnome-desktop-bgo706229-mouse-cursor.patch
  + gnome-desktop-bgo719428-fix-leak.patch
  + gnome-desktop-bgo719928-display-name.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462881600">- Update to version 3.20.2:
  + No changes.</changelog>
<changelog author="federico@suse.com" date="1464264000">- Update to GNOME 3.20.2  Fate#318572</changelog>
<changelog author="qzhao@suse.com" date="1509710400">- Add gnome-desktop-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>

</package>
<package pkgid="8a5fa13664e2e2eecdc28e6da72b5b44dd2835ee8a4142e4dcb6318075933d6e" name="libgo11" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="1f86ab24c2c06d3ceb96fe6d7472916212cbea2083a67ab362af764e81e34b9e" name="libgo11-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="e5143a0c513abecfc5699f5c639fc6c6b5a49db5f48083bfa3d1909ad65c9dd7" name="libgomp1" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="1efc4eb297230bcb3af755fbd569743f410d9a7ff1b97eaa79ce99e220ffb730" name="libgomp1-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="dd319d36be22f6cfdbf0fe66e34df5ae054039178316cd9202d96fab6aea69f3" name="libgsoap-2_8_46" arch="x86_64">
    <version epoch="0" ver="2.8.46" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1454500800">- Update to new upstream release 2.8.28
  * Added many new API functions to a fully redisigned XML DOM API
  v5 for C and C++ with new DOM API documentation. The redesigned
  DOM API v5 is mostly backward compatible to DOM API v4, but
  with DOM string data members changed to text members. Many API
  functions are added to define a clean interface without having
  to use the DOM structure data members. The
  soap_dom_next_element() function now takes a second parameter
  that is an element pointer to stop deep traversal at (use NULL
  for old behavior). See updated XML DOM and XPath documentation
  for details.
  * Added C serialization to/from strings with new C soap struct
  members const char *soap::is input string to parse from and
  const char **soap:os pointer to string that is set by the
  engine to point to the output. Note that C++ code is unchanged
  and the soap::is and soap::os are still members pointers to
  istream and ostream streams (use std::stringstream for
  input/output from/to strings).
  * Added JSON API C function set_size to set/change array sizes
  and JSON API C function set_struct to create an empty JSON
  object.
  * Improved jsoncpp command line tool to generate JSONPath C code
  and improved overall to generate more compact code.
  * Improved SOAP_DEFAULTNS flag to emit XML default namespace
  declarations.
  * Improved strictness of XML verification under default settings
  (i.e. without requiring SOAP_XML_STRICT).
  * Changed string deserialization when XML content with tags is
  encountered: XML tags are no longer parsed as part of strings.
  You must use XML string type to parse literal XML content or
  use DOM.
- Remove gsoap-allocator.diff, gsoap-reset-error-code.diff
  (merged upstream)
- Add gsoap-00-builtsource.diff, gsoap-03-seqpoint.diff,
  gsoap-no-tcpfastopen-fail.diff</changelog>
<changelog author="jengelh@inai.de" date="1455796800">- Employ full version SO naming because of ABI changes within 2.8.x</changelog>
<changelog author="jengelh@inai.de" date="1458648000">- Update to new upstream release 2.8.29
  * Added new soapcpp2 option `-r` to generate a soapReadme.md report
  that summarizes the input .h file information, the serializable
  C/C++ types, the services, and the generated code.
  * Added new wsdl2h option `-M` to suppress error "must understand
  element with wsdl:required='true'".
  * Upgraded HTTP digest authentication "httpda" plugin to 2.0 to
  support RFC7616 "HTTP Digest Access Authentication" with SHA2
  (replaciing MD5) that is compatibale with RFC2617
  * Updated `wsdl2h` HTTPS-enabled build steps to use upgraded
  "httpda" plugin.
  * Fixed wsdl2h skipping mime:multipartRelated/mime:part.
- Drop gsoap-03-seqpoint.diff, gsoap-mindeflateratio.diff,
  gsoap-no-tcpfastopen-fail.diff (applied upstream)</changelog>
<changelog author="jengelh@inai.de" date="1459771200">- Update to new upstream release 2.8.30
  * Added backtick XML tag name syntax to interface files for
  soapcpp2, which allows for the overriding of the translated tag
  names of struct/class members and service operation parameters,
  see the [Data Bindings
  documentation](http://www.genivia.com/doc/databinding/html#toxsd9-5).
  Older gSOAP versions do not support the backtick tag in the
  generated WSDL and schemas (messages are OK).
  * Added macro `SOAP_MAXLEVEL` to trigger `SOAP_LEVEL` error when
  XML nesting level of inbound XML exceeds the value of
  `SOAP_MAXLEVEL`. Default value is 10000. Redefine `SOAP_MAXLEVEL`
  as needed, with lower values to restrict XML nesting depth for
  receivers to accept.
  * Added macro `SOAP_MAXLENGTH` to trigger `SOAP_LENGTH` content
  length error when string content in inbound XML exceeds the value
  of `SOAP_MAXLENGTH`. Applies to strings that are potentially
  unbounded, i.e. that are not already constrained by XML
  validation maxLength constaints (which could be larger than
  `SOAP_MAXLENGTH`). Default value is zero (0) which means that
  string length is unconstrained if XML validation maxLength is not
  given. Redefine `SOAP_MAXLENGTH` as needed, with lower values to
  restrict string lengths for receivers to accept.
  * Added macro `SOAP_MAXOCCURS` to trigger `SOAP_OCCURS` content
  error when array and container lengths exceed the value of
  `SOAP_MAXOCCURS`. Must be greater than zero (0). Default value is
  100000. Redefine `SOAP_MAXOCCURS` as needed, with lower values to
  restrict array and container lengths for receivers to accept.
  * Updated wsdl2h WS-Policy processing to include WS-RM protocol
  versioning.
  * Improved soapcpp2 generation of WSDL and XSD for unqualified
  C/C++ types or when mixing qualified and unqualified C/C++ types
  and type names.
  * Changed soapcpp2 default behavior for generating WSDL and XSD
  files with *`elementFormDefault="unqualified"`* from the old
  default behavior with *`elementFormDefault="qualified"`*
  * Fixed soapcpp2 crash with enum constants &gt; 255 due to libc
  `isalpha` crashing on some Linux systems.
  * Fixed `import/wsp.h` soapcpp2 compilation error.
  * Fixed soapcpp2 option `-w` that may cause a message response
  element tag name inconsistency with SOAP doc/lit style.
  * Fixed deserialization issue with dynamic arrays of STL
  containers/smart-pointers (i.e. a pointer to an array of
  containers/smart-pointers, which is an unlikely combination to
  use, but should work).
- Remove gsoap-00-builtsource.diff, gsoap-02-typepuns.diff
  (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1462795200">- Update to new upstream release 2.8.31
  * Added engine context `sndbuf` and `rcvbuf` attributes to (re)set
  setsockopt` values for `SO_SNDBUF` and `SO_RCVBUF`, respectively.
  Default value is `SOAP_BUFLEN`, same as engine's internal message
  buffer size. Setting to zero forces the engine to omit the
  `setsockopt` `SO_SNDBUF` and `SOAP_RCVBUF` calls.
  * Improved soapcpp2 option `-t` and `//gsoap ns schema typed: y`
  directive that force the addition of `xsi:type` attributes to XML
  content except for types whose type names are prefixed with an
  underscore (i.e. root elements w/o type as per wsdl2h data
  bindings rules).
  * Fixed wsdl2h 2.8.28-30 parsing of *`xs:unique`* causing wsdl2h to
  skip over schema components. The fix also improved string-based
  parsing of XML content with a fix for 2.8.28-30 XML string
  handling.</changelog>
<changelog author="jengelh@inai.de" date="1464004800">- Update to new upstream release 2.8.32
  * Improved soapcpp2 code generation of type converters
  `int soap_s2T(soap*, const char*, T*)` and
  `const char *soap_T2s(soap*, T)` for primitive and binary types T.
  * Fixed unqualified `xsi:type` content matching with default
  namespace, which may lead to a failure in the 2.8.31 release to
  instantiate derived instances for complexType extensions.</changelog>
<changelog author="jengelh@inai.de" date="1466424000">- Update to new upstream release 2.8.33
  * Updated WS-Trust gsoap/import/wstx.h
  `__wst__RequestSecurityToken` response message parameter to
  `wst__RequestSecurityTokenResponseCollection`
  * Updated WS-Security gsoap/import/wsse.h with optional SAML
  assertions in the Security header.
  * Updated response processing for empty HTTP body with HTTP code
  200 to 202: no longer forces socket close when HTTP keep-alive
  is enabled.
  * Updated `_XML` literal string XML serialization for qualified
  tag names, no longer uses default namespace (as in
  `xmlns="URI"`) but a prefixed tag name only.
  * Updated wsdl2h options `-p` and `-d`, now generates
  `xsd__anyType*` (i.e. with pointer) data members without
  requiring the user to define a typemap.dat rule to do so. This
  change reinstates some of the old behavior of 2.8.23 and
  earlier versions.
  * Fixed wsddapi.c compilation issue on Windows (`usleep`
  replaced).
  * Fixed validation of `simpleType/restriction/length` when
  restriction base is a list that is mapped to a string.
  * Fixed validation of `simpleType/restriction` with base type
  string length bounds restrictions.</changelog>
<changelog author="jengelh@inai.de" date="1474891200">- Update to new upstream release 2.8.36
  * New features include C++ QT type serialization in XML, HTTP
  session management, WADL support for wsdl2h (REST XML apps),
  updated iOS support and more examples, and WS-Security updates
  and fixes.
  * Also includes WS-Trust extensible framework with SAML 1.0/2.0
  tokens, PSHA1 algorithm, and an example WS-Trust client and
  server to request, create, sign, and verify SAML tokens.</changelog>
<changelog author="jengelh@inai.de" date="1477483200">- Update to new upstream release 2.8.37
  * Added server-side HTTP cross-origin resource sharing (CORS)
  access control using HTTP OPTIONS `fopt()` callback.
  * Fixed an issue causing UDP message fragmentation.
  * Fixed `soap_mq` message queue plugin dropping connections.
  * Fixed missing nested [] in arrayType value in SOAP 1.1 encoding.</changelog>
<changelog author="jengelh@inai.de" date="1479211200">- Add gsoap-locale.diff to resolve truncation of "double"
  type floating point numbers when deserializing XML</changelog>
<changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 2.8.39
  * Added auto-generated client-side REST API functions to simplify
  REST GET, PUT, POST operations with XML data.
  * the engine sets the temporary "C" locale for floating point
  conversion on most systems.
- Drop gsoap-locale.diff (upstreamed)</changelog>
<changelog author="jengelh@inai.de" date="1481457600">- Update to new upstream release 2.8.40
  * Improved wsdl2h import/include relative path search.
  * Fixed wsdl2h schema import when imports are deeply nested in
  imports/includes.
  * Fixed MinGW compilation issue.</changelog>
<changelog author="jengelh@inai.de" date="1481630400">- Add gsoap-openssl110.patch to support OpenSSL 1.1.0</changelog>
<changelog author="jengelh@inai.de" date="1484827200">- Update to new upstream release 2.8.41
  * Added updates to support OpenSSL 1.1.0.
  * Added HTTP header `Accept:
    multipart/related,application/xop+xml,*/*;q=0.8` when MTOM is
    expected (i.e. when the input mode flag is set to
    `SOAP_ENC_MTOM`).
  * Improved CORS internals and compatibility.
  * Fixed minor issues with `WITH_NOIO` and `WITH_NO_C_LOCALE`.
- Drop gsoap-openssl110.patch (included upstream)</changelog>
<changelog author="jengelh@inai.de" date="1485259200">- Update to new upstream release 2.8.42
  * Fixed shared pointer to QName string QName output normalization.
  * Improved `WITH_REPLACE_ILLEGAL_UTF8` flag to optionally compile
    the library with: this replaces illegal UTF-8 input/output
    with the replacement character U+FFFD (or define your own
    `SOAP_UNKNOWN_UNICODE_CHAR`).
- Add gsoap-02-implicit.diff</changelog>
<changelog author="jengelh@inai.de" date="1486555200">- Update to new upstream release 2.8.43
  * Added `SSL_CTX_need_tmp_RSA()` check (OpenSSL 1.0.1+
    and LibreSSL).
  * Fixed string length limiting issue in QT QString type
    serializer `custom/qstring.h` and addressed compilation issue
    with other QT types serializers.
  * Fixed `soap_psha1` string buffering.
- Drop gsoap-02-implicit.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 2.8.44
  * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts.
  * Fixed `soap-&gt;os` saved message string NUL termination (a
    problem in C code, not in C++).
- Add gsoap-sslverify.diff</changelog>
<changelog author="jengelh@inai.de" date="1493035200">- Update to new upstream release 2.8.45
  * Fixed an issue with the WSSE plugin that caused WS-Security
    SignedInfo/Reference/Transforms/Transform/InclusiveNamespaces/@PrefixList
    ending up being ignored by the canonicalizer.</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 2.8.46
  * Improved WS-Trust API, updated import/wst.h, import/saml1.h,
    import/saml2.h and import/wsdd.h definitions.
  * Added `soap.client_interface` string to set the client IP
    address interface with `inet_pton()`</changelog>
<changelog author="astieger@suse.com" date="1500465600">- CVE-2017-9765: A remote attacker may have triggered a buffer
  overflow to cause a server crash (denial of service) after
  sending 2GB of a specially crafted XML message, or possibly have
  unspecified futher impact. (bsc#1049348), add CVE-2017-9765.patch</changelog>

</package>
<package pkgid="0a03616c4b1f854630b0db5fd4943bdb2180eeaaaeb53197d9db87d6ded5f964" name="libgtk-3-0" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="8cabf8f0acebafdbccf78c027df4073458f63045173210dad2b9a38c61314c0d" name="libgtk-3-0-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.10" rel="9.1"/>

<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 3.20.1:
  + Active GtkSwitch widgets now use the :checked state, to match
    GtkToggleButton.
  + Bugs fixed: bgo#641354, bgo#763350, bgo#763604, bgo#763659,
    bgo#763731, bgo#763741, bgo#763758, bgo#763779, bgo#763802,
    bgo#763804, bgo#763808, bgo#763859, bgo#763900, bgo#764118.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1459425600">- Update to version 3.20.2:
  + Fix blue background in Emacs windows.
  + Fix a performance issue with excessive redraws.
  + Bugs fixed: bgo#763627, bgo#763783, bgo#763851, bgo#764022,
    bgo#764170, bgo#764210, bgo#764321, bgo#764376.
  + Updated translations.</changelog>
<changelog author="egeorget@openmailbox.org" date="1459512000">- Add gtk3-bgo764174-boo973416-no-undersize.patch: gtkwindow: Don't
  allow unresizable windows to be smaller than required. Patch from
  upstream git (bgo#764174, boo#973416).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Add gtk3-stable-adwaita-fixes.patch: Add upstream adwaita fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add gtk3-Wayland-do-not-resize.patch: wayland: Do not resize with
  the same size, gnome-control-center is calling
  gtk_window_resize() on configure-event signals which leads to a
  busy loop (bgo#764374).</changelog>
<changelog author="dimstar@opensuse.org" date="1460462400">- Update to version 3.20.3:
  + Bugs fixed: bgo#764174, bgo#764203, bgo#764204, bgo#764261,
    bgo#764374, bgo#764378, bgo#764540, bgo#764585, bgo#764664,
    bgo#764686, bgo#764710, bgo#764835.
  + Updated translations.
- Drop gtk3-bgo764174-boo973416-no-undersize.patch,
  gtk3-Wayland-do-not-resize.patch and
  gtk3-stable-adwaita-fixes.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove upstream patches: gtk3-icon-theme-reduce-io.patch,
  gtk3-icon-cache-index-only.patch,
  gtk3-bnc872820-headerbar-decoration-layout.patch,
  gtk3-bsc957399-gdkcairo-surface-error.patch,
  gtk3-bgo725733.patch,
  gtk3-bnc891647-generate-full-builtin-icon-cache.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 3.20.4:
  + Bugs fixed: bgo#573380, bgo#620065, bgo#693077, bgo#749405,
    bgo#761651, bgo#762756, bgo#763768, bgo#764395, bgo#764424,
    bgo#764585, bgo#764825, bgo#764846, bgo#765038, bgo#765065,
    bgo#765066, bgo#765122, bgo#765213, bgo#765238, bgo#765261,
    bgo#765270, bgo#765284, bgo#765471, bgo#765474, bgo#765486,
    bgo#765493, bgo#765496, bgo#765565, bgo#765567, bgo#765592,
    bgo#765640, bgo#765644, bgo#765742, bgo#765790, bgo#765907,
    bgo#765922, bgo#765981, bgo#766166.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1463140800">- Fix libgtk-3-0 dependency on gtk-data: require the data package
  for the latest installed version of libgtk-3-&lt;n&gt;. This is only
  needed for any eventual case where an ABI incompatible libgtk3
  might ever appear in order to allow them to be parallel
  installable - something upstream knows to avoid doing.</changelog>
<changelog author="zaitor@opensuse.org" date="1463659200">- Update to version 3.20.5:
  + Bugs fixed: bgo#763852, bgo#765973, bgo#766175, bgo#766233,
    bgo#766440, bgo#766442.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Update to version 3.20.6:
  + Bugs fixed: bgo#766694, bgo#766323, bgo#766336, bgo#766737.
- Drop gtk3-bnc130159-bgo319483-async-font-selection.patch: It's
  been disabled since version 3.16.2 and upstream closed the bug as
  obsolete back in 2011.</changelog>
<changelog author="badshah400@gmail.com" date="1467633600">- Add gtk3-gtkwindow-realize-toplevel-before-popover.patch:
  GtkWindow: Ensure the toplevel is realized before realizing
  popovers; patch taken from upstream master (bgo#764060).</changelog>
<changelog author="dimstar@opensuse.org" date="1470312000">- Update to version 3.20.7:
  + Bugs fixed: bgo#118959, bgo#674215, bgo#708148, bgo#745622,
    bgo#747206, bgo#764060, bgo#764203, bgo#765924, bgo#766120,
    bgo#766122, bgo#766341, bgo#766643, bgo#766782, bgo#767058,
    bgo#767468, bgo#767705, bgo#767766, bgo#767795, bgo#767848,
    bgo#767851, bgo#768016, bgo#768025, bgo#768082, bgo#768142,
    bgo#768177, bgo#768485, bgo#768657, bgo#768930, bgo#769003,
    bgo#769047.
  + Updated translations.
- Drop gtk3-gtkwindow-realize-toplevel-before-popover.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Update to version 3.20.8:
  + Revert an unintentional bump of the GLib requirement in 3.20.7.</changelog>
<changelog author="dimstar@opensuse.org" date="1470916800">- Fix update-alternatives usage.</changelog>
<changelog author="zaitor@opensuse.org" date="1471435200">- Update to version 3.20.9:
  + Fix headerbar size allocation.
  + Use g_snprintf instead of snprintf.
  + Bugs fixed: bgo#769287, bgo#769603.
  + Updated translations.</changelog>
<changelog author="antoine.belvire@opensuse.org" date="1485172800">- Add gtk3-fix-crash-page-down-GtkListBox.patch: some GTK-based
  applications that use GtkListBox may crash on PgDown input
  (bgo#770703, boo#1021476).</changelog>
<changelog author="zaitor@opensuse.org" date="1487678400">- Update to version 3.20.10:
  + Bugs fixed: bgo#358970, bgo#767391, bgo#770166, bgo#770236,
    bgo#770242, bgo#770332, bgo#770374, bgo#770550, bgo#770614,
    bgo#770624, bgo#770703, bgo#770849, bgo#774695, bgo#774726,
    bgo#775525, bgo#775864, bgo#776560, bgo#779002.
  + Updated translations.
- Drop gtk3-fix-crash-page-down-GtkListBox.patch: Fixed upstream.</changelog>
<changelog author="sreeves@suse.com" date="1490356800">- Add Requires gdk-pixbuf-loader-rsvg. bsc#1007453
    We require adwaita-icon-theme so we need something to load
    the svg icons it provides.</changelog>
<changelog author="fvogt@suse.com" date="1499342400">- Add patch to revert upstream commit breaking DPI autodetection:
  + revert-forced-xftdpi.patch
  + boo#1022830, fate#322401, fdo#98909, kde#367499, bmo#1269274</changelog>

</package>
<package pkgid="d8115bf5b24915277f658409b69327ee0da2205d72c29da6aa3ec111ab9838b8" name="libheimdal" arch="src">
    <version epoch="0" ver="7.4.0" rel="3.1"/>

<changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
<changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>

</package>
<package pkgid="ab65bdc74076b9a41476d6561b67bc352167c83adc29e23602d60e71fff0675a" name="libheimdal" arch="src">
    <version epoch="0" ver="7.4.0" rel="6.1"/>

<changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
<changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>

</package>
<package pkgid="3373594fb66037b910b5968dc689434ad1e6fd5ffca12eccb15feff122c84d48" name="libheimdal" arch="x86_64">
    <version epoch="0" ver="7.4.0" rel="3.1"/>

<changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
<changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>

</package>
<package pkgid="b15194e08742267ab54a0070dacc9df5c5d233a80a3d55f354dc14c91abf8f3b" name="libheimdal" arch="x86_64">
    <version epoch="0" ver="7.4.0" rel="6.1"/>

<changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
<changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>

</package>
<package pkgid="5979f958c851cc839137646bc6678af937e102953bb35d3abf21697ab41eb44a" name="libheimdal-devel" arch="x86_64">
    <version epoch="0" ver="7.4.0" rel="3.1"/>

<changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
<changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>

</package>
<package pkgid="fffeeeac453fdad0bd475d9084252b4af0cebc2efcbfa3dd571e683db5fee588" name="libheimdal-devel" arch="x86_64">
    <version epoch="0" ver="7.4.0" rel="6.1"/>

<changelog author="joerg.lorenzen@ki.tng.de" date="1440936000">- Initial package, version 1.6rc2
- Added patch heimdal-version-script-client.map.patch to add file
  version-script-client.map (File is present in git for tag 1.6rc2
  but missing in tarball).</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441108800">- Some changes in spec file to enable build for SLES.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441195200">- Added Conflicts tags to spec file because devel package conflicts
  with krb5-devel and krb5-mini-devel.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1441454400">- Added a patched instead of the original tarball because only
  shared libraries will be build and source files of these (not to
  be build) programs have problematic licenses.
- Added script heimdal-patch-source.sh to sources.
- Added patch heimdal-patched.diff that fixes configure.ac and
  several Makefile.am files to successfully build patched source.
- Removed unneeded dependencies in spec file for build.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1483790400">- Update to version 7.1.0
- Removed heimdal-version-script-client.map.patch, fixed upstream.
- Fixed heimdal-patched.diff.
- Unfortunately there is no updated changelog file in tarball,
  changes can be seen in source code version control systems
  history log.</changelog>
<changelog author="jengelh@inai.de" date="1486036800">- Summary and RPM group update. Do a direct call to ldconfig
  where possible.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 7.3.0
  - Security
    + Fix transit path validation. Commit f469fc6 (2010-10-02)
    inadvertently caused the previous hop realm to not be added
    to the transit path of issued tickets. This may, in some
    cases, enable bypass of capath policy in Heimdal versions 1.5
    through 7.2.
    Note, this may break sites that rely on the bug. With the bug
    some incomplete [capaths] worked, that should not have.
    These may now break authentication in some cross-realm
    configurations. (CVE-2017-6594)
- Version 7.2.0
  - Bug fixes
    + Portability improvements.
    + More strict parsing of encoded URI components in HTTP KDC.
    + Fixed memory leak in malloc error recovery in NTLM GSSAPI
    mechanism.
    + Avoid overly specific CPU info in krb5-config in aid of
    reproducible builds.
    + Don't do AFS string-to-key tests when feature is disabled.
    + Skip mdb_stat test when the command is not available.
    + Windows: update SHA2 timestamp server.
    + hdb: add missing export
    hdb_generate_key_set_password_with_ks_tuple.
    + Fix signature of hdb_generate_key_set_password().
    + Windows: enable KX509 support in the KDC.
    + kdc: fix kx509 service principal match.
    + iprop: handle case where master sends nothing new.
    + ipropd-slave: fix incorrect error codes.
    + Allow choice of sqlite for HDB pref.
    + check-iprop: don't fail to kill daemons.
    + roken: pidfile -&gt; rk_pidfile.
    + kdc: _kdc_do_kx509 fix use after free error.
    + Do not detect x32 as 64-bit platform.
    + No sys/ttydefaults.h on CYGWIN.
    + Fix check-iprop races.
    + roken_detach_prep() close pipe.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501761600">- Update to version 7.4.0
  - Security
  - Fix CVE-2017-11103: Orpheus' Lyre KDC-REP service name
    validation.
    This is a critical vulnerability.
    In _krb5_extract_ticket() the KDC-REP service name must be
    obtained from encrypted version stored in 'enc_part' instead
    of the unencrypted version stored in 'ticket'.
    Use of the unecrypted version provides an opportunity for
    successful server impersonation and other attacks.
    Identified by Jeffrey Altman, Viktor Duchovni and
    Nico Williams.
    See https://www.orpheus-lyre.info/ for more details.
- Fixed heimdal-patched.diff.</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1512648000">- Added Avoid_NULL_structure_pointer_member_dereference.patch,
  fixes (bsc#1071675).</changelog>

</package>
<package pkgid="1a35d831a7403e05e221a98437434e6f98156eaf27e64b8b5e169a3269150fa5" name="libical" arch="src">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@suse.de" date="1231761600">- Update to version 0.43:
  + Incorporates bugfixes submitted by the GNOME Evolution team.
  + New API call icaltimezone_set_tzid_prefix() to allow downstream
    applications to generate tzid's with custom namespaces.</changelog>
<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="2aff03782ee4e186d1c03482f0abdf3a9b8c391cf74d3e1a4283bdde903cf158" name="libical-devel" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="dd354f50297b0e810df218152782cb8c92335619cdcdf163f290eee5f373226a" name="libical-devel-static" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="77ef855a07f9a0ea6a33a386cd95e514580b027b5ada3ef9439f63009404855d" name="libical-doc" arch="noarch">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="cece2b666437a70a276ce67b95325ab18db6e22f97e0e4bc2d7e0068e3acc780" name="libical1" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="c0229ab13b9478d138fcf665395ef6ea35f2934bc30367ee33d7be4ed9e7e545" name="libical1-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="16.1"/>

<changelog author="msuman@gnome.org" date="1254052800">- Update to version 0.44:
  + Memory leak fixes by Alvaro Manera
  + Various build fixes
- Fixes for rpmlint warnings, remove the '--enable-python' configure
  option as python bindings were broken sometime ago.</changelog>
<changelog author="jengelh@medozas.de" date="1262779200">- Package baselibs.conf
- Enable parallel build</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="gber@opensuse.org" date="1299844800">- update to version 0.46
  + allow control over how components, properties and parameters
    with unknown names are handled
  + renamed static set_zone_directory() to set_zonedir()
  + added appropriate icaltime_* functions as methods to
    icaltimetype
  + added icaltimetype.datetime for converting a icaltimetype to a
    python datetime
  + added icalarray_copy for easy copying of icalarrays
  + renamed icaltimetype.datetime to icaltimetype.as_datetime and
    added icaltimetype.from_datetime staticmethod
  + bugfixes
- correct licensing information
- run autoreconf since tarball misses autconf autgenerated files
  (sf#3072673)
- added libical-0.46-fix-race.patch from upstream svn which fixes a
  race in populating builtin timezone components
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn in order to replace broken ICAL_ERRORS_ARE_FATAL
  preprocessor conditions with the correct check for the macros
  value (sf#3140405)
- added libical-0.46-fix-fatal-error-macro-usage.patch from
  upstream svn which fixes endless loop in the recurrence
  calculation (sf#3177380)</changelog>
<changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321790400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1327320000">- license update: MPL-1.1 or LGPL-2.1
  is a dual license: MPL-1.1 or LGPL-2.1</changelog>
<changelog author="tabraham@novell.com" date="1327752000">- Update to version 0.48
  + Allow duration specifications containing week along with day
    and time. even though this is against the RFC, but apparently
    we generate such durations so we need to be able to read them
    back.  + handle the case of the ATTACH type be explicitly set
    to URI + added a lock to avoid threading problems when
    icaltimezone_parse_zone_tab is called on multiple threads
  + bugfixes
- removed patches deprecated by this release:
  - libical-0.46-fix-race.patch
  - libical-0.46-fix-fatal-error-macro-usage.patch
  - libical-0.46-fix-endless-loop.patch</changelog>
<changelog author="jengelh@medozas.de" date="1327752001">- Changed: The -devel subpackage should require the lib package,
  not the main one</changelog>
<changelog author="toddrme2178@gmail.com" date="1370779200">- New 1.x package.
  This version uses the cmake build system
- Add devel-static subpackage
- Remove unneeded buildrequires
- Changed license from MPL-1.1 to MPL-1.0.  That is the license
  listed in the COPYING file and the headers.
- Removed scripts directory from documentation.  Putting perl
  files in the documentation directory is apparently no longer
  allowed.
- Ran spec-cleaner</changelog>
<changelog author="schwab@linux-m68k.org" date="1371297600">- Build with %{optflags}</changelog>
<changelog author="jengelh@inai.de" date="1411041600">- Use %cmake macros so that %optflags reliably lands on the build
  command lines
- Improve on RPM group classification
- Drop strange Recommends: from libical-doc to libical1
  (the latter does not offer any directly-usable feature when
  the docs are installed).
- Documentation subpackage should be noarch</changelog>
<changelog author="coolo@suse.com" date="1411732800">- disable parallel build, too unreliable</changelog>
<changelog author="cxiong@suse.com" date="1413806400">- Add 941609-typo-fix_icaltime_days_in_year.patch:
  Typo fix "icaltime_days_in_year". This bug doesn't affect any
  functionality of SLE-12, backport for code correctness and
  completeness (bsc#941609).</changelog>
<changelog author="badshah400@gmail.com" date="1419595200">- Update to version 1.0.1:
  + Bug fixes:
  - issue74: Do not escape double quote character
  - issue80,issue92: fix crashes using
    icaltimezone_load_builtin_timezone() recursively
  - Fix icalcomponent_foreach_recurrence() and large durations
    between recurrences (e.g. FREQ=YEARLY)
  - Properly handle UTCOFFSETs of the form +/-00mmss
  - Properly skip bogus dates (e.g. 2/30, 4/31) in
    RRULE:FREQ=MONTHLY
  - Properly handle RRULE:FREQ=MONTHLY;BYDAY;BYMONTHDAY when
    DTSTART isn't on BYDAY
  - Fix RRULE:FREQ=YEARLY;BYDAY;BYWEEKNO - MUST use ISO weeks
  - Properly skip bogus dates (e.g. 2/29) in
    RRULE:FREQ=YEARLY[;BYMONTH][;BYMONTHDAY]
  + Build fixes/features:
  - Autotools build system is removed
  - CMake version 2.8.9 (or higher) is required (was CMake
    version 2.4.0)
  - Add new -DSHARED_ONLY and -DSTATIC_ONLY CMake options
  - Remove -DSTATIC_LIBRARY CMake option
  - MSYS2 builds (fixed instructions)
  - Now can build api documentation with make docs
  + Update tzdata to version 2014g
  + Support added for schedule params: agent, status, force-send
  + Added a UID to the VFREEBUSY component
  + Allow dates &gt; 2038 if sizeof(time_t) &gt; 4
  + Add properties from draft-ietf-tzdist-service
  + Add support for RRULE:FREQ=YEARLY;BYDAY;BYYEARDAY and fixed
    RRULE:FREQ=YEARLY;BYYEARDAY with negative days
  + More regression tests added, in particular for recurrence
  + Almost all compile warnings silenced
  + A bunch of Coverity Scan warnings silenced
  + Package cmake macros installed by package.
- Add libical-sle12-abi.patch:
  use enum values used in prior SLE12 package, for ABI
  compatibility (bsc#954161).
- Drop 941609-typo-fix_icaltime_days_in_year.patch:
  fixed upstream (bsc#941609).</changelog>
<changelog author="coolo@suse.com" date="1422964800">- add reproducible-generator.patch from debian bug report to
  get reproducible builds (and predicatable API actually)</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop libical-sle12-abi.patch:
  use standard libical 1.0.1 ABI for SP2.</changelog>
<changelog author="mgorse@suse.com" date="1497873600">- Add fixes for various crashes:
  libical-boo986631-read-past-end.patch
  libical-parser-sanity-check.patch
  libical-timezone-use-after-free.patch
  libical-boo1015964-use-after-free.patch
  Fixes boo#986631 (CVE-2016-5827), boo#986639 (CVE-2016-5824),
  boo#1015964 (CVE-2016-9584), and boo#1044995.</changelog>

</package>
<package pkgid="2fdaeb65a3c33888484053b5951f494e9afa306d305097a62830a00ceae30611" name="libicu-devel" arch="x86_64">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="d40df72f21213f9137b393020e78b6e55030e67b935f0f1531d11fabf96235e7" name="libicu-devel-32bit" arch="x86_64">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="9ef573407f11b3c98998b92fbb44012cf4d6a369679a59feb42937d73f367eb6" name="libicu-doc" arch="x86_64">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="2c04d08f67a5cff796fd5d455c92ef259ed878c16950bc588a01736f06151c8b" name="libicu52_1" arch="x86_64">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="c9d3e811b5b8a7ec4d4941680bdb80fbe410e62f363809a308010834c0ebc0db" name="libicu52_1-32bit" arch="x86_64">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="14676d139604d7bb10e48e10bf8d93384cb8bf87fca0f1bdcc42d42d12337f84" name="libicu52_1-data" arch="x86_64">
    <version epoch="0" ver="52.1" rel="15.1"/>

<changelog author="jengelh@medozas.de" date="1333454400">- Update to new upstream release 49.1:
  * Unicode 6.1: New scripts &amp; blocks; changes to grapheme break &amp;
  line break property values; some characters change from symbol to
  Po or No; etc.
  * CLDR 21.0.1: Changes in segmentation data to match Unicode 6.1;
  new structures for support of Chinese calendar, for
  context-dependent capitalization, for gender of lists of people,
  for ordinal categories, and for multiple number systems per
  locale; deprecation of "commonlyUsed" element in timezone names;
  removal of "whole-locale" aliases; major cleanups of timezone
  names, delimiter data, abbreviated number data.
  * Support for ISO 4217 numeric currency code
  * See http://site.icu-project.org/download/49 for more</changelog>
<changelog author="cfarrell@suse.com" date="1334059200">- license update: MIT and SUSE-Public-Domain
  This is _not_ IBM Public License code.</changelog>
<changelog author="cfarrell@suse.com" date="1339588800">- license update: SUSE-XFree86-1.0
  The license (as stated in the license.html page) is not upstream at
  http://www.spdx.org/licenses yet - thus, use this version (with SUSE-
  proprietary prefix until the license goes upstream)</changelog>
<changelog author="jengelh@inai.de" date="1342008000">- Remove SuSEconfig.icu; only run the link updater on icu updates
  (FATE#313539)</changelog>
<changelog author="jengelh@inai.de" date="1352894400">- Update to new upstream release 50
  * Unicode 6.2: Turkish Lira Sign, improved word &amp; line segmentation
  (BreakIterator) for symbols
  * CLDR 22.1: Data coverage &amp; quality improved across all major
  languages; new short width type for weekday names; new zhuyin
  (Bopomofo) collation for Chinese; improved data for
  CompactDecimalFormat &amp; RBNF
  * Time zone data: 2012h
  * Ordinal-number support in MessageFormat &amp; PluralRules
  * Deprecate setLocale(locale) in PluralFormat
  * Dictionary-based break iterators (word segmentation)</changelog>
<changelog author="idonmez@suse.com" date="1358596800">- Update to version 50.1.2
  * Fix an ABI regression introduced in 50.1, icu bug#9826</changelog>
<changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  official spdx.org license list now contains an entry for X11</changelog>
<changelog author="jengelh@inai.de" date="1364299200">- Update to new upstream release 51
  * Collation tailorings put native script first;
  non-Gregorian calendar formats are more consistent;
  * Date format/parse now supports CLDR short weekday names
  * Support DisplayContext for date formatting, locale display names
  * Support new timezone pattern characters in LDML spec
  * Support for ?dangi? Korean luni-solar calendar
  * Add CompactDecimalFormat and TerritoryContainment APIs
  * ICU50 regression fix: Affixes set with e.g.
  DecimalFormat::setPositivePrefix were ignored for parse
  * ICU50 regression fix: UNUM_PARSE_INT_ONLY no longer handled
  grouping separator
- Recompress to xz to save space</changelog>
<changelog author="jengelh@inai.de" date="1367841600">- Update RPM group, description, URL</changelog>
<changelog author="jengelh@inai.de" date="1370433600">- Update to new upstream release 51.2
  * Common Locale Data Repository (CLDR) 23.1
  * Time zone database version 2013c
  * Security fixes for font layout and glyph table errors. NOTE:
  Applications must implement
  LEFontInstance::getFontTable(LETag, size_t &amp;length) in their
  LEFontInstance subclasses, so that ICU can properly bounds-check
  font tables.</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add icu-versioning.diff:
  Treat each minor release as a new SONAME (bnc#824262)</changelog>
<changelog author="jengelh@inai.de" date="1373803200">- Change icu-versioning.diff: Resolve libqt4 emitting a warning
  that it cannot dlopen libicui18n.so
- Build I18N data as a plain file rather than as an arch-dependent
  huge shared library
- Add icu-fix-install-mode-files.diff</changelog>
<changelog author="jengelh@inai.de" date="1374580800">- Add missing symlinks and update description in icu-versioning.diff</changelog>
<changelog author="dvaleev@suse.com" date="1375099200">- make filelist depend on architecture
  icudt51b.dat - on BigEndian platforms
  icudt51l.dat - on LittleEndian</changelog>
<changelog author="jengelh@inai.de" date="1384257600">- Update to new upstream release 52.1
  * Unicode 6.3: New bidi control codes, new Bidi_Class property
  values, two new bidi "bracket" properties; for other property
  value changes see the UAX #44 summary.
  * CLDR 24: Improved coverage for top 70+ languages, fractional
  plural rules and forms, many new measurement units, major
  simplification of collation rule syntax, preliminary version of
  European Ordering Rules, new relative fields.
  * New API for converting between Windows time zone ID and IANA tz
  database ID.
  * Implement support for plurals that depend on displayed fractional
  values</changelog>
<changelog author="ro@suse.de" date="1394193600">- s390 is big endian as well</changelog>
<changelog author="coolo@suse.com" date="1402920000">- add icu-fix-tests-depending-on-date.patch to fix build
  see http://sourceforge.net/p/icu/mailman/message/32443311/</changelog>
<changelog author="behlert@suse.de" date="1407931200">- libicu%aversion-data may not be noarch, as it has arch-specific
  content wrt.  endianess [bnc#889837]</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1425038400">- Add icu-CVE-2014-9654.patch:
  Improved checking of regular expression pattern size limits.
  (bnc#917129,CVE-2014-9654)</changelog>
<changelog author="fezhang@suse.com" date="1460030400">- Add icu-CVE-2014-8146.patch:
  Add overflow fix.
  (bsc#929629, CVE-2014-8146)
- Add icu-CVE-2014-8147.patch:
  Fix potential overflow issue.
  (bsc#929629, CVE-2014-8147)</changelog>

</package>
<package pkgid="0b0e98fad7bac343baf8b140f6366ca2fdff38aaa1a4d7e5a19a8505adb326a6" name="libidn2" arch="src">
    <version epoch="0" ver="2.0.4" rel="3.1"/>

<changelog author="vdziewiecki@suse.com" date="1338897600">-Update to 1.25:
  * MSVC: Build fixes related to _GL_ATTRIBUTE_CONST and
    _GL_ATTRIBUTE_PURE.
    Reported by Bartosz Brachaczek &lt;b.brachaczek@gmail.com&gt;.
  * examples: Fix compiler warning about ignoring return value from
    fgets.
  * tests: Ship with a valgrind suppressions file for the strlen
    issue.
  * Update gnulib files and translations.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="jengelh@inai.de" date="1348228800">- Employ shared library package naming</changelog>
<changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 1.28:
  * java buildfixes
  * translation updates
  * improved unit-tests
  * for more read NEWS file</changelog>
<changelog author="uweigand@de.ibm.com" date="1387022400">- Fix gnulib test failure due to SUSE_ASNEEDED.</changelog>
<changelog author="mvyskocil@suse.com" date="1387368000">- Verify source tarball via gpg-offline</changelog>
<changelog author="coolo@suse.com" date="1387454400">- disable gpg-offline again to avoid build cycles</changelog>
<changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
<changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
<changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
<changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
<changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
<changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
<changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
<changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
<changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>

</package>
<package pkgid="e129fa0c9c7d62dae84f31e0f0c99883c9f01a7414c96bcce04d7d459b29583d" name="libidn2-0" arch="x86_64">
    <version epoch="0" ver="2.0.4" rel="3.1"/>

<changelog author="vdziewiecki@suse.com" date="1338897600">-Update to 1.25:
  * MSVC: Build fixes related to _GL_ATTRIBUTE_CONST and
    _GL_ATTRIBUTE_PURE.
    Reported by Bartosz Brachaczek &lt;b.brachaczek@gmail.com&gt;.
  * examples: Fix compiler warning about ignoring return value from
    fgets.
  * tests: Ship with a valgrind suppressions file for the strlen
    issue.
  * Update gnulib files and translations.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="jengelh@inai.de" date="1348228800">- Employ shared library package naming</changelog>
<changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 1.28:
  * java buildfixes
  * translation updates
  * improved unit-tests
  * for more read NEWS file</changelog>
<changelog author="uweigand@de.ibm.com" date="1387022400">- Fix gnulib test failure due to SUSE_ASNEEDED.</changelog>
<changelog author="mvyskocil@suse.com" date="1387368000">- Verify source tarball via gpg-offline</changelog>
<changelog author="coolo@suse.com" date="1387454400">- disable gpg-offline again to avoid build cycles</changelog>
<changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
<changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
<changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
<changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
<changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
<changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
<changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
<changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
<changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>

</package>
<package pkgid="fe0872d1e5c4579cf0985b02c8acf2a96f9e4906851b79329d1d2eb6ccffc698" name="libidn2-0-32bit" arch="x86_64">
    <version epoch="0" ver="2.0.4" rel="3.1"/>

<changelog author="vdziewiecki@suse.com" date="1338897600">-Update to 1.25:
  * MSVC: Build fixes related to _GL_ATTRIBUTE_CONST and
    _GL_ATTRIBUTE_PURE.
    Reported by Bartosz Brachaczek &lt;b.brachaczek@gmail.com&gt;.
  * examples: Fix compiler warning about ignoring return value from
    fgets.
  * tests: Ship with a valgrind suppressions file for the strlen
    issue.
  * Update gnulib files and translations.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="jengelh@inai.de" date="1348228800">- Employ shared library package naming</changelog>
<changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 1.28:
  * java buildfixes
  * translation updates
  * improved unit-tests
  * for more read NEWS file</changelog>
<changelog author="uweigand@de.ibm.com" date="1387022400">- Fix gnulib test failure due to SUSE_ASNEEDED.</changelog>
<changelog author="mvyskocil@suse.com" date="1387368000">- Verify source tarball via gpg-offline</changelog>
<changelog author="coolo@suse.com" date="1387454400">- disable gpg-offline again to avoid build cycles</changelog>
<changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
<changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
<changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
<changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
<changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
<changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
<changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
<changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
<changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>

</package>
<package pkgid="e5793633d904d10c36d741dc591e5f223af2592aa8cfe906417ddc50689d859e" name="libidn2-devel" arch="x86_64">
    <version epoch="0" ver="2.0.4" rel="3.1"/>

<changelog author="vdziewiecki@suse.com" date="1338897600">-Update to 1.25:
  * MSVC: Build fixes related to _GL_ATTRIBUTE_CONST and
    _GL_ATTRIBUTE_PURE.
    Reported by Bartosz Brachaczek &lt;b.brachaczek@gmail.com&gt;.
  * examples: Fix compiler warning about ignoring return value from
    fgets.
  * tests: Ship with a valgrind suppressions file for the strlen
    issue.
  * Update gnulib files and translations.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="jengelh@inai.de" date="1348228800">- Employ shared library package naming</changelog>
<changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 1.28:
  * java buildfixes
  * translation updates
  * improved unit-tests
  * for more read NEWS file</changelog>
<changelog author="uweigand@de.ibm.com" date="1387022400">- Fix gnulib test failure due to SUSE_ASNEEDED.</changelog>
<changelog author="mvyskocil@suse.com" date="1387368000">- Verify source tarball via gpg-offline</changelog>
<changelog author="coolo@suse.com" date="1387454400">- disable gpg-offline again to avoid build cycles</changelog>
<changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
<changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
<changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
<changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
<changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
<changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
<changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
<changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
<changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>

</package>
<package pkgid="eca02dfb960fe50f1adee90712ea129ab6067db4e1e8a845399c0e00296e8de9" name="libidn2-tools" arch="x86_64">
    <version epoch="0" ver="2.0.4" rel="3.1"/>

<changelog author="vdziewiecki@suse.com" date="1338897600">-Update to 1.25:
  * MSVC: Build fixes related to _GL_ATTRIBUTE_CONST and
    _GL_ATTRIBUTE_PURE.
    Reported by Bartosz Brachaczek &lt;b.brachaczek@gmail.com&gt;.
  * examples: Fix compiler warning about ignoring return value from
    fgets.
  * tests: Ship with a valgrind suppressions file for the strlen
    issue.
  * Update gnulib files and translations.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="jengelh@inai.de" date="1348228800">- Employ shared library package naming</changelog>
<changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 1.28:
  * java buildfixes
  * translation updates
  * improved unit-tests
  * for more read NEWS file</changelog>
<changelog author="uweigand@de.ibm.com" date="1387022400">- Fix gnulib test failure due to SUSE_ASNEEDED.</changelog>
<changelog author="mvyskocil@suse.com" date="1387368000">- Verify source tarball via gpg-offline</changelog>
<changelog author="coolo@suse.com" date="1387454400">- disable gpg-offline again to avoid build cycles</changelog>
<changelog author="i@marguerite.su" date="1413806400">- update version 1.29:
  * libidn: Mark internal variable "g_utf8_skip" as static.
  * idn: Flush stdout to simplify for tools that buffer too heavily.
  * i18n: Added Brazilian Portuguese translation.
  * Update gnulib files.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
<changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
<changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
<changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
<changelog author="tchvatal@suse.com" date="1477051200">- Convert to libidn2 package started to being used, namely by curl
- Alternative implementation based on new specification from 2008
  + completely different codebase with no ties to libidn</changelog>
<changelog author="astieger@suse.com" date="1481198400">- update to 0.11:
  * Fix stack underflow in 'idn2' command line tool. [boo#1014473]
  * Fix gdoc script to fix texinfo syntax error.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="shshyukriev@suse.com" date="1484827200">- Update to version 0.16
  * build: Fix idn2_cmd.h build rule.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.15 (released 2017-01-14)
  * Fix out-of-bounds read.
  * Fix NFC input conversion (regression).
  * Shrink TR46 static mapping data.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.14 (released 2016-12-30)
  * build: Fix gentr46map build.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.13:
  * build: Doesn't download external files during build.
  * doc: Clarify license.
  * build: Generate ChangeLog file properly.
  * doc: API documentation related to TR46 flags.
  * API and ABI is backwards compatible with the previous version.
- Update to version 0.12:
  * Builds/links with libunistring.
  * Fix two possible crashes with unchecked NULL pointers.
  * Memleak fix.
  * Binary search for codepoints in tables.
  * Do not taint output variable on error in idn2_register_u8().
  * Do not taint output variable on error in idn2_lookup_u8().
  * Update to Unicode 6.3.0 IDNA tables.
  * Add TR46 / UTS#46 support to API and idn2 utility.
  * Add NFC quick check.
  * Add make target 'check-coverage' for test coverage report.
  * Add tests to increase test code coverage.
  * API and ABI is backwards compatible with the previous version.</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
<changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
<changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
<changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>

</package>
<package pkgid="97861425d69b6925842830d6131ffab1979145e7c82abc96e250aebe248d6b57" name="libipa_hbac-devel" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="0a3d9643073c0e1a68ac9fe75a1d18c2117f24da36016ab32fbda66d11f7ea42" name="libipa_hbac0" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="5ae4870947651a7a72f639a4337ab407cd9da36f9ee2c585fb7ada1fd1016e50" name="libipq-devel" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="58e59cc5a5df92c7469e8148aad166a0bb4676a68350799424067d793e3aee4c" name="libipq0" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="7f5fff7a5416430e04f7ef151bb20369a8f5a92a7ca90bb43749d0a1ea9105bd" name="libiptc-devel" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="ea76295d1250703c7a5ebe713cb0f157f504279b82b6d9073187f0dd4f5d6b91" name="libiptc0" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="dbcd8e41338d12b0e21ecda2ecc99d9815bf58bbd60c8928246f8b1d5a16f49e" name="libitm1" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="c3ee00667dcfacd7886a47d0f57eabac07dcaad34e496e90cd9eb8f6b6174896" name="libitm1-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="bb30b743501202f66b034507e42ca172e539604bd030b7ef322d5d48b2d4c58e" name="libjasper-devel" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="bb3ed9a0b6206470d2ceb036b686de6d635fbe605e97a7f542efc8dbb4262d0f" name="libjasper1" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="b5f4e2da03bc2252709e4945f3a585702eb86d5c3ab3ab1044136bc9ef6f4a32" name="libjasper1-32bit" arch="x86_64">
    <version epoch="0" ver="1.900.14" rel="179.1"/>

<changelog author="nadvornik@suse.com" date="1402574400">- added obsoletes and provides of libjasper-32bit (bnc#881716)</changelog>
<changelog author="nadvornik@suse.com" date="1417521600">- fixed possible overflow CVE-2014-9029 (bnc#906364)</changelog>
<changelog author="nadvornik@suse.com" date="1418990400">- fixed CVE-2014-8137, CVE-2014-8138 (bnc#909474, bnc#909475)</changelog>
<changelog author="nadvornik@suse.com" date="1421236800">- fixed CVE-2014-8157, CVE-2014-8158 (bnc#911837)</changelog>
<changelog author="badshah400@gmail.com" date="1436702400">- Add jasper-jpc_dec.patch to fix failure when manipulating images
  with 4 component color using reversible color translation
  (deb#469786); patch taken from Fedora.</changelog>
<changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
<changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
<changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
<changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
<changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
<changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
<changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
<changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
<changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
<changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
<changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
<changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
<changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
<changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
<changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.</changelog>

</package>
<package pkgid="19d15f739d68d5845d2f6b2b5a6e2cb8972289103c774a77eb084aaabb1f109a" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
    <version epoch="0" ver="2.18.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 2.15.91:
  + Fix rendering artifacts when resizing the window in accelerated
    compositing mode.
  + Remove flickering when leaving accelerated compositing mode.
  + Fix a web process crash when loading duck duck go.
  + Properly handle copy drag and drop operations.
  + Fix a hang when sending an IPC messages fails because socket
    read buffers are full.
  + Ensure we never try to load GTK2 plugins in Wayland.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.15.92:
  + Show the context menu when triggered by the keyboard.
  + Fix web process deadlocks when destroying the media player.
  + Fix web process crashes when loading animated GIFs.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1490011200">- Update to version 2.16.0:
  + Add missing types to WebKitAutocleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1491393600">- Update to version 2.16.1:
  + Fix no-third-party cookies policy in case of redirections.
  + Keep URL fragments after server redirections.
  + Honor GTK+ font settings.
  + Ensure depth and stencil renderbuffers are created on GLESv2.
  + Prevent new navigations from onbeforeunload handler and
    document unload.
  + Disallow beforeunload alerts from web pages users have never
    interacted with.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1494331200">- Update to version 2.16.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix rendering of animated PNGs.
  + Fix playing of some live streams.
  + Update several web inspector icons.
  + Fix the build with NPAPI plugins enabled but X11 disabled.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="dimstar@opensuse.org" date="1495540800">- Drop ncurses-devel BuildRequires: this is no longer required.</changelog>
<changelog author="zaitor@opensuse.org" date="1495713600">- Update to version 2.16.3:
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2496, CVE-2017-2539, CVE-2017-2510.</changelog>
<changelog author="zaitor@opensuse.org" date="1496059200">- Add conditional gcc6-c++ BuildRequires and #!BuildIgnore:
  libgcc_s1 and also and pass -DCMAKE_C_COMPILER=gcc-6 and
  - DCMAKE_CXX_COMPILER=g++-6 to cmake for SLE/Leap, so we can fully
  build Webkit2gtk3 without disabling features.
- Drop webkitgtk-disable-gcc-version-checks.patch, no longer needed
  following above changes.
- Remove the compilation flag to disable FTL JIT, no longer needed
  following above changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 2.16.4 (CVE-2017-2538):
  + Fix web process deadlock when seeking youtube videos.
  + Fix blob downloads.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Fix positioning of popup menus in Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2538.</changelog>
<changelog author="zaitor@opensuse.org" date="1498564800">- Update to version 2.16.5:
  + Fix a web process crash when page finishes loading in several
    web sites.
  + Fix the menu of select elements not showing in some cases under
    Wayland.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897600">- Update to version 2.16.6:
  + Fix rendering of spin buttons with GTK+ &gt;= 3.20 when the entry
    width is too short.
  + Fix the build when Wayland target is enabled and X11 disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-7039, CVE-2017-7018, CVE-2017-7030,
    CVE-2017-7037, CVE-2017-7034, CVE-2017-7055, CVE-2017-7056,
    CVE-2017-7064, CVE-2017-7061, CVE-2017-7048, CVE-2017-7046.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897601">- Update to version 2.17.4:
  + Add API to allow overriding popup menus.
  + Add kinetic scrolling support.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Improve error message when webkit_web_view_run_javascript()
    fails due to a JavaScript exception.
  + Fix artifacts when rendering large images.
  + Fix blob downloads.
  + Fix web process deadlock when seeking youtube videos.
  + Fix alpha premultiplying when using cairo to draw the video
    frames.
  + Fix web process deadlock when closing the remote inspector
    frontend.
  + Update several web inspector icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.3:
  + Add new API to create a WebKitContextMenuItem from a GAction.
  + Fix graphics repaint hungs in accelerated compositing mode
    after a resize.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Improve colors of inspector SVG icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering of PNG images when decoded in more than one
    chunk.
  + Update several web inspector icons.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.
- Changes from version 2.17.1:
  + Switch to use new remote inspector infraestructure instead of
    legacy Web Sockets based one.
  + Add API to enable and handle Web Automation.
  + Load large images asynchronously off the main theead.
  + Use GtkFileChooserNative for open/save dialogs when available.
  + Make file chooser run as modal by default if possible.
  + Fix position of dropdown menus in Wayland.
  + Keep URI fragments after a server redirection.
  + Implement support for aria-haspopup and aria-autocomplete.
  + Implement aria-value support for focusable separators.
  + Fix playing of some live streams.
- Add webkit2gtk3-gcc7.patch: Fix build with gcc7 (webkit#173544).
- Add webkit2gtk3-machine-context.patch: Fix build for ppc64le
  (webkit#173590).</changelog>
<changelog author="zaitor@opensuse.org" date="1501070400">- Update to version 2.17.5:
  + Add initial implementation of WebDriver.
  + Enable GStreamerGL by default when building with GStreamer &gt;=
    1.10.
  + Fix position of context menu in Wayland.
  + Properly close cookies database at network process exit.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Drop webkit2gtk3-gcc7.patch and
  webkit2gtk3-machine-context.patch: Fixed upstream.
- Add pkgconfig(gstreamer-gl-1.0) BuildRequires: New dependency.
- Add explicit Mesa-libEGL-devel, Mesa-libGL-devel,
  Mesa-libGLESv1_CM-devel, Mesa-libGLESv2-devel and
  Mesa-libGLESv3-devel BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 2.17.90:
  + WebCrypto API support is now enabled by default.
  + Add API to provide browser information required by automation.
  + Fix the expiration date of manually added cookies.
  + Add support for alerts in WebDriver.
  + WebKitDatabaseProcess binary has been renamed to
    WebKitStorageProcess.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1503230400">- Update to version 2.17.91:
  + Fix proxy HTTP authentication for HTTPS requests.
  + Stop kinetic scrolling when a zero movement is reached.
  + Fix UI process crash when selecting text.
  + Fix UI process crash when loading a favicon.
  + Properly handle WebDriver click command on option elements.
  + Fix web process crash when resizing the window with accelerated
    compositing enabled.
  + Fix crashes in 32 bit systems due to incorrect use of GVariant.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.17.92:
  + Improve CPU usage when rendering under Wayland in accelerated
    compositing mode.
  + Improve the memory consumption of the UI process under Wayland.
  + Fix rendering issues in some web sites with accelerated
    compositing enabled.
  + Fix a web process crash when closing the WebView.
  + Initialize libgcrypt in the network process too.
  + Show controls if a video element isn?t allowed to play inline.
  + Add support for cookies and screenshots commands in WebDriver.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1504785600">- Add webkit2gtk3-no-return-in-nonvoid.patch: Fix brp error based
  on "warning: control reaches end of non-void function".</changelog>
<changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.18.0:
  + Initial WebDriver support.
  + New remote inspector infrastructure.
  + WebCrypto API support is now enabled by default.
  + GStreamerGL is enabled by default when building with GStreamer
    &gt;= 1.10.
  + Kinetic scrolling support.
  + New API to create a WebKitContextMenuItem from a GAction.
  + New API to allow overriding the popup menu of select elements.</changelog>
<changelog author="fezhang@suse.com" date="1505390400">- Drop gcc6-c++ build conditionals for SLE12 / Leap42.</changelog>
<changelog author="federico@suse.com" date="1507550400">- Add back gcc6 requirement.
- Disable WebCrypto API support, since we don't have libgcrypt-1.7.0.</changelog>

</package>
<package pkgid="a6f8bc1c9f11718d6dc3a2eb9ee1ef7e45d330909ce3802bc0e53a4f7b7dcedc" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
    <version epoch="0" ver="2.18.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 2.15.91:
  + Fix rendering artifacts when resizing the window in accelerated
    compositing mode.
  + Remove flickering when leaving accelerated compositing mode.
  + Fix a web process crash when loading duck duck go.
  + Properly handle copy drag and drop operations.
  + Fix a hang when sending an IPC messages fails because socket
    read buffers are full.
  + Ensure we never try to load GTK2 plugins in Wayland.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.15.92:
  + Show the context menu when triggered by the keyboard.
  + Fix web process deadlocks when destroying the media player.
  + Fix web process crashes when loading animated GIFs.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1490011200">- Update to version 2.16.0:
  + Add missing types to WebKitAutocleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1491393600">- Update to version 2.16.1:
  + Fix no-third-party cookies policy in case of redirections.
  + Keep URL fragments after server redirections.
  + Honor GTK+ font settings.
  + Ensure depth and stencil renderbuffers are created on GLESv2.
  + Prevent new navigations from onbeforeunload handler and
    document unload.
  + Disallow beforeunload alerts from web pages users have never
    interacted with.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1494331200">- Update to version 2.16.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix rendering of animated PNGs.
  + Fix playing of some live streams.
  + Update several web inspector icons.
  + Fix the build with NPAPI plugins enabled but X11 disabled.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="dimstar@opensuse.org" date="1495540800">- Drop ncurses-devel BuildRequires: this is no longer required.</changelog>
<changelog author="zaitor@opensuse.org" date="1495713600">- Update to version 2.16.3:
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2496, CVE-2017-2539, CVE-2017-2510.</changelog>
<changelog author="zaitor@opensuse.org" date="1496059200">- Add conditional gcc6-c++ BuildRequires and #!BuildIgnore:
  libgcc_s1 and also and pass -DCMAKE_C_COMPILER=gcc-6 and
  - DCMAKE_CXX_COMPILER=g++-6 to cmake for SLE/Leap, so we can fully
  build Webkit2gtk3 without disabling features.
- Drop webkitgtk-disable-gcc-version-checks.patch, no longer needed
  following above changes.
- Remove the compilation flag to disable FTL JIT, no longer needed
  following above changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 2.16.4 (CVE-2017-2538):
  + Fix web process deadlock when seeking youtube videos.
  + Fix blob downloads.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Fix positioning of popup menus in Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2538.</changelog>
<changelog author="zaitor@opensuse.org" date="1498564800">- Update to version 2.16.5:
  + Fix a web process crash when page finishes loading in several
    web sites.
  + Fix the menu of select elements not showing in some cases under
    Wayland.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897600">- Update to version 2.16.6:
  + Fix rendering of spin buttons with GTK+ &gt;= 3.20 when the entry
    width is too short.
  + Fix the build when Wayland target is enabled and X11 disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-7039, CVE-2017-7018, CVE-2017-7030,
    CVE-2017-7037, CVE-2017-7034, CVE-2017-7055, CVE-2017-7056,
    CVE-2017-7064, CVE-2017-7061, CVE-2017-7048, CVE-2017-7046.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897601">- Update to version 2.17.4:
  + Add API to allow overriding popup menus.
  + Add kinetic scrolling support.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Improve error message when webkit_web_view_run_javascript()
    fails due to a JavaScript exception.
  + Fix artifacts when rendering large images.
  + Fix blob downloads.
  + Fix web process deadlock when seeking youtube videos.
  + Fix alpha premultiplying when using cairo to draw the video
    frames.
  + Fix web process deadlock when closing the remote inspector
    frontend.
  + Update several web inspector icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.3:
  + Add new API to create a WebKitContextMenuItem from a GAction.
  + Fix graphics repaint hungs in accelerated compositing mode
    after a resize.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Improve colors of inspector SVG icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering of PNG images when decoded in more than one
    chunk.
  + Update several web inspector icons.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.
- Changes from version 2.17.1:
  + Switch to use new remote inspector infraestructure instead of
    legacy Web Sockets based one.
  + Add API to enable and handle Web Automation.
  + Load large images asynchronously off the main theead.
  + Use GtkFileChooserNative for open/save dialogs when available.
  + Make file chooser run as modal by default if possible.
  + Fix position of dropdown menus in Wayland.
  + Keep URI fragments after a server redirection.
  + Implement support for aria-haspopup and aria-autocomplete.
  + Implement aria-value support for focusable separators.
  + Fix playing of some live streams.
- Add webkit2gtk3-gcc7.patch: Fix build with gcc7 (webkit#173544).
- Add webkit2gtk3-machine-context.patch: Fix build for ppc64le
  (webkit#173590).</changelog>
<changelog author="zaitor@opensuse.org" date="1501070400">- Update to version 2.17.5:
  + Add initial implementation of WebDriver.
  + Enable GStreamerGL by default when building with GStreamer &gt;=
    1.10.
  + Fix position of context menu in Wayland.
  + Properly close cookies database at network process exit.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Drop webkit2gtk3-gcc7.patch and
  webkit2gtk3-machine-context.patch: Fixed upstream.
- Add pkgconfig(gstreamer-gl-1.0) BuildRequires: New dependency.
- Add explicit Mesa-libEGL-devel, Mesa-libGL-devel,
  Mesa-libGLESv1_CM-devel, Mesa-libGLESv2-devel and
  Mesa-libGLESv3-devel BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 2.17.90:
  + WebCrypto API support is now enabled by default.
  + Add API to provide browser information required by automation.
  + Fix the expiration date of manually added cookies.
  + Add support for alerts in WebDriver.
  + WebKitDatabaseProcess binary has been renamed to
    WebKitStorageProcess.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1503230400">- Update to version 2.17.91:
  + Fix proxy HTTP authentication for HTTPS requests.
  + Stop kinetic scrolling when a zero movement is reached.
  + Fix UI process crash when selecting text.
  + Fix UI process crash when loading a favicon.
  + Properly handle WebDriver click command on option elements.
  + Fix web process crash when resizing the window with accelerated
    compositing enabled.
  + Fix crashes in 32 bit systems due to incorrect use of GVariant.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.17.92:
  + Improve CPU usage when rendering under Wayland in accelerated
    compositing mode.
  + Improve the memory consumption of the UI process under Wayland.
  + Fix rendering issues in some web sites with accelerated
    compositing enabled.
  + Fix a web process crash when closing the WebView.
  + Initialize libgcrypt in the network process too.
  + Show controls if a video element isn?t allowed to play inline.
  + Add support for cookies and screenshots commands in WebDriver.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1504785600">- Add webkit2gtk3-no-return-in-nonvoid.patch: Fix brp error based
  on "warning: control reaches end of non-void function".</changelog>
<changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.18.0:
  + Initial WebDriver support.
  + New remote inspector infrastructure.
  + WebCrypto API support is now enabled by default.
  + GStreamerGL is enabled by default when building with GStreamer
    &gt;= 1.10.
  + Kinetic scrolling support.
  + New API to create a WebKitContextMenuItem from a GAction.
  + New API to allow overriding the popup menu of select elements.</changelog>
<changelog author="fezhang@suse.com" date="1505390400">- Drop gcc6-c++ build conditionals for SLE12 / Leap42.</changelog>
<changelog author="federico@suse.com" date="1507550400">- Add back gcc6 requirement.
- Disable WebCrypto API support, since we don't have libgcrypt-1.7.0.</changelog>

</package>
<package pkgid="ef16e7a06f88c813655d487b435251ecfab0a389fc0075473bc18067089e4c4a" name="libjpeg-turbo" arch="src">
    <version epoch="0" ver="1.5.2" rel="38.1"/>

<changelog author="idonmez@suse.com" date="1332417600">- Update to version 1.2.0
  * Fixed out-of-bounds read in SSE2 SIMD code
  * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
    be used to check the version of libjpeg-turbo against which
    an application was compiled.
  * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
  * libjpeg-turbo will now correctly decompress erroneous
    CMYK/YCCK JPEGs whose K component is assigned a component ID
    of 1 instead of 4.
  * Added SIMD routines for RGB-to-grayscale color conversion
  * Improved the performance of the C color conversion routines
  * Added a function to the TurboJPEG API that performs lossless
    transforms.
  * Added support for 4:4:0 (transposed 4:2:2) subsampling</changelog>
<changelog author="pgajdos@suse.com" date="1343044800">- Update to version 1.2.1:
  * fixed heap overflow [bnc#771791]</changelog>
<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1368792000">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="tchvatal@suse.com" date="1391774400">- Require libturbojpeg in the devel package.
  Otherwise we just have dangling symlink there.</changelog>
<changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="be8987797283c6b0758a4856d12f43bbd9aafb312a5701077bf055443d5e16f8" name="libjpeg-turbo" arch="x86_64">
    <version epoch="0" ver="1.5.2" rel="38.1"/>

<changelog author="idonmez@suse.com" date="1332417600">- Update to version 1.2.0
  * Fixed out-of-bounds read in SSE2 SIMD code
  * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
    be used to check the version of libjpeg-turbo against which
    an application was compiled.
  * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
  * libjpeg-turbo will now correctly decompress erroneous
    CMYK/YCCK JPEGs whose K component is assigned a component ID
    of 1 instead of 4.
  * Added SIMD routines for RGB-to-grayscale color conversion
  * Improved the performance of the C color conversion routines
  * Added a function to the TurboJPEG API that performs lossless
    transforms.
  * Added support for 4:4:0 (transposed 4:2:2) subsampling</changelog>
<changelog author="pgajdos@suse.com" date="1343044800">- Update to version 1.2.1:
  * fixed heap overflow [bnc#771791]</changelog>
<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1368792000">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="tchvatal@suse.com" date="1391774400">- Require libturbojpeg in the devel package.
  Otherwise we just have dangling symlink there.</changelog>
<changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="3d45a412f99b09e68e48aaf8696955294c89e852077763e3a348998e9bdbb587" name="libjpeg62" arch="x86_64">
    <version epoch="0" ver="62.2.0" rel="38.1"/>

<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1362571200">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="pgajdos@suse.com" date="1362571201">- remove
  %{_bindir}/*
  %doc %{_mandir}/man1/*
  https://bugzilla.novell.com/show_bug.cgi?id=807183#c14</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to·
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1371211200">- by change from Wed Mar  6 11:19:02 UTC 2013, libjpeg62-turbo
  do not provide any binaries, so it should not provide jpeg</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">-  update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1412424000">- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts</changelog>
<changelog author="coolo@suse.com" date="1412683200">- to obsolete old versions better use obsoletes</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="c8ec4f073b367b4d85fd89a4602affb1bdb960c57844493c9d76d4bdbe2bba00" name="libjpeg62-32bit" arch="x86_64">
    <version epoch="0" ver="62.2.0" rel="38.1"/>

<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1362571200">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="pgajdos@suse.com" date="1362571201">- remove
  %{_bindir}/*
  %doc %{_mandir}/man1/*
  https://bugzilla.novell.com/show_bug.cgi?id=807183#c14</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to·
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1371211200">- by change from Wed Mar  6 11:19:02 UTC 2013, libjpeg62-turbo
  do not provide any binaries, so it should not provide jpeg</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">-  update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1412424000">- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts</changelog>
<changelog author="coolo@suse.com" date="1412683200">- to obsolete old versions better use obsoletes</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="b47c2f86e2ba7405328654a15e63af1d080e8d28335fe5f70515698843eb2f17" name="libjpeg62-devel" arch="x86_64">
    <version epoch="0" ver="62.2.0" rel="38.1"/>

<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1362571200">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="pgajdos@suse.com" date="1362571201">- remove
  %{_bindir}/*
  %doc %{_mandir}/man1/*
  https://bugzilla.novell.com/show_bug.cgi?id=807183#c14</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to·
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1371211200">- by change from Wed Mar  6 11:19:02 UTC 2013, libjpeg62-turbo
  do not provide any binaries, so it should not provide jpeg</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">-  update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1412424000">- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts</changelog>
<changelog author="coolo@suse.com" date="1412683200">- to obsolete old versions better use obsoletes</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="811cfd7fe15f10fa01ca437402407422f3e0a2acf84376023207b97e2f19bb8a" name="libjpeg62-devel-32bit" arch="x86_64">
    <version epoch="0" ver="62.2.0" rel="38.1"/>

<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1362571200">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="pgajdos@suse.com" date="1362571201">- remove
  %{_bindir}/*
  %doc %{_mandir}/man1/*
  https://bugzilla.novell.com/show_bug.cgi?id=807183#c14</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to·
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1371211200">- by change from Wed Mar  6 11:19:02 UTC 2013, libjpeg62-turbo
  do not provide any binaries, so it should not provide jpeg</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">-  update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1412424000">- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts</changelog>
<changelog author="coolo@suse.com" date="1412683200">- to obsolete old versions better use obsoletes</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="367eb7255ecdda23d6953ea82a321ed4d812bbde8182ea280ffa253a3d09cc37" name="libjpeg62-turbo" arch="src">
    <version epoch="0" ver="1.5.2" rel="38.1"/>

<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1362571200">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="pgajdos@suse.com" date="1362571201">- remove
  %{_bindir}/*
  %doc %{_mandir}/man1/*
  https://bugzilla.novell.com/show_bug.cgi?id=807183#c14</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to·
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1371211200">- by change from Wed Mar  6 11:19:02 UTC 2013, libjpeg62-turbo
  do not provide any binaries, so it should not provide jpeg</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">-  update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1412424000">- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts</changelog>
<changelog author="coolo@suse.com" date="1412683200">- to obsolete old versions better use obsoletes</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="783a80c498ce395ba978c6f2f56c803fd8d1943d7de1a526f6c2ffb27392c5b4" name="libjpeg62-turbo" arch="x86_64">
    <version epoch="0" ver="1.5.2" rel="38.1"/>

<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1362571200">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="pgajdos@suse.com" date="1362571201">- remove
  %{_bindir}/*
  %doc %{_mandir}/man1/*
  https://bugzilla.novell.com/show_bug.cgi?id=807183#c14</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to·
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1371211200">- by change from Wed Mar  6 11:19:02 UTC 2013, libjpeg62-turbo
  do not provide any binaries, so it should not provide jpeg</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">-  update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1412424000">- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts</changelog>
<changelog author="coolo@suse.com" date="1412683200">- to obsolete old versions better use obsoletes</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="dbee3a2adf92b7460b2bb48a094beac8bec795cb6cf1917de005ec787ca8f80f" name="libjpeg8" arch="x86_64">
    <version epoch="0" ver="8.1.2" rel="38.1"/>

<changelog author="idonmez@suse.com" date="1332417600">- Update to version 1.2.0
  * Fixed out-of-bounds read in SSE2 SIMD code
  * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
    be used to check the version of libjpeg-turbo against which
    an application was compiled.
  * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
  * libjpeg-turbo will now correctly decompress erroneous
    CMYK/YCCK JPEGs whose K component is assigned a component ID
    of 1 instead of 4.
  * Added SIMD routines for RGB-to-grayscale color conversion
  * Improved the performance of the C color conversion routines
  * Added a function to the TurboJPEG API that performs lossless
    transforms.
  * Added support for 4:4:0 (transposed 4:2:2) subsampling</changelog>
<changelog author="pgajdos@suse.com" date="1343044800">- Update to version 1.2.1:
  * fixed heap overflow [bnc#771791]</changelog>
<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1368792000">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="tchvatal@suse.com" date="1391774400">- Require libturbojpeg in the devel package.
  Otherwise we just have dangling symlink there.</changelog>
<changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="fbdc2d1665bc54ae9860812c099dd0dae596c080e0c0eeecbaf808f3d4a73128" name="libjpeg8-32bit" arch="x86_64">
    <version epoch="0" ver="8.1.2" rel="38.1"/>

<changelog author="idonmez@suse.com" date="1332417600">- Update to version 1.2.0
  * Fixed out-of-bounds read in SSE2 SIMD code
  * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
    be used to check the version of libjpeg-turbo against which
    an application was compiled.
  * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
  * libjpeg-turbo will now correctly decompress erroneous
    CMYK/YCCK JPEGs whose K component is assigned a component ID
    of 1 instead of 4.
  * Added SIMD routines for RGB-to-grayscale color conversion
  * Improved the performance of the C color conversion routines
  * Added a function to the TurboJPEG API that performs lossless
    transforms.
  * Added support for 4:4:0 (transposed 4:2:2) subsampling</changelog>
<changelog author="pgajdos@suse.com" date="1343044800">- Update to version 1.2.1:
  * fixed heap overflow [bnc#771791]</changelog>
<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1368792000">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="tchvatal@suse.com" date="1391774400">- Require libturbojpeg in the devel package.
  Otherwise we just have dangling symlink there.</changelog>
<changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="5bef463c2ce804c6bf9c9d92c3e2f89f33dd7e4dfdc533c74b6e8a16dea59ab2" name="libjpeg8-devel" arch="x86_64">
    <version epoch="0" ver="8.1.2" rel="38.1"/>

<changelog author="idonmez@suse.com" date="1332417600">- Update to version 1.2.0
  * Fixed out-of-bounds read in SSE2 SIMD code
  * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
    be used to check the version of libjpeg-turbo against which
    an application was compiled.
  * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
  * libjpeg-turbo will now correctly decompress erroneous
    CMYK/YCCK JPEGs whose K component is assigned a component ID
    of 1 instead of 4.
  * Added SIMD routines for RGB-to-grayscale color conversion
  * Improved the performance of the C color conversion routines
  * Added a function to the TurboJPEG API that performs lossless
    transforms.
  * Added support for 4:4:0 (transposed 4:2:2) subsampling</changelog>
<changelog author="pgajdos@suse.com" date="1343044800">- Update to version 1.2.1:
  * fixed heap overflow [bnc#771791]</changelog>
<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1368792000">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="tchvatal@suse.com" date="1391774400">- Require libturbojpeg in the devel package.
  Otherwise we just have dangling symlink there.</changelog>
<changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="fe01dabe478c441a62aec7858acedeee6fc7f64599ef3e10c43015ea745d12cb" name="libjpeg8-devel-32bit" arch="x86_64">
    <version epoch="0" ver="8.1.2" rel="38.1"/>

<changelog author="idonmez@suse.com" date="1332417600">- Update to version 1.2.0
  * Fixed out-of-bounds read in SSE2 SIMD code
  * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
    be used to check the version of libjpeg-turbo against which
    an application was compiled.
  * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
  * libjpeg-turbo will now correctly decompress erroneous
    CMYK/YCCK JPEGs whose K component is assigned a component ID
    of 1 instead of 4.
  * Added SIMD routines for RGB-to-grayscale color conversion
  * Improved the performance of the C color conversion routines
  * Added a function to the TurboJPEG API that performs lossless
    transforms.
  * Added support for 4:4:0 (transposed 4:2:2) subsampling</changelog>
<changelog author="pgajdos@suse.com" date="1343044800">- Update to version 1.2.1:
  * fixed heap overflow [bnc#771791]</changelog>
<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1368792000">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="tchvatal@suse.com" date="1391774400">- Require libturbojpeg in the devel package.
  Otherwise we just have dangling symlink there.</changelog>
<changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="65c389b27bf20c437b7fb4a86e03fb2d423f3b877791aef2cef321b2079856c7" name="libkcapi" arch="src">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="18cb195a356373404e5d0693703bc4294fd60d6474964e96a8919c46ad79fd74" name="libkcapi-devel" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="417541a5dc2f3b4120a32413eee30ebdabc9e6608198d209b5a4de75b81339a6" name="libkcapi-tools" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="2ac9eacaed5ea6e3fedf7c74d7649bec7b0ab0df98d7d84963382677170c89f0" name="libkcapi0" arch="x86_64">
    <version epoch="0" ver="0.13.0" rel="2.1"/>

<changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
<changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
<changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
<changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
<changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>

</package>
<package pkgid="dc3339d7ff9a550d1537cbfee0b9aa9478ee5941eb0efdc38649413dcfd99605" name="libkcarchiver0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="03fa6e245989136e470347fd95f06b20b054fa532952140b44a91e7bcb0171a1" name="libkcarchivercore0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="65e27e13e0bfa140153c1f9f3ea7a7a78f20d65461f992afaad387bbc3560a27" name="libkcfreebusy0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="5313b1860c5a7c3d99ca326e97669acb4dde3119b3470c0a5d5caf3f95f5dcec" name="libkchl0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="a59d7c696426d6853c69627bba9f8d0d9bc9e5eb50172da54627c976a5068c90" name="libkcicalmapi0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="4fa4223b28a5302b9287d2fd8054b4db877c54e7596e65142213ade77598139c" name="libkcinetmapi0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="05a4328b05a91dab5d2cb00ae0d7f430f2b2d3f01919edbdfe55d680d55ec725" name="libkcmapi0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="f72ebd2042907c688f8b1a406f05767c95d2ef671e9af72d6f01a9c20fd068ca" name="libkcserver0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="1f3588127f174a09380c0a641a6300614ece4f69015087d39aef221d5aff9daa" name="libkcsoap0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="438f5ee42a1c76374533f819046906d7c297a7421726e0d0f7c3f5cada021474" name="libkcssl0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="148dec641c8cb92974ee814e86b1728400699229c21dde205a7c0d05edef9084" name="libkcsync0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="6f9b12ff3aa557ec1d66a63b6a5bdfe69b645c926e6155566a7f02dcacfadf0f" name="libkcutil0" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="46e73ea4fe4dca1adc540d7eec21f9889debde2e5f27931e46b597d643819fdb" name="libktorrent" arch="src">
    <version epoch="0" ver="2.0.1" rel="5.1"/>

<changelog author="davejplater@gmail.com" date="1291118400">- Update to git20101130 to fix (kde#258078)
- Upstream changes :
  * Add LIBKTORRENT_VERSION macro
  * Update MINOR version of master branch to 1
  * Improve MultiDataChecker file handling
  * Privatize PeerManager
  * Use weak pointers in PeerConnector and Authenticate,
  should fix a crash
  * Fix ChangeLog</changelog>
<changelog author="davejplater@gmail.com" date="1292587200">- Update to git20101211 fixes crash see (kde#260338)
- Upstream changes :
  * Backport several utp bugfixes from trunk.
  * Fix crash due to not checking for 0 pointer in multimedia file
  check.
  * Backport file selection bug from master CCBUG: 258138</changelog>
<changelog author="davejplater@gmail.com" date="1294056000">- Update to libktorrent-1.0.80 (1.1beta1) fix kde #(261679) crash
  with rss syndication plugin.
- Upstream changes :
  * Video streaming support
  * Superseeding support
  * Data file moves are now tracked in the GUI
  * The GUI has been redesigned and now makes proper use of KDE's
    KParts technologie
  * The search plugin now uses webkit
  * Exclusion patterns have been added to the syndication plugin
    filters
  * And many other smaller changes. For a full overview of all the
    changes, take a look in the ChangeLog's of libktorrent and
    ktorrent</changelog>
<changelog author="davejplater@gmail.com" date="1295092800">- Added patch libktorrent-1.1beta1-sprseedcrash.patch to fix crash
  when switching from seeding to superseeding or vice versa, while
  the torrent is running mostly with a private torrent. See :
  kde #(261529), first reported in kde #(262560).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1298635200">- Update to libktorrent-1.0.99rc1 (1.1rc1):
  * Fix bug in UPnP so that it works properly with D-Link DIR 635 routers
  * Fix crash due to manipulating timers in the wrong thread (261903)
  * Fix compiler warning in TimeEstimator (262618)
  * Fix crash due to cleaning up timer in the wrong thread (260712)
  * Fix crash due to not properly cleaning up Peers and everything related when
    switching to superseeding mode (261529)
  * Fix invalid read in utp timer cleanup code (263800)
  * Fix crashes at exit (264378, 256639)
- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Updates in Summary:, Url: and %description.
  * Changed License: to GPLv2+ and LGPLv2+ and MIT and BSD.
  * Updates in Buildrequires:, %build, %install and %files sections.
  * Use Suggests: and not Recommends: for lang package.
  * Removed %pre /sbin/ldconfig section (not needed).
- Removed libktorrent-1.1beta1-sprseedcrash.patch (fixed upstream).
- Removed libktorrent-po.tar.bz2 (not needed, its included in the package).</changelog>
<changelog author="coolo@novell.com" date="1298721600">- recommend -lang package again</changelog>
<changelog author="asterios.dramis@gmail.com" date="1300276800">- Update to 1.1.0:
  * Improve performance of chunk selection code when there are many chunks
  * Fix crash in peer authentication cleanup (bko#266622)
  * Fix crash due to SIGBUS handler being overwritten by KDE's crash dialog
    system (bko#266842)
  * Be more lenient towards torrents with wrong announce-list field
    (bko#268145)
  * Fix root cause of SHA1HashGen crashes in 1.0 series (bko#268162)
- Spec file updates:
  * Removed Authors: from %description (requirement for Factory submissions).
  * Minor update in %files section.</changelog>
<changelog author="javier@opensuse.org" date="1304337600">- Update to 1.1.1
  * Fix deadlock in utp::OutputQueue when packet sending fails
  * Fix bug causing scrape not to be done after first announce
  * Fix crash in DHT code caused by invalid addresses (269657)
  * Fix crash in DHT code caused by unsynchronized access to a QSet (270127)
  * Fix bug causing running time to be wrong when pausing torrents (271521)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1304337601">- Spec file updates:
  * Simplified License: to GPLv2+ which is the main license.
  * Fix locales removal if suse_version is not set.
  * %kde_post_install is not needed.</changelog>
<changelog author="javier@opensuse.org" date="1313582400">- Update to 1.1.2:
  * Fix bug causing time left calculation to return something when
    a torrent is paused (bko#272182)
  * Improve performance of UTP delay window algorithm
  * Fix files not getting downloaded when they change from only
    seed to some other priority
  * Fix crash when cleaning up mse::StreamSocket (bko#277076)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322136000">- Update to 1.1.3:
  * Fix bug causing UPnP not to work properly if there is a question mark in
    the controlurl
  * Fix crash in webseed code (kde#281605)
- Spec file updates:
  * Changes based on spec-cleaner run.
  * Renamed License: to GPL-2.0+ (SPDX style).</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.2.0, also lists changes what changed in rc1
  * Fix large file preallocation when not using quick preallocation in some cases
  * Disable current open file checking, it causes performance issues in some situations
  * Don't use the gcrypt version macro in it's version check
  * Make it possible to check data on chunk ranges instead of the entire torrent
  * Move data file jobs are now done one after the other
  * Implement partial seeding extension
  * Add support for IPv6 traffic class field
  * Make sure a torrent is restarted when it was auto stopped and more files are selected for downloading
  * Emit finished signal when torrent is found completely downloaded in data check
  * Seeders and leechers shown in view is now the maximum of all trackers and not the sum
  * Do not add trackers with unsupported protocols
  * Improve SIGBUS handling, fixes a crash
  * Remove usage of several deprecated KDE3 networking classes
  * Remove obsolete functions of data check during upload
  * Simplify blocklist interface
  * Revamp networking code
  * Remove thread from DHT code
  * Prevent file descriptor exhaustion from happening
  * Do not count non piece data in upload speed calculation
  * Fix IPv6 address parsing bug
  * Improve performance of µTP code
  * Fix crash in DHT packet receive code
  * Fill ip parameter of tracker announce with current IPv6 address if not filled in by user in settings
  * Fix crash in PeerManager
  * Fix crash at exit when datachecker job is running
  * Fix crash due to bug in smaller then operator of net::Address
  * Fix crash due to race condition in logging initialization</changelog>
<changelog author="mlin@suse.com" date="1340193600">- Update to version 1.2.1
  * Fix deadlock in webseeding code (295719)
  * Fix individual torrent download limit not working
  * Fix build on FreeBSD
  * Fix crash due to attempting to call pop_front on an empty list (299536)</changelog>
<changelog author="mlin@suse.com" date="1346846400">- Update to version 1.3.0
  * Do not pass link local IPv6 addresses to ip parameter of tracker
    (kde#305187)
  * Implement BEP 32, IPv6 DHT (kde#295194)
  * Revamp DHT code and follow spec more closely on routing table
  * Revamp SingleFileCache, MultiFileCache and data preallocation
  * Webseeds now follow connection limits (kde#184941)
  * Add new SignalCatcher class to handle UNIX signals (kde#296835)
  * Make TimeEstimator return sortable values (kde#298542)
  * Keep track of partitions files of torrents are on
  * Add methods to check if storage is mounted
  * Make sure all trackers are used of a magnet link
    (kde#302997, kde#303269)
  * Fix warning message about locale being recreated
  * Fix crash in DHT code caused by infinite recursion (kde#300974)</changelog>
<changelog author="nico.kruber@gmail.com" date="1358510400">- Update to version 1.3.1
  * Add workaround for broken handling of btrfs subvolumes by
    solid (kde#306825)
  * Fix crash when preallocating diskspace when a file is enabled
    during the download of a torrent (kde#307178)
  * Make sure stats get updated properly during data check
    (kde#308707)
  * Bind peer sockets to preferred interface for outbound
    connections
  * Fix bug causing UDP connections not to get established on
    FreeBSD because FIONREAD returns the size of the data and the
    peer address (Review: 108076)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460808000">- Update to version 2.0
  * Ported to Qt5/KF5
  * QHttp-based tracker communication was dropped in favour of KIO-based one
  * Optimize queue data structures shown up be callgrind
  * fix issues found by Coverity static analyzer</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461931200">- Added require-lower-LibGMP.patch: 6.0.0 version was chosen
  randomly, and we know the code compiles with at least 5.1.3</changelog>
<changelog author="astieger@suse.com" date="1472990400">- libktorrent 2.0.1:
  * Fix ui lags and hangs when downloading to ntfs partition</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Added Fix-logging-framework-spamming.patch (kde#362195)</changelog>
<changelog author="novell@jonathancottrill.net" date="1509278400">- libktorrent 2.0.1:
  * Add Fix-crash-when-mixing-iterators-in-http-response-parsing.patch,
    boo#1065559 (fixes SIGSEGV when adding torrent with Webseeds; from
    https://github.com/KDE/libktorrent/commit/69678cd7171748706d0182fbe90eefd967c6996a)</changelog>

</package>
<package pkgid="f727ac14d89047a4513add0f99e3701a2daea8db8cea8d454b31ee2792239e98" name="libktorrent-devel" arch="x86_64">
    <version epoch="0" ver="2.0.1" rel="5.1"/>

<changelog author="davejplater@gmail.com" date="1291118400">- Update to git20101130 to fix (kde#258078)
- Upstream changes :
  * Add LIBKTORRENT_VERSION macro
  * Update MINOR version of master branch to 1
  * Improve MultiDataChecker file handling
  * Privatize PeerManager
  * Use weak pointers in PeerConnector and Authenticate,
  should fix a crash
  * Fix ChangeLog</changelog>
<changelog author="davejplater@gmail.com" date="1292587200">- Update to git20101211 fixes crash see (kde#260338)
- Upstream changes :
  * Backport several utp bugfixes from trunk.
  * Fix crash due to not checking for 0 pointer in multimedia file
  check.
  * Backport file selection bug from master CCBUG: 258138</changelog>
<changelog author="davejplater@gmail.com" date="1294056000">- Update to libktorrent-1.0.80 (1.1beta1) fix kde #(261679) crash
  with rss syndication plugin.
- Upstream changes :
  * Video streaming support
  * Superseeding support
  * Data file moves are now tracked in the GUI
  * The GUI has been redesigned and now makes proper use of KDE's
    KParts technologie
  * The search plugin now uses webkit
  * Exclusion patterns have been added to the syndication plugin
    filters
  * And many other smaller changes. For a full overview of all the
    changes, take a look in the ChangeLog's of libktorrent and
    ktorrent</changelog>
<changelog author="davejplater@gmail.com" date="1295092800">- Added patch libktorrent-1.1beta1-sprseedcrash.patch to fix crash
  when switching from seeding to superseeding or vice versa, while
  the torrent is running mostly with a private torrent. See :
  kde #(261529), first reported in kde #(262560).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1298635200">- Update to libktorrent-1.0.99rc1 (1.1rc1):
  * Fix bug in UPnP so that it works properly with D-Link DIR 635 routers
  * Fix crash due to manipulating timers in the wrong thread (261903)
  * Fix compiler warning in TimeEstimator (262618)
  * Fix crash due to cleaning up timer in the wrong thread (260712)
  * Fix crash due to not properly cleaning up Peers and everything related when
    switching to superseeding mode (261529)
  * Fix invalid read in utp timer cleanup code (263800)
  * Fix crashes at exit (264378, 256639)
- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Updates in Summary:, Url: and %description.
  * Changed License: to GPLv2+ and LGPLv2+ and MIT and BSD.
  * Updates in Buildrequires:, %build, %install and %files sections.
  * Use Suggests: and not Recommends: for lang package.
  * Removed %pre /sbin/ldconfig section (not needed).
- Removed libktorrent-1.1beta1-sprseedcrash.patch (fixed upstream).
- Removed libktorrent-po.tar.bz2 (not needed, its included in the package).</changelog>
<changelog author="coolo@novell.com" date="1298721600">- recommend -lang package again</changelog>
<changelog author="asterios.dramis@gmail.com" date="1300276800">- Update to 1.1.0:
  * Improve performance of chunk selection code when there are many chunks
  * Fix crash in peer authentication cleanup (bko#266622)
  * Fix crash due to SIGBUS handler being overwritten by KDE's crash dialog
    system (bko#266842)
  * Be more lenient towards torrents with wrong announce-list field
    (bko#268145)
  * Fix root cause of SHA1HashGen crashes in 1.0 series (bko#268162)
- Spec file updates:
  * Removed Authors: from %description (requirement for Factory submissions).
  * Minor update in %files section.</changelog>
<changelog author="javier@opensuse.org" date="1304337600">- Update to 1.1.1
  * Fix deadlock in utp::OutputQueue when packet sending fails
  * Fix bug causing scrape not to be done after first announce
  * Fix crash in DHT code caused by invalid addresses (269657)
  * Fix crash in DHT code caused by unsynchronized access to a QSet (270127)
  * Fix bug causing running time to be wrong when pausing torrents (271521)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1304337601">- Spec file updates:
  * Simplified License: to GPLv2+ which is the main license.
  * Fix locales removal if suse_version is not set.
  * %kde_post_install is not needed.</changelog>
<changelog author="javier@opensuse.org" date="1313582400">- Update to 1.1.2:
  * Fix bug causing time left calculation to return something when
    a torrent is paused (bko#272182)
  * Improve performance of UTP delay window algorithm
  * Fix files not getting downloaded when they change from only
    seed to some other priority
  * Fix crash when cleaning up mse::StreamSocket (bko#277076)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322136000">- Update to 1.1.3:
  * Fix bug causing UPnP not to work properly if there is a question mark in
    the controlurl
  * Fix crash in webseed code (kde#281605)
- Spec file updates:
  * Changes based on spec-cleaner run.
  * Renamed License: to GPL-2.0+ (SPDX style).</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.2.0, also lists changes what changed in rc1
  * Fix large file preallocation when not using quick preallocation in some cases
  * Disable current open file checking, it causes performance issues in some situations
  * Don't use the gcrypt version macro in it's version check
  * Make it possible to check data on chunk ranges instead of the entire torrent
  * Move data file jobs are now done one after the other
  * Implement partial seeding extension
  * Add support for IPv6 traffic class field
  * Make sure a torrent is restarted when it was auto stopped and more files are selected for downloading
  * Emit finished signal when torrent is found completely downloaded in data check
  * Seeders and leechers shown in view is now the maximum of all trackers and not the sum
  * Do not add trackers with unsupported protocols
  * Improve SIGBUS handling, fixes a crash
  * Remove usage of several deprecated KDE3 networking classes
  * Remove obsolete functions of data check during upload
  * Simplify blocklist interface
  * Revamp networking code
  * Remove thread from DHT code
  * Prevent file descriptor exhaustion from happening
  * Do not count non piece data in upload speed calculation
  * Fix IPv6 address parsing bug
  * Improve performance of µTP code
  * Fix crash in DHT packet receive code
  * Fill ip parameter of tracker announce with current IPv6 address if not filled in by user in settings
  * Fix crash in PeerManager
  * Fix crash at exit when datachecker job is running
  * Fix crash due to bug in smaller then operator of net::Address
  * Fix crash due to race condition in logging initialization</changelog>
<changelog author="mlin@suse.com" date="1340193600">- Update to version 1.2.1
  * Fix deadlock in webseeding code (295719)
  * Fix individual torrent download limit not working
  * Fix build on FreeBSD
  * Fix crash due to attempting to call pop_front on an empty list (299536)</changelog>
<changelog author="mlin@suse.com" date="1346846400">- Update to version 1.3.0
  * Do not pass link local IPv6 addresses to ip parameter of tracker
    (kde#305187)
  * Implement BEP 32, IPv6 DHT (kde#295194)
  * Revamp DHT code and follow spec more closely on routing table
  * Revamp SingleFileCache, MultiFileCache and data preallocation
  * Webseeds now follow connection limits (kde#184941)
  * Add new SignalCatcher class to handle UNIX signals (kde#296835)
  * Make TimeEstimator return sortable values (kde#298542)
  * Keep track of partitions files of torrents are on
  * Add methods to check if storage is mounted
  * Make sure all trackers are used of a magnet link
    (kde#302997, kde#303269)
  * Fix warning message about locale being recreated
  * Fix crash in DHT code caused by infinite recursion (kde#300974)</changelog>
<changelog author="nico.kruber@gmail.com" date="1358510400">- Update to version 1.3.1
  * Add workaround for broken handling of btrfs subvolumes by
    solid (kde#306825)
  * Fix crash when preallocating diskspace when a file is enabled
    during the download of a torrent (kde#307178)
  * Make sure stats get updated properly during data check
    (kde#308707)
  * Bind peer sockets to preferred interface for outbound
    connections
  * Fix bug causing UDP connections not to get established on
    FreeBSD because FIONREAD returns the size of the data and the
    peer address (Review: 108076)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460808000">- Update to version 2.0
  * Ported to Qt5/KF5
  * QHttp-based tracker communication was dropped in favour of KIO-based one
  * Optimize queue data structures shown up be callgrind
  * fix issues found by Coverity static analyzer</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461931200">- Added require-lower-LibGMP.patch: 6.0.0 version was chosen
  randomly, and we know the code compiles with at least 5.1.3</changelog>
<changelog author="astieger@suse.com" date="1472990400">- libktorrent 2.0.1:
  * Fix ui lags and hangs when downloading to ntfs partition</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Added Fix-logging-framework-spamming.patch (kde#362195)</changelog>
<changelog author="novell@jonathancottrill.net" date="1509278400">- libktorrent 2.0.1:
  * Add Fix-crash-when-mixing-iterators-in-http-response-parsing.patch,
    boo#1065559 (fixes SIGSEGV when adding torrent with Webseeds; from
    https://github.com/KDE/libktorrent/commit/69678cd7171748706d0182fbe90eefd967c6996a)</changelog>

</package>
<package pkgid="7fae3c59460e809820df43622e482b7eb78a82d7afb87b50256cf66eee5cd643" name="libktorrent6" arch="x86_64">
    <version epoch="0" ver="2.0.1" rel="5.1"/>

<changelog author="davejplater@gmail.com" date="1291118400">- Update to git20101130 to fix (kde#258078)
- Upstream changes :
  * Add LIBKTORRENT_VERSION macro
  * Update MINOR version of master branch to 1
  * Improve MultiDataChecker file handling
  * Privatize PeerManager
  * Use weak pointers in PeerConnector and Authenticate,
  should fix a crash
  * Fix ChangeLog</changelog>
<changelog author="davejplater@gmail.com" date="1292587200">- Update to git20101211 fixes crash see (kde#260338)
- Upstream changes :
  * Backport several utp bugfixes from trunk.
  * Fix crash due to not checking for 0 pointer in multimedia file
  check.
  * Backport file selection bug from master CCBUG: 258138</changelog>
<changelog author="davejplater@gmail.com" date="1294056000">- Update to libktorrent-1.0.80 (1.1beta1) fix kde #(261679) crash
  with rss syndication plugin.
- Upstream changes :
  * Video streaming support
  * Superseeding support
  * Data file moves are now tracked in the GUI
  * The GUI has been redesigned and now makes proper use of KDE's
    KParts technologie
  * The search plugin now uses webkit
  * Exclusion patterns have been added to the syndication plugin
    filters
  * And many other smaller changes. For a full overview of all the
    changes, take a look in the ChangeLog's of libktorrent and
    ktorrent</changelog>
<changelog author="davejplater@gmail.com" date="1295092800">- Added patch libktorrent-1.1beta1-sprseedcrash.patch to fix crash
  when switching from seeding to superseeding or vice versa, while
  the torrent is running mostly with a private torrent. See :
  kde #(261529), first reported in kde #(262560).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1298635200">- Update to libktorrent-1.0.99rc1 (1.1rc1):
  * Fix bug in UPnP so that it works properly with D-Link DIR 635 routers
  * Fix crash due to manipulating timers in the wrong thread (261903)
  * Fix compiler warning in TimeEstimator (262618)
  * Fix crash due to cleaning up timer in the wrong thread (260712)
  * Fix crash due to not properly cleaning up Peers and everything related when
    switching to superseeding mode (261529)
  * Fix invalid read in utp timer cleanup code (263800)
  * Fix crashes at exit (264378, 256639)
- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Updates in Summary:, Url: and %description.
  * Changed License: to GPLv2+ and LGPLv2+ and MIT and BSD.
  * Updates in Buildrequires:, %build, %install and %files sections.
  * Use Suggests: and not Recommends: for lang package.
  * Removed %pre /sbin/ldconfig section (not needed).
- Removed libktorrent-1.1beta1-sprseedcrash.patch (fixed upstream).
- Removed libktorrent-po.tar.bz2 (not needed, its included in the package).</changelog>
<changelog author="coolo@novell.com" date="1298721600">- recommend -lang package again</changelog>
<changelog author="asterios.dramis@gmail.com" date="1300276800">- Update to 1.1.0:
  * Improve performance of chunk selection code when there are many chunks
  * Fix crash in peer authentication cleanup (bko#266622)
  * Fix crash due to SIGBUS handler being overwritten by KDE's crash dialog
    system (bko#266842)
  * Be more lenient towards torrents with wrong announce-list field
    (bko#268145)
  * Fix root cause of SHA1HashGen crashes in 1.0 series (bko#268162)
- Spec file updates:
  * Removed Authors: from %description (requirement for Factory submissions).
  * Minor update in %files section.</changelog>
<changelog author="javier@opensuse.org" date="1304337600">- Update to 1.1.1
  * Fix deadlock in utp::OutputQueue when packet sending fails
  * Fix bug causing scrape not to be done after first announce
  * Fix crash in DHT code caused by invalid addresses (269657)
  * Fix crash in DHT code caused by unsynchronized access to a QSet (270127)
  * Fix bug causing running time to be wrong when pausing torrents (271521)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1304337601">- Spec file updates:
  * Simplified License: to GPLv2+ which is the main license.
  * Fix locales removal if suse_version is not set.
  * %kde_post_install is not needed.</changelog>
<changelog author="javier@opensuse.org" date="1313582400">- Update to 1.1.2:
  * Fix bug causing time left calculation to return something when
    a torrent is paused (bko#272182)
  * Improve performance of UTP delay window algorithm
  * Fix files not getting downloaded when they change from only
    seed to some other priority
  * Fix crash when cleaning up mse::StreamSocket (bko#277076)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322136000">- Update to 1.1.3:
  * Fix bug causing UPnP not to work properly if there is a question mark in
    the controlurl
  * Fix crash in webseed code (kde#281605)
- Spec file updates:
  * Changes based on spec-cleaner run.
  * Renamed License: to GPL-2.0+ (SPDX style).</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.2.0, also lists changes what changed in rc1
  * Fix large file preallocation when not using quick preallocation in some cases
  * Disable current open file checking, it causes performance issues in some situations
  * Don't use the gcrypt version macro in it's version check
  * Make it possible to check data on chunk ranges instead of the entire torrent
  * Move data file jobs are now done one after the other
  * Implement partial seeding extension
  * Add support for IPv6 traffic class field
  * Make sure a torrent is restarted when it was auto stopped and more files are selected for downloading
  * Emit finished signal when torrent is found completely downloaded in data check
  * Seeders and leechers shown in view is now the maximum of all trackers and not the sum
  * Do not add trackers with unsupported protocols
  * Improve SIGBUS handling, fixes a crash
  * Remove usage of several deprecated KDE3 networking classes
  * Remove obsolete functions of data check during upload
  * Simplify blocklist interface
  * Revamp networking code
  * Remove thread from DHT code
  * Prevent file descriptor exhaustion from happening
  * Do not count non piece data in upload speed calculation
  * Fix IPv6 address parsing bug
  * Improve performance of µTP code
  * Fix crash in DHT packet receive code
  * Fill ip parameter of tracker announce with current IPv6 address if not filled in by user in settings
  * Fix crash in PeerManager
  * Fix crash at exit when datachecker job is running
  * Fix crash due to bug in smaller then operator of net::Address
  * Fix crash due to race condition in logging initialization</changelog>
<changelog author="mlin@suse.com" date="1340193600">- Update to version 1.2.1
  * Fix deadlock in webseeding code (295719)
  * Fix individual torrent download limit not working
  * Fix build on FreeBSD
  * Fix crash due to attempting to call pop_front on an empty list (299536)</changelog>
<changelog author="mlin@suse.com" date="1346846400">- Update to version 1.3.0
  * Do not pass link local IPv6 addresses to ip parameter of tracker
    (kde#305187)
  * Implement BEP 32, IPv6 DHT (kde#295194)
  * Revamp DHT code and follow spec more closely on routing table
  * Revamp SingleFileCache, MultiFileCache and data preallocation
  * Webseeds now follow connection limits (kde#184941)
  * Add new SignalCatcher class to handle UNIX signals (kde#296835)
  * Make TimeEstimator return sortable values (kde#298542)
  * Keep track of partitions files of torrents are on
  * Add methods to check if storage is mounted
  * Make sure all trackers are used of a magnet link
    (kde#302997, kde#303269)
  * Fix warning message about locale being recreated
  * Fix crash in DHT code caused by infinite recursion (kde#300974)</changelog>
<changelog author="nico.kruber@gmail.com" date="1358510400">- Update to version 1.3.1
  * Add workaround for broken handling of btrfs subvolumes by
    solid (kde#306825)
  * Fix crash when preallocating diskspace when a file is enabled
    during the download of a torrent (kde#307178)
  * Make sure stats get updated properly during data check
    (kde#308707)
  * Bind peer sockets to preferred interface for outbound
    connections
  * Fix bug causing UDP connections not to get established on
    FreeBSD because FIONREAD returns the size of the data and the
    peer address (Review: 108076)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460808000">- Update to version 2.0
  * Ported to Qt5/KF5
  * QHttp-based tracker communication was dropped in favour of KIO-based one
  * Optimize queue data structures shown up be callgrind
  * fix issues found by Coverity static analyzer</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461931200">- Added require-lower-LibGMP.patch: 6.0.0 version was chosen
  randomly, and we know the code compiles with at least 5.1.3</changelog>
<changelog author="astieger@suse.com" date="1472990400">- libktorrent 2.0.1:
  * Fix ui lags and hangs when downloading to ntfs partition</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Added Fix-logging-framework-spamming.patch (kde#362195)</changelog>
<changelog author="novell@jonathancottrill.net" date="1509278400">- libktorrent 2.0.1:
  * Add Fix-crash-when-mixing-iterators-in-http-response-parsing.patch,
    boo#1065559 (fixes SIGSEGV when adding torrent with Webseeds; from
    https://github.com/KDE/libktorrent/commit/69678cd7171748706d0182fbe90eefd967c6996a)</changelog>

</package>
<package pkgid="0f6d9288d0f68b02d8690a2e26b72542170f67fcfd794cb3dc60685be6ab1ed9" name="libktorrent6-lang" arch="noarch">
    <version epoch="0" ver="2.0.1" rel="5.1"/>

<changelog author="davejplater@gmail.com" date="1291118400">- Update to git20101130 to fix (kde#258078)
- Upstream changes :
  * Add LIBKTORRENT_VERSION macro
  * Update MINOR version of master branch to 1
  * Improve MultiDataChecker file handling
  * Privatize PeerManager
  * Use weak pointers in PeerConnector and Authenticate,
  should fix a crash
  * Fix ChangeLog</changelog>
<changelog author="davejplater@gmail.com" date="1292587200">- Update to git20101211 fixes crash see (kde#260338)
- Upstream changes :
  * Backport several utp bugfixes from trunk.
  * Fix crash due to not checking for 0 pointer in multimedia file
  check.
  * Backport file selection bug from master CCBUG: 258138</changelog>
<changelog author="davejplater@gmail.com" date="1294056000">- Update to libktorrent-1.0.80 (1.1beta1) fix kde #(261679) crash
  with rss syndication plugin.
- Upstream changes :
  * Video streaming support
  * Superseeding support
  * Data file moves are now tracked in the GUI
  * The GUI has been redesigned and now makes proper use of KDE's
    KParts technologie
  * The search plugin now uses webkit
  * Exclusion patterns have been added to the syndication plugin
    filters
  * And many other smaller changes. For a full overview of all the
    changes, take a look in the ChangeLog's of libktorrent and
    ktorrent</changelog>
<changelog author="davejplater@gmail.com" date="1295092800">- Added patch libktorrent-1.1beta1-sprseedcrash.patch to fix crash
  when switching from seeding to superseeding or vice versa, while
  the torrent is running mostly with a private torrent. See :
  kde #(261529), first reported in kde #(262560).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1298635200">- Update to libktorrent-1.0.99rc1 (1.1rc1):
  * Fix bug in UPnP so that it works properly with D-Link DIR 635 routers
  * Fix crash due to manipulating timers in the wrong thread (261903)
  * Fix compiler warning in TimeEstimator (262618)
  * Fix crash due to cleaning up timer in the wrong thread (260712)
  * Fix crash due to not properly cleaning up Peers and everything related when
    switching to superseeding mode (261529)
  * Fix invalid read in utp timer cleanup code (263800)
  * Fix crashes at exit (264378, 256639)
- Spec file updates:
  * Changes based on rpmdevtools templates and spec-cleaner run.
  * Updates in Summary:, Url: and %description.
  * Changed License: to GPLv2+ and LGPLv2+ and MIT and BSD.
  * Updates in Buildrequires:, %build, %install and %files sections.
  * Use Suggests: and not Recommends: for lang package.
  * Removed %pre /sbin/ldconfig section (not needed).
- Removed libktorrent-1.1beta1-sprseedcrash.patch (fixed upstream).
- Removed libktorrent-po.tar.bz2 (not needed, its included in the package).</changelog>
<changelog author="coolo@novell.com" date="1298721600">- recommend -lang package again</changelog>
<changelog author="asterios.dramis@gmail.com" date="1300276800">- Update to 1.1.0:
  * Improve performance of chunk selection code when there are many chunks
  * Fix crash in peer authentication cleanup (bko#266622)
  * Fix crash due to SIGBUS handler being overwritten by KDE's crash dialog
    system (bko#266842)
  * Be more lenient towards torrents with wrong announce-list field
    (bko#268145)
  * Fix root cause of SHA1HashGen crashes in 1.0 series (bko#268162)
- Spec file updates:
  * Removed Authors: from %description (requirement for Factory submissions).
  * Minor update in %files section.</changelog>
<changelog author="javier@opensuse.org" date="1304337600">- Update to 1.1.1
  * Fix deadlock in utp::OutputQueue when packet sending fails
  * Fix bug causing scrape not to be done after first announce
  * Fix crash in DHT code caused by invalid addresses (269657)
  * Fix crash in DHT code caused by unsynchronized access to a QSet (270127)
  * Fix bug causing running time to be wrong when pausing torrents (271521)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1304337601">- Spec file updates:
  * Simplified License: to GPLv2+ which is the main license.
  * Fix locales removal if suse_version is not set.
  * %kde_post_install is not needed.</changelog>
<changelog author="javier@opensuse.org" date="1313582400">- Update to 1.1.2:
  * Fix bug causing time left calculation to return something when
    a torrent is paused (bko#272182)
  * Improve performance of UTP delay window algorithm
  * Fix files not getting downloaded when they change from only
    seed to some other priority
  * Fix crash when cleaning up mse::StreamSocket (bko#277076)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322136000">- Update to 1.1.3:
  * Fix bug causing UPnP not to work properly if there is a question mark in
    the controlurl
  * Fix crash in webseed code (kde#281605)
- Spec file updates:
  * Changes based on spec-cleaner run.
  * Renamed License: to GPL-2.0+ (SPDX style).</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.2.0, also lists changes what changed in rc1
  * Fix large file preallocation when not using quick preallocation in some cases
  * Disable current open file checking, it causes performance issues in some situations
  * Don't use the gcrypt version macro in it's version check
  * Make it possible to check data on chunk ranges instead of the entire torrent
  * Move data file jobs are now done one after the other
  * Implement partial seeding extension
  * Add support for IPv6 traffic class field
  * Make sure a torrent is restarted when it was auto stopped and more files are selected for downloading
  * Emit finished signal when torrent is found completely downloaded in data check
  * Seeders and leechers shown in view is now the maximum of all trackers and not the sum
  * Do not add trackers with unsupported protocols
  * Improve SIGBUS handling, fixes a crash
  * Remove usage of several deprecated KDE3 networking classes
  * Remove obsolete functions of data check during upload
  * Simplify blocklist interface
  * Revamp networking code
  * Remove thread from DHT code
  * Prevent file descriptor exhaustion from happening
  * Do not count non piece data in upload speed calculation
  * Fix IPv6 address parsing bug
  * Improve performance of µTP code
  * Fix crash in DHT packet receive code
  * Fill ip parameter of tracker announce with current IPv6 address if not filled in by user in settings
  * Fix crash in PeerManager
  * Fix crash at exit when datachecker job is running
  * Fix crash due to bug in smaller then operator of net::Address
  * Fix crash due to race condition in logging initialization</changelog>
<changelog author="mlin@suse.com" date="1340193600">- Update to version 1.2.1
  * Fix deadlock in webseeding code (295719)
  * Fix individual torrent download limit not working
  * Fix build on FreeBSD
  * Fix crash due to attempting to call pop_front on an empty list (299536)</changelog>
<changelog author="mlin@suse.com" date="1346846400">- Update to version 1.3.0
  * Do not pass link local IPv6 addresses to ip parameter of tracker
    (kde#305187)
  * Implement BEP 32, IPv6 DHT (kde#295194)
  * Revamp DHT code and follow spec more closely on routing table
  * Revamp SingleFileCache, MultiFileCache and data preallocation
  * Webseeds now follow connection limits (kde#184941)
  * Add new SignalCatcher class to handle UNIX signals (kde#296835)
  * Make TimeEstimator return sortable values (kde#298542)
  * Keep track of partitions files of torrents are on
  * Add methods to check if storage is mounted
  * Make sure all trackers are used of a magnet link
    (kde#302997, kde#303269)
  * Fix warning message about locale being recreated
  * Fix crash in DHT code caused by infinite recursion (kde#300974)</changelog>
<changelog author="nico.kruber@gmail.com" date="1358510400">- Update to version 1.3.1
  * Add workaround for broken handling of btrfs subvolumes by
    solid (kde#306825)
  * Fix crash when preallocating diskspace when a file is enabled
    during the download of a torrent (kde#307178)
  * Make sure stats get updated properly during data check
    (kde#308707)
  * Bind peer sockets to preferred interface for outbound
    connections
  * Fix bug causing UDP connections not to get established on
    FreeBSD because FIONREAD returns the size of the data and the
    peer address (Review: 108076)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460808000">- Update to version 2.0
  * Ported to Qt5/KF5
  * QHttp-based tracker communication was dropped in favour of KIO-based one
  * Optimize queue data structures shown up be callgrind
  * fix issues found by Coverity static analyzer</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1461931200">- Added require-lower-LibGMP.patch: 6.0.0 version was chosen
  randomly, and we know the code compiles with at least 5.1.3</changelog>
<changelog author="astieger@suse.com" date="1472990400">- libktorrent 2.0.1:
  * Fix ui lags and hangs when downloading to ntfs partition</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1477224000">- Added Fix-logging-framework-spamming.patch (kde#362195)</changelog>
<changelog author="novell@jonathancottrill.net" date="1509278400">- libktorrent 2.0.1:
  * Add Fix-crash-when-mixing-iterators-in-http-response-parsing.patch,
    boo#1065559 (fixes SIGSEGV when adding torrent with Webseeds; from
    https://github.com/KDE/libktorrent/commit/69678cd7171748706d0182fbe90eefd967c6996a)</changelog>

</package>
<package pkgid="2621768fc41b22f96cde3f391dfbec1d6e2681d0520110d144e518c82922daab" name="libldap-2_4-2" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="3cf48e70096d9ec3f98be1ff81f9402f8ff1bb7bb74cdb2eb5cb711ab11faa01" name="libldap-2_4-2-32bit" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="56c8a27637e7a512a3ca27c8c09aa33c1c0f36e51566b18986ad16a40d3f7ef6" name="libldap-data" arch="noarch">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="48c10e2ae532a2287aa9e31a00877bfeece98734ebcc9aec6a1034c23d1815a0" name="liblldpctl4" arch="x86_64">
    <version epoch="0" ver="0.9.9" rel="2.1"/>

<changelog author="bernat@luffy.cx" date="1419940800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1428148800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1432123200">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1438948800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1441800000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1451217600">- New upstream version.
- Use system libnl3 when possible.
- Use system libevent when possible.</changelog>
<changelog author="bernat@luffy.cx" date="1451649600">- New upstream version.
- Do not rely on libnl3.</changelog>
<changelog author="bernat@luffy.cx" date="1455969600">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1458388800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1463832000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1466164800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1475236800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1485000000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1489924800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1503230400">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1511265600">- New upstream version.</changelog>
<changelog author="mardnh@gmx.de" date="1511352000">- Created lldpd.changes file (converted inline Changelog via
  spec2changelog)
- Specfile cleanup (removed all stuff that is not relevant for
  recent (open)SUSE versions.)</changelog>
<changelog author="mpluskal@suse.com" date="1511784000">- Clarify licensing and usage of some header files
- Enable support for libseccomp (disabled by default)
- Make buildign more verbose</changelog>
<changelog author="mpluskal@suse.com" date="1512388800">- Use fillupdir macro
- Enable libbsd
- Fix group for devel subpackage</changelog>
<changelog author="mpluskal@suse.com" date="1512993600">- Enable seccomp for Factory
- Adjust default sysconfig to enable other protocols and self
  advertisment
- Do not create user/grou starting with underscore (_lldpd)</changelog>

</package>
<package pkgid="ffcb576c97a5463d31ace32af3b266cecbb5d88886c49494e09461f327ea8b56" name="liblouis" arch="src">
    <version epoch="0" ver="2.6.4" rel="6.1"/>

<changelog author="vuntz@novell.com" date="1250856000">- Add liblouis-dlopen-versioned.patch to have the python bindings
  open the versioned .so library, so that they don't require the
  devel package.
- Make python-louis require liblouis0.</changelog>
<changelog author="captain.magnus@opensuse.org" date="1250856001">- Update to version 1.7.0:
  + The main new feature of this release is the support for UK and
    Marburg math. Other changes include a new tool to check
    hyphenation and the usual improvement and addition of tables.
    Also The test suite has been enhanced and finally passes
  + Fix for library name and Python bindings
  + Documentation fixes
  + Many small fixes
- Remove liblouis-build-fix.patch. Fixed upstream
- Remove liblouis-dlopen-versioned.patch. Code changed</changelog>
<changelog author="vuntz@novell.com" date="1251460800">- Fix python-louis build: with the new upstream release, we now
  need to build the library before building the python bindings.</changelog>
<changelog author="vuntz@opensuse.org" date="1259755200">- Update to version 1.8.0:
  + This release contains a number of improvements notably the
    integrationof gnulib, the automatic generation of man pages and
    the addition of tables for German grade 2.
  + New features
  - New tables
    . Tables German Grade 2
    . Swiss German
  - Modified tables
    . Updated Norwegian tables
  - man pages
    . All tools accept the --version and --help options and are
    documented in man pages
  - Corpus based test cases for tables
  + Bug fixes
  - Many small fixes
- Rename liblouis0 subpackage to liblouis2, because of soname bump.</changelog>
<changelog author="vuntz@opensuse.org" date="1282996800">- Update to version 2.1.1:
  + Bug fixes:
  - Fixed problems with the Danish grade 2 table
  - Fixed problems with the Marburg maths table for mathematics
    and the UK maths table for mathematics
- Changes from version 2.1.0:
  + New features:
  - New tables:
    . Added tables for Portuguese grade 1 and 2
    . Added unicode.dis for Unicode braille
  - Modified tables: Updated Danish tables
  - Implemented language to table mapping
  - New format of error messages: the error messages are now
    reported in a format similar to the one used in gcc.
  - New opcode: added undefined opcode
  - Python bindings:
    . Allow the user to configure the maximum output length by
    specifying a number by which the input length is multiplied
    using the outlenMultiplier module variable.
    . Add compbrlLeftCursor mode constant.
    . Add compileString function which wraps lou_compileString.
    . Corrections/clarifications to docstrings.
    . Add python binding for the lou_hyphenate function.
    . Added python wrapper for lou_backTranslateString and
    lou_backTranslate.
  - Add liblouisxslt as an example to python/examples.
  - Add compbrlLeftCursor.
  + Bug fixes:
  - Fix the output cursorPos when the compbrlAtCursor mode is
    enabled and the characters around the cursor translate to
    multiple braille cells, such as in the Chinese braille
    tables.
  - Fix outpos when doing back translation
  - Fix the input/output position arrays for characters in the
    input which are undefined in the translation table.
  - Table fixes:
    . Fixed a bug with back translation of '*n'.
    . Fixes to the en-us-g2.ctb table
  - Python bindings:
    . Remove unnecessary imports, allowing the bindings to run in
    Python 2.7.
    . lou_translate* writes output information in typeform, so
    allocate enough bytes for it. Fixes possible buffer
    overruns and resultant crashes.
  - Miscellaneous:
    . Fixes to the man page generation to fix issues
    . Do not invoke help2man when cross-compiling
    . Documentation updates (issue 10)
    . Removing noletsign defaults
    . Many small fixes
- Changes from version 2.0.0:
  + New function: Adding lou_charSize function
- Changes from version 1.9.0:
  + New functions:
  - lou_dotsToChar and lou_charToDots function
  - Added lou_compileString for adding entries to tables at
    run-time.</changelog>
<changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 2.3.0:
  + New features:
  - Multiple table search path (with LOUIS_TABLEPATH environment
    variable)
  - New --quiet option for lou_checktable
  - New functions to make libraries relocatable
  - New Braille tables: Swedish, Sorani (Kurdish), Ethiopic,
    Serbian, many Indian languages , Icelandic 6- and 8-dot,
    Catalan, Dutch Braille (for Belgium and the Netherlands),
    Flemish Braille Math Code (a.k.a. Woluwe code).
  + Braille Table Improvements: Chinse, Spanish Braille, French 6
    and 8 dot, Italian 8 dot, Generic Arabic Grade 1, Spanish,
    Norwegian.
  + Bug fixes:
  - Fixed a long standing bug with an infinite loop in the table
    compiler
  + Improved documentation
- Add pkg-config BuildRequires to get proper pkgconfig() provides.</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Update to version 2.4.1:
  + New features:
  - Czech hyphenation table
  - Spanish grade 1 table
  - New tamil table
  + Braille Table Improvements: Icelandic 8-dot, Norwegian,
    Portuguese grade1, uncontracted Spanish.
- Changes from version 2.4.0:
  + New features:
  - New Generic Farsi Grade 1 table
  - Emacs mode for editing Braille tables
  + Braille Table Improvements: Czech, French comp6 and comp8,
    Generic Arabic Grade 1, Romanian.</changelog>
<changelog author="vuntz@opensuse.org" date="1347278400">- Create a tools and a doc subpackages to contain the tools and
  documentation shipped by liblouis, instead of having a liblouis
  subpackage, since that's confusing (because what people are
  usually interested is the liblouis2 subpackage).
- Ship COPYING.LIB in liblouis2 subpackage and COPYING in the tools
  subpackage since everything is LGPL-3.0+, except the tools that
  are GPL-3.0+. That fixes bnc#779253.
- Since we don't have a liblouis subpackage anymore, add Provides
  and Obsoletes for it to liblouis2 for smooth upgrades.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 2.5.0:
  + New features:
  - New Braille tables
    . Estonian grade 0
    . Portuguese 8 dot Computer braille
  - UTF-8 support in tables
  - Improvements to the python bindings
  - Add a doctest infrastructure
  - Support for Python 3 in the Python bindings
  + Improved C-based test framework
  + Improved documentation
  + Braille table improvements
  + Bug fixes
- Remove checks for outdated openSUSE versions (&lt;= 11.2).</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.5.1:
  + Braille Table Improvements
  - Fix encoding problem in italian table and added more
    character definitions.
  - Rename it-it-g1.utb to it-it-comp6.utb and it-it-g1.utb2 to
    it-it-comp8.utb.
  + Bug fixes:
  - Fix outputPos and inlen where an input character generates
    multiple output characters.</changelog>
<changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 2.5.2:
  + New features:
  - New tool to trace rule application (lou_trace).
  - New Braille tables
    . Inuktitut grade 1.
    . UEB grade 1 and 2.
    . Korean table.
  - Braille Table Improvements
  - da-gk-g2.ctb, fixes for transposed â, å, æ, ä, ø  and ö,
    corrected/improved harness tests.
  - Corrections for en-GB-g2.ctb.
  - Corrections to the Hungarian grade 1 table.
  + Bug Fixes:
  - Update gnulib.
  - Fix a bug in the correct opcode which causes sometimes random
    results when translating.
  - Fixes for compiler warnings.
  - Fix some Valgrind warnings about invalid reads.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add python3-louis target.</changelog>
<changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.5.3:
  + New features:
  - New Braille tables.
    . Korean grade 1 and grade 2.
    . U.K. English 8 dot computer braille table.
    . New Russian literary and computer braille tables. These
    replace the older Russian tables which are left for
    backwards compatibility.
    . New hyphenation dictionary for Russian.
    . Updated hyphenation tables for the Norwegian language
    (nynorsk and bokmål).
    . New hyphenation dictionary for Esperanto.
    . New Esperanto grade 1 table, using the x system for
    accented letters.
  - runHarness.py:
    . Accept filename globs on the commandline to run specific
    harness files. In tests/harness, one can do make &lt;filename&gt;
    or make runall Removed from make check because these checks
    are checking the validity of our tables, rather than
    validity of the code.
  + Braille Table Improvements:
  - da-dk-g2.ctb, mostly rewritten to use nocross and hyphenation
    table.
  - Most tables: removed the default collapse whitespace
    statements, if you need to compress whitespace, consider
    adding compress.ctb to the list of tables when processing.
  - Corrections to Unified English Braille Code (Grade 1 and 2).
  - Corrections to apostrophes in the Computer Spanish 8 dots
    Braille table (Es-Es-G0.utb).
  - Corrections for double angle quotation marks and emphasis
    marks in the Norwegian Grade 0 Braille Table.
  - Fixes for a minor problem regarding the noletsign in
    Norwegian contracted braille.
  - Corrections to the Italian table.
  - Corrections to the Hungarian grade 1 table.
  - Corrections to English, U.S. Grade 2 (ABAE) table.
  - Further reorganization of the tables to remove duplication.
    Move litdigit opcode common parts and include where needed.
  - Removed obsolete en-us-g1.utb, which has been replaced by
    en-us-g1.ctb.
  - Added dictionary harness tests for: en-ueb-g2.ctb,
    en-us-g2.ctb.
  - Corrections to Nemeth character definitions.
  - Corrections to the Esperanto table.
  + Bug Fixes:
  - Cursor position calculation is now based on the same code
    that calculates inpos and outpos. This probably solves a
    number of bugs.
  - Fix nocross opcode processing.
  - Fix several buffer over/under runs in
    lou_translateString.c:hyphenate.
  - Fix the '=' problem, i.e. fix inputPositions calculation for
    the case where the equals sign is used as the dots operand.
  - Fix a bug when resizing a table. Previously not all
    references to this table were updated.
  + Backwards incompatible changes:
  - The feature that allowed a mapping between language code and
    Braille table was removed as it contained a out-of-bounds
    access bug, was never documented and probably never used.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">-Update to version 2.5.4:
  + New features
  - Added function lou_registerTableResolver for plugging in a
    table resolver callback from your host language.
  + Bug Fixes
  - Fixed ENDSEGMENT indicator in computer Braille.
  - Emphasized words should now be contracted consistently.
  - Fixed several problems with back-translation. A slash within
    a number and strings such as 5-inch-diameter and
    25-year-old-man should now back-translate correctly.
  - Fixed a problem with syllable opcode.
  - Fix warnings with gcc 4.8.2.
  - When a table is specified with an absolute or relative path,
    the "includes" in that table will now work as expected,
    meaning files in the same directory will be found.
  + Braille Table Improvements to fr-bfu-comp8, en-us-g2,
    en-ueb-g2, BUlgarian, en-gb-g1, Nemeth, Slovenian, Norwegian,
    Nepali, Danish.
  + Backwards incompatible changes
  - Delete the table chardefs-ueb.cti as these rules are now
    provided by en-ueb-chardefs.uti
- Update source URL.
- COPYING.LIB has been renamed to COPYING.LESSER
- Use fdupes for base package.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 2.6.4:
  + New features: YAML based harness tests. Harness tests can now
    be written in simple YAML notation and they are integrated with
    the normal `make check' command. They can be used for both ucs2
    and ucs4 and no Python is required.
  + Bug fixes:
  - Use a separate gnulib instance for the library and the tools.
    Use the strndup module to avoid build problems on windows.
  - Fix a problem with the nocross opcode when used in
    combination with the opcodes nocont and compbrl.
  - Fix a problem with the decoding of the harness test files.
  - Fix numerous problems in the way braille indicators are
    handled. There is now a safe version of the checkAttr
    function which makes sure that no attributes are checked
    beyond the boundaries of the currentInput. This fixes the
    random behavior with tests where the emphasis extends to the
    end of the input string.
  + Other changes:
  - If found use texi2any to build the documentation.
  - Fix permissions of Korean tables.
  - Update the windows build instructions.
  + Braille table improvements:
- Changes from version 2.6.3:
  + New features:
  - [beta] The new function lou_findTable can be used for table
    discovery based on meta data in table headers.
  - The Python API now has a new function to check tables aptly
    named ~checkTable~.
  + Bug fixes: Fixed a problem in resolveTable when using a Java
    resolver.
  + Other changes: The build dependency on makeinfo is now
    optional. If it is not installed we simply do not build the
    documentation.
  + Braille table improvements.
  + Corrections and improvements made to UEB tables.
- Changes from version 2.6.2:
  + New features: Harness tests now can test for typeform
    differences.
  + Bug fixes: Fix for emphasis bug.
  + Braille table improvements.
- Changes from version 2.6.1:
  + New features: New Braille tables.
  + Braille table improvements.
  + Bug fixes: Fix a compiler warning in the logging code.
  + Documentation updates: The documentation has been restructured
    to be more beginner friendly and a short introduction to
    translation table writing has been added.
  + Other changes:
  - When compiling with mingw or cygwin resulting dll is
    liblouis.dll.
  - runHarness.py: add new output format, compact output mode
    suitable for grepping.
  + Backwards incompatible changes:
  - Deleted ga.ctb now superseded by ga-g1.utb and ga.g2.ctb.
  - Nl-Nl-g1.utb has been removed. It is superseded by
    nl-NL-g1.ctb.
  - nl-be-g1.utb has been removed. It is superseded by
    nl-BE-g1.ctb.
- Changes from version 2.6.0:
  + New features:
  - New Braille tables.
  - Logging callback. There is now a callback system in place to
    get error messages and warnings.
  + Bug fixes:
  - Fix back translation problems when word gets split in unusual
    places causing back translation of whole words.
  - Fixed bug to prevent removal of \xffff between largesign
    rules.
  - Fixed a bug in back translation, when a letsign was
    encountered, the letsign was being applied beyond the element
    it applied to.
  - Fix memory leaks in the default table resolver introduced in
    the previous release.
  - Fixes to the build system.
  + Braille table improvements.
- Bump soname following upstream changes, leading to rename of
  package liblouis2 to liblouis9.
- Update url and sourceurl to new working ones.
- Add exlicit makeinfo BuildRequires, we want to build
  documentation.</changelog>
<changelog author="fcrozat@suse.com" date="1452513600">- Move data from library package to separate subpackage, to ensure
  library package can be safely upgraded.</changelog>
<changelog author="jengelh@inai.de" date="1453204800">- Use %{?_smp_mflags} for parallel build, newer %make_install
  for installation, and remove redundant %clean section.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Move %install_info_delete from postun to preun.
- Drop makeinfo BuildRequires: it's quite a big dependency and
  the .info file is present in the tarball.
- Install doc directly (make_install -C doc).</changelog>
<changelog author="mgorse@suse.com" date="1504699200">- Add patches to fix several CVEs, backported from upstream
  (boo#1056088 boo#1056090 boo#1056093 boo#1056095 boo#1056097
  boo#1056101 boo#1056105 CVE-2017-13738 CVE-2017-13739
  CVE-2017-13740 CVE-2017-13741 CVE_2017-13742 CVE-2017-13743
  CVE-2017-13744):
  0001-Fix-possible-out-of-bounds-write-from-a-followed-by-.patch
  0002-resolveSubtable-Fix-buffer-overflow-parsing-a-malfor.patch
  0003-Fix-possible-use-after-free-when-calling-compileBrai.patch</changelog>

</package>
<package pkgid="2ed84277d2cd91b0382ecc309f39620a368903178695c1164dc20baa373afccc" name="liblouis-data" arch="x86_64">
    <version epoch="0" ver="2.6.4" rel="6.1"/>

<changelog author="vuntz@novell.com" date="1250856000">- Add liblouis-dlopen-versioned.patch to have the python bindings
  open the versioned .so library, so that they don't require the
  devel package.
- Make python-louis require liblouis0.</changelog>
<changelog author="captain.magnus@opensuse.org" date="1250856001">- Update to version 1.7.0:
  + The main new feature of this release is the support for UK and
    Marburg math. Other changes include a new tool to check
    hyphenation and the usual improvement and addition of tables.
    Also The test suite has been enhanced and finally passes
  + Fix for library name and Python bindings
  + Documentation fixes
  + Many small fixes
- Remove liblouis-build-fix.patch. Fixed upstream
- Remove liblouis-dlopen-versioned.patch. Code changed</changelog>
<changelog author="vuntz@novell.com" date="1251460800">- Fix python-louis build: with the new upstream release, we now
  need to build the library before building the python bindings.</changelog>
<changelog author="vuntz@opensuse.org" date="1259755200">- Update to version 1.8.0:
  + This release contains a number of improvements notably the
    integrationof gnulib, the automatic generation of man pages and
    the addition of tables for German grade 2.
  + New features
  - New tables
    . Tables German Grade 2
    . Swiss German
  - Modified tables
    . Updated Norwegian tables
  - man pages
    . All tools accept the --version and --help options and are
    documented in man pages
  - Corpus based test cases for tables
  + Bug fixes
  - Many small fixes
- Rename liblouis0 subpackage to liblouis2, because of soname bump.</changelog>
<changelog author="vuntz@opensuse.org" date="1282996800">- Update to version 2.1.1:
  + Bug fixes:
  - Fixed problems with the Danish grade 2 table
  - Fixed problems with the Marburg maths table for mathematics
    and the UK maths table for mathematics
- Changes from version 2.1.0:
  + New features:
  - New tables:
    . Added tables for Portuguese grade 1 and 2
    . Added unicode.dis for Unicode braille
  - Modified tables: Updated Danish tables
  - Implemented language to table mapping
  - New format of error messages: the error messages are now
    reported in a format similar to the one used in gcc.
  - New opcode: added undefined opcode
  - Python bindings:
    . Allow the user to configure the maximum output length by
    specifying a number by which the input length is multiplied
    using the outlenMultiplier module variable.
    . Add compbrlLeftCursor mode constant.
    . Add compileString function which wraps lou_compileString.
    . Corrections/clarifications to docstrings.
    . Add python binding for the lou_hyphenate function.
    . Added python wrapper for lou_backTranslateString and
    lou_backTranslate.
  - Add liblouisxslt as an example to python/examples.
  - Add compbrlLeftCursor.
  + Bug fixes:
  - Fix the output cursorPos when the compbrlAtCursor mode is
    enabled and the characters around the cursor translate to
    multiple braille cells, such as in the Chinese braille
    tables.
  - Fix outpos when doing back translation
  - Fix the input/output position arrays for characters in the
    input which are undefined in the translation table.
  - Table fixes:
    . Fixed a bug with back translation of '*n'.
    . Fixes to the en-us-g2.ctb table
  - Python bindings:
    . Remove unnecessary imports, allowing the bindings to run in
    Python 2.7.
    . lou_translate* writes output information in typeform, so
    allocate enough bytes for it. Fixes possible buffer
    overruns and resultant crashes.
  - Miscellaneous:
    . Fixes to the man page generation to fix issues
    . Do not invoke help2man when cross-compiling
    . Documentation updates (issue 10)
    . Removing noletsign defaults
    . Many small fixes
- Changes from version 2.0.0:
  + New function: Adding lou_charSize function
- Changes from version 1.9.0:
  + New functions:
  - lou_dotsToChar and lou_charToDots function
  - Added lou_compileString for adding entries to tables at
    run-time.</changelog>
<changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 2.3.0:
  + New features:
  - Multiple table search path (with LOUIS_TABLEPATH environment
    variable)
  - New --quiet option for lou_checktable
  - New functions to make libraries relocatable
  - New Braille tables: Swedish, Sorani (Kurdish), Ethiopic,
    Serbian, many Indian languages , Icelandic 6- and 8-dot,
    Catalan, Dutch Braille (for Belgium and the Netherlands),
    Flemish Braille Math Code (a.k.a. Woluwe code).
  + Braille Table Improvements: Chinse, Spanish Braille, French 6
    and 8 dot, Italian 8 dot, Generic Arabic Grade 1, Spanish,
    Norwegian.
  + Bug fixes:
  - Fixed a long standing bug with an infinite loop in the table
    compiler
  + Improved documentation
- Add pkg-config BuildRequires to get proper pkgconfig() provides.</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Update to version 2.4.1:
  + New features:
  - Czech hyphenation table
  - Spanish grade 1 table
  - New tamil table
  + Braille Table Improvements: Icelandic 8-dot, Norwegian,
    Portuguese grade1, uncontracted Spanish.
- Changes from version 2.4.0:
  + New features:
  - New Generic Farsi Grade 1 table
  - Emacs mode for editing Braille tables
  + Braille Table Improvements: Czech, French comp6 and comp8,
    Generic Arabic Grade 1, Romanian.</changelog>
<changelog author="vuntz@opensuse.org" date="1347278400">- Create a tools and a doc subpackages to contain the tools and
  documentation shipped by liblouis, instead of having a liblouis
  subpackage, since that's confusing (because what people are
  usually interested is the liblouis2 subpackage).
- Ship COPYING.LIB in liblouis2 subpackage and COPYING in the tools
  subpackage since everything is LGPL-3.0+, except the tools that
  are GPL-3.0+. That fixes bnc#779253.
- Since we don't have a liblouis subpackage anymore, add Provides
  and Obsoletes for it to liblouis2 for smooth upgrades.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 2.5.0:
  + New features:
  - New Braille tables
    . Estonian grade 0
    . Portuguese 8 dot Computer braille
  - UTF-8 support in tables
  - Improvements to the python bindings
  - Add a doctest infrastructure
  - Support for Python 3 in the Python bindings
  + Improved C-based test framework
  + Improved documentation
  + Braille table improvements
  + Bug fixes
- Remove checks for outdated openSUSE versions (&lt;= 11.2).</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.5.1:
  + Braille Table Improvements
  - Fix encoding problem in italian table and added more
    character definitions.
  - Rename it-it-g1.utb to it-it-comp6.utb and it-it-g1.utb2 to
    it-it-comp8.utb.
  + Bug fixes:
  - Fix outputPos and inlen where an input character generates
    multiple output characters.</changelog>
<changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 2.5.2:
  + New features:
  - New tool to trace rule application (lou_trace).
  - New Braille tables
    . Inuktitut grade 1.
    . UEB grade 1 and 2.
    . Korean table.
  - Braille Table Improvements
  - da-gk-g2.ctb, fixes for transposed â, å, æ, ä, ø  and ö,
    corrected/improved harness tests.
  - Corrections for en-GB-g2.ctb.
  - Corrections to the Hungarian grade 1 table.
  + Bug Fixes:
  - Update gnulib.
  - Fix a bug in the correct opcode which causes sometimes random
    results when translating.
  - Fixes for compiler warnings.
  - Fix some Valgrind warnings about invalid reads.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add python3-louis target.</changelog>
<changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.5.3:
  + New features:
  - New Braille tables.
    . Korean grade 1 and grade 2.
    . U.K. English 8 dot computer braille table.
    . New Russian literary and computer braille tables. These
    replace the older Russian tables which are left for
    backwards compatibility.
    . New hyphenation dictionary for Russian.
    . Updated hyphenation tables for the Norwegian language
    (nynorsk and bokmål).
    . New hyphenation dictionary for Esperanto.
    . New Esperanto grade 1 table, using the x system for
    accented letters.
  - runHarness.py:
    . Accept filename globs on the commandline to run specific
    harness files. In tests/harness, one can do make &lt;filename&gt;
    or make runall Removed from make check because these checks
    are checking the validity of our tables, rather than
    validity of the code.
  + Braille Table Improvements:
  - da-dk-g2.ctb, mostly rewritten to use nocross and hyphenation
    table.
  - Most tables: removed the default collapse whitespace
    statements, if you need to compress whitespace, consider
    adding compress.ctb to the list of tables when processing.
  - Corrections to Unified English Braille Code (Grade 1 and 2).
  - Corrections to apostrophes in the Computer Spanish 8 dots
    Braille table (Es-Es-G0.utb).
  - Corrections for double angle quotation marks and emphasis
    marks in the Norwegian Grade 0 Braille Table.
  - Fixes for a minor problem regarding the noletsign in
    Norwegian contracted braille.
  - Corrections to the Italian table.
  - Corrections to the Hungarian grade 1 table.
  - Corrections to English, U.S. Grade 2 (ABAE) table.
  - Further reorganization of the tables to remove duplication.
    Move litdigit opcode common parts and include where needed.
  - Removed obsolete en-us-g1.utb, which has been replaced by
    en-us-g1.ctb.
  - Added dictionary harness tests for: en-ueb-g2.ctb,
    en-us-g2.ctb.
  - Corrections to Nemeth character definitions.
  - Corrections to the Esperanto table.
  + Bug Fixes:
  - Cursor position calculation is now based on the same code
    that calculates inpos and outpos. This probably solves a
    number of bugs.
  - Fix nocross opcode processing.
  - Fix several buffer over/under runs in
    lou_translateString.c:hyphenate.
  - Fix the '=' problem, i.e. fix inputPositions calculation for
    the case where the equals sign is used as the dots operand.
  - Fix a bug when resizing a table. Previously not all
    references to this table were updated.
  + Backwards incompatible changes:
  - The feature that allowed a mapping between language code and
    Braille table was removed as it contained a out-of-bounds
    access bug, was never documented and probably never used.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">-Update to version 2.5.4:
  + New features
  - Added function lou_registerTableResolver for plugging in a
    table resolver callback from your host language.
  + Bug Fixes
  - Fixed ENDSEGMENT indicator in computer Braille.
  - Emphasized words should now be contracted consistently.
  - Fixed several problems with back-translation. A slash within
    a number and strings such as 5-inch-diameter and
    25-year-old-man should now back-translate correctly.
  - Fixed a problem with syllable opcode.
  - Fix warnings with gcc 4.8.2.
  - When a table is specified with an absolute or relative path,
    the "includes" in that table will now work as expected,
    meaning files in the same directory will be found.
  + Braille Table Improvements to fr-bfu-comp8, en-us-g2,
    en-ueb-g2, BUlgarian, en-gb-g1, Nemeth, Slovenian, Norwegian,
    Nepali, Danish.
  + Backwards incompatible changes
  - Delete the table chardefs-ueb.cti as these rules are now
    provided by en-ueb-chardefs.uti
- Update source URL.
- COPYING.LIB has been renamed to COPYING.LESSER
- Use fdupes for base package.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 2.6.4:
  + New features: YAML based harness tests. Harness tests can now
    be written in simple YAML notation and they are integrated with
    the normal `make check' command. They can be used for both ucs2
    and ucs4 and no Python is required.
  + Bug fixes:
  - Use a separate gnulib instance for the library and the tools.
    Use the strndup module to avoid build problems on windows.
  - Fix a problem with the nocross opcode when used in
    combination with the opcodes nocont and compbrl.
  - Fix a problem with the decoding of the harness test files.
  - Fix numerous problems in the way braille indicators are
    handled. There is now a safe version of the checkAttr
    function which makes sure that no attributes are checked
    beyond the boundaries of the currentInput. This fixes the
    random behavior with tests where the emphasis extends to the
    end of the input string.
  + Other changes:
  - If found use texi2any to build the documentation.
  - Fix permissions of Korean tables.
  - Update the windows build instructions.
  + Braille table improvements:
- Changes from version 2.6.3:
  + New features:
  - [beta] The new function lou_findTable can be used for table
    discovery based on meta data in table headers.
  - The Python API now has a new function to check tables aptly
    named ~checkTable~.
  + Bug fixes: Fixed a problem in resolveTable when using a Java
    resolver.
  + Other changes: The build dependency on makeinfo is now
    optional. If it is not installed we simply do not build the
    documentation.
  + Braille table improvements.
  + Corrections and improvements made to UEB tables.
- Changes from version 2.6.2:
  + New features: Harness tests now can test for typeform
    differences.
  + Bug fixes: Fix for emphasis bug.
  + Braille table improvements.
- Changes from version 2.6.1:
  + New features: New Braille tables.
  + Braille table improvements.
  + Bug fixes: Fix a compiler warning in the logging code.
  + Documentation updates: The documentation has been restructured
    to be more beginner friendly and a short introduction to
    translation table writing has been added.
  + Other changes:
  - When compiling with mingw or cygwin resulting dll is
    liblouis.dll.
  - runHarness.py: add new output format, compact output mode
    suitable for grepping.
  + Backwards incompatible changes:
  - Deleted ga.ctb now superseded by ga-g1.utb and ga.g2.ctb.
  - Nl-Nl-g1.utb has been removed. It is superseded by
    nl-NL-g1.ctb.
  - nl-be-g1.utb has been removed. It is superseded by
    nl-BE-g1.ctb.
- Changes from version 2.6.0:
  + New features:
  - New Braille tables.
  - Logging callback. There is now a callback system in place to
    get error messages and warnings.
  + Bug fixes:
  - Fix back translation problems when word gets split in unusual
    places causing back translation of whole words.
  - Fixed bug to prevent removal of \xffff between largesign
    rules.
  - Fixed a bug in back translation, when a letsign was
    encountered, the letsign was being applied beyond the element
    it applied to.
  - Fix memory leaks in the default table resolver introduced in
    the previous release.
  - Fixes to the build system.
  + Braille table improvements.
- Bump soname following upstream changes, leading to rename of
  package liblouis2 to liblouis9.
- Update url and sourceurl to new working ones.
- Add exlicit makeinfo BuildRequires, we want to build
  documentation.</changelog>
<changelog author="fcrozat@suse.com" date="1452513600">- Move data from library package to separate subpackage, to ensure
  library package can be safely upgraded.</changelog>
<changelog author="jengelh@inai.de" date="1453204800">- Use %{?_smp_mflags} for parallel build, newer %make_install
  for installation, and remove redundant %clean section.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Move %install_info_delete from postun to preun.
- Drop makeinfo BuildRequires: it's quite a big dependency and
  the .info file is present in the tarball.
- Install doc directly (make_install -C doc).</changelog>
<changelog author="mgorse@suse.com" date="1504699200">- Add patches to fix several CVEs, backported from upstream
  (boo#1056088 boo#1056090 boo#1056093 boo#1056095 boo#1056097
  boo#1056101 boo#1056105 CVE-2017-13738 CVE-2017-13739
  CVE-2017-13740 CVE-2017-13741 CVE_2017-13742 CVE-2017-13743
  CVE-2017-13744):
  0001-Fix-possible-out-of-bounds-write-from-a-followed-by-.patch
  0002-resolveSubtable-Fix-buffer-overflow-parsing-a-malfor.patch
  0003-Fix-possible-use-after-free-when-calling-compileBrai.patch</changelog>

</package>
<package pkgid="509bea56c8d582326c9fb5e2c450866b04b127639a22d878332bef91bf500621" name="liblouis-devel" arch="x86_64">
    <version epoch="0" ver="2.6.4" rel="6.1"/>

<changelog author="vuntz@novell.com" date="1250856000">- Add liblouis-dlopen-versioned.patch to have the python bindings
  open the versioned .so library, so that they don't require the
  devel package.
- Make python-louis require liblouis0.</changelog>
<changelog author="captain.magnus@opensuse.org" date="1250856001">- Update to version 1.7.0:
  + The main new feature of this release is the support for UK and
    Marburg math. Other changes include a new tool to check
    hyphenation and the usual improvement and addition of tables.
    Also The test suite has been enhanced and finally passes
  + Fix for library name and Python bindings
  + Documentation fixes
  + Many small fixes
- Remove liblouis-build-fix.patch. Fixed upstream
- Remove liblouis-dlopen-versioned.patch. Code changed</changelog>
<changelog author="vuntz@novell.com" date="1251460800">- Fix python-louis build: with the new upstream release, we now
  need to build the library before building the python bindings.</changelog>
<changelog author="vuntz@opensuse.org" date="1259755200">- Update to version 1.8.0:
  + This release contains a number of improvements notably the
    integrationof gnulib, the automatic generation of man pages and
    the addition of tables for German grade 2.
  + New features
  - New tables
    . Tables German Grade 2
    . Swiss German
  - Modified tables
    . Updated Norwegian tables
  - man pages
    . All tools accept the --version and --help options and are
    documented in man pages
  - Corpus based test cases for tables
  + Bug fixes
  - Many small fixes
- Rename liblouis0 subpackage to liblouis2, because of soname bump.</changelog>
<changelog author="vuntz@opensuse.org" date="1282996800">- Update to version 2.1.1:
  + Bug fixes:
  - Fixed problems with the Danish grade 2 table
  - Fixed problems with the Marburg maths table for mathematics
    and the UK maths table for mathematics
- Changes from version 2.1.0:
  + New features:
  - New tables:
    . Added tables for Portuguese grade 1 and 2
    . Added unicode.dis for Unicode braille
  - Modified tables: Updated Danish tables
  - Implemented language to table mapping
  - New format of error messages: the error messages are now
    reported in a format similar to the one used in gcc.
  - New opcode: added undefined opcode
  - Python bindings:
    . Allow the user to configure the maximum output length by
    specifying a number by which the input length is multiplied
    using the outlenMultiplier module variable.
    . Add compbrlLeftCursor mode constant.
    . Add compileString function which wraps lou_compileString.
    . Corrections/clarifications to docstrings.
    . Add python binding for the lou_hyphenate function.
    . Added python wrapper for lou_backTranslateString and
    lou_backTranslate.
  - Add liblouisxslt as an example to python/examples.
  - Add compbrlLeftCursor.
  + Bug fixes:
  - Fix the output cursorPos when the compbrlAtCursor mode is
    enabled and the characters around the cursor translate to
    multiple braille cells, such as in the Chinese braille
    tables.
  - Fix outpos when doing back translation
  - Fix the input/output position arrays for characters in the
    input which are undefined in the translation table.
  - Table fixes:
    . Fixed a bug with back translation of '*n'.
    . Fixes to the en-us-g2.ctb table
  - Python bindings:
    . Remove unnecessary imports, allowing the bindings to run in
    Python 2.7.
    . lou_translate* writes output information in typeform, so
    allocate enough bytes for it. Fixes possible buffer
    overruns and resultant crashes.
  - Miscellaneous:
    . Fixes to the man page generation to fix issues
    . Do not invoke help2man when cross-compiling
    . Documentation updates (issue 10)
    . Removing noletsign defaults
    . Many small fixes
- Changes from version 2.0.0:
  + New function: Adding lou_charSize function
- Changes from version 1.9.0:
  + New functions:
  - lou_dotsToChar and lou_charToDots function
  - Added lou_compileString for adding entries to tables at
    run-time.</changelog>
<changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 2.3.0:
  + New features:
  - Multiple table search path (with LOUIS_TABLEPATH environment
    variable)
  - New --quiet option for lou_checktable
  - New functions to make libraries relocatable
  - New Braille tables: Swedish, Sorani (Kurdish), Ethiopic,
    Serbian, many Indian languages , Icelandic 6- and 8-dot,
    Catalan, Dutch Braille (for Belgium and the Netherlands),
    Flemish Braille Math Code (a.k.a. Woluwe code).
  + Braille Table Improvements: Chinse, Spanish Braille, French 6
    and 8 dot, Italian 8 dot, Generic Arabic Grade 1, Spanish,
    Norwegian.
  + Bug fixes:
  - Fixed a long standing bug with an infinite loop in the table
    compiler
  + Improved documentation
- Add pkg-config BuildRequires to get proper pkgconfig() provides.</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Update to version 2.4.1:
  + New features:
  - Czech hyphenation table
  - Spanish grade 1 table
  - New tamil table
  + Braille Table Improvements: Icelandic 8-dot, Norwegian,
    Portuguese grade1, uncontracted Spanish.
- Changes from version 2.4.0:
  + New features:
  - New Generic Farsi Grade 1 table
  - Emacs mode for editing Braille tables
  + Braille Table Improvements: Czech, French comp6 and comp8,
    Generic Arabic Grade 1, Romanian.</changelog>
<changelog author="vuntz@opensuse.org" date="1347278400">- Create a tools and a doc subpackages to contain the tools and
  documentation shipped by liblouis, instead of having a liblouis
  subpackage, since that's confusing (because what people are
  usually interested is the liblouis2 subpackage).
- Ship COPYING.LIB in liblouis2 subpackage and COPYING in the tools
  subpackage since everything is LGPL-3.0+, except the tools that
  are GPL-3.0+. That fixes bnc#779253.
- Since we don't have a liblouis subpackage anymore, add Provides
  and Obsoletes for it to liblouis2 for smooth upgrades.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 2.5.0:
  + New features:
  - New Braille tables
    . Estonian grade 0
    . Portuguese 8 dot Computer braille
  - UTF-8 support in tables
  - Improvements to the python bindings
  - Add a doctest infrastructure
  - Support for Python 3 in the Python bindings
  + Improved C-based test framework
  + Improved documentation
  + Braille table improvements
  + Bug fixes
- Remove checks for outdated openSUSE versions (&lt;= 11.2).</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.5.1:
  + Braille Table Improvements
  - Fix encoding problem in italian table and added more
    character definitions.
  - Rename it-it-g1.utb to it-it-comp6.utb and it-it-g1.utb2 to
    it-it-comp8.utb.
  + Bug fixes:
  - Fix outputPos and inlen where an input character generates
    multiple output characters.</changelog>
<changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 2.5.2:
  + New features:
  - New tool to trace rule application (lou_trace).
  - New Braille tables
    . Inuktitut grade 1.
    . UEB grade 1 and 2.
    . Korean table.
  - Braille Table Improvements
  - da-gk-g2.ctb, fixes for transposed â, å, æ, ä, ø  and ö,
    corrected/improved harness tests.
  - Corrections for en-GB-g2.ctb.
  - Corrections to the Hungarian grade 1 table.
  + Bug Fixes:
  - Update gnulib.
  - Fix a bug in the correct opcode which causes sometimes random
    results when translating.
  - Fixes for compiler warnings.
  - Fix some Valgrind warnings about invalid reads.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add python3-louis target.</changelog>
<changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.5.3:
  + New features:
  - New Braille tables.
    . Korean grade 1 and grade 2.
    . U.K. English 8 dot computer braille table.
    . New Russian literary and computer braille tables. These
    replace the older Russian tables which are left for
    backwards compatibility.
    . New hyphenation dictionary for Russian.
    . Updated hyphenation tables for the Norwegian language
    (nynorsk and bokmål).
    . New hyphenation dictionary for Esperanto.
    . New Esperanto grade 1 table, using the x system for
    accented letters.
  - runHarness.py:
    . Accept filename globs on the commandline to run specific
    harness files. In tests/harness, one can do make &lt;filename&gt;
    or make runall Removed from make check because these checks
    are checking the validity of our tables, rather than
    validity of the code.
  + Braille Table Improvements:
  - da-dk-g2.ctb, mostly rewritten to use nocross and hyphenation
    table.
  - Most tables: removed the default collapse whitespace
    statements, if you need to compress whitespace, consider
    adding compress.ctb to the list of tables when processing.
  - Corrections to Unified English Braille Code (Grade 1 and 2).
  - Corrections to apostrophes in the Computer Spanish 8 dots
    Braille table (Es-Es-G0.utb).
  - Corrections for double angle quotation marks and emphasis
    marks in the Norwegian Grade 0 Braille Table.
  - Fixes for a minor problem regarding the noletsign in
    Norwegian contracted braille.
  - Corrections to the Italian table.
  - Corrections to the Hungarian grade 1 table.
  - Corrections to English, U.S. Grade 2 (ABAE) table.
  - Further reorganization of the tables to remove duplication.
    Move litdigit opcode common parts and include where needed.
  - Removed obsolete en-us-g1.utb, which has been replaced by
    en-us-g1.ctb.
  - Added dictionary harness tests for: en-ueb-g2.ctb,
    en-us-g2.ctb.
  - Corrections to Nemeth character definitions.
  - Corrections to the Esperanto table.
  + Bug Fixes:
  - Cursor position calculation is now based on the same code
    that calculates inpos and outpos. This probably solves a
    number of bugs.
  - Fix nocross opcode processing.
  - Fix several buffer over/under runs in
    lou_translateString.c:hyphenate.
  - Fix the '=' problem, i.e. fix inputPositions calculation for
    the case where the equals sign is used as the dots operand.
  - Fix a bug when resizing a table. Previously not all
    references to this table were updated.
  + Backwards incompatible changes:
  - The feature that allowed a mapping between language code and
    Braille table was removed as it contained a out-of-bounds
    access bug, was never documented and probably never used.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">-Update to version 2.5.4:
  + New features
  - Added function lou_registerTableResolver for plugging in a
    table resolver callback from your host language.
  + Bug Fixes
  - Fixed ENDSEGMENT indicator in computer Braille.
  - Emphasized words should now be contracted consistently.
  - Fixed several problems with back-translation. A slash within
    a number and strings such as 5-inch-diameter and
    25-year-old-man should now back-translate correctly.
  - Fixed a problem with syllable opcode.
  - Fix warnings with gcc 4.8.2.
  - When a table is specified with an absolute or relative path,
    the "includes" in that table will now work as expected,
    meaning files in the same directory will be found.
  + Braille Table Improvements to fr-bfu-comp8, en-us-g2,
    en-ueb-g2, BUlgarian, en-gb-g1, Nemeth, Slovenian, Norwegian,
    Nepali, Danish.
  + Backwards incompatible changes
  - Delete the table chardefs-ueb.cti as these rules are now
    provided by en-ueb-chardefs.uti
- Update source URL.
- COPYING.LIB has been renamed to COPYING.LESSER
- Use fdupes for base package.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 2.6.4:
  + New features: YAML based harness tests. Harness tests can now
    be written in simple YAML notation and they are integrated with
    the normal `make check' command. They can be used for both ucs2
    and ucs4 and no Python is required.
  + Bug fixes:
  - Use a separate gnulib instance for the library and the tools.
    Use the strndup module to avoid build problems on windows.
  - Fix a problem with the nocross opcode when used in
    combination with the opcodes nocont and compbrl.
  - Fix a problem with the decoding of the harness test files.
  - Fix numerous problems in the way braille indicators are
    handled. There is now a safe version of the checkAttr
    function which makes sure that no attributes are checked
    beyond the boundaries of the currentInput. This fixes the
    random behavior with tests where the emphasis extends to the
    end of the input string.
  + Other changes:
  - If found use texi2any to build the documentation.
  - Fix permissions of Korean tables.
  - Update the windows build instructions.
  + Braille table improvements:
- Changes from version 2.6.3:
  + New features:
  - [beta] The new function lou_findTable can be used for table
    discovery based on meta data in table headers.
  - The Python API now has a new function to check tables aptly
    named ~checkTable~.
  + Bug fixes: Fixed a problem in resolveTable when using a Java
    resolver.
  + Other changes: The build dependency on makeinfo is now
    optional. If it is not installed we simply do not build the
    documentation.
  + Braille table improvements.
  + Corrections and improvements made to UEB tables.
- Changes from version 2.6.2:
  + New features: Harness tests now can test for typeform
    differences.
  + Bug fixes: Fix for emphasis bug.
  + Braille table improvements.
- Changes from version 2.6.1:
  + New features: New Braille tables.
  + Braille table improvements.
  + Bug fixes: Fix a compiler warning in the logging code.
  + Documentation updates: The documentation has been restructured
    to be more beginner friendly and a short introduction to
    translation table writing has been added.
  + Other changes:
  - When compiling with mingw or cygwin resulting dll is
    liblouis.dll.
  - runHarness.py: add new output format, compact output mode
    suitable for grepping.
  + Backwards incompatible changes:
  - Deleted ga.ctb now superseded by ga-g1.utb and ga.g2.ctb.
  - Nl-Nl-g1.utb has been removed. It is superseded by
    nl-NL-g1.ctb.
  - nl-be-g1.utb has been removed. It is superseded by
    nl-BE-g1.ctb.
- Changes from version 2.6.0:
  + New features:
  - New Braille tables.
  - Logging callback. There is now a callback system in place to
    get error messages and warnings.
  + Bug fixes:
  - Fix back translation problems when word gets split in unusual
    places causing back translation of whole words.
  - Fixed bug to prevent removal of \xffff between largesign
    rules.
  - Fixed a bug in back translation, when a letsign was
    encountered, the letsign was being applied beyond the element
    it applied to.
  - Fix memory leaks in the default table resolver introduced in
    the previous release.
  - Fixes to the build system.
  + Braille table improvements.
- Bump soname following upstream changes, leading to rename of
  package liblouis2 to liblouis9.
- Update url and sourceurl to new working ones.
- Add exlicit makeinfo BuildRequires, we want to build
  documentation.</changelog>
<changelog author="fcrozat@suse.com" date="1452513600">- Move data from library package to separate subpackage, to ensure
  library package can be safely upgraded.</changelog>
<changelog author="jengelh@inai.de" date="1453204800">- Use %{?_smp_mflags} for parallel build, newer %make_install
  for installation, and remove redundant %clean section.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Move %install_info_delete from postun to preun.
- Drop makeinfo BuildRequires: it's quite a big dependency and
  the .info file is present in the tarball.
- Install doc directly (make_install -C doc).</changelog>
<changelog author="mgorse@suse.com" date="1504699200">- Add patches to fix several CVEs, backported from upstream
  (boo#1056088 boo#1056090 boo#1056093 boo#1056095 boo#1056097
  boo#1056101 boo#1056105 CVE-2017-13738 CVE-2017-13739
  CVE-2017-13740 CVE-2017-13741 CVE_2017-13742 CVE-2017-13743
  CVE-2017-13744):
  0001-Fix-possible-out-of-bounds-write-from-a-followed-by-.patch
  0002-resolveSubtable-Fix-buffer-overflow-parsing-a-malfor.patch
  0003-Fix-possible-use-after-free-when-calling-compileBrai.patch</changelog>

</package>
<package pkgid="cb1bffdd028d9c52a59e48c8a731a1535f278b1c1320563e032d374b84485537" name="liblouis-doc" arch="x86_64">
    <version epoch="0" ver="2.6.4" rel="6.1"/>

<changelog author="vuntz@novell.com" date="1250856000">- Add liblouis-dlopen-versioned.patch to have the python bindings
  open the versioned .so library, so that they don't require the
  devel package.
- Make python-louis require liblouis0.</changelog>
<changelog author="captain.magnus@opensuse.org" date="1250856001">- Update to version 1.7.0:
  + The main new feature of this release is the support for UK and
    Marburg math. Other changes include a new tool to check
    hyphenation and the usual improvement and addition of tables.
    Also The test suite has been enhanced and finally passes
  + Fix for library name and Python bindings
  + Documentation fixes
  + Many small fixes
- Remove liblouis-build-fix.patch. Fixed upstream
- Remove liblouis-dlopen-versioned.patch. Code changed</changelog>
<changelog author="vuntz@novell.com" date="1251460800">- Fix python-louis build: with the new upstream release, we now
  need to build the library before building the python bindings.</changelog>
<changelog author="vuntz@opensuse.org" date="1259755200">- Update to version 1.8.0:
  + This release contains a number of improvements notably the
    integrationof gnulib, the automatic generation of man pages and
    the addition of tables for German grade 2.
  + New features
  - New tables
    . Tables German Grade 2
    . Swiss German
  - Modified tables
    . Updated Norwegian tables
  - man pages
    . All tools accept the --version and --help options and are
    documented in man pages
  - Corpus based test cases for tables
  + Bug fixes
  - Many small fixes
- Rename liblouis0 subpackage to liblouis2, because of soname bump.</changelog>
<changelog author="vuntz@opensuse.org" date="1282996800">- Update to version 2.1.1:
  + Bug fixes:
  - Fixed problems with the Danish grade 2 table
  - Fixed problems with the Marburg maths table for mathematics
    and the UK maths table for mathematics
- Changes from version 2.1.0:
  + New features:
  - New tables:
    . Added tables for Portuguese grade 1 and 2
    . Added unicode.dis for Unicode braille
  - Modified tables: Updated Danish tables
  - Implemented language to table mapping
  - New format of error messages: the error messages are now
    reported in a format similar to the one used in gcc.
  - New opcode: added undefined opcode
  - Python bindings:
    . Allow the user to configure the maximum output length by
    specifying a number by which the input length is multiplied
    using the outlenMultiplier module variable.
    . Add compbrlLeftCursor mode constant.
    . Add compileString function which wraps lou_compileString.
    . Corrections/clarifications to docstrings.
    . Add python binding for the lou_hyphenate function.
    . Added python wrapper for lou_backTranslateString and
    lou_backTranslate.
  - Add liblouisxslt as an example to python/examples.
  - Add compbrlLeftCursor.
  + Bug fixes:
  - Fix the output cursorPos when the compbrlAtCursor mode is
    enabled and the characters around the cursor translate to
    multiple braille cells, such as in the Chinese braille
    tables.
  - Fix outpos when doing back translation
  - Fix the input/output position arrays for characters in the
    input which are undefined in the translation table.
  - Table fixes:
    . Fixed a bug with back translation of '*n'.
    . Fixes to the en-us-g2.ctb table
  - Python bindings:
    . Remove unnecessary imports, allowing the bindings to run in
    Python 2.7.
    . lou_translate* writes output information in typeform, so
    allocate enough bytes for it. Fixes possible buffer
    overruns and resultant crashes.
  - Miscellaneous:
    . Fixes to the man page generation to fix issues
    . Do not invoke help2man when cross-compiling
    . Documentation updates (issue 10)
    . Removing noletsign defaults
    . Many small fixes
- Changes from version 2.0.0:
  + New function: Adding lou_charSize function
- Changes from version 1.9.0:
  + New functions:
  - lou_dotsToChar and lou_charToDots function
  - Added lou_compileString for adding entries to tables at
    run-time.</changelog>
<changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 2.3.0:
  + New features:
  - Multiple table search path (with LOUIS_TABLEPATH environment
    variable)
  - New --quiet option for lou_checktable
  - New functions to make libraries relocatable
  - New Braille tables: Swedish, Sorani (Kurdish), Ethiopic,
    Serbian, many Indian languages , Icelandic 6- and 8-dot,
    Catalan, Dutch Braille (for Belgium and the Netherlands),
    Flemish Braille Math Code (a.k.a. Woluwe code).
  + Braille Table Improvements: Chinse, Spanish Braille, French 6
    and 8 dot, Italian 8 dot, Generic Arabic Grade 1, Spanish,
    Norwegian.
  + Bug fixes:
  - Fixed a long standing bug with an infinite loop in the table
    compiler
  + Improved documentation
- Add pkg-config BuildRequires to get proper pkgconfig() provides.</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Update to version 2.4.1:
  + New features:
  - Czech hyphenation table
  - Spanish grade 1 table
  - New tamil table
  + Braille Table Improvements: Icelandic 8-dot, Norwegian,
    Portuguese grade1, uncontracted Spanish.
- Changes from version 2.4.0:
  + New features:
  - New Generic Farsi Grade 1 table
  - Emacs mode for editing Braille tables
  + Braille Table Improvements: Czech, French comp6 and comp8,
    Generic Arabic Grade 1, Romanian.</changelog>
<changelog author="vuntz@opensuse.org" date="1347278400">- Create a tools and a doc subpackages to contain the tools and
  documentation shipped by liblouis, instead of having a liblouis
  subpackage, since that's confusing (because what people are
  usually interested is the liblouis2 subpackage).
- Ship COPYING.LIB in liblouis2 subpackage and COPYING in the tools
  subpackage since everything is LGPL-3.0+, except the tools that
  are GPL-3.0+. That fixes bnc#779253.
- Since we don't have a liblouis subpackage anymore, add Provides
  and Obsoletes for it to liblouis2 for smooth upgrades.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 2.5.0:
  + New features:
  - New Braille tables
    . Estonian grade 0
    . Portuguese 8 dot Computer braille
  - UTF-8 support in tables
  - Improvements to the python bindings
  - Add a doctest infrastructure
  - Support for Python 3 in the Python bindings
  + Improved C-based test framework
  + Improved documentation
  + Braille table improvements
  + Bug fixes
- Remove checks for outdated openSUSE versions (&lt;= 11.2).</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.5.1:
  + Braille Table Improvements
  - Fix encoding problem in italian table and added more
    character definitions.
  - Rename it-it-g1.utb to it-it-comp6.utb and it-it-g1.utb2 to
    it-it-comp8.utb.
  + Bug fixes:
  - Fix outputPos and inlen where an input character generates
    multiple output characters.</changelog>
<changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 2.5.2:
  + New features:
  - New tool to trace rule application (lou_trace).
  - New Braille tables
    . Inuktitut grade 1.
    . UEB grade 1 and 2.
    . Korean table.
  - Braille Table Improvements
  - da-gk-g2.ctb, fixes for transposed â, å, æ, ä, ø  and ö,
    corrected/improved harness tests.
  - Corrections for en-GB-g2.ctb.
  - Corrections to the Hungarian grade 1 table.
  + Bug Fixes:
  - Update gnulib.
  - Fix a bug in the correct opcode which causes sometimes random
    results when translating.
  - Fixes for compiler warnings.
  - Fix some Valgrind warnings about invalid reads.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add python3-louis target.</changelog>
<changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.5.3:
  + New features:
  - New Braille tables.
    . Korean grade 1 and grade 2.
    . U.K. English 8 dot computer braille table.
    . New Russian literary and computer braille tables. These
    replace the older Russian tables which are left for
    backwards compatibility.
    . New hyphenation dictionary for Russian.
    . Updated hyphenation tables for the Norwegian language
    (nynorsk and bokmål).
    . New hyphenation dictionary for Esperanto.
    . New Esperanto grade 1 table, using the x system for
    accented letters.
  - runHarness.py:
    . Accept filename globs on the commandline to run specific
    harness files. In tests/harness, one can do make &lt;filename&gt;
    or make runall Removed from make check because these checks
    are checking the validity of our tables, rather than
    validity of the code.
  + Braille Table Improvements:
  - da-dk-g2.ctb, mostly rewritten to use nocross and hyphenation
    table.
  - Most tables: removed the default collapse whitespace
    statements, if you need to compress whitespace, consider
    adding compress.ctb to the list of tables when processing.
  - Corrections to Unified English Braille Code (Grade 1 and 2).
  - Corrections to apostrophes in the Computer Spanish 8 dots
    Braille table (Es-Es-G0.utb).
  - Corrections for double angle quotation marks and emphasis
    marks in the Norwegian Grade 0 Braille Table.
  - Fixes for a minor problem regarding the noletsign in
    Norwegian contracted braille.
  - Corrections to the Italian table.
  - Corrections to the Hungarian grade 1 table.
  - Corrections to English, U.S. Grade 2 (ABAE) table.
  - Further reorganization of the tables to remove duplication.
    Move litdigit opcode common parts and include where needed.
  - Removed obsolete en-us-g1.utb, which has been replaced by
    en-us-g1.ctb.
  - Added dictionary harness tests for: en-ueb-g2.ctb,
    en-us-g2.ctb.
  - Corrections to Nemeth character definitions.
  - Corrections to the Esperanto table.
  + Bug Fixes:
  - Cursor position calculation is now based on the same code
    that calculates inpos and outpos. This probably solves a
    number of bugs.
  - Fix nocross opcode processing.
  - Fix several buffer over/under runs in
    lou_translateString.c:hyphenate.
  - Fix the '=' problem, i.e. fix inputPositions calculation for
    the case where the equals sign is used as the dots operand.
  - Fix a bug when resizing a table. Previously not all
    references to this table were updated.
  + Backwards incompatible changes:
  - The feature that allowed a mapping between language code and
    Braille table was removed as it contained a out-of-bounds
    access bug, was never documented and probably never used.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">-Update to version 2.5.4:
  + New features
  - Added function lou_registerTableResolver for plugging in a
    table resolver callback from your host language.
  + Bug Fixes
  - Fixed ENDSEGMENT indicator in computer Braille.
  - Emphasized words should now be contracted consistently.
  - Fixed several problems with back-translation. A slash within
    a number and strings such as 5-inch-diameter and
    25-year-old-man should now back-translate correctly.
  - Fixed a problem with syllable opcode.
  - Fix warnings with gcc 4.8.2.
  - When a table is specified with an absolute or relative path,
    the "includes" in that table will now work as expected,
    meaning files in the same directory will be found.
  + Braille Table Improvements to fr-bfu-comp8, en-us-g2,
    en-ueb-g2, BUlgarian, en-gb-g1, Nemeth, Slovenian, Norwegian,
    Nepali, Danish.
  + Backwards incompatible changes
  - Delete the table chardefs-ueb.cti as these rules are now
    provided by en-ueb-chardefs.uti
- Update source URL.
- COPYING.LIB has been renamed to COPYING.LESSER
- Use fdupes for base package.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 2.6.4:
  + New features: YAML based harness tests. Harness tests can now
    be written in simple YAML notation and they are integrated with
    the normal `make check' command. They can be used for both ucs2
    and ucs4 and no Python is required.
  + Bug fixes:
  - Use a separate gnulib instance for the library and the tools.
    Use the strndup module to avoid build problems on windows.
  - Fix a problem with the nocross opcode when used in
    combination with the opcodes nocont and compbrl.
  - Fix a problem with the decoding of the harness test files.
  - Fix numerous problems in the way braille indicators are
    handled. There is now a safe version of the checkAttr
    function which makes sure that no attributes are checked
    beyond the boundaries of the currentInput. This fixes the
    random behavior with tests where the emphasis extends to the
    end of the input string.
  + Other changes:
  - If found use texi2any to build the documentation.
  - Fix permissions of Korean tables.
  - Update the windows build instructions.
  + Braille table improvements:
- Changes from version 2.6.3:
  + New features:
  - [beta] The new function lou_findTable can be used for table
    discovery based on meta data in table headers.
  - The Python API now has a new function to check tables aptly
    named ~checkTable~.
  + Bug fixes: Fixed a problem in resolveTable when using a Java
    resolver.
  + Other changes: The build dependency on makeinfo is now
    optional. If it is not installed we simply do not build the
    documentation.
  + Braille table improvements.
  + Corrections and improvements made to UEB tables.
- Changes from version 2.6.2:
  + New features: Harness tests now can test for typeform
    differences.
  + Bug fixes: Fix for emphasis bug.
  + Braille table improvements.
- Changes from version 2.6.1:
  + New features: New Braille tables.
  + Braille table improvements.
  + Bug fixes: Fix a compiler warning in the logging code.
  + Documentation updates: The documentation has been restructured
    to be more beginner friendly and a short introduction to
    translation table writing has been added.
  + Other changes:
  - When compiling with mingw or cygwin resulting dll is
    liblouis.dll.
  - runHarness.py: add new output format, compact output mode
    suitable for grepping.
  + Backwards incompatible changes:
  - Deleted ga.ctb now superseded by ga-g1.utb and ga.g2.ctb.
  - Nl-Nl-g1.utb has been removed. It is superseded by
    nl-NL-g1.ctb.
  - nl-be-g1.utb has been removed. It is superseded by
    nl-BE-g1.ctb.
- Changes from version 2.6.0:
  + New features:
  - New Braille tables.
  - Logging callback. There is now a callback system in place to
    get error messages and warnings.
  + Bug fixes:
  - Fix back translation problems when word gets split in unusual
    places causing back translation of whole words.
  - Fixed bug to prevent removal of \xffff between largesign
    rules.
  - Fixed a bug in back translation, when a letsign was
    encountered, the letsign was being applied beyond the element
    it applied to.
  - Fix memory leaks in the default table resolver introduced in
    the previous release.
  - Fixes to the build system.
  + Braille table improvements.
- Bump soname following upstream changes, leading to rename of
  package liblouis2 to liblouis9.
- Update url and sourceurl to new working ones.
- Add exlicit makeinfo BuildRequires, we want to build
  documentation.</changelog>
<changelog author="fcrozat@suse.com" date="1452513600">- Move data from library package to separate subpackage, to ensure
  library package can be safely upgraded.</changelog>
<changelog author="jengelh@inai.de" date="1453204800">- Use %{?_smp_mflags} for parallel build, newer %make_install
  for installation, and remove redundant %clean section.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Move %install_info_delete from postun to preun.
- Drop makeinfo BuildRequires: it's quite a big dependency and
  the .info file is present in the tarball.
- Install doc directly (make_install -C doc).</changelog>
<changelog author="mgorse@suse.com" date="1504699200">- Add patches to fix several CVEs, backported from upstream
  (boo#1056088 boo#1056090 boo#1056093 boo#1056095 boo#1056097
  boo#1056101 boo#1056105 CVE-2017-13738 CVE-2017-13739
  CVE-2017-13740 CVE-2017-13741 CVE_2017-13742 CVE-2017-13743
  CVE-2017-13744):
  0001-Fix-possible-out-of-bounds-write-from-a-followed-by-.patch
  0002-resolveSubtable-Fix-buffer-overflow-parsing-a-malfor.patch
  0003-Fix-possible-use-after-free-when-calling-compileBrai.patch</changelog>

</package>
<package pkgid="9eadd21dc6d7bb5a8ef556aeed5bfbe8147d611d945255ab458fb8a68c17dea4" name="liblouis-tools" arch="x86_64">
    <version epoch="0" ver="2.6.4" rel="6.1"/>

<changelog author="vuntz@novell.com" date="1250856000">- Add liblouis-dlopen-versioned.patch to have the python bindings
  open the versioned .so library, so that they don't require the
  devel package.
- Make python-louis require liblouis0.</changelog>
<changelog author="captain.magnus@opensuse.org" date="1250856001">- Update to version 1.7.0:
  + The main new feature of this release is the support for UK and
    Marburg math. Other changes include a new tool to check
    hyphenation and the usual improvement and addition of tables.
    Also The test suite has been enhanced and finally passes
  + Fix for library name and Python bindings
  + Documentation fixes
  + Many small fixes
- Remove liblouis-build-fix.patch. Fixed upstream
- Remove liblouis-dlopen-versioned.patch. Code changed</changelog>
<changelog author="vuntz@novell.com" date="1251460800">- Fix python-louis build: with the new upstream release, we now
  need to build the library before building the python bindings.</changelog>
<changelog author="vuntz@opensuse.org" date="1259755200">- Update to version 1.8.0:
  + This release contains a number of improvements notably the
    integrationof gnulib, the automatic generation of man pages and
    the addition of tables for German grade 2.
  + New features
  - New tables
    . Tables German Grade 2
    . Swiss German
  - Modified tables
    . Updated Norwegian tables
  - man pages
    . All tools accept the --version and --help options and are
    documented in man pages
  - Corpus based test cases for tables
  + Bug fixes
  - Many small fixes
- Rename liblouis0 subpackage to liblouis2, because of soname bump.</changelog>
<changelog author="vuntz@opensuse.org" date="1282996800">- Update to version 2.1.1:
  + Bug fixes:
  - Fixed problems with the Danish grade 2 table
  - Fixed problems with the Marburg maths table for mathematics
    and the UK maths table for mathematics
- Changes from version 2.1.0:
  + New features:
  - New tables:
    . Added tables for Portuguese grade 1 and 2
    . Added unicode.dis for Unicode braille
  - Modified tables: Updated Danish tables
  - Implemented language to table mapping
  - New format of error messages: the error messages are now
    reported in a format similar to the one used in gcc.
  - New opcode: added undefined opcode
  - Python bindings:
    . Allow the user to configure the maximum output length by
    specifying a number by which the input length is multiplied
    using the outlenMultiplier module variable.
    . Add compbrlLeftCursor mode constant.
    . Add compileString function which wraps lou_compileString.
    . Corrections/clarifications to docstrings.
    . Add python binding for the lou_hyphenate function.
    . Added python wrapper for lou_backTranslateString and
    lou_backTranslate.
  - Add liblouisxslt as an example to python/examples.
  - Add compbrlLeftCursor.
  + Bug fixes:
  - Fix the output cursorPos when the compbrlAtCursor mode is
    enabled and the characters around the cursor translate to
    multiple braille cells, such as in the Chinese braille
    tables.
  - Fix outpos when doing back translation
  - Fix the input/output position arrays for characters in the
    input which are undefined in the translation table.
  - Table fixes:
    . Fixed a bug with back translation of '*n'.
    . Fixes to the en-us-g2.ctb table
  - Python bindings:
    . Remove unnecessary imports, allowing the bindings to run in
    Python 2.7.
    . lou_translate* writes output information in typeform, so
    allocate enough bytes for it. Fixes possible buffer
    overruns and resultant crashes.
  - Miscellaneous:
    . Fixes to the man page generation to fix issues
    . Do not invoke help2man when cross-compiling
    . Documentation updates (issue 10)
    . Removing noletsign defaults
    . Many small fixes
- Changes from version 2.0.0:
  + New function: Adding lou_charSize function
- Changes from version 1.9.0:
  + New functions:
  - lou_dotsToChar and lou_charToDots function
  - Added lou_compileString for adding entries to tables at
    run-time.</changelog>
<changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 2.3.0:
  + New features:
  - Multiple table search path (with LOUIS_TABLEPATH environment
    variable)
  - New --quiet option for lou_checktable
  - New functions to make libraries relocatable
  - New Braille tables: Swedish, Sorani (Kurdish), Ethiopic,
    Serbian, many Indian languages , Icelandic 6- and 8-dot,
    Catalan, Dutch Braille (for Belgium and the Netherlands),
    Flemish Braille Math Code (a.k.a. Woluwe code).
  + Braille Table Improvements: Chinse, Spanish Braille, French 6
    and 8 dot, Italian 8 dot, Generic Arabic Grade 1, Spanish,
    Norwegian.
  + Bug fixes:
  - Fixed a long standing bug with an infinite loop in the table
    compiler
  + Improved documentation
- Add pkg-config BuildRequires to get proper pkgconfig() provides.</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Update to version 2.4.1:
  + New features:
  - Czech hyphenation table
  - Spanish grade 1 table
  - New tamil table
  + Braille Table Improvements: Icelandic 8-dot, Norwegian,
    Portuguese grade1, uncontracted Spanish.
- Changes from version 2.4.0:
  + New features:
  - New Generic Farsi Grade 1 table
  - Emacs mode for editing Braille tables
  + Braille Table Improvements: Czech, French comp6 and comp8,
    Generic Arabic Grade 1, Romanian.</changelog>
<changelog author="vuntz@opensuse.org" date="1347278400">- Create a tools and a doc subpackages to contain the tools and
  documentation shipped by liblouis, instead of having a liblouis
  subpackage, since that's confusing (because what people are
  usually interested is the liblouis2 subpackage).
- Ship COPYING.LIB in liblouis2 subpackage and COPYING in the tools
  subpackage since everything is LGPL-3.0+, except the tools that
  are GPL-3.0+. That fixes bnc#779253.
- Since we don't have a liblouis subpackage anymore, add Provides
  and Obsoletes for it to liblouis2 for smooth upgrades.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 2.5.0:
  + New features:
  - New Braille tables
    . Estonian grade 0
    . Portuguese 8 dot Computer braille
  - UTF-8 support in tables
  - Improvements to the python bindings
  - Add a doctest infrastructure
  - Support for Python 3 in the Python bindings
  + Improved C-based test framework
  + Improved documentation
  + Braille table improvements
  + Bug fixes
- Remove checks for outdated openSUSE versions (&lt;= 11.2).</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.5.1:
  + Braille Table Improvements
  - Fix encoding problem in italian table and added more
    character definitions.
  - Rename it-it-g1.utb to it-it-comp6.utb and it-it-g1.utb2 to
    it-it-comp8.utb.
  + Bug fixes:
  - Fix outputPos and inlen where an input character generates
    multiple output characters.</changelog>
<changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 2.5.2:
  + New features:
  - New tool to trace rule application (lou_trace).
  - New Braille tables
    . Inuktitut grade 1.
    . UEB grade 1 and 2.
    . Korean table.
  - Braille Table Improvements
  - da-gk-g2.ctb, fixes for transposed â, å, æ, ä, ø  and ö,
    corrected/improved harness tests.
  - Corrections for en-GB-g2.ctb.
  - Corrections to the Hungarian grade 1 table.
  + Bug Fixes:
  - Update gnulib.
  - Fix a bug in the correct opcode which causes sometimes random
    results when translating.
  - Fixes for compiler warnings.
  - Fix some Valgrind warnings about invalid reads.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add python3-louis target.</changelog>
<changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.5.3:
  + New features:
  - New Braille tables.
    . Korean grade 1 and grade 2.
    . U.K. English 8 dot computer braille table.
    . New Russian literary and computer braille tables. These
    replace the older Russian tables which are left for
    backwards compatibility.
    . New hyphenation dictionary for Russian.
    . Updated hyphenation tables for the Norwegian language
    (nynorsk and bokmål).
    . New hyphenation dictionary for Esperanto.
    . New Esperanto grade 1 table, using the x system for
    accented letters.
  - runHarness.py:
    . Accept filename globs on the commandline to run specific
    harness files. In tests/harness, one can do make &lt;filename&gt;
    or make runall Removed from make check because these checks
    are checking the validity of our tables, rather than
    validity of the code.
  + Braille Table Improvements:
  - da-dk-g2.ctb, mostly rewritten to use nocross and hyphenation
    table.
  - Most tables: removed the default collapse whitespace
    statements, if you need to compress whitespace, consider
    adding compress.ctb to the list of tables when processing.
  - Corrections to Unified English Braille Code (Grade 1 and 2).
  - Corrections to apostrophes in the Computer Spanish 8 dots
    Braille table (Es-Es-G0.utb).
  - Corrections for double angle quotation marks and emphasis
    marks in the Norwegian Grade 0 Braille Table.
  - Fixes for a minor problem regarding the noletsign in
    Norwegian contracted braille.
  - Corrections to the Italian table.
  - Corrections to the Hungarian grade 1 table.
  - Corrections to English, U.S. Grade 2 (ABAE) table.
  - Further reorganization of the tables to remove duplication.
    Move litdigit opcode common parts and include where needed.
  - Removed obsolete en-us-g1.utb, which has been replaced by
    en-us-g1.ctb.
  - Added dictionary harness tests for: en-ueb-g2.ctb,
    en-us-g2.ctb.
  - Corrections to Nemeth character definitions.
  - Corrections to the Esperanto table.
  + Bug Fixes:
  - Cursor position calculation is now based on the same code
    that calculates inpos and outpos. This probably solves a
    number of bugs.
  - Fix nocross opcode processing.
  - Fix several buffer over/under runs in
    lou_translateString.c:hyphenate.
  - Fix the '=' problem, i.e. fix inputPositions calculation for
    the case where the equals sign is used as the dots operand.
  - Fix a bug when resizing a table. Previously not all
    references to this table were updated.
  + Backwards incompatible changes:
  - The feature that allowed a mapping between language code and
    Braille table was removed as it contained a out-of-bounds
    access bug, was never documented and probably never used.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">-Update to version 2.5.4:
  + New features
  - Added function lou_registerTableResolver for plugging in a
    table resolver callback from your host language.
  + Bug Fixes
  - Fixed ENDSEGMENT indicator in computer Braille.
  - Emphasized words should now be contracted consistently.
  - Fixed several problems with back-translation. A slash within
    a number and strings such as 5-inch-diameter and
    25-year-old-man should now back-translate correctly.
  - Fixed a problem with syllable opcode.
  - Fix warnings with gcc 4.8.2.
  - When a table is specified with an absolute or relative path,
    the "includes" in that table will now work as expected,
    meaning files in the same directory will be found.
  + Braille Table Improvements to fr-bfu-comp8, en-us-g2,
    en-ueb-g2, BUlgarian, en-gb-g1, Nemeth, Slovenian, Norwegian,
    Nepali, Danish.
  + Backwards incompatible changes
  - Delete the table chardefs-ueb.cti as these rules are now
    provided by en-ueb-chardefs.uti
- Update source URL.
- COPYING.LIB has been renamed to COPYING.LESSER
- Use fdupes for base package.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 2.6.4:
  + New features: YAML based harness tests. Harness tests can now
    be written in simple YAML notation and they are integrated with
    the normal `make check' command. They can be used for both ucs2
    and ucs4 and no Python is required.
  + Bug fixes:
  - Use a separate gnulib instance for the library and the tools.
    Use the strndup module to avoid build problems on windows.
  - Fix a problem with the nocross opcode when used in
    combination with the opcodes nocont and compbrl.
  - Fix a problem with the decoding of the harness test files.
  - Fix numerous problems in the way braille indicators are
    handled. There is now a safe version of the checkAttr
    function which makes sure that no attributes are checked
    beyond the boundaries of the currentInput. This fixes the
    random behavior with tests where the emphasis extends to the
    end of the input string.
  + Other changes:
  - If found use texi2any to build the documentation.
  - Fix permissions of Korean tables.
  - Update the windows build instructions.
  + Braille table improvements:
- Changes from version 2.6.3:
  + New features:
  - [beta] The new function lou_findTable can be used for table
    discovery based on meta data in table headers.
  - The Python API now has a new function to check tables aptly
    named ~checkTable~.
  + Bug fixes: Fixed a problem in resolveTable when using a Java
    resolver.
  + Other changes: The build dependency on makeinfo is now
    optional. If it is not installed we simply do not build the
    documentation.
  + Braille table improvements.
  + Corrections and improvements made to UEB tables.
- Changes from version 2.6.2:
  + New features: Harness tests now can test for typeform
    differences.
  + Bug fixes: Fix for emphasis bug.
  + Braille table improvements.
- Changes from version 2.6.1:
  + New features: New Braille tables.
  + Braille table improvements.
  + Bug fixes: Fix a compiler warning in the logging code.
  + Documentation updates: The documentation has been restructured
    to be more beginner friendly and a short introduction to
    translation table writing has been added.
  + Other changes:
  - When compiling with mingw or cygwin resulting dll is
    liblouis.dll.
  - runHarness.py: add new output format, compact output mode
    suitable for grepping.
  + Backwards incompatible changes:
  - Deleted ga.ctb now superseded by ga-g1.utb and ga.g2.ctb.
  - Nl-Nl-g1.utb has been removed. It is superseded by
    nl-NL-g1.ctb.
  - nl-be-g1.utb has been removed. It is superseded by
    nl-BE-g1.ctb.
- Changes from version 2.6.0:
  + New features:
  - New Braille tables.
  - Logging callback. There is now a callback system in place to
    get error messages and warnings.
  + Bug fixes:
  - Fix back translation problems when word gets split in unusual
    places causing back translation of whole words.
  - Fixed bug to prevent removal of \xffff between largesign
    rules.
  - Fixed a bug in back translation, when a letsign was
    encountered, the letsign was being applied beyond the element
    it applied to.
  - Fix memory leaks in the default table resolver introduced in
    the previous release.
  - Fixes to the build system.
  + Braille table improvements.
- Bump soname following upstream changes, leading to rename of
  package liblouis2 to liblouis9.
- Update url and sourceurl to new working ones.
- Add exlicit makeinfo BuildRequires, we want to build
  documentation.</changelog>
<changelog author="fcrozat@suse.com" date="1452513600">- Move data from library package to separate subpackage, to ensure
  library package can be safely upgraded.</changelog>
<changelog author="jengelh@inai.de" date="1453204800">- Use %{?_smp_mflags} for parallel build, newer %make_install
  for installation, and remove redundant %clean section.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Move %install_info_delete from postun to preun.
- Drop makeinfo BuildRequires: it's quite a big dependency and
  the .info file is present in the tarball.
- Install doc directly (make_install -C doc).</changelog>
<changelog author="mgorse@suse.com" date="1504699200">- Add patches to fix several CVEs, backported from upstream
  (boo#1056088 boo#1056090 boo#1056093 boo#1056095 boo#1056097
  boo#1056101 boo#1056105 CVE-2017-13738 CVE-2017-13739
  CVE-2017-13740 CVE-2017-13741 CVE_2017-13742 CVE-2017-13743
  CVE-2017-13744):
  0001-Fix-possible-out-of-bounds-write-from-a-followed-by-.patch
  0002-resolveSubtable-Fix-buffer-overflow-parsing-a-malfor.patch
  0003-Fix-possible-use-after-free-when-calling-compileBrai.patch</changelog>

</package>
<package pkgid="2e633b6e087e751d3ec38d34bc5dda60e02910d02fc87756fcac38e997afdb83" name="liblouis9" arch="x86_64">
    <version epoch="0" ver="2.6.4" rel="6.1"/>

<changelog author="vuntz@novell.com" date="1250856000">- Add liblouis-dlopen-versioned.patch to have the python bindings
  open the versioned .so library, so that they don't require the
  devel package.
- Make python-louis require liblouis0.</changelog>
<changelog author="captain.magnus@opensuse.org" date="1250856001">- Update to version 1.7.0:
  + The main new feature of this release is the support for UK and
    Marburg math. Other changes include a new tool to check
    hyphenation and the usual improvement and addition of tables.
    Also The test suite has been enhanced and finally passes
  + Fix for library name and Python bindings
  + Documentation fixes
  + Many small fixes
- Remove liblouis-build-fix.patch. Fixed upstream
- Remove liblouis-dlopen-versioned.patch. Code changed</changelog>
<changelog author="vuntz@novell.com" date="1251460800">- Fix python-louis build: with the new upstream release, we now
  need to build the library before building the python bindings.</changelog>
<changelog author="vuntz@opensuse.org" date="1259755200">- Update to version 1.8.0:
  + This release contains a number of improvements notably the
    integrationof gnulib, the automatic generation of man pages and
    the addition of tables for German grade 2.
  + New features
  - New tables
    . Tables German Grade 2
    . Swiss German
  - Modified tables
    . Updated Norwegian tables
  - man pages
    . All tools accept the --version and --help options and are
    documented in man pages
  - Corpus based test cases for tables
  + Bug fixes
  - Many small fixes
- Rename liblouis0 subpackage to liblouis2, because of soname bump.</changelog>
<changelog author="vuntz@opensuse.org" date="1282996800">- Update to version 2.1.1:
  + Bug fixes:
  - Fixed problems with the Danish grade 2 table
  - Fixed problems with the Marburg maths table for mathematics
    and the UK maths table for mathematics
- Changes from version 2.1.0:
  + New features:
  - New tables:
    . Added tables for Portuguese grade 1 and 2
    . Added unicode.dis for Unicode braille
  - Modified tables: Updated Danish tables
  - Implemented language to table mapping
  - New format of error messages: the error messages are now
    reported in a format similar to the one used in gcc.
  - New opcode: added undefined opcode
  - Python bindings:
    . Allow the user to configure the maximum output length by
    specifying a number by which the input length is multiplied
    using the outlenMultiplier module variable.
    . Add compbrlLeftCursor mode constant.
    . Add compileString function which wraps lou_compileString.
    . Corrections/clarifications to docstrings.
    . Add python binding for the lou_hyphenate function.
    . Added python wrapper for lou_backTranslateString and
    lou_backTranslate.
  - Add liblouisxslt as an example to python/examples.
  - Add compbrlLeftCursor.
  + Bug fixes:
  - Fix the output cursorPos when the compbrlAtCursor mode is
    enabled and the characters around the cursor translate to
    multiple braille cells, such as in the Chinese braille
    tables.
  - Fix outpos when doing back translation
  - Fix the input/output position arrays for characters in the
    input which are undefined in the translation table.
  - Table fixes:
    . Fixed a bug with back translation of '*n'.
    . Fixes to the en-us-g2.ctb table
  - Python bindings:
    . Remove unnecessary imports, allowing the bindings to run in
    Python 2.7.
    . lou_translate* writes output information in typeform, so
    allocate enough bytes for it. Fixes possible buffer
    overruns and resultant crashes.
  - Miscellaneous:
    . Fixes to the man page generation to fix issues
    . Do not invoke help2man when cross-compiling
    . Documentation updates (issue 10)
    . Removing noletsign defaults
    . Many small fixes
- Changes from version 2.0.0:
  + New function: Adding lou_charSize function
- Changes from version 1.9.0:
  + New functions:
  - lou_dotsToChar and lou_charToDots function
  - Added lou_compileString for adding entries to tables at
    run-time.</changelog>
<changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 2.3.0:
  + New features:
  - Multiple table search path (with LOUIS_TABLEPATH environment
    variable)
  - New --quiet option for lou_checktable
  - New functions to make libraries relocatable
  - New Braille tables: Swedish, Sorani (Kurdish), Ethiopic,
    Serbian, many Indian languages , Icelandic 6- and 8-dot,
    Catalan, Dutch Braille (for Belgium and the Netherlands),
    Flemish Braille Math Code (a.k.a. Woluwe code).
  + Braille Table Improvements: Chinse, Spanish Braille, French 6
    and 8 dot, Italian 8 dot, Generic Arabic Grade 1, Spanish,
    Norwegian.
  + Bug fixes:
  - Fixed a long standing bug with an infinite loop in the table
    compiler
  + Improved documentation
- Add pkg-config BuildRequires to get proper pkgconfig() provides.</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Update to version 2.4.1:
  + New features:
  - Czech hyphenation table
  - Spanish grade 1 table
  - New tamil table
  + Braille Table Improvements: Icelandic 8-dot, Norwegian,
    Portuguese grade1, uncontracted Spanish.
- Changes from version 2.4.0:
  + New features:
  - New Generic Farsi Grade 1 table
  - Emacs mode for editing Braille tables
  + Braille Table Improvements: Czech, French comp6 and comp8,
    Generic Arabic Grade 1, Romanian.</changelog>
<changelog author="vuntz@opensuse.org" date="1347278400">- Create a tools and a doc subpackages to contain the tools and
  documentation shipped by liblouis, instead of having a liblouis
  subpackage, since that's confusing (because what people are
  usually interested is the liblouis2 subpackage).
- Ship COPYING.LIB in liblouis2 subpackage and COPYING in the tools
  subpackage since everything is LGPL-3.0+, except the tools that
  are GPL-3.0+. That fixes bnc#779253.
- Since we don't have a liblouis subpackage anymore, add Provides
  and Obsoletes for it to liblouis2 for smooth upgrades.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 2.5.0:
  + New features:
  - New Braille tables
    . Estonian grade 0
    . Portuguese 8 dot Computer braille
  - UTF-8 support in tables
  - Improvements to the python bindings
  - Add a doctest infrastructure
  - Support for Python 3 in the Python bindings
  + Improved C-based test framework
  + Improved documentation
  + Braille table improvements
  + Bug fixes
- Remove checks for outdated openSUSE versions (&lt;= 11.2).</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.5.1:
  + Braille Table Improvements
  - Fix encoding problem in italian table and added more
    character definitions.
  - Rename it-it-g1.utb to it-it-comp6.utb and it-it-g1.utb2 to
    it-it-comp8.utb.
  + Bug fixes:
  - Fix outputPos and inlen where an input character generates
    multiple output characters.</changelog>
<changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 2.5.2:
  + New features:
  - New tool to trace rule application (lou_trace).
  - New Braille tables
    . Inuktitut grade 1.
    . UEB grade 1 and 2.
    . Korean table.
  - Braille Table Improvements
  - da-gk-g2.ctb, fixes for transposed â, å, æ, ä, ø  and ö,
    corrected/improved harness tests.
  - Corrections for en-GB-g2.ctb.
  - Corrections to the Hungarian grade 1 table.
  + Bug Fixes:
  - Update gnulib.
  - Fix a bug in the correct opcode which causes sometimes random
    results when translating.
  - Fixes for compiler warnings.
  - Fix some Valgrind warnings about invalid reads.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add python3-louis target.</changelog>
<changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.5.3:
  + New features:
  - New Braille tables.
    . Korean grade 1 and grade 2.
    . U.K. English 8 dot computer braille table.
    . New Russian literary and computer braille tables. These
    replace the older Russian tables which are left for
    backwards compatibility.
    . New hyphenation dictionary for Russian.
    . Updated hyphenation tables for the Norwegian language
    (nynorsk and bokmål).
    . New hyphenation dictionary for Esperanto.
    . New Esperanto grade 1 table, using the x system for
    accented letters.
  - runHarness.py:
    . Accept filename globs on the commandline to run specific
    harness files. In tests/harness, one can do make &lt;filename&gt;
    or make runall Removed from make check because these checks
    are checking the validity of our tables, rather than
    validity of the code.
  + Braille Table Improvements:
  - da-dk-g2.ctb, mostly rewritten to use nocross and hyphenation
    table.
  - Most tables: removed the default collapse whitespace
    statements, if you need to compress whitespace, consider
    adding compress.ctb to the list of tables when processing.
  - Corrections to Unified English Braille Code (Grade 1 and 2).
  - Corrections to apostrophes in the Computer Spanish 8 dots
    Braille table (Es-Es-G0.utb).
  - Corrections for double angle quotation marks and emphasis
    marks in the Norwegian Grade 0 Braille Table.
  - Fixes for a minor problem regarding the noletsign in
    Norwegian contracted braille.
  - Corrections to the Italian table.
  - Corrections to the Hungarian grade 1 table.
  - Corrections to English, U.S. Grade 2 (ABAE) table.
  - Further reorganization of the tables to remove duplication.
    Move litdigit opcode common parts and include where needed.
  - Removed obsolete en-us-g1.utb, which has been replaced by
    en-us-g1.ctb.
  - Added dictionary harness tests for: en-ueb-g2.ctb,
    en-us-g2.ctb.
  - Corrections to Nemeth character definitions.
  - Corrections to the Esperanto table.
  + Bug Fixes:
  - Cursor position calculation is now based on the same code
    that calculates inpos and outpos. This probably solves a
    number of bugs.
  - Fix nocross opcode processing.
  - Fix several buffer over/under runs in
    lou_translateString.c:hyphenate.
  - Fix the '=' problem, i.e. fix inputPositions calculation for
    the case where the equals sign is used as the dots operand.
  - Fix a bug when resizing a table. Previously not all
    references to this table were updated.
  + Backwards incompatible changes:
  - The feature that allowed a mapping between language code and
    Braille table was removed as it contained a out-of-bounds
    access bug, was never documented and probably never used.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">-Update to version 2.5.4:
  + New features
  - Added function lou_registerTableResolver for plugging in a
    table resolver callback from your host language.
  + Bug Fixes
  - Fixed ENDSEGMENT indicator in computer Braille.
  - Emphasized words should now be contracted consistently.
  - Fixed several problems with back-translation. A slash within
    a number and strings such as 5-inch-diameter and
    25-year-old-man should now back-translate correctly.
  - Fixed a problem with syllable opcode.
  - Fix warnings with gcc 4.8.2.
  - When a table is specified with an absolute or relative path,
    the "includes" in that table will now work as expected,
    meaning files in the same directory will be found.
  + Braille Table Improvements to fr-bfu-comp8, en-us-g2,
    en-ueb-g2, BUlgarian, en-gb-g1, Nemeth, Slovenian, Norwegian,
    Nepali, Danish.
  + Backwards incompatible changes
  - Delete the table chardefs-ueb.cti as these rules are now
    provided by en-ueb-chardefs.uti
- Update source URL.
- COPYING.LIB has been renamed to COPYING.LESSER
- Use fdupes for base package.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 2.6.4:
  + New features: YAML based harness tests. Harness tests can now
    be written in simple YAML notation and they are integrated with
    the normal `make check' command. They can be used for both ucs2
    and ucs4 and no Python is required.
  + Bug fixes:
  - Use a separate gnulib instance for the library and the tools.
    Use the strndup module to avoid build problems on windows.
  - Fix a problem with the nocross opcode when used in
    combination with the opcodes nocont and compbrl.
  - Fix a problem with the decoding of the harness test files.
  - Fix numerous problems in the way braille indicators are
    handled. There is now a safe version of the checkAttr
    function which makes sure that no attributes are checked
    beyond the boundaries of the currentInput. This fixes the
    random behavior with tests where the emphasis extends to the
    end of the input string.
  + Other changes:
  - If found use texi2any to build the documentation.
  - Fix permissions of Korean tables.
  - Update the windows build instructions.
  + Braille table improvements:
- Changes from version 2.6.3:
  + New features:
  - [beta] The new function lou_findTable can be used for table
    discovery based on meta data in table headers.
  - The Python API now has a new function to check tables aptly
    named ~checkTable~.
  + Bug fixes: Fixed a problem in resolveTable when using a Java
    resolver.
  + Other changes: The build dependency on makeinfo is now
    optional. If it is not installed we simply do not build the
    documentation.
  + Braille table improvements.
  + Corrections and improvements made to UEB tables.
- Changes from version 2.6.2:
  + New features: Harness tests now can test for typeform
    differences.
  + Bug fixes: Fix for emphasis bug.
  + Braille table improvements.
- Changes from version 2.6.1:
  + New features: New Braille tables.
  + Braille table improvements.
  + Bug fixes: Fix a compiler warning in the logging code.
  + Documentation updates: The documentation has been restructured
    to be more beginner friendly and a short introduction to
    translation table writing has been added.
  + Other changes:
  - When compiling with mingw or cygwin resulting dll is
    liblouis.dll.
  - runHarness.py: add new output format, compact output mode
    suitable for grepping.
  + Backwards incompatible changes:
  - Deleted ga.ctb now superseded by ga-g1.utb and ga.g2.ctb.
  - Nl-Nl-g1.utb has been removed. It is superseded by
    nl-NL-g1.ctb.
  - nl-be-g1.utb has been removed. It is superseded by
    nl-BE-g1.ctb.
- Changes from version 2.6.0:
  + New features:
  - New Braille tables.
  - Logging callback. There is now a callback system in place to
    get error messages and warnings.
  + Bug fixes:
  - Fix back translation problems when word gets split in unusual
    places causing back translation of whole words.
  - Fixed bug to prevent removal of \xffff between largesign
    rules.
  - Fixed a bug in back translation, when a letsign was
    encountered, the letsign was being applied beyond the element
    it applied to.
  - Fix memory leaks in the default table resolver introduced in
    the previous release.
  - Fixes to the build system.
  + Braille table improvements.
- Bump soname following upstream changes, leading to rename of
  package liblouis2 to liblouis9.
- Update url and sourceurl to new working ones.
- Add exlicit makeinfo BuildRequires, we want to build
  documentation.</changelog>
<changelog author="fcrozat@suse.com" date="1452513600">- Move data from library package to separate subpackage, to ensure
  library package can be safely upgraded.</changelog>
<changelog author="jengelh@inai.de" date="1453204800">- Use %{?_smp_mflags} for parallel build, newer %make_install
  for installation, and remove redundant %clean section.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Move %install_info_delete from postun to preun.
- Drop makeinfo BuildRequires: it's quite a big dependency and
  the .info file is present in the tarball.
- Install doc directly (make_install -C doc).</changelog>
<changelog author="mgorse@suse.com" date="1504699200">- Add patches to fix several CVEs, backported from upstream
  (boo#1056088 boo#1056090 boo#1056093 boo#1056095 boo#1056097
  boo#1056101 boo#1056105 CVE-2017-13738 CVE-2017-13739
  CVE-2017-13740 CVE-2017-13741 CVE_2017-13742 CVE-2017-13743
  CVE-2017-13744):
  0001-Fix-possible-out-of-bounds-write-from-a-followed-by-.patch
  0002-resolveSubtable-Fix-buffer-overflow-parsing-a-malfor.patch
  0003-Fix-possible-use-after-free-when-calling-compileBrai.patch</changelog>

</package>
<package pkgid="0b1a28c91bdaba6ae12452e058ca08352482ed9d23b247912163d106be9dacc8" name="liblsan0" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="20386c8745d6aa560969de4c5e10f475507d99c9b373b09eefa98d58cfd5857a" name="libltdl7" arch="x86_64">
    <version epoch="0" ver="2.4.2" rel="22.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as source2</changelog>
<changelog author="pth@novell.com" date="1273233600">- Libtool needs tar so add it as Requires (bnc#526298).</changelog>
<changelog author="dmueller@suse.de" date="1274961600">- tar is in /bin/tar, so a requires to /usr/bin/tar doesn't work</changelog>
<changelog author="coolo@novell.com" date="1274961601">- split out the test suite that takes 95% of the build time</changelog>
<changelog author="coolo@novell.com" date="1275307200">- add an empty install section</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="jslaby@suse.de" date="1298894400">- Fix AC_LANG_PROGRAM warnings (bnc#675573)</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1299672000">- update to 2.4, which has quite some new stuff. Limiting here to
  incompatible changes:
  - The fix_srcfile_path variable has been replaced by a more thorough
    mechanism triggered by the to_tool_file_cmd variable.
  - The wrapper command line option support described above introduces the
    following incompatibility: the wrapper will remove any command line
    options that begin with '--lt-*' from the argument list before launching
    (uninstalled) programs. Any '--lt-*' option on the command line not
    recognized by the wrapper will result in an error.
  - The type of the symbol lists variables (lt_*_LTX_preloaded_symbols) has
    been fixed in the manual and in a couple of tests to match the actual
    implementation.</changelog>
<changelog author="coolo@novell.com" date="1300104000">- require automake and provide symbolic names for libltdl</changelog>
<changelog author="pth@suse.de" date="1311940800">- Add gcc-c++ gcc-fortran and gcc-objc to buildrequires so that
  packages using the system wide libtool script compile.
- Add a rpmlintrc to shut up rpmlint on most warnings.</changelog>
<changelog author="coolo@suse.com" date="1316174400">- don't use _service</changelog>
<changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
<changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
<changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
<changelog author="schwab@suse.de" date="1359892800">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
<changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
<changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
<changelog author="pth@suse.de" date="1491825600">- Add patch from Josef Cejka that fixes libtool not returning a value
  when out of memory (bsc#1010802)</changelog>
<changelog author="pth@suse.de" date="1510056000">- Add missing dependencies and provides to baselibs.conf (bsc#1056381)</changelog>

</package>
<package pkgid="4fe14795db4e0ea68e8039d5f16500a9a1617b066cfe6907d333ef881abce5ea" name="libltdl7-32bit" arch="x86_64">
    <version epoch="0" ver="2.4.2" rel="22.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as source2</changelog>
<changelog author="pth@novell.com" date="1273233600">- Libtool needs tar so add it as Requires (bnc#526298).</changelog>
<changelog author="dmueller@suse.de" date="1274961600">- tar is in /bin/tar, so a requires to /usr/bin/tar doesn't work</changelog>
<changelog author="coolo@novell.com" date="1274961601">- split out the test suite that takes 95% of the build time</changelog>
<changelog author="coolo@novell.com" date="1275307200">- add an empty install section</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="jslaby@suse.de" date="1298894400">- Fix AC_LANG_PROGRAM warnings (bnc#675573)</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1299672000">- update to 2.4, which has quite some new stuff. Limiting here to
  incompatible changes:
  - The fix_srcfile_path variable has been replaced by a more thorough
    mechanism triggered by the to_tool_file_cmd variable.
  - The wrapper command line option support described above introduces the
    following incompatibility: the wrapper will remove any command line
    options that begin with '--lt-*' from the argument list before launching
    (uninstalled) programs. Any '--lt-*' option on the command line not
    recognized by the wrapper will result in an error.
  - The type of the symbol lists variables (lt_*_LTX_preloaded_symbols) has
    been fixed in the manual and in a couple of tests to match the actual
    implementation.</changelog>
<changelog author="coolo@novell.com" date="1300104000">- require automake and provide symbolic names for libltdl</changelog>
<changelog author="pth@suse.de" date="1311940800">- Add gcc-c++ gcc-fortran and gcc-objc to buildrequires so that
  packages using the system wide libtool script compile.
- Add a rpmlintrc to shut up rpmlint on most warnings.</changelog>
<changelog author="coolo@suse.com" date="1316174400">- don't use _service</changelog>
<changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
<changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
<changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
<changelog author="schwab@suse.de" date="1359892800">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
<changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
<changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
<changelog author="pth@suse.de" date="1491825600">- Add patch from Josef Cejka that fixes libtool not returning a value
  when out of memory (bsc#1010802)</changelog>
<changelog author="pth@suse.de" date="1510056000">- Add missing dependencies and provides to baselibs.conf (bsc#1056381)</changelog>

</package>
<package pkgid="623b5612840ac2fcc1e79b176ab662ff0ff45d6f82e8b7153ae3c8545af2d9fe" name="liblua5_1" arch="x86_64">
    <version epoch="0" ver="5.1.5" rel="16.1"/>

<changelog author="pgajdos@suse.cz" date="1244462400">- package owns /usr/{lib,share}/lua directories from now
- emoved unneeded root.patch</changelog>
<changelog author="dmueller@suse.de" date="1253102400">- add baselibs.conf</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1260100800">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1260619200">- add baselibs.conf as a source
- package documentation as noarch</changelog>
<changelog author="pgajdos@suse.cz" date="1269345600">- modified LUA_PATH_DEFAULT [bnc#589441]: search modules under
  /usr/%{_lib}/lua/%{major_version} too</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="pgajdos@suse.cz" date="1276516800">- removed -L/usr/lib from Libs: in etc/lua.pc [bnc#613497]
- used upstream bugfix patch from http://www.lua.org/download.html</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc macro</changelog>
<changelog author="pgajdos@suse.com" date="1324468800">- lua51 branched from lua package</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="joop.boonen@opensuse.org" date="1333195200">- Correction in Provides and Obsolete for lua-libs</changelog>
<changelog author="pgajdos@suse.com" date="1340020800">- updated to 5.1.5:
  * bug-fix release, see http://www.lua.org/bugs.html for
    more details
  - &gt; removed upstream-bugfix.patch</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mrdocs@opensuse.org" date="1367755200">- move the lua rpm macros to the devel package to avoid conflict
  with lua 5.2</changelog>
<changelog author="pgajdos@suse.com" date="1368705600">- move rpm macros back, but install it in /etc/rpm/macros.lua51
  and call lua5.1 in %lua_version definition</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382356800">- refresh patch lua51-5.1.5-module-path.diff
- new patch lua51-5.1.5-pkgconfig.patch
  * fix libraries in pkgconfig file</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382443200">- fix patch lua51-5.1.5-pkgconfig.patch
  * libdl is required not librt</changelog>
<changelog author="jmatejek@suse.com" date="1497528000">- add Lua(API) and Lua(devel) symbols (fixes lua51-luasocket build problem)
  (bsc#1051626)</changelog>

</package>
<package pkgid="18366c70dfd5d73818a6a88c024c72dde67484526ffdbf9287ea2962151e443f" name="liblua5_1-32bit" arch="x86_64">
    <version epoch="0" ver="5.1.5" rel="16.1"/>

<changelog author="pgajdos@suse.cz" date="1244462400">- package owns /usr/{lib,share}/lua directories from now
- emoved unneeded root.patch</changelog>
<changelog author="dmueller@suse.de" date="1253102400">- add baselibs.conf</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1260100800">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1260619200">- add baselibs.conf as a source
- package documentation as noarch</changelog>
<changelog author="pgajdos@suse.cz" date="1269345600">- modified LUA_PATH_DEFAULT [bnc#589441]: search modules under
  /usr/%{_lib}/lua/%{major_version} too</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="pgajdos@suse.cz" date="1276516800">- removed -L/usr/lib from Libs: in etc/lua.pc [bnc#613497]
- used upstream bugfix patch from http://www.lua.org/download.html</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc macro</changelog>
<changelog author="pgajdos@suse.com" date="1324468800">- lua51 branched from lua package</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="joop.boonen@opensuse.org" date="1333195200">- Correction in Provides and Obsolete for lua-libs</changelog>
<changelog author="pgajdos@suse.com" date="1340020800">- updated to 5.1.5:
  * bug-fix release, see http://www.lua.org/bugs.html for
    more details
  - &gt; removed upstream-bugfix.patch</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mrdocs@opensuse.org" date="1367755200">- move the lua rpm macros to the devel package to avoid conflict
  with lua 5.2</changelog>
<changelog author="pgajdos@suse.com" date="1368705600">- move rpm macros back, but install it in /etc/rpm/macros.lua51
  and call lua5.1 in %lua_version definition</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382356800">- refresh patch lua51-5.1.5-module-path.diff
- new patch lua51-5.1.5-pkgconfig.patch
  * fix libraries in pkgconfig file</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382443200">- fix patch lua51-5.1.5-pkgconfig.patch
  * libdl is required not librt</changelog>
<changelog author="jmatejek@suse.com" date="1497528000">- add Lua(API) and Lua(devel) symbols (fixes lua51-luasocket build problem)
  (bsc#1051626)</changelog>

</package>
<package pkgid="cf0484a6054a465e78394ef496c0d7f5565f8e364faf7e095daa2c615672aa83" name="libmad" arch="src">
    <version epoch="0" ver="0.15.1b" rel="2.1"/>

<changelog author="henne@links2linux.de" date="1127217600">- First packman release</changelog>
<changelog author="detlef@links2linux.de" date="1141560000">- add pkgconfig file</changelog>
<changelog author="detlef@links2linux.de" date="1142251200">- add new patch for pkgconfig/mad.pc</changelog>
<changelog author="detlef@links2linux.de" date="1221739200">- follow shared library package policy</changelog>
<changelog author="detlef@links2linux.de" date="1221825600">- provides mad and mad-devel</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1249819200">- add patch to keep -O2 in CFLAGS
- pass --enable-accuracy</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
<changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025600">- Fixup to adhere openSUSE specfile requirements.</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025601">- Use correct group.</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025602">- Depend on proper library, remove needless assignment.</changelog>
<changelog author="scarabeus@opensuse.org" date="1379246400">- Fix copy&amp;pasto of wrong dependency</changelog>
<changelog author="scarabeus@opensuse.org" date="1379246401">- Fix install stage.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop --with-pic, this is only for static libs.
- Rectify descriptions for neutrality.</changelog>
<changelog author="mpluskal@suse.com" date="1498132800">- Add patches from Fedora:
  * Provide-Thumb-2-alternative-code-for-MAD_F_MLN.diff
  * libmad.thumb.diff
  * libmad-0.15.1b-ppc.patch
  * libmad-0.15.1b-multiarch.patch</changelog>
<changelog author="schwab@linux-m68k.org" date="1504872000">- libmad-0.15.1b-multiarch.patch: remove, it breaks the installed header</changelog>

</package>
<package pkgid="12d7208f1c3495cac31daa37cb7fa9d9ebf892c6484495dfe461f50e29cda057" name="libmad-devel" arch="x86_64">
    <version epoch="0" ver="0.15.1b" rel="2.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1249819200">- add patch to keep -O2 in CFLAGS
- pass --enable-accuracy</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
<changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025600">- Fixup to adhere openSUSE specfile requirements.</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025601">- Use correct group.</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025602">- Depend on proper library, remove needless assignment.</changelog>
<changelog author="scarabeus@opensuse.org" date="1379246400">- Fix copy&amp;pasto of wrong dependency</changelog>
<changelog author="scarabeus@opensuse.org" date="1379246401">- Fix install stage.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop --with-pic, this is only for static libs.
- Rectify descriptions for neutrality.</changelog>
<changelog author="mpluskal@suse.com" date="1498132800">- Add patches from Fedora:
  * Provide-Thumb-2-alternative-code-for-MAD_F_MLN.diff
  * libmad.thumb.diff
  * libmad-0.15.1b-ppc.patch
  * libmad-0.15.1b-multiarch.patch</changelog>
<changelog author="schwab@linux-m68k.org" date="1504872000">- libmad-0.15.1b-multiarch.patch: remove, it breaks the installed header</changelog>

</package>
<package pkgid="6afe0259f6339eba7b8ba7235cb2ec984d766ee4f42cf42b3d5230809508d781" name="libmad0" arch="x86_64">
    <version epoch="0" ver="0.15.1b" rel="2.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1249819200">- add patch to keep -O2 in CFLAGS
- pass --enable-accuracy</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
<changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025600">- Fixup to adhere openSUSE specfile requirements.</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025601">- Use correct group.</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025602">- Depend on proper library, remove needless assignment.</changelog>
<changelog author="scarabeus@opensuse.org" date="1379246400">- Fix copy&amp;pasto of wrong dependency</changelog>
<changelog author="scarabeus@opensuse.org" date="1379246401">- Fix install stage.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop --with-pic, this is only for static libs.
- Rectify descriptions for neutrality.</changelog>
<changelog author="mpluskal@suse.com" date="1498132800">- Add patches from Fedora:
  * Provide-Thumb-2-alternative-code-for-MAD_F_MLN.diff
  * libmad.thumb.diff
  * libmad-0.15.1b-ppc.patch
  * libmad-0.15.1b-multiarch.patch</changelog>
<changelog author="schwab@linux-m68k.org" date="1504872000">- libmad-0.15.1b-multiarch.patch: remove, it breaks the installed header</changelog>

</package>
<package pkgid="26cbf1daa2dbee8f2783f37ee424515e804930821df87bca011875cb776f4ec2" name="libmad0-32bit" arch="x86_64">
    <version epoch="0" ver="0.15.1b" rel="2.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1249819200">- add patch to keep -O2 in CFLAGS
- pass --enable-accuracy</changelog>
<changelog author="ludwig.nussel@gmx.de" date="1277640000">- disable static and remove .la files
- patch away CFLAGS mangling completely</changelog>
<changelog author="seife+obs@b1-systems.com" date="1337083200">- fix build on &gt; 12.1 by BuildRequires: autoconf automake libtool
- call autoreconf to rebuild configure from patched configure.ac</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025600">- Fixup to adhere openSUSE specfile requirements.</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025601">- Use correct group.</changelog>
<changelog author="scarabeus@opensuse.org" date="1373025602">- Depend on proper library, remove needless assignment.</changelog>
<changelog author="scarabeus@opensuse.org" date="1379246400">- Fix copy&amp;pasto of wrong dependency</changelog>
<changelog author="scarabeus@opensuse.org" date="1379246401">- Fix install stage.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop --with-pic, this is only for static libs.
- Rectify descriptions for neutrality.</changelog>
<changelog author="mpluskal@suse.com" date="1498132800">- Add patches from Fedora:
  * Provide-Thumb-2-alternative-code-for-MAD_F_MLN.diff
  * libmad.thumb.diff
  * libmad-0.15.1b-ppc.patch
  * libmad-0.15.1b-multiarch.patch</changelog>
<changelog author="schwab@linux-m68k.org" date="1504872000">- libmad-0.15.1b-multiarch.patch: remove, it breaks the installed header</changelog>

</package>
<package pkgid="5b7b210e1dabba5fe1d7d656a121d72473135d9da7144e602fbfafbf2fbfb67e" name="libmagic1" arch="x86_64">
    <version epoch="0" ver="5.22" rel="10.1"/>

<changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>

</package>
<package pkgid="6de3cf247dc9762eb13141a9b16b90a707112e17fd565a407c37a4a51f15e787" name="libmagic1" arch="x86_64">
    <version epoch="0" ver="5.22" rel="13.1"/>

<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
<changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>

</package>
<package pkgid="89cfef61b6edcd47168d93869d2811f2be122fb7ccfbefae3e63ce20aa55b108" name="libmagic1-32bit" arch="x86_64">
    <version epoch="0" ver="5.22" rel="10.1"/>

<changelog author="werner@suse.de" date="1380628800">- Add changes of Andreas Stieger</changelog>
<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>

</package>
<package pkgid="4b0fdc66ab85a212d93fc8f29de67bc7f6db31d1dd6fa10541ad105cbe541c53" name="libmagic1-32bit" arch="x86_64">
    <version epoch="0" ver="5.22" rel="13.1"/>

<changelog author="jengelh@inai.de" date="1383566400">- Set RPM groups</changelog>
<changelog author="werner@suse.de" date="1385985600">- Update to file version 5.16 (bug fix release)
  * always leave magic file loaded, don't unload for magic_check, etc.
  * fix default encoding to binary instead of unknown which broke recently
  * handle empty and one byte files, less specially so that
  - -mime-encoding does not break completely.
  * fix erroneous non-zero exit code from non-existant file and message
  * add CDF MSI file detection (Guy Helmer)</changelog>
<changelog author="werner@suse.de" date="1392724800">- Update to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="werner@suse.de" date="1395057600">- Add patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  to finally fix bnc#866750</changelog>
<changelog author="werner@suse.de" date="1396008000">- Update to file version 5.18
  * add fmtcheck(3) for those who don't have it
  * prevent mime entries from being attached to magic
    entries with no descriptions
  * adjust magic strength for regex type
  * remove superfluous ascmagic with encoding test
  * fix regression fix echo -ne "\012\013\014" | file -i -
    which printed "binary" instead of "application/octet-stream"
  * add size_t overflow check for magic file size
  * experimental support for matching with CFD CLSID
  * Cache old LC_CTYPE locale before setting it to "C", so
    we can use it to restore LC_CTYPE instead of asking
    setlocale() to scan the environment variables.
- Refresh patches
  file-5.07-elf.dif becomes file-5.18-elf.dif
  file-5.12-javacheck.dif becomes file-5.18-javacheck.dif
  file-5.12-endian.patch becomes file-5.18-endian.patch
  file-5.15-clear-invalid.patch
- Drop patch
  0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch
  now part of upstream</changelog>
<changelog author="crrodriguez@opensuse.org" date="1399550400">- file-secure_getenv.patch use secure_getenv only as we
  can't know in which context the shared library is used.</changelog>
<changelog author="werner@suse.de" date="1403611200">- Update to file version 5.19
  * Misc buffer overruns and missing buffer size tests in cdf parsing
    (Francisco Alonso, Jan Kaluza)
  * Enforce limit of 8K on regex searches that have no limits
  * Allow the l modifier for regex to mean line count. Default
    to byte count. If line count is specified, assume a max
    of 80 characters per line to limit the byte count.
  * Don't allow conversions to be used for dates, allowing
    the mask field to be used as an offset.
  * Make the range operator limit the length of the
    regex search.
  * PR/347: Windows fixes
  * PR/352: Hangul word processor recognition
  * PR/354: Encoding irregularities in text files
  * Fix uninitialized title in CDF files (Jan Kaluza)
  * PR/351: Fix compilation of empty files
  * Fix integer formats: We don't specify 'l' or
    'h' and 'hh' specifiers anymore, only 'll' for
    quads and nothing for the rest. This is so that
    magic writing is simpler.
  * PR/341: Jan Kaluza, fix memory leak
  * PR/342: Jan Kaluza, fix out of bounds read
  * Fix issue with long formats not matching fmtcheck
- Rename and change patch file-5.14-misc.dif to file-5.19-misc.dif
- Rename and change patch file-5.14-printf.dif to file-5.19-printf.dif
- Rename and change patch file-5.07-biorad.dif to file-5.19-biorad.dif
- Rename and change patch file-5.19.dif to file-5.17.dif
- Rename and change patch file-4.24-cromfs.dif to file-5.19-cromfs.dif
- Rename and change patch file-4.24-solv.dif to file-5.19-solv.dif
- Rename and change patch file-5.12-zip2.0.dif to file-5.19-zip2.0.dif
- Rename and change patch file-5.07-clicfs.dif to file-5.19-clicfs.dif</changelog>
<changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
<changelog author="werner@suse.de" date="1408363201">- Add file-rpmlintrc to file list</changelog>
<changelog author="pgajdos@suse.com" date="1408449600">-  correctly identify GDBM files created by libgdbm4 [bnc#888308]
  * add file-5.19-gdbm.patch</changelog>
<changelog author="werner@suse.de" date="1413201600">- Update to file version 5.20
  * recognize encrypted CDF documents
  * add magic_load_buffers from Brooks Davis
  * add thumbs.db support
- Remove file-5.07-iso9660.dif as now upstream
- Remove file-5.19-gdbm.patch as now upstream
- Adapt and rename file-5.18-endian.patch to file-5.20-endian.patch
- Adapt and rename file-5.19.dif file-5.20.dif</changelog>
<changelog author="werner@suse.de" date="1414065600">- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367
  CVE-2014-3710: file: out-of-bounds read in elf note headers</changelog>
<changelog author="werner@suse.de" date="1418817600">- Port and add upstream patches
  0001-limit-the-number-of-program-and-section-header-numbe.patch
  0002-Stop-reporting-bad-capabilities-after-the-first-few.patch
  0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch
  0004-adjust-limits-better-from-NetBSD.patch
  0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch
  0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch
  to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)</changelog>
<changelog author="werner@suse.de" date="1418817601">- Drop patch file-5.20-CVE-2014-3710.patch as now part of upstream
- Update to file version 5.21
  * Fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
  * there was an incorrect free in magic_load_buffers()
  * there was an out of bounds read for some pascal strings
  * there was a memory leak in magic lists
  * don't interpret strings printed from files using the current
    locale, convert them to ascii format first.
  * there was an out of bounds read in elf note reads
  * fix MacOS/X locale.h vs. xlocale.h issues</changelog>
<changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
<changelog author="werner@suse.de" date="1421668800">- Update to file version 5.22 (also related to bsc#913650 and bsc#913651)
  * add indirect relative for TIFF/Exif
  * restructure elf note printing to avoid repeated messages
  * add note limit, suggested by Alexander Cherepanov
  * Bail out on partial pread()'s (Alexander Cherepanov)
  * Fix incorrect bounds check in file_printable (Alexander Cherepanov)
  * PR/405: ignore SIGPIPE from uncompress programs
  * change printable -&gt; file_printable and use it in
    more places for safety
  * in ELF, instead of "(uses dynamic libraries)" when PT_INTERP
    is present print the interpreter name.
- Patch file-5.18-elf.dif is modified and renamed to file-5.22-elf.dif
- Patch file-5.20.dif s modified and renamed to file-5.22.dif</changelog>
<changelog author="werner@suse.de" date="1423828800">- Upgrade to file version 5.22 to fix boo#913650 (CVE-2014-9621),
  boo#913651 (CVE-2014-9620), boo#917152 (CVE-2014-9653), and
  bsc#1009966 as well</changelog>
<changelog author="werner@suse.de" date="1489752000">- Add patch file-5.22-strings.patch which is a backport for an
  increased printable string length as found in file 5.30 (bsc#996511)</changelog>
<changelog author="werner@suse.de" date="1508500800">- Add patch file-9fbe768a87.patch and patch file-91a5efbb98.patch
  which are backport of the upstream commits 9fbe768a87 and
  91a5efbb98 (bsc#1063269)</changelog>
<changelog author="werner@suse.de" date="1512388800">- Add patches file-78c2b81ccb.patch and file-9f0601f3c0.patch which
  are backports of the commits -78c2b81ccb and 9f0601f3c0 to fix
  e.g. recursion bug in jpeg detection (bsc#1070958, boo#1070878)</changelog>

</package>
<package pkgid="d6a5988a7336924066db69a6ebdefe37a82b47eb3dedb6ec31522757596c241c" name="libmapi1" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="eaa08bf4c32ece1a7654391e1aae04204208a9f36a5a11a1244ceda7256d1248" name="libmbedtls9" arch="x86_64">
    <version epoch="0" ver="1.3.19" rel="18.1"/>

<changelog author="fisiu@opensuse.org" date="1363435200">- Update to 1.2.6:
  * Fixed memory leak in ssl_free() and ssl_reset()
  * Corrected GCM counter incrementation to use only 32-bits
    instead of 128-bits
  * Fixed net_bind() for specified IP addresses on little endian
    systems
  * Fixed assembly code for ARM (Thumb and regular)
  * Detailed information available in ChangeLog file.</changelog>
<changelog author="fisiu@opensuse.org" date="1368619200">- Update to 1.2.7:
  * Ability to specify allowed ciphersuites based on the protocol
    version.
  * Default Blowfish keysize is now 128-bits
  * Test suites made smaller to accommodate Raspberry Pi
  * Fix for MPI assembly for ARM
  * GCM adapted to support sizes &gt; 2^29</changelog>
<changelog author="fisiu@opensuse.org" date="1396094400">- Update to 1.3.5, detailed changes available in ChangeLog file:
  * Elliptic Curve Cryptography module added
  * Elliptic Curve Diffie Hellman module added
  * Ephemeral Elliptic Curve Diffie Hellman support for SSL/TLS
    (ECDHE-based ciphersuites)
  * Ephemeral Elliptic Curve Digital Signature Algorithm support for SSL/TLS
    (ECDSA-based ciphersuites)
  * Ability to specify allowed ciphersuites based on the protocol version.
  * PSK and DHE-PSK based ciphersuites added
  * Memory allocation abstraction layer added
  * Buffer-based memory allocator added (no malloc() / free() / HEAP usage)
  * Threading abstraction layer added (dummy / pthread / alternate)
  * Public Key abstraction layer added
  * Parsing Elliptic Curve keys
  * Parsing Elliptic Curve certificates
  * Support for max_fragment_length extension (RFC 6066)
  * Support for truncated_hmac extension (RFC 6066)
  * Support for zeros-and-length (ANSI X.923) padding, one-and-zeros
    (ISO/IEC 7816-4) padding and zero padding in the cipher layer
  * Support for session tickets (RFC 5077)
  * Certificate Request (CSR) generation with extensions (key_usage,
    ns_cert_type)
  * X509 Certificate writing with extensions (basic_constraints,
    issuer_key_identifier, etc)
  * Optional blinding for RSA, DHM and EC
  * Support for multiple active certificate / key pairs in SSL servers for
    the same host (Not to be confused with SNI!)</changelog>
<changelog author="fisiu@opensuse.org" date="1408104000">- Update to 1.3.8, detailed changes available in ChangeLog file:
  * Fix length checking for AEAD ciphersuites (found by Codenomicon).
    It was possible to crash the server (and client) using crafted messages
    when a GCM suite was chosen.
  * Add CCM module and cipher mode to Cipher Layer
  * Support for CCM and CCM_8 ciphersuites
  * Support for parsing and verifying RSASSA-PSS signatures in the X.509
    modules (certificates, CRLs and CSRs).
  * Blowfish in the cipher layer now supports variable length keys.
  * Add example config.h for PSK with CCM, optimized for low RAM usage.
  * Optimize for RAM usage in example config.h for NSA Suite B profile.
  * Add POLARSSL_REMOVE_ARC4_CIPHERSUITES to allow removing RC4 ciphersuites
    from the default list (inactive by default).
  * Add server-side enforcement of sent renegotiation requests
    (ssl_set_renegotiation_enforced())
  * Add SSL_CIPHERSUITES config.h flag to allow specifying a list of
    ciphersuites to use and save some memory if the list is small.</changelog>
<changelog author="fisiu@opensuse.org" date="1415016000">- Update to 1.3.9, detailed changes available in ChangeLog file:
  * Lowest common hash was selected from signature_algorithms extension in
    TLS 1.2: fix boo#903672, CVE-2014-8627.
  * Remotely-triggerable memory leak when parsing some X.509 certificates,
    CVE-2014-8628.
  * Remotely-triggerable memory leak when parsing crafted ClientHello,
    CVE-2014-8628.
  * Ciphersuites using SHA-256 or SHA-384 now require TLS 1.x.
  * Ciphersuites using RSA-PSK key exchange now require TLS 1.x.
  * POLARSSL_MPI_MAX_SIZE now defaults to 1024 in order to allow 8192 bits RSA
    keys.
  * X.509 certificates with more than one AttributeTypeAndValue per
    RelativeDistinguishedName are not accepted any more.
- Build with POLARSSL_THREADING_PTHREAD: fix boo#903671.</changelog>
<changelog author="fisiu@opensuse.org" date="1421755200">- Add polarssl-CVE-2015-1182.patch: Remote attack using crafted certificates:
  fix boo#913903, CVE-2015-1182.</changelog>
<changelog author="mpluskal@suse.com" date="1426420800">- Rename to mbedtls
- Use cmake macro for building
- Update to 1.3.10
  * NULL pointer dereference in the buffer-based allocator when the buffer is
    full and polarssl_free() is called (found by Mark Hasemeyer)
    (only possible if POLARSSL_MEMORY_BUFFER_ALLOC_C is enabled, which it is
    not by default).
  * Fix remotely-triggerable uninitialised pointer dereference caused by
    crafted X.509 certificate (TLS server is not affected if it doesn't ask for a
    client certificate) (found using Codenomicon Defensics).
  * Fix remotely-triggerable memory leak caused by crafted X.509 certificates
    (TLS server is not affected if it doesn't ask for a client certificate)
    (found using Codenomicon Defensics).
  * Fix potential stack overflow while parsing crafted X.509 certificates
    (TLS server is not affected if it doesn't ask for a client certificate)
    (found using Codenomicon Defensics).
  * Fix timing difference that could theoretically lead to a
    Bleichenbacher-style attack in the RSA and RSA-PSK key exchanges
    (reported by Sebastian Schinzel).
  * Add support for FALLBACK_SCSV (draft-ietf-tls-downgrade-scsv).
  * Add support for Extended Master Secret (draft-ietf-tls-session-hash).
  * Add support for Encrypt-then-MAC (RFC 7366).
  * Add function pk_check_pair() to test if public and private keys match.
  * Add x509_crl_parse_der().
  * Add compile-time option POLARSSL_X509_MAX_INTERMEDIATE_CA to limit the
    length of an X.509 verification chain.
  * Support for renegotiation can now be disabled at compile-time
  * Support for 1/n-1 record splitting, a countermeasure against BEAST.
  * Certificate selection based on signature hash, prefering SHA-1 over SHA-2
    for pre-1.2 clients when multiple certificates are available.
  * Add support for getrandom() syscall on recent Linux kernels with Glibc or
    a compatible enough libc (eg uClibc).
  * Add ssl_set_arc4_support() to make it easier to disable RC4 at runtime
    while using the default ciphersuite list.
  * Added new error codes and debug messages about selection of
    ciphersuite/certificate.</changelog>
<changelog author="mpluskal@suse.com" date="1426420801">- Fix sed for includes</changelog>
<changelog author="mpluskal@suse.com" date="1426507200">- Update provides/obsoletes</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Create symlink to ensure compatibility with polarssl</changelog>
<changelog author="mpluskal@suse.com" date="1427457600">- Update package categories</changelog>
<changelog author="schwab@suse.de" date="1427889600">- getrandom-syscall-fallback.patch: Fall back to /dev/urandom if getrandom
  syscall is not implemented.</changelog>
<changelog author="fisiu@opensuse.org" date="1434369600">- Update to 1.3.11:
  * Remove bias in mpi_gen_prime (contributed by Pascal Junod).
  * Remove potential sources of timing variations (some contributed by Pascal
    Junod).
  * Options POLARSSL_HAVE_INT8 and POLARSSL_HAVE_INT16 are deprecated.
  * Enabling POLARSSL_NET_C without POLARSSL_HAVE_IPV6 is deprecated.
  * compat-1.2.h and openssl.h are deprecated.
  * ssl_set_own_cert() no longer calls pk_check_pair() since the performance
    impact was bad for some users (this was introduced in 1.3.10).
  * Move from SHA-1 to SHA-256 in example programs using signatures (suggested
    by Thorsten Mühlfelder).
  * Remove dependency on sscanf() in X.509 parsing modules.
  * Fix compile errors with PLATFORM_NO_STD_FUNCTIONS.
  * Fix bug in entropy.c when THREADING_C is also enabled that caused
    entropy_free() to crash (thanks to Rafa? Przywara).
  * Fix memory leak when gcm_setkey() and ccm_setkey() are used more than once
    on the same context.
  * Fix bug in ssl_mail_client when password is longer that username (found by
    Bruno Pape).
  * Fix undefined behaviour (memcmp( NULL, NULL, 0 );) in X.509 modules
    (detected by Clang's 3.6 UBSan).
  * mpi_size() and mpi_msb() would segfault when called on an mpi that is
    initialized but not set (found by pravic).
  * Fix detection of support for getrandom() on Linux (reported by syzzer) by
    doing it at runtime (using uname) rather that compile time.
  * Fix handling of symlinks by "make install" (found by Gaël PORTAY).
  * Fix potential NULL pointer dereference (not trigerrable remotely) when
    ssl_write() is called before the handshake is finished (introduced in
    1.3.10) (first reported by Martin Blumenstingl).
  * Fix bug in pk_parse_key() that caused some valid private EC keys to be
    rejected.
  * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos).
  * Fix thread safety bug in RSA operations (found by Fredrik Axelsson).
  * Fix hardclock() (only used in the benchmarking program) with some versions
    of mingw64 (found by kxjhlele).
  * Fix potential unintended sign extension in asn1_get_len() on 64-bit
    platforms.
  * Fix potential memory leak in ssl_set_psk() (found by Mansour Moufid).
  * Fix compile error when POLARSSL_SSL_DISABLE_RENEGOTATION and
    POLARSSL_SSL_SSESSION_TICKETS where both enabled in config.h (introduced in
    1.3.10).
  * Add missing extern "C" guard in aesni.h (reported by amir zamani).
  * Add missing dependency on SHA-256 in some x509 programs (reported by
    Gergely Budai).
  * Fix bug related to ssl_set_curves(): the client didn't check that the curve
    picked by the server was actually allowed.
- Drop getrandom-syscall-fallback.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build libmbedtls9-32bit, as needed by
  libbzrtp0-32bit.</changelog>
<changelog author="mpluskal@suse.com" date="1444305600">- Update to 1.3.14
  * Added fix for CVE-2015-5291 (boo#949380) to prevent heap corruption due to buffer
    overflow of the hostname or session ticket. Found by Guido Vranken,
    Intelworks.
  * Fix stack buffer overflow in pkcs12 decryption (used by
    mbedtls_pk_parse_key(file)() when the password is &gt; 129 bytes. Found by
    Guido Vranken, Intelworks. Not triggerable remotely.
  * Fix potential buffer overflow in mbedtls_mpi_read_string().
    Found by Guido Vranken, Intelworks. Not exploitable remotely in the context
    of TLS, but might be in other uses. On 32 bit machines, requires reading a
    string of close to or larger than 1GB to exploit; on 64 bit machines, would
    require reading a string of close to or larger than 2^62 bytes.
  * Fix potential random memory allocation in mbedtls_pem_read_buffer()
    on crafted PEM input data. Found and fix provided by Guido Vranken,
    Intelworks. Not triggerable remotely in TLS. Triggerable remotely if you
    accept PEM data from an untrusted source.
  * Fix potential double-free if ssl_set_psk() is called repeatedly on
    the same ssl_context object and some memory allocations fail. Found by
    Guido Vranken, Intelworks. Can not be forced remotely.
  * Fix possible heap buffer overflow in base64_encode() when the input
    buffer is 512MB or larger on 32-bit platforms. Found by Guido Vranken,
    Intelworks. Found by Guido Vranken. Not trigerrable remotely in TLS.
  * Fix potential heap buffer overflow in servers that perform client
    authentication against a crafted CA cert. Cannot be triggered remotely
    unless you allow third parties to pick trust CAs for client auth. Found by
    Guido Vranken, Intelworks.
  * Fix compile error in net.c with musl libc. Found and patch provided by
    zhasha (#278).
  * Fix macroization of 'inline' keywork when building as C++. (#279)
  * Added checking of hostname length in ssl_set_hostname() to ensure domain
    names are compliant with RFC 1035.
- Changes for 1.3.13
  * Fix possible client-side NULL pointer dereference (read) when the client
    tries to continue the handshake after it failed (a misuse of the API).
    (Found and patch provided by Fabian Foerg, Gotham Digital Science using afl-fuzz.)
  * Add countermeasure against Lenstra's RSA-CRT attack for PKCS#1 v1.5
    signatures. (Found by Florian Weimer, Red Hat.)
    https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/
  * Setting SSL_MIN_DHM_BYTES in config.h had no effect (overriden in ssl.h)
    (found by Fabio Solari) (#256)
  * Fix bug in mbedtls_rsa_public() and mbedtls_rsa_private() that could
    result trying to unlock an unlocked mutex on invalid input (found by
    Fredrik Axelsson) (#257)
  * Fix -Wshadow warnings (found by hnrkp) (#240)
  * Fix unused function warning when using MBEDTLS_MDx_ALT or
    MBEDTLS_SHAxxx_ALT (found by Henrik) (#239)
  * Fix memory corruption in pkey programs (found by yankuncheng) (#210)
  * Fix memory corruption on client with overlong PSK identity, around
    SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by
    Aleksandrs Saveljevs) (#238)
  * Fix off-by-one error in parsing Supported Point Format extension that
    caused some handshakes to fail.
  * When verifying a certificate chain, if an intermediate certificate is
    trusted, no later cert is checked. (suggested by hannes-landeholm)
    (#220).
- Changes for 1.3.12
  * Increase the minimum size of Diffie-Hellman parameters accepted by the
    client to 1024 bits, to protect against Logjam attack.
  * Increase the size of default Diffie-Hellman parameters on the server to
    2048 bits. This can be changed with ssl_set_dh_params().
  * Fix thread-safety issue in SSL debug module (found by Edwin van Vliet).
  * Some example programs were not built using make, not included in Visual
    Studio projects (found by Kristian Bendiksen).
  * Fix build error with CMake and pre-4.5 versions of GCC (found by Hugo
    Leisink).
  * Fix missing -static-ligcc when building shared libraries for Windows with
    make.
  * Fix compile error with armcc5 --gnu.
  * Add SSL_MIN_DHM_BYTES configuration parameter in config.h to choose the
    minimum size of Diffie-Hellman parameters accepted by the client.
  * The PEM parser now accepts a trailing space at end of lines (#226).</changelog>
<changelog author="mpluskal@suse.com" date="1447848000">- Update to 1.3.15
  * Fix potential double free if ssl_set_psk() is called more than once and
    some allocation fails. Cannot be forced remotely. Found by Guido Vranken,
    Intelworks.
  * Fix potential heap corruption on Windows when
    x509_crt_parse_path() is passed a path longer than 2GB. Cannot be
    triggered remotely. Found by Guido Vranken, Intelworks.
  * Fix potential buffer overflow in some asn1_write_xxx() functions.
    Cannot be triggered remotely unless you create X.509 certificates based
    on untrusted input or write keys of untrusted origin. Found by Guido
    Vranken, Intelworks.
  * The X509 max_pathlen constraint was not enforced on intermediate
    certificates. Found by Nicholas Wilson, fix and tests provided by
    Janos Follath. #280 and #319
  * Self-signed certificates were not excluded from pathlen counting,
    resulting in some valid X.509 being incorrectly rejected. Found and fix
    provided by Janos Follath. #319
  * Fix bug causing some handshakes to fail due to some non-fatal alerts not
    begin properly ignored. Found by mancha and Kasom Koht-arsa, #308
  * Fix build error with configurations where ECDHE-PSK is the only key
    exchange. Found and fix provided by Chris Hammond. #270
  * Fix failures in MPI on Sparc(64) due to use of bad assembly code.
    Found by Kurt Danielson. #292
  * Fix typo in name of the extKeyUsage OID. Found by inestlerode, #314
  * Fix bug in ASN.1 encoding of booleans that caused generated CA
    certificates to be rejected by some applications, including OS X
    Keychain. Found and fixed by Jonathan Leroy, Inikup.
  * Fix "Destination buffer is too small" error in cert_write program.
    Found and fixed by Jonathan Leroy, Inikup.</changelog>
<changelog author="mpluskal@suse.com" date="1452427200">- Update to 1.3.16
  * Fixes a potential double free when
    mbedtls_asn1_store_named_data() fails to allocate memory. This
    was only used for certificate generation and was not
    triggerable remotely in SSL/TLS. boo#961290
  * Disables by default MD5 handshake signatures in TLS 1.2 to
    prevent the  SLOTH (CVE-2015-7575) attack on TLS 1.2 server
    authentication (other attacks from the SLOTH paper do not apply
    to any version of mbed TLS or PolarSSL). boo#961284
  * Fixes an over-restrictive length limit in GCM.
  * Fixes a bug in certificate validation that caused valid chains
    to be rejected when the first intermediate certificate has a
    pathLenConstraint equal to zero.
  * Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign()
  * Added config.h option POLARSSL_SSL_ENABLE_MD5_SIGNATURES to
    control use of MD5-based signatures for TLS 1.2 handshake
    (disabled by default).</changelog>
<changelog author="mpluskal@suse.com" date="1468497600">- Update to version 1.3.17 (boo#988956):
  * Security
    + Fix missing padding length check in
    mbedtls_rsa_rsaes_pkcs1_v15_decrypt required by PKCS1 v2.2
    + Fix a potential integer underflow to buffer overread in
    mbedtls_rsa_rsaes_oaep_decrypt. It is not triggerable
    remotely in SSL/TLS.
    + Fix potential integer overflow to buffer overflow in
    mbedtls_rsa_rsaes_pkcs1_v15_encrypt and
    mbedtls_rsa_rsaes_oaep_encrypt
  * Bugfix
    + Fix bug in mbedtls_mpi_add_mpi() that caused wrong results
    when the three arguments where the same (in-place doubling).
    Found and fixed by Janos Follath. #309
    + Fix issue in Makefile that prevented building using armar.
    + Fix issue that caused a hang up when generating RSA keys of
    odd bitlength
    + Fix bug in mbedtls_rsa_rsaes_pkcs1_v15_encrypt that made
    null pointer dereference possible.
    + Fix issue that caused a crash if invalid curves were passed
    to mbedtls_ssl_conf_curves. #373
  * Changes
    + On ARM platforms, when compiling with -O0 with GCC, Clang or
    armcc5, don't use the optimized assembly for bignum
    multiplication. This removes the need to pass
  - fomit-frame-pointer to avoid a build error with -O0.
    + Disabled SSLv3 in the default configuration.
    + Fix non-compliance server extension handling. Extensions for
    SSLv3 are now ignored, as required by RFC6101.</changelog>
<changelog author="mpluskal@suse.com" date="1489233600">- Update to version 1.3.19 (boo#1029017):
  * Add checks to prevent signature forgeries for very large messages while
    using RSA through the PK module in 64-bit systems. The issue was caused by
    some data loss when casting a size_t to an unsigned int value in the
    functions rsa_verify_wrap(), rsa_sign_wrap(), rsa_alt_sign_wrap() and
    pk_sign(). Found by Jean-Philippe Aumasson.
  * Fixed potential livelock during the parsing of a CRL in PEM format in
    mbedtls_x509_crl_parse(). A string containing a CRL followed by trailing
    characters after the footer could result in the execution of an infinite
    loop. The issue can be triggered remotely. Found by Greg Zaverucha,
    Microsoft.
  * Fixed a bug that caused freeing a buffer that was allocated on the stack,
    when verifying the validity of a key on secp224k1. This could be
    triggered remotely for example with a maliciously constructed certificate
    and potentially could lead to remote code execution on some platforms.
    Reported independently by rongsaws and Aleksandar Nikolic, Cisco Talos
    team. #569 CVE-2017-2784</changelog>
<changelog author="fisiu@opensuse.org" date="1507636800">- Add bypass-peer-auth-fix-CVE-2017-14032.patch: boo#1056544, CVE-2017-14032.</changelog>

</package>
<package pkgid="13039d35bdedec0e3a1ab3545b143a1fd5e585e4403bbd75fde90166639445f4" name="libmbedtls9-32bit" arch="x86_64">
    <version epoch="0" ver="1.3.19" rel="18.1"/>

<changelog author="fisiu@opensuse.org" date="1363435200">- Update to 1.2.6:
  * Fixed memory leak in ssl_free() and ssl_reset()
  * Corrected GCM counter incrementation to use only 32-bits
    instead of 128-bits
  * Fixed net_bind() for specified IP addresses on little endian
    systems
  * Fixed assembly code for ARM (Thumb and regular)
  * Detailed information available in ChangeLog file.</changelog>
<changelog author="fisiu@opensuse.org" date="1368619200">- Update to 1.2.7:
  * Ability to specify allowed ciphersuites based on the protocol
    version.
  * Default Blowfish keysize is now 128-bits
  * Test suites made smaller to accommodate Raspberry Pi
  * Fix for MPI assembly for ARM
  * GCM adapted to support sizes &gt; 2^29</changelog>
<changelog author="fisiu@opensuse.org" date="1396094400">- Update to 1.3.5, detailed changes available in ChangeLog file:
  * Elliptic Curve Cryptography module added
  * Elliptic Curve Diffie Hellman module added
  * Ephemeral Elliptic Curve Diffie Hellman support for SSL/TLS
    (ECDHE-based ciphersuites)
  * Ephemeral Elliptic Curve Digital Signature Algorithm support for SSL/TLS
    (ECDSA-based ciphersuites)
  * Ability to specify allowed ciphersuites based on the protocol version.
  * PSK and DHE-PSK based ciphersuites added
  * Memory allocation abstraction layer added
  * Buffer-based memory allocator added (no malloc() / free() / HEAP usage)
  * Threading abstraction layer added (dummy / pthread / alternate)
  * Public Key abstraction layer added
  * Parsing Elliptic Curve keys
  * Parsing Elliptic Curve certificates
  * Support for max_fragment_length extension (RFC 6066)
  * Support for truncated_hmac extension (RFC 6066)
  * Support for zeros-and-length (ANSI X.923) padding, one-and-zeros
    (ISO/IEC 7816-4) padding and zero padding in the cipher layer
  * Support for session tickets (RFC 5077)
  * Certificate Request (CSR) generation with extensions (key_usage,
    ns_cert_type)
  * X509 Certificate writing with extensions (basic_constraints,
    issuer_key_identifier, etc)
  * Optional blinding for RSA, DHM and EC
  * Support for multiple active certificate / key pairs in SSL servers for
    the same host (Not to be confused with SNI!)</changelog>
<changelog author="fisiu@opensuse.org" date="1408104000">- Update to 1.3.8, detailed changes available in ChangeLog file:
  * Fix length checking for AEAD ciphersuites (found by Codenomicon).
    It was possible to crash the server (and client) using crafted messages
    when a GCM suite was chosen.
  * Add CCM module and cipher mode to Cipher Layer
  * Support for CCM and CCM_8 ciphersuites
  * Support for parsing and verifying RSASSA-PSS signatures in the X.509
    modules (certificates, CRLs and CSRs).
  * Blowfish in the cipher layer now supports variable length keys.
  * Add example config.h for PSK with CCM, optimized for low RAM usage.
  * Optimize for RAM usage in example config.h for NSA Suite B profile.
  * Add POLARSSL_REMOVE_ARC4_CIPHERSUITES to allow removing RC4 ciphersuites
    from the default list (inactive by default).
  * Add server-side enforcement of sent renegotiation requests
    (ssl_set_renegotiation_enforced())
  * Add SSL_CIPHERSUITES config.h flag to allow specifying a list of
    ciphersuites to use and save some memory if the list is small.</changelog>
<changelog author="fisiu@opensuse.org" date="1415016000">- Update to 1.3.9, detailed changes available in ChangeLog file:
  * Lowest common hash was selected from signature_algorithms extension in
    TLS 1.2: fix boo#903672, CVE-2014-8627.
  * Remotely-triggerable memory leak when parsing some X.509 certificates,
    CVE-2014-8628.
  * Remotely-triggerable memory leak when parsing crafted ClientHello,
    CVE-2014-8628.
  * Ciphersuites using SHA-256 or SHA-384 now require TLS 1.x.
  * Ciphersuites using RSA-PSK key exchange now require TLS 1.x.
  * POLARSSL_MPI_MAX_SIZE now defaults to 1024 in order to allow 8192 bits RSA
    keys.
  * X.509 certificates with more than one AttributeTypeAndValue per
    RelativeDistinguishedName are not accepted any more.
- Build with POLARSSL_THREADING_PTHREAD: fix boo#903671.</changelog>
<changelog author="fisiu@opensuse.org" date="1421755200">- Add polarssl-CVE-2015-1182.patch: Remote attack using crafted certificates:
  fix boo#913903, CVE-2015-1182.</changelog>
<changelog author="mpluskal@suse.com" date="1426420800">- Rename to mbedtls
- Use cmake macro for building
- Update to 1.3.10
  * NULL pointer dereference in the buffer-based allocator when the buffer is
    full and polarssl_free() is called (found by Mark Hasemeyer)
    (only possible if POLARSSL_MEMORY_BUFFER_ALLOC_C is enabled, which it is
    not by default).
  * Fix remotely-triggerable uninitialised pointer dereference caused by
    crafted X.509 certificate (TLS server is not affected if it doesn't ask for a
    client certificate) (found using Codenomicon Defensics).
  * Fix remotely-triggerable memory leak caused by crafted X.509 certificates
    (TLS server is not affected if it doesn't ask for a client certificate)
    (found using Codenomicon Defensics).
  * Fix potential stack overflow while parsing crafted X.509 certificates
    (TLS server is not affected if it doesn't ask for a client certificate)
    (found using Codenomicon Defensics).
  * Fix timing difference that could theoretically lead to a
    Bleichenbacher-style attack in the RSA and RSA-PSK key exchanges
    (reported by Sebastian Schinzel).
  * Add support for FALLBACK_SCSV (draft-ietf-tls-downgrade-scsv).
  * Add support for Extended Master Secret (draft-ietf-tls-session-hash).
  * Add support for Encrypt-then-MAC (RFC 7366).
  * Add function pk_check_pair() to test if public and private keys match.
  * Add x509_crl_parse_der().
  * Add compile-time option POLARSSL_X509_MAX_INTERMEDIATE_CA to limit the
    length of an X.509 verification chain.
  * Support for renegotiation can now be disabled at compile-time
  * Support for 1/n-1 record splitting, a countermeasure against BEAST.
  * Certificate selection based on signature hash, prefering SHA-1 over SHA-2
    for pre-1.2 clients when multiple certificates are available.
  * Add support for getrandom() syscall on recent Linux kernels with Glibc or
    a compatible enough libc (eg uClibc).
  * Add ssl_set_arc4_support() to make it easier to disable RC4 at runtime
    while using the default ciphersuite list.
  * Added new error codes and debug messages about selection of
    ciphersuite/certificate.</changelog>
<changelog author="mpluskal@suse.com" date="1426420801">- Fix sed for includes</changelog>
<changelog author="mpluskal@suse.com" date="1426507200">- Update provides/obsoletes</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Create symlink to ensure compatibility with polarssl</changelog>
<changelog author="mpluskal@suse.com" date="1427457600">- Update package categories</changelog>
<changelog author="schwab@suse.de" date="1427889600">- getrandom-syscall-fallback.patch: Fall back to /dev/urandom if getrandom
  syscall is not implemented.</changelog>
<changelog author="fisiu@opensuse.org" date="1434369600">- Update to 1.3.11:
  * Remove bias in mpi_gen_prime (contributed by Pascal Junod).
  * Remove potential sources of timing variations (some contributed by Pascal
    Junod).
  * Options POLARSSL_HAVE_INT8 and POLARSSL_HAVE_INT16 are deprecated.
  * Enabling POLARSSL_NET_C without POLARSSL_HAVE_IPV6 is deprecated.
  * compat-1.2.h and openssl.h are deprecated.
  * ssl_set_own_cert() no longer calls pk_check_pair() since the performance
    impact was bad for some users (this was introduced in 1.3.10).
  * Move from SHA-1 to SHA-256 in example programs using signatures (suggested
    by Thorsten Mühlfelder).
  * Remove dependency on sscanf() in X.509 parsing modules.
  * Fix compile errors with PLATFORM_NO_STD_FUNCTIONS.
  * Fix bug in entropy.c when THREADING_C is also enabled that caused
    entropy_free() to crash (thanks to Rafa? Przywara).
  * Fix memory leak when gcm_setkey() and ccm_setkey() are used more than once
    on the same context.
  * Fix bug in ssl_mail_client when password is longer that username (found by
    Bruno Pape).
  * Fix undefined behaviour (memcmp( NULL, NULL, 0 );) in X.509 modules
    (detected by Clang's 3.6 UBSan).
  * mpi_size() and mpi_msb() would segfault when called on an mpi that is
    initialized but not set (found by pravic).
  * Fix detection of support for getrandom() on Linux (reported by syzzer) by
    doing it at runtime (using uname) rather that compile time.
  * Fix handling of symlinks by "make install" (found by Gaël PORTAY).
  * Fix potential NULL pointer dereference (not trigerrable remotely) when
    ssl_write() is called before the handshake is finished (introduced in
    1.3.10) (first reported by Martin Blumenstingl).
  * Fix bug in pk_parse_key() that caused some valid private EC keys to be
    rejected.
  * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos).
  * Fix thread safety bug in RSA operations (found by Fredrik Axelsson).
  * Fix hardclock() (only used in the benchmarking program) with some versions
    of mingw64 (found by kxjhlele).
  * Fix potential unintended sign extension in asn1_get_len() on 64-bit
    platforms.
  * Fix potential memory leak in ssl_set_psk() (found by Mansour Moufid).
  * Fix compile error when POLARSSL_SSL_DISABLE_RENEGOTATION and
    POLARSSL_SSL_SSESSION_TICKETS where both enabled in config.h (introduced in
    1.3.10).
  * Add missing extern "C" guard in aesni.h (reported by amir zamani).
  * Add missing dependency on SHA-256 in some x509 programs (reported by
    Gergely Budai).
  * Fix bug related to ssl_set_curves(): the client didn't check that the curve
    picked by the server was actually allowed.
- Drop getrandom-syscall-fallback.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build libmbedtls9-32bit, as needed by
  libbzrtp0-32bit.</changelog>
<changelog author="mpluskal@suse.com" date="1444305600">- Update to 1.3.14
  * Added fix for CVE-2015-5291 (boo#949380) to prevent heap corruption due to buffer
    overflow of the hostname or session ticket. Found by Guido Vranken,
    Intelworks.
  * Fix stack buffer overflow in pkcs12 decryption (used by
    mbedtls_pk_parse_key(file)() when the password is &gt; 129 bytes. Found by
    Guido Vranken, Intelworks. Not triggerable remotely.
  * Fix potential buffer overflow in mbedtls_mpi_read_string().
    Found by Guido Vranken, Intelworks. Not exploitable remotely in the context
    of TLS, but might be in other uses. On 32 bit machines, requires reading a
    string of close to or larger than 1GB to exploit; on 64 bit machines, would
    require reading a string of close to or larger than 2^62 bytes.
  * Fix potential random memory allocation in mbedtls_pem_read_buffer()
    on crafted PEM input data. Found and fix provided by Guido Vranken,
    Intelworks. Not triggerable remotely in TLS. Triggerable remotely if you
    accept PEM data from an untrusted source.
  * Fix potential double-free if ssl_set_psk() is called repeatedly on
    the same ssl_context object and some memory allocations fail. Found by
    Guido Vranken, Intelworks. Can not be forced remotely.
  * Fix possible heap buffer overflow in base64_encode() when the input
    buffer is 512MB or larger on 32-bit platforms. Found by Guido Vranken,
    Intelworks. Found by Guido Vranken. Not trigerrable remotely in TLS.
  * Fix potential heap buffer overflow in servers that perform client
    authentication against a crafted CA cert. Cannot be triggered remotely
    unless you allow third parties to pick trust CAs for client auth. Found by
    Guido Vranken, Intelworks.
  * Fix compile error in net.c with musl libc. Found and patch provided by
    zhasha (#278).
  * Fix macroization of 'inline' keywork when building as C++. (#279)
  * Added checking of hostname length in ssl_set_hostname() to ensure domain
    names are compliant with RFC 1035.
- Changes for 1.3.13
  * Fix possible client-side NULL pointer dereference (read) when the client
    tries to continue the handshake after it failed (a misuse of the API).
    (Found and patch provided by Fabian Foerg, Gotham Digital Science using afl-fuzz.)
  * Add countermeasure against Lenstra's RSA-CRT attack for PKCS#1 v1.5
    signatures. (Found by Florian Weimer, Red Hat.)
    https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/
  * Setting SSL_MIN_DHM_BYTES in config.h had no effect (overriden in ssl.h)
    (found by Fabio Solari) (#256)
  * Fix bug in mbedtls_rsa_public() and mbedtls_rsa_private() that could
    result trying to unlock an unlocked mutex on invalid input (found by
    Fredrik Axelsson) (#257)
  * Fix -Wshadow warnings (found by hnrkp) (#240)
  * Fix unused function warning when using MBEDTLS_MDx_ALT or
    MBEDTLS_SHAxxx_ALT (found by Henrik) (#239)
  * Fix memory corruption in pkey programs (found by yankuncheng) (#210)
  * Fix memory corruption on client with overlong PSK identity, around
    SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by
    Aleksandrs Saveljevs) (#238)
  * Fix off-by-one error in parsing Supported Point Format extension that
    caused some handshakes to fail.
  * When verifying a certificate chain, if an intermediate certificate is
    trusted, no later cert is checked. (suggested by hannes-landeholm)
    (#220).
- Changes for 1.3.12
  * Increase the minimum size of Diffie-Hellman parameters accepted by the
    client to 1024 bits, to protect against Logjam attack.
  * Increase the size of default Diffie-Hellman parameters on the server to
    2048 bits. This can be changed with ssl_set_dh_params().
  * Fix thread-safety issue in SSL debug module (found by Edwin van Vliet).
  * Some example programs were not built using make, not included in Visual
    Studio projects (found by Kristian Bendiksen).
  * Fix build error with CMake and pre-4.5 versions of GCC (found by Hugo
    Leisink).
  * Fix missing -static-ligcc when building shared libraries for Windows with
    make.
  * Fix compile error with armcc5 --gnu.
  * Add SSL_MIN_DHM_BYTES configuration parameter in config.h to choose the
    minimum size of Diffie-Hellman parameters accepted by the client.
  * The PEM parser now accepts a trailing space at end of lines (#226).</changelog>
<changelog author="mpluskal@suse.com" date="1447848000">- Update to 1.3.15
  * Fix potential double free if ssl_set_psk() is called more than once and
    some allocation fails. Cannot be forced remotely. Found by Guido Vranken,
    Intelworks.
  * Fix potential heap corruption on Windows when
    x509_crt_parse_path() is passed a path longer than 2GB. Cannot be
    triggered remotely. Found by Guido Vranken, Intelworks.
  * Fix potential buffer overflow in some asn1_write_xxx() functions.
    Cannot be triggered remotely unless you create X.509 certificates based
    on untrusted input or write keys of untrusted origin. Found by Guido
    Vranken, Intelworks.
  * The X509 max_pathlen constraint was not enforced on intermediate
    certificates. Found by Nicholas Wilson, fix and tests provided by
    Janos Follath. #280 and #319
  * Self-signed certificates were not excluded from pathlen counting,
    resulting in some valid X.509 being incorrectly rejected. Found and fix
    provided by Janos Follath. #319
  * Fix bug causing some handshakes to fail due to some non-fatal alerts not
    begin properly ignored. Found by mancha and Kasom Koht-arsa, #308
  * Fix build error with configurations where ECDHE-PSK is the only key
    exchange. Found and fix provided by Chris Hammond. #270
  * Fix failures in MPI on Sparc(64) due to use of bad assembly code.
    Found by Kurt Danielson. #292
  * Fix typo in name of the extKeyUsage OID. Found by inestlerode, #314
  * Fix bug in ASN.1 encoding of booleans that caused generated CA
    certificates to be rejected by some applications, including OS X
    Keychain. Found and fixed by Jonathan Leroy, Inikup.
  * Fix "Destination buffer is too small" error in cert_write program.
    Found and fixed by Jonathan Leroy, Inikup.</changelog>
<changelog author="mpluskal@suse.com" date="1452427200">- Update to 1.3.16
  * Fixes a potential double free when
    mbedtls_asn1_store_named_data() fails to allocate memory. This
    was only used for certificate generation and was not
    triggerable remotely in SSL/TLS. boo#961290
  * Disables by default MD5 handshake signatures in TLS 1.2 to
    prevent the  SLOTH (CVE-2015-7575) attack on TLS 1.2 server
    authentication (other attacks from the SLOTH paper do not apply
    to any version of mbed TLS or PolarSSL). boo#961284
  * Fixes an over-restrictive length limit in GCM.
  * Fixes a bug in certificate validation that caused valid chains
    to be rejected when the first intermediate certificate has a
    pathLenConstraint equal to zero.
  * Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign()
  * Added config.h option POLARSSL_SSL_ENABLE_MD5_SIGNATURES to
    control use of MD5-based signatures for TLS 1.2 handshake
    (disabled by default).</changelog>
<changelog author="mpluskal@suse.com" date="1468497600">- Update to version 1.3.17 (boo#988956):
  * Security
    + Fix missing padding length check in
    mbedtls_rsa_rsaes_pkcs1_v15_decrypt required by PKCS1 v2.2
    + Fix a potential integer underflow to buffer overread in
    mbedtls_rsa_rsaes_oaep_decrypt. It is not triggerable
    remotely in SSL/TLS.
    + Fix potential integer overflow to buffer overflow in
    mbedtls_rsa_rsaes_pkcs1_v15_encrypt and
    mbedtls_rsa_rsaes_oaep_encrypt
  * Bugfix
    + Fix bug in mbedtls_mpi_add_mpi() that caused wrong results
    when the three arguments where the same (in-place doubling).
    Found and fixed by Janos Follath. #309
    + Fix issue in Makefile that prevented building using armar.
    + Fix issue that caused a hang up when generating RSA keys of
    odd bitlength
    + Fix bug in mbedtls_rsa_rsaes_pkcs1_v15_encrypt that made
    null pointer dereference possible.
    + Fix issue that caused a crash if invalid curves were passed
    to mbedtls_ssl_conf_curves. #373
  * Changes
    + On ARM platforms, when compiling with -O0 with GCC, Clang or
    armcc5, don't use the optimized assembly for bignum
    multiplication. This removes the need to pass
  - fomit-frame-pointer to avoid a build error with -O0.
    + Disabled SSLv3 in the default configuration.
    + Fix non-compliance server extension handling. Extensions for
    SSLv3 are now ignored, as required by RFC6101.</changelog>
<changelog author="mpluskal@suse.com" date="1489233600">- Update to version 1.3.19 (boo#1029017):
  * Add checks to prevent signature forgeries for very large messages while
    using RSA through the PK module in 64-bit systems. The issue was caused by
    some data loss when casting a size_t to an unsigned int value in the
    functions rsa_verify_wrap(), rsa_sign_wrap(), rsa_alt_sign_wrap() and
    pk_sign(). Found by Jean-Philippe Aumasson.
  * Fixed potential livelock during the parsing of a CRL in PEM format in
    mbedtls_x509_crl_parse(). A string containing a CRL followed by trailing
    characters after the footer could result in the execution of an infinite
    loop. The issue can be triggered remotely. Found by Greg Zaverucha,
    Microsoft.
  * Fixed a bug that caused freeing a buffer that was allocated on the stack,
    when verifying the validity of a key on secp224k1. This could be
    triggered remotely for example with a maliciously constructed certificate
    and potentially could lead to remote code execution on some platforms.
    Reported independently by rongsaws and Aleksandar Nikolic, Cisco Talos
    team. #569 CVE-2017-2784</changelog>
<changelog author="fisiu@opensuse.org" date="1507636800">- Add bypass-peer-auth-fix-CVE-2017-14032.patch: boo#1056544, CVE-2017-14032.</changelog>

</package>
<package pkgid="3217bd4a26d3ebe4bb12771e851c0068c6f8503842435c86141f4a09f2a706d8" name="libmilter-doc" arch="noarch">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="96d91dfc9da61eda5df031f19307b83c826d886af3da8152896f54cef0141df7" name="libmilter1_0" arch="x86_64">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="14910a717eef615909988708334b2b7986252e61b3f9578d3aeb7b598b051d34" name="libmount-devel" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="97ca20500e08f67639f3ec75d45a87cad9b1e649da2e839d9d3d8729ae07710a" name="libmount-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="392c7220d295ef301c95ea435c84c873c6053e9c6b4dd48b4bcb7f845c79bf3b" name="libmount-devel-static" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="8b52a062839066aa076854291059bbcfc585dcbc29b64e44545de738ef421085" name="libmount1" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="698f61eb504ed02eef780ad6fcc7838648d10c377ae8f7b24bc38c37bb32e88d" name="libmount1-32bit" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="6ada8d63b4c495008082fa0e0df68887b1658580a01d91c5c414537e0b865c39" name="libmp3lame-devel" arch="x86_64">
    <version epoch="0" ver="3.99.5" rel="2.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1243684800">- patch from cvs to fix buffer problems with ffmpeg</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups cvs patch
- removed static library</changelog>
<changelog author="pascal@links2linux.de" date="1267358400">- update to 3.98.3:
  * a very important interaction with the FhG decoder was fixed
  * the hip audio decoding library is used to perform a better job
    when reencoding MP3 files to MP3 files
  * bugs were worked around to improve compatibility with ffmpeg
  * many fixes were made regarding ID3 tags, including correct
    specification of the length of the tracks
- dropped cvs patch, merged upstream</changelog>
<changelog author="pascal@links2linux.de" date="1269691200">- update to 3.98.4:
  * fix for #2973877, a problem regarding the new drain code</changelog>
<changelog author="lnussel@suse.de" date="1276862400">- disable use of gtk in 11.3, was dropped</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1299499200">- add Gentoo patch that fixes reading from stdin
- add rpmlintrc
- split out documentation into subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1321963200">- disable sndfile for IO, causes more issues than anything else (warnings and
  issues in several applications that use lame)
- lame-tgetstr.patch: fix build on openSUSE &gt; 12.1, tput and friends are now in
  libtinfo</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1342526400">- update to 3.99.5: fixed build on 12.2</changelog>
<changelog author="reddwarf@opensuse.org" date="1342699200">- Fix bug reporting link
- BuildRequires nasm only in x86-32 (there is no assembly available
  for other archs)
- Stop BuildRequiring flac-devel, it's not used
- Remove autoreconf call and related BuildRequires and patches
- Remove old compatibility Provides
- Run spec-cleaner
- Removed all patches (unneeded)
- Replace some documentation and let the build system install its
  own</changelog>
<changelog author="obs@botter.cc" date="1381838400">- Fix pkgconfig(gtk+-2.0) for &gt;= 11.4</changelog>
<changelog author="hvogel@opensuse.org" date="1383220800">- Fix the conditional building of gtk1 binaries</changelog>
<changelog author="obs@botter.cc" date="1383307200">- Fix logical issue in hvogel's fix</changelog>
<changelog author="scarabeus@opensuse.org" date="1422964800">- Redux the conditionals for not building gtk1 anywhere anymore</changelog>
<changelog author="olaf@aepfle.de" date="1434801600">- Add patch for SSE
- Add check for invalid input sample rate
- Avoid malformed wav causing floating point exception (integer divide by zero)
- Fix warning on 64 bit machines. Explicitely set variables as unsigned ints.
- Enable functions with SSE instructions to maintain their own properly aligned stack
- Fix decision if sample rate ratio is an integer value or not
- run autoreconf, set GTK_CFLAGS
- Add patch to remove ansi2knr instead of using sed</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Rename %soname to %sover to better reflect its use.
- Replace goals with what the software really does.</changelog>

</package>
<package pkgid="8824e8637ad23eeb3f04ace57750aa231be15821edc235531ffdb594965cfdf5" name="libmp3lame0" arch="x86_64">
    <version epoch="0" ver="3.99.5" rel="2.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1243684800">- patch from cvs to fix buffer problems with ffmpeg</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups cvs patch
- removed static library</changelog>
<changelog author="pascal@links2linux.de" date="1267358400">- update to 3.98.3:
  * a very important interaction with the FhG decoder was fixed
  * the hip audio decoding library is used to perform a better job
    when reencoding MP3 files to MP3 files
  * bugs were worked around to improve compatibility with ffmpeg
  * many fixes were made regarding ID3 tags, including correct
    specification of the length of the tracks
- dropped cvs patch, merged upstream</changelog>
<changelog author="pascal@links2linux.de" date="1269691200">- update to 3.98.4:
  * fix for #2973877, a problem regarding the new drain code</changelog>
<changelog author="lnussel@suse.de" date="1276862400">- disable use of gtk in 11.3, was dropped</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1299499200">- add Gentoo patch that fixes reading from stdin
- add rpmlintrc
- split out documentation into subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1321963200">- disable sndfile for IO, causes more issues than anything else (warnings and
  issues in several applications that use lame)
- lame-tgetstr.patch: fix build on openSUSE &gt; 12.1, tput and friends are now in
  libtinfo</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1342526400">- update to 3.99.5: fixed build on 12.2</changelog>
<changelog author="reddwarf@opensuse.org" date="1342699200">- Fix bug reporting link
- BuildRequires nasm only in x86-32 (there is no assembly available
  for other archs)
- Stop BuildRequiring flac-devel, it's not used
- Remove autoreconf call and related BuildRequires and patches
- Remove old compatibility Provides
- Run spec-cleaner
- Removed all patches (unneeded)
- Replace some documentation and let the build system install its
  own</changelog>
<changelog author="obs@botter.cc" date="1381838400">- Fix pkgconfig(gtk+-2.0) for &gt;= 11.4</changelog>
<changelog author="hvogel@opensuse.org" date="1383220800">- Fix the conditional building of gtk1 binaries</changelog>
<changelog author="obs@botter.cc" date="1383307200">- Fix logical issue in hvogel's fix</changelog>
<changelog author="scarabeus@opensuse.org" date="1422964800">- Redux the conditionals for not building gtk1 anywhere anymore</changelog>
<changelog author="olaf@aepfle.de" date="1434801600">- Add patch for SSE
- Add check for invalid input sample rate
- Avoid malformed wav causing floating point exception (integer divide by zero)
- Fix warning on 64 bit machines. Explicitely set variables as unsigned ints.
- Enable functions with SSE instructions to maintain their own properly aligned stack
- Fix decision if sample rate ratio is an integer value or not
- run autoreconf, set GTK_CFLAGS
- Add patch to remove ansi2knr instead of using sed</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Rename %soname to %sover to better reflect its use.
- Replace goals with what the software really does.</changelog>

</package>
<package pkgid="15277f2d6777a24426b63322adb351fb086aa25e461c87ea810d96fcfec3450f" name="libmp3lame0-32bit" arch="x86_64">
    <version epoch="0" ver="3.99.5" rel="2.1"/>

<changelog author="Manfred.Tremmel@iiv.de" date="1243684800">- patch from cvs to fix buffer problems with ffmpeg</changelog>
<changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups cvs patch
- removed static library</changelog>
<changelog author="pascal@links2linux.de" date="1267358400">- update to 3.98.3:
  * a very important interaction with the FhG decoder was fixed
  * the hip audio decoding library is used to perform a better job
    when reencoding MP3 files to MP3 files
  * bugs were worked around to improve compatibility with ffmpeg
  * many fixes were made regarding ID3 tags, including correct
    specification of the length of the tracks
- dropped cvs patch, merged upstream</changelog>
<changelog author="pascal@links2linux.de" date="1269691200">- update to 3.98.4:
  * fix for #2973877, a problem regarding the new drain code</changelog>
<changelog author="lnussel@suse.de" date="1276862400">- disable use of gtk in 11.3, was dropped</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1299499200">- add Gentoo patch that fixes reading from stdin
- add rpmlintrc
- split out documentation into subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1321963200">- disable sndfile for IO, causes more issues than anything else (warnings and
  issues in several applications that use lame)
- lame-tgetstr.patch: fix build on openSUSE &gt; 12.1, tput and friends are now in
  libtinfo</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1342526400">- update to 3.99.5: fixed build on 12.2</changelog>
<changelog author="reddwarf@opensuse.org" date="1342699200">- Fix bug reporting link
- BuildRequires nasm only in x86-32 (there is no assembly available
  for other archs)
- Stop BuildRequiring flac-devel, it's not used
- Remove autoreconf call and related BuildRequires and patches
- Remove old compatibility Provides
- Run spec-cleaner
- Removed all patches (unneeded)
- Replace some documentation and let the build system install its
  own</changelog>
<changelog author="obs@botter.cc" date="1381838400">- Fix pkgconfig(gtk+-2.0) for &gt;= 11.4</changelog>
<changelog author="hvogel@opensuse.org" date="1383220800">- Fix the conditional building of gtk1 binaries</changelog>
<changelog author="obs@botter.cc" date="1383307200">- Fix logical issue in hvogel's fix</changelog>
<changelog author="scarabeus@opensuse.org" date="1422964800">- Redux the conditionals for not building gtk1 anywhere anymore</changelog>
<changelog author="olaf@aepfle.de" date="1434801600">- Add patch for SSE
- Add check for invalid input sample rate
- Avoid malformed wav causing floating point exception (integer divide by zero)
- Fix warning on 64 bit machines. Explicitely set variables as unsigned ints.
- Enable functions with SSE instructions to maintain their own properly aligned stack
- Fix decision if sample rate ratio is an integer value or not
- run autoreconf, set GTK_CFLAGS
- Add patch to remove ansi2knr instead of using sed</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Rename %soname to %sover to better reflect its use.
- Replace goals with what the software really does.</changelog>

</package>
<package pkgid="c228d6e9d0a27cc3a8f628aa9b19ad60f21afc0d3d46387d50b67dedc1db6de8" name="libmpg123-0" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="2e87ade98706d2b345d15f2796b5f0f26dba682023e14387a5db53761d036e8f" name="libmpg123-0" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="b0d15d5b7bb64a006b856aca2f95a9b3ef551a8c6a4a0758e1027302e642b34e" name="libmpg123-0" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="198f2e731cc2bfb302443cd3cd97b91066f6568f22361a864fc98d448d481a98" name="libmpg123-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="c91eed366286b0cc9bc04d5890ce907166f2662c63c477bee248cb6621c2271f" name="libmpg123-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="a786ea6ce41551c5de7bef052d58b18d5757c2f64257ec27c95d85943f7bc162" name="libmpg123-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="c1d539fb22334622684c50620745fbad2a3ad1f19b2ba3ba4edf64d52322e50e" name="libmpx2" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="1dca18bc14d35a6447952eaa76e2d7e6ac4a895f82aa27fb9af675682b15dd2f" name="libmpx2-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="6a34e53b137574619620ad5bd0dcd95eaaa896e3242b0a6454fa34cd02e4ea2e" name="libmpxwrappers2" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="b2f83e32a9d76e4b7571443687eea2e1d5d7b7374d26c2e660e5bddae87862b8" name="libmpxwrappers2-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="3656e6e4994e1e55a596fec9fb36bb8816f0767b66624cd71260b40cf220d2ce" name="libmysql56client18" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="513183ab0e8933e13b75483acef93af3b41ad9e65f7dfdbb7ace16c88264eea5" name="libmysql56client18" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="e70aff1dee40e36cbac0dd33f013912396afbe3a4f093d75f97a2c5d61274a76" name="libmysql56client18-32bit" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="c1d58f383a0b3d1d5657c07c817c4986f632823e9f7d4ba27eea734cf5ce7219" name="libmysql56client18-32bit" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="2624e3e2be6bbb1d01b9e4e60b72f089682722399d0624698edc69ba0766fd27" name="libmysql56client_r18" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="23db520fa30dd57d81833a3ceae46769eb4374dfc62483c5fec401222476b3c0" name="libmysql56client_r18" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="cbb14b4919bcf6f0733be23eafc30626adc613a0632a78f69c04481263739443" name="libmysql56client_r18-32bit" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="97f6ad409abad498a1d61b8997c0c28dcf5ca29eb33fcbd08e0b79ae6d753ed3" name="libmysql56client_r18-32bit" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="1c996fe05804b6023a9737c1ff4a69262516b16a40c46aa82f992630e8de6bca" name="libmysqlclient-devel" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="dd4698377d4ee47d80ef8aa0e319a8ab93c29bede31fbd4f34f5ed8eb5e56ceb" name="libmysqlclient18" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="7e8c9b30fb1c6bacd179eced5406ad71f5c6589cba9231cd746136984f0c96ae" name="libmysqlclient18-32bit" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="5e52af1339fe72920f6175ce3652b5753593249cd5270d9bd76aa9426699012b" name="libmysqlclient_r18" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="d388e3a6e4e4cb91676dfeb90f63b01ccd705d663d14bea17158759a32f637e7" name="libmysqlclient_r18-32bit" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="7d293596ed0ee03868ad7eb72ba6bc037549002fafc28ea346b179ff687b1067" name="libmysqlcppconn-devel" arch="x86_64">
    <version epoch="0" ver="1.1.8" rel="8.1"/>

<changelog author="mhrusecky@suse.cz" date="1239969600">- initial version of MySQL Connector/C++ package (version 1.0.4 beta)</changelog>
<changelog author="mhrusecky@suse.cz" date="1242648000">- fixed compilation using gcc44</changelog>
<changelog author="mhrusecky@suse.cz" date="1242907200">- updated to version 1.0.5
  * Changed the interface of sql::ConnectionMetaData, sql::ResultSetMetaData
    and sql::ParameterMetaData to have a protected destructor. In this way the
    client code doesn't need, and won't be able, to destruct the metadata
    objects returned by the connector. The connector will handle their
    destruction.  This enables statements like :
    connection-&gt;getMetaData-&gt;getSchema(); without the result of leaking memory
    because we lost the pointer returned by getMetaData().  (Lawrin, Andrey)
  * Large overhaul of the code to improve the memory management to not leak in
    exceptional situations. Big improvement compared to Beta1. (Andrey)
  * Fixed the interface of sql::Driver and sql::Connection so they accept the
    options map by alias instead of by value. (Andrey)
  * Changed the return type of sql::SQLException::getSQLState() from
    std::string to const char * to be consistent with std::exception::what().
    (Andrey)
  * Implemented getResultSetType() and setResultSetType() for Statement. Used
    are TYPE_FORWARD_ONLY, which means unbuffered result set and
    TYPE_SCROLL_INSENSITIVE, which means buffered result set. (Andrey)
  * Implemented getResultSetType() for PreparedStatement. The setter is not
    implemented because currently PreparedStatement can't do refetching and
    storing the result means the bind buffers will be correct. (Andrey)
  * Added "defaultStatementResultType" to MySQL_Connection::setClientOption()
    as an option. Also the method now returns `sql::Connection *`. (Andrey)
  * Added Result::getType() and implemented it in the three result set classes.
    (Andrey)
  * Enabled tracing functionality when building with VC8 and up (VS2005 and
    up). (Andrey)
  * Added better support for named pipes, on Windows. Use pipe:// and add the
    path to the pipe. Shared memory connections are currently not supported.
    (Andrey)
  * Fixed a bug in MySQL_Connection::setSessionVariable() which led to
    exception being thrown. (Andrey)</changelog>
<changelog author="mhrusecky@suse.cz" date="1248782400">- Better description (bnc#522682)</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="mhrusecky@suse.cz" date="1307016000">- updated to version 1.1.0, see
  http://forge.mysql.com/wiki/Connector_C%2B%2B#MySQL_Connector.2FC.2B.2B_1.1.0_GA_.2813.09.2010.29</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1326888000">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  GPL has FLOSS exception.</changelog>
<changelog author="adam@mizerski.pl" date="1360756800">- update to 1.1.2, see
  https://dev.mysql.com/doc/relnotes/connector-cpp/en/ccpp-news-1-1-1.html
  https://dev.mysql.com/doc/relnotes/connector-cpp/en/ccpp-news-1-1-2.html
- libmysqlcppconn5 changed to libmysqlcppconn6 (number bump)
- spec file cleanup
- removed patch for driver/mysql_art_resultset.cpp from
  mysql-connector-cpp-1.1.0-gcc44.patch
- added mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch</changelog>
<changelog author="saschpe@suse.de" date="1362744000">- Fix library requirement for devel package due to wrong soversion</changelog>
<changelog author="mhrusecky@suse.com" date="1364990400">- Merge with package by Tomas Chvatal (to make it work with LO)</changelog>
<changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
<changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
<changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
<changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
<changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
<changelog author="kstreitova@suse.com" date="1504612800">- add "Requires: boost-devel" for libmysqlcppconn-devel subpackage
  [bsc#838038]</changelog>

</package>
<package pkgid="8e4b0a5d16dded31054d6cb335f36d7100f8808fa65c2235bc976d7bb2d5e536" name="libmysqlcppconn7" arch="x86_64">
    <version epoch="0" ver="1.1.8" rel="8.1"/>

<changelog author="mhrusecky@suse.cz" date="1239969600">- initial version of MySQL Connector/C++ package (version 1.0.4 beta)</changelog>
<changelog author="mhrusecky@suse.cz" date="1242648000">- fixed compilation using gcc44</changelog>
<changelog author="mhrusecky@suse.cz" date="1242907200">- updated to version 1.0.5
  * Changed the interface of sql::ConnectionMetaData, sql::ResultSetMetaData
    and sql::ParameterMetaData to have a protected destructor. In this way the
    client code doesn't need, and won't be able, to destruct the metadata
    objects returned by the connector. The connector will handle their
    destruction.  This enables statements like :
    connection-&gt;getMetaData-&gt;getSchema(); without the result of leaking memory
    because we lost the pointer returned by getMetaData().  (Lawrin, Andrey)
  * Large overhaul of the code to improve the memory management to not leak in
    exceptional situations. Big improvement compared to Beta1. (Andrey)
  * Fixed the interface of sql::Driver and sql::Connection so they accept the
    options map by alias instead of by value. (Andrey)
  * Changed the return type of sql::SQLException::getSQLState() from
    std::string to const char * to be consistent with std::exception::what().
    (Andrey)
  * Implemented getResultSetType() and setResultSetType() for Statement. Used
    are TYPE_FORWARD_ONLY, which means unbuffered result set and
    TYPE_SCROLL_INSENSITIVE, which means buffered result set. (Andrey)
  * Implemented getResultSetType() for PreparedStatement. The setter is not
    implemented because currently PreparedStatement can't do refetching and
    storing the result means the bind buffers will be correct. (Andrey)
  * Added "defaultStatementResultType" to MySQL_Connection::setClientOption()
    as an option. Also the method now returns `sql::Connection *`. (Andrey)
  * Added Result::getType() and implemented it in the three result set classes.
    (Andrey)
  * Enabled tracing functionality when building with VC8 and up (VS2005 and
    up). (Andrey)
  * Added better support for named pipes, on Windows. Use pipe:// and add the
    path to the pipe. Shared memory connections are currently not supported.
    (Andrey)
  * Fixed a bug in MySQL_Connection::setSessionVariable() which led to
    exception being thrown. (Andrey)</changelog>
<changelog author="mhrusecky@suse.cz" date="1248782400">- Better description (bnc#522682)</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="mhrusecky@suse.cz" date="1307016000">- updated to version 1.1.0, see
  http://forge.mysql.com/wiki/Connector_C%2B%2B#MySQL_Connector.2FC.2B.2B_1.1.0_GA_.2813.09.2010.29</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1326888000">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  GPL has FLOSS exception.</changelog>
<changelog author="adam@mizerski.pl" date="1360756800">- update to 1.1.2, see
  https://dev.mysql.com/doc/relnotes/connector-cpp/en/ccpp-news-1-1-1.html
  https://dev.mysql.com/doc/relnotes/connector-cpp/en/ccpp-news-1-1-2.html
- libmysqlcppconn5 changed to libmysqlcppconn6 (number bump)
- spec file cleanup
- removed patch for driver/mysql_art_resultset.cpp from
  mysql-connector-cpp-1.1.0-gcc44.patch
- added mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch</changelog>
<changelog author="saschpe@suse.de" date="1362744000">- Fix library requirement for devel package due to wrong soversion</changelog>
<changelog author="mhrusecky@suse.com" date="1364990400">- Merge with package by Tomas Chvatal (to make it work with LO)</changelog>
<changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
<changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
<changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
<changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
<changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
<changelog author="kstreitova@suse.com" date="1504612800">- add "Requires: boost-devel" for libmysqlcppconn-devel subpackage
  [bsc#838038]</changelog>

</package>
<package pkgid="a881795371b24ca4d7462ea85f51694db07f215d16ff57e1d4da6c36cf0c0d6f" name="libmysqld-devel" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="27f09b14257e075fe64e24e34d9ba335cab29dcdcfeaa0776b76d7e377dbb4d3" name="libmysqld18" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="adebc42c03416a61cb9193b8dab004c575cabeb46e6aec1cf19f314596e5a19d" name="libncurses5" arch="x86_64">
    <version epoch="0" ver="5.9" rel="59.1"/>

<changelog author="werner@suse.de" date="1361188800">- Add ncurses patch 20130126
  + further fixes to mvcur to pass callback function (cf: 20130112),
    needed to make test/dots_mvcur work.
  + reduce calls to SetConsoleActiveScreenBuffer in win_driver.c, to
    help reduce flicker.
  + modify configure script to omit "+b" from linker options for very
    old HP-UX systems (report by Dennis Grevenstein)
  + add HP-UX workaround for missing EILSEQ on old HP-UX systems (patch
    by Dennis Grevenstein).
  + restore memmove/strdup support for antique systems (request by
    Dennis Grevenstein).
  + change %l behavior in tparm to push the string length onto the stack
    rather than saving the formatted length into the output buffer
    (report by Roy Marples, cf: 980620).
- Add ncurses patch 20130202
  + correct initialization in knight.c which let it occasionally make
    an incorrect move (cf: 20001028).
  + improve documentation of the terminfo/termcap search path.
- Add ncurses patch 20130209
  + modify test/configure script to make it simpler to override names
    of curses-related libraries, to help with linking with pdcurses in
    mingw environment.
  + if the --with-terminfo-dirs configure option is not used, there is
    no corresponding compiled-in value for that.  Fill in "no default
    value" for that part of the manpage substitution.
- Add ncurses patch 20130216
  + modify test/testcurs.c to work with mouse for ncurses as it does for
    pdcurses.
  + modify test/knight.c to work with mouse for pdcurses as it does for
    ncurses.
  + modify internal recursion in wgetch() which handles cooked mode to
    check if the call to wgetnstr() returned an error.  This can happen
    when both nocbreak() and nodelay() are set, for instance (report by
    Nils Christopher Brause) (cf: 960418).
  + fixes for issues found by Coverity:
    + add a check for valid position in ClearToEOS()
    + fix in lib_twait.c when --enable-wgetch-events is used, pointer
    use after free.
    + improve a limit-check in make_hash.c
    + fix a memory leak in hashed_db.c
- Add ncurses patch 20130218
  + correct ifdef on change to lib_twait.c (report by  Werner Fink).
  + update config.guess, config.sub
- Use screen to emulate a terminal to enable the configure script to
  use poll(2) system call on stderr file descriptor</changelog>
<changelog author="werner@suse.de" date="1364299200">- Add ncurses patch 20130324
  + build-fix for libtool configuration (reports by Daniel Silva Ferreira
    and Roumen Petrov).
- Add ncurses patch 20130323
  + build-fix for OS X, to handle changes for --with-cxx-shared feature
    (report by Christian Ebert).
  + change initialization for vt220, similar entries for consistency
    with cursor-key strings (NetBSD #47674) -TD
  + further improvements to linux-16color (Benjamin Sittler)
- Add ncurses patch 20130316
  + additional fix for tic.c, to allocate missing buffer space.
  + eliminate configure-script warnings for gen-pkgconfig.in
  + correct typo in sgr string for sun-color,
    add bold for consistency with sgr,
    change smso for consistency with sgr -TD
  + correct typo in sgr string for terminator -TD
  + add blink to the attributes masked by ncv in linux-16color (report
    by Benjamin Sittler)
  + improve warning message from post-load checking for missing "%?"
    operator by tic/infocmp by showing the entry name and capability.
  + minor formatting improvement to tic/infocmp -f option to ensure
    line split after "%;".
  + amend scripting for --with-cxx-shared option to handle the debug
    library "libncurses++_g.a" (report by Sven Joachim).
- Add ncurses patch 20130309
  + amend change to toe.c for reading from /dev/zero, to ensure that
    there is a buffer for the temporary filename (cf: 20120324).
  + regenerated html manpages.
  + fix typo in terminfo.head (report by Sven Joachim, cf: 20130302).
  + updated some autoconf macros:
    + CF_ACVERSION_CHECK, from byacc 1.9 20130304
    + CF_INTEL_COMPILER, CF_XOPEN_SOURCE from luit 2.0-20130217
  + add configure option --with-cxx-shared to permit building
    libncurses++ as a shared library when using g++, e.g., the same
    limitations as libtool but better integrated with the usual build
    configuration (Redhat 911540).
  + modify MKkey_defs.sh to filter out build-path which was unnecessarily
    shown in curses.h (Debian #689131).
- Add ncurses patch 20130302
  + add section to terminfo manpage discussing user-defined capabilities.
  + update manpage description of NCURSES_NO_SETBUF, explaining why it
    is obsolete.
  + add a check in waddch_nosync() to ensure that tab characters are
    treated as control characters; some broken locales claim they are
    printable.
  + add some traces to the Windows console driver.
  + initialize a temporary array in _nc_mbtowc, needed for some cases
    of raw input in MinGW port.
- Make it build even with shared libncurses++ and its demo test program</changelog>
<changelog author="werner@suse.de" date="1368446400">- Add ncurses patch 20130511
  + move nsterm-related entries out of "obsolete" section to more
    plausible "ansi consoles" -TD
  + additional cleanup of table-of-contents by reordering -TD
  + revise fix for check for 8-bit value in _nc_insert_ch(); prior fix
    prevented inserts when video attributes were attached to the data
    (cf: 20121215) (Redhat #959534).
- Add ncurses patch 20130504
  + fixes for issues found by Coverity:
    + correct FNKEY() macro in progs/dump_entry.c, allowing kf11-kf63 to
    display when infocmp's -R option is used for HP or AIX subsets.
    + fix dead-code issue with test/movewindow.c
    + improve limited-checking in _nc_read_termtype().
- Add ncurses patch 20130427
  + fix clang 3.2 warning in progs/dump_entry.c
  + drop AC_TYPE_SIGNAL check; ncurses relies on c89 and later.
- Add ncurses patch 20130413
  + add MinGW to cases where ncurses installs by default into /usr
    (prompted by discussion with Daniel Silva Ferreira).
  + add -D option to infocmp's usage-message (patch by Miroslav Lichvar).
  + add a missing 'int' type for main function in configure check for
    type of bool variable, to work with clang 3.2 (report by Dmitri
    Gribenko).
  + improve configure check for static_cast, to work with clang 3.2
    (report by Dmitri Gribenko).
  + re-order rule for demo.o and macros defining header dependencies in
    c++/Makefile.in to accommodate gmake (report by Dmitri Gribenko).
- Add ncurses patch 20130406
  + improve parameter checking in copywin().
  + modify configure script to work around OS X's "libtool" program, to
    choose glibtool instead.  At the same time, chance the autoconf macro
    to look for a "tool" rather than a "prog", to help with potential use
    in cross-compiling.
  + separate the rpath usage for c++ library from demo program
    (Redhat #911540)
  + update/correct header-dependencies in c++ makefile (report by Werner
    Fink).
  + add --with-cxx-shared to dpkg-script, as done for rpm-script.</changelog>
<changelog author="werner@suse.de" date="1368446401">- Make LD_LIBRARY_PATH include %_lib to make sure use and test the
  fresh build libraries</changelog>
<changelog author="werner@suse.de" date="1371816000">- Add some more terminfo entries to terminfo-base (bnc#826171)</changelog>
<changelog author="werner@suse.de" date="1375704000">- Add ncurses patch 20130805
  + minor fixes to the --disable-overwrite logic, to ensure that the
    configured $(includedir) is not cancelled by the mingwxx-filesystem
    rpm macros.
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.
- Add ncurses patch 20130727
  + improve configure macros from ongoing work on cdk, dialog, xterm:
    + CF_ADD_LIB_AFTER - fix a problem with -Wl options
    + CF_RPATH_HACK - add missing result-message
    + CF_SHARED_OPTS - modify to use $rel_builddir in cygwin and mingw
    dll symbols (which can be overridden) rather than explicit "../".
    + CF_SHARED_OPTS - modify NetBSD and DragonFly symbols to use ${CC}
    rather than ${LD} to improve rpath support.
    + CF_SHARED_OPTS - add a symbol to denote the temporary files that
    are created by the macro, to simplify clean-rules.
    + CF_X_ATHENA - trim extra libraries to work with -Wl,--as-needed
  + fix a regression in hashed-database support for NetBSD, which uses
    the key-size differently from other implementations (cf: 20121229).
- Add ncurses patch 20130720
  + further improvements for setupterm manpage, clarifying the
    initialization of cur_term.
- Add ncurses patch 20130713
  + improve manpages for initscr and setupterm.
  + minor compiler-warning fixes
- Add ncurses patch 20130706
  + add fallback defs for &lt;inttypes.h&gt; and &lt;stdint.h&gt; (cf: 20120225).
  + add check for size of wchar_t, use that to suppress a chunk of
    wcwidth.h in MinGW port.
  + quiet linker warnings for MinGW cross-compile with dll's using the
  - -enable-auto-import flag.
  + add ncurses.map rule to ncurses/Makefile to help diagnose symbol
    table issues.
- Add ncurses patch 20130622
  + modify the clear program to take into account the E3 extended
    capability to clear the terminal's scrollback buffer (patch by
    Miroslav Lichvar, Redhat #815790).
  + clarify in resizeterm manpage that LINES and COLS are updated.
  + updated ansi example in terminfo.tail, correct misordered example
    of sgr.
  + fix other doclifter warnings for manpages
  + remove unnecessary ".ta" in terminfo.tail, add missing ".fi"
    (patch by Eric Raymond).
- Add ncurses patch 20130615
  + minor changes to some configure macros to make them more reusable.
  + fixes for tabs program (prompted by report by Nick Andrik):
    + corrected logic in command-line parsing of -a and -c predefined
    tab-lists options.
    + allow "-0" and "-8" options to be combined with others, e.g.,"-0d".
    + make warning messages more consistent with the other utilities by
    not printing the full pathname of the program.
    + add -V option for consistency with other utilities.
  + fix off-by-one in columns for tabs program when processing an option
    such as "-5" (patch by Nick Andrik).
- Add ncurses patch 20130608
  + add to test/demo_forms.c examples of using the menu-hooks as well
    as showing how the menu item user-data can be used to pass a callback
    function pointer.
  + add test/dots_termcap.c
  + remove setupterm call from test/demo_termcap.c
  + build-fix if --disable-ext-funcs configure option is used.
  + modified test/edit_field.c and test/demo_forms.c to move the lengths
    into a user-data structure, keeping the original string for later
    expansion to free-format input/out demo.
  + modified test/demo_forms.c to load data from file.
  + added note to clarify Terminal.app's non-emulation of the various
    terminal types listed in the preferences dialog -TD
  + fix regression in error-reporting in lib_setup.c (Debian #711134,
    cf: 20121117).
  + build-fix for a case where --enable-broken_linker and
  - -enable-reentrant options are combined (report by George R Goffe).
- Add ncurses patch 20130525
  + modify mvcur() to distinguish between internal use by the ncurses
    library, and external callers, preventing it from reading the content
    of the screen which is only nonblank when curses calls have updated
    it.  This makes test/dots_mvcur.c avoid painting colored cells in
    the left margin of the display.
  + minor fix to test/dots_mvcur.c
  + move configured symbols USE_DATABASE and USE_TERMCAP to term.h as
    NCURSES_USE_DATABASE and NCURSES_USE_TERMCAP to allow consistent
    use of these symbols in term_entry.h
- Add ncurses patch 20130518
  + corrected ifdefs in test/testcurs.c to allow comparison of mouse
    interface versus pdcurses (cf: 20130316).
  + add pow() to configure-check for math library, needed since
    20121208 for test/hanoi (Debian #708056).
  + regenerated html manpages.
  + update doctype used for html documentation.</changelog>
<changelog author="werner@suse.de" date="1380542400">- Add ncurses patch 20130928
  + fix a possible null-pointer reference in a trace message from newterm.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.
- Add ncurses patch 20130921
  + fix typo in curs_attr.3x (patch by Sven Joachim, cf: 20130831).
  + build-fix for --with-shared option for DragonFly and FreeBSD (report
    by Rong-En Fan, cf: 20130727).
- Add ncurses patch 20130907
  + revert change to two of the dpkg format files, to work with dpkg
    before/after Debian #700177.
  + fix gcc -Wconversion warning in wattr_get() macro.
  + add msys and msysdll to known host/configuration types (patch by
    Alexey Pavlov).
  + modify CF_RPATH_HACK configure macro to not rely upon "-u" option
    of sort, improving portability.
- Add ncurses patch 20130831
  + modify test/ncurses.c b/B tests to display lines only for the
    attributes which a given terminal supports, to make room for an
    italics test.
  + completed ncv table in terminfo.tail; it did not list the wide
    character codes listed in X/Open Curses issue 7.
  + add A_ITALIC extension (prompted by discussion with Egmont Koblinger).
- Add ncurses patch 20130824
  + fix some gcc 4.8 -Wconversion warnings.
  + change format of dpkg test-scripts to quilted to work around bug
    introduced by Debian #700177.
  + discard cached keyname() values if meta() is changed after a value
    was cached using (report by Kurban Mallachiev).
- Add ncurses patch 20130816
  + add checks in tic to warn about terminals which lack cursor
    addressing, capabilities or having those, are marked as hard_copy or
    generic_type.
  + use --without-progs in mingw-ncurses rpm.
  + split out _nc_init_termtype() from alloc_entry.c to use in MinGW
    port when tic and other programs are not needed.
- Add ncurses patch 20130805
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.</changelog>
<changelog author="werner@suse.de" date="1383048000">- Make it build even with new tar command
- Add ncurses patch 20131027
  + correct/simplify ifdef's for cur_term versus broken-linker and
    reentrant options (report by Jean-Pierre Flori, cf: 20090530).
  + modify release/version combinations in test build-scripts to make
    them more consistent with other packages.
- Add ncurses patch 20131019
  + add nc_mingw.h to installed headers for MinGW port; needed for
    compiling ncurses-examples.
  + add rpm-script for testing cross-compile of ncurses-examples.
- Add ncurses patch 20131014
  + fix new typo in CF_ADA_INCLUDE_DIRS macro (report by Roumen Petrov).
- Add ncurses patch 20131012
  + fix a few compiler warnings in progs and test.
  + minor fix to package/debian-mingw/rules, do not strip dll's.
  + minor fixes to configure script for empty $prefix, e.g., when doing
    cross-compiles to MinGW.
  + add script for building test-packages of binaries cross-compiled to
    MinGW using NSIS.
- Add ncurses patch 20131005
  + minor fixes for ncurses-example package and makefile.
  + add scripts for test-builds of cross-compiler packages for ncurses6
    to MinGW.
- Add ncurses patch 20130928
  + some build-fixes for ncurses-examples with NetBSD-6.0 curses, though
    it lacks some common functions such as use_env() which is not yet
    addressed.
  + build-fix and some compiler warning fixes for ncurses-examples with
    OpenBSD 5.3
  + fix a possible null-pointer reference in a trace message from newterm.
  + quiet a few warnings from NetBSD 6.0 namespace pollution by
    nonstandard popcount() function in standard strings.h header.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.</changelog>
<changelog author="werner@suse.de" date="1383739200">- Add ncurses patch 20131102
  + use TS extension to describe xterm's title-escapes -TD
  + modify terminator and nsterm-s to use xterm+sl-twm building block -TD
  + simplify pfkey expression in ansi.sys -TD</changelog>
<changelog author="werner@suse.de" date="1385726400">- On S390(x) use other fallback terminal types, that is have the
  ibm327x and vt220 available even if no terminfo-base is installed.</changelog>
<changelog author="werner@suse.de" date="1385726401">- Add ncurses patch 20131123
  + minor fix for CF_GCC_WARNINGS to special-case options which are not
  recognized by clang.
- Add ncurses patch 20131116
  + add special case to configure script to move _XOPEN_SOURCE_EXTENDED
    definition from CPPFLAGS to CFLAGS if it happens to be needed for
    Solaris, because g++ errors with that definition (report by
    Jean-Pierre Flori, Sage #15268).
  + correct logic in infocmp's -i option which was intended to ignore
    strings which correspond to function-keys as candidates for piecing
    together initialization- or reset-strings.  The problem dates to
    1.9.7a, but was overlooked until changes in -Wlogical-op warnings for
    gcc 4.8 (report by David Binderman).
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, adding
    checks for -Wextra, -Wignored-qualifiers and -Wlogical-op
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, moving
    checks for -Wextra and -Wdeclaration-after-statement into the macro,
    and adding checks for -Wignored-qualifiers, -Wlogical-op and -Wvarargs
  + updated CF_CURSES_UNCTRL_H and CF_SHARED_OPTS macros from ongoing
    work on cdk.
- Add ncurses patch 20131110
  + minor cleanup of terminfo.tail</changelog>
<changelog author="werner@suse.de" date="1386676800">- Add ncurses patch 20131207
  + add form_driver_w() entrypoint to wide-character forms library,
    as well as test program form_driver_w (adapted from patch by
    Gaute Hope).</changelog>
<changelog author="werner@suse.de" date="1387281600">- Add ncurses patch 20131214
  + modify configure-script/ifdef's to allow OLD_TTY feature to be
    suppressed if the type of ospeed is configured using the option
  - -with-ospeed to not be a short.  By default, it is a short for
    termcap-compatibility (adapted from suggestion by Christian
    Weisgerber).
  + correct a typo in _nc_baudrate() (patch by Christian Weisgerber,
    cf: 20061230).
  + fix a few -Wlogical-op warnings.
  + updated llib-l* files.</changelog>
<changelog author="werner@suse.de" date="1390219200">- Add ncurses patch 20140118
  + apply includesubdir variable which was introduced in 20130805 to
    gen-pkgconfig.in (Debian #735782).
- Correct spec file irarch to make S390(x) fallback terminal types
  working on S390(x) (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1390910400">- Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
  terminal type but a more dumb one (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1391428800">- Add ncurses patch 20140201
  + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
    which "short" types are for color pairs and which are color values.
  + fix build for s390x, by correcting field bit offsets in generated
    representation clauses when int=32 long=64 and endian=big, or at
    least on s390x (patch by Nicolas Boulenguez).
  + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
- Add ncurses patch 20140125
  + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
    not work as is with gcc 4.8 due to fixes using chtype cast made for
    new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
    by Nicolas Boulenguez).</changelog>
<changelog author="werner@suse.de" date="1477569600">- Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
  not need it anymore and as well as it causes bug bsc#1000662</changelog>
<changelog author="werner@suse.de" date="1499083200">- Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
  from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
  CVE-2017-10685 (bsc#1046853, bsc#1046858)</changelog>
<changelog author="werner@suse.de" date="1499688000">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
  change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
  and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
- This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
  bsc#1047965)</changelog>
<changelog author="werner@suse.de" date="1500465600">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
  termcap format caused by the backport of change 20170701  (boo#1049344)</changelog>

</package>
<package pkgid="65c129651263c592bb424edf1425dc6fbb6d51d8fc73392463ba6986e89a3408" name="libncurses5-32bit" arch="x86_64">
    <version epoch="0" ver="5.9" rel="59.1"/>

<changelog author="werner@suse.de" date="1361188800">- Add ncurses patch 20130126
  + further fixes to mvcur to pass callback function (cf: 20130112),
    needed to make test/dots_mvcur work.
  + reduce calls to SetConsoleActiveScreenBuffer in win_driver.c, to
    help reduce flicker.
  + modify configure script to omit "+b" from linker options for very
    old HP-UX systems (report by Dennis Grevenstein)
  + add HP-UX workaround for missing EILSEQ on old HP-UX systems (patch
    by Dennis Grevenstein).
  + restore memmove/strdup support for antique systems (request by
    Dennis Grevenstein).
  + change %l behavior in tparm to push the string length onto the stack
    rather than saving the formatted length into the output buffer
    (report by Roy Marples, cf: 980620).
- Add ncurses patch 20130202
  + correct initialization in knight.c which let it occasionally make
    an incorrect move (cf: 20001028).
  + improve documentation of the terminfo/termcap search path.
- Add ncurses patch 20130209
  + modify test/configure script to make it simpler to override names
    of curses-related libraries, to help with linking with pdcurses in
    mingw environment.
  + if the --with-terminfo-dirs configure option is not used, there is
    no corresponding compiled-in value for that.  Fill in "no default
    value" for that part of the manpage substitution.
- Add ncurses patch 20130216
  + modify test/testcurs.c to work with mouse for ncurses as it does for
    pdcurses.
  + modify test/knight.c to work with mouse for pdcurses as it does for
    ncurses.
  + modify internal recursion in wgetch() which handles cooked mode to
    check if the call to wgetnstr() returned an error.  This can happen
    when both nocbreak() and nodelay() are set, for instance (report by
    Nils Christopher Brause) (cf: 960418).
  + fixes for issues found by Coverity:
    + add a check for valid position in ClearToEOS()
    + fix in lib_twait.c when --enable-wgetch-events is used, pointer
    use after free.
    + improve a limit-check in make_hash.c
    + fix a memory leak in hashed_db.c
- Add ncurses patch 20130218
  + correct ifdef on change to lib_twait.c (report by  Werner Fink).
  + update config.guess, config.sub
- Use screen to emulate a terminal to enable the configure script to
  use poll(2) system call on stderr file descriptor</changelog>
<changelog author="werner@suse.de" date="1364299200">- Add ncurses patch 20130324
  + build-fix for libtool configuration (reports by Daniel Silva Ferreira
    and Roumen Petrov).
- Add ncurses patch 20130323
  + build-fix for OS X, to handle changes for --with-cxx-shared feature
    (report by Christian Ebert).
  + change initialization for vt220, similar entries for consistency
    with cursor-key strings (NetBSD #47674) -TD
  + further improvements to linux-16color (Benjamin Sittler)
- Add ncurses patch 20130316
  + additional fix for tic.c, to allocate missing buffer space.
  + eliminate configure-script warnings for gen-pkgconfig.in
  + correct typo in sgr string for sun-color,
    add bold for consistency with sgr,
    change smso for consistency with sgr -TD
  + correct typo in sgr string for terminator -TD
  + add blink to the attributes masked by ncv in linux-16color (report
    by Benjamin Sittler)
  + improve warning message from post-load checking for missing "%?"
    operator by tic/infocmp by showing the entry name and capability.
  + minor formatting improvement to tic/infocmp -f option to ensure
    line split after "%;".
  + amend scripting for --with-cxx-shared option to handle the debug
    library "libncurses++_g.a" (report by Sven Joachim).
- Add ncurses patch 20130309
  + amend change to toe.c for reading from /dev/zero, to ensure that
    there is a buffer for the temporary filename (cf: 20120324).
  + regenerated html manpages.
  + fix typo in terminfo.head (report by Sven Joachim, cf: 20130302).
  + updated some autoconf macros:
    + CF_ACVERSION_CHECK, from byacc 1.9 20130304
    + CF_INTEL_COMPILER, CF_XOPEN_SOURCE from luit 2.0-20130217
  + add configure option --with-cxx-shared to permit building
    libncurses++ as a shared library when using g++, e.g., the same
    limitations as libtool but better integrated with the usual build
    configuration (Redhat 911540).
  + modify MKkey_defs.sh to filter out build-path which was unnecessarily
    shown in curses.h (Debian #689131).
- Add ncurses patch 20130302
  + add section to terminfo manpage discussing user-defined capabilities.
  + update manpage description of NCURSES_NO_SETBUF, explaining why it
    is obsolete.
  + add a check in waddch_nosync() to ensure that tab characters are
    treated as control characters; some broken locales claim they are
    printable.
  + add some traces to the Windows console driver.
  + initialize a temporary array in _nc_mbtowc, needed for some cases
    of raw input in MinGW port.
- Make it build even with shared libncurses++ and its demo test program</changelog>
<changelog author="werner@suse.de" date="1368446400">- Add ncurses patch 20130511
  + move nsterm-related entries out of "obsolete" section to more
    plausible "ansi consoles" -TD
  + additional cleanup of table-of-contents by reordering -TD
  + revise fix for check for 8-bit value in _nc_insert_ch(); prior fix
    prevented inserts when video attributes were attached to the data
    (cf: 20121215) (Redhat #959534).
- Add ncurses patch 20130504
  + fixes for issues found by Coverity:
    + correct FNKEY() macro in progs/dump_entry.c, allowing kf11-kf63 to
    display when infocmp's -R option is used for HP or AIX subsets.
    + fix dead-code issue with test/movewindow.c
    + improve limited-checking in _nc_read_termtype().
- Add ncurses patch 20130427
  + fix clang 3.2 warning in progs/dump_entry.c
  + drop AC_TYPE_SIGNAL check; ncurses relies on c89 and later.
- Add ncurses patch 20130413
  + add MinGW to cases where ncurses installs by default into /usr
    (prompted by discussion with Daniel Silva Ferreira).
  + add -D option to infocmp's usage-message (patch by Miroslav Lichvar).
  + add a missing 'int' type for main function in configure check for
    type of bool variable, to work with clang 3.2 (report by Dmitri
    Gribenko).
  + improve configure check for static_cast, to work with clang 3.2
    (report by Dmitri Gribenko).
  + re-order rule for demo.o and macros defining header dependencies in
    c++/Makefile.in to accommodate gmake (report by Dmitri Gribenko).
- Add ncurses patch 20130406
  + improve parameter checking in copywin().
  + modify configure script to work around OS X's "libtool" program, to
    choose glibtool instead.  At the same time, chance the autoconf macro
    to look for a "tool" rather than a "prog", to help with potential use
    in cross-compiling.
  + separate the rpath usage for c++ library from demo program
    (Redhat #911540)
  + update/correct header-dependencies in c++ makefile (report by Werner
    Fink).
  + add --with-cxx-shared to dpkg-script, as done for rpm-script.</changelog>
<changelog author="werner@suse.de" date="1368446401">- Make LD_LIBRARY_PATH include %_lib to make sure use and test the
  fresh build libraries</changelog>
<changelog author="werner@suse.de" date="1371816000">- Add some more terminfo entries to terminfo-base (bnc#826171)</changelog>
<changelog author="werner@suse.de" date="1375704000">- Add ncurses patch 20130805
  + minor fixes to the --disable-overwrite logic, to ensure that the
    configured $(includedir) is not cancelled by the mingwxx-filesystem
    rpm macros.
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.
- Add ncurses patch 20130727
  + improve configure macros from ongoing work on cdk, dialog, xterm:
    + CF_ADD_LIB_AFTER - fix a problem with -Wl options
    + CF_RPATH_HACK - add missing result-message
    + CF_SHARED_OPTS - modify to use $rel_builddir in cygwin and mingw
    dll symbols (which can be overridden) rather than explicit "../".
    + CF_SHARED_OPTS - modify NetBSD and DragonFly symbols to use ${CC}
    rather than ${LD} to improve rpath support.
    + CF_SHARED_OPTS - add a symbol to denote the temporary files that
    are created by the macro, to simplify clean-rules.
    + CF_X_ATHENA - trim extra libraries to work with -Wl,--as-needed
  + fix a regression in hashed-database support for NetBSD, which uses
    the key-size differently from other implementations (cf: 20121229).
- Add ncurses patch 20130720
  + further improvements for setupterm manpage, clarifying the
    initialization of cur_term.
- Add ncurses patch 20130713
  + improve manpages for initscr and setupterm.
  + minor compiler-warning fixes
- Add ncurses patch 20130706
  + add fallback defs for &lt;inttypes.h&gt; and &lt;stdint.h&gt; (cf: 20120225).
  + add check for size of wchar_t, use that to suppress a chunk of
    wcwidth.h in MinGW port.
  + quiet linker warnings for MinGW cross-compile with dll's using the
  - -enable-auto-import flag.
  + add ncurses.map rule to ncurses/Makefile to help diagnose symbol
    table issues.
- Add ncurses patch 20130622
  + modify the clear program to take into account the E3 extended
    capability to clear the terminal's scrollback buffer (patch by
    Miroslav Lichvar, Redhat #815790).
  + clarify in resizeterm manpage that LINES and COLS are updated.
  + updated ansi example in terminfo.tail, correct misordered example
    of sgr.
  + fix other doclifter warnings for manpages
  + remove unnecessary ".ta" in terminfo.tail, add missing ".fi"
    (patch by Eric Raymond).
- Add ncurses patch 20130615
  + minor changes to some configure macros to make them more reusable.
  + fixes for tabs program (prompted by report by Nick Andrik):
    + corrected logic in command-line parsing of -a and -c predefined
    tab-lists options.
    + allow "-0" and "-8" options to be combined with others, e.g.,"-0d".
    + make warning messages more consistent with the other utilities by
    not printing the full pathname of the program.
    + add -V option for consistency with other utilities.
  + fix off-by-one in columns for tabs program when processing an option
    such as "-5" (patch by Nick Andrik).
- Add ncurses patch 20130608
  + add to test/demo_forms.c examples of using the menu-hooks as well
    as showing how the menu item user-data can be used to pass a callback
    function pointer.
  + add test/dots_termcap.c
  + remove setupterm call from test/demo_termcap.c
  + build-fix if --disable-ext-funcs configure option is used.
  + modified test/edit_field.c and test/demo_forms.c to move the lengths
    into a user-data structure, keeping the original string for later
    expansion to free-format input/out demo.
  + modified test/demo_forms.c to load data from file.
  + added note to clarify Terminal.app's non-emulation of the various
    terminal types listed in the preferences dialog -TD
  + fix regression in error-reporting in lib_setup.c (Debian #711134,
    cf: 20121117).
  + build-fix for a case where --enable-broken_linker and
  - -enable-reentrant options are combined (report by George R Goffe).
- Add ncurses patch 20130525
  + modify mvcur() to distinguish between internal use by the ncurses
    library, and external callers, preventing it from reading the content
    of the screen which is only nonblank when curses calls have updated
    it.  This makes test/dots_mvcur.c avoid painting colored cells in
    the left margin of the display.
  + minor fix to test/dots_mvcur.c
  + move configured symbols USE_DATABASE and USE_TERMCAP to term.h as
    NCURSES_USE_DATABASE and NCURSES_USE_TERMCAP to allow consistent
    use of these symbols in term_entry.h
- Add ncurses patch 20130518
  + corrected ifdefs in test/testcurs.c to allow comparison of mouse
    interface versus pdcurses (cf: 20130316).
  + add pow() to configure-check for math library, needed since
    20121208 for test/hanoi (Debian #708056).
  + regenerated html manpages.
  + update doctype used for html documentation.</changelog>
<changelog author="werner@suse.de" date="1380542400">- Add ncurses patch 20130928
  + fix a possible null-pointer reference in a trace message from newterm.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.
- Add ncurses patch 20130921
  + fix typo in curs_attr.3x (patch by Sven Joachim, cf: 20130831).
  + build-fix for --with-shared option for DragonFly and FreeBSD (report
    by Rong-En Fan, cf: 20130727).
- Add ncurses patch 20130907
  + revert change to two of the dpkg format files, to work with dpkg
    before/after Debian #700177.
  + fix gcc -Wconversion warning in wattr_get() macro.
  + add msys and msysdll to known host/configuration types (patch by
    Alexey Pavlov).
  + modify CF_RPATH_HACK configure macro to not rely upon "-u" option
    of sort, improving portability.
- Add ncurses patch 20130831
  + modify test/ncurses.c b/B tests to display lines only for the
    attributes which a given terminal supports, to make room for an
    italics test.
  + completed ncv table in terminfo.tail; it did not list the wide
    character codes listed in X/Open Curses issue 7.
  + add A_ITALIC extension (prompted by discussion with Egmont Koblinger).
- Add ncurses patch 20130824
  + fix some gcc 4.8 -Wconversion warnings.
  + change format of dpkg test-scripts to quilted to work around bug
    introduced by Debian #700177.
  + discard cached keyname() values if meta() is changed after a value
    was cached using (report by Kurban Mallachiev).
- Add ncurses patch 20130816
  + add checks in tic to warn about terminals which lack cursor
    addressing, capabilities or having those, are marked as hard_copy or
    generic_type.
  + use --without-progs in mingw-ncurses rpm.
  + split out _nc_init_termtype() from alloc_entry.c to use in MinGW
    port when tic and other programs are not needed.
- Add ncurses patch 20130805
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.</changelog>
<changelog author="werner@suse.de" date="1383048000">- Make it build even with new tar command
- Add ncurses patch 20131027
  + correct/simplify ifdef's for cur_term versus broken-linker and
    reentrant options (report by Jean-Pierre Flori, cf: 20090530).
  + modify release/version combinations in test build-scripts to make
    them more consistent with other packages.
- Add ncurses patch 20131019
  + add nc_mingw.h to installed headers for MinGW port; needed for
    compiling ncurses-examples.
  + add rpm-script for testing cross-compile of ncurses-examples.
- Add ncurses patch 20131014
  + fix new typo in CF_ADA_INCLUDE_DIRS macro (report by Roumen Petrov).
- Add ncurses patch 20131012
  + fix a few compiler warnings in progs and test.
  + minor fix to package/debian-mingw/rules, do not strip dll's.
  + minor fixes to configure script for empty $prefix, e.g., when doing
    cross-compiles to MinGW.
  + add script for building test-packages of binaries cross-compiled to
    MinGW using NSIS.
- Add ncurses patch 20131005
  + minor fixes for ncurses-example package and makefile.
  + add scripts for test-builds of cross-compiler packages for ncurses6
    to MinGW.
- Add ncurses patch 20130928
  + some build-fixes for ncurses-examples with NetBSD-6.0 curses, though
    it lacks some common functions such as use_env() which is not yet
    addressed.
  + build-fix and some compiler warning fixes for ncurses-examples with
    OpenBSD 5.3
  + fix a possible null-pointer reference in a trace message from newterm.
  + quiet a few warnings from NetBSD 6.0 namespace pollution by
    nonstandard popcount() function in standard strings.h header.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.</changelog>
<changelog author="werner@suse.de" date="1383739200">- Add ncurses patch 20131102
  + use TS extension to describe xterm's title-escapes -TD
  + modify terminator and nsterm-s to use xterm+sl-twm building block -TD
  + simplify pfkey expression in ansi.sys -TD</changelog>
<changelog author="werner@suse.de" date="1385726400">- On S390(x) use other fallback terminal types, that is have the
  ibm327x and vt220 available even if no terminfo-base is installed.</changelog>
<changelog author="werner@suse.de" date="1385726401">- Add ncurses patch 20131123
  + minor fix for CF_GCC_WARNINGS to special-case options which are not
  recognized by clang.
- Add ncurses patch 20131116
  + add special case to configure script to move _XOPEN_SOURCE_EXTENDED
    definition from CPPFLAGS to CFLAGS if it happens to be needed for
    Solaris, because g++ errors with that definition (report by
    Jean-Pierre Flori, Sage #15268).
  + correct logic in infocmp's -i option which was intended to ignore
    strings which correspond to function-keys as candidates for piecing
    together initialization- or reset-strings.  The problem dates to
    1.9.7a, but was overlooked until changes in -Wlogical-op warnings for
    gcc 4.8 (report by David Binderman).
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, adding
    checks for -Wextra, -Wignored-qualifiers and -Wlogical-op
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, moving
    checks for -Wextra and -Wdeclaration-after-statement into the macro,
    and adding checks for -Wignored-qualifiers, -Wlogical-op and -Wvarargs
  + updated CF_CURSES_UNCTRL_H and CF_SHARED_OPTS macros from ongoing
    work on cdk.
- Add ncurses patch 20131110
  + minor cleanup of terminfo.tail</changelog>
<changelog author="werner@suse.de" date="1386676800">- Add ncurses patch 20131207
  + add form_driver_w() entrypoint to wide-character forms library,
    as well as test program form_driver_w (adapted from patch by
    Gaute Hope).</changelog>
<changelog author="werner@suse.de" date="1387281600">- Add ncurses patch 20131214
  + modify configure-script/ifdef's to allow OLD_TTY feature to be
    suppressed if the type of ospeed is configured using the option
  - -with-ospeed to not be a short.  By default, it is a short for
    termcap-compatibility (adapted from suggestion by Christian
    Weisgerber).
  + correct a typo in _nc_baudrate() (patch by Christian Weisgerber,
    cf: 20061230).
  + fix a few -Wlogical-op warnings.
  + updated llib-l* files.</changelog>
<changelog author="werner@suse.de" date="1390219200">- Add ncurses patch 20140118
  + apply includesubdir variable which was introduced in 20130805 to
    gen-pkgconfig.in (Debian #735782).
- Correct spec file irarch to make S390(x) fallback terminal types
  working on S390(x) (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1390910400">- Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
  terminal type but a more dumb one (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1391428800">- Add ncurses patch 20140201
  + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
    which "short" types are for color pairs and which are color values.
  + fix build for s390x, by correcting field bit offsets in generated
    representation clauses when int=32 long=64 and endian=big, or at
    least on s390x (patch by Nicolas Boulenguez).
  + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
- Add ncurses patch 20140125
  + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
    not work as is with gcc 4.8 due to fixes using chtype cast made for
    new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
    by Nicolas Boulenguez).</changelog>
<changelog author="werner@suse.de" date="1477569600">- Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
  not need it anymore and as well as it causes bug bsc#1000662</changelog>
<changelog author="werner@suse.de" date="1499083200">- Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
  from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
  CVE-2017-10685 (bsc#1046853, bsc#1046858)</changelog>
<changelog author="werner@suse.de" date="1499688000">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
  change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
  and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
- This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
  bsc#1047965)</changelog>
<changelog author="werner@suse.de" date="1500465600">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
  termcap format caused by the backport of change 20170701  (boo#1049344)</changelog>

</package>
<package pkgid="e4c1d6790f854554c6a3854dc3365da7f02ebc66bccdea471294dc540b86fcfc" name="libncurses6" arch="x86_64">
    <version epoch="0" ver="5.9" rel="59.1"/>

<changelog author="werner@suse.de" date="1361188800">- Add ncurses patch 20130126
  + further fixes to mvcur to pass callback function (cf: 20130112),
    needed to make test/dots_mvcur work.
  + reduce calls to SetConsoleActiveScreenBuffer in win_driver.c, to
    help reduce flicker.
  + modify configure script to omit "+b" from linker options for very
    old HP-UX systems (report by Dennis Grevenstein)
  + add HP-UX workaround for missing EILSEQ on old HP-UX systems (patch
    by Dennis Grevenstein).
  + restore memmove/strdup support for antique systems (request by
    Dennis Grevenstein).
  + change %l behavior in tparm to push the string length onto the stack
    rather than saving the formatted length into the output buffer
    (report by Roy Marples, cf: 980620).
- Add ncurses patch 20130202
  + correct initialization in knight.c which let it occasionally make
    an incorrect move (cf: 20001028).
  + improve documentation of the terminfo/termcap search path.
- Add ncurses patch 20130209
  + modify test/configure script to make it simpler to override names
    of curses-related libraries, to help with linking with pdcurses in
    mingw environment.
  + if the --with-terminfo-dirs configure option is not used, there is
    no corresponding compiled-in value for that.  Fill in "no default
    value" for that part of the manpage substitution.
- Add ncurses patch 20130216
  + modify test/testcurs.c to work with mouse for ncurses as it does for
    pdcurses.
  + modify test/knight.c to work with mouse for pdcurses as it does for
    ncurses.
  + modify internal recursion in wgetch() which handles cooked mode to
    check if the call to wgetnstr() returned an error.  This can happen
    when both nocbreak() and nodelay() are set, for instance (report by
    Nils Christopher Brause) (cf: 960418).
  + fixes for issues found by Coverity:
    + add a check for valid position in ClearToEOS()
    + fix in lib_twait.c when --enable-wgetch-events is used, pointer
    use after free.
    + improve a limit-check in make_hash.c
    + fix a memory leak in hashed_db.c
- Add ncurses patch 20130218
  + correct ifdef on change to lib_twait.c (report by  Werner Fink).
  + update config.guess, config.sub
- Use screen to emulate a terminal to enable the configure script to
  use poll(2) system call on stderr file descriptor</changelog>
<changelog author="werner@suse.de" date="1364299200">- Add ncurses patch 20130324
  + build-fix for libtool configuration (reports by Daniel Silva Ferreira
    and Roumen Petrov).
- Add ncurses patch 20130323
  + build-fix for OS X, to handle changes for --with-cxx-shared feature
    (report by Christian Ebert).
  + change initialization for vt220, similar entries for consistency
    with cursor-key strings (NetBSD #47674) -TD
  + further improvements to linux-16color (Benjamin Sittler)
- Add ncurses patch 20130316
  + additional fix for tic.c, to allocate missing buffer space.
  + eliminate configure-script warnings for gen-pkgconfig.in
  + correct typo in sgr string for sun-color,
    add bold for consistency with sgr,
    change smso for consistency with sgr -TD
  + correct typo in sgr string for terminator -TD
  + add blink to the attributes masked by ncv in linux-16color (report
    by Benjamin Sittler)
  + improve warning message from post-load checking for missing "%?"
    operator by tic/infocmp by showing the entry name and capability.
  + minor formatting improvement to tic/infocmp -f option to ensure
    line split after "%;".
  + amend scripting for --with-cxx-shared option to handle the debug
    library "libncurses++_g.a" (report by Sven Joachim).
- Add ncurses patch 20130309
  + amend change to toe.c for reading from /dev/zero, to ensure that
    there is a buffer for the temporary filename (cf: 20120324).
  + regenerated html manpages.
  + fix typo in terminfo.head (report by Sven Joachim, cf: 20130302).
  + updated some autoconf macros:
    + CF_ACVERSION_CHECK, from byacc 1.9 20130304
    + CF_INTEL_COMPILER, CF_XOPEN_SOURCE from luit 2.0-20130217
  + add configure option --with-cxx-shared to permit building
    libncurses++ as a shared library when using g++, e.g., the same
    limitations as libtool but better integrated with the usual build
    configuration (Redhat 911540).
  + modify MKkey_defs.sh to filter out build-path which was unnecessarily
    shown in curses.h (Debian #689131).
- Add ncurses patch 20130302
  + add section to terminfo manpage discussing user-defined capabilities.
  + update manpage description of NCURSES_NO_SETBUF, explaining why it
    is obsolete.
  + add a check in waddch_nosync() to ensure that tab characters are
    treated as control characters; some broken locales claim they are
    printable.
  + add some traces to the Windows console driver.
  + initialize a temporary array in _nc_mbtowc, needed for some cases
    of raw input in MinGW port.
- Make it build even with shared libncurses++ and its demo test program</changelog>
<changelog author="werner@suse.de" date="1368446400">- Add ncurses patch 20130511
  + move nsterm-related entries out of "obsolete" section to more
    plausible "ansi consoles" -TD
  + additional cleanup of table-of-contents by reordering -TD
  + revise fix for check for 8-bit value in _nc_insert_ch(); prior fix
    prevented inserts when video attributes were attached to the data
    (cf: 20121215) (Redhat #959534).
- Add ncurses patch 20130504
  + fixes for issues found by Coverity:
    + correct FNKEY() macro in progs/dump_entry.c, allowing kf11-kf63 to
    display when infocmp's -R option is used for HP or AIX subsets.
    + fix dead-code issue with test/movewindow.c
    + improve limited-checking in _nc_read_termtype().
- Add ncurses patch 20130427
  + fix clang 3.2 warning in progs/dump_entry.c
  + drop AC_TYPE_SIGNAL check; ncurses relies on c89 and later.
- Add ncurses patch 20130413
  + add MinGW to cases where ncurses installs by default into /usr
    (prompted by discussion with Daniel Silva Ferreira).
  + add -D option to infocmp's usage-message (patch by Miroslav Lichvar).
  + add a missing 'int' type for main function in configure check for
    type of bool variable, to work with clang 3.2 (report by Dmitri
    Gribenko).
  + improve configure check for static_cast, to work with clang 3.2
    (report by Dmitri Gribenko).
  + re-order rule for demo.o and macros defining header dependencies in
    c++/Makefile.in to accommodate gmake (report by Dmitri Gribenko).
- Add ncurses patch 20130406
  + improve parameter checking in copywin().
  + modify configure script to work around OS X's "libtool" program, to
    choose glibtool instead.  At the same time, chance the autoconf macro
    to look for a "tool" rather than a "prog", to help with potential use
    in cross-compiling.
  + separate the rpath usage for c++ library from demo program
    (Redhat #911540)
  + update/correct header-dependencies in c++ makefile (report by Werner
    Fink).
  + add --with-cxx-shared to dpkg-script, as done for rpm-script.</changelog>
<changelog author="werner@suse.de" date="1368446401">- Make LD_LIBRARY_PATH include %_lib to make sure use and test the
  fresh build libraries</changelog>
<changelog author="werner@suse.de" date="1371816000">- Add some more terminfo entries to terminfo-base (bnc#826171)</changelog>
<changelog author="werner@suse.de" date="1375704000">- Add ncurses patch 20130805
  + minor fixes to the --disable-overwrite logic, to ensure that the
    configured $(includedir) is not cancelled by the mingwxx-filesystem
    rpm macros.
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.
- Add ncurses patch 20130727
  + improve configure macros from ongoing work on cdk, dialog, xterm:
    + CF_ADD_LIB_AFTER - fix a problem with -Wl options
    + CF_RPATH_HACK - add missing result-message
    + CF_SHARED_OPTS - modify to use $rel_builddir in cygwin and mingw
    dll symbols (which can be overridden) rather than explicit "../".
    + CF_SHARED_OPTS - modify NetBSD and DragonFly symbols to use ${CC}
    rather than ${LD} to improve rpath support.
    + CF_SHARED_OPTS - add a symbol to denote the temporary files that
    are created by the macro, to simplify clean-rules.
    + CF_X_ATHENA - trim extra libraries to work with -Wl,--as-needed
  + fix a regression in hashed-database support for NetBSD, which uses
    the key-size differently from other implementations (cf: 20121229).
- Add ncurses patch 20130720
  + further improvements for setupterm manpage, clarifying the
    initialization of cur_term.
- Add ncurses patch 20130713
  + improve manpages for initscr and setupterm.
  + minor compiler-warning fixes
- Add ncurses patch 20130706
  + add fallback defs for &lt;inttypes.h&gt; and &lt;stdint.h&gt; (cf: 20120225).
  + add check for size of wchar_t, use that to suppress a chunk of
    wcwidth.h in MinGW port.
  + quiet linker warnings for MinGW cross-compile with dll's using the
  - -enable-auto-import flag.
  + add ncurses.map rule to ncurses/Makefile to help diagnose symbol
    table issues.
- Add ncurses patch 20130622
  + modify the clear program to take into account the E3 extended
    capability to clear the terminal's scrollback buffer (patch by
    Miroslav Lichvar, Redhat #815790).
  + clarify in resizeterm manpage that LINES and COLS are updated.
  + updated ansi example in terminfo.tail, correct misordered example
    of sgr.
  + fix other doclifter warnings for manpages
  + remove unnecessary ".ta" in terminfo.tail, add missing ".fi"
    (patch by Eric Raymond).
- Add ncurses patch 20130615
  + minor changes to some configure macros to make them more reusable.
  + fixes for tabs program (prompted by report by Nick Andrik):
    + corrected logic in command-line parsing of -a and -c predefined
    tab-lists options.
    + allow "-0" and "-8" options to be combined with others, e.g.,"-0d".
    + make warning messages more consistent with the other utilities by
    not printing the full pathname of the program.
    + add -V option for consistency with other utilities.
  + fix off-by-one in columns for tabs program when processing an option
    such as "-5" (patch by Nick Andrik).
- Add ncurses patch 20130608
  + add to test/demo_forms.c examples of using the menu-hooks as well
    as showing how the menu item user-data can be used to pass a callback
    function pointer.
  + add test/dots_termcap.c
  + remove setupterm call from test/demo_termcap.c
  + build-fix if --disable-ext-funcs configure option is used.
  + modified test/edit_field.c and test/demo_forms.c to move the lengths
    into a user-data structure, keeping the original string for later
    expansion to free-format input/out demo.
  + modified test/demo_forms.c to load data from file.
  + added note to clarify Terminal.app's non-emulation of the various
    terminal types listed in the preferences dialog -TD
  + fix regression in error-reporting in lib_setup.c (Debian #711134,
    cf: 20121117).
  + build-fix for a case where --enable-broken_linker and
  - -enable-reentrant options are combined (report by George R Goffe).
- Add ncurses patch 20130525
  + modify mvcur() to distinguish between internal use by the ncurses
    library, and external callers, preventing it from reading the content
    of the screen which is only nonblank when curses calls have updated
    it.  This makes test/dots_mvcur.c avoid painting colored cells in
    the left margin of the display.
  + minor fix to test/dots_mvcur.c
  + move configured symbols USE_DATABASE and USE_TERMCAP to term.h as
    NCURSES_USE_DATABASE and NCURSES_USE_TERMCAP to allow consistent
    use of these symbols in term_entry.h
- Add ncurses patch 20130518
  + corrected ifdefs in test/testcurs.c to allow comparison of mouse
    interface versus pdcurses (cf: 20130316).
  + add pow() to configure-check for math library, needed since
    20121208 for test/hanoi (Debian #708056).
  + regenerated html manpages.
  + update doctype used for html documentation.</changelog>
<changelog author="werner@suse.de" date="1380542400">- Add ncurses patch 20130928
  + fix a possible null-pointer reference in a trace message from newterm.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.
- Add ncurses patch 20130921
  + fix typo in curs_attr.3x (patch by Sven Joachim, cf: 20130831).
  + build-fix for --with-shared option for DragonFly and FreeBSD (report
    by Rong-En Fan, cf: 20130727).
- Add ncurses patch 20130907
  + revert change to two of the dpkg format files, to work with dpkg
    before/after Debian #700177.
  + fix gcc -Wconversion warning in wattr_get() macro.
  + add msys and msysdll to known host/configuration types (patch by
    Alexey Pavlov).
  + modify CF_RPATH_HACK configure macro to not rely upon "-u" option
    of sort, improving portability.
- Add ncurses patch 20130831
  + modify test/ncurses.c b/B tests to display lines only for the
    attributes which a given terminal supports, to make room for an
    italics test.
  + completed ncv table in terminfo.tail; it did not list the wide
    character codes listed in X/Open Curses issue 7.
  + add A_ITALIC extension (prompted by discussion with Egmont Koblinger).
- Add ncurses patch 20130824
  + fix some gcc 4.8 -Wconversion warnings.
  + change format of dpkg test-scripts to quilted to work around bug
    introduced by Debian #700177.
  + discard cached keyname() values if meta() is changed after a value
    was cached using (report by Kurban Mallachiev).
- Add ncurses patch 20130816
  + add checks in tic to warn about terminals which lack cursor
    addressing, capabilities or having those, are marked as hard_copy or
    generic_type.
  + use --without-progs in mingw-ncurses rpm.
  + split out _nc_init_termtype() from alloc_entry.c to use in MinGW
    port when tic and other programs are not needed.
- Add ncurses patch 20130805
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.</changelog>
<changelog author="werner@suse.de" date="1383048000">- Make it build even with new tar command
- Add ncurses patch 20131027
  + correct/simplify ifdef's for cur_term versus broken-linker and
    reentrant options (report by Jean-Pierre Flori, cf: 20090530).
  + modify release/version combinations in test build-scripts to make
    them more consistent with other packages.
- Add ncurses patch 20131019
  + add nc_mingw.h to installed headers for MinGW port; needed for
    compiling ncurses-examples.
  + add rpm-script for testing cross-compile of ncurses-examples.
- Add ncurses patch 20131014
  + fix new typo in CF_ADA_INCLUDE_DIRS macro (report by Roumen Petrov).
- Add ncurses patch 20131012
  + fix a few compiler warnings in progs and test.
  + minor fix to package/debian-mingw/rules, do not strip dll's.
  + minor fixes to configure script for empty $prefix, e.g., when doing
    cross-compiles to MinGW.
  + add script for building test-packages of binaries cross-compiled to
    MinGW using NSIS.
- Add ncurses patch 20131005
  + minor fixes for ncurses-example package and makefile.
  + add scripts for test-builds of cross-compiler packages for ncurses6
    to MinGW.
- Add ncurses patch 20130928
  + some build-fixes for ncurses-examples with NetBSD-6.0 curses, though
    it lacks some common functions such as use_env() which is not yet
    addressed.
  + build-fix and some compiler warning fixes for ncurses-examples with
    OpenBSD 5.3
  + fix a possible null-pointer reference in a trace message from newterm.
  + quiet a few warnings from NetBSD 6.0 namespace pollution by
    nonstandard popcount() function in standard strings.h header.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.</changelog>
<changelog author="werner@suse.de" date="1383739200">- Add ncurses patch 20131102
  + use TS extension to describe xterm's title-escapes -TD
  + modify terminator and nsterm-s to use xterm+sl-twm building block -TD
  + simplify pfkey expression in ansi.sys -TD</changelog>
<changelog author="werner@suse.de" date="1385726400">- On S390(x) use other fallback terminal types, that is have the
  ibm327x and vt220 available even if no terminfo-base is installed.</changelog>
<changelog author="werner@suse.de" date="1385726401">- Add ncurses patch 20131123
  + minor fix for CF_GCC_WARNINGS to special-case options which are not
  recognized by clang.
- Add ncurses patch 20131116
  + add special case to configure script to move _XOPEN_SOURCE_EXTENDED
    definition from CPPFLAGS to CFLAGS if it happens to be needed for
    Solaris, because g++ errors with that definition (report by
    Jean-Pierre Flori, Sage #15268).
  + correct logic in infocmp's -i option which was intended to ignore
    strings which correspond to function-keys as candidates for piecing
    together initialization- or reset-strings.  The problem dates to
    1.9.7a, but was overlooked until changes in -Wlogical-op warnings for
    gcc 4.8 (report by David Binderman).
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, adding
    checks for -Wextra, -Wignored-qualifiers and -Wlogical-op
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, moving
    checks for -Wextra and -Wdeclaration-after-statement into the macro,
    and adding checks for -Wignored-qualifiers, -Wlogical-op and -Wvarargs
  + updated CF_CURSES_UNCTRL_H and CF_SHARED_OPTS macros from ongoing
    work on cdk.
- Add ncurses patch 20131110
  + minor cleanup of terminfo.tail</changelog>
<changelog author="werner@suse.de" date="1386676800">- Add ncurses patch 20131207
  + add form_driver_w() entrypoint to wide-character forms library,
    as well as test program form_driver_w (adapted from patch by
    Gaute Hope).</changelog>
<changelog author="werner@suse.de" date="1387281600">- Add ncurses patch 20131214
  + modify configure-script/ifdef's to allow OLD_TTY feature to be
    suppressed if the type of ospeed is configured using the option
  - -with-ospeed to not be a short.  By default, it is a short for
    termcap-compatibility (adapted from suggestion by Christian
    Weisgerber).
  + correct a typo in _nc_baudrate() (patch by Christian Weisgerber,
    cf: 20061230).
  + fix a few -Wlogical-op warnings.
  + updated llib-l* files.</changelog>
<changelog author="werner@suse.de" date="1390219200">- Add ncurses patch 20140118
  + apply includesubdir variable which was introduced in 20130805 to
    gen-pkgconfig.in (Debian #735782).
- Correct spec file irarch to make S390(x) fallback terminal types
  working on S390(x) (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1390910400">- Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
  terminal type but a more dumb one (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1391428800">- Add ncurses patch 20140201
  + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
    which "short" types are for color pairs and which are color values.
  + fix build for s390x, by correcting field bit offsets in generated
    representation clauses when int=32 long=64 and endian=big, or at
    least on s390x (patch by Nicolas Boulenguez).
  + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
- Add ncurses patch 20140125
  + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
    not work as is with gcc 4.8 due to fixes using chtype cast made for
    new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
    by Nicolas Boulenguez).</changelog>
<changelog author="werner@suse.de" date="1477569600">- Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
  not need it anymore and as well as it causes bug bsc#1000662</changelog>
<changelog author="werner@suse.de" date="1499083200">- Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
  from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
  CVE-2017-10685 (bsc#1046853, bsc#1046858)</changelog>
<changelog author="werner@suse.de" date="1499688000">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
  change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
  and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
- This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
  bsc#1047965)</changelog>
<changelog author="werner@suse.de" date="1500465600">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
  termcap format caused by the backport of change 20170701  (boo#1049344)</changelog>

</package>
<package pkgid="3fa91531596c07a80e91c342601366237b2aef24db5812fddb1468c41d5bdb24" name="libncurses6-32bit" arch="x86_64">
    <version epoch="0" ver="5.9" rel="59.1"/>

<changelog author="werner@suse.de" date="1361188800">- Add ncurses patch 20130126
  + further fixes to mvcur to pass callback function (cf: 20130112),
    needed to make test/dots_mvcur work.
  + reduce calls to SetConsoleActiveScreenBuffer in win_driver.c, to
    help reduce flicker.
  + modify configure script to omit "+b" from linker options for very
    old HP-UX systems (report by Dennis Grevenstein)
  + add HP-UX workaround for missing EILSEQ on old HP-UX systems (patch
    by Dennis Grevenstein).
  + restore memmove/strdup support for antique systems (request by
    Dennis Grevenstein).
  + change %l behavior in tparm to push the string length onto the stack
    rather than saving the formatted length into the output buffer
    (report by Roy Marples, cf: 980620).
- Add ncurses patch 20130202
  + correct initialization in knight.c which let it occasionally make
    an incorrect move (cf: 20001028).
  + improve documentation of the terminfo/termcap search path.
- Add ncurses patch 20130209
  + modify test/configure script to make it simpler to override names
    of curses-related libraries, to help with linking with pdcurses in
    mingw environment.
  + if the --with-terminfo-dirs configure option is not used, there is
    no corresponding compiled-in value for that.  Fill in "no default
    value" for that part of the manpage substitution.
- Add ncurses patch 20130216
  + modify test/testcurs.c to work with mouse for ncurses as it does for
    pdcurses.
  + modify test/knight.c to work with mouse for pdcurses as it does for
    ncurses.
  + modify internal recursion in wgetch() which handles cooked mode to
    check if the call to wgetnstr() returned an error.  This can happen
    when both nocbreak() and nodelay() are set, for instance (report by
    Nils Christopher Brause) (cf: 960418).
  + fixes for issues found by Coverity:
    + add a check for valid position in ClearToEOS()
    + fix in lib_twait.c when --enable-wgetch-events is used, pointer
    use after free.
    + improve a limit-check in make_hash.c
    + fix a memory leak in hashed_db.c
- Add ncurses patch 20130218
  + correct ifdef on change to lib_twait.c (report by  Werner Fink).
  + update config.guess, config.sub
- Use screen to emulate a terminal to enable the configure script to
  use poll(2) system call on stderr file descriptor</changelog>
<changelog author="werner@suse.de" date="1364299200">- Add ncurses patch 20130324
  + build-fix for libtool configuration (reports by Daniel Silva Ferreira
    and Roumen Petrov).
- Add ncurses patch 20130323
  + build-fix for OS X, to handle changes for --with-cxx-shared feature
    (report by Christian Ebert).
  + change initialization for vt220, similar entries for consistency
    with cursor-key strings (NetBSD #47674) -TD
  + further improvements to linux-16color (Benjamin Sittler)
- Add ncurses patch 20130316
  + additional fix for tic.c, to allocate missing buffer space.
  + eliminate configure-script warnings for gen-pkgconfig.in
  + correct typo in sgr string for sun-color,
    add bold for consistency with sgr,
    change smso for consistency with sgr -TD
  + correct typo in sgr string for terminator -TD
  + add blink to the attributes masked by ncv in linux-16color (report
    by Benjamin Sittler)
  + improve warning message from post-load checking for missing "%?"
    operator by tic/infocmp by showing the entry name and capability.
  + minor formatting improvement to tic/infocmp -f option to ensure
    line split after "%;".
  + amend scripting for --with-cxx-shared option to handle the debug
    library "libncurses++_g.a" (report by Sven Joachim).
- Add ncurses patch 20130309
  + amend change to toe.c for reading from /dev/zero, to ensure that
    there is a buffer for the temporary filename (cf: 20120324).
  + regenerated html manpages.
  + fix typo in terminfo.head (report by Sven Joachim, cf: 20130302).
  + updated some autoconf macros:
    + CF_ACVERSION_CHECK, from byacc 1.9 20130304
    + CF_INTEL_COMPILER, CF_XOPEN_SOURCE from luit 2.0-20130217
  + add configure option --with-cxx-shared to permit building
    libncurses++ as a shared library when using g++, e.g., the same
    limitations as libtool but better integrated with the usual build
    configuration (Redhat 911540).
  + modify MKkey_defs.sh to filter out build-path which was unnecessarily
    shown in curses.h (Debian #689131).
- Add ncurses patch 20130302
  + add section to terminfo manpage discussing user-defined capabilities.
  + update manpage description of NCURSES_NO_SETBUF, explaining why it
    is obsolete.
  + add a check in waddch_nosync() to ensure that tab characters are
    treated as control characters; some broken locales claim they are
    printable.
  + add some traces to the Windows console driver.
  + initialize a temporary array in _nc_mbtowc, needed for some cases
    of raw input in MinGW port.
- Make it build even with shared libncurses++ and its demo test program</changelog>
<changelog author="werner@suse.de" date="1368446400">- Add ncurses patch 20130511
  + move nsterm-related entries out of "obsolete" section to more
    plausible "ansi consoles" -TD
  + additional cleanup of table-of-contents by reordering -TD
  + revise fix for check for 8-bit value in _nc_insert_ch(); prior fix
    prevented inserts when video attributes were attached to the data
    (cf: 20121215) (Redhat #959534).
- Add ncurses patch 20130504
  + fixes for issues found by Coverity:
    + correct FNKEY() macro in progs/dump_entry.c, allowing kf11-kf63 to
    display when infocmp's -R option is used for HP or AIX subsets.
    + fix dead-code issue with test/movewindow.c
    + improve limited-checking in _nc_read_termtype().
- Add ncurses patch 20130427
  + fix clang 3.2 warning in progs/dump_entry.c
  + drop AC_TYPE_SIGNAL check; ncurses relies on c89 and later.
- Add ncurses patch 20130413
  + add MinGW to cases where ncurses installs by default into /usr
    (prompted by discussion with Daniel Silva Ferreira).
  + add -D option to infocmp's usage-message (patch by Miroslav Lichvar).
  + add a missing 'int' type for main function in configure check for
    type of bool variable, to work with clang 3.2 (report by Dmitri
    Gribenko).
  + improve configure check for static_cast, to work with clang 3.2
    (report by Dmitri Gribenko).
  + re-order rule for demo.o and macros defining header dependencies in
    c++/Makefile.in to accommodate gmake (report by Dmitri Gribenko).
- Add ncurses patch 20130406
  + improve parameter checking in copywin().
  + modify configure script to work around OS X's "libtool" program, to
    choose glibtool instead.  At the same time, chance the autoconf macro
    to look for a "tool" rather than a "prog", to help with potential use
    in cross-compiling.
  + separate the rpath usage for c++ library from demo program
    (Redhat #911540)
  + update/correct header-dependencies in c++ makefile (report by Werner
    Fink).
  + add --with-cxx-shared to dpkg-script, as done for rpm-script.</changelog>
<changelog author="werner@suse.de" date="1368446401">- Make LD_LIBRARY_PATH include %_lib to make sure use and test the
  fresh build libraries</changelog>
<changelog author="werner@suse.de" date="1371816000">- Add some more terminfo entries to terminfo-base (bnc#826171)</changelog>
<changelog author="werner@suse.de" date="1375704000">- Add ncurses patch 20130805
  + minor fixes to the --disable-overwrite logic, to ensure that the
    configured $(includedir) is not cancelled by the mingwxx-filesystem
    rpm macros.
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.
- Add ncurses patch 20130727
  + improve configure macros from ongoing work on cdk, dialog, xterm:
    + CF_ADD_LIB_AFTER - fix a problem with -Wl options
    + CF_RPATH_HACK - add missing result-message
    + CF_SHARED_OPTS - modify to use $rel_builddir in cygwin and mingw
    dll symbols (which can be overridden) rather than explicit "../".
    + CF_SHARED_OPTS - modify NetBSD and DragonFly symbols to use ${CC}
    rather than ${LD} to improve rpath support.
    + CF_SHARED_OPTS - add a symbol to denote the temporary files that
    are created by the macro, to simplify clean-rules.
    + CF_X_ATHENA - trim extra libraries to work with -Wl,--as-needed
  + fix a regression in hashed-database support for NetBSD, which uses
    the key-size differently from other implementations (cf: 20121229).
- Add ncurses patch 20130720
  + further improvements for setupterm manpage, clarifying the
    initialization of cur_term.
- Add ncurses patch 20130713
  + improve manpages for initscr and setupterm.
  + minor compiler-warning fixes
- Add ncurses patch 20130706
  + add fallback defs for &lt;inttypes.h&gt; and &lt;stdint.h&gt; (cf: 20120225).
  + add check for size of wchar_t, use that to suppress a chunk of
    wcwidth.h in MinGW port.
  + quiet linker warnings for MinGW cross-compile with dll's using the
  - -enable-auto-import flag.
  + add ncurses.map rule to ncurses/Makefile to help diagnose symbol
    table issues.
- Add ncurses patch 20130622
  + modify the clear program to take into account the E3 extended
    capability to clear the terminal's scrollback buffer (patch by
    Miroslav Lichvar, Redhat #815790).
  + clarify in resizeterm manpage that LINES and COLS are updated.
  + updated ansi example in terminfo.tail, correct misordered example
    of sgr.
  + fix other doclifter warnings for manpages
  + remove unnecessary ".ta" in terminfo.tail, add missing ".fi"
    (patch by Eric Raymond).
- Add ncurses patch 20130615
  + minor changes to some configure macros to make them more reusable.
  + fixes for tabs program (prompted by report by Nick Andrik):
    + corrected logic in command-line parsing of -a and -c predefined
    tab-lists options.
    + allow "-0" and "-8" options to be combined with others, e.g.,"-0d".
    + make warning messages more consistent with the other utilities by
    not printing the full pathname of the program.
    + add -V option for consistency with other utilities.
  + fix off-by-one in columns for tabs program when processing an option
    such as "-5" (patch by Nick Andrik).
- Add ncurses patch 20130608
  + add to test/demo_forms.c examples of using the menu-hooks as well
    as showing how the menu item user-data can be used to pass a callback
    function pointer.
  + add test/dots_termcap.c
  + remove setupterm call from test/demo_termcap.c
  + build-fix if --disable-ext-funcs configure option is used.
  + modified test/edit_field.c and test/demo_forms.c to move the lengths
    into a user-data structure, keeping the original string for later
    expansion to free-format input/out demo.
  + modified test/demo_forms.c to load data from file.
  + added note to clarify Terminal.app's non-emulation of the various
    terminal types listed in the preferences dialog -TD
  + fix regression in error-reporting in lib_setup.c (Debian #711134,
    cf: 20121117).
  + build-fix for a case where --enable-broken_linker and
  - -enable-reentrant options are combined (report by George R Goffe).
- Add ncurses patch 20130525
  + modify mvcur() to distinguish between internal use by the ncurses
    library, and external callers, preventing it from reading the content
    of the screen which is only nonblank when curses calls have updated
    it.  This makes test/dots_mvcur.c avoid painting colored cells in
    the left margin of the display.
  + minor fix to test/dots_mvcur.c
  + move configured symbols USE_DATABASE and USE_TERMCAP to term.h as
    NCURSES_USE_DATABASE and NCURSES_USE_TERMCAP to allow consistent
    use of these symbols in term_entry.h
- Add ncurses patch 20130518
  + corrected ifdefs in test/testcurs.c to allow comparison of mouse
    interface versus pdcurses (cf: 20130316).
  + add pow() to configure-check for math library, needed since
    20121208 for test/hanoi (Debian #708056).
  + regenerated html manpages.
  + update doctype used for html documentation.</changelog>
<changelog author="werner@suse.de" date="1380542400">- Add ncurses patch 20130928
  + fix a possible null-pointer reference in a trace message from newterm.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.
- Add ncurses patch 20130921
  + fix typo in curs_attr.3x (patch by Sven Joachim, cf: 20130831).
  + build-fix for --with-shared option for DragonFly and FreeBSD (report
    by Rong-En Fan, cf: 20130727).
- Add ncurses patch 20130907
  + revert change to two of the dpkg format files, to work with dpkg
    before/after Debian #700177.
  + fix gcc -Wconversion warning in wattr_get() macro.
  + add msys and msysdll to known host/configuration types (patch by
    Alexey Pavlov).
  + modify CF_RPATH_HACK configure macro to not rely upon "-u" option
    of sort, improving portability.
- Add ncurses patch 20130831
  + modify test/ncurses.c b/B tests to display lines only for the
    attributes which a given terminal supports, to make room for an
    italics test.
  + completed ncv table in terminfo.tail; it did not list the wide
    character codes listed in X/Open Curses issue 7.
  + add A_ITALIC extension (prompted by discussion with Egmont Koblinger).
- Add ncurses patch 20130824
  + fix some gcc 4.8 -Wconversion warnings.
  + change format of dpkg test-scripts to quilted to work around bug
    introduced by Debian #700177.
  + discard cached keyname() values if meta() is changed after a value
    was cached using (report by Kurban Mallachiev).
- Add ncurses patch 20130816
  + add checks in tic to warn about terminals which lack cursor
    addressing, capabilities or having those, are marked as hard_copy or
    generic_type.
  + use --without-progs in mingw-ncurses rpm.
  + split out _nc_init_termtype() from alloc_entry.c to use in MinGW
    port when tic and other programs are not needed.
- Add ncurses patch 20130805
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.</changelog>
<changelog author="werner@suse.de" date="1383048000">- Make it build even with new tar command
- Add ncurses patch 20131027
  + correct/simplify ifdef's for cur_term versus broken-linker and
    reentrant options (report by Jean-Pierre Flori, cf: 20090530).
  + modify release/version combinations in test build-scripts to make
    them more consistent with other packages.
- Add ncurses patch 20131019
  + add nc_mingw.h to installed headers for MinGW port; needed for
    compiling ncurses-examples.
  + add rpm-script for testing cross-compile of ncurses-examples.
- Add ncurses patch 20131014
  + fix new typo in CF_ADA_INCLUDE_DIRS macro (report by Roumen Petrov).
- Add ncurses patch 20131012
  + fix a few compiler warnings in progs and test.
  + minor fix to package/debian-mingw/rules, do not strip dll's.
  + minor fixes to configure script for empty $prefix, e.g., when doing
    cross-compiles to MinGW.
  + add script for building test-packages of binaries cross-compiled to
    MinGW using NSIS.
- Add ncurses patch 20131005
  + minor fixes for ncurses-example package and makefile.
  + add scripts for test-builds of cross-compiler packages for ncurses6
    to MinGW.
- Add ncurses patch 20130928
  + some build-fixes for ncurses-examples with NetBSD-6.0 curses, though
    it lacks some common functions such as use_env() which is not yet
    addressed.
  + build-fix and some compiler warning fixes for ncurses-examples with
    OpenBSD 5.3
  + fix a possible null-pointer reference in a trace message from newterm.
  + quiet a few warnings from NetBSD 6.0 namespace pollution by
    nonstandard popcount() function in standard strings.h header.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.</changelog>
<changelog author="werner@suse.de" date="1383739200">- Add ncurses patch 20131102
  + use TS extension to describe xterm's title-escapes -TD
  + modify terminator and nsterm-s to use xterm+sl-twm building block -TD
  + simplify pfkey expression in ansi.sys -TD</changelog>
<changelog author="werner@suse.de" date="1385726400">- On S390(x) use other fallback terminal types, that is have the
  ibm327x and vt220 available even if no terminfo-base is installed.</changelog>
<changelog author="werner@suse.de" date="1385726401">- Add ncurses patch 20131123
  + minor fix for CF_GCC_WARNINGS to special-case options which are not
  recognized by clang.
- Add ncurses patch 20131116
  + add special case to configure script to move _XOPEN_SOURCE_EXTENDED
    definition from CPPFLAGS to CFLAGS if it happens to be needed for
    Solaris, because g++ errors with that definition (report by
    Jean-Pierre Flori, Sage #15268).
  + correct logic in infocmp's -i option which was intended to ignore
    strings which correspond to function-keys as candidates for piecing
    together initialization- or reset-strings.  The problem dates to
    1.9.7a, but was overlooked until changes in -Wlogical-op warnings for
    gcc 4.8 (report by David Binderman).
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, adding
    checks for -Wextra, -Wignored-qualifiers and -Wlogical-op
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, moving
    checks for -Wextra and -Wdeclaration-after-statement into the macro,
    and adding checks for -Wignored-qualifiers, -Wlogical-op and -Wvarargs
  + updated CF_CURSES_UNCTRL_H and CF_SHARED_OPTS macros from ongoing
    work on cdk.
- Add ncurses patch 20131110
  + minor cleanup of terminfo.tail</changelog>
<changelog author="werner@suse.de" date="1386676800">- Add ncurses patch 20131207
  + add form_driver_w() entrypoint to wide-character forms library,
    as well as test program form_driver_w (adapted from patch by
    Gaute Hope).</changelog>
<changelog author="werner@suse.de" date="1387281600">- Add ncurses patch 20131214
  + modify configure-script/ifdef's to allow OLD_TTY feature to be
    suppressed if the type of ospeed is configured using the option
  - -with-ospeed to not be a short.  By default, it is a short for
    termcap-compatibility (adapted from suggestion by Christian
    Weisgerber).
  + correct a typo in _nc_baudrate() (patch by Christian Weisgerber,
    cf: 20061230).
  + fix a few -Wlogical-op warnings.
  + updated llib-l* files.</changelog>
<changelog author="werner@suse.de" date="1390219200">- Add ncurses patch 20140118
  + apply includesubdir variable which was introduced in 20130805 to
    gen-pkgconfig.in (Debian #735782).
- Correct spec file irarch to make S390(x) fallback terminal types
  working on S390(x) (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1390910400">- Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
  terminal type but a more dumb one (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1391428800">- Add ncurses patch 20140201
  + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
    which "short" types are for color pairs and which are color values.
  + fix build for s390x, by correcting field bit offsets in generated
    representation clauses when int=32 long=64 and endian=big, or at
    least on s390x (patch by Nicolas Boulenguez).
  + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
- Add ncurses patch 20140125
  + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
    not work as is with gcc 4.8 due to fixes using chtype cast made for
    new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
    by Nicolas Boulenguez).</changelog>
<changelog author="werner@suse.de" date="1477569600">- Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
  not need it anymore and as well as it causes bug bsc#1000662</changelog>
<changelog author="werner@suse.de" date="1499083200">- Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
  from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
  CVE-2017-10685 (bsc#1046853, bsc#1046858)</changelog>
<changelog author="werner@suse.de" date="1499688000">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
  change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
  and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
- This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
  bsc#1047965)</changelog>
<changelog author="werner@suse.de" date="1500465600">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
  termcap format caused by the backport of change 20170701  (boo#1049344)</changelog>

</package>
<package pkgid="89bf136ec4e30abf4bb34ba2e4f2e7de81e40a0875fbd86b167af5926aace14b" name="libndr-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="3f641ce33657ae85c950d2f468978fb6ac796e1490673d85670f9a221687d413" name="libndr-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="158372904763bd87146fc4fa6519e9da7017c38029440a6260eb9efb105fd473" name="libndr-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="e433ee54fabb4c3ddc0ee26cb341671d16383b03c0108cc3236a0269ffda12db" name="libndr-krb5pac-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="cd1d3ea56f9369b17b2aa83ead0750bec4522c41891be5eafbb9a44cf4f75815" name="libndr-krb5pac-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="4c1098baf0d7384880fc50c872efd981f3994ba23a1ae98a766d4b4d412f26ea" name="libndr-krb5pac-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="8dda19c97f92d028077b63a3bc12549f01d563a2a622f9e6ae1d8b7bc9757717" name="libndr-krb5pac0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="a4fe5d1e1716e6f1c7d15b2e9bb42811c83947f7ef6179591c349349c2364e45" name="libndr-krb5pac0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="b9b3c4088c3fdcc5ba24cfdd91cb87cf11bff4c8c6ed0fab703b859151ec5948" name="libndr-krb5pac0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="936e775ef1fd90be5bc571d6a22171f9aa8700f51786fd2d53a5b341a73a5f79" name="libndr-krb5pac0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="d571f59344d6a340dea4c71a40ba0d948ebfddd1931fae7b50a703d8d2da1b1b" name="libndr-krb5pac0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="5588fe0acdb90a1b4cabbce629d2c14671379f5147795a702927fd4ed9d80037" name="libndr-krb5pac0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="706a44ae713b85278cecab6c9a3404f97d1d50fea5f036938e248d597e4545f4" name="libndr-nbt-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="4f35cd9139d3a86fd521d08cc063d1abc48d0ae9cea858775d985d856c83eef0" name="libndr-nbt-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="3dc1fc4f8663fe2aa983612b6599186e496907fe42c154a0117508a9f2616ca1" name="libndr-nbt-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="892ecf32722ddc1d7aee3a5c517ac6315f1a37e14164728a92ef032a78e7fd3f" name="libndr-nbt0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="cd4bc78855e498775a8619fa419b13ff6dbb6c3e326c9d44c86ae8d5bb71660b" name="libndr-nbt0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="6c999fdb7a9fb56dd3e032175dbfe884a48ca1f782185482dfd9ad3624001b62" name="libndr-nbt0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="111ce4b64f108f602f9b3c290bf9d308d3e39ddfd286cc08aa6ae4282422565f" name="libndr-nbt0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="649f7950d7b909044d52e9036a93abc5afd7d8e72e6ef175825ced6a3d8dd688" name="libndr-nbt0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="2e26b65c4b13e6f686486daded65822d18b25cad32c3fdc948a97412f32bdad0" name="libndr-nbt0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="8ef4837d781ac6efccd80f063c68cfbed942a163a8a4dd5aa47642ad950fca43" name="libndr-standard-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="058d46400b671307e5fc678a4d838f3b844f04bcec5a277e3d15982958e88577" name="libndr-standard-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="19760590a518b404214bb2fb89beb86da78aed77e0249255a1301c2f8a0d8f00" name="libndr-standard-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="c6298cda142056633cd2a5e6af0ae16b726963517f820478dfb3c1d19d701b6d" name="libndr-standard0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="0d90ec7f712941766b84ec8a09205ef936a260b05f2f7294a6bc2b4a496705b2" name="libndr-standard0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="5cbcfc2c1162615637bf2922adbf2a0154950817d8b6de1c805167a07805e016" name="libndr-standard0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="3d183332dd45b93557742bf9fdbbba1425dd065d007f11e61176400b66316639" name="libndr-standard0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="7eea2d348384b84b86f1381226956aad24abd91943f1e87d1c34070bc33ef951" name="libndr-standard0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="5ffb521a7bf2cb964c21c5c1705d5270a17a2af7a3a2742d9db223b65f56429e" name="libndr-standard0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="327381c4ccf8c65742edfd247383482ee30452cf1c8b27189639cd7054a4f92e" name="libndr0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="79843f90c82f1dd186f09df8c4059eb13392d341875311b5b78d744d0abe8897" name="libndr0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="f59140c3a4272a24e5a460086bf5302378bbb45dfa6e37b048e2df9e3b5433cf" name="libndr0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="6fdf56cb851abf63bfd71d317adb9bae574c1c26f4d4cd1116c2057ffdaeee93" name="libndr0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="3a58dd9ac9fcd7cce0d21b937ca24e4a750c297ee9c1adbee17ba130fa4fe400" name="libndr0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="bf24a3bc8df2372dbd3387ca85f22a43e7bb57a180c90d1ba4a270cb8e4bd1d7" name="libndr0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="d7c6cfa307e0968853cdebb22dd765c997e2261f788ba765af8f0d97716a17db" name="libnetapi-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="244d0ec0b23f746c06a2b5dff0e3240001481f3e12d0ade06dd0f0307572bc01" name="libnetapi-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="3217fb7afea2f12dcef1cd5840e0e7475105fc068d9fc1c281c435726b22ec7f" name="libnetapi-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="c9b8e9f3b56125c0aff872f4e1f7ab1026f319b053624e26b531a5a8d4898b84" name="libnetapi0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="7c94573ace75bf0b211adfe0c427c5edfdcdde1d93a2a72b5e6bf21c925097b0" name="libnetapi0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="8ddb3b6c9dd55feb2632c8f0a0e21d84f04ea125bbb7034f4eb97d3de1071232" name="libnetapi0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="7fb4118935ee44512e598f170c0aabadc79fc781645be3096422b3ffd482e368" name="libnetapi0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="5996f92237160eb4b5674c6b691be3e67be9b593e7bc9a147681bd0562cd04ce" name="libnetapi0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="1c0e9e14ccc318826a30d1e9e40083e93f67b5e8c44ffa5039b8c23b6042b4a4" name="libnetapi0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="899a0362d404ca290fe8124be8d0e6d40a7568fe0a520a4f78ec681a1d4eff7f" name="libnetlink-devel" arch="x86_64">
    <version epoch="0" ver="4.4" rel="6.1"/>

<changelog author="jengelh@inai.de" date="1378987200">- Update to new upstream release 3.11
  * Support for Linux 3.11
  * iptunnel: check SIT_ISATAP flag only for SIT tunnel
  * ss: show destination address for netlink sockets
  * ss: Get netlink sockets info via sock_diag
  * vxlan: Allow setting destination to unicast address
  * ss: add fastopen support
  * htb: report overhead attribute
  * ip: allow to specify mode for sit tunnels
  * ip: iplink_vlan: add 802.1ad support
  * iptuntap: allow creation of multi-queue tun/tap device</changelog>
<changelog author="jengelh@inai.de" date="1386590400">- Update to new upstream release 3.12
  * ip rule: add route suppression options
  * tc: support for the "fq" Fair Queue packet scheduler
  * tc: support 64-bit rate estimator statistics
  * GRE-over-IPv6 tunnel support
  * VXLAN IPV6 support</changelog>
<changelog author="mkubecek@suse.cz" date="1390219200">- restore SLE12 Alpha 1 version rewritten by pulling recent Factory
  changes
- update patches to git based versions:
  * iproute2-dirs.diff -&gt; adjust-installation-directories-for-SLE.patch
  * iproute2-HZ.diff split into use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
    and add-explicit-typecast-to-avoid-gcc-warning.patch
  * revert-pdf-creation.diff not needed on SLE12
- add SLE11 SP3 patches missing in upstream:
  * avoid-unused-return-value-gcc-warnings.patch:
    prevent GCC warnings considered errors by OBS
  * fix-build-with-D_FORTIFY_SOURCE-2.patch:
    fix build with -D_FORTIFY_SOUCE=2 to comply with TAHI testsuite
    (bnc#719537)
- iproute2.spec:
  remove conditionals not needed on SLE12
- fate#315437 implemented since upstream 3.11.0</changelog>
<changelog author="mkubecek@suse.cz" date="1392292800">- update-kernel-headers-for-bonding-support.patch:
  iplink-add-support-for-bonding-netlink.patch:
  iproute2-finish-support-for-bonding-attributes.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  iplink-display-slave-information.patch:
  iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  implement setting and displaying bonding (and bond slave)
  attributes in ip command (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1393588800">- update-kernel-headers-for-bonding-support.patch:
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch:
  iplink_bond-fix-parameter-value-matching.patch:
  update upstream references
- iplink-display-slave-information.patch:
  replaced by introduce-support-for-slave-info-data.patch
  (fate#316940)
- iplink_bond-add-support-for-displaying-bond-slave-at.patch:
  replaced by iplink-add-support-for-bonding-slave.patch
  (fate#316940)
- iplink_bond_slave-show-mii_status-only-once.patch:
  fix for bonding slave status being shown twice (fate#316940)</changelog>
<changelog author="mkubecek@suse.cz" date="1401105600">- veth-fix-uninitialized-arguments.patch:
  fix crash in "ip link add type veth"
  (bnc#879865)
- Handle-netdev-group-for-veth-peer-too.patch:
  when adding veth device, group argument is parsed but ignored
  (bnc#879865)
- iproute-Fix-Netid-value-for-multi-families-output.patch
  when both -t and -u are used, ss reports UDP sockets as TCP
  (bnc#879865)
- bridge-fix-reporting-of-IPv6-addresses.patch
  fix output of IPv6 vxlan dst addresses in "bridge fdb show"
  (bnc#879865)
- veth-Handle-flags-correctry.patch
  fix handling of veth peer flags
  (bnc#879865)</changelog>
<changelog author="mkubecek@suse.cz" date="1434542400">- update-kernel-headers-to-3.19-net-next.patch:
  ip-route-add-congestion-control-metric.patch:
  add per-route congestion control support (fate#318553)</changelog>
<changelog author="bpoirier@suse.com" date="1439294400">- Revert-vxlan-remove-dstport-option.patch
  Add vxlan destination port option (fate#319084)</changelog>
<changelog author="mkubecek@suse.cz" date="1439380800">- update-kernel-headers-to-SLE12-SP1-Beta-1.patch:
  ip-support-of-usec-rtt-in-tcp_metrics.patch:
  display TCP RTT and RTT variance estimates with microsecond
  precision if kernel provides this information (bsc#937086)
- Revert-vxlan-remove-dstport-option.patch:
  add missing tags</changelog>
<changelog author="mkubecek@suse.cz" date="1444305600">- man-fix-documentation-references-in-manual-pages.patch:
  replace Debian specific documentation references by SUSE ones
  (bsc#949063)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256000">- man-fix-documentation-references-in-manual-pages.patch:
  minor fix (README.lnstat is in iproute2, not iproute2-doc)</changelog>
<changelog author="mkubecek@suse.cz" date="1445256001">- ip-return-correct-exit-code-on-route-failure.patch:
  fix "ip route" exit code (bsc#949040)
- ip-fix-exit-code-for-rule-failures.patch:
  fix "ip rule" exit code (bsc#949040)
- ip-fix-exit-code-for-addrlabel.patch:
  fix "ip addrlabel" exit code (bsc#949040)</changelog>
<changelog author="mkubecek@suse.cz" date="1453377600">- upgrade to upstream version 4.4 to match kernel version
  * implements fate#319924
- remove patches obsoleted by upgrade:
  Handle-netdev-group-for-veth-peer-too.patch:Patch-mainline (3.14)
  Revert-vxlan-remove-dstport-option.patch (3.14)
  bridge-fix-reporting-of-IPv6-addresses.patch (3.14)
  introduce-support-for-slave-info-data.patch (3.14)
  ip-fix-exit-code-for-addrlabel.patch (4.1)
  ip-fix-exit-code-for-rule-failures.patch (4.1)
  ip-return-correct-exit-code-on-route-failure.patch (4.1)
  ip-route-add-congestion-control-metric.patch (4.0)
  ip-support-of-usec-rtt-in-tcp_metrics.patch (3.17)
  iplink-add-support-for-bonding-netlink.patch (3.14)
  iplink-add-support-for-bonding-slave.patch (3.14)
  iplink_bond-fix-arp_all_targets-parameter-name-in-ou.patch (3.14)
  iplink_bond-fix-parameter-value-matching.patch (3.14)
  iplink_bond_slave-show-mii_status-only-once.patch (3.14)
  iproute-Fix-Netid-value-for-multi-families-output.patch (3.14)
  iproute2-finish-support-for-bonding-attributes.patch (3.14)
  update-kernel-headers-for-bonding-support.patch (3.14)
  update-kernel-headers-to-3.19-net-next.patch (4.0)
  update-kernel-headers-to-SLE12-SP1-Beta-1.patch (3.15)
  veth-Handle-flags-correctry.patch (3.14)
  veth-fix-uninitialized-arguments.patch (3.14)
- update non-upstream patches to version 4.4:
  adjust-installation-directories-for-SLE.patch
  avoid-unused-return-value-gcc-warnings.patch
- refresh remaining patches:
  add-explicit-typecast-to-avoid-gcc-warning.patch
  fix-build-with-D_FORTIFY_SOURCE-2.patch
  man-fix-documentation-references-in-manual-pages.patch
  use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
- new non-upstream patches from Factory package:
  * xfrm-support-displaying-transformations-used-for-Mob.patch:
    support displaying xfrm transformations for Mobile IPv6
  * examples-fix-bashisms-in-example-script.patch:
    fix bashisms in example script declaring /bin/sh interpreter</changelog>
<changelog author="mkubecek@suse.cz" date="1453464000">- merge iproute2-doc.spec back into iproute2.spec
  iproute2-doc was separated into its own specfile to make rebuilds
  faster; this is not as important in SLE as it is in Factory and
  is not worth bothering with a multispec source package here</changelog>
<changelog author="mkubecek@suse.cz" date="1469793600">- revert the iproute2-doc merge; the dependencies of iproute2-doc
  prevent bootstrapping openSUSE distribution. (bsc#991185)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688000">- routel-fix-infinite-loop-in-line-parser.patch:
  fix command line parser in routel command (bsc#1034855)</changelog>
<changelog author="mkubecek@suse.cz" date="1499688001">- iproute-fix-documentation-for-ip-rule-scan-order.patch:
  iproute-fix-documentation-for-ip-rule-scan-order-2.patch:
  man-ip-rule.8-Further-clarify-how-to-interpret-prior.patch:
  man-ip-route.8-Mention-that-lower-metric-means-highe.patch:
  clarify the meaining of "priority" in ip-rule(8) and ip-route(8)
  manual pages (bsc#990635)</changelog>
<changelog author="mkubecek@suse.cz" date="1504094400">- libnetlink-Double-the-dump-buffer-size.patch:
  Use larger buffer for dumps to allow link info from NICs with
  many VFs (bsc#1045399 bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504267200">- iplink-check-for-message-truncation-in-iplink_get.patch:
  iplink-double-the-buffer-size-also-in-iplink_get.patch:
  Use larger buffer for link info with many VFs also in the other
  code path (bsc#1056261)</changelog>
<changelog author="mkubecek@suse.cz" date="1504612800">- update upstream references:
  iplink-check-for-message-truncation-in-iplink_get.patch
  iplink-double-the-buffer-size-also-in-iplink_get.patch</changelog>

</package>
<package pkgid="a442350fc201c514ba492fc5642fe00181a58911c82d798f7cf4e374a3958ecd" name="libobjc4" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="380152fa416cf4ca86563e5033037fc407e1c9d20cc34f3b337e835839f3458b" name="libobjc4-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="5e9b84bb229666237981f4f7d32751589ecd8ace4cf1a2047d967833db2daef9" name="libopenjp2-7" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="16.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>

</package>
<package pkgid="7aacc01ab38db7247655cc6387d76735f336729eb42cd30481c39a39e60b2302" name="libopenjp2-7" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="19.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>
<changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10507.patch (CVE-2016-10507, bsc#1056421),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562).</changelog>

</package>
<package pkgid="7d29f5582121266875fd6bbc454e4c3a812b5b59720618ce3fbed1249af4ed48" name="libopenjp2-7-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="16.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>

</package>
<package pkgid="2d4d671da12baa2429b01d2adc357c138e6418fd0b55e5338feef4f5525bb2da" name="libopenjp2-7-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="19.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>
<changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10507.patch (CVE-2016-10507, bsc#1056421),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562).</changelog>

</package>
<package pkgid="49e2b96f3c003282d1dd8b5e631f974cff91e9346257d4a61b456a3b9f74b6fa" name="libopenjpeg1" arch="x86_64">
    <version epoch="0" ver="1.5.2" rel="10.1"/>

<changelog author="asterios.dramis@gmail.com" date="1318507200">- Initial release (version 1.4).
- Added 5 patches (taken from upstream and Fedora):
  * openjpeg-1.4-OpenJPEGConfig.patch -- Fix OpenJPEGConfig.cmake
  * openjpeg-1.4-cmake_symlink_fix.patch -- Fix cmake create_symlink usage for
    header file
  * fix_no_undefined.patch -- Fix libopenjpeg undefined references
  * fix_soversion.patch -- Fix so version to 1 instead of 1.4
  * install_pkgconfig_file.patch -- Fix cmake to install pkgconfig file(s)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322740800">- Removed the JavaOpenJPEG/ directory from the package source (fix for
  bnc#733009 - openjpg contains Sun proprietary code).</changelog>
<changelog author="cfarrell@suse.com" date="1323172800">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="asterios.dramis@gmail.com" date="1330344000">- Update to version 1.5.0:
  New Features:
  * openjpip:
    + complete client-server architecture for remote browsing of jpeg 2000
    images.
    + see corresponding README for more details.
  API modifications:
  * 'bool' type has been replaced by 'opj_bool' type. 'stdbool.h' is no more
    required.
  Misc:
  * improved cmake and autotools build methods.
  * removed manual makefiles, VS project files and XCode project files.
  * added a 'thirdparty' directory to contain all dependencies.
    + These libraries will be build only if there are not found on the system.
    + Note that libopenjpeg itself does not have any dependency.
  * changed the directory hierarchy of the whole project. See README files for
    details.
  * tests : a complete test suite has been setup.
    + both JPEG 2000 conformance tests and non-regressions tests are
    configured.
    + results are submitted to the OpenJPEG dashboard
    (http://my.cdash.org/index.php?project=OPENJPEG)
    + images are located in 'http://openjpeg.googlecode.com/svn/data' folder.
    + configuration files and utilities are located in 'tests' folder.
  * OPJViewer re-activated (need wxWidgets)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * fix_no_undefined.patch
  * fix_soversion.patch
  * install_pkgconfig_file.patch
- Replaced openjpeg-1.4-OpenJPEGConfig.patch with
  openjpeg-1.5.0-cmake_Config.patch (taken from Fedora)
- Replaced openjpeg-1.4-cmake_symlink_fix.patch with
  openjpeg-1.5.0-cmake_header_symlink.patch (taken from Fedora)
- Added 2 patches (taken from Fedora):
  * openjpeg-1.5.0-cmake_libdir.patch -- Fix installation directories
  * openjpeg-1.5.0-pkgconfig_includedir.patch -- Fix includedir in pkgconfig
    file
- Spec file updates:
  * Added doxygen in BuildRequires: to enable compilation of devel docs.
  * Updated BuildRequires: to include also liblcms2-devel and zlib-devel.
  * Fixed rpmlint warning "file-contains-date-and-time"
- No need to remove the JavaOpenJPEG/ directory from the package source anymore
  (the Sun proprietary code was removed from the package).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1340884800">- Added a patch (heap_corruption_fix.patch) to fix heap corruption when
  processing certain Gray16 TIFF images - (CVE-2009-5030), (bnc#757260).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1342008000">- Added a patch (heap_buffer_overflow_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3358), (bnc#770649).</changelog>
<changelog author="idonmez@suse.com" date="1342526400">- Add baselibs.conf</changelog>
<changelog author="asterios.dramis@gmail.com" date="1347364800">- Added a patch (heap_buffer_overflow_2_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3535), (bnc#777445).</changelog>
<changelog author="sleep_walker@suse.cz" date="1347883200">- fix fedora build</changelog>
<changelog author="asterios.dramis@gmail.com" date="1350302400">- Update to version 1.5.1:
  Security:
  * Fixes: CVE-2012-3535
  * Fixes: CVE-2012-3358
  New Features:
  * Use a new API scheme and solve the SOVERSIONing in OpenJPEG
  * Allow better integration with multi-arch system
  * Compile &amp; Install Java bindings (CMake)
  * Install required addXMLinJP2 (JPIP)
  Misc:
  * Fix linker error by resolving all symbols (eg. missing -lm)
  * Fix some man page typos
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * heap_buffer_overflow_fix.patch
  * heap_buffer_overflow_2_fix.patch
  * heap_corruption_fix.patch
  * openjpeg-1.5.0-cmake_Config.patch
  * openjpeg-1.5.0-cmake_libdir.patch
  * openjpeg-1.5.0-pkgconfig_includedir.patch
- Replaced openjpeg-1.5.0-cmake_header_symlink.patch with a fix inside the spec
  file.
- Removed symlink from %{_includedir}/openjpeg-1.5 to %{_includedir}/openjpeg
  (not needed).
- Added the following patches (taken from Fedora):
  * openjpeg-1.5.1-cmake_libdir.patch
    Fix libopenjpeg.pc symlink
  * openjpeg-1.5.1-soname.patch
    Revert soname bump compared to 1.5.0 release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353326400">- do fdupes only for SUSE distributions</changelog>
<changelog author="vpereira@novell.com" date="1389355200">- Security:
  * Patches openjpeg-1.5.1-cve-2013-6045-1.patch and
    openjpeg-1.5.1-cve-2013-6045-2.patch fix heap overflow
    described in  CVE-2013-6045, bnc#853838.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1392206400">- Added the following security patches (based also on Redhat/Fedora patches):
  * openjpeg-1.5-r2029.patch
    From upstream. Fix issue 155, jp2_read_boxhdr() can trigger random pointer
    memory access
  * openjpeg-1.5-r2032.patch
    From upstream. Fix issue 169, division by zero in j2k_read_siz
  * openjpeg-1.5-r2033.patch
    From upstream. Fix issue 166, missing range check in j2k_read_coc et al
  * CVE-2013-1447.patch
    Fix multiple denial of service flaws, CVE-2013-1447, bnc#853834
  * CVE-2013-6052.patch
    Fix heap OOB reads, information leaks, CVE-2013-6052, bnc#853644
  * CVE-2013-6053.patch
    Fix heap OOB reads, information leaks, CVE-2013-6053, bnc#853644
  * CVE-2013-6887.patch
    Fix multiple denial of service flaws, CVE-2013-6887, bnc#853644
- Removed part of openjpeg-1.5.1-cve-2013-6045-1.patch that is already
  upstream, included in openjpeg-1.5-r2033.patch (slightly modified).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 1.5.2:
  Security:
  * Fixes: CVE-2013-4289 CVE-2013-4290
  * Fixes: CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6054
    CVE-2013-6053 CVE-2013-6887
  New Features:
  * Compile Java with source/target specific java version
  * Do not set SONAME for Java module, fix linking (missing math lib)
  * Support some BMP/RGB8 files
  * Fix compilation on ARM
  Misc:
  * Remove BSD-4 license from getopt copy, since upstream switched to BSD-3
  * Support compilation against system installed getopt
  * Fix Big Endian checking (autotools)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * openjpeg-1.5-r2029.patch
  * openjpeg-1.5-r2032.patch
  * openjpeg-1.5-r2033.patch
  * openjpeg-1.5.1-cve-2013-6045-1.patch
  * openjpeg-1.5.1-cve-2013-6045-2.patch
  * CVE-2013-6052.patch
  * CVE-2013-6053.patch
  * CVE-2013-1447.patch
  * CVE-2013-6887.patch</changelog>
<changelog author="mpluskal@suse.com" date="1425297600">- Use cmake macros for building
- Small spec file cleanups, use pkgconfig style dependencies</changelog>
<changelog author="hpj@suse.com" date="1474459200">- Add openjpeg-bsc999817-cve2016-7445-null-deref.patch
  (bsc#999817, CVE-2016-7445).</changelog>
<changelog author="astieger@suse.com" date="1505908800">- Add patch to fix ffast-math issue bsc#1029609 bsc#1059440:
  * openjpeg-fast-math.patch</changelog>

</package>
<package pkgid="212b13408cf92322a5a3337f08d854ea154d153d4515a27cb18234af0089f027" name="libopenjpeg1-32bit" arch="x86_64">
    <version epoch="0" ver="1.5.2" rel="10.1"/>

<changelog author="asterios.dramis@gmail.com" date="1318507200">- Initial release (version 1.4).
- Added 5 patches (taken from upstream and Fedora):
  * openjpeg-1.4-OpenJPEGConfig.patch -- Fix OpenJPEGConfig.cmake
  * openjpeg-1.4-cmake_symlink_fix.patch -- Fix cmake create_symlink usage for
    header file
  * fix_no_undefined.patch -- Fix libopenjpeg undefined references
  * fix_soversion.patch -- Fix so version to 1 instead of 1.4
  * install_pkgconfig_file.patch -- Fix cmake to install pkgconfig file(s)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322740800">- Removed the JavaOpenJPEG/ directory from the package source (fix for
  bnc#733009 - openjpg contains Sun proprietary code).</changelog>
<changelog author="cfarrell@suse.com" date="1323172800">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="asterios.dramis@gmail.com" date="1330344000">- Update to version 1.5.0:
  New Features:
  * openjpip:
    + complete client-server architecture for remote browsing of jpeg 2000
    images.
    + see corresponding README for more details.
  API modifications:
  * 'bool' type has been replaced by 'opj_bool' type. 'stdbool.h' is no more
    required.
  Misc:
  * improved cmake and autotools build methods.
  * removed manual makefiles, VS project files and XCode project files.
  * added a 'thirdparty' directory to contain all dependencies.
    + These libraries will be build only if there are not found on the system.
    + Note that libopenjpeg itself does not have any dependency.
  * changed the directory hierarchy of the whole project. See README files for
    details.
  * tests : a complete test suite has been setup.
    + both JPEG 2000 conformance tests and non-regressions tests are
    configured.
    + results are submitted to the OpenJPEG dashboard
    (http://my.cdash.org/index.php?project=OPENJPEG)
    + images are located in 'http://openjpeg.googlecode.com/svn/data' folder.
    + configuration files and utilities are located in 'tests' folder.
  * OPJViewer re-activated (need wxWidgets)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * fix_no_undefined.patch
  * fix_soversion.patch
  * install_pkgconfig_file.patch
- Replaced openjpeg-1.4-OpenJPEGConfig.patch with
  openjpeg-1.5.0-cmake_Config.patch (taken from Fedora)
- Replaced openjpeg-1.4-cmake_symlink_fix.patch with
  openjpeg-1.5.0-cmake_header_symlink.patch (taken from Fedora)
- Added 2 patches (taken from Fedora):
  * openjpeg-1.5.0-cmake_libdir.patch -- Fix installation directories
  * openjpeg-1.5.0-pkgconfig_includedir.patch -- Fix includedir in pkgconfig
    file
- Spec file updates:
  * Added doxygen in BuildRequires: to enable compilation of devel docs.
  * Updated BuildRequires: to include also liblcms2-devel and zlib-devel.
  * Fixed rpmlint warning "file-contains-date-and-time"
- No need to remove the JavaOpenJPEG/ directory from the package source anymore
  (the Sun proprietary code was removed from the package).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1340884800">- Added a patch (heap_corruption_fix.patch) to fix heap corruption when
  processing certain Gray16 TIFF images - (CVE-2009-5030), (bnc#757260).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1342008000">- Added a patch (heap_buffer_overflow_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3358), (bnc#770649).</changelog>
<changelog author="idonmez@suse.com" date="1342526400">- Add baselibs.conf</changelog>
<changelog author="asterios.dramis@gmail.com" date="1347364800">- Added a patch (heap_buffer_overflow_2_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3535), (bnc#777445).</changelog>
<changelog author="sleep_walker@suse.cz" date="1347883200">- fix fedora build</changelog>
<changelog author="asterios.dramis@gmail.com" date="1350302400">- Update to version 1.5.1:
  Security:
  * Fixes: CVE-2012-3535
  * Fixes: CVE-2012-3358
  New Features:
  * Use a new API scheme and solve the SOVERSIONing in OpenJPEG
  * Allow better integration with multi-arch system
  * Compile &amp; Install Java bindings (CMake)
  * Install required addXMLinJP2 (JPIP)
  Misc:
  * Fix linker error by resolving all symbols (eg. missing -lm)
  * Fix some man page typos
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * heap_buffer_overflow_fix.patch
  * heap_buffer_overflow_2_fix.patch
  * heap_corruption_fix.patch
  * openjpeg-1.5.0-cmake_Config.patch
  * openjpeg-1.5.0-cmake_libdir.patch
  * openjpeg-1.5.0-pkgconfig_includedir.patch
- Replaced openjpeg-1.5.0-cmake_header_symlink.patch with a fix inside the spec
  file.
- Removed symlink from %{_includedir}/openjpeg-1.5 to %{_includedir}/openjpeg
  (not needed).
- Added the following patches (taken from Fedora):
  * openjpeg-1.5.1-cmake_libdir.patch
    Fix libopenjpeg.pc symlink
  * openjpeg-1.5.1-soname.patch
    Revert soname bump compared to 1.5.0 release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353326400">- do fdupes only for SUSE distributions</changelog>
<changelog author="vpereira@novell.com" date="1389355200">- Security:
  * Patches openjpeg-1.5.1-cve-2013-6045-1.patch and
    openjpeg-1.5.1-cve-2013-6045-2.patch fix heap overflow
    described in  CVE-2013-6045, bnc#853838.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1392206400">- Added the following security patches (based also on Redhat/Fedora patches):
  * openjpeg-1.5-r2029.patch
    From upstream. Fix issue 155, jp2_read_boxhdr() can trigger random pointer
    memory access
  * openjpeg-1.5-r2032.patch
    From upstream. Fix issue 169, division by zero in j2k_read_siz
  * openjpeg-1.5-r2033.patch
    From upstream. Fix issue 166, missing range check in j2k_read_coc et al
  * CVE-2013-1447.patch
    Fix multiple denial of service flaws, CVE-2013-1447, bnc#853834
  * CVE-2013-6052.patch
    Fix heap OOB reads, information leaks, CVE-2013-6052, bnc#853644
  * CVE-2013-6053.patch
    Fix heap OOB reads, information leaks, CVE-2013-6053, bnc#853644
  * CVE-2013-6887.patch
    Fix multiple denial of service flaws, CVE-2013-6887, bnc#853644
- Removed part of openjpeg-1.5.1-cve-2013-6045-1.patch that is already
  upstream, included in openjpeg-1.5-r2033.patch (slightly modified).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 1.5.2:
  Security:
  * Fixes: CVE-2013-4289 CVE-2013-4290
  * Fixes: CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6054
    CVE-2013-6053 CVE-2013-6887
  New Features:
  * Compile Java with source/target specific java version
  * Do not set SONAME for Java module, fix linking (missing math lib)
  * Support some BMP/RGB8 files
  * Fix compilation on ARM
  Misc:
  * Remove BSD-4 license from getopt copy, since upstream switched to BSD-3
  * Support compilation against system installed getopt
  * Fix Big Endian checking (autotools)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * openjpeg-1.5-r2029.patch
  * openjpeg-1.5-r2032.patch
  * openjpeg-1.5-r2033.patch
  * openjpeg-1.5.1-cve-2013-6045-1.patch
  * openjpeg-1.5.1-cve-2013-6045-2.patch
  * CVE-2013-6052.patch
  * CVE-2013-6053.patch
  * CVE-2013-1447.patch
  * CVE-2013-6887.patch</changelog>
<changelog author="mpluskal@suse.com" date="1425297600">- Use cmake macros for building
- Small spec file cleanups, use pkgconfig style dependencies</changelog>
<changelog author="hpj@suse.com" date="1474459200">- Add openjpeg-bsc999817-cve2016-7445-null-deref.patch
  (bsc#999817, CVE-2016-7445).</changelog>
<changelog author="astieger@suse.com" date="1505908800">- Add patch to fix ffast-math issue bsc#1029609 bsc#1059440:
  * openjpeg-fast-math.patch</changelog>

</package>
<package pkgid="64a96bf47714d65bae448ca2ebfc923847a60f41a717167fe9e63493d5c74489" name="libopenssl-devel" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="c7b53dd1bb593e9f6394c175d5764cc4aa6aefa2b9f623e47d4d6ef018c681d6" name="libopenssl-devel" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="9ce2756fbb80834808da4ca799d83d19937f93f5452a1dd331a01d60df7bb652" name="libopenssl-devel" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="1a3d46f19419f44d39027fde5ef18bdcbc9408777f486aec86eb0d24b9231f61" name="libopenssl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="f665a173432a599dd857b0158e9202142c5ae9a88c522533865bf68674aa011a" name="libopenssl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="fbfb0175b35e9732d9b66896d05cb33258eb1a690895cbd290ad2fa3872d8759" name="libopenssl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="7b42923e5a23b680bedc3eb169fb9dbc0e225370c212abcd5f253934013b46d3" name="libopenssl0_9_8" arch="x86_64">
    <version epoch="0" ver="0.9.8j" rel="21.2"/>

<changelog author="vcizek@suse.com" date="1423051200">- fix a memory leak in ssl_lib.c (CVE-2009-5146) (bnc#915976)
  * added openssl-CVE-2009-5146.patch</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0292 (bnc#922501)
  - Base64 decode
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0292.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1429185600">- add ECC ciphersuites to DEFAULT (bnc#879179)
  * modified openssl-enable-ecdh.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1434369600">- disable EXPORT ciphers by default (bnc#931698, comment #3)
  * added openssl-disable_EXPORT_ciphers_by_default.patch</changelog>
<changelog author="vcizek@suse.com" date="1434369601">- remove libopenssl0_9_8-hmac from baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1445428800">- fix an ecdh negotiation bug (bsc#947833)
  * added openssl-fix-ecdh_negotiation_bug.patch</changelog>
<changelog author="vcizek@suse.com" date="1449230400">- prevent segfault in s_client with invalid options (bsc#952099)
  * added openssl-s_client-check-if-con-null-before-using-it.patch</changelog>
<changelog author="vcizek@suse.com" date="1449230401">- X509_ATTRIBUTE memory leak (CVE-2015-3195) (bsc#957812)
  * added openssl-CVE-2015-3195.patch</changelog>
<changelog author="vcizek@suse.com" date="1455278400">- fix CVE-2015-3197 (bsc#963415)
  * SSLv2 doesn't block disabled ciphers
  * add openssl-CVE-2015-3197.patch</changelog>
<changelog author="vcizek@suse.com" date="1456315200">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871, bsc#967787)
  * add openssl-avoid-config-twice.patch</changelog>
<changelog author="psimons@suse.com" date="1456488000">- Fix CVE-2016-0797 (bnc#968048) via "openssl-CVE-2016-0797.patch".
  The BN_hex2bn() and BN_dec2bn() functions had a bug that could
  result in an attempt to de-reference a NULL pointer. This could
  have security consequences if these functions were ever called by
  user applications with large untrusted hex/decimal data. Also,
  internal usage of these functions in OpenSSL uses data from config
  files or application command line arguments. If user developed
  applications generated config file data based on untrusted data,
  then this could have had security consequences as well.
- Fix CVE-2016-0799 (bnc#968374) via "openssl-CVE-2016-0799.patch".
  On many 64 bit systems, the internal fmtstr() and doapr_outch()
  functions could miscalculate the length of a string and attempt to
  access out-of-bounds memory locations. These problems could have
  enabled attacks where large amounts of untrusted data is passed to
  the BIO_*printf functions. If applications use these functions in
  this way then they could have been vulnerable. OpenSSL itself uses
  these functions when printing out human-readable dumps of ASN.1
  data. Therefore applications that print this data could have been
  vulnerable if the data is from untrusted sources. OpenSSL command
  line applications could also have been vulnerable when they print
  out ASN.1 data, or if untrusted data is passed as command line
  arguments. Libssl is not considered directly vulnerable.
- Fix CVE-2016-0800 (bnc#968046, "Drown"). OpenSSL used to be
  vulnerable to a cross-protocol attack that could lead to
  decryption of TLS sessions by using a server supporting SSLv2 and
  EXPORT cipher suites as a Bleichenbacher RSA padding oracle. The
  patch "openssl-CVE-2016-0800-DROWN-disable-ssl2.patch" remedies
  this issue by disabling the SSLv2 protocol (unless the environment
  variable $OPENSSL_ALLOW_SSL2 is defined) and all weak EXPORT
  ciphers (unless $OPENSSL_ALLOW_EXPORT is defined).</changelog>
<changelog author="vcizek@suse.com" date="1461844800">- OpenSSL Security Advisory [3rd May 2016]
  * Memory corruption in the ASN.1 encoder
  - bsc#977617 (CVE-2016-2108)
  * EVP_EncodeUpdate overflow
  - bsc#977614 (CVE-2016-2105)
  * EVP_EncryptUpdate overflow
  - bsc#977615 (CVE-2016-2106)
  * ASN.1 BIO excessive memory allocation
  - bsc#976942 (CVE-2016-2109)
  * add patches
    + openssl-CVE-2016-2105.patch
    + openssl-CVE-2016-2106.patch
    + openssl-CVE-2016-2108.patch
    + openssl-CVE-2016-2109.patch
- Fix side channel attack on modular exponentiation
  * "CacheBleed" (bsc#968050)
  * add openssl-CVE-2016-0702.patch
- Fix buffer overrun in ASN1_parse (bsc#976943)
  * add 0001-Fix-buffer-overrun-in-ASN1_parse.patch
- Rename README.SuSE to the new spelling (bsc#889013)</changelog>
<changelog author="vcizek@suse.com" date="1474545600">- update expired S/MIME certs (bsc#979475)
  * add openssl-update-expired-smime-certs.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1474545601">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch
  * openssl-CVE-2016-6304.patch
  * openssl-CVE-2016-6306.patch
  * 0001-PR-2506.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch</changelog>
<changelog author="vcizek@suse.com" date="1485864000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
- ECSDA P-256 timing attack key recovery (bsc#1019334, CVE-2016-7056)
- remote denial of service in SSL alert handling
  (bsc#1005878, CVE-2016-8610)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7056.patch
  * openssl-CVE-2016-8610.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- add missing commit for CVE-2016-2108 (bsc#1004499)
  * updated openssl-CVE-2016-2108.patch
- don't attempt session resumption if no ticket is present and session
  ID length is zero (bsc#984663)
  * add openssl-no_session_resumption_without_ticket.patch</changelog>
<changelog author="vcizek@suse.com" date="1492516800">- backport DEFAULT_SUSE cipher list (bsc#1034941)
  * add openssl-add_DEFAULT_SUSE_cipher_list.patch</changelog>
<changelog author="vcizek@suse.com" date="1509969600">- Backport alternative chain lookup patches (bsc#1032261)
  * openssl-1.0.1i-trusted-first.patch
  * openssl-1.0.1i-alt-chains.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="b18f3bb45c6809bed501e5bb9af05e6fe1c1dc436eee67cba5a923785e4b1a36" name="libopenssl0_9_8-32bit" arch="x86_64">
    <version epoch="0" ver="0.9.8j" rel="21.2"/>

<changelog author="vcizek@suse.com" date="1423051200">- fix a memory leak in ssl_lib.c (CVE-2009-5146) (bnc#915976)
  * added openssl-CVE-2009-5146.patch</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0292 (bnc#922501)
  - Base64 decode
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0292.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1429185600">- add ECC ciphersuites to DEFAULT (bnc#879179)
  * modified openssl-enable-ecdh.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1434369600">- disable EXPORT ciphers by default (bnc#931698, comment #3)
  * added openssl-disable_EXPORT_ciphers_by_default.patch</changelog>
<changelog author="vcizek@suse.com" date="1434369601">- remove libopenssl0_9_8-hmac from baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1445428800">- fix an ecdh negotiation bug (bsc#947833)
  * added openssl-fix-ecdh_negotiation_bug.patch</changelog>
<changelog author="vcizek@suse.com" date="1449230400">- prevent segfault in s_client with invalid options (bsc#952099)
  * added openssl-s_client-check-if-con-null-before-using-it.patch</changelog>
<changelog author="vcizek@suse.com" date="1449230401">- X509_ATTRIBUTE memory leak (CVE-2015-3195) (bsc#957812)
  * added openssl-CVE-2015-3195.patch</changelog>
<changelog author="vcizek@suse.com" date="1455278400">- fix CVE-2015-3197 (bsc#963415)
  * SSLv2 doesn't block disabled ciphers
  * add openssl-CVE-2015-3197.patch</changelog>
<changelog author="vcizek@suse.com" date="1456315200">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871, bsc#967787)
  * add openssl-avoid-config-twice.patch</changelog>
<changelog author="psimons@suse.com" date="1456488000">- Fix CVE-2016-0797 (bnc#968048) via "openssl-CVE-2016-0797.patch".
  The BN_hex2bn() and BN_dec2bn() functions had a bug that could
  result in an attempt to de-reference a NULL pointer. This could
  have security consequences if these functions were ever called by
  user applications with large untrusted hex/decimal data. Also,
  internal usage of these functions in OpenSSL uses data from config
  files or application command line arguments. If user developed
  applications generated config file data based on untrusted data,
  then this could have had security consequences as well.
- Fix CVE-2016-0799 (bnc#968374) via "openssl-CVE-2016-0799.patch".
  On many 64 bit systems, the internal fmtstr() and doapr_outch()
  functions could miscalculate the length of a string and attempt to
  access out-of-bounds memory locations. These problems could have
  enabled attacks where large amounts of untrusted data is passed to
  the BIO_*printf functions. If applications use these functions in
  this way then they could have been vulnerable. OpenSSL itself uses
  these functions when printing out human-readable dumps of ASN.1
  data. Therefore applications that print this data could have been
  vulnerable if the data is from untrusted sources. OpenSSL command
  line applications could also have been vulnerable when they print
  out ASN.1 data, or if untrusted data is passed as command line
  arguments. Libssl is not considered directly vulnerable.
- Fix CVE-2016-0800 (bnc#968046, "Drown"). OpenSSL used to be
  vulnerable to a cross-protocol attack that could lead to
  decryption of TLS sessions by using a server supporting SSLv2 and
  EXPORT cipher suites as a Bleichenbacher RSA padding oracle. The
  patch "openssl-CVE-2016-0800-DROWN-disable-ssl2.patch" remedies
  this issue by disabling the SSLv2 protocol (unless the environment
  variable $OPENSSL_ALLOW_SSL2 is defined) and all weak EXPORT
  ciphers (unless $OPENSSL_ALLOW_EXPORT is defined).</changelog>
<changelog author="vcizek@suse.com" date="1461844800">- OpenSSL Security Advisory [3rd May 2016]
  * Memory corruption in the ASN.1 encoder
  - bsc#977617 (CVE-2016-2108)
  * EVP_EncodeUpdate overflow
  - bsc#977614 (CVE-2016-2105)
  * EVP_EncryptUpdate overflow
  - bsc#977615 (CVE-2016-2106)
  * ASN.1 BIO excessive memory allocation
  - bsc#976942 (CVE-2016-2109)
  * add patches
    + openssl-CVE-2016-2105.patch
    + openssl-CVE-2016-2106.patch
    + openssl-CVE-2016-2108.patch
    + openssl-CVE-2016-2109.patch
- Fix side channel attack on modular exponentiation
  * "CacheBleed" (bsc#968050)
  * add openssl-CVE-2016-0702.patch
- Fix buffer overrun in ASN1_parse (bsc#976943)
  * add 0001-Fix-buffer-overrun-in-ASN1_parse.patch
- Rename README.SuSE to the new spelling (bsc#889013)</changelog>
<changelog author="vcizek@suse.com" date="1474545600">- update expired S/MIME certs (bsc#979475)
  * add openssl-update-expired-smime-certs.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1474545601">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch
  * openssl-CVE-2016-6304.patch
  * openssl-CVE-2016-6306.patch
  * 0001-PR-2506.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch</changelog>
<changelog author="vcizek@suse.com" date="1485864000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
- ECSDA P-256 timing attack key recovery (bsc#1019334, CVE-2016-7056)
- remote denial of service in SSL alert handling
  (bsc#1005878, CVE-2016-8610)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7056.patch
  * openssl-CVE-2016-8610.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- add missing commit for CVE-2016-2108 (bsc#1004499)
  * updated openssl-CVE-2016-2108.patch
- don't attempt session resumption if no ticket is present and session
  ID length is zero (bsc#984663)
  * add openssl-no_session_resumption_without_ticket.patch</changelog>
<changelog author="vcizek@suse.com" date="1492516800">- backport DEFAULT_SUSE cipher list (bsc#1034941)
  * add openssl-add_DEFAULT_SUSE_cipher_list.patch</changelog>
<changelog author="vcizek@suse.com" date="1509969600">- Backport alternative chain lookup patches (bsc#1032261)
  * openssl-1.0.1i-trusted-first.patch
  * openssl-1.0.1i-alt-chains.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="414c658e1b81107474b18fef2aa56a16a4bf73f3649dbaec2ff751f637b8f27c" name="libopenssl1_0_0" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="0b9abb9908d15ef0f3cbe0a4ba59b7eefee994798761cd87c30bdf0e1d8ae37b" name="libopenssl1_0_0" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="a64c3391eee7ddcaf702555cf2014e2d20f65e08ab7a2262f8157ee280681b56" name="libopenssl1_0_0" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="b21f5a6f02abce717c7a0185752bfd5db787247e3c2bb8854b9552fb362c9507" name="libopenssl1_0_0-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="bb5efb71d59c64b3b046bfc0c266900e9c4e34b8eef1baef2bade6c201ed33d9" name="libopenssl1_0_0-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="471a9154358125a3266f835cb7b03ba85b93e606e9317f2f0594bfadcf0e27d8" name="libopenssl1_0_0-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="a83c62a2ce761eb32c50d117d1c7b5d27161f346bbb4532d87380790cd2fdb12" name="libopenssl1_0_0-hmac" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="7be2824727d97e291ad9d84e6c9edee717b09fae98cdca5b16292ab71ab461ea" name="libopenssl1_0_0-hmac" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="699a8e3aeff7b37106a6f9163c1daea8ea79361e79a63b777fd76d10e70a672a" name="libopenssl1_0_0-hmac" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="677f5ace13cebd10582d83cb2cf3a73077f418c729bd6d819c1439d8310c5d66" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="cc6bbfacaa18b003fdad8739e5be001f9e665e835b65eca6178608951dde5500" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="f43c2b535b0a8a410b853e46e8b0f298c0d0af5a15b958650a2872574378ee3f" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="1bfbbda3c48dc84a49c768576b51d4f2316ced4f063ddf5deee66472d89bdf23" name="libout123-0" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="40db623163712b26f284194d5a8a2f4ddcc2e0f25d374626518f5f571aac7e97" name="libout123-0" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="4253eab212cdc8f04512d52e0a3740563a565564e6c419648ea7d1b2aa9cc85e" name="libout123-0" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="d4b84eaf20dbabcf2e7b88d8745b2e8e88bed08859076ae64e42496c6ebcd66d" name="libout123-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="3cd4b05ae5bc40d081a0a40583dad8965f573d93487c643840f32761c4f516c2" name="libout123-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="4c04a5279334e8df30bc94cf1ba1a3e0f9ebca83c095276c1ec22674ecb51493" name="libout123-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="065ec91915427bc4518e6f30f22a97f8dfd63aff46b30e47d6486a23d984eeed" name="libpcp-devel" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="fc3801c08d237465e8da8d73f2683f250764dd410273e832863955644f2c087e" name="libpcp3" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="84afc8cfb271a84b518bde2037611eac8f29172b054528622488a8c07d0eca0e" name="libpcp_gui2" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="4caed397bdef28544cd0eb6e68f17604bab709926afff609e095c06738ca082b" name="libpcp_import1" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="f2bff48f20aa86040c319dbb2397df83ba12ec361e8e1b2398456c85dcef66fc" name="libpcp_mmv1" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="bca85913dd97ec24e807dbe47059e0bbc61bb9ce041bc9efcc629d27e7a77f0c" name="libpcp_trace2" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="260deb672c64a4ccde70edc83840189eceaf0fd63812a037569dcb367af2a74d" name="libpcp_web1" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="ddbb806efbba93f8c97e6047346fa30079d3cf2906246bc67f7dd6959880c763" name="libpcre1" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="98738dcfb54935a501eb7f0d1a0aa22d39364db150c7128fea690954a47d6985" name="libpcre1-32bit" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="0fb5435b8592c213cfabab405351b42253636c3da4f15689bcb01b6178511cb3" name="libpcre16-0" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="6bb95329cde914076a5e57e58fb5e54302f4081cc53a8cdae627eeedd23399bd" name="libpcre16-0-32bit" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="a01bfbc10b81cc4774b765f271945c80606c2569e5dc16f4acd00e83bb46c8f7" name="libpcrecpp0" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="47b1dcea11197bb49123b839be4415279200e7a6618fe9bd4f41a0ee7a4039ba" name="libpcrecpp0-32bit" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="0c94fcf543cb4c039dc3675020b011d3f17c03c8b39c38497c8c224c1492973f" name="libpcreposix0" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="c5ea246319e72ebbc8d9abfdfc278fcc1b4a43a506a25bf8951558e73313f9c5" name="libpcreposix0-32bit" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="3623675dc172a4c3667607c6ff5f421fa00265e0d6c158a9bff6f40a88bc098d" name="libplist" arch="src">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="5a281d96f961929473586ca8dd0be2ee2c9087c0813f3fe16d2db9abafd8080c" name="libplist++-devel" arch="x86_64">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="7c41fbfb6093ff7cef689a8c93d8abf087e6a0fe9e9c24bbb99c5125c3ebbf74" name="libplist++3" arch="x86_64">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="56ead2093ab8f793dc07854306ae44800d8f2e15174eefd1de8549ebbdbb09cf" name="libplist++3-32bit" arch="x86_64">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="31cf4106dc64d59c2e527d043dc454c4abc0cd5f3dcc17bca01952da35c95ae7" name="libplist-devel" arch="x86_64">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="114d7d2573c4cb586c6b872defa1d08d34572937838facabe43232547a2b3907" name="libplist3" arch="x86_64">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="5fa5deac6a3f07c4fc9fcd5054593fd660f16e5fedc9e76e14bb316f18d8181a" name="libplist3-32bit" arch="x86_64">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="73081b1a03fde593876ad7b1cc015cc047e71631ee930cf82f17d2f8f7f994c7" name="libpoppler-cpp0" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="34288603cc2229036e10ecf64ea66165b5518b6663555aee3db5d76d8a436a95" name="libpoppler-cpp0-32bit" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="37d9317529e1ca5fcb298b76c91f8df09c7499264590281785215267bc4590bd" name="libpoppler-devel" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="17350753eb25b0b49b376f4217d44263ea530815eb906388667daa04faeee224" name="libpoppler-glib-devel" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="e07d64cf464525709572b4accedd1b34c540642da263697f1bf5dbdcba2721b0" name="libpoppler-glib8" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="59a7b28705dbefb326280fda1459a416da9c7c11b22bcbd6e2f52d133277bba5" name="libpoppler-glib8-32bit" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="4a57254a3f2e0244c66dbd97c60ea435de0c5aba45ee691b51d3aff7fb9a09a7" name="libpoppler-qt4-4" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="7c9230e29980ec6f88e08becee9d36a5eff7d2e3632a9c04c540e5a751102024" name="libpoppler-qt4-4-32bit" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="8ee605e1f6370511dec71b94a5d1ba78480e7a5ad6d748ce811db10017c3c268" name="libpoppler-qt4-devel" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="bf7506daf7b803d14dbd1a84d4a93b39a875ce9ac8b32e5d0d5b2b3aa3a6c210" name="libpoppler-qt5-1" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="040733f422ade943a4e4bbabdc02b127b760d87c0129b4a7b64df737c4e2050e" name="libpoppler-qt5-1-32bit" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="647c70eb4d6366237b90d4c5731b746a84e180694ce19f53ea8debf329547671" name="libpoppler-qt5-devel" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="5b33d599b56752b770a4f3e7607a42dc0c466488d5413d62b810f5bd5500efe8" name="libpoppler60" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="e3fc96b9a6fdd7d9224cafdcaff6d8b3d722f7f5d8c30ab5aed493fc9623781a" name="libpoppler60-32bit" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="847ee0bdaa8fd6368a772703c38852e070d2227ee69fc0f01b53a2c1767c12e3" name="libpostproc-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="b9022cb7518eb6d3edd34266d5420075627dcce478a4e011f61c289790ddfe60" name="libpostproc53" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="51bfaeea01051d71f97a88fca62cba9bf2917cf5e01445221cd797aea0fa1b3f" name="libpostproc53-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="47d080c716873b649e78050b7fecae738b9c2dc339ae1ec2319f3418edf50406" name="libpostproc54" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="51104fd70c9612dd27b20c02708bc2a141ed367ec0d84fcad9c72ec14852e44a" name="libpostproc54-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="f0f838d3383dcc847a8d28f458a26cf6283c893f06d02be375535fde9d1d2d3e" name="libpotrace0" arch="x86_64">
    <version epoch="0" ver="1.15" rel="13.1"/>

<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Update to version 1.14:
  * Bugs triggered by malformed BMP files have been fixed,
    including CVE-2016-8685 (bsc#1005026) and CVE-2016-8686.
  * Error reporting has been improved.
  * The image size is now truncated when the bitmap data ends
    prematurely.
  * It is now possible to use negative dy in bitmap data.</changelog>
<changelog author="sbrabec@suse.com" date="1502107200">- Update to version 1.15:
  * Fix potential buffer overflows and arithmetic overflows
    (bsc#1051634, CVE-2017-12067).
  * Fix bug triggered by very large bitmaps.
  * Other bugfixes.</changelog>

</package>
<package pkgid="5ddb24c4970f8d39d7cea8a6216331b98bbe30e9a3f59888fc9442825f658441" name="libpq5" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="b30c7b7184f0105b767c5281c4f70225785870dade157f3dd8d9e05d833427fd" name="libpq5" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="0f14760aef41b538d7ca20d2a705c2829bcfa0425f382d50b582e54b56cb8d01" name="libpq5-32bit" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="431e0b86addc5d8c4030784eb885a04f047d859e4ab26a02d085d96cf5410b5a" name="libpq5-32bit" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="f7b65b4c0a4c4f804cdb10bcd15c6f13737254f2dd94343f1866fbedae09133f" name="libprocps3" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="14.1"/>

<changelog author="werner@suse.de" date="1372248000">- Add tow upstream patches
  0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch</changelog>
<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>

</package>
<package pkgid="d02a57b17ecab8b3fb525ed118e532924013a2e8182d7395327c6b5e17f96984" name="libprocps3" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="17.1"/>

<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
<changelog author="jcejka@suse.de" date="1502712000">- Don't set buffering on invalid file descriptor (bsc#1053409)
  procps-ng-3.3.9-sysctl-iobuf-fd.patch</changelog>

</package>
<package pkgid="9f123aaffbe36f4b9a05ef9a17483d8228d02703cd37c1578c65c935b5289513" name="libpulse-devel" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="bca14a1f13469b3729277d652d5c0dc602dac9292d0f4851968f1f4c73d062d0" name="libpulse-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="b66a02c1ca338d5cc5364986c11e55c13371407ce3ae71de1598bef325fdadd8" name="libpulse-mainloop-glib0" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="5f2a4e4a50f4e5f7fa843e6c6bb410b54041676e1a0bbf30ac9988fc4c6a11b4" name="libpulse-mainloop-glib0-32bit" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="1148588000afca560b572b1e2decfb14fef2b2e0ea2831a7f806e8ec0086f65b" name="libpulse0" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="c9adcafead5dbc1764fa6662531afc3f64afbda8d13173d03ca8e27fc1baef1a" name="libpulse0-32bit" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="483329f61ccfa273da03f25083bdfaa114f1bd720279f2d1feb1f1050a2b58c5" name="libqt5-qtwebengine" arch="src">
    <version epoch="0" ver="5.6.2" rel="6.2"/>

<changelog author="tittiatcoke@gmail.com" date="1434974400">- Add patch gcc50-fixes.diff to fix the detection of the GCC 5.x
  compiler. Patch is equal to the one used for Chromium</changelog>
<changelog author="schwab@suse.de" date="1435579200">- gyp-arm64.patch: fix support for aarch64
- gcc50-fixes.diff: also handle gcc &lt; 5</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1439553600">- ExcludeArch:    ppc ppc64 ppc64le
  http://www.chromium.org/blink not ported to PowerPC</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1439726400">- Update to 5.5.0
  * For more details please see:
    http://blog.qt.io/blog/2015/07/01/qt-5-5-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.5
- Enable jsoncpp support on Leap</changelog>
<changelog author="schwab@suse.de" date="1443614400">- gyp-arm64.patch: Update ffmpeg config
- sandbox-linux-arm64.patch: fix chromium build for aarch64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444996800">- Update to 5.5.1
  * For more details please see:
    http://blog.qt.io/blog/2015/10/15/qt-5-5-1-released/</changelog>
<changelog author="mlin@suse.com" date="1449144000">- Do not build on s390 and s390x, chromium have not ported to them</changelog>
<changelog author="mlin@suse.com" date="1452513600">- Do not build on aarch64, gcc 4.8 is too old here</changelog>
<changelog author="alarrosa@suse.com" date="1454500800">- [ECO] Update Qt5 to version 5.5.1 (fate#319961, bnc#964864)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1458302400">- Update to 5.6.0
  * For more details please see:
    http://blog.qt.io/blog/2016/03/16/qt-5-6-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.6
- Drop upstreamed and/or obsolete patches:
  gyp-arm64.patch and sandbox-linux-arm64.patch</changelog>
<changelog author="alarrosa@suse.com" date="1459771200">- Add fix-webrtc-vaddvq_s64.diff . vaddvq_s64 is not defined in the gcc
  version in SLE12 for aarch64, and neither is gcc's builtin used in
  its definition so I decompiled the builtin and replaced the vaddvq_s64
  call with the corresponding assembly instructions so it builds
  correctly.</changelog>
<changelog author="alarrosa@suse.com" date="1460116800">- Updated Qt to 5.6.0, a LTS release (fate#320330)</changelog>
<changelog author="mlin@suse.com" date="1465905600">- Update to 5.6.1 (boo#984605)
  * For more details please see:
    http://blog.qt.io/blog/2016/06/08/qt-5-6-1-released/
  * Drop obsoleted gcc50-fixes.diff</changelog>
<changelog author="alarrosa@suse.com" date="1474459200">- Added 0001-Fix-use-after-free-on-Linux-at-shutdown.patch to fix
  a crash on exit of some applications because a libevent event was
  accessed after it was deleted (bsc#1000168).</changelog>
<changelog author="alarrosa@suse.com" date="1477396800">- Add disable-gpu-when-using-nouveau-boo-1005323.diff. Disables the
  use of the gpu by webengine when the nouveau opengl driver is
  detected since nouveau doesn't support rendering from different
  threads. Also, allows to use two environment variables
  QT_WEBENGINE_DISABLE_GPU to force the disabling of the gpu and
  QT_WEBENGINE_DISABLE_NOUVEAU_WORKAROUND to disable the detection
  of nouveau, just in case someone wants to try with newer nouveau
  releases (boo#1005323, boo#997171).</changelog>
<changelog author="mlin@suse.com" date="1488801600">- Update to 5.6.2 (bsc#1028654)
  * 5.6 bugfix release http://blog.qt.io/blog/2016/10/12/qt-5-6-2-released/
  * Refresh disable-gpu-when-using-nouveau-boo-1005323.diff for 5.6.2</changelog>
<changelog author="alarrosa@suse.com" date="1505217600">- Enable use_proprietary_codecs when configuring webengine so it uses
  the system ffmpeg binary thus allowing to reproduce html5 videos
  (bsc#1043375).</changelog>
<changelog author="alarrosa@suse.com" date="1506427200">- Unbundle ffmpeg if possible, only support proprietary codecs
  if the system ffmpeg does</changelog>
<changelog author="t.zell@gmx.de" date="1506686400">- Add clip-ft-glyph.diff and harmony-fix.diff .
  Backported fixes to make fonts readable again with FreeType 2.8.1
  (boo#1061344).</changelog>
<changelog author="alarrosa@suse.com" date="1508155200">- Add build-with-libvpx-1.3.diff to let qtwebengine build, using the internal
  libvpx copy in Chromium and an external ffmpeg binary (bsc#1043375).</changelog>

</package>
<package pkgid="723308acadc380e98d9e38246926638f542c923f71d17ec2f2039ae2ff626ef9" name="libqt5-qtwebengine" arch="x86_64">
    <version epoch="0" ver="5.6.2" rel="6.2"/>

<changelog author="tittiatcoke@gmail.com" date="1434974400">- Add patch gcc50-fixes.diff to fix the detection of the GCC 5.x
  compiler. Patch is equal to the one used for Chromium</changelog>
<changelog author="schwab@suse.de" date="1435579200">- gyp-arm64.patch: fix support for aarch64
- gcc50-fixes.diff: also handle gcc &lt; 5</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1439553600">- ExcludeArch:    ppc ppc64 ppc64le
  http://www.chromium.org/blink not ported to PowerPC</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1439726400">- Update to 5.5.0
  * For more details please see:
    http://blog.qt.io/blog/2015/07/01/qt-5-5-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.5
- Enable jsoncpp support on Leap</changelog>
<changelog author="schwab@suse.de" date="1443614400">- gyp-arm64.patch: Update ffmpeg config
- sandbox-linux-arm64.patch: fix chromium build for aarch64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444996800">- Update to 5.5.1
  * For more details please see:
    http://blog.qt.io/blog/2015/10/15/qt-5-5-1-released/</changelog>
<changelog author="mlin@suse.com" date="1449144000">- Do not build on s390 and s390x, chromium have not ported to them</changelog>
<changelog author="mlin@suse.com" date="1452513600">- Do not build on aarch64, gcc 4.8 is too old here</changelog>
<changelog author="alarrosa@suse.com" date="1454500800">- [ECO] Update Qt5 to version 5.5.1 (fate#319961, bnc#964864)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1458302400">- Update to 5.6.0
  * For more details please see:
    http://blog.qt.io/blog/2016/03/16/qt-5-6-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.6
- Drop upstreamed and/or obsolete patches:
  gyp-arm64.patch and sandbox-linux-arm64.patch</changelog>
<changelog author="alarrosa@suse.com" date="1459771200">- Add fix-webrtc-vaddvq_s64.diff . vaddvq_s64 is not defined in the gcc
  version in SLE12 for aarch64, and neither is gcc's builtin used in
  its definition so I decompiled the builtin and replaced the vaddvq_s64
  call with the corresponding assembly instructions so it builds
  correctly.</changelog>
<changelog author="alarrosa@suse.com" date="1460116800">- Updated Qt to 5.6.0, a LTS release (fate#320330)</changelog>
<changelog author="mlin@suse.com" date="1465905600">- Update to 5.6.1 (boo#984605)
  * For more details please see:
    http://blog.qt.io/blog/2016/06/08/qt-5-6-1-released/
  * Drop obsoleted gcc50-fixes.diff</changelog>
<changelog author="alarrosa@suse.com" date="1474459200">- Added 0001-Fix-use-after-free-on-Linux-at-shutdown.patch to fix
  a crash on exit of some applications because a libevent event was
  accessed after it was deleted (bsc#1000168).</changelog>
<changelog author="alarrosa@suse.com" date="1477396800">- Add disable-gpu-when-using-nouveau-boo-1005323.diff. Disables the
  use of the gpu by webengine when the nouveau opengl driver is
  detected since nouveau doesn't support rendering from different
  threads. Also, allows to use two environment variables
  QT_WEBENGINE_DISABLE_GPU to force the disabling of the gpu and
  QT_WEBENGINE_DISABLE_NOUVEAU_WORKAROUND to disable the detection
  of nouveau, just in case someone wants to try with newer nouveau
  releases (boo#1005323, boo#997171).</changelog>
<changelog author="mlin@suse.com" date="1488801600">- Update to 5.6.2 (bsc#1028654)
  * 5.6 bugfix release http://blog.qt.io/blog/2016/10/12/qt-5-6-2-released/
  * Refresh disable-gpu-when-using-nouveau-boo-1005323.diff for 5.6.2</changelog>
<changelog author="alarrosa@suse.com" date="1505217600">- Enable use_proprietary_codecs when configuring webengine so it uses
  the system ffmpeg binary thus allowing to reproduce html5 videos
  (bsc#1043375).</changelog>
<changelog author="alarrosa@suse.com" date="1506427200">- Unbundle ffmpeg if possible, only support proprietary codecs
  if the system ffmpeg does</changelog>
<changelog author="t.zell@gmx.de" date="1506686400">- Add clip-ft-glyph.diff and harmony-fix.diff .
  Backported fixes to make fonts readable again with FreeType 2.8.1
  (boo#1061344).</changelog>
<changelog author="alarrosa@suse.com" date="1508155200">- Add build-with-libvpx-1.3.diff to let qtwebengine build, using the internal
  libvpx copy in Chromium and an external ffmpeg binary (bsc#1043375).</changelog>

</package>
<package pkgid="414c9587c9dc25ec5270296ebfe8e90ba66474ac575d158940a9a93d7d0a3c86" name="libqt5-qtwebengine-32bit" arch="x86_64">
    <version epoch="0" ver="5.6.2" rel="6.2"/>

<changelog author="tittiatcoke@gmail.com" date="1434974400">- Add patch gcc50-fixes.diff to fix the detection of the GCC 5.x
  compiler. Patch is equal to the one used for Chromium</changelog>
<changelog author="schwab@suse.de" date="1435579200">- gyp-arm64.patch: fix support for aarch64
- gcc50-fixes.diff: also handle gcc &lt; 5</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1439553600">- ExcludeArch:    ppc ppc64 ppc64le
  http://www.chromium.org/blink not ported to PowerPC</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1439726400">- Update to 5.5.0
  * For more details please see:
    http://blog.qt.io/blog/2015/07/01/qt-5-5-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.5
- Enable jsoncpp support on Leap</changelog>
<changelog author="schwab@suse.de" date="1443614400">- gyp-arm64.patch: Update ffmpeg config
- sandbox-linux-arm64.patch: fix chromium build for aarch64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444996800">- Update to 5.5.1
  * For more details please see:
    http://blog.qt.io/blog/2015/10/15/qt-5-5-1-released/</changelog>
<changelog author="mlin@suse.com" date="1449144000">- Do not build on s390 and s390x, chromium have not ported to them</changelog>
<changelog author="mlin@suse.com" date="1452513600">- Do not build on aarch64, gcc 4.8 is too old here</changelog>
<changelog author="alarrosa@suse.com" date="1454500800">- [ECO] Update Qt5 to version 5.5.1 (fate#319961, bnc#964864)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1458302400">- Update to 5.6.0
  * For more details please see:
    http://blog.qt.io/blog/2016/03/16/qt-5-6-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.6
- Drop upstreamed and/or obsolete patches:
  gyp-arm64.patch and sandbox-linux-arm64.patch</changelog>
<changelog author="alarrosa@suse.com" date="1459771200">- Add fix-webrtc-vaddvq_s64.diff . vaddvq_s64 is not defined in the gcc
  version in SLE12 for aarch64, and neither is gcc's builtin used in
  its definition so I decompiled the builtin and replaced the vaddvq_s64
  call with the corresponding assembly instructions so it builds
  correctly.</changelog>
<changelog author="alarrosa@suse.com" date="1460116800">- Updated Qt to 5.6.0, a LTS release (fate#320330)</changelog>
<changelog author="mlin@suse.com" date="1465905600">- Update to 5.6.1 (boo#984605)
  * For more details please see:
    http://blog.qt.io/blog/2016/06/08/qt-5-6-1-released/
  * Drop obsoleted gcc50-fixes.diff</changelog>
<changelog author="alarrosa@suse.com" date="1474459200">- Added 0001-Fix-use-after-free-on-Linux-at-shutdown.patch to fix
  a crash on exit of some applications because a libevent event was
  accessed after it was deleted (bsc#1000168).</changelog>
<changelog author="alarrosa@suse.com" date="1477396800">- Add disable-gpu-when-using-nouveau-boo-1005323.diff. Disables the
  use of the gpu by webengine when the nouveau opengl driver is
  detected since nouveau doesn't support rendering from different
  threads. Also, allows to use two environment variables
  QT_WEBENGINE_DISABLE_GPU to force the disabling of the gpu and
  QT_WEBENGINE_DISABLE_NOUVEAU_WORKAROUND to disable the detection
  of nouveau, just in case someone wants to try with newer nouveau
  releases (boo#1005323, boo#997171).</changelog>
<changelog author="mlin@suse.com" date="1488801600">- Update to 5.6.2 (bsc#1028654)
  * 5.6 bugfix release http://blog.qt.io/blog/2016/10/12/qt-5-6-2-released/
  * Refresh disable-gpu-when-using-nouveau-boo-1005323.diff for 5.6.2</changelog>
<changelog author="alarrosa@suse.com" date="1505217600">- Enable use_proprietary_codecs when configuring webengine so it uses
  the system ffmpeg binary thus allowing to reproduce html5 videos
  (bsc#1043375).</changelog>
<changelog author="alarrosa@suse.com" date="1506427200">- Unbundle ffmpeg if possible, only support proprietary codecs
  if the system ffmpeg does</changelog>
<changelog author="t.zell@gmx.de" date="1506686400">- Add clip-ft-glyph.diff and harmony-fix.diff .
  Backported fixes to make fonts readable again with FreeType 2.8.1
  (boo#1061344).</changelog>
<changelog author="alarrosa@suse.com" date="1508155200">- Add build-with-libvpx-1.3.diff to let qtwebengine build, using the internal
  libvpx copy in Chromium and an external ffmpeg binary (bsc#1043375).</changelog>

</package>
<package pkgid="0fd6df1b593fd049b94310ee6a3dd967fa0f62c87c4e269f0eec35ec6c1364f7" name="libqt5-qtwebengine-devel" arch="x86_64">
    <version epoch="0" ver="5.6.2" rel="6.2"/>

<changelog author="tittiatcoke@gmail.com" date="1434974400">- Add patch gcc50-fixes.diff to fix the detection of the GCC 5.x
  compiler. Patch is equal to the one used for Chromium</changelog>
<changelog author="schwab@suse.de" date="1435579200">- gyp-arm64.patch: fix support for aarch64
- gcc50-fixes.diff: also handle gcc &lt; 5</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1439553600">- ExcludeArch:    ppc ppc64 ppc64le
  http://www.chromium.org/blink not ported to PowerPC</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1439726400">- Update to 5.5.0
  * For more details please see:
    http://blog.qt.io/blog/2015/07/01/qt-5-5-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.5
- Enable jsoncpp support on Leap</changelog>
<changelog author="schwab@suse.de" date="1443614400">- gyp-arm64.patch: Update ffmpeg config
- sandbox-linux-arm64.patch: fix chromium build for aarch64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444996800">- Update to 5.5.1
  * For more details please see:
    http://blog.qt.io/blog/2015/10/15/qt-5-5-1-released/</changelog>
<changelog author="mlin@suse.com" date="1449144000">- Do not build on s390 and s390x, chromium have not ported to them</changelog>
<changelog author="mlin@suse.com" date="1452513600">- Do not build on aarch64, gcc 4.8 is too old here</changelog>
<changelog author="alarrosa@suse.com" date="1454500800">- [ECO] Update Qt5 to version 5.5.1 (fate#319961, bnc#964864)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1458302400">- Update to 5.6.0
  * For more details please see:
    http://blog.qt.io/blog/2016/03/16/qt-5-6-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.6
- Drop upstreamed and/or obsolete patches:
  gyp-arm64.patch and sandbox-linux-arm64.patch</changelog>
<changelog author="alarrosa@suse.com" date="1459771200">- Add fix-webrtc-vaddvq_s64.diff . vaddvq_s64 is not defined in the gcc
  version in SLE12 for aarch64, and neither is gcc's builtin used in
  its definition so I decompiled the builtin and replaced the vaddvq_s64
  call with the corresponding assembly instructions so it builds
  correctly.</changelog>
<changelog author="alarrosa@suse.com" date="1460116800">- Updated Qt to 5.6.0, a LTS release (fate#320330)</changelog>
<changelog author="mlin@suse.com" date="1465905600">- Update to 5.6.1 (boo#984605)
  * For more details please see:
    http://blog.qt.io/blog/2016/06/08/qt-5-6-1-released/
  * Drop obsoleted gcc50-fixes.diff</changelog>
<changelog author="alarrosa@suse.com" date="1474459200">- Added 0001-Fix-use-after-free-on-Linux-at-shutdown.patch to fix
  a crash on exit of some applications because a libevent event was
  accessed after it was deleted (bsc#1000168).</changelog>
<changelog author="alarrosa@suse.com" date="1477396800">- Add disable-gpu-when-using-nouveau-boo-1005323.diff. Disables the
  use of the gpu by webengine when the nouveau opengl driver is
  detected since nouveau doesn't support rendering from different
  threads. Also, allows to use two environment variables
  QT_WEBENGINE_DISABLE_GPU to force the disabling of the gpu and
  QT_WEBENGINE_DISABLE_NOUVEAU_WORKAROUND to disable the detection
  of nouveau, just in case someone wants to try with newer nouveau
  releases (boo#1005323, boo#997171).</changelog>
<changelog author="mlin@suse.com" date="1488801600">- Update to 5.6.2 (bsc#1028654)
  * 5.6 bugfix release http://blog.qt.io/blog/2016/10/12/qt-5-6-2-released/
  * Refresh disable-gpu-when-using-nouveau-boo-1005323.diff for 5.6.2</changelog>
<changelog author="alarrosa@suse.com" date="1505217600">- Enable use_proprietary_codecs when configuring webengine so it uses
  the system ffmpeg binary thus allowing to reproduce html5 videos
  (bsc#1043375).</changelog>
<changelog author="alarrosa@suse.com" date="1506427200">- Unbundle ffmpeg if possible, only support proprietary codecs
  if the system ffmpeg does</changelog>
<changelog author="t.zell@gmx.de" date="1506686400">- Add clip-ft-glyph.diff and harmony-fix.diff .
  Backported fixes to make fonts readable again with FreeType 2.8.1
  (boo#1061344).</changelog>
<changelog author="alarrosa@suse.com" date="1508155200">- Add build-with-libvpx-1.3.diff to let qtwebengine build, using the internal
  libvpx copy in Chromium and an external ffmpeg binary (bsc#1043375).</changelog>

</package>
<package pkgid="bd709198d55eb61f5a1a55474d913aab6ea9d7dc4f014227674c43fa6df43ca8" name="libqt5-qtwebengine-devel-32bit" arch="x86_64">
    <version epoch="0" ver="5.6.2" rel="6.2"/>

<changelog author="tittiatcoke@gmail.com" date="1434974400">- Add patch gcc50-fixes.diff to fix the detection of the GCC 5.x
  compiler. Patch is equal to the one used for Chromium</changelog>
<changelog author="schwab@suse.de" date="1435579200">- gyp-arm64.patch: fix support for aarch64
- gcc50-fixes.diff: also handle gcc &lt; 5</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1439553600">- ExcludeArch:    ppc ppc64 ppc64le
  http://www.chromium.org/blink not ported to PowerPC</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1439726400">- Update to 5.5.0
  * For more details please see:
    http://blog.qt.io/blog/2015/07/01/qt-5-5-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.5
- Enable jsoncpp support on Leap</changelog>
<changelog author="schwab@suse.de" date="1443614400">- gyp-arm64.patch: Update ffmpeg config
- sandbox-linux-arm64.patch: fix chromium build for aarch64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444996800">- Update to 5.5.1
  * For more details please see:
    http://blog.qt.io/blog/2015/10/15/qt-5-5-1-released/</changelog>
<changelog author="mlin@suse.com" date="1449144000">- Do not build on s390 and s390x, chromium have not ported to them</changelog>
<changelog author="mlin@suse.com" date="1452513600">- Do not build on aarch64, gcc 4.8 is too old here</changelog>
<changelog author="alarrosa@suse.com" date="1454500800">- [ECO] Update Qt5 to version 5.5.1 (fate#319961, bnc#964864)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1458302400">- Update to 5.6.0
  * For more details please see:
    http://blog.qt.io/blog/2016/03/16/qt-5-6-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.6
- Drop upstreamed and/or obsolete patches:
  gyp-arm64.patch and sandbox-linux-arm64.patch</changelog>
<changelog author="alarrosa@suse.com" date="1459771200">- Add fix-webrtc-vaddvq_s64.diff . vaddvq_s64 is not defined in the gcc
  version in SLE12 for aarch64, and neither is gcc's builtin used in
  its definition so I decompiled the builtin and replaced the vaddvq_s64
  call with the corresponding assembly instructions so it builds
  correctly.</changelog>
<changelog author="alarrosa@suse.com" date="1460116800">- Updated Qt to 5.6.0, a LTS release (fate#320330)</changelog>
<changelog author="mlin@suse.com" date="1465905600">- Update to 5.6.1 (boo#984605)
  * For more details please see:
    http://blog.qt.io/blog/2016/06/08/qt-5-6-1-released/
  * Drop obsoleted gcc50-fixes.diff</changelog>
<changelog author="alarrosa@suse.com" date="1474459200">- Added 0001-Fix-use-after-free-on-Linux-at-shutdown.patch to fix
  a crash on exit of some applications because a libevent event was
  accessed after it was deleted (bsc#1000168).</changelog>
<changelog author="alarrosa@suse.com" date="1477396800">- Add disable-gpu-when-using-nouveau-boo-1005323.diff. Disables the
  use of the gpu by webengine when the nouveau opengl driver is
  detected since nouveau doesn't support rendering from different
  threads. Also, allows to use two environment variables
  QT_WEBENGINE_DISABLE_GPU to force the disabling of the gpu and
  QT_WEBENGINE_DISABLE_NOUVEAU_WORKAROUND to disable the detection
  of nouveau, just in case someone wants to try with newer nouveau
  releases (boo#1005323, boo#997171).</changelog>
<changelog author="mlin@suse.com" date="1488801600">- Update to 5.6.2 (bsc#1028654)
  * 5.6 bugfix release http://blog.qt.io/blog/2016/10/12/qt-5-6-2-released/
  * Refresh disable-gpu-when-using-nouveau-boo-1005323.diff for 5.6.2</changelog>
<changelog author="alarrosa@suse.com" date="1505217600">- Enable use_proprietary_codecs when configuring webengine so it uses
  the system ffmpeg binary thus allowing to reproduce html5 videos
  (bsc#1043375).</changelog>
<changelog author="alarrosa@suse.com" date="1506427200">- Unbundle ffmpeg if possible, only support proprietary codecs
  if the system ffmpeg does</changelog>
<changelog author="t.zell@gmx.de" date="1506686400">- Add clip-ft-glyph.diff and harmony-fix.diff .
  Backported fixes to make fonts readable again with FreeType 2.8.1
  (boo#1061344).</changelog>
<changelog author="alarrosa@suse.com" date="1508155200">- Add build-with-libvpx-1.3.diff to let qtwebengine build, using the internal
  libvpx copy in Chromium and an external ffmpeg binary (bsc#1043375).</changelog>

</package>
<package pkgid="58a5fb49fcc0eadd6f1503b83c5a0435ffe2ac497c331bf873ee02ace9636720" name="libqt5-qtwebengine-examples" arch="x86_64">
    <version epoch="0" ver="5.6.2" rel="6.2"/>

<changelog author="tittiatcoke@gmail.com" date="1434974400">- Add patch gcc50-fixes.diff to fix the detection of the GCC 5.x
  compiler. Patch is equal to the one used for Chromium</changelog>
<changelog author="schwab@suse.de" date="1435579200">- gyp-arm64.patch: fix support for aarch64
- gcc50-fixes.diff: also handle gcc &lt; 5</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1439553600">- ExcludeArch:    ppc ppc64 ppc64le
  http://www.chromium.org/blink not ported to PowerPC</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1439726400">- Update to 5.5.0
  * For more details please see:
    http://blog.qt.io/blog/2015/07/01/qt-5-5-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.5
- Enable jsoncpp support on Leap</changelog>
<changelog author="schwab@suse.de" date="1443614400">- gyp-arm64.patch: Update ffmpeg config
- sandbox-linux-arm64.patch: fix chromium build for aarch64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444996800">- Update to 5.5.1
  * For more details please see:
    http://blog.qt.io/blog/2015/10/15/qt-5-5-1-released/</changelog>
<changelog author="mlin@suse.com" date="1449144000">- Do not build on s390 and s390x, chromium have not ported to them</changelog>
<changelog author="mlin@suse.com" date="1452513600">- Do not build on aarch64, gcc 4.8 is too old here</changelog>
<changelog author="alarrosa@suse.com" date="1454500800">- [ECO] Update Qt5 to version 5.5.1 (fate#319961, bnc#964864)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1458302400">- Update to 5.6.0
  * For more details please see:
    http://blog.qt.io/blog/2016/03/16/qt-5-6-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.6
- Drop upstreamed and/or obsolete patches:
  gyp-arm64.patch and sandbox-linux-arm64.patch</changelog>
<changelog author="alarrosa@suse.com" date="1459771200">- Add fix-webrtc-vaddvq_s64.diff . vaddvq_s64 is not defined in the gcc
  version in SLE12 for aarch64, and neither is gcc's builtin used in
  its definition so I decompiled the builtin and replaced the vaddvq_s64
  call with the corresponding assembly instructions so it builds
  correctly.</changelog>
<changelog author="alarrosa@suse.com" date="1460116800">- Updated Qt to 5.6.0, a LTS release (fate#320330)</changelog>
<changelog author="mlin@suse.com" date="1465905600">- Update to 5.6.1 (boo#984605)
  * For more details please see:
    http://blog.qt.io/blog/2016/06/08/qt-5-6-1-released/
  * Drop obsoleted gcc50-fixes.diff</changelog>
<changelog author="alarrosa@suse.com" date="1474459200">- Added 0001-Fix-use-after-free-on-Linux-at-shutdown.patch to fix
  a crash on exit of some applications because a libevent event was
  accessed after it was deleted (bsc#1000168).</changelog>
<changelog author="alarrosa@suse.com" date="1477396800">- Add disable-gpu-when-using-nouveau-boo-1005323.diff. Disables the
  use of the gpu by webengine when the nouveau opengl driver is
  detected since nouveau doesn't support rendering from different
  threads. Also, allows to use two environment variables
  QT_WEBENGINE_DISABLE_GPU to force the disabling of the gpu and
  QT_WEBENGINE_DISABLE_NOUVEAU_WORKAROUND to disable the detection
  of nouveau, just in case someone wants to try with newer nouveau
  releases (boo#1005323, boo#997171).</changelog>
<changelog author="mlin@suse.com" date="1488801600">- Update to 5.6.2 (bsc#1028654)
  * 5.6 bugfix release http://blog.qt.io/blog/2016/10/12/qt-5-6-2-released/
  * Refresh disable-gpu-when-using-nouveau-boo-1005323.diff for 5.6.2</changelog>
<changelog author="alarrosa@suse.com" date="1505217600">- Enable use_proprietary_codecs when configuring webengine so it uses
  the system ffmpeg binary thus allowing to reproduce html5 videos
  (bsc#1043375).</changelog>
<changelog author="alarrosa@suse.com" date="1506427200">- Unbundle ffmpeg if possible, only support proprietary codecs
  if the system ffmpeg does</changelog>
<changelog author="t.zell@gmx.de" date="1506686400">- Add clip-ft-glyph.diff and harmony-fix.diff .
  Backported fixes to make fonts readable again with FreeType 2.8.1
  (boo#1061344).</changelog>
<changelog author="alarrosa@suse.com" date="1508155200">- Add build-with-libvpx-1.3.diff to let qtwebengine build, using the internal
  libvpx copy in Chromium and an external ffmpeg binary (bsc#1043375).</changelog>

</package>
<package pkgid="7c0f3cfb18b7ef9dd672dbda9ce9de467c8a4898481ccb72fb78e3012a0b6091" name="libqt5-qtwebengine-private-headers-devel" arch="noarch">
    <version epoch="0" ver="5.6.2" rel="6.2"/>

<changelog author="tittiatcoke@gmail.com" date="1434974400">- Add patch gcc50-fixes.diff to fix the detection of the GCC 5.x
  compiler. Patch is equal to the one used for Chromium</changelog>
<changelog author="schwab@suse.de" date="1435579200">- gyp-arm64.patch: fix support for aarch64
- gcc50-fixes.diff: also handle gcc &lt; 5</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1439553600">- ExcludeArch:    ppc ppc64 ppc64le
  http://www.chromium.org/blink not ported to PowerPC</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1439726400">- Update to 5.5.0
  * For more details please see:
    http://blog.qt.io/blog/2015/07/01/qt-5-5-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.5
- Enable jsoncpp support on Leap</changelog>
<changelog author="schwab@suse.de" date="1443614400">- gyp-arm64.patch: Update ffmpeg config
- sandbox-linux-arm64.patch: fix chromium build for aarch64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1444996800">- Update to 5.5.1
  * For more details please see:
    http://blog.qt.io/blog/2015/10/15/qt-5-5-1-released/</changelog>
<changelog author="mlin@suse.com" date="1449144000">- Do not build on s390 and s390x, chromium have not ported to them</changelog>
<changelog author="mlin@suse.com" date="1452513600">- Do not build on aarch64, gcc 4.8 is too old here</changelog>
<changelog author="alarrosa@suse.com" date="1454500800">- [ECO] Update Qt5 to version 5.5.1 (fate#319961, bnc#964864)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1458302400">- Update to 5.6.0
  * For more details please see:
    http://blog.qt.io/blog/2016/03/16/qt-5-6-released/
    and https://wiki.qt.io/New_Features_in_Qt_5.6
- Drop upstreamed and/or obsolete patches:
  gyp-arm64.patch and sandbox-linux-arm64.patch</changelog>
<changelog author="alarrosa@suse.com" date="1459771200">- Add fix-webrtc-vaddvq_s64.diff . vaddvq_s64 is not defined in the gcc
  version in SLE12 for aarch64, and neither is gcc's builtin used in
  its definition so I decompiled the builtin and replaced the vaddvq_s64
  call with the corresponding assembly instructions so it builds
  correctly.</changelog>
<changelog author="alarrosa@suse.com" date="1460116800">- Updated Qt to 5.6.0, a LTS release (fate#320330)</changelog>
<changelog author="mlin@suse.com" date="1465905600">- Update to 5.6.1 (boo#984605)
  * For more details please see:
    http://blog.qt.io/blog/2016/06/08/qt-5-6-1-released/
  * Drop obsoleted gcc50-fixes.diff</changelog>
<changelog author="alarrosa@suse.com" date="1474459200">- Added 0001-Fix-use-after-free-on-Linux-at-shutdown.patch to fix
  a crash on exit of some applications because a libevent event was
  accessed after it was deleted (bsc#1000168).</changelog>
<changelog author="alarrosa@suse.com" date="1477396800">- Add disable-gpu-when-using-nouveau-boo-1005323.diff. Disables the
  use of the gpu by webengine when the nouveau opengl driver is
  detected since nouveau doesn't support rendering from different
  threads. Also, allows to use two environment variables
  QT_WEBENGINE_DISABLE_GPU to force the disabling of the gpu and
  QT_WEBENGINE_DISABLE_NOUVEAU_WORKAROUND to disable the detection
  of nouveau, just in case someone wants to try with newer nouveau
  releases (boo#1005323, boo#997171).</changelog>
<changelog author="mlin@suse.com" date="1488801600">- Update to 5.6.2 (bsc#1028654)
  * 5.6 bugfix release http://blog.qt.io/blog/2016/10/12/qt-5-6-2-released/
  * Refresh disable-gpu-when-using-nouveau-boo-1005323.diff for 5.6.2</changelog>
<changelog author="alarrosa@suse.com" date="1505217600">- Enable use_proprietary_codecs when configuring webengine so it uses
  the system ffmpeg binary thus allowing to reproduce html5 videos
  (bsc#1043375).</changelog>
<changelog author="alarrosa@suse.com" date="1506427200">- Unbundle ffmpeg if possible, only support proprietary codecs
  if the system ffmpeg does</changelog>
<changelog author="t.zell@gmx.de" date="1506686400">- Add clip-ft-glyph.diff and harmony-fix.diff .
  Backported fixes to make fonts readable again with FreeType 2.8.1
  (boo#1061344).</changelog>
<changelog author="alarrosa@suse.com" date="1508155200">- Add build-with-libvpx-1.3.diff to let qtwebengine build, using the internal
  libvpx copy in Chromium and an external ffmpeg binary (bsc#1043375).</changelog>

</package>
<package pkgid="a945c571f6902a8a78078c4220da8d8039847c698df9aa6777eade881f9839b0" name="libquadmath0" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="bcc6e98c7993a990c1396c0edc279506ca95aef907929f37ce54966e87617ca1" name="libquadmath0-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="e1cbc523e23dfa9ee2a4fe914aa1a0ad9ec486a199c043257b7d8a7e63ef3900" name="librados-devel" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="ff823f3bfc921e482b27fef73a514e6674cf4b1f813ab5991b460c5394fc7a7e" name="librados2" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="e6c5201aa6454fb756e7f253d991cf673962f7e156a6db790a6d7ab1d3a8f734" name="libradosstriper-devel" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="cca3c6b011eca5016bccaf7bb54f5bb690d58e63355ce83b00bfc5ad3d2ec6c1" name="libradosstriper1" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="fdfa0f496b1d2efdd8b8aa2a6a5d14aa8f06a8932f39e2c49cff63a42f391f17" name="libraw" arch="src">
    <version epoch="0" ver="0.17.1" rel="11.1"/>

<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>

</package>
<package pkgid="18b2b704454a2505fd1c7881ed268913fcbaae144399802788b5b60a1431c200" name="libraw" arch="src">
    <version epoch="0" ver="0.17.1" rel="14.1"/>

<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- security update:
  * CVE-2017-14608 [bsc#1063798]
    + libraw-CVE-2017-14608.patch</changelog>

</package>
<package pkgid="6e4cf641cd484115c7f5a272b53c9ec01bd0ce73a2b0da03f9a1655811354b94" name="libraw" arch="src">
    <version epoch="0" ver="0.17.1" rel="6.1"/>

<changelog author="coolo@novell.com" date="1300017600">- update to 0.13.2
  * This version contains several big changes, improvements and bug fixes:
    New low-level buffering code for Huffman decompression. Canon CR2
    files are opened about 1.5x times faster than on LibRaw 0.12, other
    huffman-comressed files unpacks in 1.2-1.3 times faster.
    Exposure correction code based on linear-cubic root combination.
    Correction range is from 0.25 (-2 stops) to 8 (+3 stops)
    All 0.12.x features, including new cameras support and half-size/green-matching fixes.
    Changes and additions in demosaic-packs:
    Banding suppression code.
    High-frequency noise suppression.
    Green channels local averaging to suppress maze artifacts.
    OpenMP speed-up in median filters and green equilibration.
    Bug fixes and improvements:
    Better parsing of unknown command-line params in dcraw_emu sample
    Brigtness table in ahd_demosaic is calculated in reversed order to prevent
    possible (very unlikely) multithreaded app problem.
    Fixed file extension in half_mt.c sample.
    Fixed incomplete data fields reset in LibRaw::recycle()
    Patches for ./configure system for better LCMS2 support
- now provides shared library</changelog>
<changelog author="Nico.Laus.2001@gmx.de" date="1307880000">- update to 0.13.5
  * Imported new dcraw 9.08/1.443:
    New color data for Canon 600D and 1100D, Fuji S200EXR
    New camera supported: Fuji HS20EXR and F550EXR, Kodak Z990,
    Nikon D5100, Olympus E-PL1s and XZ-1, Samsung NX11,
    Sony A230 and 290.
- update to 0.13.4
  * Imported new dcraw 9.07/1.442:
    support for Canon 600D and 1100D, Hasselblad H4D-60, Olympus E-PL2
  * Color data for Leaf Aptus II and Canon Powershot S2 IS
- update to 0.13.3
  * Preliminary support for Leaf Aptus II cameras (no color data yet):
    Leaf Aptus II 6,7,8,10 and 12 are tested, Aptus II 5 should work.
  * Preliminary support for Fujifilm X100 camera (again, no color data).
  * Fixed possible after the end of buffer read when working with
    in-memory RAW data.
  * Fixed possible loss of JPEG stream sync marks in LJPEG decoder
    (this bug was found only for Leaf Aptus II RAWs).</changelog>
<changelog author="toddrme2178@gmail.com" date="1312891200">- Made html document file non-executable (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>

</package>
<package pkgid="37ff4e5502e640ba18d5257ce1ead6c9a7ef69b978e2759f621438e08480c85b" name="libraw-devel" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="11.1"/>

<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>

</package>
<package pkgid="56f462dbccc05f35122bbdfaeea57dcecd0a956eaf3d6e6cc2f5d9bb43afe0be" name="libraw-devel" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="14.1"/>

<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- security update:
  * CVE-2017-14608 [bsc#1063798]
    + libraw-CVE-2017-14608.patch</changelog>

</package>
<package pkgid="5c7ba45a507df9b2771e94728210ee5702ff76e1827c910db9f0c86bb76b3625" name="libraw-devel" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="6.1"/>

<changelog author="coolo@novell.com" date="1300017600">- update to 0.13.2
  * This version contains several big changes, improvements and bug fixes:
    New low-level buffering code for Huffman decompression. Canon CR2
    files are opened about 1.5x times faster than on LibRaw 0.12, other
    huffman-comressed files unpacks in 1.2-1.3 times faster.
    Exposure correction code based on linear-cubic root combination.
    Correction range is from 0.25 (-2 stops) to 8 (+3 stops)
    All 0.12.x features, including new cameras support and half-size/green-matching fixes.
    Changes and additions in demosaic-packs:
    Banding suppression code.
    High-frequency noise suppression.
    Green channels local averaging to suppress maze artifacts.
    OpenMP speed-up in median filters and green equilibration.
    Bug fixes and improvements:
    Better parsing of unknown command-line params in dcraw_emu sample
    Brigtness table in ahd_demosaic is calculated in reversed order to prevent
    possible (very unlikely) multithreaded app problem.
    Fixed file extension in half_mt.c sample.
    Fixed incomplete data fields reset in LibRaw::recycle()
    Patches for ./configure system for better LCMS2 support
- now provides shared library</changelog>
<changelog author="Nico.Laus.2001@gmx.de" date="1307880000">- update to 0.13.5
  * Imported new dcraw 9.08/1.443:
    New color data for Canon 600D and 1100D, Fuji S200EXR
    New camera supported: Fuji HS20EXR and F550EXR, Kodak Z990,
    Nikon D5100, Olympus E-PL1s and XZ-1, Samsung NX11,
    Sony A230 and 290.
- update to 0.13.4
  * Imported new dcraw 9.07/1.442:
    support for Canon 600D and 1100D, Hasselblad H4D-60, Olympus E-PL2
  * Color data for Leaf Aptus II and Canon Powershot S2 IS
- update to 0.13.3
  * Preliminary support for Leaf Aptus II cameras (no color data yet):
    Leaf Aptus II 6,7,8,10 and 12 are tested, Aptus II 5 should work.
  * Preliminary support for Fujifilm X100 camera (again, no color data).
  * Fixed possible after the end of buffer read when working with
    in-memory RAW data.
  * Fixed possible loss of JPEG stream sync marks in LJPEG decoder
    (this bug was found only for Leaf Aptus II RAWs).</changelog>
<changelog author="toddrme2178@gmail.com" date="1312891200">- Made html document file non-executable (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>

</package>
<package pkgid="0573691462b3efaeb98b94559a871433f18a21ec2e17d267935863dca52550b2" name="libraw-devel-static" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="11.1"/>

<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>

</package>
<package pkgid="a88ea76b37597739ea3f9e84f92a0e027fcbb489b8278665b937247374403c12" name="libraw-devel-static" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="14.1"/>

<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- security update:
  * CVE-2017-14608 [bsc#1063798]
    + libraw-CVE-2017-14608.patch</changelog>

</package>
<package pkgid="4a1c9565af3ec30b10b92d68949796fe0d2e08d95f49a7624b4e8053891a3a29" name="libraw-devel-static" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="6.1"/>

<changelog author="coolo@novell.com" date="1300017600">- update to 0.13.2
  * This version contains several big changes, improvements and bug fixes:
    New low-level buffering code for Huffman decompression. Canon CR2
    files are opened about 1.5x times faster than on LibRaw 0.12, other
    huffman-comressed files unpacks in 1.2-1.3 times faster.
    Exposure correction code based on linear-cubic root combination.
    Correction range is from 0.25 (-2 stops) to 8 (+3 stops)
    All 0.12.x features, including new cameras support and half-size/green-matching fixes.
    Changes and additions in demosaic-packs:
    Banding suppression code.
    High-frequency noise suppression.
    Green channels local averaging to suppress maze artifacts.
    OpenMP speed-up in median filters and green equilibration.
    Bug fixes and improvements:
    Better parsing of unknown command-line params in dcraw_emu sample
    Brigtness table in ahd_demosaic is calculated in reversed order to prevent
    possible (very unlikely) multithreaded app problem.
    Fixed file extension in half_mt.c sample.
    Fixed incomplete data fields reset in LibRaw::recycle()
    Patches for ./configure system for better LCMS2 support
- now provides shared library</changelog>
<changelog author="Nico.Laus.2001@gmx.de" date="1307880000">- update to 0.13.5
  * Imported new dcraw 9.08/1.443:
    New color data for Canon 600D and 1100D, Fuji S200EXR
    New camera supported: Fuji HS20EXR and F550EXR, Kodak Z990,
    Nikon D5100, Olympus E-PL1s and XZ-1, Samsung NX11,
    Sony A230 and 290.
- update to 0.13.4
  * Imported new dcraw 9.07/1.442:
    support for Canon 600D and 1100D, Hasselblad H4D-60, Olympus E-PL2
  * Color data for Leaf Aptus II and Canon Powershot S2 IS
- update to 0.13.3
  * Preliminary support for Leaf Aptus II cameras (no color data yet):
    Leaf Aptus II 6,7,8,10 and 12 are tested, Aptus II 5 should work.
  * Preliminary support for Fujifilm X100 camera (again, no color data).
  * Fixed possible after the end of buffer read when working with
    in-memory RAW data.
  * Fixed possible loss of JPEG stream sync marks in LJPEG decoder
    (this bug was found only for Leaf Aptus II RAWs).</changelog>
<changelog author="toddrme2178@gmail.com" date="1312891200">- Made html document file non-executable (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>

</package>
<package pkgid="958120f5b1de4bd3e370bf40c421d742a670c3c76a173d66017d5a2ab5e83327" name="libraw-tools" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="11.1"/>

<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>

</package>
<package pkgid="7971424ef896f1ebf70cf5a3bea332ce1fe6fbc12b17784e4bbfa485eb4ab785" name="libraw-tools" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="14.1"/>

<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- security update:
  * CVE-2017-14608 [bsc#1063798]
    + libraw-CVE-2017-14608.patch</changelog>

</package>
<package pkgid="a9775bab8d43bd62adcc9a9d239ceabed363352a83c777683a8b5e5115366c8e" name="libraw-tools" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="6.1"/>

<changelog author="coolo@novell.com" date="1300017600">- update to 0.13.2
  * This version contains several big changes, improvements and bug fixes:
    New low-level buffering code for Huffman decompression. Canon CR2
    files are opened about 1.5x times faster than on LibRaw 0.12, other
    huffman-comressed files unpacks in 1.2-1.3 times faster.
    Exposure correction code based on linear-cubic root combination.
    Correction range is from 0.25 (-2 stops) to 8 (+3 stops)
    All 0.12.x features, including new cameras support and half-size/green-matching fixes.
    Changes and additions in demosaic-packs:
    Banding suppression code.
    High-frequency noise suppression.
    Green channels local averaging to suppress maze artifacts.
    OpenMP speed-up in median filters and green equilibration.
    Bug fixes and improvements:
    Better parsing of unknown command-line params in dcraw_emu sample
    Brigtness table in ahd_demosaic is calculated in reversed order to prevent
    possible (very unlikely) multithreaded app problem.
    Fixed file extension in half_mt.c sample.
    Fixed incomplete data fields reset in LibRaw::recycle()
    Patches for ./configure system for better LCMS2 support
- now provides shared library</changelog>
<changelog author="Nico.Laus.2001@gmx.de" date="1307880000">- update to 0.13.5
  * Imported new dcraw 9.08/1.443:
    New color data for Canon 600D and 1100D, Fuji S200EXR
    New camera supported: Fuji HS20EXR and F550EXR, Kodak Z990,
    Nikon D5100, Olympus E-PL1s and XZ-1, Samsung NX11,
    Sony A230 and 290.
- update to 0.13.4
  * Imported new dcraw 9.07/1.442:
    support for Canon 600D and 1100D, Hasselblad H4D-60, Olympus E-PL2
  * Color data for Leaf Aptus II and Canon Powershot S2 IS
- update to 0.13.3
  * Preliminary support for Leaf Aptus II cameras (no color data yet):
    Leaf Aptus II 6,7,8,10 and 12 are tested, Aptus II 5 should work.
  * Preliminary support for Fujifilm X100 camera (again, no color data).
  * Fixed possible after the end of buffer read when working with
    in-memory RAW data.
  * Fixed possible loss of JPEG stream sync marks in LJPEG decoder
    (this bug was found only for Leaf Aptus II RAWs).</changelog>
<changelog author="toddrme2178@gmail.com" date="1312891200">- Made html document file non-executable (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>

</package>
<package pkgid="86fc197871431477603d1cf0db737771140b0b15e0c0b55cc5ecb06e3ade3498" name="libraw15" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="11.1"/>

<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>

</package>
<package pkgid="e3fb3b56ab18a8bce9f800201b7886b80cb92be285f7d8275280a55ac3e4b75d" name="libraw15" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="14.1"/>

<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>
<changelog author="pgajdos@suse.com" date="1506340800">- do not patch dcraw.c, we do not compile it
  . drop libraw-CVE-2017-6890,6899.patch
  . amend libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506340801">- security update:
  * CVE-2017-14265 [bsc#1060163]
    + libraw-CVE-2017-14265.patch</changelog>
<changelog author="pgajdos@suse.com" date="1506427200">- security update:
  * CVE-2017-13735 [bsc#1060321]
    + libraw-CVE-2017-13735.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- security update:
  * CVE-2017-14608 [bsc#1063798]
    + libraw-CVE-2017-14608.patch</changelog>

</package>
<package pkgid="1468d450a9268bcb9db741d01415e3fb11dd4ac1870c183ac16cb3af5ca4a1c9" name="libraw15" arch="x86_64">
    <version epoch="0" ver="0.17.1" rel="6.1"/>

<changelog author="coolo@novell.com" date="1300017600">- update to 0.13.2
  * This version contains several big changes, improvements and bug fixes:
    New low-level buffering code for Huffman decompression. Canon CR2
    files are opened about 1.5x times faster than on LibRaw 0.12, other
    huffman-comressed files unpacks in 1.2-1.3 times faster.
    Exposure correction code based on linear-cubic root combination.
    Correction range is from 0.25 (-2 stops) to 8 (+3 stops)
    All 0.12.x features, including new cameras support and half-size/green-matching fixes.
    Changes and additions in demosaic-packs:
    Banding suppression code.
    High-frequency noise suppression.
    Green channels local averaging to suppress maze artifacts.
    OpenMP speed-up in median filters and green equilibration.
    Bug fixes and improvements:
    Better parsing of unknown command-line params in dcraw_emu sample
    Brigtness table in ahd_demosaic is calculated in reversed order to prevent
    possible (very unlikely) multithreaded app problem.
    Fixed file extension in half_mt.c sample.
    Fixed incomplete data fields reset in LibRaw::recycle()
    Patches for ./configure system for better LCMS2 support
- now provides shared library</changelog>
<changelog author="Nico.Laus.2001@gmx.de" date="1307880000">- update to 0.13.5
  * Imported new dcraw 9.08/1.443:
    New color data for Canon 600D and 1100D, Fuji S200EXR
    New camera supported: Fuji HS20EXR and F550EXR, Kodak Z990,
    Nikon D5100, Olympus E-PL1s and XZ-1, Samsung NX11,
    Sony A230 and 290.
- update to 0.13.4
  * Imported new dcraw 9.07/1.442:
    support for Canon 600D and 1100D, Hasselblad H4D-60, Olympus E-PL2
  * Color data for Leaf Aptus II and Canon Powershot S2 IS
- update to 0.13.3
  * Preliminary support for Leaf Aptus II cameras (no color data yet):
    Leaf Aptus II 6,7,8,10 and 12 are tested, Aptus II 5 should work.
  * Preliminary support for Fujifilm X100 camera (again, no color data).
  * Fixed possible after the end of buffer read when working with
    in-memory RAW data.
  * Fixed possible loss of JPEG stream sync marks in LJPEG decoder
    (this bug was found only for Leaf Aptus II RAWs).</changelog>
<changelog author="toddrme2178@gmail.com" date="1312891200">- Made html document file non-executable (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="idonmez@novell.com" date="1314187200">- Stop using _service files</changelog>
<changelog author="dimstar@opensuse.org" date="1331726400">- Add libraw-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="lists.nico.k@googlemail.com" date="1342008000">- update to 0.14.7
  * Imported dcraw 9.15 (1.449):
  - New cameras supported: Canon 5D Mark III, G1 X, 1D X and
    Powershot SX200; Nikon D4,D800/D800E and D3200; Fuji X-S1 and
    HS30EXR; Casio EX-Z8; Olympus E-M5; Panasonic GF5;
    Sony NEX-F3, SLT-A37 and SLT-A57; Samsung NX20 and NX210;
  - Support for updated Samsung NX200 firmware.
  * Makefile.msvc: easy additional compiler flag editing.
- update to 0.14.6
  * Casio EX-Z500 support
  * (possible) I/O exceptions on file open catched in
  open_datastream
  * Fixed possible read-after-buffer in Sony ARW2 decoder
  * Fixed mingw32 errors when compiling LibRaw_windows_datastream
  * Makefile.msvc: support of OpenMP and LCMS (uncomment to use)
  * Fixed decoding of some Leaf Aptus II files
- update to 0.14.5
  * Fixed bug (uninitialized variable) in SMAL format decoding.
  * Imported new dcraw 9.12 (1.446): support for Leica V-LUX 3,
  updated color data for Canon S100, Fujifilm X10, Nikon 1 J1/V1,
  Panasonic GX1, Samsung NX200, Sony NEX-7
- update to 0.14.4
  * Fixes to Panasonic/Leica file parser to prevent crash on
  broken jpegs.
  * Fixes to include order in src/libraw_datastream.cpp to better
  compile with KDEWIN
  * Floating-point DNGs are rejected on early processing stage.
  * Support for new cameras: Canon S100, Fuji X10, Panasonic GX1,
  Samsung NX200, Sony NEX-7.
- update to 0.14.3
  * Bug fixes in black level subtraction code for PhaseOne files
  * New API call LibRaw::get_internal_data_pointer() for developers
  who need access to libraw_internal_data fields
  (i.e. Fuji SuperCCD layout).
  * doc/API-overview fixes to reflect 0.14 changes
- update to 0.14.2
  * Fixed bug in Canon 1D and 1Ds files decoding.
  * New decoder information bit DECODER_HASRAWCURVE
- update to 0.14.1
  * Imported dcraw 9.11/1.445:
  - Support for new cameras added: Fujifilm F600EXR, Nikon P7100,
    Olympus E-PL3 and E-PM1, Panasonic DMC-FZ150, Sony NEX-5N,
    A65 and A77.
  - Updated color data for: Olympus E-P3, Panasonic G3 and GF3,
    PhaseOne H25, P40 and P65, Sony NEX-C3, NEX-5, NEX-3, A35
    and A55.
  - Support for dark frame extraction on Sony cameras.
  * DCB demosaicing: reserving 6 pixels instead of 3 to suppress
  colored image frame.
- update to 0.14.0
  * Multiple rendering (LibRaw::dcraw_process() calls) allowed
  without re-opening RAW file thrfough the sequence of
  open()/unpack() calls.
  You should be able to change any processing parameters
  (except shot_select parameter) between dcraw_process() calls.
  - New sample in samples/multirender_test.cpp: renders data 4 times:
    in half and full modes with different white balance settings.
  - Unprocessed RAW data is stored in separate data buffer:
    (2 bytes per pixel for all Bayer-pattern images, 8 bytes per
    pixel for Foveon, sRAW, and other full-color raw formats),
    so now LibRaw uses 25% more memory for full processing of
    most common Bayer images; while for just unpack memory is
    reduced 4 times.
  - New call LibRaw::raw2image() fills imgdata.image array with
    fresh copy of data. There is no need to call raw2image()
    separately if you use dcraw_process() or
    dcraw_document_mode_processing() calls.
  - New call LibRaw::get_decoder_info() to determine raw data
    storage layout. See samples/unprocessed_raw.cpp for an example
    of how to use it.
  - New call LibRaw::free_image(), deallocates imgdata.image buffer.
    Use this call if current postprocessing results are not needed,
    but it is to early to call recycle() because dcraw_process()
    may be called later.
  - New C-API calls
    libraw_raw2image() - C API for LibRaw::raw2image()
    libraw_free_image() - C API for LibRaw::free_image()
    libraw_get_decoder_info() - C API for LibRaw::get_decoder_info()
  If your code uses usual open()/unpack()/dcraw_process() call
  sequence, then NOTHING CHANGED: your program should produce
  same results. For interactive programs you may skip open()/unpack()
  calls after adjusting processing parameters, so user should see
  image refreshed much faster.
  If your code uses raw data (open+unpack calls), you need to call
  LibRaw::raw2image(), and imgdata.image will contain same bitmap
  as in LibRaw 0.13.x
  If you code uses access to masked borders data, you need to
  rewrite it. See samples/unprocessed_raw.cpp as a sample.
  * Other changes:
  - No separate imgdata.masked_pixels buffers, Bayer raw formats
    are read to buffer with borders.
    So, no ugly add_masked_border_to_bitmap() call.
  - No filtering_mode parameter. Raw tone curve is applied at
    unpack() stage; zero pixels removed on postprocesing stage.
  - unprocessed_raw and 4colors samples are adjusted to use new
    RAW data storage layout.
  - OpenMP speedup of postprocessing steps (up to 50% for half
    mode and 4-core machine)
  - Most of LibRaw_datastream function bodies are moved to
    separate source file
  - LibRaw_windows_datastream is merged to main source tree
  - Imported dcraw 9.10 (1.444), support for new cameras added:
    ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
    Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  - Support for RedOne digital movie cameras (R3D format).
    To enable this support you need to:
  * install libjasper JPEG2000 support library
  * compile LibRaw with -DUSE_JASPER compiler switch
    (./configure will do it for you)
  * If you use own LibRaw_datastream implementation, you should
    implement make_jas_stream() call for your datastream. See
    bottom of src/libraw_cxx.cpp for implementations in datafile
    and mem-buffer LibRaw streams.
  - Bugfix: green matching is turned off if output image is
    shrinked due to wavelet filtering or aberration correction.
  - Removed imgdata.sizes.bottom_margin and right_margin data
    fields use imgdata.sizes.raw_width - width - left_margin to
    get right one, the same with bottom_margin.
  - Minor ./configure cleanup
  - Qmake files and Visual Studio Project files are updated.
  - New version check macroses.
  - Documentation changed to reflect 0.14 changes.
  - Removed LibRaw::rotate_fuji_raw() call and corresponding
    C-API call.
  - The LibRaw::adjust_sizes_info_only() call may be called
    repeated and mixed with dcraw_process() calls.
  - Postprocessing speedup and optimization, especially
    if cropping set.
  - Cropping works for FujiCCD raws. For the technical reasons,
    the position of top-left corner of crop area will be rounded
    to the nearest multiple of 4 (the corner is shifted top-left).
  - New sample samples/postprocessing_benchmark.cpp This sample
    measures postprocessing speed. All demosaic methods, averaged
    white balance, median filtering, wavelet filtration, highlight
    recovery, and cropping are supported.
  * all client code should be recompiled due to internals change.
- update to 0.13.8
  * Imported dcraw 9.10 (1.444), support for new cameras added:
  ARRIRAW format, Canon SX30 IS, Leica D-LUX 5 and V-LUX2,
  Olympus E-P3, Panasonic G3 and GF3, Sony NEX-C3 and SLT-A35
  * Bugfix: green matching is turned off if output image is
  shrinked due to wavelet filtering or aberration correction.
- update to 0.13.7
  * Changes in cropping code:
  - cropping is now works for Fuji files (instead of crash)
  - bad pixels map and dark frame subtraction is turned off if
    cropping enabled
  - for technical reasons, coordinates of top-left corner of crop
    box are rounded to multiple of 4 for Fuji files.
  * ./configure stuff fixes:
  - install static libraries only when --enable-static is set
  - compiled samples are dynamically linked if shared library not
    disabled.
  * OpenMP enabled for Visual Studio 2008 SP1+, but not for RTM
- update to 0.13.6
  * Cosmetic cleanup in Libraw_memmgr code
  * Permit OpenMP support on MS VS2008
  * More general mem_image interface:
  - New call get_mem_image_format returns bitmap size and bit depth
  - New call copy_mem_image can copy bitmap into buffer with
    different color order (RGB/BGR) and line stride
  - dcraw_make_mem_image() uses calls mentioned above
  - see documentation for info on these function parameters.
  * libraw/librawwindows.h implements LibRaw_datastream class based
  on Windows memory mapped files.Win32/64-only Thanks to
  Linc Brookes.
  * Fixed parallel make errors in configure/Makefile.am</changelog>
<changelog author="jengelh@inai.de" date="1357819200">- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -&gt; libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files</changelog>
<changelog author="jengelh@inai.de" date="1370952000">- Update to new upstream release 0.15.2
  * Fixed possible double-free() on error recovery on damaged
  full-color (Foveon, sRAW) files. (CVE-2013-2126, bnc#822665)
  * fixed wrong data maximum calculation for Panasonic files
  * check for possible buffer overrun in exposure correction code
  (CVE-2013-2127, bnc#822665)
- Add 0001-build-fix-return-of-random-data.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- remove libraw-gcc27.patch, it is upstreamed yet</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 0.15.3:
  * New camera/format support:
    OmniVision OV5647 (Raspberry Pi)
    Nikon D5200
    Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.</changelog>
<changelog author="pgajdos@suse.com" date="1378728000">- updated to 0.15.4:
    Additional checks to data to prevent broken file opening
    New camera/format support:
    Richon GR
    Panasonic LF1
    Canon EOS 70D
    Sony RX100II, RX1R
    Olympus E-P5</changelog>
<changelog author="pgajdos@suse.com" date="1391083200">- updated to 0.16.0:
  * removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)</changelog>
<changelog author="pgajdos@suse.com" date="1431345600">- updated to 0.16.1:
  * Fix for dcraw ljpeg_start() vulnerability.</changelog>
<changelog author="jengelh@inai.de" date="1433592000">- Update to new upstream release 0.16.2
  * Fixed several bugs detected by running American Fuzzy Lop.</changelog>
<changelog author="jengelh@inai.de" date="1447416000">- Update to new upstream release 0.17.0
  * Fixed dcraw.c ljpeg_start possibly buffer overrun
  * C API extension to support 3DLut Creator
  * More metadata parsing/extraction: XMP packet extracted (if
  exists), DNG Color information parsed, GPS data (partially)
  parsed, EXIF/Makernotes parsed for used optics (for both RAW
  files and DNG converted by Adobe convertor).
  * Exif/Makernotes parser callback (called for each processed tag)
  * Sony ARW2.3 decoder: params.sony_arw2_hack removed, decoded data
  are always in 0...17k range (note the difference with dcraw!);
  Additional processing options for Sony lossy compression techincal
  analysis.
  * Dcraw 9.26 imported (but some changes not approved because Libraw
  does it better) with some exceptions: no Pentax K3-II frame
  selection code; and no built-in JPEG decompressor.
  * Many improvements in data decoding/processing: Correct decoding
  of black level values from metadata for many formats, LibRaw does
  not rely on hardcoded black levels.
  * 224 camera models added to supported camera list. Some of them are
  new (released since LibRaw 0.16 come out), some was supported
  before, but missed from the list.
  * Fujifilm F700/S20Pro second frame support
- Add retval.diff to resolve new compiler warnings</changelog>
<changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.17.1:
  * fixed two errors found by fuzzer (CVE-2015-8367)
  * phase_one_correct always returns value; handle P1 return codes
  in postprocessing
- removed upstreamedretval.diff</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
<changelog author="pgajdos@suse.com" date="1495540800">- security update:
  * CVE-2017-6890 [bsc#1039209]
  * CVE-2017-6899 [bsc#1039210]
    + libraw-CVE-2017-6890,6899.patch
  * CVE-2017-6887 [bsc#1039379]
  * CVE-2017-6886 [bsc#1039380]
    + libraw-CVE-2017-6887,6886.patch</changelog>
<changelog author="pgajdos@suse.com" date="1505476800">- security update:
  * CVE-2017-14348 [bsc#1058467]</changelog>

</package>
<package pkgid="346e02a92a20d8135d4da2c6690180b7f1fc1fac254e0dcc4d7ab147309fed94" name="librbd-devel" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="dddaec10d04fd750ba3c0d7de028c3a786b29c2ffba7a7ef127dee6c16e84fda" name="librbd1" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="df4d36a1d66c80f369337b0d5b1e252a59dc4877ad3c4991446baafddb01fcbd" name="libreoffice" arch="src">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="463a23a17d5ab88cbdaddc1c9192f42d6ad9fdc3014af96c151217a1ee366105" name="libreoffice" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="ec063ef2a2a1d9731879f67ebdfb45c228c008ea14b3c3e26968973f3c24d7f8" name="libreoffice-base" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="8ec2f07a888884dd11b812477837b11e9bda1f19126d3fe609772a869a279377" name="libreoffice-base-drivers-mysql" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="a49e1888b0748833e8111b6e78691c3f99d4b5d276f28d44c091db632656c1e7" name="libreoffice-base-drivers-postgresql" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="bfa6de0c55c1fc9fe715f6747d218306d5e4f46fb392fd114bc730721ccfff80" name="libreoffice-branding-upstream" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="06dde7b5d1814cb704cf83271608e81f229d74f739943a21d098b01193f6b971" name="libreoffice-calc" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="4df0bd1f6a119fbf7d6401ab109b1cdbd46b77f90dfc37b209cc04d120a65ce4" name="libreoffice-calc-extensions" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="18849895c95d99d9157f4eec707426963f22cb069e1c7d165cb2a0ff40884606" name="libreoffice-draw" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="48d609a52a8359766b1410d23fc2af721fc1fc584195cb8e0c4f147f12f93d85" name="libreoffice-filters-optional" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="7297356014b4e43f0f6d7fe64a8db4bc1aceba410e31d9ad33d0a2b8a6511b99" name="libreoffice-gdb-pretty-printers" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="c14f1d57e4e4e11854d5fb411f6321da2ca029f26a7e140b3d240a2bb078ca3d" name="libreoffice-glade" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="ab66ee2e0c961c7234ea4e26de643d298fe38f99747846d2621940f9741d47e9" name="libreoffice-gnome" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="b6e4231a0bfa1d367a9d966aeb5094dc2767324ba50f1c7e633906583ebbd83a" name="libreoffice-gtk3" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="73bbc3424e93f473bec2c8faa8af6966aa481ba027be1b8d3d88a8232b791dad" name="libreoffice-icon-theme-breeze" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="8dfcef34234535a2545970c5e4fe8a35bdcb5bd511d670a99465b8d9b80b7fde" name="libreoffice-icon-theme-galaxy" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="2bf859545ea9927ab756f69a1b7587f150500818e17ea8555af495d389ce0016" name="libreoffice-icon-theme-hicontrast" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="fa46c4301deab4e4ce0014fb32b601ed255f65510f6bcc76ee9b299d28339e5c" name="libreoffice-icon-theme-oxygen" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="4d23e2d07ff4b0aae0b26ad3c000322fbd0352118560a5cad96aa67287f37dab" name="libreoffice-icon-theme-sifr" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="c97fdf67cb2ee9632f67a978cdc8d5707c24d9983ed95d5cabfdd4b49c9f078a" name="libreoffice-icon-theme-tango" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="7344b249e1670d5a43806a9e20c6a971d3f44b06b044834accc2c34eec854d8a" name="libreoffice-impress" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="7c8933a56a986854b7835f51820dea51c2bc72386e8c6c05f93f5c4d33bc6d7f" name="libreoffice-kde4" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="1819e0e2f07a2b02c61b78f7ceddecc88d8b685fc5f2b9be9554e5cd5ff11499" name="libreoffice-l10n-af" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="e4aa22e72e3b45dd84357033e6bab40ddbccc883df4faa36b709de35a6a6a46b" name="libreoffice-l10n-ar" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="81953feacb00f5738b2530c3e1bf8687f98106e2d0fa40647eacfa3b9e3be8e3" name="libreoffice-l10n-as" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="48d91883e36d37ba543e97e11ecf533cc36801af0162c0e177202bf6965d34db" name="libreoffice-l10n-bg" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="2846e66786fb4ef9cffad9be056bf9b6ed024ae65fd663b2424391652946246d" name="libreoffice-l10n-bn" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="0f3091f7460f40e1e91db54d5983e923a085f6b284f87efbbd4f44529d7600b4" name="libreoffice-l10n-br" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="ffe719d718a48c9a94fd15cb4bc78ddb3f9617b4b6c1d84fe3ceefc1665f12fe" name="libreoffice-l10n-ca" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="9eb3ee31090934c7261e1d8afacf618feab1c47251af70f886f918a281c9e0b3" name="libreoffice-l10n-cs" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="7257738e9e521fd8fde3223ba4c78b3e6e9b692a6427c22a3381acfc71cf5d4e" name="libreoffice-l10n-cy" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="37c062070199002c554be3ead68b89e399748038a63c350f779324919ca67923" name="libreoffice-l10n-da" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="82424e072bc907821c5925e3cccc1f7f5eafa5fffc10ff8fd20e65a18dc78da9" name="libreoffice-l10n-de" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="d373c20b5043ad34480d82699b6ac59f80a3ab2c53eb223afd17253403ac859e" name="libreoffice-l10n-dz" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="f2f800580bd5befa057851272edf686a3960b82dd8462731b15c75aed75707aa" name="libreoffice-l10n-el" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="5b507189bd179128d29cd274e57c91398af382e4e8239720e9a3bb5376405643" name="libreoffice-l10n-en" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="2b525bee36f778f6dafca776e366d8b547ffc5ba1db1490ca70b677310063191" name="libreoffice-l10n-es" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="c177f0f780c338fb1caa449c796a0557acc8616728983a535baf77e27f7c75bd" name="libreoffice-l10n-et" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="2948ef20f66f82f7e4bc16180d05d0e0ac0862a5c1554036244157e646ae018d" name="libreoffice-l10n-eu" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="a5f88b3353643a191245a40148864b888c5aef6695ec94a41307027c9e005b5a" name="libreoffice-l10n-fa" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="f00212a47396f82cdf95bff7e1fd59c3bb6796964ee2d7d797e0220dd0fbf692" name="libreoffice-l10n-fi" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="cb6675af2f527e373c52005ac62331bef8d7b59b429ed8821ffd91ad0395fc1d" name="libreoffice-l10n-fr" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="2a714c952d3f3bda24212692cacc3f9be0d77a6d0ecea33dcc255279ba1ff489" name="libreoffice-l10n-ga" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="daa80c91b91bcdf3839e2b3ece3ecac25423ca463b77d8cafee4205816d9867e" name="libreoffice-l10n-gl" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="09d4d062ca0f6416c0759d937d4c83086fca53b16e09fc91b0f2fcc02f8bcfd1" name="libreoffice-l10n-gu" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="f0ce48855b7f45cd75644e1c23ebe34e93c0b5eed92f0c2e3d01b517ca6e3f3b" name="libreoffice-l10n-he" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="fddb4197604a9b126fc24ea53d655a9c71464ac9c23e50af32e7eb2f47d92825" name="libreoffice-l10n-hi" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="9866a8ba0e6f7c4544e9acd9308cd54a034c16a75f1da7b5059dd1364dca20e1" name="libreoffice-l10n-hr" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="fef0929405d7e465fd9d32a96c1cb100698b282ca94225b7c7b7d9a3828e7e7b" name="libreoffice-l10n-hu" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="8466345408c088dc652356ce2b903b8c5c35256fa190fab000c0ef0a75756892" name="libreoffice-l10n-it" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="d3a5fb1f9b21d51f8917521850b34a6d6ef702242142da843a258726d886e238" name="libreoffice-l10n-ja" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="bd0cdacfab5d168e501a59b83e1d74f4aa6a3db0970ff944aae6e97004cfae76" name="libreoffice-l10n-kk" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="eb85b65802868928afd5a3b1a1fc03722b518e11a7d2a25692ca3f1cbc3ba2ca" name="libreoffice-l10n-kn" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="bc7025033c0a2ad640e3cbe8eceddcc0f037915472187e5b9de768a107abc35d" name="libreoffice-l10n-ko" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="ed151d971984cf9aae1c0479304ab424909a08fb5ff70bfad706869e3cdf0f3f" name="libreoffice-l10n-lt" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="9225437002d462452b6cc4adf9db12c8aa1efa8abe341ca929ff945a68cb6081" name="libreoffice-l10n-lv" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="364dd21cfa70e32dd830f81bbc8826267642b0b3f5df95ffbf81e8f509911ab5" name="libreoffice-l10n-mai" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="185e8137aa58d9d7f565935bb81dadb8d147f4cc3908472159ff5cba5e8632f9" name="libreoffice-l10n-ml" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="4c24e7f226940ced4f43657ed96d8c5b331825ea7c065a0bf3756a40d5c9cbf3" name="libreoffice-l10n-mr" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="cf63983c854ae6ae58a643d9d35262fcdcb717c66fabf451ac56ee176d6e9d49" name="libreoffice-l10n-nb" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="0fa6c478afb358fe0498db79819c92fb0234e07989ba006090fbb2547325d269" name="libreoffice-l10n-nl" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="62a5a0de0b18e99eb72c88796a373e39bccd81245007fa5f04f66af59b941868" name="libreoffice-l10n-nn" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="822f9a2c73039650fec8f139c2b738de46270f712821e68a76352a1f22bedf66" name="libreoffice-l10n-nr" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="119c5008ab89d26ab0b6f70d0fafeee680c5d012559905182c5ffa7b647eb043" name="libreoffice-l10n-nso" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="22c8739e84e991d5696528221387d426e1809bf2be80722df1f3294fa2683fdf" name="libreoffice-l10n-or" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="934c1aef3d44e49242a05fb21fe1e7cf43ae04af2c53ff89531bf527cee16400" name="libreoffice-l10n-pa" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="e85efe8472d6b5155436d59bb3f31dbaa5e4f052153c6013293d14ebc30cca0d" name="libreoffice-l10n-pl" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="d0db14def620648c2092977241488d04d694d2f44c34545357d8fb1e7120ed31" name="libreoffice-l10n-pt_BR" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="d0a20bdae8247d2d3d7632cefd3a8090ec24f966aa51c0d23ddad7e963b86fa8" name="libreoffice-l10n-pt_PT" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="399d22b5271e1932fd08502efc5069ca0d503f00db61793425772894c4fe0ff0" name="libreoffice-l10n-ro" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="18bc88e98353faee069b24f7b435880ac35779c13ae5cd4f71b2f7c86a0662f3" name="libreoffice-l10n-ru" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="202d82ea7eb2d66a7340fe42357f5f28655ecc7f280cbe4fd2238c17788fd9f3" name="libreoffice-l10n-si" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="2a2d1bc512ae93965939200ab78971495216a926d89405355f52748e10184461" name="libreoffice-l10n-sk" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="015b72f3013036af0bb25c57155a379d8536ec7ba01f10003f7a63eb8696c8ad" name="libreoffice-l10n-sl" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="3656cd0a64344e240cb3e0418bd89ee51428cd19db05027430cbf76114ae6b29" name="libreoffice-l10n-sr" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="fcbb9212f23fb2487910c0c8c290463bd717f2e251afc18918f6c434e13cc8d1" name="libreoffice-l10n-ss" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="bda37b0b480f279b792262a7eb285e7a9bb61d0840f1d29e8e01503293391d2a" name="libreoffice-l10n-st" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="9ffdc121095ceeee1e3e0cffe7299480f3898d6d6469df3390b7264ac17fb467" name="libreoffice-l10n-sv" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="86dc0b5650e39ee57d8043355c9bc8bfc7dc0c15aadd42a570879dcc51aa8e7f" name="libreoffice-l10n-ta" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="ec2f48d8953c79e9621f8cd3fa3a465219b588749b402ca0772c63cec880331b" name="libreoffice-l10n-te" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="e9e09854b7575c0ca37ea7c9c449e4a5bbb7f7007cf1e6ee1ef13882cd8614b4" name="libreoffice-l10n-th" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="58f07035587b2f77bc93a2091cf043881c887fd8d7192a364e7ffdc0803c17f2" name="libreoffice-l10n-tn" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="7994077944c745eecb92ad187d556d23e41cc3fd8207d511822faf4d14fe4df1" name="libreoffice-l10n-tr" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="86c1627e43818cec550c31a283f6171df12078df56969fecf3b8e4ca3fbd1f56" name="libreoffice-l10n-ts" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="0f7491b616ee73c99a4d0b9b9d166f9d33eef30c2e44fc54d81528e5b148e168" name="libreoffice-l10n-uk" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="1afe1cf3085fe8ea7a859032f45e802dbdafe6db6e39a2b0e426116ac7d8b31b" name="libreoffice-l10n-ve" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="a7c416a67ccadd5a341d6ec0d7fe0eff0faaf64c93ebccd08c94a0c5bb7da6e4" name="libreoffice-l10n-xh" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="e2755b96dca57416f632e3b42d2c42887efcb8d19e795568654494a1637d70e4" name="libreoffice-l10n-zh_CN" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="9d31815953b898c8716ce439c72dcf7dfd34d2e2e39762ba59f1c2f246d59783" name="libreoffice-l10n-zh_TW" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="aeb813e1fb45e7a7dba272a6cf4803e64bae090034a8d3681b34c06252a5c267" name="libreoffice-l10n-zu" arch="noarch">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="d6b445fe4c7cfcba7ccc01f2bd341b2b7f19b90c22e2a471423041b7732417dc" name="libreoffice-mailmerge" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="87dd96ba493b41c6b3dceed720312326fc7adf6f29bdcb70d939286a979b876d" name="libreoffice-math" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="9820be2d28677f044ebee1e62d040d40b09eb71276b5937dd92dc43bc2806ec9" name="libreoffice-officebean" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="4dae6bf1c84195cff2d122b03b6655dcd93052eb8d32a6f15db60dd1c014dbad" name="libreoffice-pyuno" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="52bb1a616b53ad12e3356f724fbff4e2b6a71e0ccf3acb2734bda025c0cfb204" name="libreoffice-sdk" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="2f95a02d8cb669da43d6b572669ddd8d5896ae07b88dd08f1260af9367df5565" name="libreoffice-sdk-doc" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="5b89942c3657af01c4fc1484f3cf621a385f6862450750112a6de0d6e7c96a46" name="libreoffice-writer" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="0248752854b7168b2db727d908aa96dd1bc744f129777ebc23fd3b8f2ebd8980" name="libreoffice-writer-extensions" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="dbcd7127a0b13d01edeb12af3aaccbd5d6a1caaead9419af62046d5d6bc92431" name="libreofficekit" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="5f1291f8dcd671af2b9fe855a54c3122a6b118ae15781b7cc5b7a7f0636aabf3" name="libreofficekit-devel" arch="x86_64">
    <version epoch="0" ver="5.3.5.2" rel="3.4"/>

<changelog author="tchvatal@suse.com" date="1487073600">- Fixup pyuno loading as it broke when we dropped the uno patch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1487246400">- bypass upstream bug for aarch64 and ppc64/ppc64le
  https://bugs.documentfoundation.org/show_bug.cgi?id=105519
  removing some fods data files source of test failure.</changelog>
<changelog author="tchvatal@suse.com" date="1488196800">- Version update to 5.3.1.1:
  * RC1 of 5.3.1 release containing various bugfixes
- Drop upstreamed patch 0001-unixODBC-changed-soname-to-.2-so-reflect-it.patch</changelog>
<changelog author="mgorse@suse.com" date="1489147200">- Add gi-annotation-syntax.patch: the (allow-none) annotations
  weren't being parsed, leading to breakage on SLE (bsc#1028817)</changelog>
<changelog author="mgorse@suse.com" date="1489406400">- Fix syntax error in 0001-allow-none-gi-support.patch
  (bsc#1028817).</changelog>
<changelog author="tchvatal@suse.com" date="1489838400">- Version update to 5.3.1.2:
  * official 5.3.1 release</changelog>
<changelog author="tchvatal@suse.com" date="1490875200">- Version update to 5.3.2.1:
  * RC1 of the 5.3.2 release</changelog>
<changelog author="tchvatal@suse.com" date="1491480000">- Version update to 5.3.2.2:
  * bsc#1034329 CVE-2017-7882
  * RC2 for the 5.3.2 release</changelog>
<changelog author="andras.timar@collabora.com" date="1492516800">- Fixed bnc#959926 LO-L3: Text not rotated properly in LO Impress tables
  * bnc959926-Implement-text-rotation-for-Impress-table.patch</changelog>
<changelog author="tchvatal@suse.com" date="1493035200">- Provide and obsolete the help packages wrt bsc#1035087</changelog>
<changelog author="tchvatal@suse.com" date="1493726400">- Version update to 5.3.3.1:
  * Also contians fix for bsc#1036975 CVE-2017-8358
  * Various fixes in 5.3 branch for rc1 of 5.3.3</changelog>
<changelog author="tchvatal@suse.com" date="1494504000">- Version update to 5.3.3.2 fate#323270:
  * Update to 5.3.3 release containing bunch of additional fixes
- Add direct dep on harfbuzz-icu</changelog>
<changelog author="tchvatal@suse.com" date="1494849600">- Use nss to avoid issues with mixing openssl and nss</changelog>
<changelog author="tchvatal@suse.com" date="1497960000">- Version update to 5.3.4.2:
  * Various bugfixes on the 5.3.4 branch</changelog>
<changelog author="tchvatal@suse.com" date="1498046400">- Add suse color palette bsc#1045339</changelog>
<changelog author="andras.timar@collabora.com" date="1499688000">- Fixed bnc#954776 LO-L3: Cannot set bullet point formatting on given slide
  * bnc954776.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1499947200">- Fixed bnc#947117 LO-L3: Moving objects with Arrow Keys while ALT is pressed does not work for all objects
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1500033600">- Fixed bnc#1021675 LO-L3: LO: table in docx is messed up
  * bnc1021675.patch</changelog>
<changelog author="tchvatal@suse.com" date="1501761600">- Version update to 5.3.5.2 release:
  * Tons of fixes on the stable branch
- Remove merged patches:
  * bnc954776.patch
  * bnc947117.patch</changelog>
<changelog author="andras.timar@collabora.com" date="1501761601">- Fixed bnc#1035589 LO-L3: Text in arrows upside down when importing from PPTX
  * bnc1035589.patch</changelog>

</package>
<package pkgid="8e6f059d810b9e961951ccbe1581fd6bcfd11fc51d0820d7013fccc15945fdb7" name="libressl" arch="src">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="917e9070aada44892cb255be9f0caadd22cab966c9ed94f0937213e6ea6ecf6f" name="libressl" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="1c29ea8f84024f2685a382232ff7c8046a96408599249a48b9ab857e9bf644d1" name="libressl-devel" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="6ec395f2ac603a9876a31be959bf91d11b78066fdbb1a617cd295eb06d1413f7" name="libressl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="b88562308aabbeae2cf7500a8cec9de4e418a89988c715501344830e91ae39d9" name="libressl-devel-doc" arch="noarch">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="640544879b7b4a240d23a02b411c72c9e51f8fe2d6a4dad6026ce0b3138663d4" name="librgw-devel" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="61e6d731c4b07ccb6b836a06a6f8051fcaf6582a6d4ddaeb44706bcbb08b3b00" name="librgw2" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="8b7049d60e7e1592adf13d5b68e28758bce8758eccfffa3895adeefa798ffdcc" name="librsvg" arch="src">
    <version epoch="0" ver="2.40.18" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
<changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
<changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
<changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
<changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
<changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
<changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
<changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
<changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
<changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
<changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
<changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
<changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>

</package>
<package pkgid="8fd9ae4014f77465d66752290b9326cece5b6660c4556645f30d8cba3044f90a" name="librsvg-2-2" arch="x86_64">
    <version epoch="0" ver="2.40.18" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
<changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
<changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
<changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
<changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
<changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
<changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
<changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
<changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
<changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
<changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
<changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
<changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>

</package>
<package pkgid="058bbf88295afc8017fcf4df508565deb97fcf7c3ce8e1b34187b1986a355cb7" name="librsvg-2-2-32bit" arch="x86_64">
    <version epoch="0" ver="2.40.18" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
<changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
<changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
<changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
<changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
<changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
<changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
<changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
<changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
<changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
<changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
<changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
<changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>

</package>
<package pkgid="2105c07d6cf8be98c27df77f2e0b756fec5014460ce32509097acf5f99147a5f" name="librsvg-devel" arch="x86_64">
    <version epoch="0" ver="2.40.18" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
<changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
<changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
<changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
<changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
<changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
<changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
<changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
<changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
<changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
<changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
<changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
<changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>

</package>
<package pkgid="8f93affbf35e06166b418677b9f4aa82c60acc3522636776e515ee4a894d903b" name="libs3" arch="src">
    <version epoch="0" ver="4.1.git257" rel="5.1"/>

<changelog author="jengelh@inai.de" date="1459425600">- Initial package (version 2.0~git193) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1471435200">- Update to new snapshot 2.0~git195
  * Add multipart copy API and support inside s3 executable
- Add s3-aws4.diff to support AWS4-HMAC-SHA256</changelog>
<changelog author="b.simonsen@kopano.com" date="1478260800">- Updated s3-aws4.diff to new submission
- Added s3-revert-pr51.diff, needed for s3-aws4.diff to work
- Correct version to be 3.0~gitN, since the 2.0 release is already
  way past.</changelog>
<changelog author="jengelh@inai.de" date="1500552000">- Update to new snapshot 4.1.git257
  * Adapted v4 signature construction for Linux.
  * Add auth. region to relevant API calls.
  * Support the generate_query_string operation with the new
    authorization/signature logic.
  * Fix query parameter handling in canonicalization.
  * Remove obsolete hash functions, update library major version
    due to API change.
  * Fix expected output for ACL with new identifier format.
  * Increase length of auth. header to account for requests with
    many amz headers.
  * Fix the logic that determines the hostname to use in HTTP
    headers.
  * fix S3_destroy_request_context() to correctly abort
    curl_multi context.
  * Request timeout for _create_bucket and _put_object.
  * Request timeout for _get_object and _head_object.
  * timeout: report timeout error if request timed out.
  * Fix signature error when requesting with sub resource.
  * Fix urlencode error according to AWS S3 documents.
- Removed s3-aws4.diff (merged)</changelog>

</package>
<package pkgid="980b3afa7f0758d07f19e0ff7ea736aaa2fa3a45cb61b62e4ddd59297da2a8ad" name="libs3-4" arch="x86_64">
    <version epoch="0" ver="4.1.git257" rel="5.1"/>

<changelog author="jengelh@inai.de" date="1459425600">- Initial package (version 2.0~git193) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1471435200">- Update to new snapshot 2.0~git195
  * Add multipart copy API and support inside s3 executable
- Add s3-aws4.diff to support AWS4-HMAC-SHA256</changelog>
<changelog author="b.simonsen@kopano.com" date="1478260800">- Updated s3-aws4.diff to new submission
- Added s3-revert-pr51.diff, needed for s3-aws4.diff to work
- Correct version to be 3.0~gitN, since the 2.0 release is already
  way past.</changelog>
<changelog author="jengelh@inai.de" date="1500552000">- Update to new snapshot 4.1.git257
  * Adapted v4 signature construction for Linux.
  * Add auth. region to relevant API calls.
  * Support the generate_query_string operation with the new
    authorization/signature logic.
  * Fix query parameter handling in canonicalization.
  * Remove obsolete hash functions, update library major version
    due to API change.
  * Fix expected output for ACL with new identifier format.
  * Increase length of auth. header to account for requests with
    many amz headers.
  * Fix the logic that determines the hostname to use in HTTP
    headers.
  * fix S3_destroy_request_context() to correctly abort
    curl_multi context.
  * Request timeout for _create_bucket and _put_object.
  * Request timeout for _get_object and _head_object.
  * timeout: report timeout error if request timed out.
  * Fix signature error when requesting with sub resource.
  * Fix urlencode error according to AWS S3 documents.
- Removed s3-aws4.diff (merged)</changelog>

</package>
<package pkgid="72250697dee7a2ee78a038376858b5100174262006be7e30689ca6848d47cec5" name="libs3-devel" arch="x86_64">
    <version epoch="0" ver="4.1.git257" rel="5.1"/>

<changelog author="jengelh@inai.de" date="1459425600">- Initial package (version 2.0~git193) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1471435200">- Update to new snapshot 2.0~git195
  * Add multipart copy API and support inside s3 executable
- Add s3-aws4.diff to support AWS4-HMAC-SHA256</changelog>
<changelog author="b.simonsen@kopano.com" date="1478260800">- Updated s3-aws4.diff to new submission
- Added s3-revert-pr51.diff, needed for s3-aws4.diff to work
- Correct version to be 3.0~gitN, since the 2.0 release is already
  way past.</changelog>
<changelog author="jengelh@inai.de" date="1500552000">- Update to new snapshot 4.1.git257
  * Adapted v4 signature construction for Linux.
  * Add auth. region to relevant API calls.
  * Support the generate_query_string operation with the new
    authorization/signature logic.
  * Fix query parameter handling in canonicalization.
  * Remove obsolete hash functions, update library major version
    due to API change.
  * Fix expected output for ACL with new identifier format.
  * Increase length of auth. header to account for requests with
    many amz headers.
  * Fix the logic that determines the hostname to use in HTTP
    headers.
  * fix S3_destroy_request_context() to correctly abort
    curl_multi context.
  * Request timeout for _create_bucket and _put_object.
  * Request timeout for _get_object and _head_object.
  * timeout: report timeout error if request timed out.
  * Fix signature error when requesting with sub resource.
  * Fix urlencode error according to AWS S3 documents.
- Removed s3-aws4.diff (merged)</changelog>

</package>
<package pkgid="707cdb7997144108c5c790049e48773491599db0ab9f44e701f4304db3b5379c" name="libs3-tools" arch="x86_64">
    <version epoch="0" ver="4.1.git257" rel="5.1"/>

<changelog author="jengelh@inai.de" date="1459425600">- Initial package (version 2.0~git193) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1471435200">- Update to new snapshot 2.0~git195
  * Add multipart copy API and support inside s3 executable
- Add s3-aws4.diff to support AWS4-HMAC-SHA256</changelog>
<changelog author="b.simonsen@kopano.com" date="1478260800">- Updated s3-aws4.diff to new submission
- Added s3-revert-pr51.diff, needed for s3-aws4.diff to work
- Correct version to be 3.0~gitN, since the 2.0 release is already
  way past.</changelog>
<changelog author="jengelh@inai.de" date="1500552000">- Update to new snapshot 4.1.git257
  * Adapted v4 signature construction for Linux.
  * Add auth. region to relevant API calls.
  * Support the generate_query_string operation with the new
    authorization/signature logic.
  * Fix query parameter handling in canonicalization.
  * Remove obsolete hash functions, update library major version
    due to API change.
  * Fix expected output for ACL with new identifier format.
  * Increase length of auth. header to account for requests with
    many amz headers.
  * Fix the logic that determines the hostname to use in HTTP
    headers.
  * fix S3_destroy_request_context() to correctly abort
    curl_multi context.
  * Request timeout for _create_bucket and _put_object.
  * Request timeout for _get_object and _head_object.
  * timeout: report timeout error if request timed out.
  * Fix signature error when requesting with sub resource.
  * Fix urlencode error according to AWS S3 documents.
- Removed s3-aws4.diff (merged)</changelog>

</package>
<package pkgid="6bf7139b25be1962141c746ab9414f334db606e7fd7e015db8aad3d155503c35" name="libsamba-credentials-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="3e060fb027d91421dbd4acfc30ed4daeeca0bf04324beb3055f6b3e774198313" name="libsamba-credentials-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="6ca056f6e17ee9da0e3bdb3618acaf843f31a6891277f9038d8a3e25f8c48912" name="libsamba-credentials-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="a24ca34705c0b6fba28e40a1791e2faef67915358c6cbc201580dfaebc2b1ee8" name="libsamba-credentials0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="a0b083be7f11158c30793916e2b26be2f46d1e6548d83e491855f7045433286a" name="libsamba-credentials0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="8bf0645050d8aa5b604fd1510dce8491603acb424888cee46f19b1d67c95b0c5" name="libsamba-credentials0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="f5ea63bf3e7c78028c0174708d63676591654220dc9868517330a6e5bf86d5ab" name="libsamba-credentials0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="4344f2cbc589353ca231fed3b7e87bf7a8f65e5be39ac3cf4162c7a41bef5c5e" name="libsamba-credentials0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="444cac3e7489494648175a79aaec6924cea28a63e798a2bd1fb3668790276ec3" name="libsamba-credentials0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="a844b852dfd78da14a08e9fcfacf727a4415ff535667bb184444bed47205f068" name="libsamba-errors-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="7afc016d71017bae19f58c7e79ee824466affa5db30d855b2b5cf776b624af40" name="libsamba-errors-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="4d0fb106a028b8ff7d7c03e1c697002818cf97bd7c8952d86f9fefe13014ec3a" name="libsamba-errors-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="b62935ed9fbf9b309954560cd0c63dc0077cabd3c6d39c3d6b3415adbcdbcea5" name="libsamba-errors0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="291eef722c64dfcb7c0d220ec47c280f9008a0e8cf18236cd81c7a0cab9ddcb2" name="libsamba-errors0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="abc928078bcee2618570669ef213d1940a34641e943bfea439c72d6a6d914cf3" name="libsamba-errors0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="1dae75f663d0397d4fbd7dbf6129121ee5555d4898120e5c8471598770231b6e" name="libsamba-errors0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="2a8e0412cfbe0945f692a48e33e54870cd252de40340eefaa12e97417dc57bb9" name="libsamba-errors0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="cb539ff0b1af0b06fc1bb7828180a36290dc92c50d7ff11dcb87860ef02bb88f" name="libsamba-errors0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="a21b8d35430f9ce30122a3795a056c643897b45ac872d2b37f57a30f0d45682c" name="libsamba-hostconfig-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="1b7854386a35516e8ab637a6f3c4a9581dd6024488e7af08fa6e5a576b231630" name="libsamba-hostconfig-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="b0f0076b34056afb4e286e439e59dc34c307abb1e13a7ac1c4de1f7da31c81ed" name="libsamba-hostconfig-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="ef2ff56f5dd5ec771e36018f6758233498250ace07b66b0111bfd9e26e5c975c" name="libsamba-hostconfig0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="99df1a873c32fe0c2fc21aa89485b8d838372061b9f46a1865a3a05ee1ea33c4" name="libsamba-hostconfig0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="d39079ac5db9e0effe8ebecd6a22cb842a64bae7b410dfbabe6e839c48866ada" name="libsamba-hostconfig0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="049de6a4d3f57064c0a595d22c51a6d164c823876d1d98e9c72f3e06cc9cac2f" name="libsamba-hostconfig0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="15798e7620420464ceaa524191add782104f53b13d16f457171545ee8d1e7492" name="libsamba-hostconfig0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="395d7a7f4746aeb0d0d6b56b051bf0aadaaa217f8eccc13cd8e62765c58447d1" name="libsamba-hostconfig0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="352825308599d6bceef5e232235a86017a3875735420913e2c54a89e44056dfb" name="libsamba-passdb-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="be80900b9bbfd3e201dcd9597eb9b6d67018b180755b1c34896df2a722dbd936" name="libsamba-passdb-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="8712d667968d628f736dc243a607ebae2ef18a5b006e83ae4d6141bc4c3dc45a" name="libsamba-passdb-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="52c47df4f2d21ff38732c36cb89ebe89fe88ca018986513e47cc2942cf7507eb" name="libsamba-passdb0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="e39efecfae379caba055694b582c4ff2d44e2ce680e5ac29b13db6c2200acd02" name="libsamba-passdb0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="d0204596483e148ac51aff3774d8bc68fce7aa97002e80849bc9a4fcdf10adda" name="libsamba-passdb0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="0e54e81c532a245ca39621bf7243e7ef26557a224323742d2d730740f26a92e0" name="libsamba-passdb0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="aea2076c38c04a684ce1e386ddac88f5fe6d12f65693cd6bac0efc08ec5b0f9b" name="libsamba-passdb0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="7b783ed85998354dd8ba2d983ac9cb67810867d34fb6cf4a49a80321ae41fd5a" name="libsamba-passdb0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="cb5c4b16038e2cb420c8dc47b1607d3ee12edb642aed8cb0c712b48ec4e942c3" name="libsamba-policy-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="f171adf6accc1319679d8519879e4a1cff401792b2836bd345a7854bd928bce6" name="libsamba-policy-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="a9fa1f9e7f6f5d3b29717bb8669493407f32230fc0121980fbd0e3df5b135876" name="libsamba-policy-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="5e470191c8eb2ef22b543d1374753620d13dffb3b0250ccd38a09e225b2afeb5" name="libsamba-policy0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="41b8030af6f581c76592268ad7fbf9eb4975d5905a3d395ad134692480dac846" name="libsamba-policy0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="cc2507f0cac774fc2ae4da937dac95747b8052917ef8973f247f2b89126e6898" name="libsamba-policy0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="354a0245959fb173ab7674ac25048e746cb2111d85d59617e680cc1c133666df" name="libsamba-policy0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="457e65c17245d9432a52d8af913a5df293f0d388d482581d3b7cc2f872661ba6" name="libsamba-policy0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="6c2a64760dd2926103e12ceb8b08f81ec431731cb913865ee57378e5a1c3896a" name="libsamba-policy0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="a1e898361341d064ee63e490dffd953e8d22e08a27e2391b2b7d9ebb651a56ac" name="libsamba-util-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="5ca530c4ac27069fbcf69ad73d0d447168543949649479848c781b39daaa2c44" name="libsamba-util-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="e7f08849787b51c2fd63a63329236f57471b6eda4cf20eab0625cf0b81150c07" name="libsamba-util-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="fcd5ce2e211217766c77e558347b4b56c63ce54aeec5c419f0d8c3a5365e2ca4" name="libsamba-util0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="adba99ad272024e8e92070b85201cbae2a1fb878d97b977e6c575516ea642bb8" name="libsamba-util0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="b26c65b4cfc2313e0b4ebf56762e285bef33c66335438a6862fe20ce7cddf9e6" name="libsamba-util0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="e35e85d1f8cf96c1d6e47edf385d53a90f8520d145e5d779926797c2c0bfae76" name="libsamba-util0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="39e9775f02895c403790453d6587e337f8a9daf577c04fb7f348bc97b396ff2d" name="libsamba-util0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="af718afabef37024db79528830932be4c2f5a86be622c76221452445e87e23cf" name="libsamba-util0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="19c64375cc8fc77ae1177af8fe155392db71a5d0975b2964a7c4bde586967869" name="libsamdb-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="29f526f111ad5c59b185cb940ee69cefd663046faf9e949b5a3c16eb3076c1a9" name="libsamdb-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="075b8092efe2bde69fa16ce364f82bf95329b0f63f76f45c3008a3e894f57fe6" name="libsamdb-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="98bf99d363a2c252f1bf5f62cc54c92007d20d7ebac5db17fde8e4a0b061f560" name="libsamdb0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="5d34ef74d7540167dec0c6e5e6520ac003eccc5a0144b1df535b408dcd12bcee" name="libsamdb0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="2489833d371f87e2bce9d4f46b32481600195c11ddf1092ff6a7c1f4b9c17397" name="libsamdb0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="c342726aacf4a64ccc197d0faddbe8b7ad7ca29823790a47f07396b06b37b688" name="libsamdb0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="2e10ef82ef1bb5adbcad356966ecaa816c1fe54b30e289c3f5890cb6e073a125" name="libsamdb0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="54925a3a25b01ca0c6bfee22fb9ce2cd4e71b8afe27257cf8eee8f26bd2689ea" name="libsamdb0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="7e393194d9118c1bdfb7d774694f11834af8e4c7ef9de5a788fd919f08d685d7" name="libsaml-devel" arch="x86_64">
    <version epoch="0" ver="2.5.5" rel="6.1"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add opensaml-2.5.5-doxygen_timestamp.patch to remove timestamps
  in a documentation generated by Doxygen and avoid RPMLINT warnings
  (file-contains-date-and-time).</changelog>
<changelog author="kstreitova@suse.com" date="1438084800">- use spec-cleaner again
- fix Source address
- remove unused conditionals</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add opensaml-2.5.5-CVE-2017-16853.patch to fix a critical security
  issue when the DynamicMetadataProvider class in
  saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C
  in OpenSAML before 2.6.1 fails to properly configure itself with
  the MetadataFilter plugins and does not perform critical security
  checks [bsc#1068685] [CVE-2017-16853]</changelog>

</package>
<package pkgid="25664d46ae8215dee29494508c54af35718bc4aebcba401fa26421d36f6a7f4e" name="libsaml8" arch="x86_64">
    <version epoch="0" ver="2.5.5" rel="6.1"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add opensaml-2.5.5-doxygen_timestamp.patch to remove timestamps
  in a documentation generated by Doxygen and avoid RPMLINT warnings
  (file-contains-date-and-time).</changelog>
<changelog author="kstreitova@suse.com" date="1438084800">- use spec-cleaner again
- fix Source address
- remove unused conditionals</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add opensaml-2.5.5-CVE-2017-16853.patch to fix a critical security
  issue when the DynamicMetadataProvider class in
  saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C
  in OpenSAML before 2.6.1 fails to properly configure itself with
  the MetadataFilter plugins and does not perform critical security
  checks [bsc#1068685] [CVE-2017-16853]</changelog>

</package>
<package pkgid="e241e222d4ca05a375ad5ee34e0add5805d4470562c70616a660f607b1479c78" name="libsasl2-3" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="02d5b40752ff7533f7689c69c257294693926cb7962009c6f6bf0beb498165ee" name="libsasl2-3-32bit" arch="x86_64">
    <version epoch="0" ver="2.1.26" rel="14.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336564800">- Ensure libraries and tools are built with LFS and include
  config.h in all C files.</changelog>
<changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
<changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
<changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
<changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
<changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
<changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
<changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
<changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
<changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
<changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
<changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
<changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
<changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
<changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
<changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
<changelog author="varkoly@suse.com" date="1500984000">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.</changelog>

</package>
<package pkgid="b2947dfa0043f2cc4c608199938245d22c7f87a55036c536ed4fed91c3d9fefd" name="libsass" arch="src">
    <version epoch="0" ver="3.3.2" rel="5.1"/>

<changelog author="cbosdonnat@suse.com" date="1451908800">- Release 3.3.2</changelog>
<changelog author="dmueller@suse.com" date="1451995200">- add license</changelog>
<changelog author="psimons@suse.com" date="1467547200">- Build a shared library instead of a static one.
- Rename the main package to match the shared library's SONAME.
- Enable "make check" test suite.
- Run the spec file through spec-cleaner.</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Remove redundant "Obsoletes" attribute from spec file. New
  versions implicitly obsolete older versions of the same package;
  this doesn't need to be stated explicitly.</changelog>
<changelog author="jengelh@inai.de" date="1468584000">- Add libsass-am.diff, libsass-vers.diff to do proper versioning on
  shared library.
- Drop useless with-pic (only for ? unbuilt ? static libs)</changelog>
<changelog author="cbosdonnat@suse.com" date="1509019200">- Fix CVE-2017-11605 (boo#1050151), CVE-2017-11556(boo#1050150),
  CVE-2017-11554 (boo#1050148)
    + 7664114-Implement-nesting-guard-to-avoid-out-of-stack-space.patch
    + cf36780b-Implement-import-recursion-check.patch
- Fix CVE-2017-11555 (boo#1050149)
    + 946ef499-Avoid-segfault-in-parser-edge-case-2450.patch
- Partial fix for CVE-2017-11608 (boo#1050380)
    + 648f763e-Fix-memory-corruption-on-error-in-parse_selector_sch.patch
    + 707e3265-Fix-file-content-malloc-to-avoid-reading-beyond-buff.patch
    + a495d111-Expose-low-level-memory-libsass-heap-allocator.patch</changelog>

</package>
<package pkgid="58cad36107ca995a93d4d042a67a6a17bf85e9d32332c0f7cfb4d7abe217c6c2" name="libsass-3_3_2-0" arch="x86_64">
    <version epoch="0" ver="3.3.2" rel="5.1"/>

<changelog author="cbosdonnat@suse.com" date="1451908800">- Release 3.3.2</changelog>
<changelog author="dmueller@suse.com" date="1451995200">- add license</changelog>
<changelog author="psimons@suse.com" date="1467547200">- Build a shared library instead of a static one.
- Rename the main package to match the shared library's SONAME.
- Enable "make check" test suite.
- Run the spec file through spec-cleaner.</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Remove redundant "Obsoletes" attribute from spec file. New
  versions implicitly obsolete older versions of the same package;
  this doesn't need to be stated explicitly.</changelog>
<changelog author="jengelh@inai.de" date="1468584000">- Add libsass-am.diff, libsass-vers.diff to do proper versioning on
  shared library.
- Drop useless with-pic (only for ? unbuilt ? static libs)</changelog>
<changelog author="cbosdonnat@suse.com" date="1509019200">- Fix CVE-2017-11605 (boo#1050151), CVE-2017-11556(boo#1050150),
  CVE-2017-11554 (boo#1050148)
    + 7664114-Implement-nesting-guard-to-avoid-out-of-stack-space.patch
    + cf36780b-Implement-import-recursion-check.patch
- Fix CVE-2017-11555 (boo#1050149)
    + 946ef499-Avoid-segfault-in-parser-edge-case-2450.patch
- Partial fix for CVE-2017-11608 (boo#1050380)
    + 648f763e-Fix-memory-corruption-on-error-in-parse_selector_sch.patch
    + 707e3265-Fix-file-content-malloc-to-avoid-reading-beyond-buff.patch
    + a495d111-Expose-low-level-memory-libsass-heap-allocator.patch</changelog>

</package>
<package pkgid="957e6c957dc2e6e06a29c77795d0025d8fed8f789662c974256529eef1975625" name="libsass-devel" arch="x86_64">
    <version epoch="0" ver="3.3.2" rel="5.1"/>

<changelog author="cbosdonnat@suse.com" date="1451908800">- Release 3.3.2</changelog>
<changelog author="dmueller@suse.com" date="1451995200">- add license</changelog>
<changelog author="psimons@suse.com" date="1467547200">- Build a shared library instead of a static one.
- Rename the main package to match the shared library's SONAME.
- Enable "make check" test suite.
- Run the spec file through spec-cleaner.</changelog>
<changelog author="psimons@suse.com" date="1468411200">- Remove redundant "Obsoletes" attribute from spec file. New
  versions implicitly obsolete older versions of the same package;
  this doesn't need to be stated explicitly.</changelog>
<changelog author="jengelh@inai.de" date="1468584000">- Add libsass-am.diff, libsass-vers.diff to do proper versioning on
  shared library.
- Drop useless with-pic (only for ? unbuilt ? static libs)</changelog>
<changelog author="cbosdonnat@suse.com" date="1509019200">- Fix CVE-2017-11605 (boo#1050151), CVE-2017-11556(boo#1050150),
  CVE-2017-11554 (boo#1050148)
    + 7664114-Implement-nesting-guard-to-avoid-out-of-stack-space.patch
    + cf36780b-Implement-import-recursion-check.patch
- Fix CVE-2017-11555 (boo#1050149)
    + 946ef499-Avoid-segfault-in-parser-edge-case-2450.patch
- Partial fix for CVE-2017-11608 (boo#1050380)
    + 648f763e-Fix-memory-corruption-on-error-in-parse_selector_sch.patch
    + 707e3265-Fix-file-content-malloc-to-avoid-reading-beyond-buff.patch
    + a495d111-Expose-low-level-memory-libsass-heap-allocator.patch</changelog>

</package>
<package pkgid="b19a3acaef544620efac82ad77968f48ad3fc23def22dfe8b5922709c1a3c89c" name="libsecret" arch="src">
    <version epoch="0" ver="0.18.5" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 0.3:
  + Add methods to get services from collections, items
  + Add methods to read and set aliases
  + Add methods which handle prompts for a DBus object path
  + Header path fix
  + Documentation fixes</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 0.7:
  + Match schema names for notes and network passwords
  + Add flags argument to secret_collection_for_alias()
  + Correct flags behavior for SecretCollection
  + Build fixes
- Changes from version 0.6:
  + Rename secret_password_remove() to secret_password_clear()
    and similar names for related functions.
  + The secret_attribute_build() functions are stable
  + The predefined secret schemas are stable
  + Build fixes
- Changes from version 0.5:
  + secret_service_remove() removes all unlocked matching items
  + Make sure that we have some attributes when searching
  + Add flags for item and collection creation
  + Add way to get schema name from a SecretItem
  + Rename secret_service_read_alias() to
    secret_collection_for_alias()
  + Split the stable and unstable APIs into separate
    pkg-config files, girs and vapis
  + Bump the library major version number to 1
  + Document how to migrate from libgnome-keyring
  + Document how to use libsecret from C, js, python, vala
  + Documentation fixes
- Changes from version 0.4:
  + Implement per collection search
  + Register secret service errors as GDBus errors
  + Cache default SecretService object, and provide a way to
    'disconnect' it. Also 'disconnect' if service goes away.
  + Better use of aliases when storing passwords
  + Rename functions that operate on a dbus object path
  + Accept NULL as a SecretService parameter for many methods
  + Make loading items for a collection optional
  + More consistent use of schemas
  + Able to unlock and load secrets while searching for items
  + Cache the secret value on SecretItem
  + Add vala bindings and tests
  + Remove most varargs other than the simple password functions
  + Add SECRET_SCHEMA_NOTE schema
  + Lots of bug fixes
  + Documentation fixes
  + Testing fixes
  + Build fixes
- Add vala BuildRequires: required to build the new bindings.</changelog>
<changelog author="dimstar@opensuse.org" date="1344254400">- Update to version 0.8:
  + Fix up libsecret licensing (bgo#681255).
  + Initialize gettext correctly.
  + Fix crash in secret-tool.
  + Build and testing fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 0.9:
  + Add a manual page for secret-tool.
  + Fix up libsecret licensing.
  + Build and testing fixes.
- Add docbook-xsl-stylesheets and xsltproc BuildRequires in order
  to be able to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1347710400">- Change vala BuildRequires to a versioned BuildRequires: no reason
  to waste build power if vala is not recent enough.</changelog>
<changelog author="dimstar@opensuse.org" date="1348056000">- Update to version 0.10:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 0.11:
  + Better critical preconditions for invalid attributes.</changelog>
<changelog author="dimstar@opensuse.org" date="1353585600">- Update to version 0.12:
  + When storing a secret, create default keyring if necessary.
  + Share the memory pool with the gcr or libgnome-keyring library.
  + Testing and other fixes.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 0.13:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362398400">- Update to version 0.14:
  + Add a 'search' command to the tool for looking up items
    (bgo#693881).
  + Try to unlock locked collection when storing an item
    (bgo#693723).
  + Improve validation of the attributes table (bgo#694107).
  + Allow empty SecretValue contents (bgo#694787).
  + Introspection fixes (bgo#694448).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.15:
  + Tweak predefined schemas (bgo#695791).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 0.16:
  + Clarify documentation for secret_service_clear_xxx()
    (bgo#705629).
  + Pass return_type to prompt async begin functions, rather than
    finish.
  + Simpler way to use custom service/collection/item types.
  + service: Rename secret_service_new() and friends to xxx_open().
  + Add secret_value_get_text() function to return NULL terminated
    secret.
  + Fix return types in secret_service_search_finish() on error
    paths (bgo#698040).
  + Testing fixes (bgo#705202).
  + Build fixes (bgo#704233).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394193600">- Update to version 0.18:
  + Mark most of unstable API as stable.
  + Bump Glib dependency (2.38+).
  + Add secret_service_encode_dbus_secret() and decode functions.
  + Use TAP for testing, parallel tests, and non-recursive make.
  + Updated FSF's address.
  + Remove unstable vapi (bgo#721429).
  + Build fixes: bgo#720087, bgo#720244, bgo#707452.
  + Updated translations.
- Drop typelib-1_0-SecretUnstable-0 subpackage: no more unstable
  APIs (incl. dependency to this package from the -devel package).</changelog>
<changelog author="dimstar@opensuse.org" date="1429704000">- Update to version 0.18.2:
  + Testing fixes.
  + Documentation typo (bgo#747654).
  + Build fixes (bgo#743444).
  + Accomodate libgcrypt 1.6+.
  + Updated translations.
- Changes from version 0.18.1:
  + Testing fix (bgo#726909).</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 0.18.3:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libsecret-bsc932232-use-libgcrypt-allocators.patch
  (bsc#932232).</changelog>
<changelog author="zaitor@opensuse.org" date="1453204800">- Update to version 0.18.4:
  + Multithreading fixes (bgo#756766).
  + Fix memory leaks (bgo#756766).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 0.18.5:
  + Build fixes.
  + Port tests to Python 3 (bgo#761834).
  + Fix textual typos (bgo#763143).
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1472817600">- Add openSUSE conditional macro and description tag for existing
  patches in specfile.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add libsecret-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="f1b37ec987bf87c981ea049fadf3fb93a56ff3083dafc744587aa42d7e3aad80" name="libsecret-1-0" arch="x86_64">
    <version epoch="0" ver="0.18.5" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 0.3:
  + Add methods to get services from collections, items
  + Add methods to read and set aliases
  + Add methods which handle prompts for a DBus object path
  + Header path fix
  + Documentation fixes</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 0.7:
  + Match schema names for notes and network passwords
  + Add flags argument to secret_collection_for_alias()
  + Correct flags behavior for SecretCollection
  + Build fixes
- Changes from version 0.6:
  + Rename secret_password_remove() to secret_password_clear()
    and similar names for related functions.
  + The secret_attribute_build() functions are stable
  + The predefined secret schemas are stable
  + Build fixes
- Changes from version 0.5:
  + secret_service_remove() removes all unlocked matching items
  + Make sure that we have some attributes when searching
  + Add flags for item and collection creation
  + Add way to get schema name from a SecretItem
  + Rename secret_service_read_alias() to
    secret_collection_for_alias()
  + Split the stable and unstable APIs into separate
    pkg-config files, girs and vapis
  + Bump the library major version number to 1
  + Document how to migrate from libgnome-keyring
  + Document how to use libsecret from C, js, python, vala
  + Documentation fixes
- Changes from version 0.4:
  + Implement per collection search
  + Register secret service errors as GDBus errors
  + Cache default SecretService object, and provide a way to
    'disconnect' it. Also 'disconnect' if service goes away.
  + Better use of aliases when storing passwords
  + Rename functions that operate on a dbus object path
  + Accept NULL as a SecretService parameter for many methods
  + Make loading items for a collection optional
  + More consistent use of schemas
  + Able to unlock and load secrets while searching for items
  + Cache the secret value on SecretItem
  + Add vala bindings and tests
  + Remove most varargs other than the simple password functions
  + Add SECRET_SCHEMA_NOTE schema
  + Lots of bug fixes
  + Documentation fixes
  + Testing fixes
  + Build fixes
- Add vala BuildRequires: required to build the new bindings.</changelog>
<changelog author="dimstar@opensuse.org" date="1344254400">- Update to version 0.8:
  + Fix up libsecret licensing (bgo#681255).
  + Initialize gettext correctly.
  + Fix crash in secret-tool.
  + Build and testing fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 0.9:
  + Add a manual page for secret-tool.
  + Fix up libsecret licensing.
  + Build and testing fixes.
- Add docbook-xsl-stylesheets and xsltproc BuildRequires in order
  to be able to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1347710400">- Change vala BuildRequires to a versioned BuildRequires: no reason
  to waste build power if vala is not recent enough.</changelog>
<changelog author="dimstar@opensuse.org" date="1348056000">- Update to version 0.10:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 0.11:
  + Better critical preconditions for invalid attributes.</changelog>
<changelog author="dimstar@opensuse.org" date="1353585600">- Update to version 0.12:
  + When storing a secret, create default keyring if necessary.
  + Share the memory pool with the gcr or libgnome-keyring library.
  + Testing and other fixes.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 0.13:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362398400">- Update to version 0.14:
  + Add a 'search' command to the tool for looking up items
    (bgo#693881).
  + Try to unlock locked collection when storing an item
    (bgo#693723).
  + Improve validation of the attributes table (bgo#694107).
  + Allow empty SecretValue contents (bgo#694787).
  + Introspection fixes (bgo#694448).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.15:
  + Tweak predefined schemas (bgo#695791).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 0.16:
  + Clarify documentation for secret_service_clear_xxx()
    (bgo#705629).
  + Pass return_type to prompt async begin functions, rather than
    finish.
  + Simpler way to use custom service/collection/item types.
  + service: Rename secret_service_new() and friends to xxx_open().
  + Add secret_value_get_text() function to return NULL terminated
    secret.
  + Fix return types in secret_service_search_finish() on error
    paths (bgo#698040).
  + Testing fixes (bgo#705202).
  + Build fixes (bgo#704233).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394193600">- Update to version 0.18:
  + Mark most of unstable API as stable.
  + Bump Glib dependency (2.38+).
  + Add secret_service_encode_dbus_secret() and decode functions.
  + Use TAP for testing, parallel tests, and non-recursive make.
  + Updated FSF's address.
  + Remove unstable vapi (bgo#721429).
  + Build fixes: bgo#720087, bgo#720244, bgo#707452.
  + Updated translations.
- Drop typelib-1_0-SecretUnstable-0 subpackage: no more unstable
  APIs (incl. dependency to this package from the -devel package).</changelog>
<changelog author="dimstar@opensuse.org" date="1429704000">- Update to version 0.18.2:
  + Testing fixes.
  + Documentation typo (bgo#747654).
  + Build fixes (bgo#743444).
  + Accomodate libgcrypt 1.6+.
  + Updated translations.
- Changes from version 0.18.1:
  + Testing fix (bgo#726909).</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 0.18.3:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libsecret-bsc932232-use-libgcrypt-allocators.patch
  (bsc#932232).</changelog>
<changelog author="zaitor@opensuse.org" date="1453204800">- Update to version 0.18.4:
  + Multithreading fixes (bgo#756766).
  + Fix memory leaks (bgo#756766).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 0.18.5:
  + Build fixes.
  + Port tests to Python 3 (bgo#761834).
  + Fix textual typos (bgo#763143).
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1472817600">- Add openSUSE conditional macro and description tag for existing
  patches in specfile.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add libsecret-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="f9c99c56eda5bb6b213dd156c58a99977be1b6b461332baef7cdb52cefbbe619" name="libsecret-1-0-32bit" arch="x86_64">
    <version epoch="0" ver="0.18.5" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 0.3:
  + Add methods to get services from collections, items
  + Add methods to read and set aliases
  + Add methods which handle prompts for a DBus object path
  + Header path fix
  + Documentation fixes</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 0.7:
  + Match schema names for notes and network passwords
  + Add flags argument to secret_collection_for_alias()
  + Correct flags behavior for SecretCollection
  + Build fixes
- Changes from version 0.6:
  + Rename secret_password_remove() to secret_password_clear()
    and similar names for related functions.
  + The secret_attribute_build() functions are stable
  + The predefined secret schemas are stable
  + Build fixes
- Changes from version 0.5:
  + secret_service_remove() removes all unlocked matching items
  + Make sure that we have some attributes when searching
  + Add flags for item and collection creation
  + Add way to get schema name from a SecretItem
  + Rename secret_service_read_alias() to
    secret_collection_for_alias()
  + Split the stable and unstable APIs into separate
    pkg-config files, girs and vapis
  + Bump the library major version number to 1
  + Document how to migrate from libgnome-keyring
  + Document how to use libsecret from C, js, python, vala
  + Documentation fixes
- Changes from version 0.4:
  + Implement per collection search
  + Register secret service errors as GDBus errors
  + Cache default SecretService object, and provide a way to
    'disconnect' it. Also 'disconnect' if service goes away.
  + Better use of aliases when storing passwords
  + Rename functions that operate on a dbus object path
  + Accept NULL as a SecretService parameter for many methods
  + Make loading items for a collection optional
  + More consistent use of schemas
  + Able to unlock and load secrets while searching for items
  + Cache the secret value on SecretItem
  + Add vala bindings and tests
  + Remove most varargs other than the simple password functions
  + Add SECRET_SCHEMA_NOTE schema
  + Lots of bug fixes
  + Documentation fixes
  + Testing fixes
  + Build fixes
- Add vala BuildRequires: required to build the new bindings.</changelog>
<changelog author="dimstar@opensuse.org" date="1344254400">- Update to version 0.8:
  + Fix up libsecret licensing (bgo#681255).
  + Initialize gettext correctly.
  + Fix crash in secret-tool.
  + Build and testing fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 0.9:
  + Add a manual page for secret-tool.
  + Fix up libsecret licensing.
  + Build and testing fixes.
- Add docbook-xsl-stylesheets and xsltproc BuildRequires in order
  to be able to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1347710400">- Change vala BuildRequires to a versioned BuildRequires: no reason
  to waste build power if vala is not recent enough.</changelog>
<changelog author="dimstar@opensuse.org" date="1348056000">- Update to version 0.10:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 0.11:
  + Better critical preconditions for invalid attributes.</changelog>
<changelog author="dimstar@opensuse.org" date="1353585600">- Update to version 0.12:
  + When storing a secret, create default keyring if necessary.
  + Share the memory pool with the gcr or libgnome-keyring library.
  + Testing and other fixes.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 0.13:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362398400">- Update to version 0.14:
  + Add a 'search' command to the tool for looking up items
    (bgo#693881).
  + Try to unlock locked collection when storing an item
    (bgo#693723).
  + Improve validation of the attributes table (bgo#694107).
  + Allow empty SecretValue contents (bgo#694787).
  + Introspection fixes (bgo#694448).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.15:
  + Tweak predefined schemas (bgo#695791).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 0.16:
  + Clarify documentation for secret_service_clear_xxx()
    (bgo#705629).
  + Pass return_type to prompt async begin functions, rather than
    finish.
  + Simpler way to use custom service/collection/item types.
  + service: Rename secret_service_new() and friends to xxx_open().
  + Add secret_value_get_text() function to return NULL terminated
    secret.
  + Fix return types in secret_service_search_finish() on error
    paths (bgo#698040).
  + Testing fixes (bgo#705202).
  + Build fixes (bgo#704233).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394193600">- Update to version 0.18:
  + Mark most of unstable API as stable.
  + Bump Glib dependency (2.38+).
  + Add secret_service_encode_dbus_secret() and decode functions.
  + Use TAP for testing, parallel tests, and non-recursive make.
  + Updated FSF's address.
  + Remove unstable vapi (bgo#721429).
  + Build fixes: bgo#720087, bgo#720244, bgo#707452.
  + Updated translations.
- Drop typelib-1_0-SecretUnstable-0 subpackage: no more unstable
  APIs (incl. dependency to this package from the -devel package).</changelog>
<changelog author="dimstar@opensuse.org" date="1429704000">- Update to version 0.18.2:
  + Testing fixes.
  + Documentation typo (bgo#747654).
  + Build fixes (bgo#743444).
  + Accomodate libgcrypt 1.6+.
  + Updated translations.
- Changes from version 0.18.1:
  + Testing fix (bgo#726909).</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 0.18.3:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libsecret-bsc932232-use-libgcrypt-allocators.patch
  (bsc#932232).</changelog>
<changelog author="zaitor@opensuse.org" date="1453204800">- Update to version 0.18.4:
  + Multithreading fixes (bgo#756766).
  + Fix memory leaks (bgo#756766).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 0.18.5:
  + Build fixes.
  + Port tests to Python 3 (bgo#761834).
  + Fix textual typos (bgo#763143).
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1472817600">- Add openSUSE conditional macro and description tag for existing
  patches in specfile.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add libsecret-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="5c74e95c7183d49b308180bce7a7216b2746a94dd2de65fe98197c613fdc63c8" name="libsecret-devel" arch="x86_64">
    <version epoch="0" ver="0.18.5" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 0.3:
  + Add methods to get services from collections, items
  + Add methods to read and set aliases
  + Add methods which handle prompts for a DBus object path
  + Header path fix
  + Documentation fixes</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 0.7:
  + Match schema names for notes and network passwords
  + Add flags argument to secret_collection_for_alias()
  + Correct flags behavior for SecretCollection
  + Build fixes
- Changes from version 0.6:
  + Rename secret_password_remove() to secret_password_clear()
    and similar names for related functions.
  + The secret_attribute_build() functions are stable
  + The predefined secret schemas are stable
  + Build fixes
- Changes from version 0.5:
  + secret_service_remove() removes all unlocked matching items
  + Make sure that we have some attributes when searching
  + Add flags for item and collection creation
  + Add way to get schema name from a SecretItem
  + Rename secret_service_read_alias() to
    secret_collection_for_alias()
  + Split the stable and unstable APIs into separate
    pkg-config files, girs and vapis
  + Bump the library major version number to 1
  + Document how to migrate from libgnome-keyring
  + Document how to use libsecret from C, js, python, vala
  + Documentation fixes
- Changes from version 0.4:
  + Implement per collection search
  + Register secret service errors as GDBus errors
  + Cache default SecretService object, and provide a way to
    'disconnect' it. Also 'disconnect' if service goes away.
  + Better use of aliases when storing passwords
  + Rename functions that operate on a dbus object path
  + Accept NULL as a SecretService parameter for many methods
  + Make loading items for a collection optional
  + More consistent use of schemas
  + Able to unlock and load secrets while searching for items
  + Cache the secret value on SecretItem
  + Add vala bindings and tests
  + Remove most varargs other than the simple password functions
  + Add SECRET_SCHEMA_NOTE schema
  + Lots of bug fixes
  + Documentation fixes
  + Testing fixes
  + Build fixes
- Add vala BuildRequires: required to build the new bindings.</changelog>
<changelog author="dimstar@opensuse.org" date="1344254400">- Update to version 0.8:
  + Fix up libsecret licensing (bgo#681255).
  + Initialize gettext correctly.
  + Fix crash in secret-tool.
  + Build and testing fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 0.9:
  + Add a manual page for secret-tool.
  + Fix up libsecret licensing.
  + Build and testing fixes.
- Add docbook-xsl-stylesheets and xsltproc BuildRequires in order
  to be able to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1347710400">- Change vala BuildRequires to a versioned BuildRequires: no reason
  to waste build power if vala is not recent enough.</changelog>
<changelog author="dimstar@opensuse.org" date="1348056000">- Update to version 0.10:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 0.11:
  + Better critical preconditions for invalid attributes.</changelog>
<changelog author="dimstar@opensuse.org" date="1353585600">- Update to version 0.12:
  + When storing a secret, create default keyring if necessary.
  + Share the memory pool with the gcr or libgnome-keyring library.
  + Testing and other fixes.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 0.13:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362398400">- Update to version 0.14:
  + Add a 'search' command to the tool for looking up items
    (bgo#693881).
  + Try to unlock locked collection when storing an item
    (bgo#693723).
  + Improve validation of the attributes table (bgo#694107).
  + Allow empty SecretValue contents (bgo#694787).
  + Introspection fixes (bgo#694448).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.15:
  + Tweak predefined schemas (bgo#695791).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 0.16:
  + Clarify documentation for secret_service_clear_xxx()
    (bgo#705629).
  + Pass return_type to prompt async begin functions, rather than
    finish.
  + Simpler way to use custom service/collection/item types.
  + service: Rename secret_service_new() and friends to xxx_open().
  + Add secret_value_get_text() function to return NULL terminated
    secret.
  + Fix return types in secret_service_search_finish() on error
    paths (bgo#698040).
  + Testing fixes (bgo#705202).
  + Build fixes (bgo#704233).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394193600">- Update to version 0.18:
  + Mark most of unstable API as stable.
  + Bump Glib dependency (2.38+).
  + Add secret_service_encode_dbus_secret() and decode functions.
  + Use TAP for testing, parallel tests, and non-recursive make.
  + Updated FSF's address.
  + Remove unstable vapi (bgo#721429).
  + Build fixes: bgo#720087, bgo#720244, bgo#707452.
  + Updated translations.
- Drop typelib-1_0-SecretUnstable-0 subpackage: no more unstable
  APIs (incl. dependency to this package from the -devel package).</changelog>
<changelog author="dimstar@opensuse.org" date="1429704000">- Update to version 0.18.2:
  + Testing fixes.
  + Documentation typo (bgo#747654).
  + Build fixes (bgo#743444).
  + Accomodate libgcrypt 1.6+.
  + Updated translations.
- Changes from version 0.18.1:
  + Testing fix (bgo#726909).</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 0.18.3:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libsecret-bsc932232-use-libgcrypt-allocators.patch
  (bsc#932232).</changelog>
<changelog author="zaitor@opensuse.org" date="1453204800">- Update to version 0.18.4:
  + Multithreading fixes (bgo#756766).
  + Fix memory leaks (bgo#756766).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 0.18.5:
  + Build fixes.
  + Port tests to Python 3 (bgo#761834).
  + Fix textual typos (bgo#763143).
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1472817600">- Add openSUSE conditional macro and description tag for existing
  patches in specfile.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add libsecret-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="e9a947fd5b034e68410ab8e8886550cc73189520af7098a7fc301dddfcb91c74" name="libsecret-lang" arch="noarch">
    <version epoch="0" ver="0.18.5" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 0.3:
  + Add methods to get services from collections, items
  + Add methods to read and set aliases
  + Add methods which handle prompts for a DBus object path
  + Header path fix
  + Documentation fixes</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 0.7:
  + Match schema names for notes and network passwords
  + Add flags argument to secret_collection_for_alias()
  + Correct flags behavior for SecretCollection
  + Build fixes
- Changes from version 0.6:
  + Rename secret_password_remove() to secret_password_clear()
    and similar names for related functions.
  + The secret_attribute_build() functions are stable
  + The predefined secret schemas are stable
  + Build fixes
- Changes from version 0.5:
  + secret_service_remove() removes all unlocked matching items
  + Make sure that we have some attributes when searching
  + Add flags for item and collection creation
  + Add way to get schema name from a SecretItem
  + Rename secret_service_read_alias() to
    secret_collection_for_alias()
  + Split the stable and unstable APIs into separate
    pkg-config files, girs and vapis
  + Bump the library major version number to 1
  + Document how to migrate from libgnome-keyring
  + Document how to use libsecret from C, js, python, vala
  + Documentation fixes
- Changes from version 0.4:
  + Implement per collection search
  + Register secret service errors as GDBus errors
  + Cache default SecretService object, and provide a way to
    'disconnect' it. Also 'disconnect' if service goes away.
  + Better use of aliases when storing passwords
  + Rename functions that operate on a dbus object path
  + Accept NULL as a SecretService parameter for many methods
  + Make loading items for a collection optional
  + More consistent use of schemas
  + Able to unlock and load secrets while searching for items
  + Cache the secret value on SecretItem
  + Add vala bindings and tests
  + Remove most varargs other than the simple password functions
  + Add SECRET_SCHEMA_NOTE schema
  + Lots of bug fixes
  + Documentation fixes
  + Testing fixes
  + Build fixes
- Add vala BuildRequires: required to build the new bindings.</changelog>
<changelog author="dimstar@opensuse.org" date="1344254400">- Update to version 0.8:
  + Fix up libsecret licensing (bgo#681255).
  + Initialize gettext correctly.
  + Fix crash in secret-tool.
  + Build and testing fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 0.9:
  + Add a manual page for secret-tool.
  + Fix up libsecret licensing.
  + Build and testing fixes.
- Add docbook-xsl-stylesheets and xsltproc BuildRequires in order
  to be able to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1347710400">- Change vala BuildRequires to a versioned BuildRequires: no reason
  to waste build power if vala is not recent enough.</changelog>
<changelog author="dimstar@opensuse.org" date="1348056000">- Update to version 0.10:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 0.11:
  + Better critical preconditions for invalid attributes.</changelog>
<changelog author="dimstar@opensuse.org" date="1353585600">- Update to version 0.12:
  + When storing a secret, create default keyring if necessary.
  + Share the memory pool with the gcr or libgnome-keyring library.
  + Testing and other fixes.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 0.13:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362398400">- Update to version 0.14:
  + Add a 'search' command to the tool for looking up items
    (bgo#693881).
  + Try to unlock locked collection when storing an item
    (bgo#693723).
  + Improve validation of the attributes table (bgo#694107).
  + Allow empty SecretValue contents (bgo#694787).
  + Introspection fixes (bgo#694448).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.15:
  + Tweak predefined schemas (bgo#695791).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 0.16:
  + Clarify documentation for secret_service_clear_xxx()
    (bgo#705629).
  + Pass return_type to prompt async begin functions, rather than
    finish.
  + Simpler way to use custom service/collection/item types.
  + service: Rename secret_service_new() and friends to xxx_open().
  + Add secret_value_get_text() function to return NULL terminated
    secret.
  + Fix return types in secret_service_search_finish() on error
    paths (bgo#698040).
  + Testing fixes (bgo#705202).
  + Build fixes (bgo#704233).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394193600">- Update to version 0.18:
  + Mark most of unstable API as stable.
  + Bump Glib dependency (2.38+).
  + Add secret_service_encode_dbus_secret() and decode functions.
  + Use TAP for testing, parallel tests, and non-recursive make.
  + Updated FSF's address.
  + Remove unstable vapi (bgo#721429).
  + Build fixes: bgo#720087, bgo#720244, bgo#707452.
  + Updated translations.
- Drop typelib-1_0-SecretUnstable-0 subpackage: no more unstable
  APIs (incl. dependency to this package from the -devel package).</changelog>
<changelog author="dimstar@opensuse.org" date="1429704000">- Update to version 0.18.2:
  + Testing fixes.
  + Documentation typo (bgo#747654).
  + Build fixes (bgo#743444).
  + Accomodate libgcrypt 1.6+.
  + Updated translations.
- Changes from version 0.18.1:
  + Testing fix (bgo#726909).</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 0.18.3:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libsecret-bsc932232-use-libgcrypt-allocators.patch
  (bsc#932232).</changelog>
<changelog author="zaitor@opensuse.org" date="1453204800">- Update to version 0.18.4:
  + Multithreading fixes (bgo#756766).
  + Fix memory leaks (bgo#756766).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 0.18.5:
  + Build fixes.
  + Port tests to Python 3 (bgo#761834).
  + Fix textual typos (bgo#763143).
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1472817600">- Add openSUSE conditional macro and description tag for existing
  patches in specfile.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add libsecret-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="4d688b1e6f9759c6eb2e188ecf997c74e6ad437ae94e2f47c93dc743a1fd5d05" name="libsecret-tools" arch="x86_64">
    <version epoch="0" ver="0.18.5" rel="6.1"/>

<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 0.3:
  + Add methods to get services from collections, items
  + Add methods to read and set aliases
  + Add methods which handle prompts for a DBus object path
  + Header path fix
  + Documentation fixes</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 0.7:
  + Match schema names for notes and network passwords
  + Add flags argument to secret_collection_for_alias()
  + Correct flags behavior for SecretCollection
  + Build fixes
- Changes from version 0.6:
  + Rename secret_password_remove() to secret_password_clear()
    and similar names for related functions.
  + The secret_attribute_build() functions are stable
  + The predefined secret schemas are stable
  + Build fixes
- Changes from version 0.5:
  + secret_service_remove() removes all unlocked matching items
  + Make sure that we have some attributes when searching
  + Add flags for item and collection creation
  + Add way to get schema name from a SecretItem
  + Rename secret_service_read_alias() to
    secret_collection_for_alias()
  + Split the stable and unstable APIs into separate
    pkg-config files, girs and vapis
  + Bump the library major version number to 1
  + Document how to migrate from libgnome-keyring
  + Document how to use libsecret from C, js, python, vala
  + Documentation fixes
- Changes from version 0.4:
  + Implement per collection search
  + Register secret service errors as GDBus errors
  + Cache default SecretService object, and provide a way to
    'disconnect' it. Also 'disconnect' if service goes away.
  + Better use of aliases when storing passwords
  + Rename functions that operate on a dbus object path
  + Accept NULL as a SecretService parameter for many methods
  + Make loading items for a collection optional
  + More consistent use of schemas
  + Able to unlock and load secrets while searching for items
  + Cache the secret value on SecretItem
  + Add vala bindings and tests
  + Remove most varargs other than the simple password functions
  + Add SECRET_SCHEMA_NOTE schema
  + Lots of bug fixes
  + Documentation fixes
  + Testing fixes
  + Build fixes
- Add vala BuildRequires: required to build the new bindings.</changelog>
<changelog author="dimstar@opensuse.org" date="1344254400">- Update to version 0.8:
  + Fix up libsecret licensing (bgo#681255).
  + Initialize gettext correctly.
  + Fix crash in secret-tool.
  + Build and testing fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 0.9:
  + Add a manual page for secret-tool.
  + Fix up libsecret licensing.
  + Build and testing fixes.
- Add docbook-xsl-stylesheets and xsltproc BuildRequires in order
  to be able to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1347710400">- Change vala BuildRequires to a versioned BuildRequires: no reason
  to waste build power if vala is not recent enough.</changelog>
<changelog author="dimstar@opensuse.org" date="1348056000">- Update to version 0.10:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 0.11:
  + Better critical preconditions for invalid attributes.</changelog>
<changelog author="dimstar@opensuse.org" date="1353585600">- Update to version 0.12:
  + When storing a secret, create default keyring if necessary.
  + Share the memory pool with the gcr or libgnome-keyring library.
  + Testing and other fixes.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 0.13:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362398400">- Update to version 0.14:
  + Add a 'search' command to the tool for looking up items
    (bgo#693881).
  + Try to unlock locked collection when storing an item
    (bgo#693723).
  + Improve validation of the attributes table (bgo#694107).
  + Allow empty SecretValue contents (bgo#694787).
  + Introspection fixes (bgo#694448).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.15:
  + Tweak predefined schemas (bgo#695791).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 0.16:
  + Clarify documentation for secret_service_clear_xxx()
    (bgo#705629).
  + Pass return_type to prompt async begin functions, rather than
    finish.
  + Simpler way to use custom service/collection/item types.
  + service: Rename secret_service_new() and friends to xxx_open().
  + Add secret_value_get_text() function to return NULL terminated
    secret.
  + Fix return types in secret_service_search_finish() on error
    paths (bgo#698040).
  + Testing fixes (bgo#705202).
  + Build fixes (bgo#704233).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394193600">- Update to version 0.18:
  + Mark most of unstable API as stable.
  + Bump Glib dependency (2.38+).
  + Add secret_service_encode_dbus_secret() and decode functions.
  + Use TAP for testing, parallel tests, and non-recursive make.
  + Updated FSF's address.
  + Remove unstable vapi (bgo#721429).
  + Build fixes: bgo#720087, bgo#720244, bgo#707452.
  + Updated translations.
- Drop typelib-1_0-SecretUnstable-0 subpackage: no more unstable
  APIs (incl. dependency to this package from the -devel package).</changelog>
<changelog author="dimstar@opensuse.org" date="1429704000">- Update to version 0.18.2:
  + Testing fixes.
  + Documentation typo (bgo#747654).
  + Build fixes (bgo#743444).
  + Accomodate libgcrypt 1.6+.
  + Updated translations.
- Changes from version 0.18.1:
  + Testing fix (bgo#726909).</changelog>
<changelog author="zaitor@opensuse.org" date="1438689600">- Update to version 0.18.3:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="hpj@suse.com" date="1448539200">- Add libsecret-bsc932232-use-libgcrypt-allocators.patch
  (bsc#932232).</changelog>
<changelog author="zaitor@opensuse.org" date="1453204800">- Update to version 0.18.4:
  + Multithreading fixes (bgo#756766).
  + Fix memory leaks (bgo#756766).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 0.18.5:
  + Build fixes.
  + Port tests to Python 3 (bgo#761834).
  + Fix textual typos (bgo#763143).
  + Updated translations.</changelog>
<changelog author="fezhang@suse.com" date="1472817600">- Add openSUSE conditional macro and description tag for existing
  patches in specfile.</changelog>
<changelog author="dimstar@opensuse.org" date="1500292800">- Add libsecret-secret-size.patch: Ensure that generated secret
  occupies the same number of bytes as prime. Eliminates random
  errors while libsecret tries to talk to gnome-keyring
  (bgo#778357 bsc#1043861).</changelog>

</package>
<package pkgid="daae6629c8d386cb232b758ad201b8ba665a5abd5c7b2516a74c3bd7ae72fc3d" name="libsgutils-devel" arch="x86_64">
    <version epoch="0" ver="1.43" rel="12.1"/>

<changelog author="hare@suse.de" date="1393329600">- Update to inofficial release 1.38b12r556 (bnc#865494)
  * Add --inhex parameter to sg_inq
  * sg_inq: decode ASCII information vpd page
  * sg_inq: allow page=-1 to force std INQUIRY decoding
  * sg_inq: improve unit serial number display
  * sg_vpd: Add LTO and DDS vendor pages
  * sg_persist: add SOP transport ID
  * sg_lib_data: sync asc/ascq code with T10
  * rescan-scsi-bus.sh: check if FC driver exports issue_lip
  * Add man page for rescan-scsi-bus.sh
- Remove sg3_utils-check-if-hba-supports-issue-lip.patch,
  has been merged with upstream</changelog>
<changelog author="hare@suse.de" date="1393588800">- Add 59-scsi-sg3_utils.rules (bnc#865494)</changelog>
<changelog author="hare@suse.de" date="1394193600">- Fixup 59-scsi_sg3_utils.rules to provide compability links
  for ata_id (bnc#866933)</changelog>
<changelog author="hare@suse.de" date="1397131200">- Update to official release 1.38
  * Update documentation
  * Update to latest SPC
  * Minor fixes
  * Add: sg3_utils-1.38.tar.xz
  * Remove: sg3_utils-1.38b7r538.tar.xz
  * Remove: sg3_utils-1.38r546.patch
  * Remove: sg3_utils-1.38b12r556.patch
- Use 59-scsi-sg3_utils from the rpm
  Remove: 59-scsi-sg3_utils.rules
- Fixup 59-scsi-sg3_utils.rules to not provide symlinks
  on multipath device paths (bnc#872929)
  Add: 0001-59-scsi-sg_utils.rules-skip-symlinks-for-multipath-d.patch</changelog>
<changelog author="hare@suse.de" date="1397217600">- Split off 59-scsi-sg_utils.rules to properly support
  multipathing (bnc#873151)
  Remove:
  0001-59-scsi-sg_utils.rules-skip-symlinks-for-multipath-d.patch
  Add:
  0001-Split-59-scsi-sg_utils.rules-for-multipath-support.patch</changelog>
<changelog author="spargaonkar@suse.com" date="1397563200">- added patch sginfo-inq-fields-strip-blank.patch
  sg3_utils: Strip out trailing info from vendor info products fields in inq
  bnc#863357
- added patches:
  * sginfo-inq-fields-strip-blank.patch</changelog>
<changelog author="hare@suse.de" date="1400155200">- Create compability links for ATA devices (bnc#876344)
  Add:
  0003-sg_inq-compability-links-for-ata_id.patch
- Suppress warnings for sg_inq --export (bnc#876454)
  Add:
  0004-sg_inq-suppress-warning-messages-for-export.patch</changelog>
<changelog author="rmilasan@suse.com" date="1404734400">- Fix missing rule for generating links for partitions also (bnc#883032)
  Add:
  0005-sg3_utils-fix-missing-rule-for-scsi_serial-partitions.patch</changelog>
<changelog author="hare@suse.de" date="1409745600">- Fixup formatting of invalid VPD pages (bnc#884779)
  Add: 0006-Fixup-formatting-of-invalid-VPD-page-0x83.patch
- sg_inq: Do not export long identifiers (bnc#884779)
  Add: 0007-sg_inq-Do-not-export-long-identifiers.patch</changelog>
<changelog author="hare@suse.de" date="1440504000">- Update to sg3_utils-1.41 (FATE#318723)
  - New utilities sg_rep_zones, sg_reset_wp, sg_zone, sg_write_verify,
    sg_ses_microcode, sg_sat_read_gplog
  - Bugfixes to existing utilities
- Remove patches merged with upstream:
  * Remove: 0007-sg_inq-Do-not-export-long-identifiers.patch
  * Remove: 0006-Fixup-formatting-of-invalid-VPD-page-0x83.patch
  * Remove: 0005-sg3_utils-fix-missing-rule-for-scsi_serial-partitions.patch
  * Remove: 0004-sg_inq-suppress-warning-messages-for-export.patch
  * Remove: 0003-sg_inq-compability-links-for-ata_id.patch
  * Remove: sginfo-inq-fields-strip-blank.patch
  * Remove: 0001-Split-59-scsi-sg_utils.rules-for-multipath-support.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1444392000">- Fix udev rule (bsc#949315)
  * Add: remove-stray-comma-in-udev-rule.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1444651200">- Correct fix of udev rule (bsc#949315)
  * Refresh: remove-stray-comma-in-udev-rule.patch</changelog>
<changelog author="hare@suse.de" date="1448539200">- Rename patch remove-stray-comma-in-udev-rule.patch -&gt;
  0001-58-scsi-sg3_symlink.rules-fixup-typo.patch
- 55-scsi-sg3_id.rules: Always set ID_WWN_WITH_EXTENSION (bsc#949796)
  * Add 0002-55-scsi-sg3_id.rules-Always-set-ID_WWN_WITH_EXTENSIO.patch
- sg_inq: deal with invalid strings in inquiry data (bsc#956815)
  * Add: 0003-sg_inq-deal-with-invalid-strings-in-inquiry-data.patch
- 55-scsi-sg3_id.rules: read VPD pages from sysfs
  * Add: 0004-55-scsi-sg3_id.rules-read-VPD-pages-from-sysfs.patch
- rescan-scsi-bus.sh: Use safe temporary files (bsc#955856)
  * Add 0005-rescan-scsi-bus.sh-Use-safe-temporary-files.patch
- rescan-scsi-bus.sh: Correctly quote $MULTIPATH (bsc#955222)
  * Add 0006-rescan-scsi-bus.sh-Correctly-quote-MULTIPATH.patch
- rescan-scsi-bus.sh: Fixup syntax error
  * Add 0007-rescan-scsi-bus.sh-Fixup-syntax-error.patch</changelog>
<changelog author="hare@suse.de" date="1455796800">- Update to new upstream release 1.42:
  * sg_timestamp: new, to report or set timestamp
  * sg_read_attr: new, supported by tape drives
  * sg_stpg: fix truncation of target port field
  * sg_inq: cope with unicode strings, udev fixes
  - update version descriptor list to 20160125
  - '--export': new entries for UUID descriptor
  * sg_ses: add more field acronyms (ses3r11)
  8 sg_logs: add Utilization lpage (sbc4r07)
  - add Background operation lpage
  - add Pending defects lpage
  - add LPS misalignment lpage (sbc4r10)
  - document '--All' ('-A') option
  - rework lto tape vendor lpages
  * sg_vpd: add Block limits extension VPD page
  - add Device constituents VPD page
  - add LB Protection VPD page (ssc 15-296r1)
  - LB provisioning VPD page: expand LBPRZ, add
    Minimum and Threshold percentage fields
  - rework lto tape vendor VPD pages
  * sg_inq+sg_vpd+sg_xcopy: add support for locally
    assigned UUIDs in VPD page 0x83 (15-267r2)
  * sg_sanitize: add --znr option (sbc4r07)
  * sg_rep_zones: add --partial option (zbc-r04)
  * sg_format: add ffmt option (sbc4r10)
  - add support for FORMAT MEDIUM (for tape)
  * sg_raw: document length relationships
  * rescan-scsi-bus.sh: updates from Suse
  * sg_lib_data: sync asc/ascq codes with T10 20151126
  * sg_lib: add 'sense' categories for SCSI statuses:
    condition met, busy, task set full, ACA active and
    task aborted
  - add pr2serr() extern
  - change sg_get_sense_str() and dStrHexStr(), return
    chars written (returned void previously)
  - add sg_get_sense_descriptors_str() function
  - add sg_get_designation_descriptor_str() function
  - sg_get_desig_type_str()+sg_get_desig_assoc_str()
    and sg_get_desig_code_set_str() added
  - sg_get_opcode_sa_name() break out zoning in/out,
    read attribute and read position service actions
  * sg_cmds_extra: add sg_ll_format_unit2() for FFMT
  * sg_pr2serr.h: new, to shorten fprintf(stderr, ...)
  * sg_io_linux, sg_pt_linux: drop SUGGEST_* decoding
  * sg_unaligned.h: add 48 bit support and gets for
    variable length unsigned integers
- Remove patches merged with upstream:
  * 0001-58-scsi-sg3_symlink.rules-fixup-typo.patch
  * 0002-55-scsi-sg3_id.rules-Always-set-ID_WWN_WITH_EXTENSIO.patch
  * 0003-sg_inq-deal-with-invalid-strings-in-inquiry-data.patch
  * 0004-55-scsi-sg3_id.rules-read-VPD-pages-from-sysfs.patch;
  * 0005-rescan-scsi-bus.sh-Use-safe-temporary-files.patch
  * 0006-rescan-scsi-bus.sh-Correctly-quote-MULTIPATH.patch
  * 0007-rescan-scsi-bus.sh-Fixup-syntax-error.patch
- Added 40-usb-blacklist.rules (bsc#840054)</changelog>
<changelog author="hare@suse.de" date="1462881600">- Update to new upstream release 1.43:
  * sg_senddiag: add --timeout=SEC option
  * sg_sanitize: add --timeout=SEC option
  * sg_format: add --timeout=SEC option
  * sg_decode sense: add --cdb option
  * sg_ses: handle 2 bit EIIOE field in aes dpage
  - expand join handling of SAS connectors and others
  - expand join debug code
  * sg_logs: fix volume statistics lpage when subpage
    is zero (ssc5r02a); decode mount history log parameter
  - decode Requested recovery, TapeAlert response, and
    Service buffer information lpages for tape
  - add '--pdt=DT' option
  * sg_inq: fix potential unbounded loop in --export
  - update version descriptor list to 20160420
  * sg_inq+sg_vpd: update Extended inquiry data vpd
    page (spc5r09)
  - add --force option to bypass checking supported
    vpd pages page and fetch requested page directly
  * sg_reassign+sg_write_same: fix ULONG_MAX problem
  * sg_turs+sg_requests: make both accept '--num=NUM'
    and '--number=NUM' for mutual compatibility
  * sg_zone: fix debug cdb naming
  * sg_opcode: add '--enumerate' and '--pdt=' options
  * sg_raw: add '--enumerate' option
  * sg_lib: add SSC maintenance in/out sa names
  - add read buffer(16) command mode names
  - add sg_decode_transportid_str()
  * sg_lib_data: sync asc/ascq codes with T10 20160425
  * rescan-scsi-bus.sh: harden code
  * clang --analyze static checker clean ups
  * shellcheck cleanup on scripts
  * automake: add AM_PROG_AR to configure.ac
  - upgrade to version 1.15
  * sg_inq+sg_vpd: add --force option to bypass checking
    of supported vpd pages
  * sg_lib_data: add Bind and Unbind to service action out(16)
- Add lunmask.service (bsc#954600, FATE#319786)
- Removed 40-usb-blacklist.rules; superseded by patch to sg_inq
- rescan-scsi-bus.sh: Fixup scanning for non-existing LUNs
  (bsc#958369)</changelog>
<changelog author="hare@suse.de" date="1462968000">- 55-scsi_sg3_id.rules: skip sg_inq for recent kernels (bsc#979436)</changelog>
<changelog author="sparschauer@suse.de" date="1473249600">- using "--lun" now works correctly (bsc#981452), adding patch:
  * add-lunsearch-filter-to-searchexisting.patch</changelog>
<changelog author="hare@suse.de" date="1477569600">- Merge patch with git repository
  * remove add-lunsearch-filter-to-searchexisting.patch
- 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)</changelog>
<changelog author="martin.wilck@suse.com" date="1481889600">- Add udev rules to handle legacy CCISS devices (bsc#1006175)</changelog>
<changelog author="hare@suse.de" date="1501848000">- rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1025176)
- rescan-scsi-bus.sh: Fixup help text for --forcerescan
  (kb#7018624)
- 55-scsi-sg3_utils.rules: Fallback to sg_inq --page when VPD
  cannot be accessed (bsc#1012523)
- Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
- sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943)
- sg_vpd: struct opts_t misaligment (bsc#1050943)
- 55-scsi-sg3_id.rules: remove fallback again (bsc#1012523)
- sg_inq: export all NAA values (bsc#1050767)
- Add initrd rebuild macros (bsc#1009269)</changelog>

</package>
<package pkgid="a7ba33e7d16d41915ffe7db5c225f07030d7d5e8880122ae48a8056a805c3b25" name="libsgutils2-2" arch="x86_64">
    <version epoch="0" ver="1.43" rel="12.1"/>

<changelog author="hare@suse.de" date="1393329600">- Update to inofficial release 1.38b12r556 (bnc#865494)
  * Add --inhex parameter to sg_inq
  * sg_inq: decode ASCII information vpd page
  * sg_inq: allow page=-1 to force std INQUIRY decoding
  * sg_inq: improve unit serial number display
  * sg_vpd: Add LTO and DDS vendor pages
  * sg_persist: add SOP transport ID
  * sg_lib_data: sync asc/ascq code with T10
  * rescan-scsi-bus.sh: check if FC driver exports issue_lip
  * Add man page for rescan-scsi-bus.sh
- Remove sg3_utils-check-if-hba-supports-issue-lip.patch,
  has been merged with upstream</changelog>
<changelog author="hare@suse.de" date="1393588800">- Add 59-scsi-sg3_utils.rules (bnc#865494)</changelog>
<changelog author="hare@suse.de" date="1394193600">- Fixup 59-scsi_sg3_utils.rules to provide compability links
  for ata_id (bnc#866933)</changelog>
<changelog author="hare@suse.de" date="1397131200">- Update to official release 1.38
  * Update documentation
  * Update to latest SPC
  * Minor fixes
  * Add: sg3_utils-1.38.tar.xz
  * Remove: sg3_utils-1.38b7r538.tar.xz
  * Remove: sg3_utils-1.38r546.patch
  * Remove: sg3_utils-1.38b12r556.patch
- Use 59-scsi-sg3_utils from the rpm
  Remove: 59-scsi-sg3_utils.rules
- Fixup 59-scsi-sg3_utils.rules to not provide symlinks
  on multipath device paths (bnc#872929)
  Add: 0001-59-scsi-sg_utils.rules-skip-symlinks-for-multipath-d.patch</changelog>
<changelog author="hare@suse.de" date="1397217600">- Split off 59-scsi-sg_utils.rules to properly support
  multipathing (bnc#873151)
  Remove:
  0001-59-scsi-sg_utils.rules-skip-symlinks-for-multipath-d.patch
  Add:
  0001-Split-59-scsi-sg_utils.rules-for-multipath-support.patch</changelog>
<changelog author="spargaonkar@suse.com" date="1397563200">- added patch sginfo-inq-fields-strip-blank.patch
  sg3_utils: Strip out trailing info from vendor info products fields in inq
  bnc#863357
- added patches:
  * sginfo-inq-fields-strip-blank.patch</changelog>
<changelog author="hare@suse.de" date="1400155200">- Create compability links for ATA devices (bnc#876344)
  Add:
  0003-sg_inq-compability-links-for-ata_id.patch
- Suppress warnings for sg_inq --export (bnc#876454)
  Add:
  0004-sg_inq-suppress-warning-messages-for-export.patch</changelog>
<changelog author="rmilasan@suse.com" date="1404734400">- Fix missing rule for generating links for partitions also (bnc#883032)
  Add:
  0005-sg3_utils-fix-missing-rule-for-scsi_serial-partitions.patch</changelog>
<changelog author="hare@suse.de" date="1409745600">- Fixup formatting of invalid VPD pages (bnc#884779)
  Add: 0006-Fixup-formatting-of-invalid-VPD-page-0x83.patch
- sg_inq: Do not export long identifiers (bnc#884779)
  Add: 0007-sg_inq-Do-not-export-long-identifiers.patch</changelog>
<changelog author="hare@suse.de" date="1440504000">- Update to sg3_utils-1.41 (FATE#318723)
  - New utilities sg_rep_zones, sg_reset_wp, sg_zone, sg_write_verify,
    sg_ses_microcode, sg_sat_read_gplog
  - Bugfixes to existing utilities
- Remove patches merged with upstream:
  * Remove: 0007-sg_inq-Do-not-export-long-identifiers.patch
  * Remove: 0006-Fixup-formatting-of-invalid-VPD-page-0x83.patch
  * Remove: 0005-sg3_utils-fix-missing-rule-for-scsi_serial-partitions.patch
  * Remove: 0004-sg_inq-suppress-warning-messages-for-export.patch
  * Remove: 0003-sg_inq-compability-links-for-ata_id.patch
  * Remove: sginfo-inq-fields-strip-blank.patch
  * Remove: 0001-Split-59-scsi-sg_utils.rules-for-multipath-support.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1444392000">- Fix udev rule (bsc#949315)
  * Add: remove-stray-comma-in-udev-rule.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1444651200">- Correct fix of udev rule (bsc#949315)
  * Refresh: remove-stray-comma-in-udev-rule.patch</changelog>
<changelog author="hare@suse.de" date="1448539200">- Rename patch remove-stray-comma-in-udev-rule.patch -&gt;
  0001-58-scsi-sg3_symlink.rules-fixup-typo.patch
- 55-scsi-sg3_id.rules: Always set ID_WWN_WITH_EXTENSION (bsc#949796)
  * Add 0002-55-scsi-sg3_id.rules-Always-set-ID_WWN_WITH_EXTENSIO.patch
- sg_inq: deal with invalid strings in inquiry data (bsc#956815)
  * Add: 0003-sg_inq-deal-with-invalid-strings-in-inquiry-data.patch
- 55-scsi-sg3_id.rules: read VPD pages from sysfs
  * Add: 0004-55-scsi-sg3_id.rules-read-VPD-pages-from-sysfs.patch
- rescan-scsi-bus.sh: Use safe temporary files (bsc#955856)
  * Add 0005-rescan-scsi-bus.sh-Use-safe-temporary-files.patch
- rescan-scsi-bus.sh: Correctly quote $MULTIPATH (bsc#955222)
  * Add 0006-rescan-scsi-bus.sh-Correctly-quote-MULTIPATH.patch
- rescan-scsi-bus.sh: Fixup syntax error
  * Add 0007-rescan-scsi-bus.sh-Fixup-syntax-error.patch</changelog>
<changelog author="hare@suse.de" date="1455796800">- Update to new upstream release 1.42:
  * sg_timestamp: new, to report or set timestamp
  * sg_read_attr: new, supported by tape drives
  * sg_stpg: fix truncation of target port field
  * sg_inq: cope with unicode strings, udev fixes
  - update version descriptor list to 20160125
  - '--export': new entries for UUID descriptor
  * sg_ses: add more field acronyms (ses3r11)
  8 sg_logs: add Utilization lpage (sbc4r07)
  - add Background operation lpage
  - add Pending defects lpage
  - add LPS misalignment lpage (sbc4r10)
  - document '--All' ('-A') option
  - rework lto tape vendor lpages
  * sg_vpd: add Block limits extension VPD page
  - add Device constituents VPD page
  - add LB Protection VPD page (ssc 15-296r1)
  - LB provisioning VPD page: expand LBPRZ, add
    Minimum and Threshold percentage fields
  - rework lto tape vendor VPD pages
  * sg_inq+sg_vpd+sg_xcopy: add support for locally
    assigned UUIDs in VPD page 0x83 (15-267r2)
  * sg_sanitize: add --znr option (sbc4r07)
  * sg_rep_zones: add --partial option (zbc-r04)
  * sg_format: add ffmt option (sbc4r10)
  - add support for FORMAT MEDIUM (for tape)
  * sg_raw: document length relationships
  * rescan-scsi-bus.sh: updates from Suse
  * sg_lib_data: sync asc/ascq codes with T10 20151126
  * sg_lib: add 'sense' categories for SCSI statuses:
    condition met, busy, task set full, ACA active and
    task aborted
  - add pr2serr() extern
  - change sg_get_sense_str() and dStrHexStr(), return
    chars written (returned void previously)
  - add sg_get_sense_descriptors_str() function
  - add sg_get_designation_descriptor_str() function
  - sg_get_desig_type_str()+sg_get_desig_assoc_str()
    and sg_get_desig_code_set_str() added
  - sg_get_opcode_sa_name() break out zoning in/out,
    read attribute and read position service actions
  * sg_cmds_extra: add sg_ll_format_unit2() for FFMT
  * sg_pr2serr.h: new, to shorten fprintf(stderr, ...)
  * sg_io_linux, sg_pt_linux: drop SUGGEST_* decoding
  * sg_unaligned.h: add 48 bit support and gets for
    variable length unsigned integers
- Remove patches merged with upstream:
  * 0001-58-scsi-sg3_symlink.rules-fixup-typo.patch
  * 0002-55-scsi-sg3_id.rules-Always-set-ID_WWN_WITH_EXTENSIO.patch
  * 0003-sg_inq-deal-with-invalid-strings-in-inquiry-data.patch
  * 0004-55-scsi-sg3_id.rules-read-VPD-pages-from-sysfs.patch;
  * 0005-rescan-scsi-bus.sh-Use-safe-temporary-files.patch
  * 0006-rescan-scsi-bus.sh-Correctly-quote-MULTIPATH.patch
  * 0007-rescan-scsi-bus.sh-Fixup-syntax-error.patch
- Added 40-usb-blacklist.rules (bsc#840054)</changelog>
<changelog author="hare@suse.de" date="1462881600">- Update to new upstream release 1.43:
  * sg_senddiag: add --timeout=SEC option
  * sg_sanitize: add --timeout=SEC option
  * sg_format: add --timeout=SEC option
  * sg_decode sense: add --cdb option
  * sg_ses: handle 2 bit EIIOE field in aes dpage
  - expand join handling of SAS connectors and others
  - expand join debug code
  * sg_logs: fix volume statistics lpage when subpage
    is zero (ssc5r02a); decode mount history log parameter
  - decode Requested recovery, TapeAlert response, and
    Service buffer information lpages for tape
  - add '--pdt=DT' option
  * sg_inq: fix potential unbounded loop in --export
  - update version descriptor list to 20160420
  * sg_inq+sg_vpd: update Extended inquiry data vpd
    page (spc5r09)
  - add --force option to bypass checking supported
    vpd pages page and fetch requested page directly
  * sg_reassign+sg_write_same: fix ULONG_MAX problem
  * sg_turs+sg_requests: make both accept '--num=NUM'
    and '--number=NUM' for mutual compatibility
  * sg_zone: fix debug cdb naming
  * sg_opcode: add '--enumerate' and '--pdt=' options
  * sg_raw: add '--enumerate' option
  * sg_lib: add SSC maintenance in/out sa names
  - add read buffer(16) command mode names
  - add sg_decode_transportid_str()
  * sg_lib_data: sync asc/ascq codes with T10 20160425
  * rescan-scsi-bus.sh: harden code
  * clang --analyze static checker clean ups
  * shellcheck cleanup on scripts
  * automake: add AM_PROG_AR to configure.ac
  - upgrade to version 1.15
  * sg_inq+sg_vpd: add --force option to bypass checking
    of supported vpd pages
  * sg_lib_data: add Bind and Unbind to service action out(16)
- Add lunmask.service (bsc#954600, FATE#319786)
- Removed 40-usb-blacklist.rules; superseded by patch to sg_inq
- rescan-scsi-bus.sh: Fixup scanning for non-existing LUNs
  (bsc#958369)</changelog>
<changelog author="hare@suse.de" date="1462968000">- 55-scsi_sg3_id.rules: skip sg_inq for recent kernels (bsc#979436)</changelog>
<changelog author="sparschauer@suse.de" date="1473249600">- using "--lun" now works correctly (bsc#981452), adding patch:
  * add-lunsearch-filter-to-searchexisting.patch</changelog>
<changelog author="hare@suse.de" date="1477569600">- Merge patch with git repository
  * remove add-lunsearch-filter-to-searchexisting.patch
- 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)</changelog>
<changelog author="martin.wilck@suse.com" date="1481889600">- Add udev rules to handle legacy CCISS devices (bsc#1006175)</changelog>
<changelog author="hare@suse.de" date="1501848000">- rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1025176)
- rescan-scsi-bus.sh: Fixup help text for --forcerescan
  (kb#7018624)
- 55-scsi-sg3_utils.rules: Fallback to sg_inq --page when VPD
  cannot be accessed (bsc#1012523)
- Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
- sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943)
- sg_vpd: struct opts_t misaligment (bsc#1050943)
- 55-scsi-sg3_id.rules: remove fallback again (bsc#1012523)
- sg_inq: export all NAA values (bsc#1050767)
- Add initrd rebuild macros (bsc#1009269)</changelog>

</package>
<package pkgid="a4bf7bb6632bdc77aa88e4f8f7ee859d66167c351853bce0c5fe61182140f8e8" name="libshibsp-lite6" arch="x86_64">
    <version epoch="0" ver="2.5.5" rel="9.2"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add shibboleth-sp-2.5.5-doxygen_timestamp.patch to remove
  timestamps in a documentation generated by Doxygen and avoid
  RPMLINT warnings (file-contains-date-and-time).
- add the macro %{realname} and change a name to "shibboleth-sp"
- fix Source address</changelog>
<changelog author="kstreitova@suse.com" date="1438257600">- fix some warnings
- add service as a separate file
- remove command line switches for conditional package builds
- remove *.dist files and unused *.config files
- remove unused conditionals
- move libraries to the subpackages</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="meissner@suse.com" date="1481025600">- buildrequire libmemcache-devel to ship the memcache-store plugin
  (fate#320800, bsc#1014173)</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add shibboleth-sp-2.5.5-CVE-2017-16852.patch to fix a critical
  security issue when shibsp/metadata/DynamicMetadataProvider.cpp
  in the Dynamic MetadataProvider plugin in Shibboleth Service
  Provider before 2.6.1 fails to properly configure itself with the
  MetadataFilter plugins and does not perform critical security
  checks [bsc#1068689] [CVE-2017-16852]</changelog>

</package>
<package pkgid="34b4a0156ed5f248a9530943d9a29f3f9e9696c11d5fa6ab62d3744c0b3fcfb3" name="libshibsp6" arch="x86_64">
    <version epoch="0" ver="2.5.5" rel="9.2"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add shibboleth-sp-2.5.5-doxygen_timestamp.patch to remove
  timestamps in a documentation generated by Doxygen and avoid
  RPMLINT warnings (file-contains-date-and-time).
- add the macro %{realname} and change a name to "shibboleth-sp"
- fix Source address</changelog>
<changelog author="kstreitova@suse.com" date="1438257600">- fix some warnings
- add service as a separate file
- remove command line switches for conditional package builds
- remove *.dist files and unused *.config files
- remove unused conditionals
- move libraries to the subpackages</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="meissner@suse.com" date="1481025600">- buildrequire libmemcache-devel to ship the memcache-store plugin
  (fate#320800, bsc#1014173)</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add shibboleth-sp-2.5.5-CVE-2017-16852.patch to fix a critical
  security issue when shibsp/metadata/DynamicMetadataProvider.cpp
  in the Dynamic MetadataProvider plugin in Shibboleth Service
  Provider before 2.6.1 fails to properly configure itself with the
  MetadataFilter plugins and does not perform critical security
  checks [bsc#1068689] [CVE-2017-16852]</changelog>

</package>
<package pkgid="6cb5a9c62d19b9ac65318ace9e2bdc6568a296eeb9c0bff139d9e162ec6999b4" name="libsmartcols-devel" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="5ff0205ad02060c8650e36819b479706d7c5c469f499ced1a6aac5229ba2dff2" name="libsmartcols-devel-static" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="09a518689e32b8ea3cf51b4d25185d2d8dbbb874e68aa75dff7da21aaf2a8e0f" name="libsmartcols1" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="8ab3cc6fb99bd9b469890e6c92efbe863594a1ba68b0317915f08036f8ae24ec" name="libsmbclient-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="4bf8debc28cd080ad7ea7030422b44785f83b4cc9a89f06ca3afac5e84bb8c6c" name="libsmbclient-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="2b0da401365973d2406be7162e98260ccf95013771d37c0b3515694612345945" name="libsmbclient-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="96f7d9faba6218e308c1682d24a1ddb754f42b4851b47eaa242e1d744a117a9b" name="libsmbclient0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="385437ea5d2edd35ea712b0263c3989bf481d59119adc200bd516c292409a71e" name="libsmbclient0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="4f43adfbbfadad10246ae9a4aa287827bace84e5e91e84f7f2f6aa723aa01a24" name="libsmbclient0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="311be264a5975b9e563ff1457f2879a026e314282956678edbf75263ad77e2ac" name="libsmbclient0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="c02f91e13c0e85edc382bd264658145428182ed969b1ad3aef1ac54a00f41057" name="libsmbclient0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="af8a1621b676efb239b3c5aaeff5b026c52305181fb322e6baf4053d0ed08997" name="libsmbclient0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="0a365b62a117a5cd0f43557f0660867ccfdf6b506b6d31d969b02780359e6698" name="libsmbconf-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="fe8b0a2c14892e5239aae441474d0b66f6a54c0d3d3e61cce039848bbfde4739" name="libsmbconf-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="14a3ca6da524d5b49fa4f541b2522347ab3246b837541f23def49ad1efa43733" name="libsmbconf-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="2de7848ee4fe975306e811ac5c0b4a6f8cacd5a57f3e3cafdbfe2aa8b7fb1d3e" name="libsmbconf0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="eab4755c07309cc2adf54e70957acccc2b930f9ee0536c772d42c9c030cf25bb" name="libsmbconf0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="169eaf5a4b87e6bb5960844f3e52af5141c732de6f9ba9a6ffea89e4362298b8" name="libsmbconf0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="be25e9aa064a22d44955528837083a3b7aec829710d2754204c1af2439688b60" name="libsmbconf0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="3ef9de1074efe121f6eea8a77d8c933b2af5e477a2638b6e0518a8aff86c7fc0" name="libsmbconf0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="bae1a1ca2e24110ed12255efe278f84d773644202553236bc635877d7615b812" name="libsmbconf0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="0265b3b6a58a206be15925b43ef6c2d30e63da57f595feed33cb05aa5f7246ab" name="libsmbldap-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="bb90dd063d52b5bd14ca9846328c108c31f8c59a18680477f97e6f80bf3ec6c2" name="libsmbldap-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="492e82579359f7469718ee0f7713626aa2d50d879579fe06dc9487036debf7cd" name="libsmbldap-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="6074e9150b5a2a3b022145887d9b4f917be42037cf145ecf8cdcf98282a36070" name="libsmbldap0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="25a1155cf2eb6ded0c8eb5010f461be76901c1bdf3ea01cabfae904ea32323b8" name="libsmbldap0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="8401cf60ee09fd1df312b24788913cf1acd8764602de7ab916e56b5e590a12e5" name="libsmbldap0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="0dc15fa05bc5c5ddb2e2a2958c38081e4ae97b2d935beaad94e7c46ed53afd39" name="libsmbldap0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="a94c2a13a10182abb6cca67d83b76863fdadcf8cfd315a1fb0efe54377592e9b" name="libsmbldap0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="25ef9a56dc4958f41b5cd5fc212aa597448a3ddea67a0e323078db88a72a0bff" name="libsmbldap0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="1e9b920d93a824176b945c3d48f672dc0f1dc393efc51ecda361e03d57d6e5e5" name="libsoftokn3" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="c5927956a13b438ad0e4cd0ab29b61689c1ba3b25f9d41b3e581e1a6b568cec8" name="libsoftokn3-32bit" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="ecd26a40be8ea15c504a5c348fb1665313a87b91b5b4ebdc90101398640594de" name="libsolv" arch="src">
    <version epoch="0" ver="0.6.30" rel="3.1"/>

<changelog author="mls@suse.de" date="1450094400">- change product links to also look at timestamps [bnc#956443]
- rework multiversion orphaned handling [bnc#957606]
- support key type changes in repodata_internalize()
- allow serialization of REPOKEY_TYPE_DELETED
- improve appdata handling of installed packages
- improve performance when run under xen
- bump version to 0.6.15</changelog>
<changelog author="mls@suse.de" date="1450699200">- fix orphan handling for dup with keeporphans set [bnc#957606]
- bump version to 0.6.16</changelog>
<changelog author="mls@suse.de" date="1450785600">- fix update handling of multiversion packages [bnc#957606]
- bump version to 0.6.17</changelog>
<changelog author="mls@suse.de" date="1454068800">- fix rule generation for linked packages [bnc#961738]
- add hash method in bindings for some classes
- bump version to 0.6.18</changelog>
<changelog author="mls@suse.de" date="1455537600">- parse media number from baseurl
- support susedata.&lt;lang&gt;.xml language files
- bump version to 0.6.19</changelog>
<changelog author="mls@suse.de" date="1460116800">- Better support of complex deps in pool_match_dep and
  selection_make_matchdeps
- make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again
- make dep2str use rpm-like output if disttype is rpm
- implement filtering of Requires(pre,post) for installed packages
- simplify handling of pseudo package updates [bnc#967006]
- improve speed of rpmmd metadata parsing
- bump version to 0.6.20</changelog>
<changelog author="mls@suse.de" date="1463572800">- add pool-&gt;setdisttype to the bindings
- fix error in repo_deb that could lead to missing packages
- add reason testing to testcase code
- add pool_whatcontainsdep, selection_make_matchdepid, and
  SELECTION_MATCH_DEPSTR
- add SOLVER_FAVOR and SOLVER_DISFAVOR job types
- allow unknown archs in pool_setarch
- add the SOLVER_FLAG_URPM_REORDER solver flag
- fix segfault in cshash dedup code [bnc#980901]
- fix supplements handling when implicitobsoleteusescolors is set
- bump version to 0.6.21</changelog>
<changelog author="mls@suse.de" date="1465300800">- fix bug in ignoreinst logic [bnc#983141]</changelog>
<changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
<changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
<changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
<changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
<changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
<changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
<changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
<changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
<changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
<changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
<changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
<changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>

</package>
<package pkgid="c849d0a376b9e4ddd734f831c800af9ee30611680cc7750e23bf36372c66c1e0" name="libsolv-demo" arch="x86_64">
    <version epoch="0" ver="0.6.30" rel="3.1"/>

<changelog author="mls@suse.de" date="1450094400">- change product links to also look at timestamps [bnc#956443]
- rework multiversion orphaned handling [bnc#957606]
- support key type changes in repodata_internalize()
- allow serialization of REPOKEY_TYPE_DELETED
- improve appdata handling of installed packages
- improve performance when run under xen
- bump version to 0.6.15</changelog>
<changelog author="mls@suse.de" date="1450699200">- fix orphan handling for dup with keeporphans set [bnc#957606]
- bump version to 0.6.16</changelog>
<changelog author="mls@suse.de" date="1450785600">- fix update handling of multiversion packages [bnc#957606]
- bump version to 0.6.17</changelog>
<changelog author="mls@suse.de" date="1454068800">- fix rule generation for linked packages [bnc#961738]
- add hash method in bindings for some classes
- bump version to 0.6.18</changelog>
<changelog author="mls@suse.de" date="1455537600">- parse media number from baseurl
- support susedata.&lt;lang&gt;.xml language files
- bump version to 0.6.19</changelog>
<changelog author="mls@suse.de" date="1460116800">- Better support of complex deps in pool_match_dep and
  selection_make_matchdeps
- make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again
- make dep2str use rpm-like output if disttype is rpm
- implement filtering of Requires(pre,post) for installed packages
- simplify handling of pseudo package updates [bnc#967006]
- improve speed of rpmmd metadata parsing
- bump version to 0.6.20</changelog>
<changelog author="mls@suse.de" date="1463572800">- add pool-&gt;setdisttype to the bindings
- fix error in repo_deb that could lead to missing packages
- add reason testing to testcase code
- add pool_whatcontainsdep, selection_make_matchdepid, and
  SELECTION_MATCH_DEPSTR
- add SOLVER_FAVOR and SOLVER_DISFAVOR job types
- allow unknown archs in pool_setarch
- add the SOLVER_FLAG_URPM_REORDER solver flag
- fix segfault in cshash dedup code [bnc#980901]
- fix supplements handling when implicitobsoleteusescolors is set
- bump version to 0.6.21</changelog>
<changelog author="mls@suse.de" date="1465300800">- fix bug in ignoreinst logic [bnc#983141]</changelog>
<changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
<changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
<changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
<changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
<changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
<changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
<changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
<changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
<changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
<changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
<changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
<changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>

</package>
<package pkgid="e087854b9ee7619954410ad81125f314e613c976b93789b27665166f30318920" name="libsolv-devel" arch="x86_64">
    <version epoch="0" ver="0.6.30" rel="3.1"/>

<changelog author="mls@suse.de" date="1450094400">- change product links to also look at timestamps [bnc#956443]
- rework multiversion orphaned handling [bnc#957606]
- support key type changes in repodata_internalize()
- allow serialization of REPOKEY_TYPE_DELETED
- improve appdata handling of installed packages
- improve performance when run under xen
- bump version to 0.6.15</changelog>
<changelog author="mls@suse.de" date="1450699200">- fix orphan handling for dup with keeporphans set [bnc#957606]
- bump version to 0.6.16</changelog>
<changelog author="mls@suse.de" date="1450785600">- fix update handling of multiversion packages [bnc#957606]
- bump version to 0.6.17</changelog>
<changelog author="mls@suse.de" date="1454068800">- fix rule generation for linked packages [bnc#961738]
- add hash method in bindings for some classes
- bump version to 0.6.18</changelog>
<changelog author="mls@suse.de" date="1455537600">- parse media number from baseurl
- support susedata.&lt;lang&gt;.xml language files
- bump version to 0.6.19</changelog>
<changelog author="mls@suse.de" date="1460116800">- Better support of complex deps in pool_match_dep and
  selection_make_matchdeps
- make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again
- make dep2str use rpm-like output if disttype is rpm
- implement filtering of Requires(pre,post) for installed packages
- simplify handling of pseudo package updates [bnc#967006]
- improve speed of rpmmd metadata parsing
- bump version to 0.6.20</changelog>
<changelog author="mls@suse.de" date="1463572800">- add pool-&gt;setdisttype to the bindings
- fix error in repo_deb that could lead to missing packages
- add reason testing to testcase code
- add pool_whatcontainsdep, selection_make_matchdepid, and
  SELECTION_MATCH_DEPSTR
- add SOLVER_FAVOR and SOLVER_DISFAVOR job types
- allow unknown archs in pool_setarch
- add the SOLVER_FLAG_URPM_REORDER solver flag
- fix segfault in cshash dedup code [bnc#980901]
- fix supplements handling when implicitobsoleteusescolors is set
- bump version to 0.6.21</changelog>
<changelog author="mls@suse.de" date="1465300800">- fix bug in ignoreinst logic [bnc#983141]</changelog>
<changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
<changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
<changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
<changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
<changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
<changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
<changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
<changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
<changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
<changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
<changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
<changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>

</package>
<package pkgid="48c78abc8d37275d90f70d5a89c5d407336e1b5e7f675b9c1f652fad52270b39" name="libsolv-tools" arch="x86_64">
    <version epoch="0" ver="0.6.30" rel="3.1"/>

<changelog author="mls@suse.de" date="1450094400">- change product links to also look at timestamps [bnc#956443]
- rework multiversion orphaned handling [bnc#957606]
- support key type changes in repodata_internalize()
- allow serialization of REPOKEY_TYPE_DELETED
- improve appdata handling of installed packages
- improve performance when run under xen
- bump version to 0.6.15</changelog>
<changelog author="mls@suse.de" date="1450699200">- fix orphan handling for dup with keeporphans set [bnc#957606]
- bump version to 0.6.16</changelog>
<changelog author="mls@suse.de" date="1450785600">- fix update handling of multiversion packages [bnc#957606]
- bump version to 0.6.17</changelog>
<changelog author="mls@suse.de" date="1454068800">- fix rule generation for linked packages [bnc#961738]
- add hash method in bindings for some classes
- bump version to 0.6.18</changelog>
<changelog author="mls@suse.de" date="1455537600">- parse media number from baseurl
- support susedata.&lt;lang&gt;.xml language files
- bump version to 0.6.19</changelog>
<changelog author="mls@suse.de" date="1460116800">- Better support of complex deps in pool_match_dep and
  selection_make_matchdeps
- make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again
- make dep2str use rpm-like output if disttype is rpm
- implement filtering of Requires(pre,post) for installed packages
- simplify handling of pseudo package updates [bnc#967006]
- improve speed of rpmmd metadata parsing
- bump version to 0.6.20</changelog>
<changelog author="mls@suse.de" date="1463572800">- add pool-&gt;setdisttype to the bindings
- fix error in repo_deb that could lead to missing packages
- add reason testing to testcase code
- add pool_whatcontainsdep, selection_make_matchdepid, and
  SELECTION_MATCH_DEPSTR
- add SOLVER_FAVOR and SOLVER_DISFAVOR job types
- allow unknown archs in pool_setarch
- add the SOLVER_FLAG_URPM_REORDER solver flag
- fix segfault in cshash dedup code [bnc#980901]
- fix supplements handling when implicitobsoleteusescolors is set
- bump version to 0.6.21</changelog>
<changelog author="mls@suse.de" date="1465300800">- fix bug in ignoreinst logic [bnc#983141]</changelog>
<changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
<changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
<changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
<changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
<changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
<changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
<changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
<changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
<changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
<changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
<changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
<changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>

</package>
<package pkgid="0c163e8a160424f8f382f87405a726daac3c7e3eff7bc0c1300514442acd453f" name="libsoup" arch="src">
    <version epoch="0" ver="2.54.1" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.49.1:
  + Fixed a bug in the SoupMessage:event signal that broke
    evolution's ability to connect to https hosts with "bad"
    certificates (bgo#739951).
  + Fixed a case where the async codepaths could potentially block
    on a synchronous write (bgo#727138).
  + Fixed the symbol soup_server_set_ssl_cert_file() to get
    exported, and added soup_server_get_uris() to the
    documentation.
  + Improved a bunch of introspection annotations (bgo#729987).
  + Clarified some documentation.
  + Fixed Windows build, twice (bgo#738003, bgo#738551).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.49.91:
  + Libsoup now has support for WebSockets in both SoupSession and
    SoupServer (bgo#627738).
  + Added support for NTLMv2 Session Security to SoupAuthNTLM.
    (This is transparent to the app/user; if the server supports
    it, it will be used) (bgo#739192).
  + Added soup_server_accept_iostream() to allow feeding a
    non-GSocketConnection GIOStream to SoupServer (eg, when
    accepting HTTP requests on some other sort of connection)
    (bgo#744186).
  + Added soup_session_steal_connection() and
    soup_client_context_steal_connection(), to allow you to steal a
    GIOStream from a SoupSession or SoupServer and then use it for
    non-HTTP purposes (bgo#721343).
  + Added soup_server_add_early_handler(), for adding SoupServer
    handlers to run at :got-headers time rather than :got-body
    (eg, to set up a streaming read of the request body)
    (bgo#625645).
  + Added a new SOUP_MESSAGE_IGNORE_CONNECTION_LIMITS flag, which
    can be used to bypass SoupSession:max-conns and
    SoupSession:max-conns-per-host on a per-message basis
    (bgo#744720).
  + Multiple SoupCache fixes:
  - Leaked resources are now cleaned up when opening the cache
    (bgo#667682).
  - The "Age" header is no longer added to cached responses
    (bgo#741108).
  - Fixed the interpretation of the "must-revalidate" directive
    to not be stricter than required (bgo#744468).
  - Messages retrieved from cache now behave slightly more like
    non-cache messages in terms of SoupSession signals and timing
    (bgo#744788). Additionally, there is a new
    SoupMessage::starting signal, which is like
    SoupSession::request-started, but emitted for cached
    resources as well (bgo#731153).
  + Fixed soup_session_cancel_message() to work reliably on paused
    messages (bgo#745094).
  + Added code-coverage support to the build (bgo#744744).
  + Fixed the library symbol check in "make check" to work when
    building with linker options that result in slightly different
    organization (bgo#741348).
  + Added a hack to SoupSessionFeature so that people will stop
    re-reporting an old Eclipse bug against libsoup (bgo#710242).
  + Miscellaneous bug and leak fixes in the test programs, leak
    fixes in libsoup, and documentation updates.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384001">- Update to version 2.49.91.1:
  + websockets: minor optimization.
  + websockets: fix 32-bit build.
  + docs: fix build.
  + tests: fix when building without glib-networking available.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.49.92:
  + Fixed an NTLM problem that caused spurious "Authentication
    Failed" errors in evolution-ews (bgo#735197).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.50.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1435320000">- Update to version 2.51.3:
  + Fixed "make check" in non-English locales (rh#1224989,
    bgo#749397).
  + Fixed some compiler warnings (bgo#748514).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.51.90:
  + Added a new GVariant-based XMLRPC API, and deprecated the old
    GValue-based API (along with the associated GValue-manipulating
    utilities) (bgo#746495).
  + Multiple build fixes for Visual Studio (bgo#752952).
  + Added VAPI generation (bgo#750679).
  + Fixed the mode bits on soup-cookie.c, which was previously
    marked executable for some reason (rh#1247285).
  + Updated translations.
- Add pkgconfig(vapigen) BuildRequires: New dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 2.51.92:
  + Added g_autoptr() support for all libsoup types (bgo#754721).
  + Added a missing (allow-none) annotation to soup_uri_normalize()
    (bgo#754776).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.52.0:
  + Removed duplicate test paths from tests/date so it will pass
    with glib 2.46.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.52.1:
  + Fixed build under MinGW.
  + Fixed build with --disable-introspection (bgo#755389).
  + Fixed HTTP authentication protection space handling for files
    directly under the root directory (bgo#755617).
  + Fixed a warning when loading data from SoupCache while using
    an authenticated proxy (bgo#756076).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.52.2:
  + Fixed build under MinGW.
  + Fix SoupServerWebsocketCallback handling so that the
    SoupClientContext passed to it is still valid.
  + Added a .deps file to define dependencies for valac.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.53.1:
  + Really fixed build under MinGW for sure this time.
  + Fixed SoupServer Web Sockets code so that the SoupClientContext
    passed to a SoupServerWebsocketCallback is fully usable (rather
    than crashing when you try to do most things).</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 2.53.2:
  + Fixed up symbol visibility handling for mingw by copying GLib's
    system (bgo#757146).
  + Finally marked the old SoupSessionAsync and SoupSessionSync
    methods as deprecated (bgo#757146).
  + Added libsoup-2.4.deps for valac.
  + Make it possible to build from git without gtk-doc being
    installed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.53.90:
  + NUL bytes in headers are now ignored (bgo#760832).
  + Fixed transfer annotation of soup_form_decode* functions
    (bgo#743966).
  + Updated translations.
- Call intltoolize before configure in order to fix up the tarball
  to work with recent versions of intltool.</changelog>
<changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.53.92:
  + libsoup now supports HTTP "Negotiate"/GSSAPI/Kerberos
    authentication. It must be enabled specifically by the
    application and is also subject to certain other restrictions,
    some of which are not yet controllable through the API
    (bgo#587145).
  + Added support for building under MSVC (bgo#758759).
  + Fixed a problem with the 2.53.90 tarball that caused
    translations to be mis-installed.
  + Updated translations.
- Remove intltoolize call: the tarball has been corrected.
- Add krb5-devel BuildRequires: new dependency for krb5 support.
- Pass --with-krb5-config=%{_libexecdir}/mit/bin/krb5-config and
  - -with-gssapi to configure in order to enable krb5 support.</changelog>
<changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.54.0:
  + Fixed examples/simple-httpd on Windows (bgo758759).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.54.0.1:
  + Fix a build problem with the 2.54.0 tarball, which would not
    build if you configured with "--without-gnome".</changelog>
<changelog author="zaitor@opensuse.org" date="1461326400">- Add libsoup-auth-ntlm-fix.patch: Fix NTLM auth failure with
  latest samba (bgo#765106, boo#976110).</changelog>
<changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.54.1:
  + Fixed an ABI break in 2.54.0 caused by adding a member to
    SoupAuthClass; 2.54.1 is ABI-compatible with 2.53.92 and
    earlier, but NOT with the anomalous 2.54.0. If you built
    packages against 2.54.0, you will need to rebuild them against
    2.54.1.
  + Fixed NTLM authentication when ntlm_auth from the latest
    version of Samba is present (bgo#765106).
  + Updates to MSVC build, including for GSS-API support.
  + Updated translations.
- Drop libsoup-auth-ntlm-fix.patch: Fixed upstream.</changelog>
<changelog author="psimons@suse.com" date="1502280000">- Apply "CVE-2017-2885.patch" to fix a stack-based buffer overflow
  with HTTP Chunked Encoding (bsc#1052916, CVE-2017-2885).</changelog>

</package>
<package pkgid="0a686e4361396faa409d27ebca0d3762f4013b7a25ce27a79048b6ac63967426" name="libsoup-2_4-1" arch="x86_64">
    <version epoch="0" ver="2.54.1" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.49.1:
  + Fixed a bug in the SoupMessage:event signal that broke
    evolution's ability to connect to https hosts with "bad"
    certificates (bgo#739951).
  + Fixed a case where the async codepaths could potentially block
    on a synchronous write (bgo#727138).
  + Fixed the symbol soup_server_set_ssl_cert_file() to get
    exported, and added soup_server_get_uris() to the
    documentation.
  + Improved a bunch of introspection annotations (bgo#729987).
  + Clarified some documentation.
  + Fixed Windows build, twice (bgo#738003, bgo#738551).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.49.91:
  + Libsoup now has support for WebSockets in both SoupSession and
    SoupServer (bgo#627738).
  + Added support for NTLMv2 Session Security to SoupAuthNTLM.
    (This is transparent to the app/user; if the server supports
    it, it will be used) (bgo#739192).
  + Added soup_server_accept_iostream() to allow feeding a
    non-GSocketConnection GIOStream to SoupServer (eg, when
    accepting HTTP requests on some other sort of connection)
    (bgo#744186).
  + Added soup_session_steal_connection() and
    soup_client_context_steal_connection(), to allow you to steal a
    GIOStream from a SoupSession or SoupServer and then use it for
    non-HTTP purposes (bgo#721343).
  + Added soup_server_add_early_handler(), for adding SoupServer
    handlers to run at :got-headers time rather than :got-body
    (eg, to set up a streaming read of the request body)
    (bgo#625645).
  + Added a new SOUP_MESSAGE_IGNORE_CONNECTION_LIMITS flag, which
    can be used to bypass SoupSession:max-conns and
    SoupSession:max-conns-per-host on a per-message basis
    (bgo#744720).
  + Multiple SoupCache fixes:
  - Leaked resources are now cleaned up when opening the cache
    (bgo#667682).
  - The "Age" header is no longer added to cached responses
    (bgo#741108).
  - Fixed the interpretation of the "must-revalidate" directive
    to not be stricter than required (bgo#744468).
  - Messages retrieved from cache now behave slightly more like
    non-cache messages in terms of SoupSession signals and timing
    (bgo#744788). Additionally, there is a new
    SoupMessage::starting signal, which is like
    SoupSession::request-started, but emitted for cached
    resources as well (bgo#731153).
  + Fixed soup_session_cancel_message() to work reliably on paused
    messages (bgo#745094).
  + Added code-coverage support to the build (bgo#744744).
  + Fixed the library symbol check in "make check" to work when
    building with linker options that result in slightly different
    organization (bgo#741348).
  + Added a hack to SoupSessionFeature so that people will stop
    re-reporting an old Eclipse bug against libsoup (bgo#710242).
  + Miscellaneous bug and leak fixes in the test programs, leak
    fixes in libsoup, and documentation updates.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384001">- Update to version 2.49.91.1:
  + websockets: minor optimization.
  + websockets: fix 32-bit build.
  + docs: fix build.
  + tests: fix when building without glib-networking available.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.49.92:
  + Fixed an NTLM problem that caused spurious "Authentication
    Failed" errors in evolution-ews (bgo#735197).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.50.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1435320000">- Update to version 2.51.3:
  + Fixed "make check" in non-English locales (rh#1224989,
    bgo#749397).
  + Fixed some compiler warnings (bgo#748514).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.51.90:
  + Added a new GVariant-based XMLRPC API, and deprecated the old
    GValue-based API (along with the associated GValue-manipulating
    utilities) (bgo#746495).
  + Multiple build fixes for Visual Studio (bgo#752952).
  + Added VAPI generation (bgo#750679).
  + Fixed the mode bits on soup-cookie.c, which was previously
    marked executable for some reason (rh#1247285).
  + Updated translations.
- Add pkgconfig(vapigen) BuildRequires: New dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 2.51.92:
  + Added g_autoptr() support for all libsoup types (bgo#754721).
  + Added a missing (allow-none) annotation to soup_uri_normalize()
    (bgo#754776).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.52.0:
  + Removed duplicate test paths from tests/date so it will pass
    with glib 2.46.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.52.1:
  + Fixed build under MinGW.
  + Fixed build with --disable-introspection (bgo#755389).
  + Fixed HTTP authentication protection space handling for files
    directly under the root directory (bgo#755617).
  + Fixed a warning when loading data from SoupCache while using
    an authenticated proxy (bgo#756076).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.52.2:
  + Fixed build under MinGW.
  + Fix SoupServerWebsocketCallback handling so that the
    SoupClientContext passed to it is still valid.
  + Added a .deps file to define dependencies for valac.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.53.1:
  + Really fixed build under MinGW for sure this time.
  + Fixed SoupServer Web Sockets code so that the SoupClientContext
    passed to a SoupServerWebsocketCallback is fully usable (rather
    than crashing when you try to do most things).</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 2.53.2:
  + Fixed up symbol visibility handling for mingw by copying GLib's
    system (bgo#757146).
  + Finally marked the old SoupSessionAsync and SoupSessionSync
    methods as deprecated (bgo#757146).
  + Added libsoup-2.4.deps for valac.
  + Make it possible to build from git without gtk-doc being
    installed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.53.90:
  + NUL bytes in headers are now ignored (bgo#760832).
  + Fixed transfer annotation of soup_form_decode* functions
    (bgo#743966).
  + Updated translations.
- Call intltoolize before configure in order to fix up the tarball
  to work with recent versions of intltool.</changelog>
<changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.53.92:
  + libsoup now supports HTTP "Negotiate"/GSSAPI/Kerberos
    authentication. It must be enabled specifically by the
    application and is also subject to certain other restrictions,
    some of which are not yet controllable through the API
    (bgo#587145).
  + Added support for building under MSVC (bgo#758759).
  + Fixed a problem with the 2.53.90 tarball that caused
    translations to be mis-installed.
  + Updated translations.
- Remove intltoolize call: the tarball has been corrected.
- Add krb5-devel BuildRequires: new dependency for krb5 support.
- Pass --with-krb5-config=%{_libexecdir}/mit/bin/krb5-config and
  - -with-gssapi to configure in order to enable krb5 support.</changelog>
<changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.54.0:
  + Fixed examples/simple-httpd on Windows (bgo758759).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.54.0.1:
  + Fix a build problem with the 2.54.0 tarball, which would not
    build if you configured with "--without-gnome".</changelog>
<changelog author="zaitor@opensuse.org" date="1461326400">- Add libsoup-auth-ntlm-fix.patch: Fix NTLM auth failure with
  latest samba (bgo#765106, boo#976110).</changelog>
<changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.54.1:
  + Fixed an ABI break in 2.54.0 caused by adding a member to
    SoupAuthClass; 2.54.1 is ABI-compatible with 2.53.92 and
    earlier, but NOT with the anomalous 2.54.0. If you built
    packages against 2.54.0, you will need to rebuild them against
    2.54.1.
  + Fixed NTLM authentication when ntlm_auth from the latest
    version of Samba is present (bgo#765106).
  + Updates to MSVC build, including for GSS-API support.
  + Updated translations.
- Drop libsoup-auth-ntlm-fix.patch: Fixed upstream.</changelog>
<changelog author="psimons@suse.com" date="1502280000">- Apply "CVE-2017-2885.patch" to fix a stack-based buffer overflow
  with HTTP Chunked Encoding (bsc#1052916, CVE-2017-2885).</changelog>

</package>
<package pkgid="d0ba23db94e88e2530e9da995ef16f2d3dba0d697262d4f44d32b4ae002be8cb" name="libsoup-2_4-1-32bit" arch="x86_64">
    <version epoch="0" ver="2.54.1" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.49.1:
  + Fixed a bug in the SoupMessage:event signal that broke
    evolution's ability to connect to https hosts with "bad"
    certificates (bgo#739951).
  + Fixed a case where the async codepaths could potentially block
    on a synchronous write (bgo#727138).
  + Fixed the symbol soup_server_set_ssl_cert_file() to get
    exported, and added soup_server_get_uris() to the
    documentation.
  + Improved a bunch of introspection annotations (bgo#729987).
  + Clarified some documentation.
  + Fixed Windows build, twice (bgo#738003, bgo#738551).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.49.91:
  + Libsoup now has support for WebSockets in both SoupSession and
    SoupServer (bgo#627738).
  + Added support for NTLMv2 Session Security to SoupAuthNTLM.
    (This is transparent to the app/user; if the server supports
    it, it will be used) (bgo#739192).
  + Added soup_server_accept_iostream() to allow feeding a
    non-GSocketConnection GIOStream to SoupServer (eg, when
    accepting HTTP requests on some other sort of connection)
    (bgo#744186).
  + Added soup_session_steal_connection() and
    soup_client_context_steal_connection(), to allow you to steal a
    GIOStream from a SoupSession or SoupServer and then use it for
    non-HTTP purposes (bgo#721343).
  + Added soup_server_add_early_handler(), for adding SoupServer
    handlers to run at :got-headers time rather than :got-body
    (eg, to set up a streaming read of the request body)
    (bgo#625645).
  + Added a new SOUP_MESSAGE_IGNORE_CONNECTION_LIMITS flag, which
    can be used to bypass SoupSession:max-conns and
    SoupSession:max-conns-per-host on a per-message basis
    (bgo#744720).
  + Multiple SoupCache fixes:
  - Leaked resources are now cleaned up when opening the cache
    (bgo#667682).
  - The "Age" header is no longer added to cached responses
    (bgo#741108).
  - Fixed the interpretation of the "must-revalidate" directive
    to not be stricter than required (bgo#744468).
  - Messages retrieved from cache now behave slightly more like
    non-cache messages in terms of SoupSession signals and timing
    (bgo#744788). Additionally, there is a new
    SoupMessage::starting signal, which is like
    SoupSession::request-started, but emitted for cached
    resources as well (bgo#731153).
  + Fixed soup_session_cancel_message() to work reliably on paused
    messages (bgo#745094).
  + Added code-coverage support to the build (bgo#744744).
  + Fixed the library symbol check in "make check" to work when
    building with linker options that result in slightly different
    organization (bgo#741348).
  + Added a hack to SoupSessionFeature so that people will stop
    re-reporting an old Eclipse bug against libsoup (bgo#710242).
  + Miscellaneous bug and leak fixes in the test programs, leak
    fixes in libsoup, and documentation updates.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384001">- Update to version 2.49.91.1:
  + websockets: minor optimization.
  + websockets: fix 32-bit build.
  + docs: fix build.
  + tests: fix when building without glib-networking available.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.49.92:
  + Fixed an NTLM problem that caused spurious "Authentication
    Failed" errors in evolution-ews (bgo#735197).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.50.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1435320000">- Update to version 2.51.3:
  + Fixed "make check" in non-English locales (rh#1224989,
    bgo#749397).
  + Fixed some compiler warnings (bgo#748514).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.51.90:
  + Added a new GVariant-based XMLRPC API, and deprecated the old
    GValue-based API (along with the associated GValue-manipulating
    utilities) (bgo#746495).
  + Multiple build fixes for Visual Studio (bgo#752952).
  + Added VAPI generation (bgo#750679).
  + Fixed the mode bits on soup-cookie.c, which was previously
    marked executable for some reason (rh#1247285).
  + Updated translations.
- Add pkgconfig(vapigen) BuildRequires: New dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 2.51.92:
  + Added g_autoptr() support for all libsoup types (bgo#754721).
  + Added a missing (allow-none) annotation to soup_uri_normalize()
    (bgo#754776).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.52.0:
  + Removed duplicate test paths from tests/date so it will pass
    with glib 2.46.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.52.1:
  + Fixed build under MinGW.
  + Fixed build with --disable-introspection (bgo#755389).
  + Fixed HTTP authentication protection space handling for files
    directly under the root directory (bgo#755617).
  + Fixed a warning when loading data from SoupCache while using
    an authenticated proxy (bgo#756076).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.52.2:
  + Fixed build under MinGW.
  + Fix SoupServerWebsocketCallback handling so that the
    SoupClientContext passed to it is still valid.
  + Added a .deps file to define dependencies for valac.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.53.1:
  + Really fixed build under MinGW for sure this time.
  + Fixed SoupServer Web Sockets code so that the SoupClientContext
    passed to a SoupServerWebsocketCallback is fully usable (rather
    than crashing when you try to do most things).</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 2.53.2:
  + Fixed up symbol visibility handling for mingw by copying GLib's
    system (bgo#757146).
  + Finally marked the old SoupSessionAsync and SoupSessionSync
    methods as deprecated (bgo#757146).
  + Added libsoup-2.4.deps for valac.
  + Make it possible to build from git without gtk-doc being
    installed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.53.90:
  + NUL bytes in headers are now ignored (bgo#760832).
  + Fixed transfer annotation of soup_form_decode* functions
    (bgo#743966).
  + Updated translations.
- Call intltoolize before configure in order to fix up the tarball
  to work with recent versions of intltool.</changelog>
<changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.53.92:
  + libsoup now supports HTTP "Negotiate"/GSSAPI/Kerberos
    authentication. It must be enabled specifically by the
    application and is also subject to certain other restrictions,
    some of which are not yet controllable through the API
    (bgo#587145).
  + Added support for building under MSVC (bgo#758759).
  + Fixed a problem with the 2.53.90 tarball that caused
    translations to be mis-installed.
  + Updated translations.
- Remove intltoolize call: the tarball has been corrected.
- Add krb5-devel BuildRequires: new dependency for krb5 support.
- Pass --with-krb5-config=%{_libexecdir}/mit/bin/krb5-config and
  - -with-gssapi to configure in order to enable krb5 support.</changelog>
<changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.54.0:
  + Fixed examples/simple-httpd on Windows (bgo758759).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.54.0.1:
  + Fix a build problem with the 2.54.0 tarball, which would not
    build if you configured with "--without-gnome".</changelog>
<changelog author="zaitor@opensuse.org" date="1461326400">- Add libsoup-auth-ntlm-fix.patch: Fix NTLM auth failure with
  latest samba (bgo#765106, boo#976110).</changelog>
<changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.54.1:
  + Fixed an ABI break in 2.54.0 caused by adding a member to
    SoupAuthClass; 2.54.1 is ABI-compatible with 2.53.92 and
    earlier, but NOT with the anomalous 2.54.0. If you built
    packages against 2.54.0, you will need to rebuild them against
    2.54.1.
  + Fixed NTLM authentication when ntlm_auth from the latest
    version of Samba is present (bgo#765106).
  + Updates to MSVC build, including for GSS-API support.
  + Updated translations.
- Drop libsoup-auth-ntlm-fix.patch: Fixed upstream.</changelog>
<changelog author="psimons@suse.com" date="1502280000">- Apply "CVE-2017-2885.patch" to fix a stack-based buffer overflow
  with HTTP Chunked Encoding (bsc#1052916, CVE-2017-2885).</changelog>

</package>
<package pkgid="982b9cab3612414d3d7a4783d680ae52d05211b550a699865624966dfc9af894" name="libsoup-devel" arch="x86_64">
    <version epoch="0" ver="2.54.1" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.49.1:
  + Fixed a bug in the SoupMessage:event signal that broke
    evolution's ability to connect to https hosts with "bad"
    certificates (bgo#739951).
  + Fixed a case where the async codepaths could potentially block
    on a synchronous write (bgo#727138).
  + Fixed the symbol soup_server_set_ssl_cert_file() to get
    exported, and added soup_server_get_uris() to the
    documentation.
  + Improved a bunch of introspection annotations (bgo#729987).
  + Clarified some documentation.
  + Fixed Windows build, twice (bgo#738003, bgo#738551).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.49.91:
  + Libsoup now has support for WebSockets in both SoupSession and
    SoupServer (bgo#627738).
  + Added support for NTLMv2 Session Security to SoupAuthNTLM.
    (This is transparent to the app/user; if the server supports
    it, it will be used) (bgo#739192).
  + Added soup_server_accept_iostream() to allow feeding a
    non-GSocketConnection GIOStream to SoupServer (eg, when
    accepting HTTP requests on some other sort of connection)
    (bgo#744186).
  + Added soup_session_steal_connection() and
    soup_client_context_steal_connection(), to allow you to steal a
    GIOStream from a SoupSession or SoupServer and then use it for
    non-HTTP purposes (bgo#721343).
  + Added soup_server_add_early_handler(), for adding SoupServer
    handlers to run at :got-headers time rather than :got-body
    (eg, to set up a streaming read of the request body)
    (bgo#625645).
  + Added a new SOUP_MESSAGE_IGNORE_CONNECTION_LIMITS flag, which
    can be used to bypass SoupSession:max-conns and
    SoupSession:max-conns-per-host on a per-message basis
    (bgo#744720).
  + Multiple SoupCache fixes:
  - Leaked resources are now cleaned up when opening the cache
    (bgo#667682).
  - The "Age" header is no longer added to cached responses
    (bgo#741108).
  - Fixed the interpretation of the "must-revalidate" directive
    to not be stricter than required (bgo#744468).
  - Messages retrieved from cache now behave slightly more like
    non-cache messages in terms of SoupSession signals and timing
    (bgo#744788). Additionally, there is a new
    SoupMessage::starting signal, which is like
    SoupSession::request-started, but emitted for cached
    resources as well (bgo#731153).
  + Fixed soup_session_cancel_message() to work reliably on paused
    messages (bgo#745094).
  + Added code-coverage support to the build (bgo#744744).
  + Fixed the library symbol check in "make check" to work when
    building with linker options that result in slightly different
    organization (bgo#741348).
  + Added a hack to SoupSessionFeature so that people will stop
    re-reporting an old Eclipse bug against libsoup (bgo#710242).
  + Miscellaneous bug and leak fixes in the test programs, leak
    fixes in libsoup, and documentation updates.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384001">- Update to version 2.49.91.1:
  + websockets: minor optimization.
  + websockets: fix 32-bit build.
  + docs: fix build.
  + tests: fix when building without glib-networking available.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.49.92:
  + Fixed an NTLM problem that caused spurious "Authentication
    Failed" errors in evolution-ews (bgo#735197).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.50.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1435320000">- Update to version 2.51.3:
  + Fixed "make check" in non-English locales (rh#1224989,
    bgo#749397).
  + Fixed some compiler warnings (bgo#748514).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.51.90:
  + Added a new GVariant-based XMLRPC API, and deprecated the old
    GValue-based API (along with the associated GValue-manipulating
    utilities) (bgo#746495).
  + Multiple build fixes for Visual Studio (bgo#752952).
  + Added VAPI generation (bgo#750679).
  + Fixed the mode bits on soup-cookie.c, which was previously
    marked executable for some reason (rh#1247285).
  + Updated translations.
- Add pkgconfig(vapigen) BuildRequires: New dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 2.51.92:
  + Added g_autoptr() support for all libsoup types (bgo#754721).
  + Added a missing (allow-none) annotation to soup_uri_normalize()
    (bgo#754776).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.52.0:
  + Removed duplicate test paths from tests/date so it will pass
    with glib 2.46.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.52.1:
  + Fixed build under MinGW.
  + Fixed build with --disable-introspection (bgo#755389).
  + Fixed HTTP authentication protection space handling for files
    directly under the root directory (bgo#755617).
  + Fixed a warning when loading data from SoupCache while using
    an authenticated proxy (bgo#756076).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.52.2:
  + Fixed build under MinGW.
  + Fix SoupServerWebsocketCallback handling so that the
    SoupClientContext passed to it is still valid.
  + Added a .deps file to define dependencies for valac.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.53.1:
  + Really fixed build under MinGW for sure this time.
  + Fixed SoupServer Web Sockets code so that the SoupClientContext
    passed to a SoupServerWebsocketCallback is fully usable (rather
    than crashing when you try to do most things).</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 2.53.2:
  + Fixed up symbol visibility handling for mingw by copying GLib's
    system (bgo#757146).
  + Finally marked the old SoupSessionAsync and SoupSessionSync
    methods as deprecated (bgo#757146).
  + Added libsoup-2.4.deps for valac.
  + Make it possible to build from git without gtk-doc being
    installed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.53.90:
  + NUL bytes in headers are now ignored (bgo#760832).
  + Fixed transfer annotation of soup_form_decode* functions
    (bgo#743966).
  + Updated translations.
- Call intltoolize before configure in order to fix up the tarball
  to work with recent versions of intltool.</changelog>
<changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.53.92:
  + libsoup now supports HTTP "Negotiate"/GSSAPI/Kerberos
    authentication. It must be enabled specifically by the
    application and is also subject to certain other restrictions,
    some of which are not yet controllable through the API
    (bgo#587145).
  + Added support for building under MSVC (bgo#758759).
  + Fixed a problem with the 2.53.90 tarball that caused
    translations to be mis-installed.
  + Updated translations.
- Remove intltoolize call: the tarball has been corrected.
- Add krb5-devel BuildRequires: new dependency for krb5 support.
- Pass --with-krb5-config=%{_libexecdir}/mit/bin/krb5-config and
  - -with-gssapi to configure in order to enable krb5 support.</changelog>
<changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.54.0:
  + Fixed examples/simple-httpd on Windows (bgo758759).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.54.0.1:
  + Fix a build problem with the 2.54.0 tarball, which would not
    build if you configured with "--without-gnome".</changelog>
<changelog author="zaitor@opensuse.org" date="1461326400">- Add libsoup-auth-ntlm-fix.patch: Fix NTLM auth failure with
  latest samba (bgo#765106, boo#976110).</changelog>
<changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.54.1:
  + Fixed an ABI break in 2.54.0 caused by adding a member to
    SoupAuthClass; 2.54.1 is ABI-compatible with 2.53.92 and
    earlier, but NOT with the anomalous 2.54.0. If you built
    packages against 2.54.0, you will need to rebuild them against
    2.54.1.
  + Fixed NTLM authentication when ntlm_auth from the latest
    version of Samba is present (bgo#765106).
  + Updates to MSVC build, including for GSS-API support.
  + Updated translations.
- Drop libsoup-auth-ntlm-fix.patch: Fixed upstream.</changelog>
<changelog author="psimons@suse.com" date="1502280000">- Apply "CVE-2017-2885.patch" to fix a stack-based buffer overflow
  with HTTP Chunked Encoding (bsc#1052916, CVE-2017-2885).</changelog>

</package>
<package pkgid="99733d63f8001f2751332321768a0ea2dc362194c97cb68b2e0080d466b89688" name="libsoup-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.54.1" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.49.1:
  + Fixed a bug in the SoupMessage:event signal that broke
    evolution's ability to connect to https hosts with "bad"
    certificates (bgo#739951).
  + Fixed a case where the async codepaths could potentially block
    on a synchronous write (bgo#727138).
  + Fixed the symbol soup_server_set_ssl_cert_file() to get
    exported, and added soup_server_get_uris() to the
    documentation.
  + Improved a bunch of introspection annotations (bgo#729987).
  + Clarified some documentation.
  + Fixed Windows build, twice (bgo#738003, bgo#738551).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.49.91:
  + Libsoup now has support for WebSockets in both SoupSession and
    SoupServer (bgo#627738).
  + Added support for NTLMv2 Session Security to SoupAuthNTLM.
    (This is transparent to the app/user; if the server supports
    it, it will be used) (bgo#739192).
  + Added soup_server_accept_iostream() to allow feeding a
    non-GSocketConnection GIOStream to SoupServer (eg, when
    accepting HTTP requests on some other sort of connection)
    (bgo#744186).
  + Added soup_session_steal_connection() and
    soup_client_context_steal_connection(), to allow you to steal a
    GIOStream from a SoupSession or SoupServer and then use it for
    non-HTTP purposes (bgo#721343).
  + Added soup_server_add_early_handler(), for adding SoupServer
    handlers to run at :got-headers time rather than :got-body
    (eg, to set up a streaming read of the request body)
    (bgo#625645).
  + Added a new SOUP_MESSAGE_IGNORE_CONNECTION_LIMITS flag, which
    can be used to bypass SoupSession:max-conns and
    SoupSession:max-conns-per-host on a per-message basis
    (bgo#744720).
  + Multiple SoupCache fixes:
  - Leaked resources are now cleaned up when opening the cache
    (bgo#667682).
  - The "Age" header is no longer added to cached responses
    (bgo#741108).
  - Fixed the interpretation of the "must-revalidate" directive
    to not be stricter than required (bgo#744468).
  - Messages retrieved from cache now behave slightly more like
    non-cache messages in terms of SoupSession signals and timing
    (bgo#744788). Additionally, there is a new
    SoupMessage::starting signal, which is like
    SoupSession::request-started, but emitted for cached
    resources as well (bgo#731153).
  + Fixed soup_session_cancel_message() to work reliably on paused
    messages (bgo#745094).
  + Added code-coverage support to the build (bgo#744744).
  + Fixed the library symbol check in "make check" to work when
    building with linker options that result in slightly different
    organization (bgo#741348).
  + Added a hack to SoupSessionFeature so that people will stop
    re-reporting an old Eclipse bug against libsoup (bgo#710242).
  + Miscellaneous bug and leak fixes in the test programs, leak
    fixes in libsoup, and documentation updates.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384001">- Update to version 2.49.91.1:
  + websockets: minor optimization.
  + websockets: fix 32-bit build.
  + docs: fix build.
  + tests: fix when building without glib-networking available.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.49.92:
  + Fixed an NTLM problem that caused spurious "Authentication
    Failed" errors in evolution-ews (bgo#735197).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.50.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1435320000">- Update to version 2.51.3:
  + Fixed "make check" in non-English locales (rh#1224989,
    bgo#749397).
  + Fixed some compiler warnings (bgo#748514).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.51.90:
  + Added a new GVariant-based XMLRPC API, and deprecated the old
    GValue-based API (along with the associated GValue-manipulating
    utilities) (bgo#746495).
  + Multiple build fixes for Visual Studio (bgo#752952).
  + Added VAPI generation (bgo#750679).
  + Fixed the mode bits on soup-cookie.c, which was previously
    marked executable for some reason (rh#1247285).
  + Updated translations.
- Add pkgconfig(vapigen) BuildRequires: New dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 2.51.92:
  + Added g_autoptr() support for all libsoup types (bgo#754721).
  + Added a missing (allow-none) annotation to soup_uri_normalize()
    (bgo#754776).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.52.0:
  + Removed duplicate test paths from tests/date so it will pass
    with glib 2.46.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.52.1:
  + Fixed build under MinGW.
  + Fixed build with --disable-introspection (bgo#755389).
  + Fixed HTTP authentication protection space handling for files
    directly under the root directory (bgo#755617).
  + Fixed a warning when loading data from SoupCache while using
    an authenticated proxy (bgo#756076).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.52.2:
  + Fixed build under MinGW.
  + Fix SoupServerWebsocketCallback handling so that the
    SoupClientContext passed to it is still valid.
  + Added a .deps file to define dependencies for valac.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.53.1:
  + Really fixed build under MinGW for sure this time.
  + Fixed SoupServer Web Sockets code so that the SoupClientContext
    passed to a SoupServerWebsocketCallback is fully usable (rather
    than crashing when you try to do most things).</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 2.53.2:
  + Fixed up symbol visibility handling for mingw by copying GLib's
    system (bgo#757146).
  + Finally marked the old SoupSessionAsync and SoupSessionSync
    methods as deprecated (bgo#757146).
  + Added libsoup-2.4.deps for valac.
  + Make it possible to build from git without gtk-doc being
    installed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.53.90:
  + NUL bytes in headers are now ignored (bgo#760832).
  + Fixed transfer annotation of soup_form_decode* functions
    (bgo#743966).
  + Updated translations.
- Call intltoolize before configure in order to fix up the tarball
  to work with recent versions of intltool.</changelog>
<changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.53.92:
  + libsoup now supports HTTP "Negotiate"/GSSAPI/Kerberos
    authentication. It must be enabled specifically by the
    application and is also subject to certain other restrictions,
    some of which are not yet controllable through the API
    (bgo#587145).
  + Added support for building under MSVC (bgo#758759).
  + Fixed a problem with the 2.53.90 tarball that caused
    translations to be mis-installed.
  + Updated translations.
- Remove intltoolize call: the tarball has been corrected.
- Add krb5-devel BuildRequires: new dependency for krb5 support.
- Pass --with-krb5-config=%{_libexecdir}/mit/bin/krb5-config and
  - -with-gssapi to configure in order to enable krb5 support.</changelog>
<changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.54.0:
  + Fixed examples/simple-httpd on Windows (bgo758759).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.54.0.1:
  + Fix a build problem with the 2.54.0 tarball, which would not
    build if you configured with "--without-gnome".</changelog>
<changelog author="zaitor@opensuse.org" date="1461326400">- Add libsoup-auth-ntlm-fix.patch: Fix NTLM auth failure with
  latest samba (bgo#765106, boo#976110).</changelog>
<changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.54.1:
  + Fixed an ABI break in 2.54.0 caused by adding a member to
    SoupAuthClass; 2.54.1 is ABI-compatible with 2.53.92 and
    earlier, but NOT with the anomalous 2.54.0. If you built
    packages against 2.54.0, you will need to rebuild them against
    2.54.1.
  + Fixed NTLM authentication when ntlm_auth from the latest
    version of Samba is present (bgo#765106).
  + Updates to MSVC build, including for GSS-API support.
  + Updated translations.
- Drop libsoup-auth-ntlm-fix.patch: Fixed upstream.</changelog>
<changelog author="psimons@suse.com" date="1502280000">- Apply "CVE-2017-2885.patch" to fix a stack-based buffer overflow
  with HTTP Chunked Encoding (bsc#1052916, CVE-2017-2885).</changelog>

</package>
<package pkgid="0d13bd80761910c64c86edaaddcb5eccd1d97bf7b31485a258c9a341cf538e17" name="libsoup-lang" arch="noarch">
    <version epoch="0" ver="2.54.1" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.49.1:
  + Fixed a bug in the SoupMessage:event signal that broke
    evolution's ability to connect to https hosts with "bad"
    certificates (bgo#739951).
  + Fixed a case where the async codepaths could potentially block
    on a synchronous write (bgo#727138).
  + Fixed the symbol soup_server_set_ssl_cert_file() to get
    exported, and added soup_server_get_uris() to the
    documentation.
  + Improved a bunch of introspection annotations (bgo#729987).
  + Clarified some documentation.
  + Fixed Windows build, twice (bgo#738003, bgo#738551).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.49.91:
  + Libsoup now has support for WebSockets in both SoupSession and
    SoupServer (bgo#627738).
  + Added support for NTLMv2 Session Security to SoupAuthNTLM.
    (This is transparent to the app/user; if the server supports
    it, it will be used) (bgo#739192).
  + Added soup_server_accept_iostream() to allow feeding a
    non-GSocketConnection GIOStream to SoupServer (eg, when
    accepting HTTP requests on some other sort of connection)
    (bgo#744186).
  + Added soup_session_steal_connection() and
    soup_client_context_steal_connection(), to allow you to steal a
    GIOStream from a SoupSession or SoupServer and then use it for
    non-HTTP purposes (bgo#721343).
  + Added soup_server_add_early_handler(), for adding SoupServer
    handlers to run at :got-headers time rather than :got-body
    (eg, to set up a streaming read of the request body)
    (bgo#625645).
  + Added a new SOUP_MESSAGE_IGNORE_CONNECTION_LIMITS flag, which
    can be used to bypass SoupSession:max-conns and
    SoupSession:max-conns-per-host on a per-message basis
    (bgo#744720).
  + Multiple SoupCache fixes:
  - Leaked resources are now cleaned up when opening the cache
    (bgo#667682).
  - The "Age" header is no longer added to cached responses
    (bgo#741108).
  - Fixed the interpretation of the "must-revalidate" directive
    to not be stricter than required (bgo#744468).
  - Messages retrieved from cache now behave slightly more like
    non-cache messages in terms of SoupSession signals and timing
    (bgo#744788). Additionally, there is a new
    SoupMessage::starting signal, which is like
    SoupSession::request-started, but emitted for cached
    resources as well (bgo#731153).
  + Fixed soup_session_cancel_message() to work reliably on paused
    messages (bgo#745094).
  + Added code-coverage support to the build (bgo#744744).
  + Fixed the library symbol check in "make check" to work when
    building with linker options that result in slightly different
    organization (bgo#741348).
  + Added a hack to SoupSessionFeature so that people will stop
    re-reporting an old Eclipse bug against libsoup (bgo#710242).
  + Miscellaneous bug and leak fixes in the test programs, leak
    fixes in libsoup, and documentation updates.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384001">- Update to version 2.49.91.1:
  + websockets: minor optimization.
  + websockets: fix 32-bit build.
  + docs: fix build.
  + tests: fix when building without glib-networking available.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.49.92:
  + Fixed an NTLM problem that caused spurious "Authentication
    Failed" errors in evolution-ews (bgo#735197).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.50.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1435320000">- Update to version 2.51.3:
  + Fixed "make check" in non-English locales (rh#1224989,
    bgo#749397).
  + Fixed some compiler warnings (bgo#748514).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439812800">- Update to version 2.51.90:
  + Added a new GVariant-based XMLRPC API, and deprecated the old
    GValue-based API (along with the associated GValue-manipulating
    utilities) (bgo#746495).
  + Multiple build fixes for Visual Studio (bgo#752952).
  + Added VAPI generation (bgo#750679).
  + Fixed the mode bits on soup-cookie.c, which was previously
    marked executable for some reason (rh#1247285).
  + Updated translations.
- Add pkgconfig(vapigen) BuildRequires: New dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 2.51.92:
  + Added g_autoptr() support for all libsoup types (bgo#754721).
  + Added a missing (allow-none) annotation to soup_uri_normalize()
    (bgo#754776).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.52.0:
  + Removed duplicate test paths from tests/date so it will pass
    with glib 2.46.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.52.1:
  + Fixed build under MinGW.
  + Fixed build with --disable-introspection (bgo#755389).
  + Fixed HTTP authentication protection space handling for files
    directly under the root directory (bgo#755617).
  + Fixed a warning when loading data from SoupCache while using
    an authenticated proxy (bgo#756076).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447156800">- Update to version 2.52.2:
  + Fixed build under MinGW.
  + Fix SoupServerWebsocketCallback handling so that the
    SoupClientContext passed to it is still valid.
  + Added a .deps file to define dependencies for valac.</changelog>
<changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.53.1:
  + Really fixed build under MinGW for sure this time.
  + Fixed SoupServer Web Sockets code so that the SoupClientContext
    passed to a SoupServerWebsocketCallback is fully usable (rather
    than crashing when you try to do most things).</changelog>
<changelog author="zaitor@opensuse.org" date="1448366401">- Update to version 2.53.2:
  + Fixed up symbol visibility handling for mingw by copying GLib's
    system (bgo#757146).
  + Finally marked the old SoupSessionAsync and SoupSessionSync
    methods as deprecated (bgo#757146).
  + Added libsoup-2.4.deps for valac.
  + Make it possible to build from git without gtk-doc being
    installed.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.53.90:
  + NUL bytes in headers are now ignored (bgo#760832).
  + Fixed transfer annotation of soup_form_decode* functions
    (bgo#743966).
  + Updated translations.
- Call intltoolize before configure in order to fix up the tarball
  to work with recent versions of intltool.</changelog>
<changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.53.92:
  + libsoup now supports HTTP "Negotiate"/GSSAPI/Kerberos
    authentication. It must be enabled specifically by the
    application and is also subject to certain other restrictions,
    some of which are not yet controllable through the API
    (bgo#587145).
  + Added support for building under MSVC (bgo#758759).
  + Fixed a problem with the 2.53.90 tarball that caused
    translations to be mis-installed.
  + Updated translations.
- Remove intltoolize call: the tarball has been corrected.
- Add krb5-devel BuildRequires: new dependency for krb5 support.
- Pass --with-krb5-config=%{_libexecdir}/mit/bin/krb5-config and
  - -with-gssapi to configure in order to enable krb5 support.</changelog>
<changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.54.0:
  + Fixed examples/simple-httpd on Windows (bgo758759).</changelog>
<changelog author="zaitor@opensuse.org" date="1458907200">- Update to version 2.54.0.1:
  + Fix a build problem with the 2.54.0 tarball, which would not
    build if you configured with "--without-gnome".</changelog>
<changelog author="zaitor@opensuse.org" date="1461326400">- Add libsoup-auth-ntlm-fix.patch: Fix NTLM auth failure with
  latest samba (bgo#765106, boo#976110).</changelog>
<changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.54.1:
  + Fixed an ABI break in 2.54.0 caused by adding a member to
    SoupAuthClass; 2.54.1 is ABI-compatible with 2.53.92 and
    earlier, but NOT with the anomalous 2.54.0. If you built
    packages against 2.54.0, you will need to rebuild them against
    2.54.1.
  + Fixed NTLM authentication when ntlm_auth from the latest
    version of Samba is present (bgo#765106).
  + Updates to MSVC build, including for GSS-API support.
  + Updated translations.
- Drop libsoup-auth-ntlm-fix.patch: Fixed upstream.</changelog>
<changelog author="psimons@suse.com" date="1502280000">- Apply "CVE-2017-2885.patch" to fix a stack-based buffer overflow
  with HTTP Chunked Encoding (bsc#1052916, CVE-2017-2885).</changelog>

</package>
<package pkgid="973d0e3f1d0de4dd5732955349e92f4622db62a67c68387589fb180e7e3cdf70" name="libspice-server-devel" arch="x86_64">
    <version epoch="0" ver="0.12.8" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1332158400">- Extend spice-signed-comparison.patch: incl. git commit 965a1a.</changelog>
<changelog author="zaitor@opensuse.org" date="1333281600">- Update to version 0.10.1:
  + Mini header support.
  + Add server API for injecting a client connection socket.
  + Add Xinerama support to spicec.
  + Many bugfixes / code cleanups.
  + Requires spice-protocol &gt;= 0.10.1
- Drop spice-signed-comparison.patch and
  0001-server-red_parse_qxl.h-License-should-be-LGPLv2-rath.patch
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1333368000">- Add spice-gcc47.patch: Fix build with gcc 4.7. Most of this used
  to be in spice-signed-comparison.patch which got dropped with
  latest update.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix build with glibc 2.17 (add patch spice-glibc217.patch).</changelog>
<changelog author="afaerber@suse.de" date="1353585600">- Update to version 0.12.0
  * support setting client monitor configuration via device
  QXLInterface::client_monitors_config
  * support notifying guest of client capabilities
  QXLInterface::set_client_capabilities
  * new capability for A8 Surface support
  * Enable build on armv6+
  * Option to quit server after first client disconnects
  spice_server_set_exit_on_disconnect
  * Support seamless migration: no loss of in transit messages. Still not
  supported for agent, smartcard and usb.
  * Support a new rendering message, Composite, for much improved linux guest
  performance.
  * Support arbitrary resolution &amp; multiple monitors on a single display channel.
  * Improved keyboard handling under network latency with new
  SPICE_MSGC_INPUTS_KEY_SCANCODE message.
  * New libspice-server.so symbols:
  spice_server_set_seamless_migration
  spice_server_vm_stop
  spice_server_vm_start
  spice_qxl_monitors_config_async
  * New capabilities:
  SPICE_DISPLAY_CAP_COMPOSITE
  SPICE_DISPLAY_CAP_MONITORS_CONFIG
  SPICE_INPUTS_CAP_KEY_SCANCODE
  SPICE_MAIN_CAP_AGENT_CONNECTED_TOKENS
  SPICE_MAIN_CAP_SEAMLESS_MIGRATE
  * Misc:
  * char_device.c: Introducing shared flow control code for char devices
  * Enable build without client, cegui and slirp.
  * New spice protocol messages: (changes in spice-protocol, here for reference)
  * SPICE_MSG_MAIN_NAME, SPICE_MSG_MAIN_UUID
  * SPICE_MSG_DISPLAY_STREAM_DATA_SIZED
  * New corresponding caps: (changes in spice-protocol, here for reference)
  * SPICE_MAIN_CAP_NAME_AND_UUID
  * SPICE_DISPLAY_CAP_SIZED_STREAM.
  * Send name &amp; uuid to capable clients
  * add support for frames of different sizes RHBZ #813826
  * server:
  * support a pre-opened file descriptor
  * Solaris support. Now using poll instead of epoll.
  * Support IPV6 addresses in channel events RHBZ #788444
  * other fixed RHBZ#: 787669, 787678, 819484
  * spicec
  * alsa: use "default" instead of "hw:0,0"
  * volume keys support RHBZ #552539
  * other fixed RHBZ#: 78655, 804561, 641828
  * solaris, mingw &amp; windows, 32 bit fixes.
  * enable server only build.
  * GNULIB manywarnings.m4 &amp; warnings.m4 module added.
  * Many more bug fixes &amp; code cleanups.
  * spice-protocol no longer external.
  * new server functions:
  + spice_server_set_name
  + spice_server_set_uuid
  + spice_server_set_listen_socket_fd
  + spice_server_is_server_mouse
- Drop spice-gcc47.patch
- Update spice-glibc217.patch (file moved)</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.12.2:
  + Skipped 0.12.1, it existed in git but was never released.
  + spice-server now requires glib2 (like qemu does).
  + More robust ssl error and certificate handling.
  + Added support for websockets.
  + Tons of seamless migration bugfixes.
  + Also some none seamless migration bugfixes.
- Clean spec file using spec-cleaner.
- Rebase spice-glibc217.patch.
- Add pkgconfig(glib-2.0) BuildRequires: new dependency.
- Pass --enable-client and --enable-smartcard to configure in
  order to ensure the client and smartcard support are built (SC
  only on openSUSE &gt;= 12.2).</changelog>
<changelog author="aevseev@gmail.com" date="1375099200">- Update to version 0.12.4:
  + log actual address spice-server binds to
  + main_channel: fix double release of migration target data (rhbz#859027)
  + red_channel: replace an assert upon threads mismatch with a warning (rhbz#823472)
  + support for filtering out agent file-xfer msgs (rhbz#961848)
  ++ new library export spice_server_set_agent_file_xfer
  + mjpeg encoder statistics (mjpeg_encoder_get_stats)
  + improve stream stats readability and ease of parsing
  + fix for stuck display_channel over WAN (jpeg_enabled=true) (rhbz#977998)
  + Use RING_FOREACH_SAFE and other SAFE macros (rhbz#887775)
  + Some server/tests fixes.
- New features from 0.12.3:
  + monitor client bandwidth and latency.
  + dynamically adjust video stream quality based on client bandwidth &amp; latency.
  ++ new SPICE_MSGC_DISPLAY_STREAM_REPORT
  ++ can also set SPICE_BIT_RATE environment variable to override.
  + support arbitrary latency of audio stream wrt video stream:
  ++ new SPICE_MSG_PLAYBACK_LATENCY
  + notify agent on client disconnection
  ++ new VD_AGENT_CLIENT_DISCONNECTED message
  + better support for switching from qxl to vga mode
  ++ new library export spice_qxl_driver_unload
  + multiple monitor support in single channel fixes.
  + stop streams before migration.
  + don't send empty volume messages.
  + Bugs fixed: rhbz#891326, rhbz#958276, rhbz#956345
  + fixes to inputs, chardev, build fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 0.12.5:
  + Added Opus support. Celt support will be obsoleted in a future
    release.
  + Addition of webdav channel.
  + Force use of TLS 1.0 or newer for TLS connections.
  + Reference manual.
  + Some optimizations improving CPU use.
  + Various bug fixes for race conditions, memory corruption, which
    could be triggered on client disconnections, migration, and
    cause spice-server to misbehave.
  + Portability fixes.
  + Code cleanups.
  + bsc#848279: fix CVE-2013-4282.
- Add pkconfig(opus) BuildRequires: Needed to build new opus
  support.
- Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch:
  Fix advertised sound playback/recording rates in public headers
  (rh#1129961).
- Drop spice-glibc217.patch: No longer needed.
- Run spec-clean on spec file, remove conditionals for obsolete
  versions of openSUSE, enable parallel build and drop obsolete
  clean section.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)</changelog>
<changelog author="cbosdonnat@suse.com" date="1433505600">- Don't allow setting password longer than what the spice protocol
  allows. password-length-check.patch. boo#931044</changelog>
<changelog author="cbosdonnat@suse.com" date="1441627200">- bsc#944460: fix CVE-2015-3247.
  cve-2015-3247.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1444132800">- Update to version 0.12.6
  + Removed spicec client code, it has been superseded by remote-viewer
    and other spice-gtk based clients
  + Unix socket support
  + LZ4 support
  + Let clients specify their preferred image compression format
  + Allow to record and replay a spice-server session
  + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261
    bsc#944787, bsc#948976
  + spice-protocol submodule has been removed, spice-protocol must
    now be installed when building spice-server
  + Remove write polling in chardevs to reduce wakeups
- Remove upstream merged patches:
  + spice-Don-t-use-48kHz-for-playback-recording-rates.patch
  + password-length-check.patch
  + cve-2015-3247.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1460721600">- Update to version 0.12.7 (fate#320079)
  + spice-server will now send TCP keepalive probes on the TCP connections it
    uses. This can prevent unwanted idle disconnections if proxies are used
    between the client and the host.
  + Fix important memory usage when the webdav channel is used
  + Do not disconnect when the client requests an unsupported compression type
  + Fix a few race conditions
  + Fix display glitch when using XSpice
  + Improve help string for 'replay -s'
  + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port
    configured, USB webcam redirection over a slow link)
  + Fix various compilation warning when building on 32 bit machines
  + Some fixes for big-endian machines, more work is likely to be needed
  + Do not build static libraries by default, this can be reenabled with --enable-static
  + Fix small leak in MJPEG code</changelog>
<changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.12.8:
  + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.</changelog>
<changelog author="msuchanek@suse.com" date="1478779200">- remove ExclusiveArch (boo#1009438)</changelog>
<changelog author="cbosdonnat@suse.com" date="1481630400">- Obsolete spice-client (bsc#1013916)</changelog>
<changelog author="astieger@suse.com" date="1482408000">- restrict suppression of obsoletes-not-provided warning to
  spice-client bsc#1013916</changelog>
<changelog author="cbosdonnat@suse.com" date="1486036800">- Synchronize with SLES (fate#322402):
  + bnc#894069: disable smartcard support for SLES
  + merge changelog</changelog>
<changelog author="psimons@suse.com" date="1486036801">- Added patches to fix two security vulnerabilities.
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
    [CVE-2016-9577, bsc#1023078]
  * CVE-2016-9578-remote-dos-via-crafted-message.patch
    [CVE-2016-9578, bsc#1023079]</changelog>
<changelog author="cbosdonnat@suse.com" date="1498824000">- Fix possible buffer overflow via invalid monitor configurations
  CVE-2017-7506.patch
  [CVE-2017-7506, bsc#1046779]</changelog>

</package>
<package pkgid="ddbc8273eee6392c4f39b2b8776de09f9499b2129cfb06ab186f63398e742fb9" name="libspice-server1" arch="x86_64">
    <version epoch="0" ver="0.12.8" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1332158400">- Extend spice-signed-comparison.patch: incl. git commit 965a1a.</changelog>
<changelog author="zaitor@opensuse.org" date="1333281600">- Update to version 0.10.1:
  + Mini header support.
  + Add server API for injecting a client connection socket.
  + Add Xinerama support to spicec.
  + Many bugfixes / code cleanups.
  + Requires spice-protocol &gt;= 0.10.1
- Drop spice-signed-comparison.patch and
  0001-server-red_parse_qxl.h-License-should-be-LGPLv2-rath.patch
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1333368000">- Add spice-gcc47.patch: Fix build with gcc 4.7. Most of this used
  to be in spice-signed-comparison.patch which got dropped with
  latest update.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix build with glibc 2.17 (add patch spice-glibc217.patch).</changelog>
<changelog author="afaerber@suse.de" date="1353585600">- Update to version 0.12.0
  * support setting client monitor configuration via device
  QXLInterface::client_monitors_config
  * support notifying guest of client capabilities
  QXLInterface::set_client_capabilities
  * new capability for A8 Surface support
  * Enable build on armv6+
  * Option to quit server after first client disconnects
  spice_server_set_exit_on_disconnect
  * Support seamless migration: no loss of in transit messages. Still not
  supported for agent, smartcard and usb.
  * Support a new rendering message, Composite, for much improved linux guest
  performance.
  * Support arbitrary resolution &amp; multiple monitors on a single display channel.
  * Improved keyboard handling under network latency with new
  SPICE_MSGC_INPUTS_KEY_SCANCODE message.
  * New libspice-server.so symbols:
  spice_server_set_seamless_migration
  spice_server_vm_stop
  spice_server_vm_start
  spice_qxl_monitors_config_async
  * New capabilities:
  SPICE_DISPLAY_CAP_COMPOSITE
  SPICE_DISPLAY_CAP_MONITORS_CONFIG
  SPICE_INPUTS_CAP_KEY_SCANCODE
  SPICE_MAIN_CAP_AGENT_CONNECTED_TOKENS
  SPICE_MAIN_CAP_SEAMLESS_MIGRATE
  * Misc:
  * char_device.c: Introducing shared flow control code for char devices
  * Enable build without client, cegui and slirp.
  * New spice protocol messages: (changes in spice-protocol, here for reference)
  * SPICE_MSG_MAIN_NAME, SPICE_MSG_MAIN_UUID
  * SPICE_MSG_DISPLAY_STREAM_DATA_SIZED
  * New corresponding caps: (changes in spice-protocol, here for reference)
  * SPICE_MAIN_CAP_NAME_AND_UUID
  * SPICE_DISPLAY_CAP_SIZED_STREAM.
  * Send name &amp; uuid to capable clients
  * add support for frames of different sizes RHBZ #813826
  * server:
  * support a pre-opened file descriptor
  * Solaris support. Now using poll instead of epoll.
  * Support IPV6 addresses in channel events RHBZ #788444
  * other fixed RHBZ#: 787669, 787678, 819484
  * spicec
  * alsa: use "default" instead of "hw:0,0"
  * volume keys support RHBZ #552539
  * other fixed RHBZ#: 78655, 804561, 641828
  * solaris, mingw &amp; windows, 32 bit fixes.
  * enable server only build.
  * GNULIB manywarnings.m4 &amp; warnings.m4 module added.
  * Many more bug fixes &amp; code cleanups.
  * spice-protocol no longer external.
  * new server functions:
  + spice_server_set_name
  + spice_server_set_uuid
  + spice_server_set_listen_socket_fd
  + spice_server_is_server_mouse
- Drop spice-gcc47.patch
- Update spice-glibc217.patch (file moved)</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.12.2:
  + Skipped 0.12.1, it existed in git but was never released.
  + spice-server now requires glib2 (like qemu does).
  + More robust ssl error and certificate handling.
  + Added support for websockets.
  + Tons of seamless migration bugfixes.
  + Also some none seamless migration bugfixes.
- Clean spec file using spec-cleaner.
- Rebase spice-glibc217.patch.
- Add pkgconfig(glib-2.0) BuildRequires: new dependency.
- Pass --enable-client and --enable-smartcard to configure in
  order to ensure the client and smartcard support are built (SC
  only on openSUSE &gt;= 12.2).</changelog>
<changelog author="aevseev@gmail.com" date="1375099200">- Update to version 0.12.4:
  + log actual address spice-server binds to
  + main_channel: fix double release of migration target data (rhbz#859027)
  + red_channel: replace an assert upon threads mismatch with a warning (rhbz#823472)
  + support for filtering out agent file-xfer msgs (rhbz#961848)
  ++ new library export spice_server_set_agent_file_xfer
  + mjpeg encoder statistics (mjpeg_encoder_get_stats)
  + improve stream stats readability and ease of parsing
  + fix for stuck display_channel over WAN (jpeg_enabled=true) (rhbz#977998)
  + Use RING_FOREACH_SAFE and other SAFE macros (rhbz#887775)
  + Some server/tests fixes.
- New features from 0.12.3:
  + monitor client bandwidth and latency.
  + dynamically adjust video stream quality based on client bandwidth &amp; latency.
  ++ new SPICE_MSGC_DISPLAY_STREAM_REPORT
  ++ can also set SPICE_BIT_RATE environment variable to override.
  + support arbitrary latency of audio stream wrt video stream:
  ++ new SPICE_MSG_PLAYBACK_LATENCY
  + notify agent on client disconnection
  ++ new VD_AGENT_CLIENT_DISCONNECTED message
  + better support for switching from qxl to vga mode
  ++ new library export spice_qxl_driver_unload
  + multiple monitor support in single channel fixes.
  + stop streams before migration.
  + don't send empty volume messages.
  + Bugs fixed: rhbz#891326, rhbz#958276, rhbz#956345
  + fixes to inputs, chardev, build fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 0.12.5:
  + Added Opus support. Celt support will be obsoleted in a future
    release.
  + Addition of webdav channel.
  + Force use of TLS 1.0 or newer for TLS connections.
  + Reference manual.
  + Some optimizations improving CPU use.
  + Various bug fixes for race conditions, memory corruption, which
    could be triggered on client disconnections, migration, and
    cause spice-server to misbehave.
  + Portability fixes.
  + Code cleanups.
  + bsc#848279: fix CVE-2013-4282.
- Add pkconfig(opus) BuildRequires: Needed to build new opus
  support.
- Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch:
  Fix advertised sound playback/recording rates in public headers
  (rh#1129961).
- Drop spice-glibc217.patch: No longer needed.
- Run spec-clean on spec file, remove conditionals for obsolete
  versions of openSUSE, enable parallel build and drop obsolete
  clean section.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)</changelog>
<changelog author="cbosdonnat@suse.com" date="1433505600">- Don't allow setting password longer than what the spice protocol
  allows. password-length-check.patch. boo#931044</changelog>
<changelog author="cbosdonnat@suse.com" date="1441627200">- bsc#944460: fix CVE-2015-3247.
  cve-2015-3247.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1444132800">- Update to version 0.12.6
  + Removed spicec client code, it has been superseded by remote-viewer
    and other spice-gtk based clients
  + Unix socket support
  + LZ4 support
  + Let clients specify their preferred image compression format
  + Allow to record and replay a spice-server session
  + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261
    bsc#944787, bsc#948976
  + spice-protocol submodule has been removed, spice-protocol must
    now be installed when building spice-server
  + Remove write polling in chardevs to reduce wakeups
- Remove upstream merged patches:
  + spice-Don-t-use-48kHz-for-playback-recording-rates.patch
  + password-length-check.patch
  + cve-2015-3247.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1460721600">- Update to version 0.12.7 (fate#320079)
  + spice-server will now send TCP keepalive probes on the TCP connections it
    uses. This can prevent unwanted idle disconnections if proxies are used
    between the client and the host.
  + Fix important memory usage when the webdav channel is used
  + Do not disconnect when the client requests an unsupported compression type
  + Fix a few race conditions
  + Fix display glitch when using XSpice
  + Improve help string for 'replay -s'
  + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port
    configured, USB webcam redirection over a slow link)
  + Fix various compilation warning when building on 32 bit machines
  + Some fixes for big-endian machines, more work is likely to be needed
  + Do not build static libraries by default, this can be reenabled with --enable-static
  + Fix small leak in MJPEG code</changelog>
<changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.12.8:
  + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.</changelog>
<changelog author="msuchanek@suse.com" date="1478779200">- remove ExclusiveArch (boo#1009438)</changelog>
<changelog author="cbosdonnat@suse.com" date="1481630400">- Obsolete spice-client (bsc#1013916)</changelog>
<changelog author="astieger@suse.com" date="1482408000">- restrict suppression of obsoletes-not-provided warning to
  spice-client bsc#1013916</changelog>
<changelog author="cbosdonnat@suse.com" date="1486036800">- Synchronize with SLES (fate#322402):
  + bnc#894069: disable smartcard support for SLES
  + merge changelog</changelog>
<changelog author="psimons@suse.com" date="1486036801">- Added patches to fix two security vulnerabilities.
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
    [CVE-2016-9577, bsc#1023078]
  * CVE-2016-9578-remote-dos-via-crafted-message.patch
    [CVE-2016-9578, bsc#1023079]</changelog>
<changelog author="cbosdonnat@suse.com" date="1498824000">- Fix possible buffer overflow via invalid monitor configurations
  CVE-2017-7506.patch
  [CVE-2017-7506, bsc#1046779]</changelog>

</package>
<package pkgid="f1dfd97477af459573ffc27abf7d3429ef2dc6261ef82d72f38ccb7ba2920bfe" name="libssl43" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="bce522bd91fc3120b534998eaf539ea1d3018afb7bc73dd43390551f9abd5694" name="libssl43-32bit" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="8cce1e48f009f2f555877f0fe37806420e60f464b7c5b6baf94a2ab71dd03703" name="libsss_idmap-devel" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="a2ca18ad3f918fb41f20654e0da4f26bce7a2c4a71cd2d4ae766b7fa34f215bd" name="libsss_idmap0" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="1589e87a933a83aaa48936afbe3ae8e64b7701c33d25f7c4f5a5a6010d8442e9" name="libsss_nss_idmap-devel" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="09244553c902d9ef7ae7dcdfa515c8d909b641c4387cef7492eee6a9769d8bfd" name="libsss_nss_idmap0" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="2e4ff82ea34aeb83e3323c6782aea0bd898f1844339529fbd04375ba4401663d" name="libsss_sudo" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="2674a12518e08491bf2902f033c5860fa8d2ca434c29a89480058c8c5f3c8a10" name="libstdc++48-devel" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="f01ad03a15dce74292d833bca15a40b3bcaf175991ae545d47d9b78ab68fe626" name="libstdc++48-devel-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="c75d798d95d6e1e51bcbcda547e9224b6f1c1c363193275fba21eeeb4f3ac71a" name="libstdc++48-doc" arch="noarch">
    <version epoch="0" ver="4.8.5" rel="26.2"/>

<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel.  [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444046400">- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]</changelog>
<changelog author="rguenther@suse.com" date="1447761600">- Add gcc48-bnc955382.patch to fix HTM builtins on powerpc.  [bnc#955382]</changelog>
<changelog author="rguenther@suse.com" date="1455278400">- Build without GRAPHITE where cloog-isl is not available.</changelog>
<changelog author="rguenther@suse.com" date="1457611200">- Add gcc48-bnc970009.patch to fix samba build on AARCH64.
  [bnc#970009]</changelog>
<changelog author="rguenther@suse.com" date="1461844800">- Add gcc48-bnc977654.patch to fix issue with using gcov and #pragma pack.
  [bnc#977654]</changelog>
<changelog author="matz@suse.com" date="1461931200">- Add patch gcc48-bnc976627.patch for fixing a ppc64le
  ICE. [bnc #976627]</changelog>
<changelog author="matz@suse.com" date="1469707200">- Add patch gcc48-bnc981311.diff for fixing a kernel
  miscompile on aarch64.  [bnc #981311]</changelog>
<changelog author="rguenther@suse.com" date="1474891200">- Add patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1475236800">- Apply patch gcc48-bnc988274.patch for fixing libffi issue for
  armv7l.  [bnc#988274]</changelog>
<changelog author="rguenther@suse.com" date="1479729600">- Add patch gcc48-bnc1011348-dr1288.patch for DR#1288.  [bnc#1011348]</changelog>
<changelog author="rguenther@suse.com" date="1485777600">- Backport patch for PR65612.  [bnc#1022062]</changelog>
<changelog author="rguenther@suse.com" date="1489147200">- Add gcc48-bnc1028744.patch to properly diagnose missing
  - fsanitize=address support on ppc64le.  [bnc#1028744]</changelog>
<changelog author="rguenther@suse.com" date="1490184000">- Bump libffi version in libffi.pc to 3.0.11.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Fix ExclusiveArch for aarch64 crosses.</changelog>
<changelog author="rguenther@suse.com" date="1497441600">- Add patch gcc48-bnc1044016.patch to enable LFS support in 32bit
  libgcov.a.  [bnc#1044016]</changelog>
<changelog author="rguenther@suse.com" date="1501156800">- Add patch gcc48-bnc1050947.patch to fix rdrand/rdseed code generation
  issue which is CVE-2017-11671.  [bnc#1050947]</changelog>
<changelog author="matz@suse.com" date="1501156801">- Add support for -fstack-clash-protection.  [bnc #1039513]
  Adds gcc48-stack-probe.diff .</changelog>

</package>
<package pkgid="ab04b4a10ceb48c6ecfdddfb916f210029a533034eb777395a217bf4f757c443" name="libstdc++6" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="ceaeef7949703b625e82984719c67e78c269a2e36f478f737c6aa3be4aa99758" name="libstdc++6-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="51cdeae41c2684d541af67cc0e58cc5b03ef4bdb0fbebb2734e61f4a30a5f98f" name="libstdc++6-devel-gcc7" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="2f1506f799ee47fc215f47285c273a1963348c1bd2c143a541737a35ecf19960" name="libstdc++6-devel-gcc7-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="9037cb4a32fa7266f6a94ad36dc27190d485069826d3e0a880f5a8f76d7e3beb" name="libstdc++6-locale" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="b9d7a40a13fe42c3354e0203fe35cff9e593a180180d2d86dd07a251867513aa" name="libsvn_auth_gnome_keyring-1-0" arch="x86_64">
    <version epoch="0" ver="1.9.7" rel="8.1"/>

<changelog author="astieger@suse.com" date="1427803200">- Apache Subversion 1.8.13
  This release fixes three vulerabilities:
  * Subversion HTTP servers with FSFS repositories were vulnerable
    to a remotely triggerable excessive memory use with certain
    REPORT requests.
    (bsc#923793 CVE-2015-0202)
  * Subversion mod_dav_svn and svnserve were vulnerable to a
    remotely triggerable assertion DoS vulnerability for certain
    requests with dynamically evaluated revision numbers.
    (bsc#923794 CVE-2015-0248)
  * Subversion HTTP servers allow spoofing svn:author property
    values for new revisions
    (bsc#923795 CVE-2015-0251)
- Non-security updates:
  * fixes number of client and server side non-security bugs
  * improved working copy performanc
  * reduction of resource use
  * stability improvements
  * usability improvements
- 1.8.12 was not released</changelog>
<changelog author="astieger@suse.com" date="1428580800">- fix tests with SQLite 3.8.9, adding
  subversion-1.8.13-fix-sqlite-3.8.9-tests.patch</changelog>
<changelog author="astieger@suse.com" date="1431777600">- disable failing check-swig-rb</changelog>
<changelog author="stsp@elego.de" date="1438862400">- Apache Subversion 1.8.14
  This release fixes two vulnerabilities:
  * mod_authz_svn: do not leak information in mixed anonymous/authenticated
    httpd (dav) configurations (CVE-2015-3184) bnc#939514
  * do not leak paths that were hidden by path-based authz (CVE-2015-3187)
    bnc#939517
  Non-security fixes:
  * document svn:autoprops
  * fix 'svn cp ^/A/D/H@1 ^/A' to properly create A
  * improve conflict prompts for binary files
  * improve performance of 'ls -v'
  * improved Sqlite 3.8.9 query performance
  * fixed issue #4580: 'svn -v st' on file externals reports "?" for user/rev
  * mod_dav_svn: do not ignore skel parsing errors
  * detect invalid svndiff data earlier
  * prevent possible repository corruption on power/disk failures
  * fixed issue #4577: Read error with some repository nodes
  * fixed issue #4531: server-side copy (over dav) is slow
  * swig-pl: fix some stack memory problems
- Refreshed patch subversion-no-build-date.patch
- Remove obsoleted patch subversion-1.8.13-fix-sqlite-3.8.9-tests.patch
- Add patch subversion-1.8.14-httpd-version-number-detection.patch</changelog>
<changelog author="stsp@elego.de" date="1438862401">- fix mod_authz_svn build with -Wunused-variable
  * subversion-1.8.14-unused-var-authnrequired.patch</changelog>
<changelog author="stsp@elego.de" date="1438862402">- Pass --enable-broken-httpd-auth to configure. Assumes all apache2
  packages contain security patches regardless of their version number.
  Should fix the build on SLES12 and perhaps elsewhere.</changelog>
<changelog author="astieger@suse.com" date="1439294400">- Apache Subversion 1.9.0:
  * new FSFS format 7 with major overhaul for I/O reduction
  * prospective blame
  * FSX experimental repository back-end
  * many enhangements and bug fixes
- subversion-devel now ships pkgconfig files
- dependency changes:
  * serf 1.3.4
  * apr, apr-utl 1.3.x
  * httpd 2.2.x
  * java 1.6
  * Python 2.7
- To continue to allow building against blacklisted httpd 2.4.6
  which has the required patches in openSUSE:13.1:Update, update
  subversion-1.8.9-allow-httpd-2.4.6.patch to
  subversion-1.9.0-allow-httpd-2.4.6.patch
- removed upstreamed patches:
  * subversion-1.8.10-fix-bashisms.patch
  * subversion-1.8.11-swig-py-comment.patch
  * subversion-1.8.11-swig-py-comment-2.patch
- adjust subversion-no-build-date.patch
- drop subversion-1.8.14-unused-var-authnrequired.patch</changelog>
<changelog author="tchvatal@suse.com" date="1440417600">- Use suggests instead of recommends to avoid 180+ new pkgs on
  minimal setup due subversion-password-store bnc#942819</changelog>
<changelog author="tchvatal@suse.com" date="1440417601">- Remove support for SLE11 from the spec file
- Use supplements instead of suggests on the other side for the
  password store
- Fix kde integration conditional to work nicely on openSUSE Leap</changelog>
<changelog author="astieger@suse.com" date="1441281600">- Apache Subversion 1.9.1:
  * Fix crash with GPG-agent with non-canonical $HOME
  * svn: expose expat and zlib versions in svn --version --verbose
  * svn: improve help text for 'svn info --show-item'
  * svnserve: fixed minor typo in help text
  * Fix an error leak in FSFS verification
  * Fix incomplete membuffer cache initialization
  * svnfsfs: fix some bugs and inconsistencies in load-index
  * Fix memory corruption in copy source SWIG bindings
- drop subversion-1.8.14-httpd-version-number-detection.patch,
  change is upstream
- adjust subversion-1.9.0-allow-httpd-2.4.6.patch for upstream
  changes</changelog>
<changelog author="astieger@suse.com" date="1443009600">- Apache Subversion 1.9.2:
  * fix a numer of client-side crashes and bugs
  * checkout: remove unnecessary I/O operation
  * svn: show utf8proc version in svn --version --verbose
  * fix reporting for empty representations in svnfsfs stats
- upstream keyring updated</changelog>
<changelog author="astieger@suse.com" date="1446033600">- Fix copy-and-paste error in Supplements for GNOME keyring
  integration</changelog>
<changelog author="astieger@suse.com" date="1450180800">- Apache Subversion 1.9.3
  This release fixes two security issues:
  * Remotely triggerable heap overflow and out-of-bounds read
    caused by integer overflow in the svn:// protocol parser.
    CVE-2015-5259 [boo#958299]
  * Remotely triggerable heap overflow and out-of-bounds read in
    mod_dav_svn caused by integer overflow when parsing skel-
    encoded request bodies.
    CVE-2015-5343 [boo#958300]
  Other changes:
  * svn: fix possible crash in auth credentials cache
  * cleanup: avoid unneeded memory growth during pristine cleanup
  * diff: fix crash when repository is on server root
  * fix translations for commit notifications
  * ra_serf: fix crash in multistatus parser
  * svn: report lock/unlock errors as failures
  * svn: cleanup user deleted external registrations
  * svn: allow simple resolving of binary file text conflicts
  * svnlook: properly remove tempfiles on diff errors
  * ra_serf: report built- and run-time versions of libserf
  * ra_serf: set Content-Type header in outgoing requests
  * svn: fix merging deletes of svn:eol-style CRLF/CR files
  * ra_local: disable zero-copy code path
  * mod_authz_svn: fix authz with mod_auth_kerb/mod_auth_ntlm
  * mod_dav_svn: fix display of process ID in cache statistics
  * mod_dav_svn: use LimitXMLRequestBody for skel-encoded requests
  * svnadmin dump: preserve no-op changes
  * fsfs: avoid unneeded I/O when opening transactions
  * javahl: fix ABI incompatibilty with 1.8
  * javahl: allow non-absolute paths in SVNClient.vacuum
  * fix patch filter invocation in svn_client_patch()
  * add @since information to config defines
  * fix running the tests in compatibility mode
  * clarify documentation of svn_fs_node_created_rev()
  * fix overflow detection in svn_stringbuf_remove and _replace
  * don't ignore some of the parameters to svn_ra_svn_create_conn3</changelog>
<changelog author="astieger@suse.com" date="1456920000">- make the subversion package conflict with KWallet and Gnome
  Keyring packages with do not require matching subversion versions
  in SLE 12 and openSUSE Leap 42.1 and thus break the main package
  upon partial upgrade. Fix/workaround for boo#969159</changelog>
<changelog author="astieger@suse.com" date="1461844800">- Apache Subversion 1.9.4, fixing two server-side vulnerabilities:
  * CVE-2016-2167: svnserve/sasl may authenticate users using the
    wrong realm (boo#976849)
  * CVE-2016-2168: Remotely triggerable DoS vulnerability in
    mod_authz_svn during COPY/MOVE authorization check (boo#976850)
- Client-side bugfixes:
  * diff: support '--summarize --ignore-properties'
  * checkout: fix performance regression on NFS
  * gpg-agent: properly handle passwords with percent characters
  * svn-graph.pl: fix assertion about a non-canonical path
  * hot-backup.py: better input validation
  * commit: abort on Ctrl-C in plaintext password prompt
  * diff: produce proper forward binary diffs with --git
  * ra_serf: fix deleting directories with many files
- Server-side bugfixes:
  * improve documentation for AuthzSVNGroupsFile and groups-db
  * fsfs: reduce peak memory usage when listing large directories
  * fsfs: fix a rare source of incomplete dump files and reports
- Client-side and server-side bugfixes:
  * update INSTALL documentation file
  * fix potential memory access bugs
  * fix potential out of bounds read in svn_repos_get_logs5()
- Bindings bugfixes:
  * ignore absent nodes in javahl version of svn status -u
- API changes:
  * properly interpret parameters in svn_wc_get_diff_editor6()</changelog>
<changelog author="tchvatal@suse.com" date="1467201600">- Drop syslog.target from After wrt bnc#983938</changelog>
<changelog author="tchvatal@suse.com" date="1480507200">- Version update to 1.9.5:
  * bsc#1011552 CVE-2016-8734 Unrestricted XML entity expansion in
    mod_dontdothat and Subversion clients using http(s)://
- Client-side bugfixes:
  * fix accessing non-existent paths during reintegrate merge (r1766699 et al)
  * fix handling of newly secured subdirectories in working copy (r1724448)
  * info: remove trailing whitespace in --show-item=revision (issue #4660)
  * fix recording wrong revisions for tree conflicts (r1734106)
  * gpg-agent: improve discovery of gpg-agent sockets (r1766327)
  * gpg-agent: fix file descriptor leak (r1766323)
  * resolve: fix --accept=mine-full for binary files (issue #4647)
  * merge: fix possible crash (issue #4652)
  * resolve: fix possible crash (r1748514)
  * fix potential crash in Win32 crash reporter (r1663253 et al)
- Server-side bugfixes:
  * fsfs: fix "offset too large" error during pack (issue #4657)
  * svnserve: enable hook script environments (r1769152)
  * fsfs: fix possible data reconstruction error (issue #4658)
  * fix source of spurious 'incoming edit' tree conflicts (r1770108)
  * fsfs: improve caching for large directories (r1721285)
  * fsfs: fix crash when encountering all-zero checksums (r1759686)
  * fsfs: fix potential source of repository corruptions (r1756266)
  * mod_dav_svn: fix excessive memory usage with mod_headers/mod_deflate
    (issue #3084)
  * mod_dav_svn: reduce memory usage during GET requests (r1757529 et al)
  * fsfs: fix unexpected "database is locked" errors (r1741096 et al)
  * fsfs: fix opening old repositories without db/format files (r1720015)
- Client-side and server-side bugfixes:
  * fix possible crash when reading invalid configuration files (r1715777)
- Bindings bugfixes:
  * swig-pl: do not corrupt "{DATE}" revision variable (r1767768)
  * javahl: fix temporary accepting SSL server certificates (r1764851)
  * swig-pl: fix possible stack corruption (r1683266, r1683267)
- Drop no longer needed patch:
  * subversion-1.8.11-swig-py-comment-3.patch</changelog>
<changelog author="astieger@suse.com" date="1499428800">- Apache Subversion 1.9.6 (bsc#1026936):
  This change makes Subversion resilient to collision attacks,
  including SHA-1 collision attacks such as &lt;http://shattered.io/&gt;.
  https://subversion.apache.org/faq#shattered-sha1
  * fsfs: never attempt to share directory representations
  * fsfs: make consistency independent of hash algorithms
  * cp/mv: improve error message when target is an unversioned dir
  * merge: reduce memory usage with large amounts of mergeinfo
  * 'svnadmin freeze': document the purpose more clearly
  * dump: fix segfault when a revision has no revprops
  * fsfs: improve error message upon failure to open rep-cache
  * work around an APR bug related to file truncation
  * javahl: follow redirects when opening a connection</changelog>
<changelog author="astieger@suse.com" date="1501243200">- Add instructions for running svnserve as a user different from
  "svn", and remove sysconfig variables that are no longer
  effective with the systemd unit. bsc#1049448</changelog>
<changelog author="astieger@suse.com" date="1502366400">- Apache Subversion 1.9.7:
  * CVE-2017-9800: A remote attacker could have caused svn clients
    to execute arbitrary code via specially crafted URLs in
    svn:externals and svn:sync-from-url properties. (bsc#1051362)</changelog>

</package>
<package pkgid="9e29f7120f3b0f99a4a6f69f4b02c6638decba0a09c01aeb8dd90d637dba5ac3" name="libsvn_auth_kwallet-1-0" arch="x86_64">
    <version epoch="0" ver="1.9.7" rel="8.1"/>

<changelog author="astieger@suse.com" date="1427803200">- Apache Subversion 1.8.13
  This release fixes three vulerabilities:
  * Subversion HTTP servers with FSFS repositories were vulnerable
    to a remotely triggerable excessive memory use with certain
    REPORT requests.
    (bsc#923793 CVE-2015-0202)
  * Subversion mod_dav_svn and svnserve were vulnerable to a
    remotely triggerable assertion DoS vulnerability for certain
    requests with dynamically evaluated revision numbers.
    (bsc#923794 CVE-2015-0248)
  * Subversion HTTP servers allow spoofing svn:author property
    values for new revisions
    (bsc#923795 CVE-2015-0251)
- Non-security updates:
  * fixes number of client and server side non-security bugs
  * improved working copy performanc
  * reduction of resource use
  * stability improvements
  * usability improvements
- 1.8.12 was not released</changelog>
<changelog author="astieger@suse.com" date="1428580800">- fix tests with SQLite 3.8.9, adding
  subversion-1.8.13-fix-sqlite-3.8.9-tests.patch</changelog>
<changelog author="astieger@suse.com" date="1431777600">- disable failing check-swig-rb</changelog>
<changelog author="stsp@elego.de" date="1438862400">- Apache Subversion 1.8.14
  This release fixes two vulnerabilities:
  * mod_authz_svn: do not leak information in mixed anonymous/authenticated
    httpd (dav) configurations (CVE-2015-3184) bnc#939514
  * do not leak paths that were hidden by path-based authz (CVE-2015-3187)
    bnc#939517
  Non-security fixes:
  * document svn:autoprops
  * fix 'svn cp ^/A/D/H@1 ^/A' to properly create A
  * improve conflict prompts for binary files
  * improve performance of 'ls -v'
  * improved Sqlite 3.8.9 query performance
  * fixed issue #4580: 'svn -v st' on file externals reports "?" for user/rev
  * mod_dav_svn: do not ignore skel parsing errors
  * detect invalid svndiff data earlier
  * prevent possible repository corruption on power/disk failures
  * fixed issue #4577: Read error with some repository nodes
  * fixed issue #4531: server-side copy (over dav) is slow
  * swig-pl: fix some stack memory problems
- Refreshed patch subversion-no-build-date.patch
- Remove obsoleted patch subversion-1.8.13-fix-sqlite-3.8.9-tests.patch
- Add patch subversion-1.8.14-httpd-version-number-detection.patch</changelog>
<changelog author="stsp@elego.de" date="1438862401">- fix mod_authz_svn build with -Wunused-variable
  * subversion-1.8.14-unused-var-authnrequired.patch</changelog>
<changelog author="stsp@elego.de" date="1438862402">- Pass --enable-broken-httpd-auth to configure. Assumes all apache2
  packages contain security patches regardless of their version number.
  Should fix the build on SLES12 and perhaps elsewhere.</changelog>
<changelog author="astieger@suse.com" date="1439294400">- Apache Subversion 1.9.0:
  * new FSFS format 7 with major overhaul for I/O reduction
  * prospective blame
  * FSX experimental repository back-end
  * many enhangements and bug fixes
- subversion-devel now ships pkgconfig files
- dependency changes:
  * serf 1.3.4
  * apr, apr-utl 1.3.x
  * httpd 2.2.x
  * java 1.6
  * Python 2.7
- To continue to allow building against blacklisted httpd 2.4.6
  which has the required patches in openSUSE:13.1:Update, update
  subversion-1.8.9-allow-httpd-2.4.6.patch to
  subversion-1.9.0-allow-httpd-2.4.6.patch
- removed upstreamed patches:
  * subversion-1.8.10-fix-bashisms.patch
  * subversion-1.8.11-swig-py-comment.patch
  * subversion-1.8.11-swig-py-comment-2.patch
- adjust subversion-no-build-date.patch
- drop subversion-1.8.14-unused-var-authnrequired.patch</changelog>
<changelog author="tchvatal@suse.com" date="1440417600">- Use suggests instead of recommends to avoid 180+ new pkgs on
  minimal setup due subversion-password-store bnc#942819</changelog>
<changelog author="tchvatal@suse.com" date="1440417601">- Remove support for SLE11 from the spec file
- Use supplements instead of suggests on the other side for the
  password store
- Fix kde integration conditional to work nicely on openSUSE Leap</changelog>
<changelog author="astieger@suse.com" date="1441281600">- Apache Subversion 1.9.1:
  * Fix crash with GPG-agent with non-canonical $HOME
  * svn: expose expat and zlib versions in svn --version --verbose
  * svn: improve help text for 'svn info --show-item'
  * svnserve: fixed minor typo in help text
  * Fix an error leak in FSFS verification
  * Fix incomplete membuffer cache initialization
  * svnfsfs: fix some bugs and inconsistencies in load-index
  * Fix memory corruption in copy source SWIG bindings
- drop subversion-1.8.14-httpd-version-number-detection.patch,
  change is upstream
- adjust subversion-1.9.0-allow-httpd-2.4.6.patch for upstream
  changes</changelog>
<changelog author="astieger@suse.com" date="1443009600">- Apache Subversion 1.9.2:
  * fix a numer of client-side crashes and bugs
  * checkout: remove unnecessary I/O operation
  * svn: show utf8proc version in svn --version --verbose
  * fix reporting for empty representations in svnfsfs stats
- upstream keyring updated</changelog>
<changelog author="astieger@suse.com" date="1446033600">- Fix copy-and-paste error in Supplements for GNOME keyring
  integration</changelog>
<changelog author="astieger@suse.com" date="1450180800">- Apache Subversion 1.9.3
  This release fixes two security issues:
  * Remotely triggerable heap overflow and out-of-bounds read
    caused by integer overflow in the svn:// protocol parser.
    CVE-2015-5259 [boo#958299]
  * Remotely triggerable heap overflow and out-of-bounds read in
    mod_dav_svn caused by integer overflow when parsing skel-
    encoded request bodies.
    CVE-2015-5343 [boo#958300]
  Other changes:
  * svn: fix possible crash in auth credentials cache
  * cleanup: avoid unneeded memory growth during pristine cleanup
  * diff: fix crash when repository is on server root
  * fix translations for commit notifications
  * ra_serf: fix crash in multistatus parser
  * svn: report lock/unlock errors as failures
  * svn: cleanup user deleted external registrations
  * svn: allow simple resolving of binary file text conflicts
  * svnlook: properly remove tempfiles on diff errors
  * ra_serf: report built- and run-time versions of libserf
  * ra_serf: set Content-Type header in outgoing requests
  * svn: fix merging deletes of svn:eol-style CRLF/CR files
  * ra_local: disable zero-copy code path
  * mod_authz_svn: fix authz with mod_auth_kerb/mod_auth_ntlm
  * mod_dav_svn: fix display of process ID in cache statistics
  * mod_dav_svn: use LimitXMLRequestBody for skel-encoded requests
  * svnadmin dump: preserve no-op changes
  * fsfs: avoid unneeded I/O when opening transactions
  * javahl: fix ABI incompatibilty with 1.8
  * javahl: allow non-absolute paths in SVNClient.vacuum
  * fix patch filter invocation in svn_client_patch()
  * add @since information to config defines
  * fix running the tests in compatibility mode
  * clarify documentation of svn_fs_node_created_rev()
  * fix overflow detection in svn_stringbuf_remove and _replace
  * don't ignore some of the parameters to svn_ra_svn_create_conn3</changelog>
<changelog author="astieger@suse.com" date="1456920000">- make the subversion package conflict with KWallet and Gnome
  Keyring packages with do not require matching subversion versions
  in SLE 12 and openSUSE Leap 42.1 and thus break the main package
  upon partial upgrade. Fix/workaround for boo#969159</changelog>
<changelog author="astieger@suse.com" date="1461844800">- Apache Subversion 1.9.4, fixing two server-side vulnerabilities:
  * CVE-2016-2167: svnserve/sasl may authenticate users using the
    wrong realm (boo#976849)
  * CVE-2016-2168: Remotely triggerable DoS vulnerability in
    mod_authz_svn during COPY/MOVE authorization check (boo#976850)
- Client-side bugfixes:
  * diff: support '--summarize --ignore-properties'
  * checkout: fix performance regression on NFS
  * gpg-agent: properly handle passwords with percent characters
  * svn-graph.pl: fix assertion about a non-canonical path
  * hot-backup.py: better input validation
  * commit: abort on Ctrl-C in plaintext password prompt
  * diff: produce proper forward binary diffs with --git
  * ra_serf: fix deleting directories with many files
- Server-side bugfixes:
  * improve documentation for AuthzSVNGroupsFile and groups-db
  * fsfs: reduce peak memory usage when listing large directories
  * fsfs: fix a rare source of incomplete dump files and reports
- Client-side and server-side bugfixes:
  * update INSTALL documentation file
  * fix potential memory access bugs
  * fix potential out of bounds read in svn_repos_get_logs5()
- Bindings bugfixes:
  * ignore absent nodes in javahl version of svn status -u
- API changes:
  * properly interpret parameters in svn_wc_get_diff_editor6()</changelog>
<changelog author="tchvatal@suse.com" date="1467201600">- Drop syslog.target from After wrt bnc#983938</changelog>
<changelog author="tchvatal@suse.com" date="1480507200">- Version update to 1.9.5:
  * bsc#1011552 CVE-2016-8734 Unrestricted XML entity expansion in
    mod_dontdothat and Subversion clients using http(s)://
- Client-side bugfixes:
  * fix accessing non-existent paths during reintegrate merge (r1766699 et al)
  * fix handling of newly secured subdirectories in working copy (r1724448)
  * info: remove trailing whitespace in --show-item=revision (issue #4660)
  * fix recording wrong revisions for tree conflicts (r1734106)
  * gpg-agent: improve discovery of gpg-agent sockets (r1766327)
  * gpg-agent: fix file descriptor leak (r1766323)
  * resolve: fix --accept=mine-full for binary files (issue #4647)
  * merge: fix possible crash (issue #4652)
  * resolve: fix possible crash (r1748514)
  * fix potential crash in Win32 crash reporter (r1663253 et al)
- Server-side bugfixes:
  * fsfs: fix "offset too large" error during pack (issue #4657)
  * svnserve: enable hook script environments (r1769152)
  * fsfs: fix possible data reconstruction error (issue #4658)
  * fix source of spurious 'incoming edit' tree conflicts (r1770108)
  * fsfs: improve caching for large directories (r1721285)
  * fsfs: fix crash when encountering all-zero checksums (r1759686)
  * fsfs: fix potential source of repository corruptions (r1756266)
  * mod_dav_svn: fix excessive memory usage with mod_headers/mod_deflate
    (issue #3084)
  * mod_dav_svn: reduce memory usage during GET requests (r1757529 et al)
  * fsfs: fix unexpected "database is locked" errors (r1741096 et al)
  * fsfs: fix opening old repositories without db/format files (r1720015)
- Client-side and server-side bugfixes:
  * fix possible crash when reading invalid configuration files (r1715777)
- Bindings bugfixes:
  * swig-pl: do not corrupt "{DATE}" revision variable (r1767768)
  * javahl: fix temporary accepting SSL server certificates (r1764851)
  * swig-pl: fix possible stack corruption (r1683266, r1683267)
- Drop no longer needed patch:
  * subversion-1.8.11-swig-py-comment-3.patch</changelog>
<changelog author="astieger@suse.com" date="1499428800">- Apache Subversion 1.9.6 (bsc#1026936):
  This change makes Subversion resilient to collision attacks,
  including SHA-1 collision attacks such as &lt;http://shattered.io/&gt;.
  https://subversion.apache.org/faq#shattered-sha1
  * fsfs: never attempt to share directory representations
  * fsfs: make consistency independent of hash algorithms
  * cp/mv: improve error message when target is an unversioned dir
  * merge: reduce memory usage with large amounts of mergeinfo
  * 'svnadmin freeze': document the purpose more clearly
  * dump: fix segfault when a revision has no revprops
  * fsfs: improve error message upon failure to open rep-cache
  * work around an APR bug related to file truncation
  * javahl: follow redirects when opening a connection</changelog>
<changelog author="astieger@suse.com" date="1501243200">- Add instructions for running svnserve as a user different from
  "svn", and remove sysconfig variables that are no longer
  effective with the systemd unit. bsc#1049448</changelog>
<changelog author="astieger@suse.com" date="1502366400">- Apache Subversion 1.9.7:
  * CVE-2017-9800: A remote attacker could have caused svn clients
    to execute arbitrary code via specially crafted URLs in
    svn:externals and svn:sync-from-url properties. (bsc#1051362)</changelog>

</package>
<package pkgid="3c7c59d4d48eda4c6aa410c35f15ed2a6d89833b19c53a437d31bfacb1485d78" name="libswresample-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="95b2079b4d17c86a43d959e9e564683135286495003ed9961043bd0f12198cfc" name="libswresample1" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="42350a1285a37c53f241d8e885e43b80ed7c339a85ef582873493e4be3ae370f" name="libswresample1-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="1172baa49597322b9958b77296484d9094993f4a3dab9d13f1064fa8533566ed" name="libswresample2" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="ddcfe10f96279cbcf2773af96400657d00d778c232abcc72e97df0c14485d9fe" name="libswresample2-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="c545e4cf2a33f026e6a3ee2d7b69946746081737e5b231625fe3695ef93c2ebc" name="libswscale-devel" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="40a85dc4db5cb564b2abf47536438962dafcf4d0b520ee3abc0d4c60af579ddf" name="libswscale3" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="aa66bc8d003fb33f67582610e7dce71e3a6e3bfa7e3f0d67ae670dece77ba000" name="libswscale3-32bit" arch="x86_64">
    <version epoch="0" ver="2.8.13" rel="32.1"/>

<changelog author="jengelh@inai.de" date="1459944000">- Another try at organizing the codec-enable list.
  Enable video: AYUV, Dirac, MJPEG, rawvideo, Theora, VP8, VP9, WebP,
  zlib
  Enable audio: Celt, GSM, Opus, Speex, Vorbis
  Enable subtitle: ASS/SSA text, SRT text, UTF-8 plaintext</changelog>
<changelog author="jengelh@inai.de" date="1460289600">- Add ffmpeg-new-coder-errors.diff</changelog>
<changelog author="olaf@aepfle.de" date="1460894400">- Remove ffmpeg-devel subpackage.
  All users have been converted to pkgconfig
  Add Provides/Obsoletes to libavdevice-devel</changelog>
<changelog author="jengelh@inai.de" date="1461585600">- Add ffmpeg-codec-choice.diff</changelog>
<changelog author="aloisio@gmx.com" date="1461844800">- Dropped dcadec (libdca was merged upstream)</changelog>
<changelog author="robert.munteanu@gmail.com" date="1464696000">- Guard usage of opencore using bcond_with, boo#980542</changelog>
<changelog author="jengelh@inai.de" date="1471003200">- Make a copy of existing ffmpeg 3.x package (specfiles, patches)
  and add the most recent ffmpeg 2.x series tarball.
  This is for VLC?
- Update to new upstream release 2.8.7
  * swscale/x86/output: Fix yuv2planeX_16* with unaligned destination
  * libwebpenc_animencoder: zero initialize the
  WebPAnimEncoderOptions struct
  * avcodec/avpacket: Fix off by 5 error</changelog>
<changelog author="jengelh@inai.de" date="1474977600">- Update to new maintenance release 2.8.8
  * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame
  * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg
  * avformat/oggparseopus: Check that granule pos is within the supported range
  * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id()
  * ffmpeg: Check that r_frame_rate is set before attempting to use it
  * avformat/utils: Do not compute the bitrate from duration == 0
  * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id()
  * avformat/avidec: Detect index with too short entries
  * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c
  * avformat/allformats: Making av_register_all() thread-safe.
  * avcodec/vp9_parser: Check the input frame sizes for being consistent
  * avformat/oggdec: Fix integer overflow with invalid pts
  * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample
  * avcodec/diracdec: Check numx/y
  * avformat/avidec: Fix infinite loop in avi_read_nikon()
- Add 0001-avcodec-exr-Check-tile-positions.patch [bnc#998636]</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Have libavcodec56 additionally provide libavcodec56(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="jengelh@inai.de" date="1475928000">- Add 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch
  0001-avformat-avidec-Remove-ancient-assert.patch [boo#1003806]</changelog>
<changelog author="olaf@aepfle.de" date="1477656000">- Enable libfdk_aac if it is available at buildtime</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="davejplater@gmail.com" date="1491048000">- Update to 2.8.10 to fix boo#1022920 VUL-0: CVE-2016-10190
- Removed patches 0001-avcodec-ansi-Check-dimensions.patch,
  0001-avcodec-cavsdsp-use-av_clip_uint8-for-idct.patch,
  0001-avformat-avidec-Remove-ancient-assert.patch and
  0001-avformat-avidec-Check-nb_streams-in-read_gab2_sub.patch.
  They are incorporated in this version.
- Upstream changes:
  * avformat/http: Match chunksize checks to master..3.0
  * Changelog: fix typos
  * ffserver: Check chunk size
  * Avoid using the term "file" and prefer "url" in some docs
  and comments
  * avformat/rtmppkt: Check for packet size mismatches
  * zmqsend: Initialize ret to 0
  * configure: check for strtoull on msvc
  * http: move chunk handling from http_read_stream() to
  http_buf_read().
  * http: make length/offset-related variables unsigned.
  * avcodec/flacdec: Fix undefined shift in decode_subframe()
  * avcodec/get_bits: Fix get_sbits_long(0)
  * avformat/ffmdec: Check media type for chunks
  * avcodec/flacdec: Fix signed integer overflow in
  decode_subframe_fixed()
  * avcodec/flacdsp_template: Fix undefined shift in
  flac_decorrelate_indep_c
  * avformat/oggparsespeex: Check frames_per_packet and packet_size
  * avformat/utils: Check start/end before computing duration in
  update_stream_timings()
  * avcodec/flac_parser: Update nb_headers_buffered
  * avformat/idroqdec: Check chunk_size for being too large
  * filmstripdec: correctly check image dimensions
  * mss2: only use error correction for matching block counts
  * softfloat: decrease MIN_EXP to cover full float range
  * libopusdec: default to stereo for invalid number of channels
  * sbgdec: prevent NULL pointer access
  * smacker: limit recursion depth of smacker_decode_bigtree
  * mxfdec: fix NULL pointer dereference in mxf_read_packet_old
  * libschroedingerdec: fix leaking of framewithpts
  * libschroedingerdec: don't produce empty frames
  * softfloat: handle -INT_MAX correctly
  * pnmdec: make sure v is capped by maxval
  * smvjpegdec: make sure cur_frame is not negative
  * icodec: correctly check avio_read return value
  * icodec: fix leaking pkt on error
  * dvbsubdec: fix division by zero in compute_default_clut
  * proresdec_lgpl: explicitly check coff[3] against slice_data_size
  * escape124: reject codebook size 0
  * mpegts: prevent division by zero
  * matroskadec: fix NULL pointer dereference in
  webm_dash_manifest_read_header
  * mpegaudio_parser: don't return AVERROR_PATCHWELCOME
  * mxfdec: fix NULL pointer dereference
  * diracdec: check return code of get_buffer_with_edge
  * ppc: pixblockdsp: do unaligned block accesses correctly again
  * mpeg12dec: unref discarded picture from extradata
  * cavsdec: unref frame before referencing again
  * avformat: prevent triggering request_probe assert in ff_read_packet
  * avformat/mpeg: Adjust vid probe threshold to correct mis-detection
  * avcodec/rv40: Test remaining space in loop of get_dimension()
  * avcodec/ituh263dec: Avoid spending a long time in slice sync
  * avcodec/movtextdec: Add error message for tsmb_size check
  * avcodec/movtextdec: Fix tsmb_size check==0 check
  * avcodec/movtextdec: Fix potential integer overflow
  * avcodec/sunrast: Fix input buffer pointer check
  * avcodec/tscc:  Check side data size before use
  * avcodec/rawdec: Check side data size before use
  * avcodec/msvideo1: Check side data size before use
  * avcodec/qpeg:  Check side data size before use
  * avcodec/qtrle:  Check side data size before use
  * avcodec/msrle:  Check side data size before use
  * avcodec/kmvc:  Check side data size before use
  * avcodec/idcinvideo: Check side data size before use
  * avcodec/cinepak: Check side data size before use
  * avcodec/8bps: Check side data size before use
  * avcodec/dvdsubdec: Fix off by 1 error
  * avcodec/dvdsubdec: Fix buf_size check
  * vp9: change order of operations in adapt_prob().
  * avcodec/interplayvideo: Check side data size before use
  * avformat/mxfdec: Check size to avoid integer overflow in
  mxf_read_utf16_string()
  * avcodec/mpegvideo_enc: Clear mmx state in
  ff_mpv_reallocate_putbitbuffer()
  * avcodec/utils: Clear MMX state before returning from
  avcodec_default_execute*()
  * cmdutils: fix typos
  * lavfi: fix typos
  * lavc: fix typos
  * tools: fix grammar error
  * avutil/mips/generic_macros_msa: rename macro variable which
  causes segfault for mips r6
  * videodsp: fix 1-byte overread in top/bottom READ_NUM_BYTES
  iterations.
  * avformat/avidec: Check nb_streams in read_gab2_sub()
  * avformat/avidec: Remove ancient assert
  * lavc/movtextdec.c: Avoid infinite loop on invalid data.
  * avcodec/ansi: Check dimensions
  * avcodec/cavsdsp: use av_clip_uint8() for idct
  * resolved CVE-2016-10190 [boo#1022920],
  CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922]</changelog>
<changelog author="jengelh@inai.de" date="1491048001">- Update to new upstream release 2.8.11
  * pgssubdec: reset rle_data_len/rle_remaining_len on allocation
  error
  * avformat/oggdec: Skip streams in duration correction that did
  not had their duration set.
  * avcodec/mpeg4videodec: Fix undefined shifts in
  mpeg4_decode_sprite_trajectory()
  * avformat/avidec: skip odml master index chunks in avi_sync
  * avcodec/pngdec: Fix off by 1 size in decode_zbuf()
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_uuid
  * resolved CVE-2016-9561 [boo#1015120],
  CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
  CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x)</changelog>
<changelog author="idonmez@suse.com" date="1497873600">- Update to new upstream release 2.8.12
  * Lots of integer overflow fixes, see the included Changelog for
    full details. bsc#1046211</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Update to new bugfix release 2.8.13
  * avformat/hls: Fix DoS due to infinite loop
    [CVE-2017-14058] [boo#1056762]
  * avformat/asfdec: Fix DoS due to lack of eof check
    [CVE-2017-14057] [boo#1056761]
  * avformat/cinedec: Fix DoS due to lack of eof check
    [CVE-2017-14059] [boo#1056763]
  * avformat/rl2: Fix DoS due to lack of eof check
    (code not enabled in openSUSE, though in packman)
    [CVE-2017-14056] [boo#1056760]
  * avformat/mvdec: Fix DoS due to lack of eof check
    [CVE-2017-14055] [boo#1056766]
  * avformat/mxfdec: Fix Sign error in mxf_read_primer_pack
    [CVE-2017-14169] [boo#1057536]
  * avformat/mxfdec: Fix DoS issues in mxf_read_index_entry_array
    [CVE-2017-14170] [boo#1057537]
  * avformat/nsvdec: Fix DoS due to lack of eof check in
    nsvs_file_offset loop. [CVE-2017-14171] [boo#1057539]
  * avutil/pixdesc: av_color_primaries_name NULL deref fixed
    [CVE-2017-14225] [boo#1058018]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Add patches 0001-avformat-asfdec-Fix-DoS-in-asf_build_simple_index.patch
  [CVE-2017-14223] [boo#1058019],
  0001-avformat-mov-Fix-DoS-in-read_tfra.patch
  [CVE-2017-14222] [boo#1058020]</changelog>

</package>
<package pkgid="1c78e6d7d1246bc7f858065ce242bf4fc4abe10405caf20cbaca8cef758b53e9" name="libswscale4" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="8b11c27268f340fad387c68a2ba6d2e6f65585bcfedf1372a3dad6d6c7fc30a9" name="libswscale4-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.4" rel="7.1"/>

<changelog author="olaf@aepfle.de" date="1483444800">- Wrap netcdf support in build condtional because it is a drop-in pkg</changelog>
<changelog author="jengelh@inai.de" date="1486468800">- Update to new upstream release 3.2.3
  * Maintenance release with bugfixes
  * ffplay: fix sws_scale possible out of bounds array access
- Drop version number from patch: ffmpeg-2.4.5-arm6l.patch -&gt;
  ffmpeg-arm6l.diff</changelog>
<changelog author="olaf@aepfle.de" date="1486814400">- Make sure each subpkg comes from the same src.rpm</changelog>
<changelog author="jengelh@inai.de" date="1486814401">- Update to new upstream release 3.2.4
  * lavf/mov.c: Avoid heap allocation wrap in mov_read_hdlr
  * lavf/mov.c: Avoid OOB in mov_read_udta_string()
  * lavf/mov.c: Avoid heap allocation wraps in mov_read_{senc,saiz}()</changelog>
<changelog author="dimstar@opensuse.org" date="1487419200">- Have libavcodec57 additionally provide libavcodec57(unrestricted)
  when building unrestricted: allow third party packages to require
  the unrestricted codec. The existing -full provides is not
  suitable as it can be provided by multiple libavcodec* packages,
  whereas we require a specific ABI version.</changelog>
<changelog author="idonmez@suse.com" date="1492084800">- Enable mp3 decoding</changelog>
<changelog author="jengelh@inai.de" date="1492171200">- Update to new upstream release 3.3
  * EBU R128 implementation now within ffmpeg, not relying on
    external library anymore
  * New video filters "premultiply", "readeia608", "threshold",
    "midequalizer"
  * Support for spherical videos
  * New decoders: 16.8 and 24.0 floating point PCM, XPM
  * New demuxers: MIDI Sample Dump Standard, Sample Dump eXchange demuxer
  * MJPEG encoding uses Optimal Huffman tables now
  * Native Opus encoder
  * Support .mov with multiple sample description tables
  * Removed the legacy X11 screen grabber, use XCB instead
  * Removed asyncts filter (use af_aresample instead)
  * resolved CVE-2016-10190 [boo#1022920],
    CVE-2016-10191 [boo#1022921], CVE-2016-10192 [boo#1022922],
    CVE-2017-7859 [boo#1034183], CVE-2017-7862 [boo#1034181],
    CVE-2017-7863 [boo#1034179], CVE-2017-7865 [boo#1034177],
    CVE-2017-7866 [boo#1034176]</changelog>
<changelog author="jengelh@inai.de" date="1492516800">- Enable ac3 per request from idonmez</changelog>
<changelog author="jengelh@inai.de" date="1495195200">- Update to new upstream release 3.3.1
  * Fix uninitialized variables, signed integer overflow,
    excess shift operations. Add boundary checks.</changelog>
<changelog author="jengelh@inai.de" date="1496232000">- Add additional checks to ensure MPEG is off</changelog>
<changelog author="davejplater@gmail.com" date="1496232001">- Disable cuda support to fix boo#1041794:
  ffmpeg 3.3. enablement of cuda prevents H264/avc1.4d400d videos
  from playing on Youtube
- Refreshed patches: ffmpeg-codec-choice.diff
  ffmpeg-libcdio_cdda-pkgconfig.patch
  ffmpeg-pkgconfig-version.patch and ffmpeg-new-coder-errors.diff</changelog>
<changelog author="jengelh@inai.de" date="1496836800">- Update to new upstream release 3.3.2
  * Various fixes for integer overflows and too-large bit shifts</changelog>
<changelog author="davejplater@gmail.com" date="1498219200">- Enabled cuda and cuvid for unrestricted build.
- Fixed typos in devel package descriptions.</changelog>
<changelog author="jengelh@inai.de" date="1500379200">- Add 0001-avcodec-apedec-Fix-integer-overflow.patch
  to address CVE-2017-11399 [boo#1049095]</changelog>
<changelog author="jengelh@inai.de" date="1501416000">- Update to maintenance release 3.3.3
  * Various fixes for integer overflows, too-large bit shifts
    and buffer length checks.
- Drop 0001-avcodec-apedec-Fix-integer-overflow.patch
  (included upstream)</changelog>
<changelog author="olaf@aepfle.de" date="1503662400">- Build unconditionally with lame and twolame</changelog>
<changelog author="jengelh@inai.de" date="1503748800">- Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau.</changelog>
<changelog author="jengelh@inai.de" date="1504526400">- Add 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  [CVE-2017-14058] [boo#1056762],
  0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14057] [boo#1056761],
  0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14059] [boo#1056763],
  0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14054] [boo#1056765],
  0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  (code not enabled in openSUSE, though in packman)
  [CVE-2017-14056] [boo#1056760],
  0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch
  [CVE-2017-14055] [boo#1056766]</changelog>
<changelog author="jengelh@inai.de" date="1504785600">- Add 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  [CVE-2017-14171] [boo#1057539],
  0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  [CVE-2017-14170] [boo#1057537],
  0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  [CVE-2017-14169] [boo#1057536]</changelog>
<changelog author="jengelh@inai.de" date="1505217600">- Update to new upstream release 3.3.4.
  * avutil/pixdesc: fixed NULL deref in av_color_primaries_name
    [CVE-2017-14225] [boo#1058018]
  * avformat/asfdec: Fix DoS in asf_build_simple_index
    [CVE-2017-14223] [boo#1058019]
  * avformat/mov: Fix DoS in read_tfra
    [CVE-2017-14222] [boo#1058020].
- Dropped integrated patches:
  D 0001-avformat-hls-Fix-DoS-due-to-infinite-loop.patch
  D 0001-avformat-nsvdec-Fix-DoS-due-to-lack-of-eof-check-in-.patch
  D 0002-avformat-asfdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0002-avformat-mxfdec-Fix-DoS-issues-in-mxf_read_index_ent.patch
  D 0003-avformat-cinedec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0003-avformat-mxfdec-Fix-Sign-error-in-mxf_read_primer_pa.patch
  D 0004-avformat-rmdec-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0005-avformat-rl2-Fix-DoS-due-to-lack-of-eof-check.patch
  D 0006-avformat-mvdec-Fix-DoS-due-to-lack-of-eof-check.patch</changelog>

</package>
<package pkgid="af36c8514b64c34ac9b4101dad9a650fa3f876af0260f27e4fe03ae614e5ecfd" name="libsystemd0" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="d819fb4522e944de8a93bb98ac6b8d12a457f809712fa047ad7f1d17d3998f58" name="libsystemd0" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="e319b7c4339d94a73990570da9617707f820cee6a4446b1b41c408f309616885" name="libsystemd0" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="41e2b0a70330fedefec5b0bd58c4bf4adc1e40a485938ddd74319dacb0254393" name="libsystemd0" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="cb1e623913baf539e0e50b5a1bc2446dd997ff1ceef8670de399f466fec987c0" name="libsystemd0-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="9de49739000db0489a692e46ec27142a414f998416ac1809f1f06547afcaad32" name="libsystemd0-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="49be58a4b8b9886d9bf890b61d4c4bf7139a7a6ddb33b65930c33af0f9ab7d69" name="libsystemd0-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="b7b41e63b444fdbd35fefbf2465da0271a90f3a323adfe3f059a4a40e99426c2" name="libsystemd0-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="f78d2098fb677f9bcfa8e8c6c3323e6db22921498f49b24b28435c053c0fe024" name="libsystemd0-mini" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="7c7ad772a67e59d8061c7d0e6484bf9f94fa8cad78d92c6a391940780cad7587" name="libsystemd0-mini" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="ddea231a94e6b6ba222ef3140d2e50f7c0d8fd1538392dcaf491a0aeafc8535d" name="libsystemd0-mini" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="13261bbc32128156f87b5bfa8ac4698e3a7f89b11f70c3ea52f3d8d0067e742e" name="libsystemd0-mini" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="8e65313b231000bc6a35e08a1d785a92633ef2c91ea65b88431b01c7fb6e4dff" name="libtag-devel" arch="x86_64">
    <version epoch="0" ver="1.11" rel="5.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336651200">- Also, define GNU_SOURCE</changelog>
<changelog author="vdziewiecki@suse.com" date="1336737600">-Update to 1.7.2:
  * Fixed division by zero while parsing corrupted MP4 files (CVE-2012-2396).
  * Fixed compilation on Haiku.
  * Improved parsing of corrupted WMA, RIFF and OGG files.
  * Fixed a memory leak in the WMA parser.
  * Fixed a memory leak in the FLAC parser.
  * Fixed a possible division by zero in the APE parser.
  * Added detection of TTA2 files.
  * Fixed saving of multiple identically named tags to Vorbis Comments.
-Fixed a build failure related to doxygen.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
<changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
<changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
<changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
<changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
<changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
<changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381147200">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
<changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
<changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
<changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
<changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
<changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
<changelog author="sbrabec@suse.com" date="1502193600">- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>

</package>
<package pkgid="711ca68db4659a4fd5903060376f3f430d69c894a3eff51e98de821a6559f6af" name="libtag1" arch="x86_64">
    <version epoch="0" ver="1.11" rel="5.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336651200">- Also, define GNU_SOURCE</changelog>
<changelog author="vdziewiecki@suse.com" date="1336737600">-Update to 1.7.2:
  * Fixed division by zero while parsing corrupted MP4 files (CVE-2012-2396).
  * Fixed compilation on Haiku.
  * Improved parsing of corrupted WMA, RIFF and OGG files.
  * Fixed a memory leak in the WMA parser.
  * Fixed a memory leak in the FLAC parser.
  * Fixed a possible division by zero in the APE parser.
  * Added detection of TTA2 files.
  * Fixed saving of multiple identically named tags to Vorbis Comments.
-Fixed a build failure related to doxygen.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
<changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
<changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
<changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
<changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
<changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
<changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381147200">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
<changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
<changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
<changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
<changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
<changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
<changelog author="sbrabec@suse.com" date="1502193600">- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>

</package>
<package pkgid="6f61f46fe8cf6bb21e0062c539a06e253e693e4fb17465d97e6545e56e5b4b92" name="libtag1-32bit" arch="x86_64">
    <version epoch="0" ver="1.11" rel="5.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336651200">- Also, define GNU_SOURCE</changelog>
<changelog author="vdziewiecki@suse.com" date="1336737600">-Update to 1.7.2:
  * Fixed division by zero while parsing corrupted MP4 files (CVE-2012-2396).
  * Fixed compilation on Haiku.
  * Improved parsing of corrupted WMA, RIFF and OGG files.
  * Fixed a memory leak in the WMA parser.
  * Fixed a memory leak in the FLAC parser.
  * Fixed a possible division by zero in the APE parser.
  * Added detection of TTA2 files.
  * Fixed saving of multiple identically named tags to Vorbis Comments.
-Fixed a build failure related to doxygen.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
<changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
<changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
<changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
<changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
<changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
<changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381147200">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
<changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
<changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
<changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
<changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
<changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
<changelog author="sbrabec@suse.com" date="1502193600">- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>

</package>
<package pkgid="367925aaa5e748b58700436de2c5316e0b141aeec3c2b1e46a43ded8e7017a34" name="libtag_c0" arch="x86_64">
    <version epoch="0" ver="1.11" rel="5.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336651200">- Also, define GNU_SOURCE</changelog>
<changelog author="vdziewiecki@suse.com" date="1336737600">-Update to 1.7.2:
  * Fixed division by zero while parsing corrupted MP4 files (CVE-2012-2396).
  * Fixed compilation on Haiku.
  * Improved parsing of corrupted WMA, RIFF and OGG files.
  * Fixed a memory leak in the WMA parser.
  * Fixed a memory leak in the FLAC parser.
  * Fixed a possible division by zero in the APE parser.
  * Added detection of TTA2 files.
  * Fixed saving of multiple identically named tags to Vorbis Comments.
-Fixed a build failure related to doxygen.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
<changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
<changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
<changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
<changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
<changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
<changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381147200">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
<changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
<changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
<changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
<changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
<changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
<changelog author="sbrabec@suse.com" date="1502193600">- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>

</package>
<package pkgid="bce2091a9695944b57338c7ed93557097e8f89d16d52e25ad9d3a379bef5fdba" name="libtag_c0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11" rel="5.1"/>

<changelog author="crrodriguez@opensuse.org" date="1336651200">- Also, define GNU_SOURCE</changelog>
<changelog author="vdziewiecki@suse.com" date="1336737600">-Update to 1.7.2:
  * Fixed division by zero while parsing corrupted MP4 files (CVE-2012-2396).
  * Fixed compilation on Haiku.
  * Improved parsing of corrupted WMA, RIFF and OGG files.
  * Fixed a memory leak in the WMA parser.
  * Fixed a memory leak in the FLAC parser.
  * Fixed a possible division by zero in the APE parser.
  * Added detection of TTA2 files.
  * Fixed saving of multiple identically named tags to Vorbis Comments.
-Fixed a build failure related to doxygen.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
<changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
<changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
<changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
<changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
<changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
<changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381147200">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
<changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
<changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
<changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
<changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
<changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
<changelog author="sbrabec@suse.com" date="1502193600">- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>

</package>
<package pkgid="364780f944423e7a3740d91de47974047bcac781f4be01ed83b7ebb846b9a6ef" name="libtcmu-devel" arch="x86_64">
    <version epoch="0" ver="1.2.0" rel="3.1"/>

<changelog author="lduncan@suse.com" date="1462449600">- Created from upstream version 1.0.4</changelog>
<changelog author="lduncan@suse.com" date="1464436800">- Updated SPEC file to install LICENSE file (bsc#982130)</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Drop silly buildrequires on libgfapi0/libglib-2_0-0.
  Abolish old macros.</changelog>
<changelog author="lduncan@suse.com" date="1471348800">- Updated SPEC file to break library into separate packages
- Install tcmu-runner.h, adding:
  * include-tcmu-runner-h-in-install.patch</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- rename libtcmu1-devel to libtcmu-devel
- drop unnecessary %oname indirect macro</changelog>
<changelog author="ddiss@suse.com" date="1494504000">- Update to upstream version 1.2.0; (bsc#1038712).
  + Add remove devices when tcmulib teardown
  + fix builds done outside of source directory
  + free tcmu_device after dev-&gt;fd is closed
  + fix Read_Capacity_16
  + detect INQURY response truncation
  + fix incorrect memcpy length
  + fix inquiry buffer length calculations
  + add tcmu.conf for log level configuration
- Remove upstreamed fixes:
  + tcmu-runner-include-falloc-in-qcow.patch
  + tcmu-runner-let-cmake-install-man-page.patch
  + tcmu-runner-Use-CMake-FULL-library-directory-for-SOs.patch
  + include-tcmu-runner-h-in-install.patch</changelog>
<changelog author="ddiss@suse.com" date="1494504001">- Explicitly disable the GlusterFS handler for SLE builds.</changelog>
<changelog author="ddiss@suse.com" date="1494504002">- Build the Ceph RBD handler and package separately; (fate#322524).
- Split the GlusterFS handler into a separate package
  + avoid adding an unnecessary dependencies to tcmu-runner core</changelog>
<changelog author="ddiss@suse.com" date="1494849600">- Make Ceph RBD handler aarch64 and x86-64 only for now
  + librbd isn't yet available for all platforms</changelog>
<changelog author="lduncan@suse.com" date="1500552000">- Updates based on Security Audit, adding 4 patches:
  * glfs-discard-glfs_check_config (bsc#1049485)
  * fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
    (bsc#1049488)
  * only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
    (bsc#1049489)
  * fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
    (bsc#1049490)</changelog>
<changelog author="lduncan@suse.com" date="1500552001">- One more update from Security Audit, adding one more patch:
  - removed-all-check_config-callback-implementations-to-avoid-security-issues
    (bsc#1049491)</changelog>

</package>
<package pkgid="5f935de9b484ecda9574e88b15bd2d2b903b430bc8ec10150a0b8e24dca680e7" name="libtcmu-devel" arch="x86_64">
    <version epoch="0" ver="1.2.0" rel="6.1"/>

<changelog author="lduncan@suse.com" date="1462449600">- Created from upstream version 1.0.4</changelog>
<changelog author="lduncan@suse.com" date="1464436800">- Updated SPEC file to install LICENSE file (bsc#982130)</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Drop silly buildrequires on libgfapi0/libglib-2_0-0.
  Abolish old macros.</changelog>
<changelog author="lduncan@suse.com" date="1471348800">- Updated SPEC file to break library into separate packages
- Install tcmu-runner.h, adding:
  * include-tcmu-runner-h-in-install.patch</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- rename libtcmu1-devel to libtcmu-devel
- drop unnecessary %oname indirect macro</changelog>
<changelog author="ddiss@suse.com" date="1494504000">- Update to upstream version 1.2.0; (bsc#1038712).
  + Add remove devices when tcmulib teardown
  + fix builds done outside of source directory
  + free tcmu_device after dev-&gt;fd is closed
  + fix Read_Capacity_16
  + detect INQURY response truncation
  + fix incorrect memcpy length
  + fix inquiry buffer length calculations
  + add tcmu.conf for log level configuration
- Remove upstreamed fixes:
  + tcmu-runner-include-falloc-in-qcow.patch
  + tcmu-runner-let-cmake-install-man-page.patch
  + tcmu-runner-Use-CMake-FULL-library-directory-for-SOs.patch
  + include-tcmu-runner-h-in-install.patch</changelog>
<changelog author="ddiss@suse.com" date="1494504001">- Explicitly disable the GlusterFS handler for SLE builds.</changelog>
<changelog author="ddiss@suse.com" date="1494504002">- Build the Ceph RBD handler and package separately; (fate#322524).
- Split the GlusterFS handler into a separate package
  + avoid adding an unnecessary dependencies to tcmu-runner core</changelog>
<changelog author="ddiss@suse.com" date="1494849600">- Make Ceph RBD handler aarch64 and x86-64 only for now
  + librbd isn't yet available for all platforms</changelog>
<changelog author="lduncan@suse.com" date="1500552000">- Updates based on Security Audit, adding 4 patches:
  * glfs-discard-glfs_check_config (bsc#1049485)
  * fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
    (bsc#1049488)
  * only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
    (bsc#1049489)
  * fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
    (bsc#1049490)</changelog>
<changelog author="lduncan@suse.com" date="1500552001">- One more update from Security Audit, adding one more patch:
  - removed-all-check_config-callback-implementations-to-avoid-security-issues
    (bsc#1049491)</changelog>
<changelog author="lduncan@suse.com" date="1502280000">- Remove install prefix from beginning of install libdir when
  setting tcmu-runner plugin path (bsc#1052795), adding
  SUSE-specific patch:
  * tcmu-runner-remove-handler-path-install-prefix.patch</changelog>

</package>
<package pkgid="97c64fba79b6e06400e099656412296a844fba5213febc79c0a4e0ff3dbafa7f" name="libtcmu1" arch="x86_64">
    <version epoch="0" ver="1.2.0" rel="3.1"/>

<changelog author="lduncan@suse.com" date="1462449600">- Created from upstream version 1.0.4</changelog>
<changelog author="lduncan@suse.com" date="1464436800">- Updated SPEC file to install LICENSE file (bsc#982130)</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Drop silly buildrequires on libgfapi0/libglib-2_0-0.
  Abolish old macros.</changelog>
<changelog author="lduncan@suse.com" date="1471348800">- Updated SPEC file to break library into separate packages
- Install tcmu-runner.h, adding:
  * include-tcmu-runner-h-in-install.patch</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- rename libtcmu1-devel to libtcmu-devel
- drop unnecessary %oname indirect macro</changelog>
<changelog author="ddiss@suse.com" date="1494504000">- Update to upstream version 1.2.0; (bsc#1038712).
  + Add remove devices when tcmulib teardown
  + fix builds done outside of source directory
  + free tcmu_device after dev-&gt;fd is closed
  + fix Read_Capacity_16
  + detect INQURY response truncation
  + fix incorrect memcpy length
  + fix inquiry buffer length calculations
  + add tcmu.conf for log level configuration
- Remove upstreamed fixes:
  + tcmu-runner-include-falloc-in-qcow.patch
  + tcmu-runner-let-cmake-install-man-page.patch
  + tcmu-runner-Use-CMake-FULL-library-directory-for-SOs.patch
  + include-tcmu-runner-h-in-install.patch</changelog>
<changelog author="ddiss@suse.com" date="1494504001">- Explicitly disable the GlusterFS handler for SLE builds.</changelog>
<changelog author="ddiss@suse.com" date="1494504002">- Build the Ceph RBD handler and package separately; (fate#322524).
- Split the GlusterFS handler into a separate package
  + avoid adding an unnecessary dependencies to tcmu-runner core</changelog>
<changelog author="ddiss@suse.com" date="1494849600">- Make Ceph RBD handler aarch64 and x86-64 only for now
  + librbd isn't yet available for all platforms</changelog>
<changelog author="lduncan@suse.com" date="1500552000">- Updates based on Security Audit, adding 4 patches:
  * glfs-discard-glfs_check_config (bsc#1049485)
  * fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
    (bsc#1049488)
  * only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
    (bsc#1049489)
  * fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
    (bsc#1049490)</changelog>
<changelog author="lduncan@suse.com" date="1500552001">- One more update from Security Audit, adding one more patch:
  - removed-all-check_config-callback-implementations-to-avoid-security-issues
    (bsc#1049491)</changelog>

</package>
<package pkgid="c64ebeab7ca6a7e1150c3882bcb519b3015cb76f2662669c453da4fe8d02a973" name="libtcmu1" arch="x86_64">
    <version epoch="0" ver="1.2.0" rel="6.1"/>

<changelog author="lduncan@suse.com" date="1462449600">- Created from upstream version 1.0.4</changelog>
<changelog author="lduncan@suse.com" date="1464436800">- Updated SPEC file to install LICENSE file (bsc#982130)</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Drop silly buildrequires on libgfapi0/libglib-2_0-0.
  Abolish old macros.</changelog>
<changelog author="lduncan@suse.com" date="1471348800">- Updated SPEC file to break library into separate packages
- Install tcmu-runner.h, adding:
  * include-tcmu-runner-h-in-install.patch</changelog>
<changelog author="jengelh@inai.de" date="1471780800">- rename libtcmu1-devel to libtcmu-devel
- drop unnecessary %oname indirect macro</changelog>
<changelog author="ddiss@suse.com" date="1494504000">- Update to upstream version 1.2.0; (bsc#1038712).
  + Add remove devices when tcmulib teardown
  + fix builds done outside of source directory
  + free tcmu_device after dev-&gt;fd is closed
  + fix Read_Capacity_16
  + detect INQURY response truncation
  + fix incorrect memcpy length
  + fix inquiry buffer length calculations
  + add tcmu.conf for log level configuration
- Remove upstreamed fixes:
  + tcmu-runner-include-falloc-in-qcow.patch
  + tcmu-runner-let-cmake-install-man-page.patch
  + tcmu-runner-Use-CMake-FULL-library-directory-for-SOs.patch
  + include-tcmu-runner-h-in-install.patch</changelog>
<changelog author="ddiss@suse.com" date="1494504001">- Explicitly disable the GlusterFS handler for SLE builds.</changelog>
<changelog author="ddiss@suse.com" date="1494504002">- Build the Ceph RBD handler and package separately; (fate#322524).
- Split the GlusterFS handler into a separate package
  + avoid adding an unnecessary dependencies to tcmu-runner core</changelog>
<changelog author="ddiss@suse.com" date="1494849600">- Make Ceph RBD handler aarch64 and x86-64 only for now
  + librbd isn't yet available for all platforms</changelog>
<changelog author="lduncan@suse.com" date="1500552000">- Updates based on Security Audit, adding 4 patches:
  * glfs-discard-glfs_check_config (bsc#1049485)
  * fixed-local-dos-when-unregisterhandler-was-called-for-a-not-existing-handler
    (bsc#1049488)
  * only-allow-dynamic-unregisterhandler-for-external-handlers-thereby-fixing-dos
    (bsc#1049489)
  * fixed-a-number-of-memory-leaks-with-deregistering-of-dbus-handlers
    (bsc#1049490)</changelog>
<changelog author="lduncan@suse.com" date="1500552001">- One more update from Security Audit, adding one more patch:
  - removed-all-check_config-callback-implementations-to-avoid-security-issues
    (bsc#1049491)</changelog>
<changelog author="lduncan@suse.com" date="1502280000">- Remove install prefix from beginning of install libdir when
  setting tcmu-runner plugin path (bsc#1052795), adding
  SUSE-specific patch:
  * tcmu-runner-remove-handler-path-install-prefix.patch</changelog>

</package>
<package pkgid="83eea5cf876ff6230f2af78bcc752f71c980475e21b30b4c832522c20d5c6828" name="libtevent-util-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="1e77009ea8e29bbc6a8e6d8e93b414823b0614ccc0c6af7028c8fdfbdae2736b" name="libtevent-util-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="729b15c7ad42a84906e48325ef277b4fb75696ee38388639b066d9ae181c52dc" name="libtevent-util-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="30de07480e6a4bb4608f7b89791f3b4c6bc37f3ff72978ea83c2184ccf982923" name="libtevent-util0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="7ecdeae81db13a02af905420903cd42f018317a446b9590cbf968be6bc47840f" name="libtevent-util0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="d3f57e4832cd729cce5becc40f8793e59c61ce23f65a630b78af0cbaa14e7492" name="libtevent-util0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="c6f1014f163850f975762aa176568ce34a0e4a574060775d28e9a3aee6eb2235" name="libtevent-util0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="d3d139af6f3fe316a0d580e6710b6198abee30456053a57d0fed2edac9fbb958" name="libtevent-util0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="64bf22b4a4c6f86ce955ec487e235e4f691b28996e47822e334a9b059df1cf69" name="libtevent-util0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="460bf24a3fb6fa881fcb80a9aa319780a695b5d525160683dbd15f8581156987" name="libtiff-devel" arch="x86_64">
    <version epoch="0" ver="4.0.8" rel="21.1"/>

<changelog author="meissner@suse.com" date="1419249600">- build with PIE</changelog>
<changelog author="pgajdos@suse.com" date="1424952000">- security update: CVE-2014-9655, CVE-2014-8127, CVE-2014-8128,
    CVE-2014-8129, CVE-2014-8130, CVE-2015-1547
    bnc#914890, bnc#916925, bnc#916927
  + erouault.2856.patch
  + erouault.2857.patch
  + erouault.2858.patch
  + erouault.2859.patch
  + erouault.2860.patch
  + erouault.2861.patch
  + erouault.2862.patch
  + erouault.2863.patch
  + erouault.2876.patch
  + bfriesen.2805.patch
  + tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
  + tiff-handle-TIFFTAG_PREDICTOR.patch
  + tiff-dither-malloc-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1435752000">- update to 4.0.4
  D    tiff-4.0.3-double-free.patch
  D    tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
  D    tiff-4.0.3-CVE-2013-1961.patch
  D    erouault.2862.patch
  D    bfriesen.2805.patch
  D    tiff-4.0.3-CVE-2013-4232.patch
  D    tiff-4.0.3-CVE-2013-4244.patch
  D    erouault.2861.patch
  D    erouault.2857.patch
  D    erouault.2856.patch
  D    erouault.2859.patch
  D    tiff-4.0.3-CVE-2012-4564.patch
  D    tiff-4.0.3-tiff2pdf-colors.patch
  D    erouault.2876.patch
  D    erouault.2860.patch
  D    tiff-dither-malloc-check.patch
  D    tiff-4.0.3-CVE-2013-1960.patch
  D    erouault.2858.patch
  D    tiff-handle-TIFFTAG_PREDICTOR.patch
  D    tiff-4.0.3-CVE-2013-4231.patch
  D    tiff-4.0.3-CVE-2013-4243.patch
  D    erouault.2863.patch
  D    tiff-4.0.3-test-jpeg-turbo.patch</changelog>
<changelog author="kstreitova@suse.com" date="1438689600">- use spec-cleaner</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 4.0.6
  * Supports CMake 2.8.9 and later.
  * Add missing file which wasn't being distributed, causing unit
    tests to fail.
  * Make shared/static library building configurable.
  * CMake reads all version information directly from configure.ac
    to avoid duplication of values.
  * CMake builds are now included in 'distcheck' target.
  * Autotools 'make distcheck' now tests the CMake-based build if
    CMake is available.
  * Fixes to avoid undefined behaviour of signed types (C standard
    compliance).
  * Fixes to avoid possible isses when casting to unsigned char.
  * Fixes to avoid undefined behaviour with shifts.
  * Fix generation of output with 16 bit or 32 bit integer, when
    byte swapping is needed, in horizontal predictor (#2521).
  * Fix decoding when there is a single pixel to decode
    (unlikely case...) and byte swapping is involved.
  * Add add explicit masking with 0xff before casting to uchar in
    floating-point horizontal differencing and accumulation routines.
  * Eliminate requirement for and use of 64-bit constant values.
  * tiffgt : Silence glut API deprecation warnings on MacOS X.
  * fax2ps : Detect failure to write to temporary file.
- Changes from version 4.0.5
  * Support for configure/build using CMake.
  * Support for large (&gt; 2GB) files under Microsoft Windows.
  * Configuration and building using CMake is now supported under
    Microsoft Windows and on Unix-type systems.
  * Test for and use fseeko() if it is available. This allows supporting
    large files on Unix-type systems with a 32-bit 'long' type and a
    64-bit 'off_t' type.
  * tiffiop.h: Macros added to use 64-bit equivalents for all standard
    I/O and POSIX APIs used by libtiff and its tools which are limited
    to 2GB in Windows builds. Note that these 64-bit equivalents were
    introduced by the CRT provided with Visual Studio 2005 and if the
    necessary CRT is not installed on the target computer, the program
    will not run. The wrapper macros will not be activated unless the
    definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at
    least 0x800.
  * tif_unix.c: Updated to support large files under Microsoft Windows.
    This makes tif_unix.c a completely viable candidate for use under
    Windows (in spite of its name) if the CRT is modern enough. Please
    note that tif_win32.c already supported large files, but only
    'tiffinfo' and 'tiffdump' made any provision to support large files
    under Windows.
  * _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a
    maximum size of 2GB for extremely large I/O requests. This surmounts
    limitations in the Microsoft Windows read() and write() APIs (which
    are limited to the range of a 32-bit 'int'), and may avoid poor
    behavior with extremely large I/O requests on other systems.
  * Updated to use I/O wrapper macros from tiffiop.h in order to
    support large files under Microsoft Windows.</changelog>
<changelog author="kstreitova@suse.com" date="1452513600">- Added patch:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  - fix uninitialized memory in NeXTDecode (upstream bug #2508)
    [bsc#942690]</changelog>
<changelog author="fstrba@suse.com" date="1452686400">- Added patch:
  * tiff-4.0.6-CVE-2015-7554.patch
  - fix CVE-2015-7554: Out-of-bounds Write in the thumbnail and
    tiffcmp tools (upsteam bug #2499) [bsc#960341]</changelog>
<changelog author="fstrba@suse.com" date="1454328000">- Added patch:
  * tiff-4.0.6-CVE-2015-8782.patch
  - fix CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds
    writes for invalid images (upstream bug #2522) [bsc#964225]</changelog>
<changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
<changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
<changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
<changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
<changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1481198400">- Bring back the bmp2tiff, gif2tiff, ras2tiff, thumbnail and
  rgb2ycbcr tools</changelog>
<changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
<changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
<changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
<changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
<changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
<changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream relaase 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream
- Modified patch:
  * ras2tiff-comeback.patch
    + rediff to changed context</changelog>

</package>
<package pkgid="0f05d68a8029e295ac0540816ca9bd7c1eac502f009d55f1b0979e9448da3ceb" name="libtiff-devel-32bit" arch="x86_64">
    <version epoch="0" ver="4.0.8" rel="21.1"/>

<changelog author="meissner@suse.com" date="1419249600">- build with PIE</changelog>
<changelog author="pgajdos@suse.com" date="1424952000">- security update: CVE-2014-9655, CVE-2014-8127, CVE-2014-8128,
    CVE-2014-8129, CVE-2014-8130, CVE-2015-1547
    bnc#914890, bnc#916925, bnc#916927
  + erouault.2856.patch
  + erouault.2857.patch
  + erouault.2858.patch
  + erouault.2859.patch
  + erouault.2860.patch
  + erouault.2861.patch
  + erouault.2862.patch
  + erouault.2863.patch
  + erouault.2876.patch
  + bfriesen.2805.patch
  + tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
  + tiff-handle-TIFFTAG_PREDICTOR.patch
  + tiff-dither-malloc-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1435752000">- update to 4.0.4
  D    tiff-4.0.3-double-free.patch
  D    tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
  D    tiff-4.0.3-CVE-2013-1961.patch
  D    erouault.2862.patch
  D    bfriesen.2805.patch
  D    tiff-4.0.3-CVE-2013-4232.patch
  D    tiff-4.0.3-CVE-2013-4244.patch
  D    erouault.2861.patch
  D    erouault.2857.patch
  D    erouault.2856.patch
  D    erouault.2859.patch
  D    tiff-4.0.3-CVE-2012-4564.patch
  D    tiff-4.0.3-tiff2pdf-colors.patch
  D    erouault.2876.patch
  D    erouault.2860.patch
  D    tiff-dither-malloc-check.patch
  D    tiff-4.0.3-CVE-2013-1960.patch
  D    erouault.2858.patch
  D    tiff-handle-TIFFTAG_PREDICTOR.patch
  D    tiff-4.0.3-CVE-2013-4231.patch
  D    tiff-4.0.3-CVE-2013-4243.patch
  D    erouault.2863.patch
  D    tiff-4.0.3-test-jpeg-turbo.patch</changelog>
<changelog author="kstreitova@suse.com" date="1438689600">- use spec-cleaner</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 4.0.6
  * Supports CMake 2.8.9 and later.
  * Add missing file which wasn't being distributed, causing unit
    tests to fail.
  * Make shared/static library building configurable.
  * CMake reads all version information directly from configure.ac
    to avoid duplication of values.
  * CMake builds are now included in 'distcheck' target.
  * Autotools 'make distcheck' now tests the CMake-based build if
    CMake is available.
  * Fixes to avoid undefined behaviour of signed types (C standard
    compliance).
  * Fixes to avoid possible isses when casting to unsigned char.
  * Fixes to avoid undefined behaviour with shifts.
  * Fix generation of output with 16 bit or 32 bit integer, when
    byte swapping is needed, in horizontal predictor (#2521).
  * Fix decoding when there is a single pixel to decode
    (unlikely case...) and byte swapping is involved.
  * Add add explicit masking with 0xff before casting to uchar in
    floating-point horizontal differencing and accumulation routines.
  * Eliminate requirement for and use of 64-bit constant values.
  * tiffgt : Silence glut API deprecation warnings on MacOS X.
  * fax2ps : Detect failure to write to temporary file.
- Changes from version 4.0.5
  * Support for configure/build using CMake.
  * Support for large (&gt; 2GB) files under Microsoft Windows.
  * Configuration and building using CMake is now supported under
    Microsoft Windows and on Unix-type systems.
  * Test for and use fseeko() if it is available. This allows supporting
    large files on Unix-type systems with a 32-bit 'long' type and a
    64-bit 'off_t' type.
  * tiffiop.h: Macros added to use 64-bit equivalents for all standard
    I/O and POSIX APIs used by libtiff and its tools which are limited
    to 2GB in Windows builds. Note that these 64-bit equivalents were
    introduced by the CRT provided with Visual Studio 2005 and if the
    necessary CRT is not installed on the target computer, the program
    will not run. The wrapper macros will not be activated unless the
    definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at
    least 0x800.
  * tif_unix.c: Updated to support large files under Microsoft Windows.
    This makes tif_unix.c a completely viable candidate for use under
    Windows (in spite of its name) if the CRT is modern enough. Please
    note that tif_win32.c already supported large files, but only
    'tiffinfo' and 'tiffdump' made any provision to support large files
    under Windows.
  * _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a
    maximum size of 2GB for extremely large I/O requests. This surmounts
    limitations in the Microsoft Windows read() and write() APIs (which
    are limited to the range of a 32-bit 'int'), and may avoid poor
    behavior with extremely large I/O requests on other systems.
  * Updated to use I/O wrapper macros from tiffiop.h in order to
    support large files under Microsoft Windows.</changelog>
<changelog author="kstreitova@suse.com" date="1452513600">- Added patch:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  - fix uninitialized memory in NeXTDecode (upstream bug #2508)
    [bsc#942690]</changelog>
<changelog author="fstrba@suse.com" date="1452686400">- Added patch:
  * tiff-4.0.6-CVE-2015-7554.patch
  - fix CVE-2015-7554: Out-of-bounds Write in the thumbnail and
    tiffcmp tools (upsteam bug #2499) [bsc#960341]</changelog>
<changelog author="fstrba@suse.com" date="1454328000">- Added patch:
  * tiff-4.0.6-CVE-2015-8782.patch
  - fix CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds
    writes for invalid images (upstream bug #2522) [bsc#964225]</changelog>
<changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
<changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
<changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
<changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
<changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1481198400">- Bring back the bmp2tiff, gif2tiff, ras2tiff, thumbnail and
  rgb2ycbcr tools</changelog>
<changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
<changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
<changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
<changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
<changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
<changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream relaase 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream
- Modified patch:
  * ras2tiff-comeback.patch
    + rediff to changed context</changelog>

</package>
<package pkgid="159c394caed44bafe97bae74a84947e12378d20e8e42b23b90d2e62b5aabe8af" name="libtiff5" arch="x86_64">
    <version epoch="0" ver="4.0.8" rel="21.1"/>

<changelog author="meissner@suse.com" date="1419249600">- build with PIE</changelog>
<changelog author="pgajdos@suse.com" date="1424952000">- security update: CVE-2014-9655, CVE-2014-8127, CVE-2014-8128,
    CVE-2014-8129, CVE-2014-8130, CVE-2015-1547
    bnc#914890, bnc#916925, bnc#916927
  + erouault.2856.patch
  + erouault.2857.patch
  + erouault.2858.patch
  + erouault.2859.patch
  + erouault.2860.patch
  + erouault.2861.patch
  + erouault.2862.patch
  + erouault.2863.patch
  + erouault.2876.patch
  + bfriesen.2805.patch
  + tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
  + tiff-handle-TIFFTAG_PREDICTOR.patch
  + tiff-dither-malloc-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1435752000">- update to 4.0.4
  D    tiff-4.0.3-double-free.patch
  D    tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
  D    tiff-4.0.3-CVE-2013-1961.patch
  D    erouault.2862.patch
  D    bfriesen.2805.patch
  D    tiff-4.0.3-CVE-2013-4232.patch
  D    tiff-4.0.3-CVE-2013-4244.patch
  D    erouault.2861.patch
  D    erouault.2857.patch
  D    erouault.2856.patch
  D    erouault.2859.patch
  D    tiff-4.0.3-CVE-2012-4564.patch
  D    tiff-4.0.3-tiff2pdf-colors.patch
  D    erouault.2876.patch
  D    erouault.2860.patch
  D    tiff-dither-malloc-check.patch
  D    tiff-4.0.3-CVE-2013-1960.patch
  D    erouault.2858.patch
  D    tiff-handle-TIFFTAG_PREDICTOR.patch
  D    tiff-4.0.3-CVE-2013-4231.patch
  D    tiff-4.0.3-CVE-2013-4243.patch
  D    erouault.2863.patch
  D    tiff-4.0.3-test-jpeg-turbo.patch</changelog>
<changelog author="kstreitova@suse.com" date="1438689600">- use spec-cleaner</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 4.0.6
  * Supports CMake 2.8.9 and later.
  * Add missing file which wasn't being distributed, causing unit
    tests to fail.
  * Make shared/static library building configurable.
  * CMake reads all version information directly from configure.ac
    to avoid duplication of values.
  * CMake builds are now included in 'distcheck' target.
  * Autotools 'make distcheck' now tests the CMake-based build if
    CMake is available.
  * Fixes to avoid undefined behaviour of signed types (C standard
    compliance).
  * Fixes to avoid possible isses when casting to unsigned char.
  * Fixes to avoid undefined behaviour with shifts.
  * Fix generation of output with 16 bit or 32 bit integer, when
    byte swapping is needed, in horizontal predictor (#2521).
  * Fix decoding when there is a single pixel to decode
    (unlikely case...) and byte swapping is involved.
  * Add add explicit masking with 0xff before casting to uchar in
    floating-point horizontal differencing and accumulation routines.
  * Eliminate requirement for and use of 64-bit constant values.
  * tiffgt : Silence glut API deprecation warnings on MacOS X.
  * fax2ps : Detect failure to write to temporary file.
- Changes from version 4.0.5
  * Support for configure/build using CMake.
  * Support for large (&gt; 2GB) files under Microsoft Windows.
  * Configuration and building using CMake is now supported under
    Microsoft Windows and on Unix-type systems.
  * Test for and use fseeko() if it is available. This allows supporting
    large files on Unix-type systems with a 32-bit 'long' type and a
    64-bit 'off_t' type.
  * tiffiop.h: Macros added to use 64-bit equivalents for all standard
    I/O and POSIX APIs used by libtiff and its tools which are limited
    to 2GB in Windows builds. Note that these 64-bit equivalents were
    introduced by the CRT provided with Visual Studio 2005 and if the
    necessary CRT is not installed on the target computer, the program
    will not run. The wrapper macros will not be activated unless the
    definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at
    least 0x800.
  * tif_unix.c: Updated to support large files under Microsoft Windows.
    This makes tif_unix.c a completely viable candidate for use under
    Windows (in spite of its name) if the CRT is modern enough. Please
    note that tif_win32.c already supported large files, but only
    'tiffinfo' and 'tiffdump' made any provision to support large files
    under Windows.
  * _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a
    maximum size of 2GB for extremely large I/O requests. This surmounts
    limitations in the Microsoft Windows read() and write() APIs (which
    are limited to the range of a 32-bit 'int'), and may avoid poor
    behavior with extremely large I/O requests on other systems.
  * Updated to use I/O wrapper macros from tiffiop.h in order to
    support large files under Microsoft Windows.</changelog>
<changelog author="kstreitova@suse.com" date="1452513600">- Added patch:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  - fix uninitialized memory in NeXTDecode (upstream bug #2508)
    [bsc#942690]</changelog>
<changelog author="fstrba@suse.com" date="1452686400">- Added patch:
  * tiff-4.0.6-CVE-2015-7554.patch
  - fix CVE-2015-7554: Out-of-bounds Write in the thumbnail and
    tiffcmp tools (upsteam bug #2499) [bsc#960341]</changelog>
<changelog author="fstrba@suse.com" date="1454328000">- Added patch:
  * tiff-4.0.6-CVE-2015-8782.patch
  - fix CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds
    writes for invalid images (upstream bug #2522) [bsc#964225]</changelog>
<changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
<changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
<changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
<changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
<changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1481198400">- Bring back the bmp2tiff, gif2tiff, ras2tiff, thumbnail and
  rgb2ycbcr tools</changelog>
<changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
<changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
<changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
<changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
<changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
<changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream relaase 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream
- Modified patch:
  * ras2tiff-comeback.patch
    + rediff to changed context</changelog>

</package>
<package pkgid="b2fbe55556fb64d6cc2f70d815dfe20ad23ef0e13c7f993c00ab208c56ee526f" name="libtiff5-32bit" arch="x86_64">
    <version epoch="0" ver="4.0.8" rel="21.1"/>

<changelog author="meissner@suse.com" date="1419249600">- build with PIE</changelog>
<changelog author="pgajdos@suse.com" date="1424952000">- security update: CVE-2014-9655, CVE-2014-8127, CVE-2014-8128,
    CVE-2014-8129, CVE-2014-8130, CVE-2015-1547
    bnc#914890, bnc#916925, bnc#916927
  + erouault.2856.patch
  + erouault.2857.patch
  + erouault.2858.patch
  + erouault.2859.patch
  + erouault.2860.patch
  + erouault.2861.patch
  + erouault.2862.patch
  + erouault.2863.patch
  + erouault.2876.patch
  + bfriesen.2805.patch
  + tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
  + tiff-handle-TIFFTAG_PREDICTOR.patch
  + tiff-dither-malloc-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1435752000">- update to 4.0.4
  D    tiff-4.0.3-double-free.patch
  D    tiff-handle-TIFFTAG_CONSECUTIVEBADFAXLINES.patch
  D    tiff-4.0.3-CVE-2013-1961.patch
  D    erouault.2862.patch
  D    bfriesen.2805.patch
  D    tiff-4.0.3-CVE-2013-4232.patch
  D    tiff-4.0.3-CVE-2013-4244.patch
  D    erouault.2861.patch
  D    erouault.2857.patch
  D    erouault.2856.patch
  D    erouault.2859.patch
  D    tiff-4.0.3-CVE-2012-4564.patch
  D    tiff-4.0.3-tiff2pdf-colors.patch
  D    erouault.2876.patch
  D    erouault.2860.patch
  D    tiff-dither-malloc-check.patch
  D    tiff-4.0.3-CVE-2013-1960.patch
  D    erouault.2858.patch
  D    tiff-handle-TIFFTAG_PREDICTOR.patch
  D    tiff-4.0.3-CVE-2013-4231.patch
  D    tiff-4.0.3-CVE-2013-4243.patch
  D    erouault.2863.patch
  D    tiff-4.0.3-test-jpeg-turbo.patch</changelog>
<changelog author="kstreitova@suse.com" date="1438689600">- use spec-cleaner</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 4.0.6
  * Supports CMake 2.8.9 and later.
  * Add missing file which wasn't being distributed, causing unit
    tests to fail.
  * Make shared/static library building configurable.
  * CMake reads all version information directly from configure.ac
    to avoid duplication of values.
  * CMake builds are now included in 'distcheck' target.
  * Autotools 'make distcheck' now tests the CMake-based build if
    CMake is available.
  * Fixes to avoid undefined behaviour of signed types (C standard
    compliance).
  * Fixes to avoid possible isses when casting to unsigned char.
  * Fixes to avoid undefined behaviour with shifts.
  * Fix generation of output with 16 bit or 32 bit integer, when
    byte swapping is needed, in horizontal predictor (#2521).
  * Fix decoding when there is a single pixel to decode
    (unlikely case...) and byte swapping is involved.
  * Add add explicit masking with 0xff before casting to uchar in
    floating-point horizontal differencing and accumulation routines.
  * Eliminate requirement for and use of 64-bit constant values.
  * tiffgt : Silence glut API deprecation warnings on MacOS X.
  * fax2ps : Detect failure to write to temporary file.
- Changes from version 4.0.5
  * Support for configure/build using CMake.
  * Support for large (&gt; 2GB) files under Microsoft Windows.
  * Configuration and building using CMake is now supported under
    Microsoft Windows and on Unix-type systems.
  * Test for and use fseeko() if it is available. This allows supporting
    large files on Unix-type systems with a 32-bit 'long' type and a
    64-bit 'off_t' type.
  * tiffiop.h: Macros added to use 64-bit equivalents for all standard
    I/O and POSIX APIs used by libtiff and its tools which are limited
    to 2GB in Windows builds. Note that these 64-bit equivalents were
    introduced by the CRT provided with Visual Studio 2005 and if the
    necessary CRT is not installed on the target computer, the program
    will not run. The wrapper macros will not be activated unless the
    definition _MSC_VER is at least 1400 or __MSVCRT_VERSION__ is at
    least 0x800.
  * tif_unix.c: Updated to support large files under Microsoft Windows.
    This makes tif_unix.c a completely viable candidate for use under
    Windows (in spite of its name) if the CRT is modern enough. Please
    note that tif_win32.c already supported large files, but only
    'tiffinfo' and 'tiffdump' made any provision to support large files
    under Windows.
  * _tiffReadProc() and _tiffWriteProc() are modified to chunk I/O to a
    maximum size of 2GB for extremely large I/O requests. This surmounts
    limitations in the Microsoft Windows read() and write() APIs (which
    are limited to the range of a 32-bit 'int'), and may avoid poor
    behavior with extremely large I/O requests on other systems.
  * Updated to use I/O wrapper macros from tiffiop.h in order to
    support large files under Microsoft Windows.</changelog>
<changelog author="kstreitova@suse.com" date="1452513600">- Added patch:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  - fix uninitialized memory in NeXTDecode (upstream bug #2508)
    [bsc#942690]</changelog>
<changelog author="fstrba@suse.com" date="1452686400">- Added patch:
  * tiff-4.0.6-CVE-2015-7554.patch
  - fix CVE-2015-7554: Out-of-bounds Write in the thumbnail and
    tiffcmp tools (upsteam bug #2499) [bsc#960341]</changelog>
<changelog author="fstrba@suse.com" date="1454328000">- Added patch:
  * tiff-4.0.6-CVE-2015-8782.patch
  - fix CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds
    writes for invalid images (upstream bug #2522) [bsc#964225]</changelog>
<changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
<changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
<changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
<changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
<changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
<changelog author="fstrba@suse.com" date="1481198400">- Bring back the bmp2tiff, gif2tiff, ras2tiff, thumbnail and
  rgb2ycbcr tools</changelog>
<changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
<changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
<changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
<changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
<changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
<changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream relaase 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream
- Modified patch:
  * ras2tiff-comeback.patch
    + rediff to changed context</changelog>

</package>
<package pkgid="87e6fbc28566aa3274b907e7d34170060a277824cab555dc828806992f930fe9" name="libtls15" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="bc83c19635c5f9e50503a5a07f2c35f53cf9d153a23c4545e2ddf526055469ea" name="libtls15-32bit" arch="x86_64">
    <version epoch="0" ver="2.5.3" rel="8.1"/>

<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>
<changelog author="jengelh@inai.de" date="1446638400">- Update to new upstream release 2.3.1
  * ASN.1 cleanups and RFC5280 compliance fixes.
  * Time representations switched from "unsigned long" to "time_t".
  LibreSSL now checks if the host OS supports 64-bit time_t.
  * Changed tls_connect_servername to use the first address that
  resolves with getaddrinfo().
  * Fixed a memory leak and out-of-bounds access in OBJ_obj2txt,
  * Fixed an up-to 7 byte overflow in RC4 when len is not a multiple
  of sizeof(RC4_CHUNK).
- Drop CVE-2015-5333_CVE-2015-5334.patch (merged)</changelog>
<changelog author="jengelh@inai.de" date="1449835200">- Add 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch [boo#958768]</changelog>
<changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 2.3.2
  * Added EVP_aead_chacha20_poly1305_ietf() which matches the AEAD
  construction introduced in RFC 7539, which is different than
  that already used in TLS with EVP_aead_chacha20_poly1305().
  * Avoid a potential undefined C99+ behavior due to shift overflow
  in AES_decrypt.
- Remove 0001-Fix-for-OpenSSL-CVE-2015-3194.patch,
  0001-Fix-for-OpenSSL-CVE-2015-3195.patch (included)</changelog>
<changelog author="jengelh@inai.de" date="1458734400">- Update to new upstream release 2.3.3
  * cert.pem has been reorganized and synced with Mozilla's
  certificate store</changelog>
<changelog author="jengelh@inai.de" date="1462363200">- Update to new upstream release 2.3.4 [boo#978492, boo#977584]
  * Fix multiple vulnerabilities in libcrypto relating to ASN.1 and
  encoding.</changelog>
<changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 2.4.0
  * Added missing error handling around bn_wexpand() calls.
  * Added explicit_bzero calls for freed ASN.1 objects.
  * Fixed X509_*set_object functions to return 0 on allocation
  failure.
  * Implemented the IETF ChaCha20-Poly1305 cipher suites.
  * Changed default EVP_aead_chacha20_poly1305() implementation to
  the IETF version, which is now the default.
  * Fixed password prompts from openssl(1) to properly handle ^C.
  * Reworked error handling in libtls so that configuration errors
  are visible.
  * Deprecated internal use of EVP_[Cipher|Encrypt|Decrypt]_Final.</changelog>
<changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
<changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
<changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
<changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
<changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
<changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
<changelog author="jengelh@inai.de" date="1511956800">- Add des-fcrypt.diff [boo#1065363]</changelog>

</package>
<package pkgid="abcdc21febf638dccdbad451d7d82d1d8a1a6c932e21799ceec7e9b60d891c0a" name="libtool" arch="src">
    <version epoch="0" ver="2.4.2" rel="22.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as source2</changelog>
<changelog author="pth@novell.com" date="1273233600">- Libtool needs tar so add it as Requires (bnc#526298).</changelog>
<changelog author="dmueller@suse.de" date="1274961600">- tar is in /bin/tar, so a requires to /usr/bin/tar doesn't work</changelog>
<changelog author="coolo@novell.com" date="1274961601">- split out the test suite that takes 95% of the build time</changelog>
<changelog author="coolo@novell.com" date="1275307200">- add an empty install section</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="jslaby@suse.de" date="1298894400">- Fix AC_LANG_PROGRAM warnings (bnc#675573)</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1299672000">- update to 2.4, which has quite some new stuff. Limiting here to
  incompatible changes:
  - The fix_srcfile_path variable has been replaced by a more thorough
    mechanism triggered by the to_tool_file_cmd variable.
  - The wrapper command line option support described above introduces the
    following incompatibility: the wrapper will remove any command line
    options that begin with '--lt-*' from the argument list before launching
    (uninstalled) programs. Any '--lt-*' option on the command line not
    recognized by the wrapper will result in an error.
  - The type of the symbol lists variables (lt_*_LTX_preloaded_symbols) has
    been fixed in the manual and in a couple of tests to match the actual
    implementation.</changelog>
<changelog author="coolo@novell.com" date="1300104000">- require automake and provide symbolic names for libltdl</changelog>
<changelog author="pth@suse.de" date="1311940800">- Add gcc-c++ gcc-fortran and gcc-objc to buildrequires so that
  packages using the system wide libtool script compile.
- Add a rpmlintrc to shut up rpmlint on most warnings.</changelog>
<changelog author="coolo@suse.com" date="1316174400">- don't use _service</changelog>
<changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
<changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
<changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
<changelog author="schwab@suse.de" date="1359892800">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
<changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
<changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
<changelog author="pth@suse.de" date="1491825600">- Add patch from Josef Cejka that fixes libtool not returning a value
  when out of memory (bsc#1010802)</changelog>
<changelog author="pth@suse.de" date="1510056000">- Add missing dependencies and provides to baselibs.conf (bsc#1056381)</changelog>

</package>
<package pkgid="aefd2d0436d79dafe94026efad7898c710d435615706dcf69c6649ab4274dc45" name="libtool" arch="x86_64">
    <version epoch="0" ver="2.4.2" rel="22.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as source2</changelog>
<changelog author="pth@novell.com" date="1273233600">- Libtool needs tar so add it as Requires (bnc#526298).</changelog>
<changelog author="dmueller@suse.de" date="1274961600">- tar is in /bin/tar, so a requires to /usr/bin/tar doesn't work</changelog>
<changelog author="coolo@novell.com" date="1274961601">- split out the test suite that takes 95% of the build time</changelog>
<changelog author="coolo@novell.com" date="1275307200">- add an empty install section</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="jslaby@suse.de" date="1298894400">- Fix AC_LANG_PROGRAM warnings (bnc#675573)</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1299672000">- update to 2.4, which has quite some new stuff. Limiting here to
  incompatible changes:
  - The fix_srcfile_path variable has been replaced by a more thorough
    mechanism triggered by the to_tool_file_cmd variable.
  - The wrapper command line option support described above introduces the
    following incompatibility: the wrapper will remove any command line
    options that begin with '--lt-*' from the argument list before launching
    (uninstalled) programs. Any '--lt-*' option on the command line not
    recognized by the wrapper will result in an error.
  - The type of the symbol lists variables (lt_*_LTX_preloaded_symbols) has
    been fixed in the manual and in a couple of tests to match the actual
    implementation.</changelog>
<changelog author="coolo@novell.com" date="1300104000">- require automake and provide symbolic names for libltdl</changelog>
<changelog author="pth@suse.de" date="1311940800">- Add gcc-c++ gcc-fortran and gcc-objc to buildrequires so that
  packages using the system wide libtool script compile.
- Add a rpmlintrc to shut up rpmlint on most warnings.</changelog>
<changelog author="coolo@suse.com" date="1316174400">- don't use _service</changelog>
<changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
<changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
<changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
<changelog author="schwab@suse.de" date="1359892800">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
<changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
<changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
<changelog author="pth@suse.de" date="1491825600">- Add patch from Josef Cejka that fixes libtool not returning a value
  when out of memory (bsc#1010802)</changelog>
<changelog author="pth@suse.de" date="1510056000">- Add missing dependencies and provides to baselibs.conf (bsc#1056381)</changelog>

</package>
<package pkgid="fe0088148a81b561a10702e2acdae7b84a29db5fff920de589acf13652ee83e2" name="libtool-32bit" arch="x86_64">
    <version epoch="0" ver="2.4.2" rel="22.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as source2</changelog>
<changelog author="pth@novell.com" date="1273233600">- Libtool needs tar so add it as Requires (bnc#526298).</changelog>
<changelog author="dmueller@suse.de" date="1274961600">- tar is in /bin/tar, so a requires to /usr/bin/tar doesn't work</changelog>
<changelog author="coolo@novell.com" date="1274961601">- split out the test suite that takes 95% of the build time</changelog>
<changelog author="coolo@novell.com" date="1275307200">- add an empty install section</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="jslaby@suse.de" date="1298894400">- Fix AC_LANG_PROGRAM warnings (bnc#675573)</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1299672000">- update to 2.4, which has quite some new stuff. Limiting here to
  incompatible changes:
  - The fix_srcfile_path variable has been replaced by a more thorough
    mechanism triggered by the to_tool_file_cmd variable.
  - The wrapper command line option support described above introduces the
    following incompatibility: the wrapper will remove any command line
    options that begin with '--lt-*' from the argument list before launching
    (uninstalled) programs. Any '--lt-*' option on the command line not
    recognized by the wrapper will result in an error.
  - The type of the symbol lists variables (lt_*_LTX_preloaded_symbols) has
    been fixed in the manual and in a couple of tests to match the actual
    implementation.</changelog>
<changelog author="coolo@novell.com" date="1300104000">- require automake and provide symbolic names for libltdl</changelog>
<changelog author="pth@suse.de" date="1311940800">- Add gcc-c++ gcc-fortran and gcc-objc to buildrequires so that
  packages using the system wide libtool script compile.
- Add a rpmlintrc to shut up rpmlint on most warnings.</changelog>
<changelog author="coolo@suse.com" date="1316174400">- don't use _service</changelog>
<changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
<changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
<changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
<changelog author="schwab@suse.de" date="1359892800">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
<changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
<changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
<changelog author="pth@suse.de" date="1491825600">- Add patch from Josef Cejka that fixes libtool not returning a value
  when out of memory (bsc#1010802)</changelog>
<changelog author="pth@suse.de" date="1510056000">- Add missing dependencies and provides to baselibs.conf (bsc#1056381)</changelog>

</package>
<package pkgid="8eabcb4247a93470d1af0d23eecdfba8228bd191fc2c9ddbb3e71e74d79d7441" name="libtool-testsuite" arch="src">
    <version epoch="0" ver="2.4.2" rel="22.1"/>

<changelog author="jengelh@medozas.de" date="1260705600">- add baselibs.conf as source2</changelog>
<changelog author="pth@novell.com" date="1273233600">- Libtool needs tar so add it as Requires (bnc#526298).</changelog>
<changelog author="dmueller@suse.de" date="1274961600">- tar is in /bin/tar, so a requires to /usr/bin/tar doesn't work</changelog>
<changelog author="coolo@novell.com" date="1274961601">- split out the test suite that takes 95% of the build time</changelog>
<changelog author="coolo@novell.com" date="1275307200">- add an empty install section</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="jslaby@suse.de" date="1298894400">- Fix AC_LANG_PROGRAM warnings (bnc#675573)</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1299672000">- update to 2.4, which has quite some new stuff. Limiting here to
  incompatible changes:
  - The fix_srcfile_path variable has been replaced by a more thorough
    mechanism triggered by the to_tool_file_cmd variable.
  - The wrapper command line option support described above introduces the
    following incompatibility: the wrapper will remove any command line
    options that begin with '--lt-*' from the argument list before launching
    (uninstalled) programs. Any '--lt-*' option on the command line not
    recognized by the wrapper will result in an error.
  - The type of the symbol lists variables (lt_*_LTX_preloaded_symbols) has
    been fixed in the manual and in a couple of tests to match the actual
    implementation.</changelog>
<changelog author="coolo@novell.com" date="1300104000">- require automake and provide symbolic names for libltdl</changelog>
<changelog author="pth@suse.de" date="1311940800">- Add gcc-c++ gcc-fortran and gcc-objc to buildrequires so that
  packages using the system wide libtool script compile.
- Add a rpmlintrc to shut up rpmlint on most warnings.</changelog>
<changelog author="coolo@suse.com" date="1316174400">- don't use _service</changelog>
<changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
<changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
<changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
<changelog author="schwab@suse.de" date="1359892800">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
<changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
<changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
<changelog author="pth@suse.de" date="1491825600">- Add patch from Josef Cejka that fixes libtool not returning a value
  when out of memory (bsc#1010802)</changelog>
<changelog author="pth@suse.de" date="1510056000">- Add missing dependencies and provides to baselibs.conf (bsc#1056381)</changelog>

</package>
<package pkgid="366f66b6edea995c8fbdaf40492979dfa901837e421c4d6da9c4d26eff9f636d" name="libtsan0" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="9e2308e86947c57bdfedf10e7997b7dc0b6a6fb22baec1cc19ab5edab7bd5169" name="libtumbler-1-0" arch="x86_64">
    <version epoch="0" ver="0.2.0" rel="8.1"/>

<changelog author="gber@opensuse.org" date="1295265600">- update to version 0.1.6
  - bugfixes</changelog>
<changelog author="gber@opensuse.org" date="1298030400">- update to version 0.1.21
  - version bump to override incompatibly versioned packages for
    Maemo
  - quit tumbler after at least 5 minutes of inactivity
  - update to latest revision of the thumbnail management D-Bus
    specification where Cleanup() takes an array of base URIs
    instead of just one
  - translation updates</changelog>
<changelog author="vuntz@opensuse.org" date="1316520000">- Add tumbler-poppler-0.18.patch: fix build with poppler 0.17/0.18.
  Patch taken from git.
- Add tumbler-poppler-0.18-bis.patch: second part of the fix, not
  in git yet.</changelog>
<changelog author="gber@opensuse.org" date="1316606400">- update to version 0.1.22
  - add coding style documentation
  - add a GStreamer-based thumbnailer for video thumbnails
  - avoid GdkPixbuf functions deprecated in poppler &gt;= 0.17
  - translation updates
- dropped obsolete tumbler-poppler-0.18.patch,
  tumbler-poppler-0.18-bis.patch</changelog>
<changelog author="gber@opensuse.org" date="1317124800">- added tumbler-0.1.22-fix-video-thumbnails.patch in order to fix
  the generation of video images by starting the pipeline
- build the gstreamer plugin now that it actually works</changelog>
<changelog author="gber@opensuse.org" date="1323000000">- update to version 0.1.23
  - fix generation of video images by starting the pipeline
  - add an ODF thumbnailer plugin
  - add support for OpenRaster images in the ODF thumbnailer
  - add a raw image thumbnailer plugin
  - exit the xdg thumbnailer nicely with corrupt png files
  - avoid huge thumbnails from libjpeg
  - optimize the pixbuf thumbnailer
  - bugfixes
  - translation updates
- dropped obsolete tumbler-0.1.22-fix-video-thumbnails.patch</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="gber@opensuse.org" date="1332849600">- split of -lang and shared library subpackages in order to comply
  with the shread library packaging policy
- enable ODF and RAW plugins and add the option to build the ffmpeg
  plugin
- correct dependencies</changelog>
<changelog author="gber@opensuse.org" date="1333195200">- update to version 0.1.24
  - link all plugins that use rint() against libm
  - call dbus_g_thread_init() to fix threading issues
  - add application/vnd.rn-realmedia to the ffmpeg plugin
  - explicitly link against gmodule
  - avoid accessing list elements after they have been freed
  - make sure to include PLATFORM flags everywhere
  - translation updates</changelog>
<changelog author="gber@opensuse.org" date="1335700800">- update to version 0.1.25
  - remove some unused m4 macros
  - add or fix missing licenses
  - translation updates</changelog>
<changelog author="gber@opensuse.org" date="1355745600">- update to version 0.1.26
  - remove INSTALL
  - directly render the capture in the correct size
  - new gstreamer thumbnailer based on totem-thumbnailer
  - disable http and cdda schemes as well
  - add support for MPEG2 transport streams
  - rotate jpeg thumbnails
  - plug small leak
  - don't use collate to check strings
  - release lifecycle manager during early exit
  - don't abort with warnings in debug mode
  - clear 2.32 mutex memory leak
  - drop unneeded vfs schemes
  - work with an array to store the strings
  - don't use GString for a simple concat
  - make registry dump a bit smaller
  - don't use deprecated glib 2.32 API
  - rotate pixbuf loader images
  - translation updates</changelog>
<changelog author="gber@opensuse.org" date="1357992000">- update to version 0.1.27
  - autotools updates
  - remove unmaintained translations
  - fix build when using -Wl,-z,defs
  - add cover-thumbnailer for movies
  - add config file system to control thumbnailing plugins
  - release thumbnail in gst thumbnailer</changelog>
<changelog author="gber@opensuse.org" date="1358251200">- build the OMDB cover thumbnailer (although disabled by default
  for privacy reasons)</changelog>
<changelog author="pgajdos@suse.com" date="1360929600">- build also with libpng16
  * libpng16.patch</changelog>
<changelog author="gber@opensuse.org" date="1367755200">- update to version 0.1.28
  - set nice value of tumblerd to 19
  - fix rendering from pdfs with thumbnail
  - add more supported types for gst thumbnailer
  - some additional debug checks for bug #9766 and minor
    optimizations
  - fix deprecating warning with glib 2.36
  - include string.h
  - translation updates
- remove obsolete tumbler-libpng16.patch</changelog>
<changelog author="gber@opensuse.org" date="1367755201">- update to version 0.1.29
  - fix memory corruption on 64bit
  - translation updates</changelog>
<changelog author="gber@opensuse.org" date="1401105600">- update to version 0.1.30
  - only enable keepalive in curl &gt;= 7.25
  - support move/copy operations on directories in the cache
  - send the cache operation replies after they are completed
  - translation updates</changelog>
<changelog author="gber@opensuse.org" date="1425124800">- update to version 0.1.31
  - use $XDG_CACHE_HOME/thumbnails as per spec change (bxo#10613)
  - move xdt m4 macros into separate directory
  - update xdt m4 macros
  - bump autotools requirements
  - fix IT_PROG_INTLTOOL warning
  - fix all m4 warnings
  - enable support for video/webm in ffmpeg thumbnailer plugin
    (bxo#10360)
  - translation updates</changelog>
<changelog author="seife+obs@b1-systems.com" date="1510920000">- update to version 0.2.0
  - Stable release of tumbler ported to GDbus
- 0.1.92:
  - Add support for loading thumbnailers from *.thumbnailer files
    (enhancement bug bxo#7475)
- 0.1.90:
  - Tumbler relies now on gdbus instead of dbus-glib
- 0.1.32:
  - bxo#13618 avoid loading specialized tumbnailers twice on system
    with duplicate path entry in $XDG_DATA_HOME (causes assertion
    failure)
  - bxo#13360 don't close GdkPixbufLoader on error (causes sigabrt)
  - bxo#13240 fix typo in exif tag for image height</changelog>
<changelog author="seife+obs@b1-systems.com" date="1511006400">- add explicit libtumbler versioned dependency to tumbler</changelog>

</package>
<package pkgid="dd5a530d4b4054bbe480f94dae7679603799c3ac642e37470146c1503006c56c" name="libturbojpeg0" arch="x86_64">
    <version epoch="0" ver="8.1.2" rel="38.1"/>

<changelog author="idonmez@suse.com" date="1332417600">- Update to version 1.2.0
  * Fixed out-of-bounds read in SSE2 SIMD code
  * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
    be used to check the version of libjpeg-turbo against which
    an application was compiled.
  * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
  * libjpeg-turbo will now correctly decompress erroneous
    CMYK/YCCK JPEGs whose K component is assigned a component ID
    of 1 instead of 4.
  * Added SIMD routines for RGB-to-grayscale color conversion
  * Improved the performance of the C color conversion routines
  * Added a function to the TurboJPEG API that performs lossless
    transforms.
  * Added support for 4:4:0 (transposed 4:2:2) subsampling</changelog>
<changelog author="pgajdos@suse.com" date="1343044800">- Update to version 1.2.1:
  * fixed heap overflow [bnc#771791]</changelog>
<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1368792000">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="tchvatal@suse.com" date="1391774400">- Require libturbojpeg in the devel package.
  Otherwise we just have dangling symlink there.</changelog>
<changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="f5dbb83cb530d317ce964543d29988de8c666dbf075b5dc4a3cd3e732852a4ce" name="libturbojpeg0-32bit" arch="x86_64">
    <version epoch="0" ver="8.1.2" rel="38.1"/>

<changelog author="idonmez@suse.com" date="1332417600">- Update to version 1.2.0
  * Fixed out-of-bounds read in SSE2 SIMD code
  * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
    be used to check the version of libjpeg-turbo against which
    an application was compiled.
  * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
  * libjpeg-turbo will now correctly decompress erroneous
    CMYK/YCCK JPEGs whose K component is assigned a component ID
    of 1 instead of 4.
  * Added SIMD routines for RGB-to-grayscale color conversion
  * Improved the performance of the C color conversion routines
  * Added a function to the TurboJPEG API that performs lossless
    transforms.
  * Added support for 4:4:0 (transposed 4:2:2) subsampling</changelog>
<changelog author="pgajdos@suse.com" date="1343044800">- Update to version 1.2.1:
  * fixed heap overflow [bnc#771791]</changelog>
<changelog author="dmueller@suse.com" date="1344859200">- selfconflicts are not possible, remove it</changelog>
<changelog author="pgajdos@suse.com" date="1368792000">- libjpeg62-turbo package created [bnc#807183]</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369656000">- Build with full RELRO as this library is exposed to
  possible malicious images.</changelog>
<changelog author="pgajdos@suse.com" date="1378814400">- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  * Added support for additional scaling factors (3/8, 5/8, 3/4,
    7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
    decompressing.  Note that the IDCT will not be SIMD-accelerated
    when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt</changelog>
<changelog author="tchvatal@suse.com" date="1391774400">- Require libturbojpeg in the devel package.
  Otherwise we just have dangling symlink there.</changelog>
<changelog author="tchvatal@suse.com" date="1392897600">- Provide right name for turbo library 32bit generating.</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
<changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
<changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
<changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
<changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
<changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
<changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
<changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
<changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>

</package>
<package pkgid="3a95bca83caaec7ac12ca92d7b4d1c02403ede30b0fe1298b145bbfdc0ee7e27" name="libtwolame-devel" arch="x86_64">
    <version epoch="0" ver="0.3.13" rel="2.1"/>

<changelog author="oc2pus@arcor.de" date="1154174400">- initial release 0.3.8</changelog>
<changelog author="toni@links2linux.de" date="1158494400">- build for packman</changelog>
<changelog author="toni@links2linux.de" date="1167566400">- update to 3.9</changelog>
<changelog author="toni@links2linux.de" date="1174478400">- update to 3.10</changelog>
<changelog author="toni@links2linux.de" date="1199880000">- update to 3.12
- changed package layout according Shared Library Packaging Policy</changelog>
<changelog author="toddrme2178@gmail.com" date="1331553600">- Update to 3.13
- Cleaned up spec file formatting
- Changed license to LGPL-2.1 (see COPYING file)
- Added 32bit compatibility package (needed by
  gstreamer-0_10-plugins-ugly-orig-addon-32bit)</changelog>
<changelog author="zaitor@opensuse.org" date="1495713600">- Tweak spec to align more with openSUSE standards.
- Export fno-strict-aliasing to CFLAGS, quiet a gcc warning.
- Drop flac-devel BuildRequires, not needed.
- Replace libsndfile-devel with pkgconfig(sndfile) BuildRequires
  and version it, following what configure looks for.</changelog>

</package>
<package pkgid="8806d6fe8f25439949cb846e5c38f2fb564248d3148ca16edcad71731f16f28c" name="libtwolame0" arch="x86_64">
    <version epoch="0" ver="0.3.13" rel="2.1"/>

<changelog author="oc2pus@arcor.de" date="1154174400">- initial release 0.3.8</changelog>
<changelog author="toni@links2linux.de" date="1158494400">- build for packman</changelog>
<changelog author="toni@links2linux.de" date="1167566400">- update to 3.9</changelog>
<changelog author="toni@links2linux.de" date="1174478400">- update to 3.10</changelog>
<changelog author="toni@links2linux.de" date="1199880000">- update to 3.12
- changed package layout according Shared Library Packaging Policy</changelog>
<changelog author="toddrme2178@gmail.com" date="1331553600">- Update to 3.13
- Cleaned up spec file formatting
- Changed license to LGPL-2.1 (see COPYING file)
- Added 32bit compatibility package (needed by
  gstreamer-0_10-plugins-ugly-orig-addon-32bit)</changelog>
<changelog author="zaitor@opensuse.org" date="1495713600">- Tweak spec to align more with openSUSE standards.
- Export fno-strict-aliasing to CFLAGS, quiet a gcc warning.
- Drop flac-devel BuildRequires, not needed.
- Replace libsndfile-devel with pkgconfig(sndfile) BuildRequires
  and version it, following what configure looks for.</changelog>

</package>
<package pkgid="7ea282b1b78c91a93e15b016588cc7963c8a358ed09e975912db10e830d61342" name="libtwolame0-32bit" arch="x86_64">
    <version epoch="0" ver="0.3.13" rel="2.1"/>

<changelog author="oc2pus@arcor.de" date="1154174400">- initial release 0.3.8</changelog>
<changelog author="toni@links2linux.de" date="1158494400">- build for packman</changelog>
<changelog author="toni@links2linux.de" date="1167566400">- update to 3.9</changelog>
<changelog author="toni@links2linux.de" date="1174478400">- update to 3.10</changelog>
<changelog author="toni@links2linux.de" date="1199880000">- update to 3.12
- changed package layout according Shared Library Packaging Policy</changelog>
<changelog author="toddrme2178@gmail.com" date="1331553600">- Update to 3.13
- Cleaned up spec file formatting
- Changed license to LGPL-2.1 (see COPYING file)
- Added 32bit compatibility package (needed by
  gstreamer-0_10-plugins-ugly-orig-addon-32bit)</changelog>
<changelog author="zaitor@opensuse.org" date="1495713600">- Tweak spec to align more with openSUSE standards.
- Export fno-strict-aliasing to CFLAGS, quiet a gcc warning.
- Drop flac-devel BuildRequires, not needed.
- Replace libsndfile-devel with pkgconfig(sndfile) BuildRequires
  and version it, following what configure looks for.</changelog>

</package>
<package pkgid="48ed29796f76a3783e69293b51b4414a7965bbeda06a1e4f1f1a57a148d710a6" name="libtxc_dxtn" arch="src">
    <version epoch="0" ver="1.0.1" rel="3.1"/>

<changelog author="pontostroy@gmail.com" date="1355832000">- initial packaging</changelog>
<changelog author="damianatorrpm@gmail.com" date="1366200000">- Add Conflicts
- Add Group tag to devel package</changelog>
<changelog author="scarabeus@opensuse.org" date="1416225600">- Instead of conflict do provides
- Remove useless tags
- Cleanup a bit</changelog>
<changelog author="mimi.vx@gmail.com" date="1506945600">- fix Source tags</changelog>

</package>
<package pkgid="32192b9be17fa9021f5253929bfce5124a917744e8b5aa63b9d2bc61b66178dc" name="libtxc_dxtn" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="3.1"/>

<changelog author="pontostroy@gmail.com" date="1355832000">- initial packaging</changelog>
<changelog author="damianatorrpm@gmail.com" date="1366200000">- Add Conflicts
- Add Group tag to devel package</changelog>
<changelog author="scarabeus@opensuse.org" date="1416225600">- Instead of conflict do provides
- Remove useless tags
- Cleanup a bit</changelog>
<changelog author="mimi.vx@gmail.com" date="1506945600">- fix Source tags</changelog>

</package>
<package pkgid="be8fdd2eaebda678a0eb94a97071ff66006739467257c47de77171e1a86d1a0e" name="libtxc_dxtn-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="3.1"/>

<changelog author="pontostroy@gmail.com" date="1355832000">- initial packaging</changelog>
<changelog author="damianatorrpm@gmail.com" date="1366200000">- Add Conflicts
- Add Group tag to devel package</changelog>
<changelog author="scarabeus@opensuse.org" date="1416225600">- Instead of conflict do provides
- Remove useless tags
- Cleanup a bit</changelog>
<changelog author="mimi.vx@gmail.com" date="1506945600">- fix Source tags</changelog>

</package>
<package pkgid="a6e36a48ffa47da032b77fbae33dba40d2800fcb339b1095e09a404bce2a8b96" name="libtxc_dxtn-devel" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="3.1"/>

<changelog author="pontostroy@gmail.com" date="1355832000">- initial packaging</changelog>
<changelog author="damianatorrpm@gmail.com" date="1366200000">- Add Conflicts
- Add Group tag to devel package</changelog>
<changelog author="scarabeus@opensuse.org" date="1416225600">- Instead of conflict do provides
- Remove useless tags
- Cleanup a bit</changelog>
<changelog author="mimi.vx@gmail.com" date="1506945600">- fix Source tags</changelog>

</package>
<package pkgid="0f5a6a8bfd00246b826bb9f796b3cda127079c6747c7c65f5b9d75b534446a69" name="libubsan0" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="b7b689fa0ebccff7bac5b98cdac4749523900a79f2dee16e447b94cfd9881d60" name="libubsan0-32bit" arch="x86_64">
    <version epoch="0" ver="7.2.1+r253435" rel="3.2"/>

<changelog author="rguenther@suse.com" date="1490270400">- Update to gcc trunk head (r246414).
- Package gcov-dump.
- Remove gcc7-debug-dwarf2out-ice.patch.
- Add gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to remove
  useless warning from Wextra that causes build fails due to excessive
  log file size.
- Remove libtsan Requires from the gcc7-32bit package, tsan doesn't have
  a 32bit multilib on any arch.  [boo#1030623]</changelog>
<changelog author="rguenther@suse.com" date="1490616000">- Really fix libtsan requirement on ppc.  [boo#1030623]
- Also fix liblsan requirement on pcc.</changelog>
<changelog author="rguenther@suse.com" date="1490961600">- Update to gcc trunk head (r246609).
- Add cross-binutils Requires to cross-gcc packages.</changelog>
<changelog author="mliska@suse.cz" date="1491307200">- Add update-alternatives for binaries produces by cross compilers.
- Add nospeccleaner comment, remove legacy norootforbuild and
  icecream.</changelog>
<changelog author="rguenther@suse.com" date="1492689600">- Update to gcc-7-branch head (r247019).
- Always create nvptx offloading cross spec file.
- Fix libada provides/conflicts.
- Package gcov.h.
- Add #!BuildIgnore: gcc-PIE.
- Fix update-alternatives.</changelog>
<changelog author="rguenther@suse.com" date="1493380800">- Update to gcc-7-branch head (r247368)
  * Includes GCC 7.1 RC2
  * Includes ARM ABI fix for PR77728, fixing ABI incompatibility
    with GCC 4.8.</changelog>
<changelog author="rguenther@suse.com" date="1493899200">- Update to gcc-7-branch head (r247545)
  * Includes GCC 7.1 release
- For SLE15 change ppc64le tuning to power9.  [fate#322728]
- Change tarball compression to xz, BuildRequire xz.</changelog>
<changelog author="rguenther@suse.com" date="1495022400">- Update to gcc-7-branch head (r248152)
- Drop not working SLE-10 build support.
- For SLE-15 make the i586 compiler generate code for architecture
  level of x86_64.
- Add gcc7-pr80593.patch to fix ceph build. [bnc#1025891]</changelog>
<changelog author="rguenther@suse.com" date="1496145600">- Update to gcc-7-branch head (r248590).
- Add #!BuildIgnore: gcc-PIE also to cross compiler builds.</changelog>
<changelog author="rguenther@suse.com" date="1496836800">- Update to gcc-7-branch head (r248970).
  * Includes gcc7-pr80593.patch.</changelog>
<changelog author="rguenther@suse.com" date="1497009600">- Update plugin enablement guard to use %sle_version.  [bnc#1043590]</changelog>
<changelog author="rguenther@suse.com" date="1497355200">- Fix cross compiler update-alternatives machinery to make rpmlint
  happy.</changelog>
<changelog author="rguenther@suse.com" date="1498737600">- Update to gcc-7-branch head (r249772).
  * Includes patch for PR81080.  [bnc#1044016]
  * Includes patch for PR81204.  [bnc#1045732]
  * Includes patch for PR81112.  [bnc#1043966]</changelog>
<changelog author="rguenther@suse.com" date="1501848000">- Update to gcc-7-branch head (r250819).
  * Includes GCC 7.2 RC1.
  * Includes fix for gcov crash.  [bnc#1050487]
- Add gcc7-stack-probe.diff for support of -fstack-clash-protection
  [bnc#1039513].
- Add gcc7-go-sigrtmax.patch to fix Go build with glibc 2.26.</changelog>
<changelog author="rguenther@suse.com" date="1502193600">- Add gcc7-pr81766.diff to fix grub2 build.</changelog>
<changelog author="bwiedemann@suse.com" date="1503662400">- Sort tar file list to make cross-* packages build reproducibly
  (boo#1041090)</changelog>
<changelog author="rguenther@suse.com" date="1504008000">- Update to gcc-7-branch head (r251579).
  * Includes GCC 7.2 release.
  * Includes gcc7-pr81766.diff and gcc7-go-sigrtmax.patch.</changelog>
<changelog author="matz@suse.de" date="1506340800">- Add support for zero-sized VLAs and allocas with
  - fstack-clash-protection.  [bnc #1059075]
  Changes gcc7-stack-probe.diff.</changelog>
<changelog author="rguenther@suse.com" date="1506513600">- Update to gcc-7-branch head (r253221).
  * Includes similar fix to gcc41-ppc32-retaddr.patch, disable the
    patch but keep the testcase.</changelog>
<changelog author="rguenther@suse.com" date="1507204800">- Update to gcc-7-branch head (r253435).  [fate#321452, fate#321496]
  [fate#323972]
  * contains fix for PR82406 which blocks chromium build.
- Add gcc7-pr81481.diff to fix a register allocation issue.
  [bnc#1048861]</changelog>

</package>
<package pkgid="211d240a3c0f65477a655ec5013cbfd550a7f7e8139fe78cf8b9102af3fad442" name="libudev-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="5567f65d8fc83412899a5859ea0fd0d547f04d1cd3b58951a11c2bdf8a172eae" name="libudev-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="7d2494f91cc0ba86b181174a75102407410c81b8e2c12ac011aef5ea675cb678" name="libudev-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="6b74d67b96d98fa59f5a82c965027b73aebe9dfa8d6cdaa2fc5408ab658e6b8b" name="libudev-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="c330bf83857fc86f9d5fe26d5370dfed2566f93edebb18a0185dfe9196dfdf60" name="libudev-mini-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="144a35b346396ab641efc2023e93e26bc6c5c798a91d4ebdf79cc583e4a425a0" name="libudev-mini-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="d12a4f6959734e9359300e4d0db783cd388ae21f9a0928016c5fc03479b3d583" name="libudev-mini-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="8d3197fabe5ce7099958e775d352680376d1c2a1389373a5c370794ce6950f65" name="libudev-mini-devel" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="f4ae868e1e785b2c6d1b59f180f27f0e5022ba337086263dab557c84d7c9146c" name="libudev-mini1" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="db0f974ce53155143d2ea264a14cfb51a8d84c65b8365a5dcd68803b97bf324a" name="libudev-mini1" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="53fa3d8728322241ab60f4e962d7fef0f188e7888b71e3691f825f9fff1492f8" name="libudev-mini1" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="d219f409db7af7d8668fcc2090b5ef0cd4d605aceed9e127b6d15ebcce6d53ad" name="libudev-mini1" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="ab0747e947fd86c3e06bdd9c3f32cfce9fbcdb8ed3f42afe867ca7e5ffdb8c2b" name="libudev1" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="9317550082ad4cfa994e3c6c3e5955c13a41e2c1d1eea22b45172204420f642a" name="libudev1" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="af29f13f94af6b2f7d38548b3042c05638703068f5eaba3b7f0687307bb2aaa4" name="libudev1" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="4e23d160a64394071c634d31588d25f729db42d7c1f576dd339b4e72d81caff3" name="libudev1" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="55664ee1ef78aaf90d0af8908c2bbe3096f2670d76d078f66860676b3d1b04e2" name="libudev1-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="9a0b95327699d55a863aa77367eacaa9784461661ca2a85b1bdb9b3fce7a5d94" name="libudev1-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="3cf438894fd23e0586409b05f942a60e719079e6bfae11ee195bba3653a43d85" name="libudev1-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="b10e72b0e383208d5ae51110077fa4682452c73568875a99f5da1bf01d581cbb" name="libudev1-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="ecf6f2e4ef343099abe7ea289b9c8956437847b44b7a3b8cbfd0656b55a67414" name="libunistring" arch="src">
    <version epoch="0" ver="0.9.3" rel="25.1"/>

<changelog author="pgajdos@suse.cz" date="1259064000">- initial version of package 0.9.1.1
- spec file taken from
  http://www.pixelbeat.org/patches/libunistring
  (P??draig Brady &lt;P@draigBrady.com)
- needed by guile 1.9.0 and higher</changelog>
<changelog author="pgajdos@suse.cz" date="1268654400">- updated to version 0.9.2.1:
  * The function uc_locale_language now uses the locale of the
    current thread, if a thread-specific locale has been set.</changelog>
<changelog author="pgajdos@suse.cz" date="1283169600">- updated to version 0.9.3:
  * Bug fixes in unistr.h functions:
  - The functions u16_to_u32, u16_to_u8, u8_to_u32, u8_to_u16 now fail when
    the argument is not valid. Previously, they returned a converted string
    where invalid parts were each replaced with U+FFFD.
  - The function u8_mbsnlen now counts an incomplete character at the end
    of the argument string as 1 character. Previously, it could count as 2
    or 3 characters.
  - The return value of the u8_stpncpy, u16_stpncpy, u32_stpncpy functions
    was incorrect.
  - The u8_strcoll, u16_strcoll, u32_strcoll now try harder to give a non-zero
    return value.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1317384000">- Workaround qemu-arm bugs.</changelog>
<changelog author="jengelh@medozas.de" date="1327924800">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Nuke unnecessary libunistring binary package: move documentation
  files to devel subpackage</changelog>
<changelog author="cfarrell@suse.com" date="1331899200">- license update: LGPL-3.0+ and GPL-3.0+
  Numerous files in tests/ and woedll are GPL-3.0+ licensed. Either put
  them in a separate GPL-3.0+ labelled subpackage or use this label for the
  main License: line</changelog>
<changelog author="uweigand@de.ibm.com" date="1387368000">- libunistring-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="pgajdos@suse.com" date="1393934400">- fix parallel build
  * added parallel-make.patch [bnc#866723] (private)</changelog>
<changelog author="mlin@suse.com" date="1483444800">- Add baselibs.conf to generate -32bit packages (bsc#1056981)</changelog>

</package>
<package pkgid="8c9795582429e313e7bd47972aca4ea3183e1a32e8965122bd3a67b50fea56ba" name="libunistring-devel" arch="x86_64">
    <version epoch="0" ver="0.9.3" rel="25.1"/>

<changelog author="pgajdos@suse.cz" date="1259064000">- initial version of package 0.9.1.1
- spec file taken from
  http://www.pixelbeat.org/patches/libunistring
  (P??draig Brady &lt;P@draigBrady.com)
- needed by guile 1.9.0 and higher</changelog>
<changelog author="pgajdos@suse.cz" date="1268654400">- updated to version 0.9.2.1:
  * The function uc_locale_language now uses the locale of the
    current thread, if a thread-specific locale has been set.</changelog>
<changelog author="pgajdos@suse.cz" date="1283169600">- updated to version 0.9.3:
  * Bug fixes in unistr.h functions:
  - The functions u16_to_u32, u16_to_u8, u8_to_u32, u8_to_u16 now fail when
    the argument is not valid. Previously, they returned a converted string
    where invalid parts were each replaced with U+FFFD.
  - The function u8_mbsnlen now counts an incomplete character at the end
    of the argument string as 1 character. Previously, it could count as 2
    or 3 characters.
  - The return value of the u8_stpncpy, u16_stpncpy, u32_stpncpy functions
    was incorrect.
  - The u8_strcoll, u16_strcoll, u32_strcoll now try harder to give a non-zero
    return value.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1317384000">- Workaround qemu-arm bugs.</changelog>
<changelog author="jengelh@medozas.de" date="1327924800">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Nuke unnecessary libunistring binary package: move documentation
  files to devel subpackage</changelog>
<changelog author="cfarrell@suse.com" date="1331899200">- license update: LGPL-3.0+ and GPL-3.0+
  Numerous files in tests/ and woedll are GPL-3.0+ licensed. Either put
  them in a separate GPL-3.0+ labelled subpackage or use this label for the
  main License: line</changelog>
<changelog author="uweigand@de.ibm.com" date="1387368000">- libunistring-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="pgajdos@suse.com" date="1393934400">- fix parallel build
  * added parallel-make.patch [bnc#866723] (private)</changelog>
<changelog author="mlin@suse.com" date="1483444800">- Add baselibs.conf to generate -32bit packages (bsc#1056981)</changelog>

</package>
<package pkgid="2686b3a49041cfed87b6309a56c0cda2a7ec4a7c1b1459f84857456019198fa9" name="libunistring-devel-32bit" arch="x86_64">
    <version epoch="0" ver="0.9.3" rel="25.1"/>

<changelog author="pgajdos@suse.cz" date="1259064000">- initial version of package 0.9.1.1
- spec file taken from
  http://www.pixelbeat.org/patches/libunistring
  (P??draig Brady &lt;P@draigBrady.com)
- needed by guile 1.9.0 and higher</changelog>
<changelog author="pgajdos@suse.cz" date="1268654400">- updated to version 0.9.2.1:
  * The function uc_locale_language now uses the locale of the
    current thread, if a thread-specific locale has been set.</changelog>
<changelog author="pgajdos@suse.cz" date="1283169600">- updated to version 0.9.3:
  * Bug fixes in unistr.h functions:
  - The functions u16_to_u32, u16_to_u8, u8_to_u32, u8_to_u16 now fail when
    the argument is not valid. Previously, they returned a converted string
    where invalid parts were each replaced with U+FFFD.
  - The function u8_mbsnlen now counts an incomplete character at the end
    of the argument string as 1 character. Previously, it could count as 2
    or 3 characters.
  - The return value of the u8_stpncpy, u16_stpncpy, u32_stpncpy functions
    was incorrect.
  - The u8_strcoll, u16_strcoll, u32_strcoll now try harder to give a non-zero
    return value.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1317384000">- Workaround qemu-arm bugs.</changelog>
<changelog author="jengelh@medozas.de" date="1327924800">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Nuke unnecessary libunistring binary package: move documentation
  files to devel subpackage</changelog>
<changelog author="cfarrell@suse.com" date="1331899200">- license update: LGPL-3.0+ and GPL-3.0+
  Numerous files in tests/ and woedll are GPL-3.0+ licensed. Either put
  them in a separate GPL-3.0+ labelled subpackage or use this label for the
  main License: line</changelog>
<changelog author="uweigand@de.ibm.com" date="1387368000">- libunistring-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="pgajdos@suse.com" date="1393934400">- fix parallel build
  * added parallel-make.patch [bnc#866723] (private)</changelog>
<changelog author="mlin@suse.com" date="1483444800">- Add baselibs.conf to generate -32bit packages (bsc#1056981)</changelog>

</package>
<package pkgid="29e714604114ba8254ace0b0ae2d2f0a4641e8f7e3d9a3801262d2a1b58a3acf" name="libunistring0" arch="x86_64">
    <version epoch="0" ver="0.9.3" rel="25.1"/>

<changelog author="pgajdos@suse.cz" date="1259064000">- initial version of package 0.9.1.1
- spec file taken from
  http://www.pixelbeat.org/patches/libunistring
  (P??draig Brady &lt;P@draigBrady.com)
- needed by guile 1.9.0 and higher</changelog>
<changelog author="pgajdos@suse.cz" date="1268654400">- updated to version 0.9.2.1:
  * The function uc_locale_language now uses the locale of the
    current thread, if a thread-specific locale has been set.</changelog>
<changelog author="pgajdos@suse.cz" date="1283169600">- updated to version 0.9.3:
  * Bug fixes in unistr.h functions:
  - The functions u16_to_u32, u16_to_u8, u8_to_u32, u8_to_u16 now fail when
    the argument is not valid. Previously, they returned a converted string
    where invalid parts were each replaced with U+FFFD.
  - The function u8_mbsnlen now counts an incomplete character at the end
    of the argument string as 1 character. Previously, it could count as 2
    or 3 characters.
  - The return value of the u8_stpncpy, u16_stpncpy, u32_stpncpy functions
    was incorrect.
  - The u8_strcoll, u16_strcoll, u32_strcoll now try harder to give a non-zero
    return value.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1317384000">- Workaround qemu-arm bugs.</changelog>
<changelog author="jengelh@medozas.de" date="1327924800">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Nuke unnecessary libunistring binary package: move documentation
  files to devel subpackage</changelog>
<changelog author="cfarrell@suse.com" date="1331899200">- license update: LGPL-3.0+ and GPL-3.0+
  Numerous files in tests/ and woedll are GPL-3.0+ licensed. Either put
  them in a separate GPL-3.0+ labelled subpackage or use this label for the
  main License: line</changelog>
<changelog author="uweigand@de.ibm.com" date="1387368000">- libunistring-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="pgajdos@suse.com" date="1393934400">- fix parallel build
  * added parallel-make.patch [bnc#866723] (private)</changelog>
<changelog author="mlin@suse.com" date="1483444800">- Add baselibs.conf to generate -32bit packages (bsc#1056981)</changelog>

</package>
<package pkgid="8488dd9eac5140e2e9c22a3ea17a2c6caf9b51205914c0f00eee0093d2da2f3c" name="libunistring0-32bit" arch="x86_64">
    <version epoch="0" ver="0.9.3" rel="25.1"/>

<changelog author="pgajdos@suse.cz" date="1259064000">- initial version of package 0.9.1.1
- spec file taken from
  http://www.pixelbeat.org/patches/libunistring
  (P??draig Brady &lt;P@draigBrady.com)
- needed by guile 1.9.0 and higher</changelog>
<changelog author="pgajdos@suse.cz" date="1268654400">- updated to version 0.9.2.1:
  * The function uc_locale_language now uses the locale of the
    current thread, if a thread-specific locale has been set.</changelog>
<changelog author="pgajdos@suse.cz" date="1283169600">- updated to version 0.9.3:
  * Bug fixes in unistr.h functions:
  - The functions u16_to_u32, u16_to_u8, u8_to_u32, u8_to_u16 now fail when
    the argument is not valid. Previously, they returned a converted string
    where invalid parts were each replaced with U+FFFD.
  - The function u8_mbsnlen now counts an incomplete character at the end
    of the argument string as 1 character. Previously, it could count as 2
    or 3 characters.
  - The return value of the u8_stpncpy, u16_stpncpy, u32_stpncpy functions
    was incorrect.
  - The u8_strcoll, u16_strcoll, u32_strcoll now try harder to give a non-zero
    return value.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1317384000">- Workaround qemu-arm bugs.</changelog>
<changelog author="jengelh@medozas.de" date="1327924800">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Nuke unnecessary libunistring binary package: move documentation
  files to devel subpackage</changelog>
<changelog author="cfarrell@suse.com" date="1331899200">- license update: LGPL-3.0+ and GPL-3.0+
  Numerous files in tests/ and woedll are GPL-3.0+ licensed. Either put
  them in a separate GPL-3.0+ labelled subpackage or use this label for the
  main License: line</changelog>
<changelog author="uweigand@de.ibm.com" date="1387368000">- libunistring-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
<changelog author="pgajdos@suse.com" date="1393934400">- fix parallel build
  * added parallel-make.patch [bnc#866723] (private)</changelog>
<changelog author="mlin@suse.com" date="1483444800">- Add baselibs.conf to generate -32bit packages (bsc#1056981)</changelog>

</package>
<package pkgid="19799a94a1b673b4f7111d7205af859a76b190eb3adde3ce74bac4a12351b61d" name="libupsclient1" arch="x86_64">
    <version epoch="0" ver="2.7.4" rel="6.1"/>

<changelog author="sbrabec@suse.cz" date="1320235200">- Patch real source files to get missing devices (bnc#719292#c7).</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1338379200">- Upgrade to version 2.6.3:
  * nut-scanner is now improved and more portable.
  * pkg-config support
  * Support for new devices: Cyber Power Systems with SNMP RMCARD
    (100, 201, 202 and 301); Dynamix 650VA USB; LDLC UPS-1200D;
    Tecnoware UPS ERA LCD 0.65; Powercom BNT-xxxAP (USB ID
    0d9f:0004); Various USB devices using UPSilon 2000 software.
  * bcmxcp_usb now handles disconnection and reconnection.
  * blazer_usb enables again inclusion of buggy IDs.
  * upsd doesn't anymore fail where either IPv4 or IPv6 is
    disabled, and no explicit LISTEN directive has been specified.
  * Avahi support is now automatically enabled, upon detection.
  * jNut (NUT Java interface) adds device discovery support.
  * Many bugfixes, cleanup and improvements.</changelog>
<changelog author="sbrabec@suse.cz" date="1338465600">- Fix random network data crash (bnc#764699, CVE-2012-2944).</changelog>
<changelog author="sbrabec@suse.cz" date="1346760000">- Update to version 2.6.5:
  * Fix regression in upssched.
  * Support for new devices: Eaton ePDU Switched, Online Zinto A,
    REDi Blazer 400VA / 600VA / 800VA, UNITEK Alpha650ipF and
    Alpha650ipE, AEG Power Solutions PROTECT HOME, more APC SNMP
    cards, ATEK Defensor range, all Borri models, all COVER ENERGY
    SA, CyberPower OR700LCDRM1U, PR6000LCDRTXL5U and CP1000PFCLCD,
    Dell UPS Network Management Card, Dynamix 1000VA USB, Eaton
    Management Card Contact (ref 66104), EVER POWERLINE RT / 11 /
    31 and DUO II Pro, GE Digital Energy GT Series 1000-3000 VA,
    Gtec models, all recent HP serial / USB UPS (G2, G3 and R/T
    models) and HP UPS Management Module, Ippon INNOVA RT, KOLFF
    BLACK NOVA, Lexis X-power Tigra 1kVA, Microline C-Lion Innova,
    Online Yunto YQ450, PowerShield Defender 1200VA, PowerWalker
    Online VFI LCD, Line-Interactive VI LCD and Line-Interactive
    VI, Riello Netman Plus 102 SNMP Card, Tripp-Lite OMNISMART500.
  * mge-shut driver has been replaced by a new implementation.
  * Support for integration with VMware ESXI 5.0.
  * IPMI support.
  * snmp-ups: high precision values for APC, more variables.
  * The NUT variables and commands namespace has been fixed and
    completed.
  * Support of ranges of values for writable variables added.
  * Static source code analysis fixes by RedHat using Coverity.
  * Add new "LIST CLIENTS" and "NETVER" commands to NUT network
    protocol.
  * bcmxcp has improved support for battery status, and better
    supports PW9120 units.
  * bestfortress has improved Best Fortress LI675VA support.
  * blazer_ser and blazer_usb now try to automatically estimate high
    and low voltages; support for online Innova UPS (T, RT and 3/1
    T); Best UPS support has been improved.
  * bestups fixes, but will soon be deprecated.
  * newmge-shut has been heavilly improved.
  * oneac 0.80 improves support for all families of Oneac.
  * usbhid-ups: for Eaton devices, ups.start.auto is now
    automatically adjusted for shutdown.{return,stayoff}; Liebert
    firmwares with incorrect exponents have also been addressed.
  * snmp-ups now provides support for UPS shutdown. Composite
    commands are also supported now; Eaton/MGE MIB has been cleaned
    and completed; 3-phases support has been added to Socomec
    Netvision MIB; HP/Compaq MIB has been completed.
  * nut-scanner now also has libupsclient has a weak runtime
    dependency.
  * Provide an Uncomplicated Firewall (UFW) profile.
  * Riello protocols have been officially published in NUT
    protocols library.
  * Duplicate instances of upsd / upsmon are now detected.
  * upslog now comes with logrotate configuration.
  * more devices embed NUT for power protection, now including
    Thecus NAS range.
  * PyNUT.py has been updated to version 1.2.2.
  * Bugfixes, cleanup and improvements.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.
- Fix provides/obsoletes</changelog>
<changelog author="sbrabec@suse.cz" date="1353326400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1359460800">- Turn systemd integration on (nut-systemd-dirs.patch).
- Fix README.SUSE.
- nut-preconfig.patch: Fix UID recommendation.</changelog>
<changelog author="sbrabec@suse.cz" date="1385467200">- Update to version 2.7.1:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  Potentially incompatible changes:
  * First release after the transition from Subversion to Git.
  * The linkman:apcsmart[8] driver has been replaced by a new
    implementation. There is a new parameter, 'ttymode'.  In case
    of issues with this new version, users can revert to
    apcsmart-old.
  * The linkman:nutdrv_qx[8] driver will eventually supersede
    blazer_ser and blazer_usb.  Options are not exactly the same,
    but are documented in the nutdrv_qx man page.
  * Mozilla NSS support has been added.
  * linkman:upsrw[8] now prints out the maximum size of
    variables.
  Other changes:
  * Added a new driver, nutdrv_qx, for Megatec/Qx devices. This
    driver will eventually replace the blazer_ser and blazer_usb
    drivers. In particular, it adds support for Voltronic Power
    devices.
  * Increased USB_TIMEOUT to standards-compliant 5.000 seconds in
    most drivers.  This should reduce the number of timeouts on
    low-speed USB 1.1 devices.
  * Added many devices to the HCL. Of particular note are many
    Tripp Lite USB HID PDC models which were tested against NUT by
    Tripp Lite.
  * Reworked some visual elements of the HCL.
  * Also increased timeouts and added redundant commands to improve
    reliability of mge-utalk driver.
  * Added the apcupsd-ups driver to interoperate with apcupsd
    installations.
  * Added documentation on creating subdrivers for snmp-ups and
    nutdrv_qx.
  * Added new drivers for the Riello UPS product line
    (riello_ser/riello_usb).
  * Many improvements to the BCM/XCP.
  * Added a few variables to the Powercom HID mappings.
  * Updated the apcsmart driver, and renamed the previous driver to
    apcsmart-old.
  * Fixed the battery percentage calculation in the bestfcom
    driver.
  * libnutclient has been added as a C++ alternative to
    libupsclient.
  * Fix shutdown of Eaton HID, using usbhid-ups and mge-shut
  * usbhid-ups: final fix for APC Back UPS ES.
  * nut-scanner: fix crash
  * IPMI support can handle more different versions of FreeIPMI
  * Support power supplies scan over the network nut-scanner can
    now scan for power supplies with IPMI over LAN.  This is
    currently limited to IPMI 1.5 only
  * Improve systemd integration
  * snmp-ups: Fixed a crash on outlet management, and added
    delta_ups MIB support. Also fixed mappings for
    upsBypassVoltage, upsBypassCurrent, and upsBypassPower in
    three-phase IETF MIB.
- Enable FreeIPMI.</changelog>
<changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
<changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
<changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
<changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
<changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post script</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
<changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
<changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
<changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>

</package>
<package pkgid="d49de51e4d36acc33b4260eee31d30009bc6263d86c95efdfb9e7766c8987d8e" name="libuuid-devel" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="f62d135075c6f7e487d006373f0e18823397b19b774ab346c571084d62e52535" name="libuuid-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="ce5b7f8af19343d67e61d88dae329860f7feb8455449699d47093ba4ef99a0a6" name="libuuid-devel-static" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="d1530a384abc65683ce7d90783f1bd021bcb225799cf492796eeae8a28418bf2" name="libuuid1" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="c48c524471bfc055385537c8d080daa31152b05710b36919c8174a14fc8ac2b1" name="libuuid1-32bit" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="b604f33ed2c4dcc1312287424999c7ce0cb0f34e1787e6b964537af1663b7c80" name="libvdpau_nouveau" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="d4e3d167bee47cac6c4330c4fa14d87bfd792b83badd4ba9e01ccddc14f4ff3a" name="libvdpau_nouveau-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="4ef0a1ab12c1ee3e1bbc9ee9a28b2d622f2d5f18039e314479deb01e573de2fe" name="libvdpau_r300" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="0c92a76a15454195a97a3b7e863a291d14f1d64b4d6243e30ad161f2e72be1b6" name="libvdpau_r300-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="2bab9ef22481a0bd5e670615a44f43cdc33f4469d2629de876347bb96e5b1fa4" name="libvdpau_r600" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="7ea58e43a9283e6cf281f43c3548fa7e1e9f555cdea9e76520431ec9967ee554" name="libvdpau_r600-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="b8dea31bb0420bef9dc7d05c15d725c807cbcc8940f7cfd94cd395116ec03496" name="libvdpau_radeonsi" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="b8d3b9fcd8ebab987a969beb0b3f00e37855c9c45bdac4cdaacd4c79db5f8900" name="libvdpau_radeonsi-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="4b717bb809879096a7bbca361d94271996e70d13944a3c7bbfe8fe6c7571a33c" name="libvirt" arch="src">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="776c49a0829df0b1e5a17ecc34de0502f2cb0181d3b3d012ab311e57bfb82004" name="libvirt" arch="src">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="0d5c8e25fbb4cbb16974564ffbc27aac37e228124de658c2a15df71ba6d78626" name="libvirt" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="4ff541b5709c8298464c1e41dcfe6118a0a48dc5f00ec339245bb1065e87f988" name="libvirt" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="e8730e2722da5e0526bdf1fcd48099e8bd645693e2ac0b92c04ca9d0b3f309c8" name="libvirt-admin" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="a0b421ce1cb5dda8d76cf48edfa3f4166a1479b9a9e245ee0b301a1b53338702" name="libvirt-admin" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="a2e7b0375b468015cf1a692b291e743f4c83d3a6dae7687fe08f7eae52ee0a74" name="libvirt-client" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="209e6000901b7576c8d2c53bc42734a6fd557511be495a31a6ffbfe59d6a7322" name="libvirt-client" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="e499e90cea66ea762020e6badf1c0a89b68825932a65298894e5e447b1e302c4" name="libvirt-daemon" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="626ed7a770f2c5edc7af33e47eaea930f76d64abf06c72d7d0b696f6b7c1feb3" name="libvirt-daemon" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="eaacbe91762affbf503341acfd9d596a2ef98a82a8f33e33eb374a023540ef1d" name="libvirt-daemon-config-network" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="bec18afa4b418f454760309f1a70724ebf8f097094474b81516bc399640d4a62" name="libvirt-daemon-config-network" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="02f8553f2a6951c75b7ce3d7b0901c560f061b01216fca9b4a3a17dbe45cbe28" name="libvirt-daemon-config-nwfilter" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="e082c4176f5c6a31bb94314794ed63eae436e3fd7eb09e00928fd96078538f07" name="libvirt-daemon-config-nwfilter" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="be68a8a3c53d24a7470ff841cf5d099d5a779ef2bbf41fb858c8d421b6124333" name="libvirt-daemon-driver-interface" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="44eb2854f4e58067916623e03224c384cfcaeaf44b52dcf679a99b219af500bd" name="libvirt-daemon-driver-interface" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="b59f7ff008614ff1e2a58cdcb0a95b7c2b48c32f5e5c07d2a99ed33b453fccdd" name="libvirt-daemon-driver-libxl" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="53fa9b999d30ed0472f809b843a37a48ba6761aef46c3c5ede8201d011960d5d" name="libvirt-daemon-driver-libxl" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="8a09b4b308eff120aee9d68b29f51a7f0e28ef403e8a2ce608a4baa4fe566749" name="libvirt-daemon-driver-lxc" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="4779da5d3950084b72c0cafba57beed0508e34ca3bb8cf7e4acc0b9094d976e3" name="libvirt-daemon-driver-lxc" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="910fb62d4b721db332993a2eaa73c529ca8d136c481e582e179d94fd5634f3a4" name="libvirt-daemon-driver-network" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="8c1d12813947971fb97f8b9f31e7c4faa181c873669fd24b720fac0b8f3bdde9" name="libvirt-daemon-driver-network" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="b15624812b57f46ca712cfa5fcb1423c27e626f34aaf5ce3c95beaf9be5e7a4b" name="libvirt-daemon-driver-nodedev" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="d72d25153a711e38bf4073954a8dea7d150366c8925c6a7566734907b8cecc20" name="libvirt-daemon-driver-nodedev" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="44da59bb397be9d3ea27a0fd454d622e9aafe218a957eda54b422d2f8c54bb28" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="e3d87455e103637c4eb940d57502f098cda3c3d8b171a6704505396ca13de5cc" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="d1ed53e7f13af82f396d3d110c34a1dff9d3153c98559af765f71c491d1cc532" name="libvirt-daemon-driver-qemu" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="5c476bb8c58f29e5bf2b01ccca9d34dbdce7e8b07878872d9e1c13729559f752" name="libvirt-daemon-driver-qemu" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="31ec2150d79a81c335682c79ed83a770c1a1034b040c97ede89b852630dd337f" name="libvirt-daemon-driver-secret" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="969d043c710858315e084392a3af4496112ed6a755d52c6fd8479810f78fbaa4" name="libvirt-daemon-driver-secret" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="47355ea5cc9ed22f36916be54c5e3a4b8377242f507d8fba993b595b2e874a05" name="libvirt-daemon-driver-storage" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="5643ba3f0c14177b6d4f7cd19cc92a741b1f225fff896c18d5ce377511c60ce0" name="libvirt-daemon-driver-storage" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="6f6e76972bee335b10e1bbe8b7fa1be38d78244c03238d0d7d571acd268d9cfd" name="libvirt-daemon-driver-storage-core" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="a780f4f9bb94c18f87098905ad8e20d4b7ff4a940fe13ff2840517077ca7119e" name="libvirt-daemon-driver-storage-core" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="e74f57552b6247dae0db15c9291b1757f4f7c8ebe44cb9928b5ba10ff1880303" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="69c816993c3287f86ed11e5aaa653edd4a33e23ca96bcb18106c5ff22199e3b3" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="04b25a826c8c4f0e4ce184e9f90055ef556d657bd91aedee39c4bd24f9fea64b" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="567f1f5d9b2a1d5e3701d52b2cb4870668f2c8c59a823219f954e6b10aa4749d" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="44baa4c047ef06a71af201248a83951c933b17af8a026d09848db4b8f00a7522" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="bd4437f2a1832351fbdb3dcca6f4f4f431f65845fb86750abd33995faa26b198" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="b1d7a2e128574a8190276658f4ee30d2d86778d09b141f58cb695591c5514680" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="32437070d7570aa80ecf707489bb2610de508a4452e096a4ea49b7dc366aefff" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="6680706250843e0e2d8cb4ef1fec1afa996c9879212e2ffa5ac5b6475547fd22" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="fad5ad99460b4717bbd40ffb49e07dd857ecd3e9c8090fc9c63688698f352f17" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="98e66574fe91042b41085a70f3da7771f4f08d4328e138f73edcd08b233a2b1a" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="9468f2c083d585a0cee6783ec84c42dd50e69f07d0316b31ae80c53c2d94970b" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="89a732cbf6dd7d1ad00d5e03fed2d036e95401b13a07775d2a7afbd94a39cb8a" name="libvirt-daemon-driver-uml" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="57cbbc7c6a6da3903d5cbb59c2196f82b6e11e3b690ce4b4f12e57c760525ced" name="libvirt-daemon-driver-uml" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="84186a2b9ba980e28f9f38319194ad5c4b1f6f4c2951461227140ede2287e2a1" name="libvirt-daemon-driver-vbox" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="63c7ab9b83cc2535e06d246bcd7d7826cfa8172015de11259c53710e6b42e60e" name="libvirt-daemon-driver-vbox" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="ab6cf1afeb3aa4b1dd4c1f7c6ab91ad4db50e71b4a680b8b1d5b47523b4d811c" name="libvirt-daemon-lxc" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="64410d891cf33423e832c76a9c4aadbf923090c4bf1843d85a767a0b08b61f84" name="libvirt-daemon-lxc" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="288435bb1ceff159ed9da392cbb3a2eda64fb2bae1ae61e28dcc170f1bf6f4ff" name="libvirt-daemon-qemu" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="ae7ae23170e66d7bedfdc8f4be1a6cc7e407914b773ad02f1fc6182b92e897c9" name="libvirt-daemon-qemu" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="aa6a706560fa02a6904e4c6e52d13d914aaa066d6fba9a42f0354caaf987f68c" name="libvirt-daemon-uml" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="fff13f1f5af48def149a969427a597fa6fa17215ed1c757013aafa93761ff739" name="libvirt-daemon-uml" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="c23d2a2194a41724d66cbcd833394afa1cc13adc2664dc0426f350928c15c0da" name="libvirt-daemon-vbox" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="70b8fdef510e7e4644f0511586ec2f0dba2dde0673bfd692c9650423c07b0818" name="libvirt-daemon-vbox" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="fe9d7827c6681bf0da04031f3ef15a411882cd3e5824d99010de7eade1ab1a8a" name="libvirt-daemon-xen" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="0d36638636202096e8c1ca3494ecb897a2a08b7fc0dc675d9a107fd10e9858d7" name="libvirt-daemon-xen" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="d1ffb5c3f160f5007ef463a10b410255f93a44c711fcba5a80a37f428b7f9666" name="libvirt-devel" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="ae1855b64eac8ace764de51087bdb47c70234ac6aa9b87f2e289448670886a4f" name="libvirt-devel" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="eb2488dc92de502c6b51681dd82e5ad14f92a9811019929d7453b956482fd074" name="libvirt-devel-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="b6db800611dad8c819fa6b5f410353d854a9704263baea741904c7bfaf3a5e56" name="libvirt-devel-32bit" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="e51eee62d87fb75ea71a11b5f599583f2efc547fd26d8c7e24598f20451386f4" name="libvirt-doc" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="057c965a9331db8adbc4565d33a484c2f11b6ec069cb34f49cad321264758252" name="libvirt-doc" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="c0a76e8699da619789ce7619d5faefca09d4b2920d652d7b3b8027a5b9023631" name="libvirt-libs" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="b65a55ebc5f118dd8c789ff4ef21964dba22132463873950b935307c059d4b18" name="libvirt-libs" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="1460ed12e2b9ee0375b7477f1d360e4cdd82dbc998bcd1a6fb4202fdcea1d3a8" name="libvirt-lock-sanlock" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="98d6c324dd7042b192795f9467db4141780c5f22005f9988acea890c38064afe" name="libvirt-lock-sanlock" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="53b096f04d531ebdfb8e43c76fe6f20d813b3fb0dfeb9fb04c8b0a7459091b2c" name="libvirt-nss" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="6.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- libxl: set disk format to raw if not specified and fix disk
  detach
  321a28c6-libxl-default-disk-format.patch,
  bd116810-libxl-fix-disk-detach.patch
  bsc#1003379</changelog>
<changelog author="jfehlig@suse.com" date="1486728001">- libxl: fix reporting of domain maximum memory
  ff225538-libxl-autoballoon-setting.patch,
  c89a6e78-libxl-physinfo-cleanup.patch,
  d2b77608-libxl-maxmem-fix.patch,
  79692c38-libxl-dom0-maxmem.patch
  bsc#1017762</changelog>
<changelog author="jfehlig@suse.com" date="1486728002">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>

</package>
<package pkgid="af8f97a064ee17b3b434aebfd5f85e1e7c2692454398ee9f8be1430e596b0d45" name="libvirt-nss" arch="x86_64">
    <version epoch="0" ver="3.3.0" rel="9.1"/>

<changelog author="jfehlig@suse.com" date="1486728000">- apparmor: don't fail on non-apparmor &lt;seclabel&gt;
  apparmor-errormsg-fix.patch, apparmor-alt-seclabel.patch
  bsc#1023436</changelog>
<changelog author="jfehlig@suse.com" date="1487246400">- libxl: more fixes for dom0 maxmem setting
  4ab0c959-libxl-mem-leak.patch, 2dc1cf19-libxl-double-free.patch
  bsc#1017762</changelog>
<changelog author="kukuk@suse.de" date="1487419200">- Don't call insserv if we use systemd and don't require it.</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Drop author list from description. Fix summary to be more
  accurate as to what the subpackage pertains to.</changelog>
<changelog author="jfehlig@suse.com" date="1488542400">- Update to libvirt 3.1.0
  - Modularize storage driver by splitting it into backend-specific
    subpackages
  - CVE-2017-2635, bsc#1027075
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    b018ada3-shunloadtest-build-fix.patch,
    f86a7a83-libxl-dom0-balloon-fix.patch,
    6e4759d0-libxl-timer-fix.patch,
    87df87e0-libxl-timer-tsc-emulate.patch,
    b4386fda-xenconfig-timer-fix.patch,
    d3970925-timer-tests.patch,
    321a28c6-libxl-default-disk-format.patch,
    bd116810-libxl-fix-disk-detach.patch,
    ff225538-libxl-autoballoon-setting.patch,
    c89a6e78-libxl-physinfo-cleanup.patch,
    d2b77608-libxl-maxmem-fix.patch,
    79692c38-libxl-dom0-maxmem.patch,
    4ab0c959-libxl-mem-leak.patch,
    2dc1cf19-libxl-double-free.patch,
    apparmor-errormsg-fix.patch,
    apparmor-alt-seclabel.patch,
    qemu-disable-namespaces.patch</changelog>
<changelog author="mwilck@suse.com" date="1488888000">- network: don't use dhcp-authoritative on static networks
  bsc#1015588
  * added network-don-t-use-dhcp-authoritative-on-static-netwo.patch</changelog>
<changelog author="jfehlig@suse.com" date="1489665600">- qemu: Fix monitor timeout with large memory VMs
  67dcb797-virTimeBackOffWait-sleepcap.patch
  85af0b80-qemu-adaptive-montimeout.patch
  bsc#1013113</changelog>
<changelog author="cbosdonnat@suse.com" date="1490184000">- Fail to start network instead of losing routes if IPv6 forwarding
  is required. bsc#1025252
  Added patches:
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch
    5dd607059-add-virNetDevGetName.patch
    754515b7d-add-virNetlinkDumpCommand.patch
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch</changelog>
<changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
<changelog author="jfehlig@suse.com" date="1491220800">- Update to libvirt 3.2.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    67dcb797-virTimeBackOffWait-sleepcap.patch,
    85af0b80-qemu-adaptive-montimeout.patch,
    d68cb4f55-extract-the-request-sending-code-from-virNetlin.patch,
    754515b7d-add-virNetlinkDumpCommand.patch,
    3ee35d7d6-more-uses-of-SYSCTL_PATH.patch,
    5dd607059-add-virNetDevGetName.patch,
    00d28a78b-check-accept_ra-before-enabling-ipv6-forward.patch
- Add Conflicts=xendomains.service to libvirtd service
  suse-libvirtd-service.patch
  bsc#1015348</changelog>
<changelog author="petracvv@opensuse.org" date="1491998400">- qemu: Fix regression when hyperv/vendor_id feature is used
  Added patch:
  ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  boo#1033893</changelog>
<changelog author="jfehlig@suse.com" date="1493380800">- Update to libvirt 3.3.0 RC1
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    ae102b5d7-qemu-fix-regression-when-hyperv-vendor_id-feature-is-used.patch
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146
- libxl: add default controllers for USB devices
  libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494244800">-  Update to libvirt 3.3.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Bug fixes:
    bsc#978121, bsc#1017017, bsc#1032863, bsc#1033117, bsc#1034024,
    bsc#1034146, bsc#1035995
- libxl: updated libxl-def-usbctrl.patch
  bsc#1031056</changelog>
<changelog author="jfehlig@suse.com" date="1494849600">- qemu: add support for 288 VCPUS
  aeda1b8c-qemu-no-error-shutdown.patch,
  8023b21a-conf-ioapic.patch,
  6b5c6314-qemu-irqchip.patch,
  2020e2c6-conf-intremap.patch,
  04028a9d-qemu-intremap.patch,
  d12781b4-conf-iommu-cache-mode-attr.patch,
  a5691448-qemu-iommu-cache-mode.patch,
  3a276c65-conf-iommu-def-stability-check.patch,
  935d927a-conf-iommu-ABI-stability-check.patch
  FATE#321335
- revert commit 2841e675: qemu: propagate bridge MTU into qemu
  "host_mtu"
  revert-2841e675-mtu.patch
  bsc#1037774</changelog>
<changelog author="jfehlig@suse.com" date="1495454400">- libxl: add default listen address for VNC and spice
  975ea20f-loopback-macro.patch,
  dbb85e0c-libxl-graphics-listen-addr.patch
  bsc#1040207
- xenconfig: fix handling of NULL disk source
  4cd3f241-fix-NULL-disk-source.patch
  bsc#1040213</changelog>
<changelog author="jfehlig@suse.com" date="1500033600">- qemu: Support chardevs with ARM virt machines
  948e429f-qemu-caps-arm-chardev.patch,
  5afe52a8-tests-aarch64-serial.patch,
  ca5c5b99-qemu-remove-old-parallel.patch,
  8fc7cf6a-qemu-drop-chardev-checks.patch,
  56540950-qemu-use-chardev-monitor.patch,
  bae185c7-tests-drop-redundant-serial.patch,
  9818c08e-tests-drop-old-serial.patch,
  67a2de41-tests-caps-chardev.patch,
  b4d56043-qemu-blacklist-chardev-caps.patch,
  426dc5eb-qemu-chardev-platform-dev.patch,
  405c0f07-qemu-rename-chardev-func.patch,
  ccb7c7b2-qemu-remove-unused-caps.patch
  bsc#1045693
- Replaced libxl-def-usbctrl.patch with upstream variant
  6de895f6-libxl-def-usbctrl.patch</changelog>
<changelog author="jfehlig@suse.com" date="1503316800">- Security manager: don't autogenerate seclabels of type 'none'
  ff7e0a1a-fix-securityselinuxtest.patch,
  0f1993aa-dont-autogen-seclable.patch
  bsc#1049505, boo#1051017</changelog>
<changelog author="jfehlig@suse.com" date="1504008000">- rpc: avoid ssh interpreting malicious hostname as arguments
  e4cb8500-avoid-malicious-ssh-hostname-as-args.patch
  bsc#1053600</changelog>
<changelog author="jfehlig@suse.com" date="1507636800">- spec: libvirt-daemon-qemu requires libvirt-daemon-driver-storage
  bsc#1062620</changelog>
<changelog author="jfehlig@suse.com" date="1508155200">- qemu: ensure TLS clients always verify the server certificate
  CVE-2017-1000256
  441d3eb6-qemu-tls-client-verify-server-cert.patch
  bsc#1062563</changelog>

</package>
<package pkgid="0236b0d8c4968fc55c3b6d23f0f7f0644867dbaf43af8eb3dee56b29dbebfd3d" name="libvlc5" arch="x86_64">
    <version epoch="0" ver="2.2.6" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1470312000">- Add vlc-2.2.4-unambig-shortcuts.patch: Make keyboard shortcuts
  in open dialog unambiguous.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Build GStreamer plugin support:
  + Add pkgconfig(gstreamer-app-1.0) BuildRequires.
  + Split out new package vlc-codec-gstreamer, which is triggered
    for automatic installation if vlc-noX and libgstapp are present
    on the system. By using the GStreamer extension one can make
    use of all available addons there (incl. OnePlay codec packs).</changelog>
<changelog author="dimstar@opensuse.org" date="1470744000">- Enable avcodec on openSUSE since ffmpeg had been in the distro
  since Leap 42.1.</changelog>
<changelog author="dimstar@opensuse.org" date="1470830400">- BuildConflict pkgconfig(libavutil) &gt;=55: vlc 2.2.x is not yet
  compatible with these updates.</changelog>
<changelog author="dimstar@opensuse.org" date="1471867200">- Add ffmpeg2-devel BuildRequires for Tumbleweed: older openSUSE
  versions had ffmpeg 2.x in the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1472644800">- Also use ffmpeg2-devel BuildRequires on Leap 42.2 (sle_version
  120200).</changelog>
<changelog author="dimstar@opensuse.org" date="1472990400">- Update vlc-2.2.4-unambig-shortcuts.patch: Also make ALT-P
  unambiguous.</changelog>
<changelog author="dimstar@opensuse.org" date="1473076800">- Drop vlc-2.2.4-unambig-shortcuts.patch: it does not solve the
  problem it attempted to solve to start with. A better solution
  is to be found with upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1474027200">- Rename vlc-noX-lang to vlc-lang: this helps the AppStream builder
  in confirming that 'vlc' (the application) does have a full
  translation set. Obsolete vlc-noX-lang by vlc-noX directly.</changelog>
<changelog author="dimstar@opensuse.org" date="1474372800">- Update summaries: 'VLC' is sufficiently known by now - and nobody
  really remembers the name 'Video Lan Client'.</changelog>
<changelog author="jengelh@inai.de" date="1474372801">- Drop VLC from summaries (rpmlint: name-repeated-in-summary).
  Improve summaries and descriptions.</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Require libavcodec&lt;ABI&gt;(unrestricted) (&lt;ABI&gt; is automatically
  discovered during build based on what libavcodec.so links to)
  from vlc-codecs. This ensures that users installing vlc-codecs
  will get a prompt to replace the distro-provided libavcodec
  package - which is restricted in its formats. This requires the
  user to accept a vendor change.</changelog>
<changelog author="dimstar@opensuse.org" date="1480420800">- Expand the lang_package macro in order to change the dependency
  to be on vlc-noX instead of vlc. USers of headless installed
  vlc might still be interested in translations too (boo#1012556).</changelog>
<changelog author="dimstar@opensuse.org" date="1493812800">- Replace libmodplug-devel BuildRequires with
  pkgconfig(libmodplug): this helps with the migration from
  libmodplug to openmpt.</changelog>
<changelog author="dimstar@opensuse.org" date="1495800000">- Update to version 2.2.6:
  + Video output:
  - Fix systematic green line on nvidia.
  - Fix direct3d SPU texture offsets handling.
  + Demuxer: Fix heap buffer overflows.
- Changes from version 2.2.5.1:
  + Security hardening for DLL hijacking environments.
- Changes from version 2.2.5:
  + Decoder:
  - Fix mp3 playback quality regression in libmad.
  - Fix video scaling in VDPAU.
  - Fix playback of palettized codecs.
  - Fix ADPCM heap corruption (FG-VD-16-067).
  - Fix AES3 16bps decoding.
  - Fix DVD/LPCM heap corruption (FG-VD-16-090).
  - Fix SCTE-27 colors.
  + Demuxer:
  - Fix possible ASF integer overflow.
  - Fix MP4, VOC, XA, SMF divide-by-zero errors.
  - Fix MP4 heap buffer overflows.
  - Fix Flac metadata integer overflow.
  - Fix NSVf and AIFF infinite loops.
  - Fix flac null-pointer dereference.
  - Fix vorbis and opus comments integer overflows and leaks.
  + Video output:
  - Fix green line on Windows with AMD drivers.
  - Fix screenshots size.
  + Access:
  - Fix crash in screen recording on Windows.
  - Fix FTP scan string injection.
  - Fix HTTP size handling.
  + Mux: Fix mp4 drift.
  + Lua: Fix vimeo, youtube, dailymotion, cli, appletrailers, http,
    soundcloud scripts.
  + Audio filter: Fix heap write in stereo_widen audio filter.
- Rebase 0001-no-return-in-non-void.patch.
- Drop vlc-2.1.5-fix-skins2-default-skin-creation.patch: this
  should really not be required anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1498132800">- Disable vnc access module: it does not work in my current tests.</changelog>
<changelog author="olaf@aepfle.de" date="1500897600">- Adjust to API change in a52dec with vlc.a52.patch</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Added vlc-projectM-qt5.patch and applied it for Factory</changelog>
<changelog author="dimstar@opensuse.org" date="1505822400">- Stop depending on libkde4-devel: It's only used to find the
  install path for kde4, but configure falls back to the correct
  default for openSUSE anyway (boo#1057736).</changelog>
<changelog author="dimstar@opensuse.org" date="1505995200">- Add vlc-flac-heap-overflow.patch: flac: fix heap write overflow
  on frame format change (CVE-2017-9300, boo#1041907).</changelog>

</package>
<package pkgid="307b6af247de857d50a93a53fc322ca1e8d4d6b713f81273fff16c9bfe8045d0" name="libvlccore8" arch="x86_64">
    <version epoch="0" ver="2.2.6" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1470312000">- Add vlc-2.2.4-unambig-shortcuts.patch: Make keyboard shortcuts
  in open dialog unambiguous.</changelog>
<changelog author="dimstar@opensuse.org" date="1470312001">- Build GStreamer plugin support:
  + Add pkgconfig(gstreamer-app-1.0) BuildRequires.
  + Split out new package vlc-codec-gstreamer, which is triggered
    for automatic installation if vlc-noX and libgstapp are present
    on the system. By using the GStreamer extension one can make
    use of all available addons there (incl. OnePlay codec packs).</changelog>
<changelog author="dimstar@opensuse.org" date="1470744000">- Enable avcodec on openSUSE since ffmpeg had been in the distro
  since Leap 42.1.</changelog>
<changelog author="dimstar@opensuse.org" date="1470830400">- BuildConflict pkgconfig(libavutil) &gt;=55: vlc 2.2.x is not yet
  compatible with these updates.</changelog>
<changelog author="dimstar@opensuse.org" date="1471867200">- Add ffmpeg2-devel BuildRequires for Tumbleweed: older openSUSE
  versions had ffmpeg 2.x in the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1472644800">- Also use ffmpeg2-devel BuildRequires on Leap 42.2 (sle_version
  120200).</changelog>
<changelog author="dimstar@opensuse.org" date="1472990400">- Update vlc-2.2.4-unambig-shortcuts.patch: Also make ALT-P
  unambiguous.</changelog>
<changelog author="dimstar@opensuse.org" date="1473076800">- Drop vlc-2.2.4-unambig-shortcuts.patch: it does not solve the
  problem it attempted to solve to start with. A better solution
  is to be found with upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1474027200">- Rename vlc-noX-lang to vlc-lang: this helps the AppStream builder
  in confirming that 'vlc' (the application) does have a full
  translation set. Obsolete vlc-noX-lang by vlc-noX directly.</changelog>
<changelog author="dimstar@opensuse.org" date="1474372800">- Update summaries: 'VLC' is sufficiently known by now - and nobody
  really remembers the name 'Video Lan Client'.</changelog>
<changelog author="jengelh@inai.de" date="1474372801">- Drop VLC from summaries (rpmlint: name-repeated-in-summary).
  Improve summaries and descriptions.</changelog>
<changelog author="dimstar@opensuse.org" date="1475064000">- Require libavcodec&lt;ABI&gt;(unrestricted) (&lt;ABI&gt; is automatically
  discovered during build based on what libavcodec.so links to)
  from vlc-codecs. This ensures that users installing vlc-codecs
  will get a prompt to replace the distro-provided libavcodec
  package - which is restricted in its formats. This requires the
  user to accept a vendor change.</changelog>
<changelog author="dimstar@opensuse.org" date="1480420800">- Expand the lang_package macro in order to change the dependency
  to be on vlc-noX instead of vlc. USers of headless installed
  vlc might still be interested in translations too (boo#1012556).</changelog>
<changelog author="dimstar@opensuse.org" date="1493812800">- Replace libmodplug-devel BuildRequires with
  pkgconfig(libmodplug): this helps with the migration from
  libmodplug to openmpt.</changelog>
<changelog author="dimstar@opensuse.org" date="1495800000">- Update to version 2.2.6:
  + Video output:
  - Fix systematic green line on nvidia.
  - Fix direct3d SPU texture offsets handling.
  + Demuxer: Fix heap buffer overflows.
- Changes from version 2.2.5.1:
  + Security hardening for DLL hijacking environments.
- Changes from version 2.2.5:
  + Decoder:
  - Fix mp3 playback quality regression in libmad.
  - Fix video scaling in VDPAU.
  - Fix playback of palettized codecs.
  - Fix ADPCM heap corruption (FG-VD-16-067).
  - Fix AES3 16bps decoding.
  - Fix DVD/LPCM heap corruption (FG-VD-16-090).
  - Fix SCTE-27 colors.
  + Demuxer:
  - Fix possible ASF integer overflow.
  - Fix MP4, VOC, XA, SMF divide-by-zero errors.
  - Fix MP4 heap buffer overflows.
  - Fix Flac metadata integer overflow.
  - Fix NSVf and AIFF infinite loops.
  - Fix flac null-pointer dereference.
  - Fix vorbis and opus comments integer overflows and leaks.
  + Video output:
  - Fix green line on Windows with AMD drivers.
  - Fix screenshots size.
  + Access:
  - Fix crash in screen recording on Windows.
  - Fix FTP scan string injection.
  - Fix HTTP size handling.
  + Mux: Fix mp4 drift.
  + Lua: Fix vimeo, youtube, dailymotion, cli, appletrailers, http,
    soundcloud scripts.
  + Audio filter: Fix heap write in stereo_widen audio filter.
- Rebase 0001-no-return-in-non-void.patch.
- Drop vlc-2.1.5-fix-skins2-default-skin-creation.patch: this
  should really not be required anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1498132800">- Disable vnc access module: it does not work in my current tests.</changelog>
<changelog author="olaf@aepfle.de" date="1500897600">- Adjust to API change in a52dec with vlc.a52.patch</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Added vlc-projectM-qt5.patch and applied it for Factory</changelog>
<changelog author="dimstar@opensuse.org" date="1505822400">- Stop depending on libkde4-devel: It's only used to find the
  install path for kde4, but configure falls back to the correct
  default for openSUSE anyway (boo#1057736).</changelog>
<changelog author="dimstar@opensuse.org" date="1505995200">- Add vlc-flac-heap-overflow.patch: flac: fix heap write overflow
  on frame format change (CVE-2017-9300, boo#1041907).</changelog>

</package>
<package pkgid="8fe7e8c51c30a794321d68eb20d04d5852cf39ae1f5305adefe313b15a9873db" name="libvmtools-devel" arch="x86_64">
    <version epoch="0" ver="10.1.10" rel="4.1"/>

<changelog author="mlatimer@suse.com" date="1448971200">- Update to 10.0.5 stable branch
  + [vgauth] fix timestamp check
  + [libresolutionSet.so] Add an error handler to X11 resolutionSet
  + [vmci.ko] Kill tasklet when unloading vmci module
  + [libvmbackup.so] Quiesced snapshots Skip freezing autofs mounts.
  + [vmhgfs.ko] make vmhgfs compatible with Linux kernel 4.2</changelog>
<changelog author="mlatimer@suse.com" date="1450872000">- Compile without gtkmm support for SLES12 based environments
  (which do not provide gtkmm2.4)</changelog>
<changelog author="dimstar@opensuse.org" date="1461153600">- Add open-vm-tools-posixly.patch: defined(linux) is not posix
  compliant and modern compilers no longer accept it. Change to
  defined(__linux__)
  https://github.com/vmware/open-vm-tools/pull/81
- Add open-vm-tools-buildsystem-fixup.patch: since libsigc++ injects
  - std=c++11 into CFLAGS, the various objects in open-vm-tools need
  to be split up a bit in order to not have a mixed C/C++ object
  receiving the same CFLAGS.</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- they renamed open-vm-tools-stable-10.0.5.tar.gz to
  stable-10.0.5.tar.gz -- fix .spec accordingly</changelog>
<changelog author="ken@suse.com" date="1461844800">- Update to 10.0.7 stable branch
  + Added namespace command line utility "vmware-namespace-cmd".</changelog>
<changelog author="afaerber@suse.de" date="1461931200">- Sanitize the filename handling some more. The official GitHub
  filename is open-vm-tools-stable-10.0.7.tar.gz.</changelog>
<changelog author="ken@suse.com" date="1465387200">- Update to 10.0.7-gtk3 stable branch
  + add support for gtk3, needed by the dndcp and resolutionset
    plugins
  + remove files generated by autoreconf
  + a few minor build fixes
- Update fixes copy-n-paste and drag-n-drop regressions (bsc#978424)
- Added new vmblock-fuse.service
- Drop upstream patches included (or not necessary) in 10.0.7-gtk3:
  + open-vm-tools-posixly.patch
  + open-vm-tools-buildsystem-fixup.patch</changelog>
<changelog author="ken@suse.com" date="1466078400">- Added patches for GCC 6 build failure (boo#985110)
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch</changelog>
<changelog author="ken@suse.com" date="1468411200">- Fix vmtoolsd init script to run vmtoolsd in background. (bsc#971031)
  + fix originally done in SLE-11-SP4 code base by tcech@suse.cz</changelog>
<changelog author="jcejka@suse.de" date="1478088000">- Add udev rule to increase VMware virtual disk timeout values
  (bsc#994598)
  [99-vmware-scsi-udev.rules]</changelog>
<changelog author="ken@suse.com" date="1478952000">- Updated to 10.1.0 stable release (boo#1011057)
  + vmware-namespace-cmd command line utility.
  + gtk3 support
  + Common Agent Framework (CAF)
  + guest authentication with xmlsec1
  + FreeBSD support
  + sub-command to push updated network information to the host on demand
  + udev rules for configuring SCSI timeouts in the guest
  + fixes for Ubuntu 16.10
  + Fix for quiesced snapshot failure leaving guest file system
    quiesced (bsc#1006796)
  + Fix for CVE-2015-5191 (bsc#1007600)
- Dropped upstream patches included (or not necessary) in 10.1.0:
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch
  + enable-gcc46+.patch</changelog>
<changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
<changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
<changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
<changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
<changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
<changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
<changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
<changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>

</package>
<package pkgid="3de33e7248474dbe7c91fda871dd5843d281d7d5afc06011ede732572e53fabd" name="libvmtools0" arch="x86_64">
    <version epoch="0" ver="10.1.10" rel="4.1"/>

<changelog author="mlatimer@suse.com" date="1448971200">- Update to 10.0.5 stable branch
  + [vgauth] fix timestamp check
  + [libresolutionSet.so] Add an error handler to X11 resolutionSet
  + [vmci.ko] Kill tasklet when unloading vmci module
  + [libvmbackup.so] Quiesced snapshots Skip freezing autofs mounts.
  + [vmhgfs.ko] make vmhgfs compatible with Linux kernel 4.2</changelog>
<changelog author="mlatimer@suse.com" date="1450872000">- Compile without gtkmm support for SLES12 based environments
  (which do not provide gtkmm2.4)</changelog>
<changelog author="dimstar@opensuse.org" date="1461153600">- Add open-vm-tools-posixly.patch: defined(linux) is not posix
  compliant and modern compilers no longer accept it. Change to
  defined(__linux__)
  https://github.com/vmware/open-vm-tools/pull/81
- Add open-vm-tools-buildsystem-fixup.patch: since libsigc++ injects
  - std=c++11 into CFLAGS, the various objects in open-vm-tools need
  to be split up a bit in order to not have a mixed C/C++ object
  receiving the same CFLAGS.</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- they renamed open-vm-tools-stable-10.0.5.tar.gz to
  stable-10.0.5.tar.gz -- fix .spec accordingly</changelog>
<changelog author="ken@suse.com" date="1461844800">- Update to 10.0.7 stable branch
  + Added namespace command line utility "vmware-namespace-cmd".</changelog>
<changelog author="afaerber@suse.de" date="1461931200">- Sanitize the filename handling some more. The official GitHub
  filename is open-vm-tools-stable-10.0.7.tar.gz.</changelog>
<changelog author="ken@suse.com" date="1465387200">- Update to 10.0.7-gtk3 stable branch
  + add support for gtk3, needed by the dndcp and resolutionset
    plugins
  + remove files generated by autoreconf
  + a few minor build fixes
- Update fixes copy-n-paste and drag-n-drop regressions (bsc#978424)
- Added new vmblock-fuse.service
- Drop upstream patches included (or not necessary) in 10.0.7-gtk3:
  + open-vm-tools-posixly.patch
  + open-vm-tools-buildsystem-fixup.patch</changelog>
<changelog author="ken@suse.com" date="1466078400">- Added patches for GCC 6 build failure (boo#985110)
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch</changelog>
<changelog author="ken@suse.com" date="1468411200">- Fix vmtoolsd init script to run vmtoolsd in background. (bsc#971031)
  + fix originally done in SLE-11-SP4 code base by tcech@suse.cz</changelog>
<changelog author="jcejka@suse.de" date="1478088000">- Add udev rule to increase VMware virtual disk timeout values
  (bsc#994598)
  [99-vmware-scsi-udev.rules]</changelog>
<changelog author="ken@suse.com" date="1478952000">- Updated to 10.1.0 stable release (boo#1011057)
  + vmware-namespace-cmd command line utility.
  + gtk3 support
  + Common Agent Framework (CAF)
  + guest authentication with xmlsec1
  + FreeBSD support
  + sub-command to push updated network information to the host on demand
  + udev rules for configuring SCSI timeouts in the guest
  + fixes for Ubuntu 16.10
  + Fix for quiesced snapshot failure leaving guest file system
    quiesced (bsc#1006796)
  + Fix for CVE-2015-5191 (bsc#1007600)
- Dropped upstream patches included (or not necessary) in 10.1.0:
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch
  + enable-gcc46+.patch</changelog>
<changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
<changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
<changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
<changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
<changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
<changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
<changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
<changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>

</package>
<package pkgid="09db843b16ea788636d14079fec3bd0a6f6fa55ffd3f5172784acf49305039ce" name="libwayland-egl-devel" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="aff2119d7776999e9b0ffad385f360849446eb33c2b6a06a718b83b6daec8744" name="libwayland-egl1" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="7b9bd6b808020e176798fa26413adc278e063c9210ed7bb620a0415e3fd02c7e" name="libwayland-egl1-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.5" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="631fe75da07d053f528c912535664ea980a0449609db8ea631a4093780b8bac4" name="libwbclient-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="b167538c051a31319bd952eda37222d1575ea3ce924124f7dc9ae70ad64000e7" name="libwbclient-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="370826f33b26c40fc4b35d2cdf06464b81c30b851d605c13767be0becf480dea" name="libwbclient-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="1dae92a89ed0a4210852a46e9df7fb007717fd5dce44a2eeddd0aaf1cc2029f8" name="libwbclient0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="740d33b5992170bf14f7762b0be123f865ff279afa95094c8e6605924ee68c60" name="libwbclient0" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="94e743131165a9c416054f4e788b886f8acb98660714d84a3deebc5ccdc88f4a" name="libwbclient0" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="27d18966513f24aac2006e596d4c6ee30cc826a8ad6ee1c2c90c987e521206e3" name="libwbclient0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="1ca3310cf2348e5f166ed0d44c71e419a9bbf1418b7b93eebfd891dcb2596550" name="libwbclient0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="c84eb0221f400c213d56cbe3d6816d3ef2f6fef3d6c38aa79173c16c384daf57" name="libwbclient0-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="0ab085ba00b53e9e351b02ec9139a6bc73afad99523e788989a85da81d500a5d" name="libwebkit2gtk-4_0-37" arch="x86_64">
    <version epoch="0" ver="2.18.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 2.15.91:
  + Fix rendering artifacts when resizing the window in accelerated
    compositing mode.
  + Remove flickering when leaving accelerated compositing mode.
  + Fix a web process crash when loading duck duck go.
  + Properly handle copy drag and drop operations.
  + Fix a hang when sending an IPC messages fails because socket
    read buffers are full.
  + Ensure we never try to load GTK2 plugins in Wayland.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.15.92:
  + Show the context menu when triggered by the keyboard.
  + Fix web process deadlocks when destroying the media player.
  + Fix web process crashes when loading animated GIFs.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1490011200">- Update to version 2.16.0:
  + Add missing types to WebKitAutocleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1491393600">- Update to version 2.16.1:
  + Fix no-third-party cookies policy in case of redirections.
  + Keep URL fragments after server redirections.
  + Honor GTK+ font settings.
  + Ensure depth and stencil renderbuffers are created on GLESv2.
  + Prevent new navigations from onbeforeunload handler and
    document unload.
  + Disallow beforeunload alerts from web pages users have never
    interacted with.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1494331200">- Update to version 2.16.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix rendering of animated PNGs.
  + Fix playing of some live streams.
  + Update several web inspector icons.
  + Fix the build with NPAPI plugins enabled but X11 disabled.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="dimstar@opensuse.org" date="1495540800">- Drop ncurses-devel BuildRequires: this is no longer required.</changelog>
<changelog author="zaitor@opensuse.org" date="1495713600">- Update to version 2.16.3:
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2496, CVE-2017-2539, CVE-2017-2510.</changelog>
<changelog author="zaitor@opensuse.org" date="1496059200">- Add conditional gcc6-c++ BuildRequires and #!BuildIgnore:
  libgcc_s1 and also and pass -DCMAKE_C_COMPILER=gcc-6 and
  - DCMAKE_CXX_COMPILER=g++-6 to cmake for SLE/Leap, so we can fully
  build Webkit2gtk3 without disabling features.
- Drop webkitgtk-disable-gcc-version-checks.patch, no longer needed
  following above changes.
- Remove the compilation flag to disable FTL JIT, no longer needed
  following above changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 2.16.4 (CVE-2017-2538):
  + Fix web process deadlock when seeking youtube videos.
  + Fix blob downloads.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Fix positioning of popup menus in Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2538.</changelog>
<changelog author="zaitor@opensuse.org" date="1498564800">- Update to version 2.16.5:
  + Fix a web process crash when page finishes loading in several
    web sites.
  + Fix the menu of select elements not showing in some cases under
    Wayland.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897600">- Update to version 2.16.6:
  + Fix rendering of spin buttons with GTK+ &gt;= 3.20 when the entry
    width is too short.
  + Fix the build when Wayland target is enabled and X11 disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-7039, CVE-2017-7018, CVE-2017-7030,
    CVE-2017-7037, CVE-2017-7034, CVE-2017-7055, CVE-2017-7056,
    CVE-2017-7064, CVE-2017-7061, CVE-2017-7048, CVE-2017-7046.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897601">- Update to version 2.17.4:
  + Add API to allow overriding popup menus.
  + Add kinetic scrolling support.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Improve error message when webkit_web_view_run_javascript()
    fails due to a JavaScript exception.
  + Fix artifacts when rendering large images.
  + Fix blob downloads.
  + Fix web process deadlock when seeking youtube videos.
  + Fix alpha premultiplying when using cairo to draw the video
    frames.
  + Fix web process deadlock when closing the remote inspector
    frontend.
  + Update several web inspector icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.3:
  + Add new API to create a WebKitContextMenuItem from a GAction.
  + Fix graphics repaint hungs in accelerated compositing mode
    after a resize.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Improve colors of inspector SVG icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering of PNG images when decoded in more than one
    chunk.
  + Update several web inspector icons.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.
- Changes from version 2.17.1:
  + Switch to use new remote inspector infraestructure instead of
    legacy Web Sockets based one.
  + Add API to enable and handle Web Automation.
  + Load large images asynchronously off the main theead.
  + Use GtkFileChooserNative for open/save dialogs when available.
  + Make file chooser run as modal by default if possible.
  + Fix position of dropdown menus in Wayland.
  + Keep URI fragments after a server redirection.
  + Implement support for aria-haspopup and aria-autocomplete.
  + Implement aria-value support for focusable separators.
  + Fix playing of some live streams.
- Add webkit2gtk3-gcc7.patch: Fix build with gcc7 (webkit#173544).
- Add webkit2gtk3-machine-context.patch: Fix build for ppc64le
  (webkit#173590).</changelog>
<changelog author="zaitor@opensuse.org" date="1501070400">- Update to version 2.17.5:
  + Add initial implementation of WebDriver.
  + Enable GStreamerGL by default when building with GStreamer &gt;=
    1.10.
  + Fix position of context menu in Wayland.
  + Properly close cookies database at network process exit.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Drop webkit2gtk3-gcc7.patch and
  webkit2gtk3-machine-context.patch: Fixed upstream.
- Add pkgconfig(gstreamer-gl-1.0) BuildRequires: New dependency.
- Add explicit Mesa-libEGL-devel, Mesa-libGL-devel,
  Mesa-libGLESv1_CM-devel, Mesa-libGLESv2-devel and
  Mesa-libGLESv3-devel BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 2.17.90:
  + WebCrypto API support is now enabled by default.
  + Add API to provide browser information required by automation.
  + Fix the expiration date of manually added cookies.
  + Add support for alerts in WebDriver.
  + WebKitDatabaseProcess binary has been renamed to
    WebKitStorageProcess.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1503230400">- Update to version 2.17.91:
  + Fix proxy HTTP authentication for HTTPS requests.
  + Stop kinetic scrolling when a zero movement is reached.
  + Fix UI process crash when selecting text.
  + Fix UI process crash when loading a favicon.
  + Properly handle WebDriver click command on option elements.
  + Fix web process crash when resizing the window with accelerated
    compositing enabled.
  + Fix crashes in 32 bit systems due to incorrect use of GVariant.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.17.92:
  + Improve CPU usage when rendering under Wayland in accelerated
    compositing mode.
  + Improve the memory consumption of the UI process under Wayland.
  + Fix rendering issues in some web sites with accelerated
    compositing enabled.
  + Fix a web process crash when closing the WebView.
  + Initialize libgcrypt in the network process too.
  + Show controls if a video element isn?t allowed to play inline.
  + Add support for cookies and screenshots commands in WebDriver.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1504785600">- Add webkit2gtk3-no-return-in-nonvoid.patch: Fix brp error based
  on "warning: control reaches end of non-void function".</changelog>
<changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.18.0:
  + Initial WebDriver support.
  + New remote inspector infrastructure.
  + WebCrypto API support is now enabled by default.
  + GStreamerGL is enabled by default when building with GStreamer
    &gt;= 1.10.
  + Kinetic scrolling support.
  + New API to create a WebKitContextMenuItem from a GAction.
  + New API to allow overriding the popup menu of select elements.</changelog>
<changelog author="fezhang@suse.com" date="1505390400">- Drop gcc6-c++ build conditionals for SLE12 / Leap42.</changelog>
<changelog author="federico@suse.com" date="1507550400">- Add back gcc6 requirement.
- Disable WebCrypto API support, since we don't have libgcrypt-1.7.0.</changelog>

</package>
<package pkgid="cec005b58d9b329a66710398d4be33175d6d7379192904b253b0964d34124dd6" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
    <version epoch="0" ver="2.18.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 2.15.91:
  + Fix rendering artifacts when resizing the window in accelerated
    compositing mode.
  + Remove flickering when leaving accelerated compositing mode.
  + Fix a web process crash when loading duck duck go.
  + Properly handle copy drag and drop operations.
  + Fix a hang when sending an IPC messages fails because socket
    read buffers are full.
  + Ensure we never try to load GTK2 plugins in Wayland.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.15.92:
  + Show the context menu when triggered by the keyboard.
  + Fix web process deadlocks when destroying the media player.
  + Fix web process crashes when loading animated GIFs.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1490011200">- Update to version 2.16.0:
  + Add missing types to WebKitAutocleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1491393600">- Update to version 2.16.1:
  + Fix no-third-party cookies policy in case of redirections.
  + Keep URL fragments after server redirections.
  + Honor GTK+ font settings.
  + Ensure depth and stencil renderbuffers are created on GLESv2.
  + Prevent new navigations from onbeforeunload handler and
    document unload.
  + Disallow beforeunload alerts from web pages users have never
    interacted with.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1494331200">- Update to version 2.16.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix rendering of animated PNGs.
  + Fix playing of some live streams.
  + Update several web inspector icons.
  + Fix the build with NPAPI plugins enabled but X11 disabled.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="dimstar@opensuse.org" date="1495540800">- Drop ncurses-devel BuildRequires: this is no longer required.</changelog>
<changelog author="zaitor@opensuse.org" date="1495713600">- Update to version 2.16.3:
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2496, CVE-2017-2539, CVE-2017-2510.</changelog>
<changelog author="zaitor@opensuse.org" date="1496059200">- Add conditional gcc6-c++ BuildRequires and #!BuildIgnore:
  libgcc_s1 and also and pass -DCMAKE_C_COMPILER=gcc-6 and
  - DCMAKE_CXX_COMPILER=g++-6 to cmake for SLE/Leap, so we can fully
  build Webkit2gtk3 without disabling features.
- Drop webkitgtk-disable-gcc-version-checks.patch, no longer needed
  following above changes.
- Remove the compilation flag to disable FTL JIT, no longer needed
  following above changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 2.16.4 (CVE-2017-2538):
  + Fix web process deadlock when seeking youtube videos.
  + Fix blob downloads.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Fix positioning of popup menus in Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2538.</changelog>
<changelog author="zaitor@opensuse.org" date="1498564800">- Update to version 2.16.5:
  + Fix a web process crash when page finishes loading in several
    web sites.
  + Fix the menu of select elements not showing in some cases under
    Wayland.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897600">- Update to version 2.16.6:
  + Fix rendering of spin buttons with GTK+ &gt;= 3.20 when the entry
    width is too short.
  + Fix the build when Wayland target is enabled and X11 disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-7039, CVE-2017-7018, CVE-2017-7030,
    CVE-2017-7037, CVE-2017-7034, CVE-2017-7055, CVE-2017-7056,
    CVE-2017-7064, CVE-2017-7061, CVE-2017-7048, CVE-2017-7046.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897601">- Update to version 2.17.4:
  + Add API to allow overriding popup menus.
  + Add kinetic scrolling support.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Improve error message when webkit_web_view_run_javascript()
    fails due to a JavaScript exception.
  + Fix artifacts when rendering large images.
  + Fix blob downloads.
  + Fix web process deadlock when seeking youtube videos.
  + Fix alpha premultiplying when using cairo to draw the video
    frames.
  + Fix web process deadlock when closing the remote inspector
    frontend.
  + Update several web inspector icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.3:
  + Add new API to create a WebKitContextMenuItem from a GAction.
  + Fix graphics repaint hungs in accelerated compositing mode
    after a resize.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Improve colors of inspector SVG icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering of PNG images when decoded in more than one
    chunk.
  + Update several web inspector icons.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.
- Changes from version 2.17.1:
  + Switch to use new remote inspector infraestructure instead of
    legacy Web Sockets based one.
  + Add API to enable and handle Web Automation.
  + Load large images asynchronously off the main theead.
  + Use GtkFileChooserNative for open/save dialogs when available.
  + Make file chooser run as modal by default if possible.
  + Fix position of dropdown menus in Wayland.
  + Keep URI fragments after a server redirection.
  + Implement support for aria-haspopup and aria-autocomplete.
  + Implement aria-value support for focusable separators.
  + Fix playing of some live streams.
- Add webkit2gtk3-gcc7.patch: Fix build with gcc7 (webkit#173544).
- Add webkit2gtk3-machine-context.patch: Fix build for ppc64le
  (webkit#173590).</changelog>
<changelog author="zaitor@opensuse.org" date="1501070400">- Update to version 2.17.5:
  + Add initial implementation of WebDriver.
  + Enable GStreamerGL by default when building with GStreamer &gt;=
    1.10.
  + Fix position of context menu in Wayland.
  + Properly close cookies database at network process exit.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Drop webkit2gtk3-gcc7.patch and
  webkit2gtk3-machine-context.patch: Fixed upstream.
- Add pkgconfig(gstreamer-gl-1.0) BuildRequires: New dependency.
- Add explicit Mesa-libEGL-devel, Mesa-libGL-devel,
  Mesa-libGLESv1_CM-devel, Mesa-libGLESv2-devel and
  Mesa-libGLESv3-devel BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 2.17.90:
  + WebCrypto API support is now enabled by default.
  + Add API to provide browser information required by automation.
  + Fix the expiration date of manually added cookies.
  + Add support for alerts in WebDriver.
  + WebKitDatabaseProcess binary has been renamed to
    WebKitStorageProcess.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1503230400">- Update to version 2.17.91:
  + Fix proxy HTTP authentication for HTTPS requests.
  + Stop kinetic scrolling when a zero movement is reached.
  + Fix UI process crash when selecting text.
  + Fix UI process crash when loading a favicon.
  + Properly handle WebDriver click command on option elements.
  + Fix web process crash when resizing the window with accelerated
    compositing enabled.
  + Fix crashes in 32 bit systems due to incorrect use of GVariant.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.17.92:
  + Improve CPU usage when rendering under Wayland in accelerated
    compositing mode.
  + Improve the memory consumption of the UI process under Wayland.
  + Fix rendering issues in some web sites with accelerated
    compositing enabled.
  + Fix a web process crash when closing the WebView.
  + Initialize libgcrypt in the network process too.
  + Show controls if a video element isn?t allowed to play inline.
  + Add support for cookies and screenshots commands in WebDriver.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1504785600">- Add webkit2gtk3-no-return-in-nonvoid.patch: Fix brp error based
  on "warning: control reaches end of non-void function".</changelog>
<changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.18.0:
  + Initial WebDriver support.
  + New remote inspector infrastructure.
  + WebCrypto API support is now enabled by default.
  + GStreamerGL is enabled by default when building with GStreamer
    &gt;= 1.10.
  + Kinetic scrolling support.
  + New API to create a WebKitContextMenuItem from a GAction.
  + New API to allow overriding the popup menu of select elements.</changelog>
<changelog author="fezhang@suse.com" date="1505390400">- Drop gcc6-c++ build conditionals for SLE12 / Leap42.</changelog>
<changelog author="federico@suse.com" date="1507550400">- Add back gcc6 requirement.
- Disable WebCrypto API support, since we don't have libgcrypt-1.7.0.</changelog>

</package>
<package pkgid="a0de05be9b4d9b3e044470e50aba727a646853450c2a6bd8aad6fcfd4650dd62" name="libwebkit2gtk3-lang" arch="noarch">
    <version epoch="0" ver="2.18.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 2.15.91:
  + Fix rendering artifacts when resizing the window in accelerated
    compositing mode.
  + Remove flickering when leaving accelerated compositing mode.
  + Fix a web process crash when loading duck duck go.
  + Properly handle copy drag and drop operations.
  + Fix a hang when sending an IPC messages fails because socket
    read buffers are full.
  + Ensure we never try to load GTK2 plugins in Wayland.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.15.92:
  + Show the context menu when triggered by the keyboard.
  + Fix web process deadlocks when destroying the media player.
  + Fix web process crashes when loading animated GIFs.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1490011200">- Update to version 2.16.0:
  + Add missing types to WebKitAutocleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1491393600">- Update to version 2.16.1:
  + Fix no-third-party cookies policy in case of redirections.
  + Keep URL fragments after server redirections.
  + Honor GTK+ font settings.
  + Ensure depth and stencil renderbuffers are created on GLESv2.
  + Prevent new navigations from onbeforeunload handler and
    document unload.
  + Disallow beforeunload alerts from web pages users have never
    interacted with.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1494331200">- Update to version 2.16.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix rendering of animated PNGs.
  + Fix playing of some live streams.
  + Update several web inspector icons.
  + Fix the build with NPAPI plugins enabled but X11 disabled.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="dimstar@opensuse.org" date="1495540800">- Drop ncurses-devel BuildRequires: this is no longer required.</changelog>
<changelog author="zaitor@opensuse.org" date="1495713600">- Update to version 2.16.3:
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2496, CVE-2017-2539, CVE-2017-2510.</changelog>
<changelog author="zaitor@opensuse.org" date="1496059200">- Add conditional gcc6-c++ BuildRequires and #!BuildIgnore:
  libgcc_s1 and also and pass -DCMAKE_C_COMPILER=gcc-6 and
  - DCMAKE_CXX_COMPILER=g++-6 to cmake for SLE/Leap, so we can fully
  build Webkit2gtk3 without disabling features.
- Drop webkitgtk-disable-gcc-version-checks.patch, no longer needed
  following above changes.
- Remove the compilation flag to disable FTL JIT, no longer needed
  following above changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 2.16.4 (CVE-2017-2538):
  + Fix web process deadlock when seeking youtube videos.
  + Fix blob downloads.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Fix positioning of popup menus in Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-2538.</changelog>
<changelog author="zaitor@opensuse.org" date="1498564800">- Update to version 2.16.5:
  + Fix a web process crash when page finishes loading in several
    web sites.
  + Fix the menu of select elements not showing in some cases under
    Wayland.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897600">- Update to version 2.16.6:
  + Fix rendering of spin buttons with GTK+ &gt;= 3.20 when the entry
    width is too short.
  + Fix the build when Wayland target is enabled and X11 disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2017-7039, CVE-2017-7018, CVE-2017-7030,
    CVE-2017-7037, CVE-2017-7034, CVE-2017-7055, CVE-2017-7056,
    CVE-2017-7064, CVE-2017-7061, CVE-2017-7048, CVE-2017-7046.</changelog>
<changelog author="zaitor@opensuse.org" date="1500897601">- Update to version 2.17.4:
  + Add API to allow overriding popup menus.
  + Add kinetic scrolling support.
  + Improve theme rendering performance when using GTK+ &gt;= 3.20.
  + Improve error message when webkit_web_view_run_javascript()
    fails due to a JavaScript exception.
  + Fix artifacts when rendering large images.
  + Fix blob downloads.
  + Fix web process deadlock when seeking youtube videos.
  + Fix alpha premultiplying when using cairo to draw the video
    frames.
  + Fix web process deadlock when closing the remote inspector
    frontend.
  + Update several web inspector icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.3:
  + Add new API to create a WebKitContextMenuItem from a GAction.
  + Fix graphics repaint hungs in accelerated compositing mode
    after a resize.
  + Fix rendering glitches in HiDPI in long GitHub Gist pages when
    focusing the comments textarea.
  + Remove Firefox user agent quirk for Google domains.
  + Remove LATEST_RECORD_VERSION from GnuTLS priority string.
  + Improve colors of inspector SVG icons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Changes from version 2.17.2:
  + Update user agent quirks to make Youtube and new Google login
    page work.
  + Fix URL shown in the title of beforeunload dialogs.
  + Focus first input field of HTTP authentication dialog.
  + Fix rendering of PNG images when decoded in more than one
    chunk.
  + Update several web inspector icons.
  + Fix the build with OpenGL disabled.
  + Fix several crashes and rendering issues.
- Changes from version 2.17.1:
  + Switch to use new remote inspector infraestructure instead of
    legacy Web Sockets based one.
  + Add API to enable and handle Web Automation.
  + Load large images asynchronously off the main theead.
  + Use GtkFileChooserNative for open/save dialogs when available.
  + Make file chooser run as modal by default if possible.
  + Fix position of dropdown menus in Wayland.
  + Keep URI fragments after a server redirection.
  + Implement support for aria-haspopup and aria-autocomplete.
  + Implement aria-value support for focusable separators.
  + Fix playing of some live streams.
- Add webkit2gtk3-gcc7.patch: Fix build with gcc7 (webkit#173544).
- Add webkit2gtk3-machine-context.patch: Fix build for ppc64le
  (webkit#173590).</changelog>
<changelog author="zaitor@opensuse.org" date="1501070400">- Update to version 2.17.5:
  + Add initial implementation of WebDriver.
  + Enable GStreamerGL by default when building with GStreamer &gt;=
    1.10.
  + Fix position of context menu in Wayland.
  + Properly close cookies database at network process exit.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Drop webkit2gtk3-gcc7.patch and
  webkit2gtk3-machine-context.patch: Fixed upstream.
- Add pkgconfig(gstreamer-gl-1.0) BuildRequires: New dependency.
- Add explicit Mesa-libEGL-devel, Mesa-libGL-devel,
  Mesa-libGLESv1_CM-devel, Mesa-libGLESv2-devel and
  Mesa-libGLESv3-devel BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 2.17.90:
  + WebCrypto API support is now enabled by default.
  + Add API to provide browser information required by automation.
  + Fix the expiration date of manually added cookies.
  + Add support for alerts in WebDriver.
  + WebKitDatabaseProcess binary has been renamed to
    WebKitStorageProcess.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1503230400">- Update to version 2.17.91:
  + Fix proxy HTTP authentication for HTTPS requests.
  + Stop kinetic scrolling when a zero movement is reached.
  + Fix UI process crash when selecting text.
  + Fix UI process crash when loading a favicon.
  + Properly handle WebDriver click command on option elements.
  + Fix web process crash when resizing the window with accelerated
    compositing enabled.
  + Fix crashes in 32 bit systems due to incorrect use of GVariant.
  + Fix several crashes and rendering issues.</changelog>
<changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.17.92:
  + Improve CPU usage when rendering under Wayland in accelerated
    compositing mode.
  + Improve the memory consumption of the UI process under Wayland.
  + Fix rendering issues in some web sites with accelerated
    compositing enabled.
  + Fix a web process crash when closing the WebView.
  + Initialize libgcrypt in the network process too.
  + Show controls if a video element isn?t allowed to play inline.
  + Add support for cookies and screenshots commands in WebDriver.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1504785600">- Add webkit2gtk3-no-return-in-nonvoid.patch: Fix brp error based
  on "warning: control reaches end of non-void function".</changelog>
<changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.18.0:
  + Initial WebDriver support.
  + New remote inspector infrastructure.
  + WebCrypto API support is now enabled by default.
  + GStreamerGL is enabled by default when building with GStreamer
    &gt;= 1.10.
  + Kinetic scrolling support.
  + New API to create a WebKitContextMenuItem from a GAction.
  + New API to allow overriding the popup menu of select elements.</changelog>
<changelog author="fezhang@suse.com" date="1505390400">- Drop gcc6-c++ build conditionals for SLE12 / Leap42.</changelog>
<changelog author="federico@suse.com" date="1507550400">- Add back gcc6 requirement.
- Disable WebCrypto API support, since we don't have libgcrypt-1.7.0.</changelog>

</package>
<package pkgid="8ec1bb29c5e5a1b176cb0a02f5704d48edc2970f6b074b1b5aeecf2e8702e92e" name="libwicked-0-6" arch="x86_64">
    <version epoch="0" ver="0.6.40" rel="9.1"/>

<changelog author="pwieczorkiewicz@suse.com" date="1443182400">- version 0.6.25
- compat: read complete sysctl file set (bsc#928459)
- wireless: fixed to parse/format hex escapes in essid (bsc#928459)</changelog>
<changelog author="mt@suse.de" date="1444392000">- version 0.6.26
- nanny: add link device references to policy match (bsc#941611)
  This causes, that nanny checks and waits until the configuration
  for link references is applied by ifup (master device worker is
  available) in order to not start managing ports/slaves and fail
  on unresolvable requirements with "document error" first.
  Unavailable reference matches caused a timing race, where nanny
  omits to enslave ports into master (e.g. a dummy into ovsbr),
  but was not limited to ovs setups.
- dhcp4: fix to request offer by default in --test (bsc#942278)
- teamd: adjust permissions of the teamd interface config to be
  owned by teamd user if available and to always re-read dbus
  busname from the service file (bsc#947542)</changelog>
<changelog author="mt@suse.de" date="1445515200">- vesion 0.6.27
- nanny: fix policy file reading and objects references (boo#916035)
- ovs: use --may-exist option in add-port (bsc#951315) commands to
  avoid error messages when the port is already in the db.
- netconfig: do not refresh unrelated details in supplicants
- service: fixed wicked client and nanny dependencies (bsc#950333).
- service: restart wickedd* on dbus restart (bsc#941964)
- fsm: do not follow link-up checks on configured master devices
  not involved in the current ifup operation (bsc#948423).
- client: added more comfortable "wicked test dhcp[46]" commands
  executing the wickedd-dhcp[46] in their --test mode (bsc#942278)</changelog>
<changelog author="mt@suse.de" date="1447329600">- version 0.6.28
- fsm: dynamically resolve references and requirements (bsc#954289)
- nanny: do not pull in and rearm subordinate workers (bsc#954289)
- nanny: fix managed policy list handling (bsc#953107)
- ifup: do not update policy when it has been created and recheck
  with a name filter list instead to enable separately to avoid a
  race condition (bsc#953107)
- ovs: do not require link on ovs-system device</changelog>
<changelog author="mt@suse.de" date="1448020800">- version 0.6.29
- rpm: do not use systemctl show in scripts (bsc#955778)
  systemctl show makes a systemd query and does not work in
  a chroot or when systemd is not available and using it in
  RPM scripts breaks offline update. Replaced with readlink.
- team: fix to use proper names of ethtool delay options
- nanny: skip recheck when no policy configured (bsc#953107)</changelog>
<changelog author="mt@suse.de" date="1454068800">- version 0.6.30
- wireless: fix EAP inconsistencies and add missing auth method
  names to translation maps (bsc#936514, boo#927615).
- ipv6: clear old address list before applying new fixing to not
  wait full time in the client-side tentative address check
- fsm: do not segfault on device hierarchy loops but (bnc#959356)
- fsm: handle down/step back events in ifup flow instead to try to
  workaround in nanny (bsc#955864).
- man: documented how to declare several team link watches.
- ethtool: map da,none,other port types (bsc#957944).
- ipv4: removed pointless broadcast calculations and send to the
  kernel only if explicitly requested in ifcfg file or by dhcp
  options. The kernel has an own logic to automatically calculate
  related settings as needed. Also removed broadcast setting from
  ifcfg-lo to not override kernel's setup (bsc#944710).</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1456142400">- fsm: do not segfault on device hierarchy loops (bnc#959356);
  corrected pull#618 fix to not reset master and use its name then.
  [+ 0001-fsm-do-not-use-master-name-after-reset-bsc-959356.patch]</changelog>
<changelog author="mt@suse.de" date="1459857600">- version 0.6.31
- xml: fix to not assert on too long entities or missed semicolon
  and fixed pointer use on DOCTYPE related parse error.
- ifconfig: readd broadcast calculation (bcs#971629).
  While the kernel does not need it and calculates itself, e.g.
  glibc getbroadcastnets function used by yp expect it to be set.
- ifup: let ovs bridges pull ovs-system config and omit ovs-system
  master reference in policy match (bsc#964019)
- fsm: fixed a negated check causing a segmentation fault in some
  cases where the vlan config references a device without config.
- bonding: call setup routine at the end of create (bsc#964877),
  fixed mismatched carrier-detect and validate-targets attributes
  in schema and dbus, permit to set bonding's hardware address,
  process bonding settings in newlink events and switched to create
  and setup also bonding the master device via netlink by default.
- xml-schema: do not add description node to enums
- ifreload: let ifdown delete team instances (bsc#954012,bsc#964477)
- fsm: reset device_api of deleted workers (bsc#954012)
- removed patch included in the source archive
  [- 0001-fsm-do-not-use-master-name-after-reset-bsc-959356.patch]</changelog>
<changelog author="mt@suse.de" date="1460721600">- version 0.6.32
- tunnel: add device binding support (fate#317977)
- gre: fix flags use, added missed keyed gre options
- doc: added an initial FAQ to the documentation
- util: fix null string and string array in compare
- ipv6: cleaned up IPv6 RA PI and RDNSS processing
- ipv6: receive IPv6 RA DNSSL options forwarded by kernel
- dhcp6: refresh ipv6 link on each prefix event to fix workaround
  for missed NEWLINK event on changes caused by RA (boo#972471).
- macvlan: fix enum values for BRIDGE and PASSTHRU modes (boo#974231)</changelog>
<changelog author="mt@suse.de" date="1462363200">- version 0.6.33
- route: initial routing policy rules support (fate#312217)</changelog>
<changelog author="pwieczorkiewicz@suse.com" date="1463745600">- version 0.6.34
- utils: fix for ni_string_set to set empty pointers
- team: fix for unclosed file descriptor and string memleak
- ppp: initial implementation of PPPoE support
  (fate#317976,bsc#865573,boo#913861)</changelog>
<changelog author="mt@suse.com" date="1464350400">- version 0.6.35
- spec: removed ppp service template macro calls (fate#317976)
- bonding: support for new v3.7.1 netlink options in 4.4 kernel
- linux: update included headers to 4.4, add if_addr.h</changelog>
<changelog author="ndas@suse.de" date="1465560000">- version 0.6.36
- ifreload: make output more informative (bsc#982952)
- rules: do not fail when kernel support is missed (bsc#981887)
- nanny: reapply policies on device renames (bsc#973355)
- iflist: fixed macvlan/macvtap link info data parsing
- auto6: apply rdnss/dnssl and wait for autoconf (bsc#902897,boo#916613)</changelog>
<changelog author="ndas@suse.de" date="1470139200">- version 0.6.37
- auto6: do not apply rdnss/dnssl if autoconf=0 (bsc#984088)
- addrconf: utility to parse string with update flags
- leasefile: added an lease file exists utility
- ifstatus: show IPv6 privacy addresses as autoconf
- updater: adjusted system settings update debug info
- updater: no remove before install on granted lease
- updater: no backup/restore for netconfig, unused
- updater: no warning on unset optional backup/restore
- man: added DHCLIENT_REQUEST_OPTION to ifcfg-dhcp
- leaseinfo: dump other/unknown dhcp options
- dhcp4: initial support to request custom options (bsc#916948,bsc#988954)
- lease: store and load other/unknown dhcp options
- utils: fixed last byte formating in ni_format_hex
- dbus: handle unparsed dhcp options in leases
- dhcp4: store unparsed options in the lease
- addrconf: add generic dhcp options to lease
- dhcp: move specific dhcp.h to dhcp4.h and dhcp6.h
- ovs: use generic ovs type until we can query ovs (bsc#982231)
- dhcp4: send hostname in discover (bsc#985894)
- ifconfig: fixed to apply address preferred_lft 0
- address: apply suse ifcfg IP_OPTIONS (bsc#984088)
- config: add a global LINK_REQUIRED ifcfg default
- client: apply global LINK_REQUIRED setting if any</changelog>
<changelog author="mt@suse.de" date="1474891200">- version 0.6.38
- addrconf: rewrite to run lease updates in background jobs and use
  netconfig 0.84 batch support if available (bsc#989741).
  Fixed auto4 and dhcp supplicants to explicitly stop device before
  unregistering dbus object to disarm it and return release request
  result before sensing the released event.
  Fixed fsm to not advance fsm state on unrelated events and use new
  call to refresh addresses from kernel for tentative checks in ifup.</changelog>
<changelog author="ndas@suse.com" date="1476100800">- dhcp: fixed to properly append dhcp option data.
  Bug introduced by changes applied in version 0.6.37 (bsc#988954).
  [+ 0001-dhcp-fixed-to-properly-append-dhcp-option-data.patch]</changelog>
<changelog author="mt@suse.de" date="1479470400">- version 0.6.39
- dhcp: suport to define and request custom options (bsc#988954),
  documented in wicked-config(5) and ifcfg-dhcp(5) manual pages.
- dhcp6: fix refresh on newprefix workaround (boo#972471)
- dhcp4: do not fail in capture on link type change (bsc#975466)
- dhcp4: ignore invalid options, do not discard complete message
  (https://github.com/openSUSE/wicked/issues/671)
- dhcp4: log and add sender (server or relay) ethernet hw-address
  to the lease (https://github.com/openSUSE/wicked/issues/663)
- ifdown: show reasons to skip an action (bsc#997027)
- ifconfig: fix to consider address scope in dbus model (bsc#988794)
- bonding: set the primary slave in the master at enslave of the
  primary when it were not yet ready while bond setup (bsc#998413)
- removed patch included in this version
  [- 0001-dhcp-fixed-to-properly-append-dhcp-option-data.patch]</changelog>
<changelog author="mt@suse.de" date="1493899200">- version 0.6.40
- fsm: clone bound config and cleanup references fixing ifindex
  reference handling in iBFT vlan configuration (bsc#1030053)
- updater: fix to not leave orphaned bg jobs on device delete,
  causing to block processing of synchronized jobs (bsc#1029133)
- vxlan: initial support (boo#1026780)
- dhcp: correct and complete fqdn option support (bsc#1025757)
- bonding: properly send primary reselect to kernel (bsc#1027231)
- dbus: fix caller-uid timeout to 15sec, not 15ms (bsc#1026683)
- ethtool: handle ring,coalesce,eee parameters (bsc#1007909)
- bond: fix xmit-hash-policy option mismatch (bsc#1021914)
- ifconfig: avoid timeouts on large number of IPs by performing
  ipv4 duplicate address detection, apply and sending gratuitous
  ARP for chunks of multiple addresses at once (bsc#1009801)</changelog>
<changelog author="mt@suse.de" date="1513080000">- dhcp4: clear hostname on lease recovery/reboot to request the
  hostname from config, not an old one (bsc#1057007,bsc#1050258)
  [+ 0001-dhcp-clear-hostname-on-lease-recovery-reboot.patch]</changelog>
<changelog author="mt@suse.de" date="1513252800">- ifconfig: set MTU even if device is up (bsc#1059292)
  [+ 0005-ifconfig-set-MTU-even-if-device-is-up.patch]
- ifconfig: do not stop adding routes if one bad (bsc#1036619)
  [+ 0004-ifconfig-do-not-stop-adding-routes-on-one-bad.patch]
- dhcp4: own check for user class id strings (bsc#1045522)
  [+ 0003-dhcp4-own-check-for-user-class-id-strings.patch]
- ethtool: handle channels parameters (bsc#1043883)
  [+ 0002-ethtool-handle-channels-parameters.patch]</changelog>

</package>
<package pkgid="e9e6b0359e913b4bf86382b16bcd065bf9e8e327c2653dda5f3661c270baea6d" name="libwpd" arch="src">
    <version epoch="0" ver="0.10.2" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
<changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
<changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
<changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
<changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
<changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
<changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
<changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
<changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
<changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
<changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
<changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
<changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
<changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
<changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
<changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
<changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
<changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
<changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>

</package>
<package pkgid="8a6575ffbdc789615aeb3dff23ca93876829c1ad6bf409830fc676f8571a54a5" name="libwpd-0_10-10" arch="x86_64">
    <version epoch="0" ver="0.10.2" rel="8.1"/>

<changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
<changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
<changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
<changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
<changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
<changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
<changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
<changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
<changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
<changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
<changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
<changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
<changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
<changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
<changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
<changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
<changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
<changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>

</package>
<package pkgid="b34a348c63674534d24180b29ab54c1eec39205a8805e6cfb4a89ede3b73e5bf" name="libwpd-devel" arch="x86_64">
    <version epoch="0" ver="0.10.2" rel="8.1"/>

<changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
<changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
<changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
<changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
<changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
<changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
<changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
<changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
<changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
<changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
<changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
<changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
<changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
<changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
<changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
<changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
<changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
<changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>

</package>
<package pkgid="5fda1552a71037afec9c7e8ebf76b76aea5e2002c41ce1ba5fd7d395fff25ca4" name="libwpd-devel-doc" arch="noarch">
    <version epoch="0" ver="0.10.2" rel="8.1"/>

<changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
<changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
<changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
<changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
<changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
<changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
<changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
<changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
<changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
<changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
<changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
<changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
<changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
<changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
<changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
<changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
<changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
<changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>

</package>
<package pkgid="9ee41f444aab787c19e06cc1b115908a7c60d2a824ca16002cad30abd284d890" name="libwpd-tools" arch="x86_64">
    <version epoch="0" ver="0.10.2" rel="8.1"/>

<changelog author="fstrba@novell.com" date="1291723200">- upgrade to version 0.9.0:
  - Conversion of page-numbering (William)
  - Conversion of embedded images and text boxes in WP1, WP3, WP5 and WP6
    documents (Fridrich)
  - Conversion of password protected WP1, WP3, WP42 and WP5 documents
    (Fridrich)
  - Conversion of annotations/comments in WP6 parser (Fridrich)
  - Fix some Greek characters so that Text written in WP5.1 with Printer
    Polyglott convert correct.
  - Fix Unicode mappings of some older Symbol and Dingbats fonts (Fridrich)
  - Drop the libgsf dependency in favour of pure C++ implementation of the
    WPXInputStream interface (Fridrich, Ariya)
  - Fix the footnote/endnote/comment/annotation/textbox writing in wpd2html
    converter
  - Improve metadata parsing (David Hislop)</changelog>
<changelog author="ismail@namtrac.org" date="1300276800">- Add missing includes to fix compilation with gcc 4.6</changelog>
<changelog author="fstrba@novell.com" date="1304510400">- upgrade to version 0.9.2:
  - Fix build with gcc 4.6.x (Caolan McNamara)
  - Handle graciously corrupted WP6 prefix data (Fridrich)
  - Initial conversion of Mac double byte script characters (Fridrich)
  - Internally use UCS4 instead of UCS2 (Fridrich)
  - Add Arabic character conversion for WP5 parser (Fridrich)
  - Allow conversion of one WP character to a sequence of unicode
    characters (Fridrich)
  - Miscellaneous conversion fixes (Edward Mendelson, Fridrich)
  - Parse correctly WP 2 for Mac documents without resource fork (Fridrich)
  - Improvements in parsing of pictures in WP1 parser (Fridrich)
  - Fix wrong sizes of some functions in WP1 and WP42 parsers (Fridrich)
  - Fix handling of character attributes (Fridrich)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306152000">- Do not include build dates in docs, messes up build-compare</changelog>
<changelog author="fridrich.strba@suse.com" date="1314878400">- upgrade to version 0.9.3:
- Improvement of arabic charset mapping (Smokey Ardisson)
- Build system rewrite and improvement (Tomas Chvatal)
- Cleanup of return values (Thomas Klausner)
- Fix crashes with WP 2.1 for Mac documents (Fridrich)
- Fix bug in WPXPropertyList::operator= (Fridrich)
- Fix memory issues in some WPXProperty's derived classes (Fridrich)
- Conversion of extended characters in WP 42 parser (Fridrich)
- Various fixes for building inside LibreOffice (Tor Lillqvist, Jan Holesovky)</changelog>
<changelog author="fridrich.strba@suse.com" date="1322568000">- upgrade to version 0.9.4:
  - Remove autopackage packaging that nobody uses (Fridrich)
  - Don't output points as integer. This solves some rounding
    issues along with the possibility of writing 10.5 point
    font size (Fridrich)
  - General improvement of code quality by buiding
    with -Weffc++ option (Fridrich)
  - Improvement of textbox code (Laurent Alonso)
  - Fixes of autotools Windows build (Fridrich)
- remove obsolete unnecessary patch</changelog>
<changelog author="jengelh@medozas.de" date="1322568001">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Set proper group on subpackages</changelog>
<changelog author="crrodriguez@opensuse.org" date="1327320000">- Build with fvisibility-inlines-hidden, saves around
  600 entries in the exported symbol table.</changelog>
<changelog author="jengelh@medozas.de" date="1327406400">- Use SPDX-style license field</changelog>
<changelog author="fridrich.strba@suse.com" date="1348747200">- upgrade to version 0.9.6:
  - Experimental support of Zip storage along with Ole.
  - Add WPX_SEEK_END enum member in order to speed up the Zip
    operations.
  - Numerous fixes of coverity and cppcheck warnings and errors.
- upstream patch to really enable Zip stream.
- package build depends on zlib-devel.</changelog>
<changelog author="fridrich.strba@suse.com" date="1366372800">- upgrade to version 0.9.7:
  - Added MPL 2.0+ as license
  - Improvement of OLE stream classes
- remove integrated patch</changelog>
<changelog author="tchvatal@suse.com" date="1366459200">- Add URL download path.</changelog>
<changelog author="fridrich.strba@suse.com" date="1368619200">- upgrade to version 0.9.8
  - Fix buffer allocation in WPXString::sprintf that can lead
    to crash
  - Fix crash reading invalid OLE stream
  - Change source code layout so that public headers be in inc/
    and its subdirectories
  - libwpd.h and libwpd-stream.h are not generated headers anymore
  - Change the way we get version from libwpd build
- Fix some rpmlint warnings</changelog>
<changelog author="fstrba@suse.com" date="1376913600">- upgrade to version 0.9.8
  - implement WPX_SEEK_END for WPXMemoryStream: fixes an infinite
    loop in libmwaw when using WPXBinaryData over its stream
    interface.</changelog>
<changelog author="tchvatal@suse.com" date="1390651200">- Cleanup with spec-cleaner and noarch the documentation.</changelog>
<changelog author="fstrba@suse.com" date="1401105600">- Upgrade to version 0.10.0
  * ABI change
  * Depend on librevenge-devel</changelog>
<changelog author="fstrba@suse.com" date="1451476800">- Upgrade to version 0.10.1
  * Fix crash when NULL is passed as input stream.
  * Use symbol visibility on Linux. The library only exports public
    functions now.
  * Avoid infinite loop. (libwpd#3)
  * Remove bashism. (libwpd#5)
  * Fix various crashes and hangs when reading broken files found
    with the help of american-fuzzy-lop.
  * Make --help output of all command line tools more
    help2man-friendly.
  * Miscellaneous fixes and cleanups.
- Generate manpages for the libwpd-tools</changelog>
<changelog author="tchvatal@suse.com" date="1455192000">- Disable silent rules</changelog>
<changelog author="tchvatal@suse.com" date="1505304000">- Upgrade to 0.10.2 bsc#1058025 CVE-2017-14226:
  * Require C++11 for build.
  * Fix various crashes, leaks and hangs when reading damaged files found
    by oss-fuzz.</changelog>

</package>
<package pkgid="05f0fe692edf62e92b42293ede3eba14003477621e8377032b0b5e524db31806" name="libwx_baseu-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="e6b88b288d06a04c490c7197def383992d6f7443aecd26a56cb2f29dff30b7d0" name="libwx_baseu-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="1cab97b8e39d9e6cea72adeac3e2168a378d2f9aa4a521664dd39b59ffc3ab5d" name="libwx_baseu-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="caf2988fd9b58f4ff884c73db3bfd3473e069bd7ff4d70f1be245622d72f85ec" name="libwx_baseu_net-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="83dedf8a6379bea00d080214cf2aeaa2b0c37f8a37e8e76a53b2516d80716c6d" name="libwx_baseu_net-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="c054030e3d81b8b35550a80e6ef7827f05940a16cf9dc3294b42a5399dfe6010" name="libwx_baseu_net-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="42d1a34f668dc99231594abab1ad4029288160853eaf4352417766eb06fba7e1" name="libwx_baseu_xml-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="b54acfefe9bf04225379f703b7a603f40b82de0dce220a8076ffdb206a4ee52b" name="libwx_baseu_xml-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="8f3f5d4046bb407be436234423dec64c94dce3f00e01258e2cc6ed7eff7564bf" name="libwx_baseu_xml-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="306a4ce7ff71948c2e6b01610b78ad9ee7268ca17ac3ed8ccf482291908049df" name="libwx_gtk2u_adv-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="69335492805e74cf0f5200f98cd2d0fc237a1aba8bdecc1f01b0d7f8399e811e" name="libwx_gtk2u_adv-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="34dc7b59317170dc463591adc059b61028c0e896c8b119aa8d55e65ac3882e88" name="libwx_gtk2u_adv-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="b6e69229ade3c8c887f25cf313564c8ebe70c6e93ff9e00d094aa9a6a69de8a4" name="libwx_gtk2u_aui-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="f06cf7d1ecca575cb049a38a534fbefa44f4946c298425214d519a7fecf1c771" name="libwx_gtk2u_aui-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="080202febac0a6320ca62973dc87178a9709a956badae3383bbdc275bf763a6a" name="libwx_gtk2u_aui-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="9ac7aed179bbbe5f643e6e97bd6e9fe7163823badb148b74dcc561e7a2576f55" name="libwx_gtk2u_core-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="c4ee959c5711a2f5682bd819261da88dcdf09bd420798c08882bd1eff49bd093" name="libwx_gtk2u_core-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="915aebc08064c946b54d752d84bc58480eeef225df50ed506e14faf980ff5bac" name="libwx_gtk2u_core-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="29948035da9c61d880da0fd988f8bcd503418d6fd47ae6be39745792410a4c32" name="libwx_gtk2u_gl-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="ac85f2633b4999c906c64ef8a40880d0de5b5c289be82b12d5a02de7f2fae334" name="libwx_gtk2u_gl-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="3668e6f453aecec29f59ba494aaee5f6a3a40a312e9d416ed59dfbd72d2b51ff" name="libwx_gtk2u_gl-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="a2d4e42b79b4ec1ea48de5a76157d489de8a7d47d86b486387b941eeb74b412a" name="libwx_gtk2u_html-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="d745470ecbade31f2a83ba2781fd6c74e2154a6968cc9af04f0114f92de2fe0d" name="libwx_gtk2u_html-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="69c88d1d5d0594243d56e141c8b1cdb73bace1aeb9b4e07a1906e865bf893444" name="libwx_gtk2u_html-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="606089feadf66a1f117c09ec166219b4f0bd643b8f8a970a198d923663e7c13b" name="libwx_gtk2u_media-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="14bd6c5ff38b8f2a46c8cfb1ff40cb0737494c3cdb1a16eb27a06fe50a8dd6fc" name="libwx_gtk2u_media-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="189773e2f0f6e06a071b4d3de555b2649291026e743dd935b8485f78d8ab2eee" name="libwx_gtk2u_media-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="5ef5bea02d769bc452fc6d363e41b4c2e4de0064faf8d2219db285291a61ab25" name="libwx_gtk2u_propgrid-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="95eae57df6221bc4a5424cacfd2a61909f8eb8852227a85626f416d3b06860a5" name="libwx_gtk2u_propgrid-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="acd30e48d55fa74679e651560610b84ec96599248ed2a4f283085ccc6f34858d" name="libwx_gtk2u_propgrid-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="837c5e11b281d938a17982fbbf1eaecc67a7792de0b89d84b93097503748d90c" name="libwx_gtk2u_qa-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="2f62ce135d3fea126f5f06cc684e75eddbe838be20aa370cf20dc3969b8e1f4e" name="libwx_gtk2u_qa-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="22f213836c4f84d3aeee7bea08109f47529494d4a42a39b19a096ef1ca34a4ec" name="libwx_gtk2u_qa-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="0b3d42bea48cc4b48fddde5cc6dea343c7b9cb36c15094f7e53cbc93176c7f41" name="libwx_gtk2u_ribbon-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="99a0fae78cf1eaf355890dc3796bf4cf1b61396c4e25cb8787f7fdaef7e6fb4c" name="libwx_gtk2u_ribbon-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="f66c2eac09a0abe566abbdb26f5853e6e45d5b06087dc9a54280e3c409485a9c" name="libwx_gtk2u_ribbon-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="51d283b56dc7c09262931b54ab584fd9467a0bc0b0a4c6942a40f157494d2bd5" name="libwx_gtk2u_richtext-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="37f797b5586c267164ecdcc37e15b2e118d9af45ada7c442f33c7c6b2bbc8476" name="libwx_gtk2u_richtext-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="572f4d549639a68a38a7fb1b13d49bdc91d1219f00c99d2105a1a42b0dcc2aa7" name="libwx_gtk2u_richtext-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="b86439c0589c07fa56db5d41ed2a7a3bf3a577bd4da4b21b13d60aae108ab0bb" name="libwx_gtk2u_stc-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="dd0a0cebc3208b1beec85b6524bd378f9a0a4dcf4d9efb5e0ebf123835d065e8" name="libwx_gtk2u_stc-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="3cb6715290ea569a3e6c29628caba702cc29ead308f7b53fc4cc5582f70906bf" name="libwx_gtk2u_stc-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="18857a52f72f680d24df93146383809c13d2f6622d4ae3a8681a26351f7320d8" name="libwx_gtk2u_webview-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="2183bd94a543c53090d0ddf9f6cc1a9e5b93691efdc3c60e4096fa2d7fa5d781" name="libwx_gtk2u_webview-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="3651f08d68f88a9eed92c79834555007516e1bb0cb5a0741ecc454043a8fc28c" name="libwx_gtk2u_webview-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="9da14ffaa915e9f51ec8016b5d96c220db3161e291f84798cc7a904e2853ff21" name="libwx_gtk2u_xrc-suse-nostl1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>
<changelog author="davejplater@gmail.com" date="1501761600">- Added relax-abi.diff and build with gcc5 to fix boo#1051717.</changelog>

</package>
<package pkgid="55b1c3f65ddfef397be658404a401fdd06475e3cc247f20daf2d2da5a723ff4c" name="libwx_gtk2u_xrc-suse1" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="2b521b33dfb132f78adfce0bcc4844f03c1f5d371752af253210fb7c58d8809b" name="libwx_gtk2u_xrc-suse1-32bit" arch="x86_64">
    <version epoch="0" ver="3.0.2" rel="11.1"/>

<changelog author="seiler@b1-systems.de" date="1392638400">- added baselibs.conf to provide *-32bit packages</changelog>
<changelog author="jengelh@inai.de" date="1394539200">- Exclude libwx_webview from SLE11 build</changelog>
<changelog author="jengelh@inai.de" date="1398427200">- Remove unused "ansi" configuration: wxWidgets 3 in Unicode mode
  supports both char* and wchar_t*.</changelog>
<changelog author="jengelh@inai.de" date="1401969600">- Use system libraries instead of bundled versions:
  libjpeg, libpng, zlib
- Enable use of libSM</changelog>
<changelog author="fcrozat@suse.com" date="1402056000">- Switch build to GTK3 for SLE12 and openSUSE &gt; 13.1
- Add wxWidgets-3_0-fixGTK3-build.patch: fix build with recent GTK3
  (from upstream)
- Remove libgnomeprintui dependencies, GTK printing support is now
  used.
- Disable gnomevfs support when building GTK3 version.
- Add/fix missing BuildRequires: xorg-x11-libSM-devel,
  libnotify-devel.
- Do not build webview on SLE10 and SLE11</changelog>
<changelog author="jengelh@inai.de" date="1402056001">- Continue to provide a wxGTK2 build in parallel to wxGTK3
  (new specfile wxGTK2-3_0.spec; use BuildRequire wxGTK2-devel)
- Remove unused wxcontainer and wxcontainer26c subpackage logic
  plus spec files
- Let /usr/lib(64)/wx be owned by packages that put files there</changelog>
<changelog author="jengelh@inai.de" date="1402315200">- Revert the GTK3 change (there are rendering problems).
  wxWidgets-3_0(-devel) is now wxGTK2 again, and the wxGTK3 backend
  is available in wxGTK3(-devel).</changelog>
<changelog author="fcrozat@suse.com" date="1402488000">- Add _constraints file to ensure enough disk space is available
  for build.</changelog>
<changelog author="jengelh@inai.de" date="1402920000">- Update to new upstream release 3.0.1
  * wxHTML displays tables much faster now.
  * Double clicking wxGrid columns does not make them too small
  any more.
  * Fix bugs when dragging columns in wxGrid with hidden columns.
  * Loading ICO files with PNG data is now supported.
  * Mouse wheel scrolling in wxListCtrl works again.
  * wxStaticBoxSizer contents is not truncated any more.
  * AUI panels may now be re-docked after floating them.
- Remove wxWidgets-3_0-fixGTK3-build.patch (no longer needed)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Remove the mechanism to support different variants, as it does
  not support concurrent presence of multiple variants.
- Remove wxWidgets-3_0-config-force-rpath.patch,
  wxWidgets-find-wx-provides-bash3.patch (no longer needed)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="jengelh@inai.de" date="1415188800">- Replace broad Requires: Mesa-devel by pkgconfig(gl)
  [Mesa-libGL-devel]</changelog>
<changelog author="jengelh@inai.de" date="1415275200">- Restore libwx_base*.so devel symlinks [boo#904098]</changelog>
<changelog author="jengelh@inai.de" date="1415361600">- Update to new upstream release 3.0.2
  * Fix silent data loss in wx[F]File::Write(wxString) if conversion
  fails.
  * Make wxString::FromCDouble() work when the global C++ locale is
  not the C one.
  * Fix mouse handling in wxNotebook containing wxListCtrl.
- Bump SONAME due to changed ABI, add soversion.diff.
- Don't let wxGTK3-3_0.spec build the SDL plugin (already done
  by wxWidgets-3_0.spec)</changelog>
<changelog author="jengelh@inai.de" date="1417780800">- Reenable standard dependency generator. We no longer have
  overlapping library SONAMEs.</changelog>
<changelog author="jengelh@inai.de" date="1417953600">- Add missing directives to baselibs.conf, and also
  remove wxGTK3 from baselibs.</changelog>
<changelog author="jengelh@inai.de" date="1427630400">- Fixup Provides/Conflicts: wxWidgets-3_0 is wxGTK2, not wxGTK3,
  and should conflict against experimental variants that are
  shipping concurrently.</changelog>
<changelog author="jengelh@inai.de" date="1455969600">- Add patches from upstream to resolve crashes in normal conditions,
  and when running under non-X11 wxGTK3.
  0001-avoid-passing-invalid-rect-to-Refresh-closes-16819.patch
  0001-Ensure-the-PangoFontFace-type-is-loaded.patch
  0001-Fix-wxPrintDialog-when-used-directly-see-16821.patch
  0001-set-transient-parent-for-about-dialog-closes-16823.patch
  0001-Avoid-refreshing-not-currently-visible-items-in-gene.patch
  0001-Avoid-Gtk-Message-GtkDialog-mapped-without-a-transie.patch
  0001-Fix-wxSpinButton-best-size-for-GTK-3.12-and-later-se.patch
  0001-Fix-drawing-checkbox-and-radiobutton-in-checked-stat.patch
  0001-fix-crashes-in-wxGTK3-when-running-with-non-X11-back.patch
  0002-Don-t-defer-wxTLW-initialization-in-wxGTK-when-not-u.patch
  0003-Don-t-use-frame-extents-when-not-using-X11-in-wxGTK.patch
  0004-Don-t-crash-when-switching-to-full-screen-in-non-X11.patch
  0005-Don-t-use-X11-only-functions-when-not-using-X11-in-w.patch
  0001-Provide-trivial-GDK_IS_X11_DISPLAY-definition-for-GT.patch</changelog>
<changelog author="jengelh@inai.de" date="1466164800">- Add abs.diff to reenable successful gcc6 build</changelog>
<changelog author="davejplater@gmail.com" date="1467028800">- Created wxWidgets-nostl to enable audacity updates in openSUSE
  because all of the other Linux distributions prefer to build
  wxWidgets without STL and audacity developers have no intention
  of fixing audacity to build against wxWidgets built with STL.</changelog>

</package>
<package pkgid="26b553cdf848606232f0e2497846e059e58b82f222fff65de2d3d1fdd02e2299" name="libxatracker-devel" arch="x86_64">
    <version epoch="0" ver="1.0.0" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="fbd37f462f80617ac0bea96e4ad9f3bca71284d3ebacdaf98317347be3cb6b18" name="libxatracker2" arch="x86_64">
    <version epoch="0" ver="1.0.0" rel="176.1"/>

<changelog author="mimi.vx@gmail.com" date="1491048000">- update to 17.0.3
- change Mesa.keyring to new release manager key
  * fdo#96743 [BYT, HSW, SKL, BXT, KBL] GPU hangs with GfxBench 4.0 CarChase
  * fdo#99246 [d3dadapter+radeonsi] EVE-Online : hang on wormhole sight
  * fdo#100061 LODQ instruction generated with invalid dst mask
  * fdo#100182 Flickering in The Talos Principle on Sky Lake GT4
  * radeonsi: add new polaris12 pci id
  * many fixes for RADV, ANV, i915, radeonsi and freedreno drivers</changelog>
<changelog author="afaerber@suse.de" date="1491393600">- Prepare building OpenCL for non-x86 architectures, too
  * s390x can build it right away (swrast)
  * %arm aarch64 ppc64 ppc64le depend on LLVM amdgpu target for r600
- Fix typo in specfile comment</changelog>
<changelog author="sndirsch@suse.com" date="1491566400">- U_draw-use-SoA-fetch-not-AoS-one.patch
  * reverse-apply this patch to fix OpenGL support on s390x
    (bsc#1032272)</changelog>
<changelog author="sndirsch@suse.com" date="1491998400">- let Mesa require Mesa-libGL1 for a libglvnd build (bsc#1033708)</changelog>
<changelog author="sndirsch@suse.com" date="1491998401">- removed broken locking patches for nouveau DRI driver
  * N_01-WIP-nouveau-add-locking.patch
  * N_02-nouveau-more-locking-make-sure-that-fence-work-is-always-done-with-the-push-mutex-acquired.patch
  * N_03-nv30-locking-fixes.patch
  * N_04-nv50-Fix-double-lock-in-nv50_hw_sm_get_query_result.patch
  * N_05-Use-nv50_render_condition-in-nv50_blitctx_post_blit.patch</changelog>
<changelog author="sndirsch@suse.com" date="1491998402">- build wayland on Leap &gt;= 42.3
- separate package 'Mesa-dri-nouveau' on Leap</changelog>
<changelog author="sndirsch@suse.com" date="1491998403">- only reverse-apply 'U_draw-use-SoA-fetch-not-AoS-one.patch' on
  s390x (bsc#1032272)</changelog>
<changelog author="mimi.vx@gmail.com" date="1492430400">- update to 17.0.4
  * fdo#100391 - SachaWillems deferredmultisampling asserts
  * fdo#100452 - push_constants host memory leak when resetting command buffer
  * fdo#100582 - piglit.spec.arb_stencil_texturing.glblitframebuffer corrupts
    state.gl_texture* assertions
  * radeonsi: add new polaris10 pci ids
  * fixes for anv, radv, i965 and nouveau drivers</changelog>
<changelog author="afaerber@suse.de" date="1492516800">- Enable OpenCL for aarch64, ppc64 and ppc64le now, too.
  %arm is still left out, waiting for llvm4 to build.</changelog>
<changelog author="idonmez@suse.com" date="1492689600">- Add u_add_llvm_codegen_dependencies.patch to link to
  libLLVMCodegen to fix cyclic linking problems. bsc#981975</changelog>
<changelog author="sndirsch@suse.com" date="1492776000">- let Mesa require Mesa-libEGL1 for a libglvnd build;
  xf86-video-amdgpu driver needs it for 2D support via glamor
  (boo#1034832)</changelog>
<changelog author="schwab@linux-m68k.org" date="1493121600">- No OpenCL on ppc</changelog>
<changelog author="sndirsch@suse.com" date="1493294400">- baselibs.conf: added libvulkan_intel-32bit as a requirement for
  Mesa-libd3d (boo#1036282)</changelog>
<changelog author="sndirsch@suse.com" date="1493380800">- u_gallivm-correct-channel-shift-logic-on-big-endian.patch:
  * instead of reverse applying a change on s390x
    ("U_draw-use-SoA-fetch-not-AoS-one.patch") address the
    issue by a real fix (bsc#1032272, fdo#100613)</changelog>
<changelog author="mimi.vx@gmail.com" date="1493467200">- update to 17.0.5
  * fdo#97524 - Samplers referring to the same texture unit with different
    types should raise GL_INVALID_OPERATION
  * nvc0/ir: Properly handle a "split form" of predicate destination
  * nir: Destination component count of shader_clock intrinsic is 2
  * winsys/sw/dri: don't use GNU void pointer arithmetic
  * st/clover: add space between &amp;lt; and ::
  * configure.ac: check require_basic_egl only if egl enabled
  * st/mesa: automake: honour the vdpau header install location
  * intel/fs: Use regs_written() in spilling cost heuristic for improved accuracy
  * intel/fs: Take into account amount of data read in spilling cost heuristic.
  * radv: report timestampPeriod correctly
  * anv/blorp: Flush the texture cache in UpdateBuffer
  * anv/cmd_buffer: Flush the VF cache at the top of all primaries
  * anv/cmd_buffer: Always set up a null surface state
  * anv/cmd_buffer: Use the null surface state for ATTACHMENT_UNUSED
  * anv/blorp: Properly handle VK_ATTACHMENT_UNUSED
  * i965/vec4: Avoid reswizzling MACH instructions in opt_register_coalesce()
  * st/mesa: invalidate the readpix cache in st_indirect_draw_vbo
  * anv/cmd_buffer: Disable CCS on BDW input attachments
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: validate sampler type across the whole program
  * vbo: fix gl_DrawID handling in glMultiDrawArrays
  * util/queue: don't hang at exit
  * mesa: fix remaining xfb prims check for GLES with multiple instances
  * mesa: extract need_xfb_remaining_prims_check
  * mesa: move glMultiDrawArrays to vbo and fix error handling
  + update Mesa.keyring to both upstream release managers</changelog>
<changelog author="sndirsch@suse.com" date="1496232000">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  * Fix loading of a 3x16 vector as a single 48-bit load on
    big-endian systems (PPC64, S390). [fdo#100613]</changelog>
<changelog author="sndirsch@suse.com" date="1496836800">- specfile: Remove requires to vulkan libs from baselibs.conf on
  platforms where vulkan build is disabled; ugly ... (bsc#1042900)</changelog>
<changelog author="tiwai@suse.de" date="1497614400">- Fix Xvfb segfault after reset (bsc#1042764):
  U_radeonsi-add-llvm-init.patch</changelog>
<changelog author="msrb@suse.com" date="1500292800">- u_r600-Add-support-for-B5G5R5A1.patch
  * Fixes rendercheck tests when X server accelerates using glamor.
    (bnc#1047154)</changelog>
<changelog author="sndirsch@suse.com" date="1503489600">- u_llvmpipe-lp_build_gather_elem_vec-BE-fix-for-3x16-lo.patch
  updated; fixes three of the four regressions observed (PPC64, S390)
  [fdo#100613, comment#42]</changelog>

</package>
<package pkgid="72f34615c9626fb2f32c0c91939363ddf7da13f80be66f51db6eb63742a848ce" name="libxcb" arch="src">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="e0c34e165e6f4573c19fda3df2dcf2de08afb06376fd9f49415aa9383b05d8d6" name="libxcb-composite0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="d77e532689e6a3a0c99acb5b40d4fc9bb0a135b17827404d0c34e4ac5a34d0d7" name="libxcb-composite0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="9d5c0c060e748ff2b186cebaa17076c649afa46b07bfbae2bdc676c73d6e2490" name="libxcb-damage0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="601fbfa2fc1a481a6f4fdccbaaac198a4f54aa624abffad957a847922d9f01ed" name="libxcb-damage0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="55458a9876a88edf2fced4500727655b79b9e796b80637ddbe7888f26d4307ff" name="libxcb-devel" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="fc7e47ab9162b284a76126c61c83cad7fc26e5bda8dea432c422b63f3b40de44" name="libxcb-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="50be2ffa4bc77d98331543b0d75f6cdc7d08ed85bca7f8016329dd99285c77bf" name="libxcb-devel-doc" arch="noarch">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="9e387fa65b28c335ac15a5713bb9d0d6e339d0ebc1740a187f491eb2337162c2" name="libxcb-dpms0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="e9afb6085cdc783c6cf4afe6f65cbcb152a4d6dcd67bd6d35574c91a905a9b96" name="libxcb-dpms0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="c3e0e423d0e45395a339b0cc2a7298f110162984074d08b350b8d4d9120ff549" name="libxcb-dri2-0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="3095042af20eb3589bd1a5f27daa530052a2508d433e1e72454a6d8f56cf02d1" name="libxcb-dri2-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="ddd929e16f6c242e9d06c51c578fb62b9397a2edbcd5be8d6419979481f4472e" name="libxcb-dri3-0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="487ccbf414fd441040de082a688768afad7b45ffda4ad3c26fa0c4e338e50b7f" name="libxcb-dri3-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="6ff03705a8f6e0be729c625fd9f57ad6aa1d983e47ca31035b14bef2473873f1" name="libxcb-glx0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="1b4dbd0c812dad4384c8f0c18b7b905d46fed79794518e6d9f70586c281b15d3" name="libxcb-glx0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="ce1ab19bb68f31aa2624d1bd9eb5701185c17ffd564b846db6ded42e759fd2d8" name="libxcb-present0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="3abfc3ac3bc8824b7c1ff636ee20fd7ec7cef33ea130a9645f4c26a7e340a3a2" name="libxcb-present0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="edf03c63aa2d91624c4b718d0d2751c4a65dacd5f05e58958938d25e88b065fc" name="libxcb-randr0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="4b686918c45e6de54291f7ff0fc45ee1675a58f335933c073a9a49a2862fef14" name="libxcb-randr0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="6dc0e5b1da5e1786190c905036b91d17d9b770b5342454f4db189994bf3bbf5f" name="libxcb-record0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="d13cd0d5c48f9bf1d909e3fd42c11d5562cc83ccd22f2d1afe65274417b2f948" name="libxcb-record0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="929dba024b4a7a1d3bb4aae065d8f35e0748303b557057acf9bb9223ded64b21" name="libxcb-render0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="7ff4d2c619d7a19a335ac5e70bd92d5cb2491b641d3ef2c92af7f1fed701cd50" name="libxcb-render0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="4d0b5fbaffc74c25f4c9c6de86c7a45c86e101a28dc7b48e944ba3d30847def1" name="libxcb-res0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="f0ffbdf6c6d4e47113b9fb6b812169127d009f72bf95d954e749b02e8ab37f53" name="libxcb-res0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="9213ecfdfe63b5ae690820c0e3bba28579e64a27b46a54eb27c9bf9f81495124" name="libxcb-screensaver0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="cc443807d784585905f8a685eb99bef97635d74cb7e1b9c470ec04781d06fd59" name="libxcb-screensaver0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="9719a60702bbf7f601e6aab356201b99a640036905b77e2a5b8572168447be1a" name="libxcb-shape0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="bd8ce2a29ca23e2fb287a8a8b5d090e1d6b97aec281446090e6e5457c924bb14" name="libxcb-shape0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="99694a692f05f5efe20adae9555aeda6869b867f713db245a948524ad4088d53" name="libxcb-shm0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="c0bb2b9bf85edbb307566558103fa842c500314cc104287e0063fb6f5201ca2b" name="libxcb-shm0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="87afd48b62d782f4365bdc862a40961792aa92948de81094c86366bc5331eb4c" name="libxcb-sync1" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="f22589201583994cc35d884d91be5e5d23f5f03e35836060773e04d38a227f03" name="libxcb-sync1-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="18744bf29f2b5048a851bffbb89c28c2fa181b6f13703d00d70d0fa95f77193f" name="libxcb-xevie0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="f5e7ef8a70a0f0550f26bf32e39cb544ad75559d905745359a52a3b5f7571aa1" name="libxcb-xevie0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="adf8846a6aedf83dbf854be10cfcec60a8aa84f00b0368bf12e92fd307af5937" name="libxcb-xf86dri0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="18e089b5d1ad206574f6da91838345a34ed5782159a6ac2730af31e28ae58798" name="libxcb-xf86dri0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="a5c896e071203e0bfb88f3c2b929d307f77b28096f6a43264c902e4d513d1245" name="libxcb-xfixes0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="5dba5834686206434cc0f54645550ef9ebd149c1d0ce03e3d168e031beab2575" name="libxcb-xfixes0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="5aead4707959a6a08b887377af8b5e03c4bc15e8dcc4f0a9aa5681053d205530" name="libxcb-xinerama0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="05a81a1f89a29f2cd5fde695f3161c453f0a0e0c41768f28f63495f1a6e365ff" name="libxcb-xinerama0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="666b8d0565971d7217b61f3dcc127c64bb93cce5acc677510893eb9decc92f15" name="libxcb-xkb1" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="02297d57e461ef66e329e378e72d1ae6a1ae1a426bca45dc616dc683d1aa6fdb" name="libxcb-xkb1-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="d2c6a68f44837ead910ae86da2cd30060c84eb234914ba5fa176208a484911be" name="libxcb-xprint0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="8969e8a73fec022eaba6b76b3661d171ee86f4ec8409b105cd2370162ef5de2b" name="libxcb-xprint0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="801cda3cef0889d11ab8c664f1ec80ddede2cc4b14a46b06cfc3ac041b09b880" name="libxcb-xtest0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="c3a056b1fc1b3e997a4472907e8bcad599472860bea8cce982c2fdf1bc1bc9f4" name="libxcb-xtest0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="f1e8891930a0c3e6839cc64126f828bdf3462df26e0edc08e897883a38eea324" name="libxcb-xv0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="54222115d5411b0cfbf27bfee00cb7a65442f8459f321c539311d08480e7643b" name="libxcb-xv0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="2b10f52e19b950a31a1780d3bc52e6e7cc90331b42db1da3e124392116762949" name="libxcb-xvmc0" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="b7ec07d2685b50e02279ad2bb9148cf5e0b9991aa958130eae241aac24661872" name="libxcb-xvmc0-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="9c2faa124e68b85b17911d82c07c3ea7743c650cff45ebaa27a090f7576a5c1a" name="libxcb1" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="5bc401b9358f6c4ad474cd662b85bda622817ced76a4621849d7be2118cd0b9d" name="libxcb1-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.1" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1332331200">- Update to new upstream release 1.8.1
  * Fallback to TCP if no protocol is specified and the UNIX
  connection fails</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1349438400">- Update to version 1.9:
  + Fix "sppported" typo in doxygen comment for XCB_CONN_CLOSED_EXT_NOTSUPPORTED
  + Always include "config.h" at the start of all C source files.
  + Add AC_USE_SYSTEM_EXTENSIONS to allow use of more system functionality
  + Return connection failure if display string specifies non-existent screen
  + c_client: Fix parallel-make issue creating 'man' directory
  + xcb_connect: launchd: Don't fall back on tcp if $DISPLAY is a path to a
    launchd socket
  + Allow undocumented code to be built
  + Split manpage list in two (static/built)
  + Do not list manpages, use a wildcard
  + Move static man to man
  + c_client.py: generate manpages
  + Allow xcb_send_request with &gt;MAX_IOV iovecs
  + Add a .gitignore for src/man/
  + Fix a multi-thread deadlock
  + Include static man pages in "make dist"
- Packaging changes:
  + Pack the now static manpages in the devel package</changelog>
<changelog author="jengelh@inai.de" date="1359288000">- Use more robust make install call
- New Git repository URLs</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.9.1:
  + Fix python code to work with python-3
  + Security fix for integer overflow in read_packet() [CVE-2013-2064]</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Enable xcb-xkb extension (can be used by Weston/Wayland and Qt5,
  and also upstream will build it by default in next release)</changelog>
<changelog author="jengelh@inai.de" date="1382270400">- Split devel documentation into separate package</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912000">- Update to version 1.9.2:
  + New upstream release, no changelog provided
- Bump xcb-proto BuildRequires as per upstream change
- New dri3-0 and present subpackages</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383912001">- Update to version 1.9.3:
  + Buildsystem fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385380800">- Adjust baselibs for new libxcb-dri3-0 and libxcb-present0 subpackages</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1385380801">- Fixup package descriptions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387713600">- Update to version 1.10:
  + Bump libxcb-xkb SONAME due to ABI break introduced in 1.9.2
  + Enable libxcb-xkb by default
  + Bump libxcb-sync SONAME
  + c_client.py: Fix _sizeof() functions
  + c_client.py: Do not create pointers in unions
  + c_client.py: Always initialize xcb_align_to
  + Re-introduce xcb_ge_event_t (deprecated, xcb_ge_generic_event_t
    should be used instead)
  + Fix alignment issues in FD passing code
  + Fix poll() if POLLIN == ROLLRDNORM|POLLRDBAND
  + Use /usr/spool/sockets/X11/ on HP-UX for UNIX sockets
  + Make xsltproc optional</changelog>
<changelog author="sndirsch@suse.com" date="1395144000">- update to current git commit 4ffa6f8 to match current xcb-proto
  git sources</changelog>
<changelog author="sndirsch@suse.com" date="1395144001">- remove URL in specfile sourceline for snapshot tarball in the
  hope to be accepted by buildservice now</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Update to a newer snapshot
- Add missing BuildRequires</changelog>
<changelog author="sndirsch@suse.com" date="1398600000">- added missing python-xcb-proto-devel &gt;= 7.6_1.10.1 BuildRequires</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1407240000">- Update to version 1.11:
  This fixes some bugs with 64 bit fields and the present extension.</changelog>
<changelog author="sndirsch@suse.com" date="1407326400">- added baselibs.conf as source to specfile</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441540800">- Update to version 1.11.1:
  This fixes some threading-related bugs with
  xcb_wait_for_special_event() and adds 64-bit versions of
  functions that work with sequence numbers.</changelog>
<changelog author="msrb@suse.com" date="1513080000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
    (boo#906622).
  * Modified to retry not only if the current hostname is not found
    in the xauthority file, but also when it is rejected by X
    server. (bnc#1043221)</changelog>

</package>
<package pkgid="a3b4eabcc16e9bd4cb7cd4d9fdddce8bc81b54f9915ab67fce72ba59b24fb12e" name="libxml2" arch="src">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
<changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
<changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1417694400">- fix a regression in xzlib compression support (bnc#908376)
  * added 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch
- fix a regression caused by CVE-2014-3660 patch (bgo#738805)
  * added 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * added 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="kstreitova@suse.com" date="1449835200">- security update:
  * libxml2-2.9.1-CVE-2015-1819.patch
  * enforce the reader to run in constant memory
  * [CVE-2015-1819], [bnc#928193]
  * libxml2-2.9.1-CVE-2015-7941.patch
  * fix out of bound read with crafted xml input by stopping
    parsing on entities boundaries errors
  * [CVE-2015-7941], [bnc#951734]
  * libxml2-2.9.1-CVE-2015-7942.patch
  * fix another variation of overflow in Conditional sections
  * [CVE-2015-7942], [bnc#951735]
  * libxml2-2.9.1-CVE-2015-8035.patch
  * fix DoS when parsing specially crafted XML document if
    XZ support is compiled in
  * [CVE-2015-8035], [bnc#954429]
  * libxml2-2.9.1-CVE-2015-8241.patch
  * avoid extra processing of MarkupDecl when EOF
  * [CVE-2015-8241], [bnc#956018]
  * libxml2-2.9.1-CVE-2015-8242.patch
  * buffer overead with HTML parser in push mode
  * [CVE-2015-8242], [bnc#956021]
  * libxml2-2.9.1-CVE-2015-8317.patch
  * return if the encoding declaration is broken or encoding
    conversion failed
  * [CVE-2015-8317], [bnc#956260]
  * libxml2-2.9.1-CVE-2015-5312.patch
  * fix another entity expansion issue
  * [CVE-2015-5312], [bnc#957105]
  * libxml2-2.9.1-CVE-2015-7497.patch
  * avoid an heap buffer overflow in xmlDictComputeFastQKey
  * [CVE-2015-7497], [bnc#957106]
  * libxml2-2.9.1-CVE-2015-7498.patch
  * avoid processing entities after encoding conversion failures
  * [CVE-2015-7498], [bnc#957107]
  * libxml2-2.9.1-CVE-2015-7499.patch
  * add xmlHaltParser() to stop the parser / detect incoherency
    on GROW
  * [CVE-2015-7499], [bnc#957109]
  * libxml2-2.9.1-CVE-2015-7500.patch
  * fix memory access error due to incorrect entities boundaries
  * [CVE-2015-7500], [bnc#957110]</changelog>
<changelog author="kstreitova@suse.com" date="1452600000">- add libxml2-2.9.1-CVE-2015-8710.patch to fix parsing short
  unclosed comment uninitialized access
  [bnc#960674], [CVE-2015-8710]</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch,
  libxml2-2.9.1-CVE-2015-1819.patch,
  libxml2-2.9.1-CVE-2015-5312.patch,
  libxml2-2.9.1-CVE-2015-7497.patch,
  libxml2-2.9.1-CVE-2015-7498.patch,
  libxml2-2.9.1-CVE-2015-7499.patch,
  libxml2-2.9.1-CVE-2015-7500.patch,
  libxml2-2.9.1-CVE-2015-7941.patch,
  libxml2-2.9.1-CVE-2015-7942.patch,
  libxml2-2.9.1-CVE-2015-8035.patch,
  libxml2-2.9.1-CVE-2015-8241.patch,
  libxml2-2.9.1-CVE-2015-8242.patch,
  libxml2-2.9.1-CVE-2015-8317.patch,
  libxml2-2.9.1-CVE-2015-8710.patch: fixed upstream.</changelog>
<changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>
<changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
<changelog author="sflees@suse.de" date="1481716800">- Security fix
  * libxml2-CVE-2016-9318.patch
  * XML External Entity vulnerability, as this would be an invasive
    fix, a new flag has been added to disable the feature if not need.
  * [bnc#1010675,bnc#1013930]
  * libxml2-2.9.4-CVE-2016-4658.patch
  * use-after-free error
  * [bnc#1005544]
- Fix NULL dereference in xpointer.c when in recovery mode
  * libxml2-NULL-deref-xpointer.patch
  * [bnc#1014873]
- Fix NULL dereference in xmlDumpElementContent when in recovery mode
  * libxml2-NULL-deref-xmlDumpElementContent.patch
  * [bnc#1014873]
- Fix infinite recursion in xmlParseConditionalSections when in recovery mode
  * libxml2-inf-rec-xmlParseConditionalSections.patch
  * [bnc#1014873]</changelog>
<changelog author="sflees@suse.de" date="1483963200">- Security fix
  * libxml2-CVE-2016-9597.patch
  * Stack overflow before detecting invalid XML file
  * [bnc#1017497, CVE-2016-9597]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1495022400">- Security fixes:
  * libxml2-CVE-2017-9050.patch [bsc#1039069, bsc#1039661]
  * heap-based buffer overflow (xmlDictAddString func)
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent
  * Deleted patch libxml2-NULL-deref-xmlDumpElementContent.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960000">- Upstream patches updated and with tests:
  * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch
    merged into libxml2-CVE-2017-9047.patch
    [bsc#1039066, bsc#1039661]
  * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch
    merged into libxml2-CVE-2017-9049.patch
    [bsc#1039063, bsc#1039064]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960001">- Security fix:
  * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375]
  * Prevent unwanted external entity reference</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498219200">- Security fix:
  * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376]
  * Increase buffer space for port in HTTP redirect support</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501156800">- Security fix [CVE-2017-8872, bsc#1038444]
  * global-buffer-overflow in htmlParseTryOrFinish
  * Added patch libxml2-2.9.4-CVE-2017-8872.patch</changelog>

</package>
<package pkgid="7eead9b40363e24ffa4b71de9e40b45f3f9409714451c0eff9ff3501db7cac50" name="libxml2-2" arch="x86_64">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
<changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
<changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1417694400">- fix a regression in xzlib compression support (bnc#908376)
  * added 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch
- fix a regression caused by CVE-2014-3660 patch (bgo#738805)
  * added 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * added 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="kstreitova@suse.com" date="1449835200">- security update:
  * libxml2-2.9.1-CVE-2015-1819.patch
  * enforce the reader to run in constant memory
  * [CVE-2015-1819], [bnc#928193]
  * libxml2-2.9.1-CVE-2015-7941.patch
  * fix out of bound read with crafted xml input by stopping
    parsing on entities boundaries errors
  * [CVE-2015-7941], [bnc#951734]
  * libxml2-2.9.1-CVE-2015-7942.patch
  * fix another variation of overflow in Conditional sections
  * [CVE-2015-7942], [bnc#951735]
  * libxml2-2.9.1-CVE-2015-8035.patch
  * fix DoS when parsing specially crafted XML document if
    XZ support is compiled in
  * [CVE-2015-8035], [bnc#954429]
  * libxml2-2.9.1-CVE-2015-8241.patch
  * avoid extra processing of MarkupDecl when EOF
  * [CVE-2015-8241], [bnc#956018]
  * libxml2-2.9.1-CVE-2015-8242.patch
  * buffer overead with HTML parser in push mode
  * [CVE-2015-8242], [bnc#956021]
  * libxml2-2.9.1-CVE-2015-8317.patch
  * return if the encoding declaration is broken or encoding
    conversion failed
  * [CVE-2015-8317], [bnc#956260]
  * libxml2-2.9.1-CVE-2015-5312.patch
  * fix another entity expansion issue
  * [CVE-2015-5312], [bnc#957105]
  * libxml2-2.9.1-CVE-2015-7497.patch
  * avoid an heap buffer overflow in xmlDictComputeFastQKey
  * [CVE-2015-7497], [bnc#957106]
  * libxml2-2.9.1-CVE-2015-7498.patch
  * avoid processing entities after encoding conversion failures
  * [CVE-2015-7498], [bnc#957107]
  * libxml2-2.9.1-CVE-2015-7499.patch
  * add xmlHaltParser() to stop the parser / detect incoherency
    on GROW
  * [CVE-2015-7499], [bnc#957109]
  * libxml2-2.9.1-CVE-2015-7500.patch
  * fix memory access error due to incorrect entities boundaries
  * [CVE-2015-7500], [bnc#957110]</changelog>
<changelog author="kstreitova@suse.com" date="1452600000">- add libxml2-2.9.1-CVE-2015-8710.patch to fix parsing short
  unclosed comment uninitialized access
  [bnc#960674], [CVE-2015-8710]</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch,
  libxml2-2.9.1-CVE-2015-1819.patch,
  libxml2-2.9.1-CVE-2015-5312.patch,
  libxml2-2.9.1-CVE-2015-7497.patch,
  libxml2-2.9.1-CVE-2015-7498.patch,
  libxml2-2.9.1-CVE-2015-7499.patch,
  libxml2-2.9.1-CVE-2015-7500.patch,
  libxml2-2.9.1-CVE-2015-7941.patch,
  libxml2-2.9.1-CVE-2015-7942.patch,
  libxml2-2.9.1-CVE-2015-8035.patch,
  libxml2-2.9.1-CVE-2015-8241.patch,
  libxml2-2.9.1-CVE-2015-8242.patch,
  libxml2-2.9.1-CVE-2015-8317.patch,
  libxml2-2.9.1-CVE-2015-8710.patch: fixed upstream.</changelog>
<changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>
<changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
<changelog author="sflees@suse.de" date="1481716800">- Security fix
  * libxml2-CVE-2016-9318.patch
  * XML External Entity vulnerability, as this would be an invasive
    fix, a new flag has been added to disable the feature if not need.
  * [bnc#1010675,bnc#1013930]
  * libxml2-2.9.4-CVE-2016-4658.patch
  * use-after-free error
  * [bnc#1005544]
- Fix NULL dereference in xpointer.c when in recovery mode
  * libxml2-NULL-deref-xpointer.patch
  * [bnc#1014873]
- Fix NULL dereference in xmlDumpElementContent when in recovery mode
  * libxml2-NULL-deref-xmlDumpElementContent.patch
  * [bnc#1014873]
- Fix infinite recursion in xmlParseConditionalSections when in recovery mode
  * libxml2-inf-rec-xmlParseConditionalSections.patch
  * [bnc#1014873]</changelog>
<changelog author="sflees@suse.de" date="1483963200">- Security fix
  * libxml2-CVE-2016-9597.patch
  * Stack overflow before detecting invalid XML file
  * [bnc#1017497, CVE-2016-9597]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1495022400">- Security fixes:
  * libxml2-CVE-2017-9050.patch [bsc#1039069, bsc#1039661]
  * heap-based buffer overflow (xmlDictAddString func)
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent
  * Deleted patch libxml2-NULL-deref-xmlDumpElementContent.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960000">- Upstream patches updated and with tests:
  * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch
    merged into libxml2-CVE-2017-9047.patch
    [bsc#1039066, bsc#1039661]
  * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch
    merged into libxml2-CVE-2017-9049.patch
    [bsc#1039063, bsc#1039064]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960001">- Security fix:
  * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375]
  * Prevent unwanted external entity reference</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498219200">- Security fix:
  * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376]
  * Increase buffer space for port in HTTP redirect support</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501156800">- Security fix [CVE-2017-8872, bsc#1038444]
  * global-buffer-overflow in htmlParseTryOrFinish
  * Added patch libxml2-2.9.4-CVE-2017-8872.patch</changelog>

</package>
<package pkgid="a20828a619000de44219ec504856c02c04c0a3389d381a82ba3f3b1463e1b7bb" name="libxml2-2-32bit" arch="x86_64">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
<changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
<changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1417694400">- fix a regression in xzlib compression support (bnc#908376)
  * added 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch
- fix a regression caused by CVE-2014-3660 patch (bgo#738805)
  * added 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * added 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="kstreitova@suse.com" date="1449835200">- security update:
  * libxml2-2.9.1-CVE-2015-1819.patch
  * enforce the reader to run in constant memory
  * [CVE-2015-1819], [bnc#928193]
  * libxml2-2.9.1-CVE-2015-7941.patch
  * fix out of bound read with crafted xml input by stopping
    parsing on entities boundaries errors
  * [CVE-2015-7941], [bnc#951734]
  * libxml2-2.9.1-CVE-2015-7942.patch
  * fix another variation of overflow in Conditional sections
  * [CVE-2015-7942], [bnc#951735]
  * libxml2-2.9.1-CVE-2015-8035.patch
  * fix DoS when parsing specially crafted XML document if
    XZ support is compiled in
  * [CVE-2015-8035], [bnc#954429]
  * libxml2-2.9.1-CVE-2015-8241.patch
  * avoid extra processing of MarkupDecl when EOF
  * [CVE-2015-8241], [bnc#956018]
  * libxml2-2.9.1-CVE-2015-8242.patch
  * buffer overead with HTML parser in push mode
  * [CVE-2015-8242], [bnc#956021]
  * libxml2-2.9.1-CVE-2015-8317.patch
  * return if the encoding declaration is broken or encoding
    conversion failed
  * [CVE-2015-8317], [bnc#956260]
  * libxml2-2.9.1-CVE-2015-5312.patch
  * fix another entity expansion issue
  * [CVE-2015-5312], [bnc#957105]
  * libxml2-2.9.1-CVE-2015-7497.patch
  * avoid an heap buffer overflow in xmlDictComputeFastQKey
  * [CVE-2015-7497], [bnc#957106]
  * libxml2-2.9.1-CVE-2015-7498.patch
  * avoid processing entities after encoding conversion failures
  * [CVE-2015-7498], [bnc#957107]
  * libxml2-2.9.1-CVE-2015-7499.patch
  * add xmlHaltParser() to stop the parser / detect incoherency
    on GROW
  * [CVE-2015-7499], [bnc#957109]
  * libxml2-2.9.1-CVE-2015-7500.patch
  * fix memory access error due to incorrect entities boundaries
  * [CVE-2015-7500], [bnc#957110]</changelog>
<changelog author="kstreitova@suse.com" date="1452600000">- add libxml2-2.9.1-CVE-2015-8710.patch to fix parsing short
  unclosed comment uninitialized access
  [bnc#960674], [CVE-2015-8710]</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch,
  libxml2-2.9.1-CVE-2015-1819.patch,
  libxml2-2.9.1-CVE-2015-5312.patch,
  libxml2-2.9.1-CVE-2015-7497.patch,
  libxml2-2.9.1-CVE-2015-7498.patch,
  libxml2-2.9.1-CVE-2015-7499.patch,
  libxml2-2.9.1-CVE-2015-7500.patch,
  libxml2-2.9.1-CVE-2015-7941.patch,
  libxml2-2.9.1-CVE-2015-7942.patch,
  libxml2-2.9.1-CVE-2015-8035.patch,
  libxml2-2.9.1-CVE-2015-8241.patch,
  libxml2-2.9.1-CVE-2015-8242.patch,
  libxml2-2.9.1-CVE-2015-8317.patch,
  libxml2-2.9.1-CVE-2015-8710.patch: fixed upstream.</changelog>
<changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>
<changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
<changelog author="sflees@suse.de" date="1481716800">- Security fix
  * libxml2-CVE-2016-9318.patch
  * XML External Entity vulnerability, as this would be an invasive
    fix, a new flag has been added to disable the feature if not need.
  * [bnc#1010675,bnc#1013930]
  * libxml2-2.9.4-CVE-2016-4658.patch
  * use-after-free error
  * [bnc#1005544]
- Fix NULL dereference in xpointer.c when in recovery mode
  * libxml2-NULL-deref-xpointer.patch
  * [bnc#1014873]
- Fix NULL dereference in xmlDumpElementContent when in recovery mode
  * libxml2-NULL-deref-xmlDumpElementContent.patch
  * [bnc#1014873]
- Fix infinite recursion in xmlParseConditionalSections when in recovery mode
  * libxml2-inf-rec-xmlParseConditionalSections.patch
  * [bnc#1014873]</changelog>
<changelog author="sflees@suse.de" date="1483963200">- Security fix
  * libxml2-CVE-2016-9597.patch
  * Stack overflow before detecting invalid XML file
  * [bnc#1017497, CVE-2016-9597]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1495022400">- Security fixes:
  * libxml2-CVE-2017-9050.patch [bsc#1039069, bsc#1039661]
  * heap-based buffer overflow (xmlDictAddString func)
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent
  * Deleted patch libxml2-NULL-deref-xmlDumpElementContent.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960000">- Upstream patches updated and with tests:
  * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch
    merged into libxml2-CVE-2017-9047.patch
    [bsc#1039066, bsc#1039661]
  * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch
    merged into libxml2-CVE-2017-9049.patch
    [bsc#1039063, bsc#1039064]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960001">- Security fix:
  * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375]
  * Prevent unwanted external entity reference</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498219200">- Security fix:
  * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376]
  * Increase buffer space for port in HTTP redirect support</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501156800">- Security fix [CVE-2017-8872, bsc#1038444]
  * global-buffer-overflow in htmlParseTryOrFinish
  * Added patch libxml2-2.9.4-CVE-2017-8872.patch</changelog>

</package>
<package pkgid="93abcd9a43469e7624a721002e48bb133af5209c5cba9d51a1b0c522ce9d433a" name="libxml2-devel" arch="x86_64">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
<changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
<changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1417694400">- fix a regression in xzlib compression support (bnc#908376)
  * added 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch
- fix a regression caused by CVE-2014-3660 patch (bgo#738805)
  * added 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * added 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="kstreitova@suse.com" date="1449835200">- security update:
  * libxml2-2.9.1-CVE-2015-1819.patch
  * enforce the reader to run in constant memory
  * [CVE-2015-1819], [bnc#928193]
  * libxml2-2.9.1-CVE-2015-7941.patch
  * fix out of bound read with crafted xml input by stopping
    parsing on entities boundaries errors
  * [CVE-2015-7941], [bnc#951734]
  * libxml2-2.9.1-CVE-2015-7942.patch
  * fix another variation of overflow in Conditional sections
  * [CVE-2015-7942], [bnc#951735]
  * libxml2-2.9.1-CVE-2015-8035.patch
  * fix DoS when parsing specially crafted XML document if
    XZ support is compiled in
  * [CVE-2015-8035], [bnc#954429]
  * libxml2-2.9.1-CVE-2015-8241.patch
  * avoid extra processing of MarkupDecl when EOF
  * [CVE-2015-8241], [bnc#956018]
  * libxml2-2.9.1-CVE-2015-8242.patch
  * buffer overead with HTML parser in push mode
  * [CVE-2015-8242], [bnc#956021]
  * libxml2-2.9.1-CVE-2015-8317.patch
  * return if the encoding declaration is broken or encoding
    conversion failed
  * [CVE-2015-8317], [bnc#956260]
  * libxml2-2.9.1-CVE-2015-5312.patch
  * fix another entity expansion issue
  * [CVE-2015-5312], [bnc#957105]
  * libxml2-2.9.1-CVE-2015-7497.patch
  * avoid an heap buffer overflow in xmlDictComputeFastQKey
  * [CVE-2015-7497], [bnc#957106]
  * libxml2-2.9.1-CVE-2015-7498.patch
  * avoid processing entities after encoding conversion failures
  * [CVE-2015-7498], [bnc#957107]
  * libxml2-2.9.1-CVE-2015-7499.patch
  * add xmlHaltParser() to stop the parser / detect incoherency
    on GROW
  * [CVE-2015-7499], [bnc#957109]
  * libxml2-2.9.1-CVE-2015-7500.patch
  * fix memory access error due to incorrect entities boundaries
  * [CVE-2015-7500], [bnc#957110]</changelog>
<changelog author="kstreitova@suse.com" date="1452600000">- add libxml2-2.9.1-CVE-2015-8710.patch to fix parsing short
  unclosed comment uninitialized access
  [bnc#960674], [CVE-2015-8710]</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch,
  libxml2-2.9.1-CVE-2015-1819.patch,
  libxml2-2.9.1-CVE-2015-5312.patch,
  libxml2-2.9.1-CVE-2015-7497.patch,
  libxml2-2.9.1-CVE-2015-7498.patch,
  libxml2-2.9.1-CVE-2015-7499.patch,
  libxml2-2.9.1-CVE-2015-7500.patch,
  libxml2-2.9.1-CVE-2015-7941.patch,
  libxml2-2.9.1-CVE-2015-7942.patch,
  libxml2-2.9.1-CVE-2015-8035.patch,
  libxml2-2.9.1-CVE-2015-8241.patch,
  libxml2-2.9.1-CVE-2015-8242.patch,
  libxml2-2.9.1-CVE-2015-8317.patch,
  libxml2-2.9.1-CVE-2015-8710.patch: fixed upstream.</changelog>
<changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>
<changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
<changelog author="sflees@suse.de" date="1481716800">- Security fix
  * libxml2-CVE-2016-9318.patch
  * XML External Entity vulnerability, as this would be an invasive
    fix, a new flag has been added to disable the feature if not need.
  * [bnc#1010675,bnc#1013930]
  * libxml2-2.9.4-CVE-2016-4658.patch
  * use-after-free error
  * [bnc#1005544]
- Fix NULL dereference in xpointer.c when in recovery mode
  * libxml2-NULL-deref-xpointer.patch
  * [bnc#1014873]
- Fix NULL dereference in xmlDumpElementContent when in recovery mode
  * libxml2-NULL-deref-xmlDumpElementContent.patch
  * [bnc#1014873]
- Fix infinite recursion in xmlParseConditionalSections when in recovery mode
  * libxml2-inf-rec-xmlParseConditionalSections.patch
  * [bnc#1014873]</changelog>
<changelog author="sflees@suse.de" date="1483963200">- Security fix
  * libxml2-CVE-2016-9597.patch
  * Stack overflow before detecting invalid XML file
  * [bnc#1017497, CVE-2016-9597]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1495022400">- Security fixes:
  * libxml2-CVE-2017-9050.patch [bsc#1039069, bsc#1039661]
  * heap-based buffer overflow (xmlDictAddString func)
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent
  * Deleted patch libxml2-NULL-deref-xmlDumpElementContent.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960000">- Upstream patches updated and with tests:
  * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch
    merged into libxml2-CVE-2017-9047.patch
    [bsc#1039066, bsc#1039661]
  * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch
    merged into libxml2-CVE-2017-9049.patch
    [bsc#1039063, bsc#1039064]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960001">- Security fix:
  * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375]
  * Prevent unwanted external entity reference</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498219200">- Security fix:
  * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376]
  * Increase buffer space for port in HTTP redirect support</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501156800">- Security fix [CVE-2017-8872, bsc#1038444]
  * global-buffer-overflow in htmlParseTryOrFinish
  * Added patch libxml2-2.9.4-CVE-2017-8872.patch</changelog>

</package>
<package pkgid="b1d8b71cde42c5717c889405000168b9eea6803cf8e0aff99441c85d66bee0bb" name="libxml2-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
<changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
<changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1417694400">- fix a regression in xzlib compression support (bnc#908376)
  * added 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch
- fix a regression caused by CVE-2014-3660 patch (bgo#738805)
  * added 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * added 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="kstreitova@suse.com" date="1449835200">- security update:
  * libxml2-2.9.1-CVE-2015-1819.patch
  * enforce the reader to run in constant memory
  * [CVE-2015-1819], [bnc#928193]
  * libxml2-2.9.1-CVE-2015-7941.patch
  * fix out of bound read with crafted xml input by stopping
    parsing on entities boundaries errors
  * [CVE-2015-7941], [bnc#951734]
  * libxml2-2.9.1-CVE-2015-7942.patch
  * fix another variation of overflow in Conditional sections
  * [CVE-2015-7942], [bnc#951735]
  * libxml2-2.9.1-CVE-2015-8035.patch
  * fix DoS when parsing specially crafted XML document if
    XZ support is compiled in
  * [CVE-2015-8035], [bnc#954429]
  * libxml2-2.9.1-CVE-2015-8241.patch
  * avoid extra processing of MarkupDecl when EOF
  * [CVE-2015-8241], [bnc#956018]
  * libxml2-2.9.1-CVE-2015-8242.patch
  * buffer overead with HTML parser in push mode
  * [CVE-2015-8242], [bnc#956021]
  * libxml2-2.9.1-CVE-2015-8317.patch
  * return if the encoding declaration is broken or encoding
    conversion failed
  * [CVE-2015-8317], [bnc#956260]
  * libxml2-2.9.1-CVE-2015-5312.patch
  * fix another entity expansion issue
  * [CVE-2015-5312], [bnc#957105]
  * libxml2-2.9.1-CVE-2015-7497.patch
  * avoid an heap buffer overflow in xmlDictComputeFastQKey
  * [CVE-2015-7497], [bnc#957106]
  * libxml2-2.9.1-CVE-2015-7498.patch
  * avoid processing entities after encoding conversion failures
  * [CVE-2015-7498], [bnc#957107]
  * libxml2-2.9.1-CVE-2015-7499.patch
  * add xmlHaltParser() to stop the parser / detect incoherency
    on GROW
  * [CVE-2015-7499], [bnc#957109]
  * libxml2-2.9.1-CVE-2015-7500.patch
  * fix memory access error due to incorrect entities boundaries
  * [CVE-2015-7500], [bnc#957110]</changelog>
<changelog author="kstreitova@suse.com" date="1452600000">- add libxml2-2.9.1-CVE-2015-8710.patch to fix parsing short
  unclosed comment uninitialized access
  [bnc#960674], [CVE-2015-8710]</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch,
  libxml2-2.9.1-CVE-2015-1819.patch,
  libxml2-2.9.1-CVE-2015-5312.patch,
  libxml2-2.9.1-CVE-2015-7497.patch,
  libxml2-2.9.1-CVE-2015-7498.patch,
  libxml2-2.9.1-CVE-2015-7499.patch,
  libxml2-2.9.1-CVE-2015-7500.patch,
  libxml2-2.9.1-CVE-2015-7941.patch,
  libxml2-2.9.1-CVE-2015-7942.patch,
  libxml2-2.9.1-CVE-2015-8035.patch,
  libxml2-2.9.1-CVE-2015-8241.patch,
  libxml2-2.9.1-CVE-2015-8242.patch,
  libxml2-2.9.1-CVE-2015-8317.patch,
  libxml2-2.9.1-CVE-2015-8710.patch: fixed upstream.</changelog>
<changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>
<changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
<changelog author="sflees@suse.de" date="1481716800">- Security fix
  * libxml2-CVE-2016-9318.patch
  * XML External Entity vulnerability, as this would be an invasive
    fix, a new flag has been added to disable the feature if not need.
  * [bnc#1010675,bnc#1013930]
  * libxml2-2.9.4-CVE-2016-4658.patch
  * use-after-free error
  * [bnc#1005544]
- Fix NULL dereference in xpointer.c when in recovery mode
  * libxml2-NULL-deref-xpointer.patch
  * [bnc#1014873]
- Fix NULL dereference in xmlDumpElementContent when in recovery mode
  * libxml2-NULL-deref-xmlDumpElementContent.patch
  * [bnc#1014873]
- Fix infinite recursion in xmlParseConditionalSections when in recovery mode
  * libxml2-inf-rec-xmlParseConditionalSections.patch
  * [bnc#1014873]</changelog>
<changelog author="sflees@suse.de" date="1483963200">- Security fix
  * libxml2-CVE-2016-9597.patch
  * Stack overflow before detecting invalid XML file
  * [bnc#1017497, CVE-2016-9597]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1495022400">- Security fixes:
  * libxml2-CVE-2017-9050.patch [bsc#1039069, bsc#1039661]
  * heap-based buffer overflow (xmlDictAddString func)
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent
  * Deleted patch libxml2-NULL-deref-xmlDumpElementContent.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960000">- Upstream patches updated and with tests:
  * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch
    merged into libxml2-CVE-2017-9047.patch
    [bsc#1039066, bsc#1039661]
  * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch
    merged into libxml2-CVE-2017-9049.patch
    [bsc#1039063, bsc#1039064]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960001">- Security fix:
  * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375]
  * Prevent unwanted external entity reference</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498219200">- Security fix:
  * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376]
  * Increase buffer space for port in HTTP redirect support</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501156800">- Security fix [CVE-2017-8872, bsc#1038444]
  * global-buffer-overflow in htmlParseTryOrFinish
  * Added patch libxml2-2.9.4-CVE-2017-8872.patch</changelog>

</package>
<package pkgid="8c557c5dd0c3957f2770ba98229c8d7c698a1307e3a75f043b3ce802849f6e24" name="libxml2-doc" arch="noarch">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
<changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
<changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1417694400">- fix a regression in xzlib compression support (bnc#908376)
  * added 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch
- fix a regression caused by CVE-2014-3660 patch (bgo#738805)
  * added 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * added 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="kstreitova@suse.com" date="1449835200">- security update:
  * libxml2-2.9.1-CVE-2015-1819.patch
  * enforce the reader to run in constant memory
  * [CVE-2015-1819], [bnc#928193]
  * libxml2-2.9.1-CVE-2015-7941.patch
  * fix out of bound read with crafted xml input by stopping
    parsing on entities boundaries errors
  * [CVE-2015-7941], [bnc#951734]
  * libxml2-2.9.1-CVE-2015-7942.patch
  * fix another variation of overflow in Conditional sections
  * [CVE-2015-7942], [bnc#951735]
  * libxml2-2.9.1-CVE-2015-8035.patch
  * fix DoS when parsing specially crafted XML document if
    XZ support is compiled in
  * [CVE-2015-8035], [bnc#954429]
  * libxml2-2.9.1-CVE-2015-8241.patch
  * avoid extra processing of MarkupDecl when EOF
  * [CVE-2015-8241], [bnc#956018]
  * libxml2-2.9.1-CVE-2015-8242.patch
  * buffer overead with HTML parser in push mode
  * [CVE-2015-8242], [bnc#956021]
  * libxml2-2.9.1-CVE-2015-8317.patch
  * return if the encoding declaration is broken or encoding
    conversion failed
  * [CVE-2015-8317], [bnc#956260]
  * libxml2-2.9.1-CVE-2015-5312.patch
  * fix another entity expansion issue
  * [CVE-2015-5312], [bnc#957105]
  * libxml2-2.9.1-CVE-2015-7497.patch
  * avoid an heap buffer overflow in xmlDictComputeFastQKey
  * [CVE-2015-7497], [bnc#957106]
  * libxml2-2.9.1-CVE-2015-7498.patch
  * avoid processing entities after encoding conversion failures
  * [CVE-2015-7498], [bnc#957107]
  * libxml2-2.9.1-CVE-2015-7499.patch
  * add xmlHaltParser() to stop the parser / detect incoherency
    on GROW
  * [CVE-2015-7499], [bnc#957109]
  * libxml2-2.9.1-CVE-2015-7500.patch
  * fix memory access error due to incorrect entities boundaries
  * [CVE-2015-7500], [bnc#957110]</changelog>
<changelog author="kstreitova@suse.com" date="1452600000">- add libxml2-2.9.1-CVE-2015-8710.patch to fix parsing short
  unclosed comment uninitialized access
  [bnc#960674], [CVE-2015-8710]</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch,
  libxml2-2.9.1-CVE-2015-1819.patch,
  libxml2-2.9.1-CVE-2015-5312.patch,
  libxml2-2.9.1-CVE-2015-7497.patch,
  libxml2-2.9.1-CVE-2015-7498.patch,
  libxml2-2.9.1-CVE-2015-7499.patch,
  libxml2-2.9.1-CVE-2015-7500.patch,
  libxml2-2.9.1-CVE-2015-7941.patch,
  libxml2-2.9.1-CVE-2015-7942.patch,
  libxml2-2.9.1-CVE-2015-8035.patch,
  libxml2-2.9.1-CVE-2015-8241.patch,
  libxml2-2.9.1-CVE-2015-8242.patch,
  libxml2-2.9.1-CVE-2015-8317.patch,
  libxml2-2.9.1-CVE-2015-8710.patch: fixed upstream.</changelog>
<changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>
<changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
<changelog author="sflees@suse.de" date="1481716800">- Security fix
  * libxml2-CVE-2016-9318.patch
  * XML External Entity vulnerability, as this would be an invasive
    fix, a new flag has been added to disable the feature if not need.
  * [bnc#1010675,bnc#1013930]
  * libxml2-2.9.4-CVE-2016-4658.patch
  * use-after-free error
  * [bnc#1005544]
- Fix NULL dereference in xpointer.c when in recovery mode
  * libxml2-NULL-deref-xpointer.patch
  * [bnc#1014873]
- Fix NULL dereference in xmlDumpElementContent when in recovery mode
  * libxml2-NULL-deref-xmlDumpElementContent.patch
  * [bnc#1014873]
- Fix infinite recursion in xmlParseConditionalSections when in recovery mode
  * libxml2-inf-rec-xmlParseConditionalSections.patch
  * [bnc#1014873]</changelog>
<changelog author="sflees@suse.de" date="1483963200">- Security fix
  * libxml2-CVE-2016-9597.patch
  * Stack overflow before detecting invalid XML file
  * [bnc#1017497, CVE-2016-9597]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1495022400">- Security fixes:
  * libxml2-CVE-2017-9050.patch [bsc#1039069, bsc#1039661]
  * heap-based buffer overflow (xmlDictAddString func)
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent
  * Deleted patch libxml2-NULL-deref-xmlDumpElementContent.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960000">- Upstream patches updated and with tests:
  * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch
    merged into libxml2-CVE-2017-9047.patch
    [bsc#1039066, bsc#1039661]
  * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch
    merged into libxml2-CVE-2017-9049.patch
    [bsc#1039063, bsc#1039064]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960001">- Security fix:
  * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375]
  * Prevent unwanted external entity reference</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498219200">- Security fix:
  * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376]
  * Increase buffer space for port in HTTP redirect support</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501156800">- Security fix [CVE-2017-8872, bsc#1038444]
  * global-buffer-overflow in htmlParseTryOrFinish
  * Added patch libxml2-2.9.4-CVE-2017-8872.patch</changelog>

</package>
<package pkgid="1e1f136142742e37001cb10d0f1fe410ee17b8fa9e326a75de4341c1b917af83" name="libxml2-tools" arch="x86_64">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1414756800">- update to 2.9.2
  * drop libxml2-CVE-2014-3660.patch (upstream)
  * add keyring to verify tarball
  Security:
  Fix for CVE-2014-3660 billion laugh variant
  CVE-2014-0191 Do not fetch external parameter entities
  Improvements:
  win32/libxml2.def.src after rebuild in doc
  elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
  elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
  Provide cmake module
  Fix a couple of issues raised by make dist
  Fix and add const qualifiers
  Preparing for upcoming release of 2.9.2
  Fix zlib and lzma libraries check via command line
  wrong error column in structured error when parsing end tag
  doc/news.html: small update to avoid line join while generating NEWS.
  Add methods for python3 iterator
  Support element node traversal in document fragments
  xmlNodeSetName: Allow setting the name to a substring of the currently set name
  Added macros for argument casts
  adding init calls to xml and html Read parsing entry points
  Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
  Implement choice for name classes on attributes
  Two small namespace tweaks
  xmllint --memory should fail on empty files
  Cast encoding name to char pointer to match arg type</changelog>
<changelog author="vcizek@suse.com" date="1415016000">- fix a regression in libxml2 2.9.2
  * https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch</changelog>
<changelog author="vcizek@suse.com" date="1415016001">- fix a missing entities after CVE-2014-3660 fix
  (https://bugzilla.gnome.org/show_bug.cgi?id=738805)
  * added patches:
    0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
    0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1417694400">- fix a regression in xzlib compression support (bnc#908376)
  * added 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch
- fix a regression caused by CVE-2014-3660 patch (bgo#738805)
  * added 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * added 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="rpm@fthiessen.de" date="1448366400">- Update to new upstream release 2.9.3 (bsc#954429):
  * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
    CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
    CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
  * And other bugfixes
- Removed upstream fixed patches:
  * libxml2-dont_initialize_catalog.patch
  * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
  * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch</changelog>
<changelog author="kstreitova@suse.com" date="1449835200">- security update:
  * libxml2-2.9.1-CVE-2015-1819.patch
  * enforce the reader to run in constant memory
  * [CVE-2015-1819], [bnc#928193]
  * libxml2-2.9.1-CVE-2015-7941.patch
  * fix out of bound read with crafted xml input by stopping
    parsing on entities boundaries errors
  * [CVE-2015-7941], [bnc#951734]
  * libxml2-2.9.1-CVE-2015-7942.patch
  * fix another variation of overflow in Conditional sections
  * [CVE-2015-7942], [bnc#951735]
  * libxml2-2.9.1-CVE-2015-8035.patch
  * fix DoS when parsing specially crafted XML document if
    XZ support is compiled in
  * [CVE-2015-8035], [bnc#954429]
  * libxml2-2.9.1-CVE-2015-8241.patch
  * avoid extra processing of MarkupDecl when EOF
  * [CVE-2015-8241], [bnc#956018]
  * libxml2-2.9.1-CVE-2015-8242.patch
  * buffer overead with HTML parser in push mode
  * [CVE-2015-8242], [bnc#956021]
  * libxml2-2.9.1-CVE-2015-8317.patch
  * return if the encoding declaration is broken or encoding
    conversion failed
  * [CVE-2015-8317], [bnc#956260]
  * libxml2-2.9.1-CVE-2015-5312.patch
  * fix another entity expansion issue
  * [CVE-2015-5312], [bnc#957105]
  * libxml2-2.9.1-CVE-2015-7497.patch
  * avoid an heap buffer overflow in xmlDictComputeFastQKey
  * [CVE-2015-7497], [bnc#957106]
  * libxml2-2.9.1-CVE-2015-7498.patch
  * avoid processing entities after encoding conversion failures
  * [CVE-2015-7498], [bnc#957107]
  * libxml2-2.9.1-CVE-2015-7499.patch
  * add xmlHaltParser() to stop the parser / detect incoherency
    on GROW
  * [CVE-2015-7499], [bnc#957109]
  * libxml2-2.9.1-CVE-2015-7500.patch
  * fix memory access error due to incorrect entities boundaries
  * [CVE-2015-7500], [bnc#957110]</changelog>
<changelog author="kstreitova@suse.com" date="1452600000">- add libxml2-2.9.1-CVE-2015-8710.patch to fix parsing short
  unclosed comment uninitialized access
  [bnc#960674], [CVE-2015-8710]</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Fix-a-regression-in-xmlGetDocCompressMode.patch,
  libxml2-2.9.1-CVE-2015-1819.patch,
  libxml2-2.9.1-CVE-2015-5312.patch,
  libxml2-2.9.1-CVE-2015-7497.patch,
  libxml2-2.9.1-CVE-2015-7498.patch,
  libxml2-2.9.1-CVE-2015-7499.patch,
  libxml2-2.9.1-CVE-2015-7500.patch,
  libxml2-2.9.1-CVE-2015-7941.patch,
  libxml2-2.9.1-CVE-2015-7942.patch,
  libxml2-2.9.1-CVE-2015-8035.patch,
  libxml2-2.9.1-CVE-2015-8241.patch,
  libxml2-2.9.1-CVE-2015-8242.patch,
  libxml2-2.9.1-CVE-2015-8317.patch,
  libxml2-2.9.1-CVE-2015-8710.patch: fixed upstream.</changelog>
<changelog author="sflees@suse.de" date="1462276800">- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
  while parsing certain XML files in recovery mode (CVE-2016-3627,
  bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
  to improve protection against Billion Laughs Attack (bnc#975947).</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update libxml2 to version libxml2-2.9.4. The new version is
  resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>
<changelog author="kstreitova@suse.com" date="1465387200">- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
  decoding during XML schema validation [bnc#983288]</changelog>
<changelog author="sflees@suse.de" date="1481716800">- Security fix
  * libxml2-CVE-2016-9318.patch
  * XML External Entity vulnerability, as this would be an invasive
    fix, a new flag has been added to disable the feature if not need.
  * [bnc#1010675,bnc#1013930]
  * libxml2-2.9.4-CVE-2016-4658.patch
  * use-after-free error
  * [bnc#1005544]
- Fix NULL dereference in xpointer.c when in recovery mode
  * libxml2-NULL-deref-xpointer.patch
  * [bnc#1014873]
- Fix NULL dereference in xmlDumpElementContent when in recovery mode
  * libxml2-NULL-deref-xmlDumpElementContent.patch
  * [bnc#1014873]
- Fix infinite recursion in xmlParseConditionalSections when in recovery mode
  * libxml2-inf-rec-xmlParseConditionalSections.patch
  * [bnc#1014873]</changelog>
<changelog author="sflees@suse.de" date="1483963200">- Security fix
  * libxml2-CVE-2016-9597.patch
  * Stack overflow before detecting invalid XML file
  * [bnc#1017497, CVE-2016-9597]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1495022400">- Security fixes:
  * libxml2-CVE-2017-9050.patch [bsc#1039069, bsc#1039661]
  * heap-based buffer overflow (xmlDictAddString func)
  * libxml2-CVE-2017-9049.patch [bsc#1039066]
  * heap-based buffer overflow (xmlDictComputeFastKey func)
  * libxml2-CVE-2017-9048.patch [bsc#1039063]
  * stack overflow vulnerability (xmlSnprintfElementContent func)
  * libxml2-CVE-2017-9047.patch [bsc#1039064]
  * stack overflow vulnerability (xmlSnprintfElementContent func)</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497441600">- Security fix:
  * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
  * Fix NULL pointer deref in xmlDumpElementContent
  * Deleted patch libxml2-NULL-deref-xmlDumpElementContent.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497528000">- Security fix:
  * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
  * Fix Heap buffer overflow in xmlAddID</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960000">- Upstream patches updated and with tests:
  * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch
    merged into libxml2-CVE-2017-9047.patch
    [bsc#1039066, bsc#1039661]
  * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch
    merged into libxml2-CVE-2017-9049.patch
    [bsc#1039063, bsc#1039064]</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1497960001">- Security fix:
  * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375]
  * Prevent unwanted external entity reference</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1498219200">- Security fix:
  * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376]
  * Increase buffer space for port in HTTP redirect support</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1501156800">- Security fix [CVE-2017-8872, bsc#1038444]
  * global-buffer-overflow in htmlParseTryOrFinish
  * Added patch libxml2-2.9.4-CVE-2017-8872.patch</changelog>

</package>
<package pkgid="26d5b459bfd9963fa3538640437b271c29e5dbdee0bc9eb6b2d34bba077af960" name="libxtables-devel" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="dc55608053e179158169046eab8af142aac70294899d07dcba4372bad55de5a8" name="libxtables10" arch="x86_64">
    <version epoch="0" ver="1.4.21" rel="9.1"/>

<changelog author="jengelh@medozas.de" date="1317729600">- Update to a newer git snapshot of the stable branch
  (to v1.4.12.1-16-gd2b0eaa)
  * resolve failure to load extensions that depend on libm.so
- rediff of iptables-batch due to fuzz
- relax runtime requires</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="puzel@suse.com" date="1325073600">- iptables-apply-mktemp-fix.patch (bnc#730161)</changelog>
<changelog author="jengelh@medozas.de" date="1325505600">- Update to newer git snapshot (v1.4.12.2-28-g2117f2b,
  but master branch), tag locally as 1.4.12.90.
  * ships missing pkgconfig files, compile fix for libnfnetlink
  * libxt_NFQUEUE: fix --queue-bypass ipt-save output
  * libxt_connbytes: fix handling of --connbytes FROM
  * libxt_recent: Add support for --reap option
- split iptables-devel into libiptc-devel and libxtables-devel</changelog>
<changelog author="jengelh@medozas.de" date="1332849600">- Update to new upstream release 1.4.13
  * Add the rpfilter, nfacct and IPv6 ECN extensions</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.4.14
  * Support for the new cttimeout infrastructure. This allows you to
  attach specific timeout policies to flow via iptables CT target.</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.4.15
  * libxt_recent: add --mask netmask
  * libxt_hashlimit: add support for byte-based operation</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.16.3
  * This release includes aliasing support which translates command
  lines using obsolete extensions into new ones. The option parser
  now flags illegal negative numbers in some more extensions.
  A division by zero was resolved in libxt_limit as well.</changelog>
<changelog author="jengelh@inai.de" date="1352980800">- Always regenerate files due to SUSE's iptables-batch patch</changelog>
<changelog author="lnussel@suse.de" date="1352980801">- list all required binaries explicitly to make sure all of them are actually
  compiled</changelog>
<changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1356436800">- Update to new upstream release 1.4.17
  * libxt_time: add support to ignore day transition
  * libxt_statistic: fix save output</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.18
  * documentation updates
- Create subpackage xtables-plugins, to aid packaging of xtadm
- Add 0001-build-do-not-dereference-symlinks-on-installation.patch
  as a prerequisite for:
- Add 0001-build-also-use-libtool-for-install-stage.patch
  to kill of undesired DT_RPATH entries</changelog>
<changelog author="cfarrell@suse.com" date="1363780800">- license update: GPL-2.0 and Artistic-2.0
  GPL version does not have ^or later^ due to inclusion of numerous GPL 2
  ^only^ files. Also, aggregation of Artistic-2.0 content</changelog>
<changelog author="jengelh@inai.de" date="1366027200">- libxt_state.so symlink was not installed (bnc#815182); fix by
  removing 0001-build-also-use-libtool-for-install-stage.patch,
  removing 0001-build-do-not-dereference-symlinks-on-installation.patch,
  adding 0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch,
  adding 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch</changelog>
<changelog author="jengelh@inai.de" date="1370001600">- Update to new upstream release 1.4.19.1
  * New connlabel and bpf matches
- Remove 0001-Revert-build-resolve-link-failure-for-ip6t_NETMAP.patch,
  0001-libip6t_NETMAP-Use-xtables_ip6mask_to_cidr-and-get-r.patch
  (are upstream)</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.20
  * Introduce a new revision for the set match with the counters support
  * Add locking to prevent concurrent instances</changelog>
<changelog author="jengelh@inai.de" date="1385208000">- Update to new upstream release 1.4.21
  * --nowildcard option for xt_socket, available since Linux kernel 3.11
  * SYNPROXY support, available since Linux kernel 3.12</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- remove dependency on sgmltool: doesn't seem to be used
  and reduces rebuild time on aarch64 by 8 hours</changelog>
<changelog author="matthias.gerstner@suse.com" date="1498737600">- iptables-batch-lock.patch: fix a locking issue of iptables-batch which can
  cause it to spuriously fail when other programs modify the iptables rules in
  parallel (bnc#1045130).  This can especially affect SuSEfirewall2 during
  startup.</changelog>

</package>
<package pkgid="893637b20afdc985f1bf8cf59bf8fd666edf2636b8c954e07e92b0cab1e86b3c" name="libzip" arch="src">
    <version epoch="0" ver="0.11.1" rel="9.1"/>

<changelog author="judas_iscariote@shorewall.net" date="1181217600">- update to stable 0.8 version</changelog>
<changelog author="crrodriguez@suse.de" date="1207224000">- initial version for openSUSE 11, needed by ARK/KDE4</changelog>
<changelog author="crrodriguez@suse.de" date="1217160000">- update to version 0.9
  * remove erroneous references to GPL
  * add support for torrentzip
  * new functions: zip_get_archive_flag, zip_set_archive_flag
  * zip_source_zip: add flag to force recompression
  * zip_sorce_file: only keep file open while reading from it</changelog>
<changelog author="mvyskocil@suse.cz" date="1300708800">- update to 0.10 - rename to libzip to avoid source package rename on
  each soname change. Package libzip deprecate libzip-utils
  * add zip_get_num_files(), deprecate zip_get_num_entries().
  * support for traditional PKWARE encryption added.
  * fix opening archives with more than 65535 entries.
  * fix some memory leaks.
  * fix cmake build and installation
  * fix memory leak in error case in zip_open()
  * fix CVE-2011-0421 (no security implications though) (bnc#681193)
  * more documentation.
- refresh libzip-0.8.hg20080403-visibility.patch
- add libzip.test.diff from upstream fixing failed tests
- add libzip-0.10-zipconf-location.patch installs zipconf.h to includedir
- add pkg-config to BuildRequires</changelog>
<changelog author="mvyskocil@suse.cz" date="1300795200">- don't move zipconf.h to include dir</changelog>
<changelog author="coolo@novell.com" date="1300795201">- fix -devel dependency</changelog>
<changelog author="andrea@opensuse.org" date="1311595200">- restore zipconf.h into include dir or packages using zip.h
  will fail to build</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="crrodriguez@opensuse.org" date="1325160000">- Use O_CLOEXEC where needed, as calling applications
  may fork.. execve and we end up leaking internal fds.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="pgajdos@suse.com" date="1332244800">- updated to 0.10.1: fixes
  * CVE-2012-1162 [bnc#751829]
  * CVE-2012-1163 [bnc#751830]</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Specify exact build requirements on autotools
  (2.68 comes from patch; tarball has 2.57)</changelog>
<changelog author="mvyskocil@suse.com" date="1367236800">- update to 0.11.1
  * Fix bugs in zip_set_file_compression().
  * Added Zip64 support (large file support)
  * Added UTF-8 support for file names, file comments, and archive comments
  * Changed API for name and comment related functions for UTF-8 support
  * Added zip_discard()
  * Added ZIP_TRUNCATE for zip_open()
  * Added zip_set_file_compression()
  * Added API for accessing and modifying extra fields
  * Improved API type consistency
  * Use gcc4's visibility __attribute__
  * More changes for Windows support
  * Additional test cases
- split the automake part from ocloexec patch to
  libzip-autoconf-268.patch
- drop already upstream libzip.test.diff
- make tests non-fail, until issue will be solved upstream</changelog>
<changelog author="mvyskocil@suse.com" date="1367236801">- make test failure fatal again and add needed
  timezone and unzip build dependencies</changelog>
<changelog author="mvyskocil@suse.com" date="1367841600">- use upstream patch for visibility
  drop: libzip-0.8.hg20080403-visibility.patch
  add : libzip-visibility.diff
- tag all patches according a policy</changelog>
<changelog author="pgajdos@suse.com" date="1426852800">- fix CVE-2015-2331 [bnc#923240]
  + libzip-CVE-2015-2331.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- add baselibs.conf [bnc#949461]</changelog>
<changelog author="pgajdos@suse.com" date="1453464000">- fix segfault when opening invalid zip file [bsc#963071]
  + libzip-segfault-invalid-zip.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504699200">- fix CVE-2017-14107 [bsc#1056996]
  + libzip-CVE-2017-14107.patch</changelog>

</package>
<package pkgid="3137dbf2be71628f16caffd35d78d12f7a5cf19752c462b619fb327a038b51ba" name="libzip" arch="x86_64">
    <version epoch="0" ver="0.11.1" rel="9.1"/>

<changelog author="mvyskocil@suse.cz" date="1300708800">- update to 0.10 - rename to libzip to avoid source package rename on
  each soname change. Package libzip deprecate libzip-utils
  * add zip_get_num_files(), deprecate zip_get_num_entries().
  * support for traditional PKWARE encryption added.
  * fix opening archives with more than 65535 entries.
  * fix some memory leaks.
  * fix cmake build and installation
  * fix memory leak in error case in zip_open()
  * fix CVE-2011-0421 (no security implications though) (bnc#681193)
  * more documentation.
- refresh libzip-0.8.hg20080403-visibility.patch
- add libzip.test.diff from upstream fixing failed tests
- add libzip-0.10-zipconf-location.patch installs zipconf.h to includedir
- add pkg-config to BuildRequires</changelog>
<changelog author="mvyskocil@suse.cz" date="1300795200">- don't move zipconf.h to include dir</changelog>
<changelog author="coolo@novell.com" date="1300795201">- fix -devel dependency</changelog>
<changelog author="andrea@opensuse.org" date="1311595200">- restore zipconf.h into include dir or packages using zip.h
  will fail to build</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="crrodriguez@opensuse.org" date="1325160000">- Use O_CLOEXEC where needed, as calling applications
  may fork.. execve and we end up leaking internal fds.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="pgajdos@suse.com" date="1332244800">- updated to 0.10.1: fixes
  * CVE-2012-1162 [bnc#751829]
  * CVE-2012-1163 [bnc#751830]</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Specify exact build requirements on autotools
  (2.68 comes from patch; tarball has 2.57)</changelog>
<changelog author="mvyskocil@suse.com" date="1367236800">- update to 0.11.1
  * Fix bugs in zip_set_file_compression().
  * Added Zip64 support (large file support)
  * Added UTF-8 support for file names, file comments, and archive comments
  * Changed API for name and comment related functions for UTF-8 support
  * Added zip_discard()
  * Added ZIP_TRUNCATE for zip_open()
  * Added zip_set_file_compression()
  * Added API for accessing and modifying extra fields
  * Improved API type consistency
  * Use gcc4's visibility __attribute__
  * More changes for Windows support
  * Additional test cases
- split the automake part from ocloexec patch to
  libzip-autoconf-268.patch
- drop already upstream libzip.test.diff
- make tests non-fail, until issue will be solved upstream</changelog>
<changelog author="mvyskocil@suse.com" date="1367236801">- make test failure fatal again and add needed
  timezone and unzip build dependencies</changelog>
<changelog author="mvyskocil@suse.com" date="1367841600">- use upstream patch for visibility
  drop: libzip-0.8.hg20080403-visibility.patch
  add : libzip-visibility.diff
- tag all patches according a policy</changelog>
<changelog author="pgajdos@suse.com" date="1426852800">- fix CVE-2015-2331 [bnc#923240]
  + libzip-CVE-2015-2331.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- add baselibs.conf [bnc#949461]</changelog>
<changelog author="pgajdos@suse.com" date="1453464000">- fix segfault when opening invalid zip file [bsc#963071]
  + libzip-segfault-invalid-zip.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504699200">- fix CVE-2017-14107 [bsc#1056996]
  + libzip-CVE-2017-14107.patch</changelog>

</package>
<package pkgid="1aafcebdaa2a7da852251ed997786a1aab06932dcfdf0b7af7da201926c5d423" name="libzip-devel" arch="x86_64">
    <version epoch="0" ver="0.11.1" rel="9.1"/>

<changelog author="mvyskocil@suse.cz" date="1300708800">- update to 0.10 - rename to libzip to avoid source package rename on
  each soname change. Package libzip deprecate libzip-utils
  * add zip_get_num_files(), deprecate zip_get_num_entries().
  * support for traditional PKWARE encryption added.
  * fix opening archives with more than 65535 entries.
  * fix some memory leaks.
  * fix cmake build and installation
  * fix memory leak in error case in zip_open()
  * fix CVE-2011-0421 (no security implications though) (bnc#681193)
  * more documentation.
- refresh libzip-0.8.hg20080403-visibility.patch
- add libzip.test.diff from upstream fixing failed tests
- add libzip-0.10-zipconf-location.patch installs zipconf.h to includedir
- add pkg-config to BuildRequires</changelog>
<changelog author="mvyskocil@suse.cz" date="1300795200">- don't move zipconf.h to include dir</changelog>
<changelog author="coolo@novell.com" date="1300795201">- fix -devel dependency</changelog>
<changelog author="andrea@opensuse.org" date="1311595200">- restore zipconf.h into include dir or packages using zip.h
  will fail to build</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="crrodriguez@opensuse.org" date="1325160000">- Use O_CLOEXEC where needed, as calling applications
  may fork.. execve and we end up leaking internal fds.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="pgajdos@suse.com" date="1332244800">- updated to 0.10.1: fixes
  * CVE-2012-1162 [bnc#751829]
  * CVE-2012-1163 [bnc#751830]</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Specify exact build requirements on autotools
  (2.68 comes from patch; tarball has 2.57)</changelog>
<changelog author="mvyskocil@suse.com" date="1367236800">- update to 0.11.1
  * Fix bugs in zip_set_file_compression().
  * Added Zip64 support (large file support)
  * Added UTF-8 support for file names, file comments, and archive comments
  * Changed API for name and comment related functions for UTF-8 support
  * Added zip_discard()
  * Added ZIP_TRUNCATE for zip_open()
  * Added zip_set_file_compression()
  * Added API for accessing and modifying extra fields
  * Improved API type consistency
  * Use gcc4's visibility __attribute__
  * More changes for Windows support
  * Additional test cases
- split the automake part from ocloexec patch to
  libzip-autoconf-268.patch
- drop already upstream libzip.test.diff
- make tests non-fail, until issue will be solved upstream</changelog>
<changelog author="mvyskocil@suse.com" date="1367236801">- make test failure fatal again and add needed
  timezone and unzip build dependencies</changelog>
<changelog author="mvyskocil@suse.com" date="1367841600">- use upstream patch for visibility
  drop: libzip-0.8.hg20080403-visibility.patch
  add : libzip-visibility.diff
- tag all patches according a policy</changelog>
<changelog author="pgajdos@suse.com" date="1426852800">- fix CVE-2015-2331 [bnc#923240]
  + libzip-CVE-2015-2331.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- add baselibs.conf [bnc#949461]</changelog>
<changelog author="pgajdos@suse.com" date="1453464000">- fix segfault when opening invalid zip file [bsc#963071]
  + libzip-segfault-invalid-zip.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504699200">- fix CVE-2017-14107 [bsc#1056996]
  + libzip-CVE-2017-14107.patch</changelog>

</package>
<package pkgid="e8b8ba1226b856ec96b4a968955b6225d9b940f05c2909ab7e75ef276b33baf0" name="libzip2" arch="x86_64">
    <version epoch="0" ver="0.11.1" rel="9.1"/>

<changelog author="mvyskocil@suse.cz" date="1300708800">- update to 0.10 - rename to libzip to avoid source package rename on
  each soname change. Package libzip deprecate libzip-utils
  * add zip_get_num_files(), deprecate zip_get_num_entries().
  * support for traditional PKWARE encryption added.
  * fix opening archives with more than 65535 entries.
  * fix some memory leaks.
  * fix cmake build and installation
  * fix memory leak in error case in zip_open()
  * fix CVE-2011-0421 (no security implications though) (bnc#681193)
  * more documentation.
- refresh libzip-0.8.hg20080403-visibility.patch
- add libzip.test.diff from upstream fixing failed tests
- add libzip-0.10-zipconf-location.patch installs zipconf.h to includedir
- add pkg-config to BuildRequires</changelog>
<changelog author="mvyskocil@suse.cz" date="1300795200">- don't move zipconf.h to include dir</changelog>
<changelog author="coolo@novell.com" date="1300795201">- fix -devel dependency</changelog>
<changelog author="andrea@opensuse.org" date="1311595200">- restore zipconf.h into include dir or packages using zip.h
  will fail to build</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="crrodriguez@opensuse.org" date="1325160000">- Use O_CLOEXEC where needed, as calling applications
  may fork.. execve and we end up leaking internal fds.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="pgajdos@suse.com" date="1332244800">- updated to 0.10.1: fixes
  * CVE-2012-1162 [bnc#751829]
  * CVE-2012-1163 [bnc#751830]</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Specify exact build requirements on autotools
  (2.68 comes from patch; tarball has 2.57)</changelog>
<changelog author="mvyskocil@suse.com" date="1367236800">- update to 0.11.1
  * Fix bugs in zip_set_file_compression().
  * Added Zip64 support (large file support)
  * Added UTF-8 support for file names, file comments, and archive comments
  * Changed API for name and comment related functions for UTF-8 support
  * Added zip_discard()
  * Added ZIP_TRUNCATE for zip_open()
  * Added zip_set_file_compression()
  * Added API for accessing and modifying extra fields
  * Improved API type consistency
  * Use gcc4's visibility __attribute__
  * More changes for Windows support
  * Additional test cases
- split the automake part from ocloexec patch to
  libzip-autoconf-268.patch
- drop already upstream libzip.test.diff
- make tests non-fail, until issue will be solved upstream</changelog>
<changelog author="mvyskocil@suse.com" date="1367236801">- make test failure fatal again and add needed
  timezone and unzip build dependencies</changelog>
<changelog author="mvyskocil@suse.com" date="1367841600">- use upstream patch for visibility
  drop: libzip-0.8.hg20080403-visibility.patch
  add : libzip-visibility.diff
- tag all patches according a policy</changelog>
<changelog author="pgajdos@suse.com" date="1426852800">- fix CVE-2015-2331 [bnc#923240]
  + libzip-CVE-2015-2331.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- add baselibs.conf [bnc#949461]</changelog>
<changelog author="pgajdos@suse.com" date="1453464000">- fix segfault when opening invalid zip file [bsc#963071]
  + libzip-segfault-invalid-zip.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504699200">- fix CVE-2017-14107 [bsc#1056996]
  + libzip-CVE-2017-14107.patch</changelog>

</package>
<package pkgid="cdd24db7fd0c19ad362e761d8a285de542ab837697e11a6b8d4cae308aaefe1d" name="libzip2-32bit" arch="x86_64">
    <version epoch="0" ver="0.11.1" rel="9.1"/>

<changelog author="mvyskocil@suse.cz" date="1300708800">- update to 0.10 - rename to libzip to avoid source package rename on
  each soname change. Package libzip deprecate libzip-utils
  * add zip_get_num_files(), deprecate zip_get_num_entries().
  * support for traditional PKWARE encryption added.
  * fix opening archives with more than 65535 entries.
  * fix some memory leaks.
  * fix cmake build and installation
  * fix memory leak in error case in zip_open()
  * fix CVE-2011-0421 (no security implications though) (bnc#681193)
  * more documentation.
- refresh libzip-0.8.hg20080403-visibility.patch
- add libzip.test.diff from upstream fixing failed tests
- add libzip-0.10-zipconf-location.patch installs zipconf.h to includedir
- add pkg-config to BuildRequires</changelog>
<changelog author="mvyskocil@suse.cz" date="1300795200">- don't move zipconf.h to include dir</changelog>
<changelog author="coolo@novell.com" date="1300795201">- fix -devel dependency</changelog>
<changelog author="andrea@opensuse.org" date="1311595200">- restore zipconf.h into include dir or packages using zip.h
  will fail to build</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="crrodriguez@opensuse.org" date="1325160000">- Use O_CLOEXEC where needed, as calling applications
  may fork.. execve and we end up leaking internal fds.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="pgajdos@suse.com" date="1332244800">- updated to 0.10.1: fixes
  * CVE-2012-1162 [bnc#751829]
  * CVE-2012-1163 [bnc#751830]</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Specify exact build requirements on autotools
  (2.68 comes from patch; tarball has 2.57)</changelog>
<changelog author="mvyskocil@suse.com" date="1367236800">- update to 0.11.1
  * Fix bugs in zip_set_file_compression().
  * Added Zip64 support (large file support)
  * Added UTF-8 support for file names, file comments, and archive comments
  * Changed API for name and comment related functions for UTF-8 support
  * Added zip_discard()
  * Added ZIP_TRUNCATE for zip_open()
  * Added zip_set_file_compression()
  * Added API for accessing and modifying extra fields
  * Improved API type consistency
  * Use gcc4's visibility __attribute__
  * More changes for Windows support
  * Additional test cases
- split the automake part from ocloexec patch to
  libzip-autoconf-268.patch
- drop already upstream libzip.test.diff
- make tests non-fail, until issue will be solved upstream</changelog>
<changelog author="mvyskocil@suse.com" date="1367236801">- make test failure fatal again and add needed
  timezone and unzip build dependencies</changelog>
<changelog author="mvyskocil@suse.com" date="1367841600">- use upstream patch for visibility
  drop: libzip-0.8.hg20080403-visibility.patch
  add : libzip-visibility.diff
- tag all patches according a policy</changelog>
<changelog author="pgajdos@suse.com" date="1426852800">- fix CVE-2015-2331 [bnc#923240]
  + libzip-CVE-2015-2331.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- add baselibs.conf [bnc#949461]</changelog>
<changelog author="pgajdos@suse.com" date="1453464000">- fix segfault when opening invalid zip file [bsc#963071]
  + libzip-segfault-invalid-zip.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504699200">- fix CVE-2017-14107 [bsc#1056996]
  + libzip-CVE-2017-14107.patch</changelog>

</package>
<package pkgid="0e705d4de286f028ce366783b39e4585184e11b491f5bcce9642eb5de0392e43" name="libzypp" arch="src">
    <version epoch="0" ver="16.15.3" rel="9.1"/>

<changelog author="ma@suse.de" date="1486123200">- MediaMultiCurl: Trigger aliveCallback when downloading metalink
  files (bsc#1021291)
- version 16.4.1 (0)</changelog>
<changelog author="ma@suse.de" date="1487073600">- dumpAsXmlOnL: xml escape node content (bsc#1024909)
- version 16.4.2 (0)</changelog>
<changelog author="ma@suse.de" date="1487592000">- PublicKey: Create tmpdirs inside ZYpp::tmpPath (bsc#926844)
- Don't create AnonymousUniqueId in chroot (bsc#1024741)
- version 16.4.3 (0)</changelog>
<changelog author="ma@suse.de" date="1489665600">- Support multi-volume repomd repositories (FATE#320544)
- MediaCurl: ZYPP_MEDIA_CURL_IPRESOLVE=&lt;4|6&gt; to force name resolution
  to IPv4/IPv6 only (fixes openSUSE/zypper#49)
- Add support for openssl &gt;= 1.1
- version 16.5.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490097600">- MediaCurl: Treat http response 410(Gone) like 404(Not Found)
  (bsc#1030136)
- version 16.5.1 (0)</changelog>
<changelog author="ma@suse.de" date="1490616000">- Fix X-libcurl-Empty-Header-Workaround (bsc#1030919)
- version 16.5.2 (0)</changelog>
<changelog author="ma@suse.de" date="1490616001">- Fix invalidation of PoolItems if Pool IDs are reused (bsc#1028661)
- version 16.6.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490875200">- Recognize license tarball in rpmmd repos (FATE#316159)
- Fix media verification to properly propagate media access errors
  (bsc#1031093)
- version 16.6.1 (0)</changelog>
<changelog author="ma@suse.de" date="1492776000">- RepoInfo: Allow temporary repos to control their metadata
  directories (bsc#1032632)
- Arch: add armv5tl
- version 16.7.0 (0)</changelog>
<changelog author="ma@suse.de" date="1492776001">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>

</package>
<package pkgid="979e244273cf950cf27829aacba44813dd2bcfb1a3fdfb68bff87afbccc84736" name="libzypp" arch="src">
    <version epoch="0" ver="16.15.6" rel="12.1"/>

<changelog author="ma@suse.de" date="1489665600">- Support multi-volume repomd repositories (FATE#320544)
- MediaCurl: ZYPP_MEDIA_CURL_IPRESOLVE=&lt;4|6&gt; to force name resolution
  to IPv4/IPv6 only (fixes openSUSE/zypper#49)
- Add support for openssl &gt;= 1.1
- version 16.5.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490097600">- MediaCurl: Treat http response 410(Gone) like 404(Not Found)
  (bsc#1030136)
- version 16.5.1 (0)</changelog>
<changelog author="ma@suse.de" date="1490616000">- Fix X-libcurl-Empty-Header-Workaround (bsc#1030919)
- version 16.5.2 (0)</changelog>
<changelog author="ma@suse.de" date="1490616001">- Fix invalidation of PoolItems if Pool IDs are reused (bsc#1028661)
- version 16.6.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490875200">- Recognize license tarball in rpmmd repos (FATE#316159)
- Fix media verification to properly propagate media access errors
  (bsc#1031093)
- version 16.6.1 (0)</changelog>
<changelog author="ma@suse.de" date="1492776000">- RepoInfo: Allow temporary repos to control their metadata
  directories (bsc#1032632)
- Arch: add armv5tl
- version 16.7.0 (0)</changelog>
<changelog author="ma@suse.de" date="1492776001">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>
<changelog author="ma@suse.de" date="1503662400">- verifyFileSignature: Support signing with subkeys (bsc#1008325)
- PublicKey: Scan and provide subkey information.
- Enhance sort order for media.1/products (bsc#1054671)
- Drop detection and support for rpm-4.4 (fixes #77)
- version 16.15.4 (0)</changelog>
<changelog author="ma@suse.de" date="1503662401">- Adapt to work with GnuPG 2.1.23 (bsc#1054088)
- version 16.15.5 (0)</changelog>
<changelog author="ma@suse.de" date="1503921600">- Add testcase to compile (bsc#1055920)
- version 16.15.6 (0)</changelog>

</package>
<package pkgid="cd81fff2171cc0fb8487184dac490f42f3fcd3a4345af77d918b7c82015684a1" name="libzypp" arch="src">
    <version epoch="0" ver="16.17.4" rel="15.1"/>

<changelog author="ma@suse.de" date="1492776000">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>
<changelog author="ma@suse.de" date="1503662400">- verifyFileSignature: Support signing with subkeys (bsc#1008325)
- PublicKey: Scan and provide subkey information.
- Enhance sort order for media.1/products (bsc#1054671)
- Drop detection and support for rpm-4.4 (fixes #77)
- version 16.15.4 (0)</changelog>
<changelog author="ma@suse.de" date="1503662401">- Adapt to work with GnuPG 2.1.23 (bsc#1054088)
- version 16.15.5 (0)</changelog>
<changelog author="ma@suse.de" date="1503921600">- Add testcase to compile (bsc#1055920)
- version 16.15.6 (0)</changelog>
<changelog author="ma@suse.de" date="1504785600">- Propagate 'rpm --import' errors (bsc#1057188)
- Fix typos in zypp.conf
- version 16.16.0 (0)</changelog>
<changelog author="ma@suse.de" date="1504872000">- Support multiple product licenses in repomd (FATE#322276)
- version 16.17.0 (0)</changelog>
<changelog author="ma@suse.de" date="1506081600">- Default to 'solver.dupAllowVendorChange = false' on SLE15
  (FATE#323478)
- Remove unused legacy notify-message script (bsc#1058783)
- version 16.17.1 (0)</changelog>
<changelog author="ma@suse.de" date="1507723200">- Fix RepoProvideFile ignoring a repo path prefix (bsc#1062561)
- version 16.17.2 (0)</changelog>
<changelog author="ma@suse.de" date="1507809600">- Fix media handling in presence of a repo path prefix (bsc#1062561)
- version 16.17.3 (0)</changelog>
<changelog author="ma@suse.de" date="1509710400">- Locale: Fix possible segfault (bsc#1064999)
- version 16.17.4 (0)</changelog>

</package>
<package pkgid="905a5ada583f38d6e5c55f17a94948d2c38d57dd29399fce831f67cee92dab12" name="libzypp" arch="x86_64">
    <version epoch="0" ver="16.15.3" rel="9.1"/>

<changelog author="ma@suse.de" date="1486123200">- MediaMultiCurl: Trigger aliveCallback when downloading metalink
  files (bsc#1021291)
- version 16.4.1 (0)</changelog>
<changelog author="ma@suse.de" date="1487073600">- dumpAsXmlOnL: xml escape node content (bsc#1024909)
- version 16.4.2 (0)</changelog>
<changelog author="ma@suse.de" date="1487592000">- PublicKey: Create tmpdirs inside ZYpp::tmpPath (bsc#926844)
- Don't create AnonymousUniqueId in chroot (bsc#1024741)
- version 16.4.3 (0)</changelog>
<changelog author="ma@suse.de" date="1489665600">- Support multi-volume repomd repositories (FATE#320544)
- MediaCurl: ZYPP_MEDIA_CURL_IPRESOLVE=&lt;4|6&gt; to force name resolution
  to IPv4/IPv6 only (fixes openSUSE/zypper#49)
- Add support for openssl &gt;= 1.1
- version 16.5.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490097600">- MediaCurl: Treat http response 410(Gone) like 404(Not Found)
  (bsc#1030136)
- version 16.5.1 (0)</changelog>
<changelog author="ma@suse.de" date="1490616000">- Fix X-libcurl-Empty-Header-Workaround (bsc#1030919)
- version 16.5.2 (0)</changelog>
<changelog author="ma@suse.de" date="1490616001">- Fix invalidation of PoolItems if Pool IDs are reused (bsc#1028661)
- version 16.6.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490875200">- Recognize license tarball in rpmmd repos (FATE#316159)
- Fix media verification to properly propagate media access errors
  (bsc#1031093)
- version 16.6.1 (0)</changelog>
<changelog author="ma@suse.de" date="1492776000">- RepoInfo: Allow temporary repos to control their metadata
  directories (bsc#1032632)
- Arch: add armv5tl
- version 16.7.0 (0)</changelog>
<changelog author="ma@suse.de" date="1492776001">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>

</package>
<package pkgid="25f3f35f8f869f2f0276b77bf37ccc8d76143070774af42c89ce411b4d5eb89b" name="libzypp" arch="x86_64">
    <version epoch="0" ver="16.15.6" rel="12.1"/>

<changelog author="ma@suse.de" date="1489665600">- Support multi-volume repomd repositories (FATE#320544)
- MediaCurl: ZYPP_MEDIA_CURL_IPRESOLVE=&lt;4|6&gt; to force name resolution
  to IPv4/IPv6 only (fixes openSUSE/zypper#49)
- Add support for openssl &gt;= 1.1
- version 16.5.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490097600">- MediaCurl: Treat http response 410(Gone) like 404(Not Found)
  (bsc#1030136)
- version 16.5.1 (0)</changelog>
<changelog author="ma@suse.de" date="1490616000">- Fix X-libcurl-Empty-Header-Workaround (bsc#1030919)
- version 16.5.2 (0)</changelog>
<changelog author="ma@suse.de" date="1490616001">- Fix invalidation of PoolItems if Pool IDs are reused (bsc#1028661)
- version 16.6.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490875200">- Recognize license tarball in rpmmd repos (FATE#316159)
- Fix media verification to properly propagate media access errors
  (bsc#1031093)
- version 16.6.1 (0)</changelog>
<changelog author="ma@suse.de" date="1492776000">- RepoInfo: Allow temporary repos to control their metadata
  directories (bsc#1032632)
- Arch: add armv5tl
- version 16.7.0 (0)</changelog>
<changelog author="ma@suse.de" date="1492776001">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>
<changelog author="ma@suse.de" date="1503662400">- verifyFileSignature: Support signing with subkeys (bsc#1008325)
- PublicKey: Scan and provide subkey information.
- Enhance sort order for media.1/products (bsc#1054671)
- Drop detection and support for rpm-4.4 (fixes #77)
- version 16.15.4 (0)</changelog>
<changelog author="ma@suse.de" date="1503662401">- Adapt to work with GnuPG 2.1.23 (bsc#1054088)
- version 16.15.5 (0)</changelog>
<changelog author="ma@suse.de" date="1503921600">- Add testcase to compile (bsc#1055920)
- version 16.15.6 (0)</changelog>

</package>
<package pkgid="a38344d50fa209b2202a8c84dfee2751da42d66c8da494a4896a579fc386af5b" name="libzypp" arch="x86_64">
    <version epoch="0" ver="16.17.4" rel="15.1"/>

<changelog author="ma@suse.de" date="1492776000">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>
<changelog author="ma@suse.de" date="1503662400">- verifyFileSignature: Support signing with subkeys (bsc#1008325)
- PublicKey: Scan and provide subkey information.
- Enhance sort order for media.1/products (bsc#1054671)
- Drop detection and support for rpm-4.4 (fixes #77)
- version 16.15.4 (0)</changelog>
<changelog author="ma@suse.de" date="1503662401">- Adapt to work with GnuPG 2.1.23 (bsc#1054088)
- version 16.15.5 (0)</changelog>
<changelog author="ma@suse.de" date="1503921600">- Add testcase to compile (bsc#1055920)
- version 16.15.6 (0)</changelog>
<changelog author="ma@suse.de" date="1504785600">- Propagate 'rpm --import' errors (bsc#1057188)
- Fix typos in zypp.conf
- version 16.16.0 (0)</changelog>
<changelog author="ma@suse.de" date="1504872000">- Support multiple product licenses in repomd (FATE#322276)
- version 16.17.0 (0)</changelog>
<changelog author="ma@suse.de" date="1506081600">- Default to 'solver.dupAllowVendorChange = false' on SLE15
  (FATE#323478)
- Remove unused legacy notify-message script (bsc#1058783)
- version 16.17.1 (0)</changelog>
<changelog author="ma@suse.de" date="1507723200">- Fix RepoProvideFile ignoring a repo path prefix (bsc#1062561)
- version 16.17.2 (0)</changelog>
<changelog author="ma@suse.de" date="1507809600">- Fix media handling in presence of a repo path prefix (bsc#1062561)
- version 16.17.3 (0)</changelog>
<changelog author="ma@suse.de" date="1509710400">- Locale: Fix possible segfault (bsc#1064999)
- version 16.17.4 (0)</changelog>

</package>
<package pkgid="b9c43f689059bd917f183784ac05720137874729aaee6905396dfc4adda626f3" name="libzypp-devel" arch="x86_64">
    <version epoch="0" ver="16.15.3" rel="9.1"/>

<changelog author="ma@suse.de" date="1486123200">- MediaMultiCurl: Trigger aliveCallback when downloading metalink
  files (bsc#1021291)
- version 16.4.1 (0)</changelog>
<changelog author="ma@suse.de" date="1487073600">- dumpAsXmlOnL: xml escape node content (bsc#1024909)
- version 16.4.2 (0)</changelog>
<changelog author="ma@suse.de" date="1487592000">- PublicKey: Create tmpdirs inside ZYpp::tmpPath (bsc#926844)
- Don't create AnonymousUniqueId in chroot (bsc#1024741)
- version 16.4.3 (0)</changelog>
<changelog author="ma@suse.de" date="1489665600">- Support multi-volume repomd repositories (FATE#320544)
- MediaCurl: ZYPP_MEDIA_CURL_IPRESOLVE=&lt;4|6&gt; to force name resolution
  to IPv4/IPv6 only (fixes openSUSE/zypper#49)
- Add support for openssl &gt;= 1.1
- version 16.5.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490097600">- MediaCurl: Treat http response 410(Gone) like 404(Not Found)
  (bsc#1030136)
- version 16.5.1 (0)</changelog>
<changelog author="ma@suse.de" date="1490616000">- Fix X-libcurl-Empty-Header-Workaround (bsc#1030919)
- version 16.5.2 (0)</changelog>
<changelog author="ma@suse.de" date="1490616001">- Fix invalidation of PoolItems if Pool IDs are reused (bsc#1028661)
- version 16.6.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490875200">- Recognize license tarball in rpmmd repos (FATE#316159)
- Fix media verification to properly propagate media access errors
  (bsc#1031093)
- version 16.6.1 (0)</changelog>
<changelog author="ma@suse.de" date="1492776000">- RepoInfo: Allow temporary repos to control their metadata
  directories (bsc#1032632)
- Arch: add armv5tl
- version 16.7.0 (0)</changelog>
<changelog author="ma@suse.de" date="1492776001">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>

</package>
<package pkgid="bfa2e2612265cbd9e4137e3188e64e0df4f79c7faa5b33816ff51a392d5b12f4" name="libzypp-devel" arch="x86_64">
    <version epoch="0" ver="16.15.6" rel="12.1"/>

<changelog author="ma@suse.de" date="1489665600">- Support multi-volume repomd repositories (FATE#320544)
- MediaCurl: ZYPP_MEDIA_CURL_IPRESOLVE=&lt;4|6&gt; to force name resolution
  to IPv4/IPv6 only (fixes openSUSE/zypper#49)
- Add support for openssl &gt;= 1.1
- version 16.5.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490097600">- MediaCurl: Treat http response 410(Gone) like 404(Not Found)
  (bsc#1030136)
- version 16.5.1 (0)</changelog>
<changelog author="ma@suse.de" date="1490616000">- Fix X-libcurl-Empty-Header-Workaround (bsc#1030919)
- version 16.5.2 (0)</changelog>
<changelog author="ma@suse.de" date="1490616001">- Fix invalidation of PoolItems if Pool IDs are reused (bsc#1028661)
- version 16.6.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490875200">- Recognize license tarball in rpmmd repos (FATE#316159)
- Fix media verification to properly propagate media access errors
  (bsc#1031093)
- version 16.6.1 (0)</changelog>
<changelog author="ma@suse.de" date="1492776000">- RepoInfo: Allow temporary repos to control their metadata
  directories (bsc#1032632)
- Arch: add armv5tl
- version 16.7.0 (0)</changelog>
<changelog author="ma@suse.de" date="1492776001">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>
<changelog author="ma@suse.de" date="1503662400">- verifyFileSignature: Support signing with subkeys (bsc#1008325)
- PublicKey: Scan and provide subkey information.
- Enhance sort order for media.1/products (bsc#1054671)
- Drop detection and support for rpm-4.4 (fixes #77)
- version 16.15.4 (0)</changelog>
<changelog author="ma@suse.de" date="1503662401">- Adapt to work with GnuPG 2.1.23 (bsc#1054088)
- version 16.15.5 (0)</changelog>
<changelog author="ma@suse.de" date="1503921600">- Add testcase to compile (bsc#1055920)
- version 16.15.6 (0)</changelog>

</package>
<package pkgid="040ff664c1dd57ade296422142265c70a87436d3963259ccb90bf29cc385ef09" name="libzypp-devel" arch="x86_64">
    <version epoch="0" ver="16.17.4" rel="15.1"/>

<changelog author="ma@suse.de" date="1492776000">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>
<changelog author="ma@suse.de" date="1503662400">- verifyFileSignature: Support signing with subkeys (bsc#1008325)
- PublicKey: Scan and provide subkey information.
- Enhance sort order for media.1/products (bsc#1054671)
- Drop detection and support for rpm-4.4 (fixes #77)
- version 16.15.4 (0)</changelog>
<changelog author="ma@suse.de" date="1503662401">- Adapt to work with GnuPG 2.1.23 (bsc#1054088)
- version 16.15.5 (0)</changelog>
<changelog author="ma@suse.de" date="1503921600">- Add testcase to compile (bsc#1055920)
- version 16.15.6 (0)</changelog>
<changelog author="ma@suse.de" date="1504785600">- Propagate 'rpm --import' errors (bsc#1057188)
- Fix typos in zypp.conf
- version 16.16.0 (0)</changelog>
<changelog author="ma@suse.de" date="1504872000">- Support multiple product licenses in repomd (FATE#322276)
- version 16.17.0 (0)</changelog>
<changelog author="ma@suse.de" date="1506081600">- Default to 'solver.dupAllowVendorChange = false' on SLE15
  (FATE#323478)
- Remove unused legacy notify-message script (bsc#1058783)
- version 16.17.1 (0)</changelog>
<changelog author="ma@suse.de" date="1507723200">- Fix RepoProvideFile ignoring a repo path prefix (bsc#1062561)
- version 16.17.2 (0)</changelog>
<changelog author="ma@suse.de" date="1507809600">- Fix media handling in presence of a repo path prefix (bsc#1062561)
- version 16.17.3 (0)</changelog>
<changelog author="ma@suse.de" date="1509710400">- Locale: Fix possible segfault (bsc#1064999)
- version 16.17.4 (0)</changelog>

</package>
<package pkgid="eb37b1f431c7dafea7a5463fa026fefb8818581e289d7105c6926494bbf0b788" name="libzypp-devel-doc" arch="x86_64">
    <version epoch="0" ver="16.15.3" rel="9.1"/>

<changelog author="ma@suse.de" date="1486123200">- MediaMultiCurl: Trigger aliveCallback when downloading metalink
  files (bsc#1021291)
- version 16.4.1 (0)</changelog>
<changelog author="ma@suse.de" date="1487073600">- dumpAsXmlOnL: xml escape node content (bsc#1024909)
- version 16.4.2 (0)</changelog>
<changelog author="ma@suse.de" date="1487592000">- PublicKey: Create tmpdirs inside ZYpp::tmpPath (bsc#926844)
- Don't create AnonymousUniqueId in chroot (bsc#1024741)
- version 16.4.3 (0)</changelog>
<changelog author="ma@suse.de" date="1489665600">- Support multi-volume repomd repositories (FATE#320544)
- MediaCurl: ZYPP_MEDIA_CURL_IPRESOLVE=&lt;4|6&gt; to force name resolution
  to IPv4/IPv6 only (fixes openSUSE/zypper#49)
- Add support for openssl &gt;= 1.1
- version 16.5.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490097600">- MediaCurl: Treat http response 410(Gone) like 404(Not Found)
  (bsc#1030136)
- version 16.5.1 (0)</changelog>
<changelog author="ma@suse.de" date="1490616000">- Fix X-libcurl-Empty-Header-Workaround (bsc#1030919)
- version 16.5.2 (0)</changelog>
<changelog author="ma@suse.de" date="1490616001">- Fix invalidation of PoolItems if Pool IDs are reused (bsc#1028661)
- version 16.6.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490875200">- Recognize license tarball in rpmmd repos (FATE#316159)
- Fix media verification to properly propagate media access errors
  (bsc#1031093)
- version 16.6.1 (0)</changelog>
<changelog author="ma@suse.de" date="1492776000">- RepoInfo: Allow temporary repos to control their metadata
  directories (bsc#1032632)
- Arch: add armv5tl
- version 16.7.0 (0)</changelog>
<changelog author="ma@suse.de" date="1492776001">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>

</package>
<package pkgid="54df1fc87b7ad8a78974dd3a33f66458361a5e72ac84562464239871c11b0ab6" name="libzypp-devel-doc" arch="x86_64">
    <version epoch="0" ver="16.15.6" rel="12.1"/>

<changelog author="ma@suse.de" date="1489665600">- Support multi-volume repomd repositories (FATE#320544)
- MediaCurl: ZYPP_MEDIA_CURL_IPRESOLVE=&lt;4|6&gt; to force name resolution
  to IPv4/IPv6 only (fixes openSUSE/zypper#49)
- Add support for openssl &gt;= 1.1
- version 16.5.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490097600">- MediaCurl: Treat http response 410(Gone) like 404(Not Found)
  (bsc#1030136)
- version 16.5.1 (0)</changelog>
<changelog author="ma@suse.de" date="1490616000">- Fix X-libcurl-Empty-Header-Workaround (bsc#1030919)
- version 16.5.2 (0)</changelog>
<changelog author="ma@suse.de" date="1490616001">- Fix invalidation of PoolItems if Pool IDs are reused (bsc#1028661)
- version 16.6.0 (0)</changelog>
<changelog author="ma@suse.de" date="1490875200">- Recognize license tarball in rpmmd repos (FATE#316159)
- Fix media verification to properly propagate media access errors
  (bsc#1031093)
- version 16.6.1 (0)</changelog>
<changelog author="ma@suse.de" date="1492776000">- RepoInfo: Allow temporary repos to control their metadata
  directories (bsc#1032632)
- Arch: add armv5tl
- version 16.7.0 (0)</changelog>
<changelog author="ma@suse.de" date="1492776001">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>
<changelog author="ma@suse.de" date="1503662400">- verifyFileSignature: Support signing with subkeys (bsc#1008325)
- PublicKey: Scan and provide subkey information.
- Enhance sort order for media.1/products (bsc#1054671)
- Drop detection and support for rpm-4.4 (fixes #77)
- version 16.15.4 (0)</changelog>
<changelog author="ma@suse.de" date="1503662401">- Adapt to work with GnuPG 2.1.23 (bsc#1054088)
- version 16.15.5 (0)</changelog>
<changelog author="ma@suse.de" date="1503921600">- Add testcase to compile (bsc#1055920)
- version 16.15.6 (0)</changelog>

</package>
<package pkgid="25f3af4a3c4fbc1e90a7e689023ce0e05ad9ec667b46cdf0a20385fd0422f86a" name="libzypp-devel-doc" arch="x86_64">
    <version epoch="0" ver="16.17.4" rel="15.1"/>

<changelog author="ma@suse.de" date="1492776000">- Add API to control resolver job to update all packages (FATE#320653)
- Remove legacy vendor equivalence between 'suse' and 'opensuse'
  (bsc#1030686)
- version 16.8.0 (0)</changelog>
<changelog author="ma@suse.de" date="1493294400">- PoolQuery: Treat explicit queries for 'kind:name' correctly
  (bsc#1035729)
- version 16.9.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494504000">- Use a common workflow for downloading packages and srcpackages.
  This includes a common way of handling and reposrting gpg signature
  and checks. (bsc#1037210)
- PackageProvider: as well support downloading SrcPackage (for bsc#1037210)
- version 16.10.0 (0)</changelog>
<changelog author="ma@suse.de" date="1494590400">- add identIsAutoInstalled convenience methods
- make gcc6 happy
- version 16.11.0 (0)</changelog>
<changelog author="ma@suse.de" date="1496232000">- Testcase: add missing solver flags (bsc#1041889)
- version 16.12.0 (0)</changelog>
<changelog author="ma@suse.de" date="1498824000">- Adapt loop mounting of iso images (bsc#1038132, bsc#1033236)
- Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756)
- Change arch variable names conflicting with compiler macros (fixes #70)
- Fix potential crash if repo has no baseurl (bnc#1043218)
- version 16.13.0 (0)</changelog>
<changelog author="ma@suse.de" date="1499860800">- repo refresh: Re-probe if the repository type changes (bsc#1048315)
- MediaCurl: Propagate proper error code to DownloadProgressReport
  (bsc#1047785)
- Allow to trigger an appdata refresh unconditionally (bsc#1009745)
- Support custom repo variables defined in /etc/zypp/vars.d (fixes #68)
- rename: handle EXDEV error on OverlayFS
- version 16.14.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500292800">- PackageProvider: enforce a signed package if pkgGpgCheckIsMandatory
- Add RpmDb::checkPackageSignature to report unsigned packages
- Fix repo gpg check workflows, mainly for unsigned repos and packages
  (bsc#1045735, bsc#1038984, CVE-2017-7435, CVE-2017-7436, CVE-2017-9269)
- version 16.15.0 (0)</changelog>
<changelog author="ma@suse.de" date="1500379200">- Be sure bad packages do not stay in the cache
  (bsc#1045735, CVE-2017-9269)
- version 16.15.1 (0)</changelog>
<changelog author="ma@suse.de" date="1500638400">- Weaken fix for bsc#1038984 if 'gpgcheck=0' in libzypp-16.15.x only.
  This will allow some already released products to adapt to the
  behavioral changes introduced by fixing bsc#1038984, while systems
  with a default configuration (gpgcheck=1) already benefit from
  the fix in libzypp-16.15.x. For details see section
  'Signature checking' in /etc/zypp/zypp.conf.
- Fix gpg-pubkey release (creation time) computation (bsc#1036659)
- update lsof blacklist (bsc#1046417)
- version 16.15.2 (0)</changelog>
<changelog author="ma@suse.de" date="1502452800">- RepoInfo: add enum GpgCheck for convenient gpgcheck mode handling
  (bsc#1045735)
- Fix repo/pkg checks to follow explicitly defined gpgcheck in a
  .repo file
- version 16.15.3 (0)</changelog>
<changelog author="ma@suse.de" date="1503662400">- verifyFileSignature: Support signing with subkeys (bsc#1008325)
- PublicKey: Scan and provide subkey information.
- Enhance sort order for media.1/products (bsc#1054671)
- Drop detection and support for rpm-4.4 (fixes #77)
- version 16.15.4 (0)</changelog>
<changelog author="ma@suse.de" date="1503662401">- Adapt to work with GnuPG 2.1.23 (bsc#1054088)
- version 16.15.5 (0)</changelog>
<changelog author="ma@suse.de" date="1503921600">- Add testcase to compile (bsc#1055920)
- version 16.15.6 (0)</changelog>
<changelog author="ma@suse.de" date="1504785600">- Propagate 'rpm --import' errors (bsc#1057188)
- Fix typos in zypp.conf
- version 16.16.0 (0)</changelog>
<changelog author="ma@suse.de" date="1504872000">- Support multiple product licenses in repomd (FATE#322276)
- version 16.17.0 (0)</changelog>
<changelog author="ma@suse.de" date="1506081600">- Default to 'solver.dupAllowVendorChange = false' on SLE15
  (FATE#323478)
- Remove unused legacy notify-message script (bsc#1058783)
- version 16.17.1 (0)</changelog>
<changelog author="ma@suse.de" date="1507723200">- Fix RepoProvideFile ignoring a repo path prefix (bsc#1062561)
- version 16.17.2 (0)</changelog>
<changelog author="ma@suse.de" date="1507809600">- Fix media handling in presence of a repo path prefix (bsc#1062561)
- version 16.17.3 (0)</changelog>
<changelog author="ma@suse.de" date="1509710400">- Locale: Fix possible segfault (bsc#1064999)
- version 16.17.4 (0)</changelog>

</package>
<package pkgid="198978fbc0b719e8b8a715294e7a44974f890a17393ce3d5c8dd296898acaf24" name="lifecycle-data" arch="src">
    <version epoch="0" ver="1" rel="5.1"/>

<changelog author="lnussel@suse.de" date="1491998400">- initial package</changelog>
<changelog author="tchvatal@suse.com" date="1498824000">- Deprecate mysql-community-server bsc#1043328</changelog>
<changelog author="lnussel@suse.de" date="1499083200">- ruby 2.2 is dreprecated rather than 2.4
- add lxdm, shipped on Leap but deprecated</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Deprecate uClibc, it's unmaintained and has multiple security
  bugs bsc#1044858 bsc#1044859</changelog>
<changelog author="astieger@suse.com" date="1501761600">- boo#1052022: Ensure lifecycle-data-openSUSE is installed with
  zypper-lifecycle-plugin, move supplements() to correct subpackage</changelog>

</package>
<package pkgid="541423707b4997a5ebc181b81013c7b386b0352057858200db051dab568fb1db" name="lifecycle-data-openSUSE" arch="noarch">
    <version epoch="0" ver="1" rel="5.1"/>

<changelog author="lnussel@suse.de" date="1491998400">- initial package</changelog>
<changelog author="tchvatal@suse.com" date="1498824000">- Deprecate mysql-community-server bsc#1043328</changelog>
<changelog author="lnussel@suse.de" date="1499083200">- ruby 2.2 is dreprecated rather than 2.4
- add lxdm, shipped on Leap but deprecated</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Deprecate uClibc, it's unmaintained and has multiple security
  bugs bsc#1044858 bsc#1044859</changelog>
<changelog author="astieger@suse.com" date="1501761600">- boo#1052022: Ensure lifecycle-data-openSUSE is installed with
  zypper-lifecycle-plugin, move supplements() to correct subpackage</changelog>

</package>
<package pkgid="dcbe019b25133def95bfcca99ecdb1e2218369a48bea34b60da75f2c2fc6a3ba" name="lldpd" arch="src">
    <version epoch="0" ver="0.9.9" rel="2.1"/>

<changelog author="bernat@luffy.cx" date="1419940800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1428148800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1432123200">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1438948800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1441800000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1451217600">- New upstream version.
- Use system libnl3 when possible.
- Use system libevent when possible.</changelog>
<changelog author="bernat@luffy.cx" date="1451649600">- New upstream version.
- Do not rely on libnl3.</changelog>
<changelog author="bernat@luffy.cx" date="1455969600">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1458388800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1463832000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1466164800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1475236800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1485000000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1489924800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1503230400">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1511265600">- New upstream version.</changelog>
<changelog author="mardnh@gmx.de" date="1511352000">- Created lldpd.changes file (converted inline Changelog via
  spec2changelog)
- Specfile cleanup (removed all stuff that is not relevant for
  recent (open)SUSE versions.)</changelog>
<changelog author="mpluskal@suse.com" date="1511784000">- Clarify licensing and usage of some header files
- Enable support for libseccomp (disabled by default)
- Make buildign more verbose</changelog>
<changelog author="mpluskal@suse.com" date="1512388800">- Use fillupdir macro
- Enable libbsd
- Fix group for devel subpackage</changelog>
<changelog author="mpluskal@suse.com" date="1512993600">- Enable seccomp for Factory
- Adjust default sysconfig to enable other protocols and self
  advertisment
- Do not create user/grou starting with underscore (_lldpd)</changelog>

</package>
<package pkgid="3a106fe5a911456810a66f1531209a9861c73544e4ad31f0434c51f16d489786" name="lldpd" arch="x86_64">
    <version epoch="0" ver="0.9.9" rel="2.1"/>

<changelog author="bernat@luffy.cx" date="1419940800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1428148800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1432123200">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1438948800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1441800000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1451217600">- New upstream version.
- Use system libnl3 when possible.
- Use system libevent when possible.</changelog>
<changelog author="bernat@luffy.cx" date="1451649600">- New upstream version.
- Do not rely on libnl3.</changelog>
<changelog author="bernat@luffy.cx" date="1455969600">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1458388800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1463832000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1466164800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1475236800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1485000000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1489924800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1503230400">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1511265600">- New upstream version.</changelog>
<changelog author="mardnh@gmx.de" date="1511352000">- Created lldpd.changes file (converted inline Changelog via
  spec2changelog)
- Specfile cleanup (removed all stuff that is not relevant for
  recent (open)SUSE versions.)</changelog>
<changelog author="mpluskal@suse.com" date="1511784000">- Clarify licensing and usage of some header files
- Enable support for libseccomp (disabled by default)
- Make buildign more verbose</changelog>
<changelog author="mpluskal@suse.com" date="1512388800">- Use fillupdir macro
- Enable libbsd
- Fix group for devel subpackage</changelog>
<changelog author="mpluskal@suse.com" date="1512993600">- Enable seccomp for Factory
- Adjust default sysconfig to enable other protocols and self
  advertisment
- Do not create user/grou starting with underscore (_lldpd)</changelog>

</package>
<package pkgid="c875cff6dc5cf7b528aeb478479232aabf768d503be908a2259857c9c02c0e27" name="lldpd-devel" arch="x86_64">
    <version epoch="0" ver="0.9.9" rel="2.1"/>

<changelog author="bernat@luffy.cx" date="1419940800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1428148800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1432123200">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1438948800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1441800000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1451217600">- New upstream version.
- Use system libnl3 when possible.
- Use system libevent when possible.</changelog>
<changelog author="bernat@luffy.cx" date="1451649600">- New upstream version.
- Do not rely on libnl3.</changelog>
<changelog author="bernat@luffy.cx" date="1455969600">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1458388800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1463832000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1466164800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1475236800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1485000000">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1489924800">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1503230400">- New upstream version.</changelog>
<changelog author="bernat@luffy.cx" date="1511265600">- New upstream version.</changelog>
<changelog author="mardnh@gmx.de" date="1511352000">- Created lldpd.changes file (converted inline Changelog via
  spec2changelog)
- Specfile cleanup (removed all stuff that is not relevant for
  recent (open)SUSE versions.)</changelog>
<changelog author="mpluskal@suse.com" date="1511784000">- Clarify licensing and usage of some header files
- Enable support for libseccomp (disabled by default)
- Make buildign more verbose</changelog>
<changelog author="mpluskal@suse.com" date="1512388800">- Use fillupdir macro
- Enable libbsd
- Fix group for devel subpackage</changelog>
<changelog author="mpluskal@suse.com" date="1512993600">- Enable seccomp for Factory
- Adjust default sysconfig to enable other protocols and self
  advertisment
- Do not create user/grou starting with underscore (_lldpd)</changelog>

</package>
<package pkgid="55e003a36a5c242bd25fb1a496f06322c993a733878c89a3ab29ed0e2f93b3c8" name="logrotate" arch="src">
    <version epoch="0" ver="3.11.0" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1374753600">- update to 3.8.5
  * dropped logrotate-3.7.9-compressoptions.patch (upstream)
  * refreshed other patches
  Changelog:
  - Improved rotation during daylight saving time and between timezone
    changes.
  - Fixed ACL setting problem caused by ext3 erroneously reporting ENOSYS
    instead of ENOSUP.
  - Do not continue with rotation if state file is corrupted.
  - Make logrotate.status creation atomic.
  - Allow "hourly" rotation. See manpage for more information.
  - Use "/bin/echo" in tests. Fixes tests execution in Dash.
  - Do no try to parse config files bigger than 16MB.
  - Improved manpage consistency and formatting.
  - Fix race condition between acl_set_fd() and fchmod().
  - Added --version command line option
  - Disable ACL tests if logrotate is not compiled WITH_ACL support or if
    ACLs are not supported by the system running tests
  - Disable SELinux tests if logrotate is not compiled WITH_SELINUX support
    or if SELinux is not supported by the system running tests
  - Fixed bug which prevented skipping particular log file config
    if the config contained errors.
  - Fixed skipping of configs containing firstaction/lastaction scripts
    with '}' character in case of error before these scripts.
  - Support also 'K' unit for *size directives.
  - Added preremove option to let admin to do something with the old logs
    before they are removed by logrotate.
  - Fixed possible loop in tabooext parsing.
  - Move code to set SELinux context before compressLogFile calls to create
    compressed log files with the proper context.
  - Call prerotate/postrotate script only for really rotated files in
    nosharedscripts mode (as stated in man page).
  - Fixed setting "size" bigger than 4GB on 32bit architectures
  - Do not overwrite mode set by "create" option when using ACL. "create"
    directive is now not mixed up with ACLs. If you use "create" in config
    file and log file has some ACLs set, ACLs are not kept and are
    overwritten by the mode set in "create" directive.
  - Mode argument in "create" directive can be omitted. Only owner and group
    is set in this case. Check man page for more info.
  - show error and ignore config if '{' is not present after log files
    declaration
  - support whitespaces in compressoptions directive
  - support for tilde expansion in config files
  - 'su' directive does not affect script execution - scripts
    are executed as a root if 'su' directive is present
  - fixed mail sending for 'mailfirst', 'dateext' and 'delaycompress'
    combination
  - do not use gzip/gunzip from /usr/local on Solaris
  - add O_NOFOLLOW when opening files as safeguard against symlink tricks.
    Symlinks rotation is now officially unsupported. It didn't work
    as expected in the past anyway.
  - do not run external programs with uid != euid
  - fixed potential bad-free when ACL is used
  - Do not include alloca.h on NetBSD, since alloca() is declared in
    stdlib.h there</changelog>
<changelog author="vcizek@suse.com" date="1375358400">- mention in the manpage that = is an allowed separator in the
  config file (bnc#831072)
  * added logrotate-manpage_config_clarification.patch</changelog>
<changelog author="vcizek@suse.com" date="1377000000">- install COPYING file (bnc#817870)</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383825600">- update to 3.8.7, fix bnc#849436
- Changelog 3.8.7:
  * Fixed --force/-f option handling together with "size" directive
    (3.8.5 regression).
  * Use "logrotate_tmp_t" context for SELinux tests and if this
    context does not exist, skip SELinux related tests.
- Changelog 3.8.6
  * Fixed memory corruption caused by rotation directory which
    does not exist with "sharedscripts" together with "prerotate"
    script.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383825601">- enable acl support to preserve ACLs during rotation</changelog>
<changelog author="vcizek@suse.com" date="1396353600">- return error when nomissingok is specified and the log path
  doesn't exist (bnc#871217)
  * added logrotate-fail_if_ENOENT_and_nomissingok.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1396440000">- Migrate from cron to systemd timer units, this is overall
  the most important package to migrate since it is one
  of the very few base components that hard-require cron.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1396526400">- BuildRequire systemd 197 or later.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1396526401">- Also, avoid logrotate unit activation when the system is
  on battery power.</changelog>
<changelog author="vcizek@suse.com" date="1403784000">- temporarily remove the 'Persistent' option from logrotate.timer
  * our current systemd doesn't support it yet (bnc#884338)</changelog>
<changelog author="p.drouand@gmail.com" date="1424433600">- Update to version 3.8.9
  * Add new directive "createolddir" and "nocreateolddir". These directives
    can be used to create the directory specified by olddir with particular
  "mode", "owner" and "group".
  * Continue with rotation even when first log from logset is removed
  during the rotation.
  * Fix crash on BSD systems introduced in 3.8.8 caused by different qsort_r
  function. Function qsort is now used instead.
  * Fix potential buffer overflow in usage of strncat function.
  * Fix compilation with musl-libc.
  * Add experimental 'renamecopy' directive to allow 'olddir' on different
    physical device. See the "man logrotate" for more information.
- Remove logrotate-fail_if_ENOENT_and_nomissingok.patch; merged on
  upstream release
- Updated patches
  * logrotate-3.7.8-addextension.patch &gt; logrotate-addextension.patch
  * logrotate-3.7.8-autoext.patch &gt; logrotate-autoext.patch
  * logrotate-3.7.8-conf.patch &gt; logrotate-conf.patch
  * logrotate-manpage_config_clarification.patch
- Remove redunant %clean section</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432036800">- Enable Persistent timer since we are now in systemd 219.</changelog>
<changelog author="kstreitova@suse.com" date="1434974400">- update to 3.9.1
  * 3.9.1
  - Fix off-by-one error which can lead to crash when copytruncate
    is used.
  * 3.9.0
  - Fix crash when using long dateformat. [nmerdan]
  - Add support for %H dateformat. [czchen]
  - Fix regression introduced in 3.8.9 when when rotating multiple
    logs when one of them is missing.
  - In the debug mode, do not skip the code-path which handles the
    case when the last rotation does not exist. [Sergey Vidishev]
  - Show more precise description when "log does not need rotating".
  - Add new -l option to log verbose output to file. The file is
    overwritten on every logrotate execution.
  - Allow rotation of sparse files with copytruncate.
  * update logrotate-addextension.patch
- use spec-cleaner
- remove unused PreReq tags</changelog>
<changelog author="dimstar@opensuse.org" date="1475496000">- Add logrotate-fix-test62_with_bash-4.4.patch: Fix the test suite
  when running with bash 4.4 (gh#logrotate/logrotate#66).</changelog>
<changelog author="tchvatal@suse.com" date="1475668800">- Version update to 3.10.0 fate#322037:
  * Update url to point to github
- Remove upstreamed patch:
  * logrotate-3.7.8-mess_err.patch
- Rebase patches:
  * logrotate-3.7.8-suse.patch
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-fix-test62_with_bash-4.4.patch</changelog>
<changelog author="kukuk@suse.de" date="1478952000">- Move logrotate.status to /var/lib/misc following FHS/LSB and
  making implementing read-only root filesystem much easier.
  [FATE#322036]
- Add patch:
  * logrotate-var-lib-misc.patch</changelog>
<changelog author="tchvatal@suse.com" date="1479729600">- Fix post scriptlet condition bnc#1011120</changelog>
<changelog author="tchvatal@suse.com" date="1482926400">- Version update to 3.11.0:
  * Merges from distribution patchsets and small fixes around
- Remove all patches merged upstream:
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-conf.patch
  * logrotate-fix-test62_with_bash-4.4.patch
  * logrotate-manpage_config_clarification.patch
  * logrotate-var-lib-misc.patch
  * logrotate-3.7.8-suse.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1505908800">- logrotate now recovers from a corrupted state file [bsc#1057801]
- Added patch:
  * logrotate-3.11.0-recover-from-corrupted-state-file.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507809600">- Return failure if hash table is not yet allocated [bsc#1057801]
- Added patch:
  * logrotate-3.11.0-hashIndex-return.patch</changelog>

</package>
<package pkgid="71cdcf9d8e2a8f31c4343c794344c95667768eb3bf956faf2fd5d046f9b1d6fe" name="logrotate" arch="x86_64">
    <version epoch="0" ver="3.11.0" rel="12.1"/>

<changelog author="vcizek@suse.com" date="1374753600">- update to 3.8.5
  * dropped logrotate-3.7.9-compressoptions.patch (upstream)
  * refreshed other patches
  Changelog:
  - Improved rotation during daylight saving time and between timezone
    changes.
  - Fixed ACL setting problem caused by ext3 erroneously reporting ENOSYS
    instead of ENOSUP.
  - Do not continue with rotation if state file is corrupted.
  - Make logrotate.status creation atomic.
  - Allow "hourly" rotation. See manpage for more information.
  - Use "/bin/echo" in tests. Fixes tests execution in Dash.
  - Do no try to parse config files bigger than 16MB.
  - Improved manpage consistency and formatting.
  - Fix race condition between acl_set_fd() and fchmod().
  - Added --version command line option
  - Disable ACL tests if logrotate is not compiled WITH_ACL support or if
    ACLs are not supported by the system running tests
  - Disable SELinux tests if logrotate is not compiled WITH_SELINUX support
    or if SELinux is not supported by the system running tests
  - Fixed bug which prevented skipping particular log file config
    if the config contained errors.
  - Fixed skipping of configs containing firstaction/lastaction scripts
    with '}' character in case of error before these scripts.
  - Support also 'K' unit for *size directives.
  - Added preremove option to let admin to do something with the old logs
    before they are removed by logrotate.
  - Fixed possible loop in tabooext parsing.
  - Move code to set SELinux context before compressLogFile calls to create
    compressed log files with the proper context.
  - Call prerotate/postrotate script only for really rotated files in
    nosharedscripts mode (as stated in man page).
  - Fixed setting "size" bigger than 4GB on 32bit architectures
  - Do not overwrite mode set by "create" option when using ACL. "create"
    directive is now not mixed up with ACLs. If you use "create" in config
    file and log file has some ACLs set, ACLs are not kept and are
    overwritten by the mode set in "create" directive.
  - Mode argument in "create" directive can be omitted. Only owner and group
    is set in this case. Check man page for more info.
  - show error and ignore config if '{' is not present after log files
    declaration
  - support whitespaces in compressoptions directive
  - support for tilde expansion in config files
  - 'su' directive does not affect script execution - scripts
    are executed as a root if 'su' directive is present
  - fixed mail sending for 'mailfirst', 'dateext' and 'delaycompress'
    combination
  - do not use gzip/gunzip from /usr/local on Solaris
  - add O_NOFOLLOW when opening files as safeguard against symlink tricks.
    Symlinks rotation is now officially unsupported. It didn't work
    as expected in the past anyway.
  - do not run external programs with uid != euid
  - fixed potential bad-free when ACL is used
  - Do not include alloca.h on NetBSD, since alloca() is declared in
    stdlib.h there</changelog>
<changelog author="vcizek@suse.com" date="1375358400">- mention in the manpage that = is an allowed separator in the
  config file (bnc#831072)
  * added logrotate-manpage_config_clarification.patch</changelog>
<changelog author="vcizek@suse.com" date="1377000000">- install COPYING file (bnc#817870)</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383825600">- update to 3.8.7, fix bnc#849436
- Changelog 3.8.7:
  * Fixed --force/-f option handling together with "size" directive
    (3.8.5 regression).
  * Use "logrotate_tmp_t" context for SELinux tests and if this
    context does not exist, skip SELinux related tests.
- Changelog 3.8.6
  * Fixed memory corruption caused by rotation directory which
    does not exist with "sharedscripts" together with "prerotate"
    script.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383825601">- enable acl support to preserve ACLs during rotation</changelog>
<changelog author="vcizek@suse.com" date="1396353600">- return error when nomissingok is specified and the log path
  doesn't exist (bnc#871217)
  * added logrotate-fail_if_ENOENT_and_nomissingok.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1396440000">- Migrate from cron to systemd timer units, this is overall
  the most important package to migrate since it is one
  of the very few base components that hard-require cron.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1396526400">- BuildRequire systemd 197 or later.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1396526401">- Also, avoid logrotate unit activation when the system is
  on battery power.</changelog>
<changelog author="vcizek@suse.com" date="1403784000">- temporarily remove the 'Persistent' option from logrotate.timer
  * our current systemd doesn't support it yet (bnc#884338)</changelog>
<changelog author="p.drouand@gmail.com" date="1424433600">- Update to version 3.8.9
  * Add new directive "createolddir" and "nocreateolddir". These directives
    can be used to create the directory specified by olddir with particular
  "mode", "owner" and "group".
  * Continue with rotation even when first log from logset is removed
  during the rotation.
  * Fix crash on BSD systems introduced in 3.8.8 caused by different qsort_r
  function. Function qsort is now used instead.
  * Fix potential buffer overflow in usage of strncat function.
  * Fix compilation with musl-libc.
  * Add experimental 'renamecopy' directive to allow 'olddir' on different
    physical device. See the "man logrotate" for more information.
- Remove logrotate-fail_if_ENOENT_and_nomissingok.patch; merged on
  upstream release
- Updated patches
  * logrotate-3.7.8-addextension.patch &gt; logrotate-addextension.patch
  * logrotate-3.7.8-autoext.patch &gt; logrotate-autoext.patch
  * logrotate-3.7.8-conf.patch &gt; logrotate-conf.patch
  * logrotate-manpage_config_clarification.patch
- Remove redunant %clean section</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432036800">- Enable Persistent timer since we are now in systemd 219.</changelog>
<changelog author="kstreitova@suse.com" date="1434974400">- update to 3.9.1
  * 3.9.1
  - Fix off-by-one error which can lead to crash when copytruncate
    is used.
  * 3.9.0
  - Fix crash when using long dateformat. [nmerdan]
  - Add support for %H dateformat. [czchen]
  - Fix regression introduced in 3.8.9 when when rotating multiple
    logs when one of them is missing.
  - In the debug mode, do not skip the code-path which handles the
    case when the last rotation does not exist. [Sergey Vidishev]
  - Show more precise description when "log does not need rotating".
  - Add new -l option to log verbose output to file. The file is
    overwritten on every logrotate execution.
  - Allow rotation of sparse files with copytruncate.
  * update logrotate-addextension.patch
- use spec-cleaner
- remove unused PreReq tags</changelog>
<changelog author="dimstar@opensuse.org" date="1475496000">- Add logrotate-fix-test62_with_bash-4.4.patch: Fix the test suite
  when running with bash 4.4 (gh#logrotate/logrotate#66).</changelog>
<changelog author="tchvatal@suse.com" date="1475668800">- Version update to 3.10.0 fate#322037:
  * Update url to point to github
- Remove upstreamed patch:
  * logrotate-3.7.8-mess_err.patch
- Rebase patches:
  * logrotate-3.7.8-suse.patch
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-fix-test62_with_bash-4.4.patch</changelog>
<changelog author="kukuk@suse.de" date="1478952000">- Move logrotate.status to /var/lib/misc following FHS/LSB and
  making implementing read-only root filesystem much easier.
  [FATE#322036]
- Add patch:
  * logrotate-var-lib-misc.patch</changelog>
<changelog author="tchvatal@suse.com" date="1479729600">- Fix post scriptlet condition bnc#1011120</changelog>
<changelog author="tchvatal@suse.com" date="1482926400">- Version update to 3.11.0:
  * Merges from distribution patchsets and small fixes around
- Remove all patches merged upstream:
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-conf.patch
  * logrotate-fix-test62_with_bash-4.4.patch
  * logrotate-manpage_config_clarification.patch
  * logrotate-var-lib-misc.patch
  * logrotate-3.7.8-suse.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1505908800">- logrotate now recovers from a corrupted state file [bsc#1057801]
- Added patch:
  * logrotate-3.11.0-recover-from-corrupted-state-file.patch</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1507809600">- Return failure if hash table is not yet allocated [bsc#1057801]
- Added patch:
  * logrotate-3.11.0-hashIndex-return.patch</changelog>

</package>
<package pkgid="ad9461a67042c328896c63af16ad37eeb13c6072fa31c448113406e51de54c65" name="lsscsi" arch="src">
    <version epoch="0" ver="0.29" rel="5.1"/>

<changelog author="hare@suse.de" date="1209038400">- Split off from original scsi package.</changelog>
<changelog author="hare@suse.de" date="1211544000">- using 'Provides' to clean update dependency.</changelog>
<changelog author="garloff@suse.de" date="1218542400">- Update to lsscsi-0.21:
  SysFS scanning changes imposed by kernel 2.6.25/26.</changelog>
<changelog author="hare@suse.de" date="1225454400">- Update sysfs patch to match latest sysfs changes (bnc#434823)</changelog>
<changelog author="garloff@suse.de" date="1258632000">- lsscsi-usb.diff: Make print format with -t for usb: compatible
  with other transport values.</changelog>
<changelog author="jdelvare@suse.de" date="1260187200">- Update to lsscsi-0.23:
  * Show protection information with '--protection' option, ATA,
    SATA and USB transport information.
  * Stop scanning /proc/mounts; assume /sys unless overridden by
    '--sysfsroot=PATH' option.
- This update fixes bnc#556180.</changelog>
<changelog author="hare@suse.de" date="1266840000">- Fix classic output (bnc#576138)</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 0.24
  * FC transport syntax changes (colon to slash)
- Update to new upstream release 0.25
  * add sas_port and fc_remote_ports transport information
  * print enclosure_device entry
  * add a "--size" option to show size of disks
  * add a "--protmode" option to show protection information mode
- Update to new upstream release 0.26
  * add a "fcoe" transport indicator
  * add a "--wwn" option and datamine /dev/disk/by-id/wwn*
- Update to new upstream release 0.27
  * Accept large (64-bit) LUNs
  * add a "--lunhex" option and recognition of LSSCSI_LUNHEX_OPT
  environment variable for displaying LUNs in hex
- Normalized build/install procedure;
  remove redundant %clean section</changelog>
<changelog author="hare@suse.de" date="1390392000">- Port patches from SP3 (bnc#831301)
- Fixup printing of FC transport IDs</changelog>
<changelog author="hare@suse.de" date="1464004800">- Update to new upstream release 0.29 (bsc#977572)
  - '-u' now decodes locally assigned UUIDs (spc5r08)
  - as last try use T10 Vendor ID for lu name
  - if no lu name found, print 'none'
  - change '-uuu' to output the full lu name followed
    by the normal fields (which were skipped before)
  - add 'U' option, same action as '-uuu'
  - '-UU' prefixes lu names with 'eui.', 'naa.', etc
  - if '-s' given twice, lu size is base 2 related
  - if very long [h:c:t:l] then append space
  - print_enclosure_device() for FCP may be useless,
    comment out while checking ...
  - with '-t' print 0x0000000000000000 for non-SAS
    device in SAS domain
  - autogen.sh: upgrade to 20091223 version
  - automake: upgrade to 1.15 (ubuntu 16.04)
  * Delete lsscsi-0.27.tar.xz
  * Add lsscsi-0.29.tar.xz
- Update to new upstream release 0.28
  - fix handling of scsi_level 0 (no compliance)
  - add SRP transport identifier
  - add --unit option for LU identifier (&gt;= lk 3.15)
  - add (S)ATA transport identifier (&gt;= lk 3.15)
  - make USB transport ids more consistent
  - fix FC transport id missing comma
  - add pdt strings for security manager and zbc
  - upgrade automake to version 1.14.1
- Remove patches merged with upstream
  * Delete lsscsi-fixup-fc-transport-id.patch
  * Delete lsscsi-usb.diff
  * Delete lsscsi-fix-classic-output</changelog>
<changelog author="hare@suse.de" date="1499688000">- Lookup WWN using /dev/disk/by-id/scsi-* (bsc#1008935)
- fixup display of 'lsscsi -t' (bsc#1047884)</changelog>

</package>
<package pkgid="cfbfe98312c2024f6b36d3a3c241f127cdb4988f91ae97430bb63e6b50f6db9f" name="lsscsi" arch="x86_64">
    <version epoch="0" ver="0.29" rel="5.1"/>

<changelog author="garloff@suse.de" date="1218542400">- Update to lsscsi-0.21:
  SysFS scanning changes imposed by kernel 2.6.25/26.</changelog>
<changelog author="hare@suse.de" date="1225454400">- Update sysfs patch to match latest sysfs changes (bnc#434823)</changelog>
<changelog author="garloff@suse.de" date="1258632000">- lsscsi-usb.diff: Make print format with -t for usb: compatible
  with other transport values.</changelog>
<changelog author="jdelvare@suse.de" date="1260187200">- Update to lsscsi-0.23:
  * Show protection information with '--protection' option, ATA,
    SATA and USB transport information.
  * Stop scanning /proc/mounts; assume /sys unless overridden by
    '--sysfsroot=PATH' option.
- This update fixes bnc#556180.</changelog>
<changelog author="hare@suse.de" date="1266840000">- Fix classic output (bnc#576138)</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 0.24
  * FC transport syntax changes (colon to slash)
- Update to new upstream release 0.25
  * add sas_port and fc_remote_ports transport information
  * print enclosure_device entry
  * add a "--size" option to show size of disks
  * add a "--protmode" option to show protection information mode
- Update to new upstream release 0.26
  * add a "fcoe" transport indicator
  * add a "--wwn" option and datamine /dev/disk/by-id/wwn*
- Update to new upstream release 0.27
  * Accept large (64-bit) LUNs
  * add a "--lunhex" option and recognition of LSSCSI_LUNHEX_OPT
  environment variable for displaying LUNs in hex
- Normalized build/install procedure;
  remove redundant %clean section</changelog>
<changelog author="hare@suse.de" date="1390392000">- Port patches from SP3 (bnc#831301)
- Fixup printing of FC transport IDs</changelog>
<changelog author="hare@suse.de" date="1464004800">- Update to new upstream release 0.29 (bsc#977572)
  - '-u' now decodes locally assigned UUIDs (spc5r08)
  - as last try use T10 Vendor ID for lu name
  - if no lu name found, print 'none'
  - change '-uuu' to output the full lu name followed
    by the normal fields (which were skipped before)
  - add 'U' option, same action as '-uuu'
  - '-UU' prefixes lu names with 'eui.', 'naa.', etc
  - if '-s' given twice, lu size is base 2 related
  - if very long [h:c:t:l] then append space
  - print_enclosure_device() for FCP may be useless,
    comment out while checking ...
  - with '-t' print 0x0000000000000000 for non-SAS
    device in SAS domain
  - autogen.sh: upgrade to 20091223 version
  - automake: upgrade to 1.15 (ubuntu 16.04)
  * Delete lsscsi-0.27.tar.xz
  * Add lsscsi-0.29.tar.xz
- Update to new upstream release 0.28
  - fix handling of scsi_level 0 (no compliance)
  - add SRP transport identifier
  - add --unit option for LU identifier (&gt;= lk 3.15)
  - add (S)ATA transport identifier (&gt;= lk 3.15)
  - make USB transport ids more consistent
  - fix FC transport id missing comma
  - add pdt strings for security manager and zbc
  - upgrade automake to version 1.14.1
- Remove patches merged with upstream
  * Delete lsscsi-fixup-fc-transport-id.patch
  * Delete lsscsi-usb.diff
  * Delete lsscsi-fix-classic-output</changelog>
<changelog author="hare@suse.de" date="1499688000">- Lookup WWN using /dev/disk/by-id/scsi-* (bsc#1008935)
- fixup display of 'lsscsi -t' (bsc#1047884)</changelog>

</package>
<package pkgid="2440525f7d21957519e4f247618ee714bbee9c69e59f06b01dd8ad9e8a0416f2" name="lua51" arch="src">
    <version epoch="0" ver="5.1.5" rel="16.1"/>

<changelog author="pgajdos@suse.cz" date="1244462400">- package owns /usr/{lib,share}/lua directories from now
- emoved unneeded root.patch</changelog>
<changelog author="dmueller@suse.de" date="1253102400">- add baselibs.conf</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1260100800">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1260619200">- add baselibs.conf as a source
- package documentation as noarch</changelog>
<changelog author="pgajdos@suse.cz" date="1269345600">- modified LUA_PATH_DEFAULT [bnc#589441]: search modules under
  /usr/%{_lib}/lua/%{major_version} too</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="pgajdos@suse.cz" date="1276516800">- removed -L/usr/lib from Libs: in etc/lua.pc [bnc#613497]
- used upstream bugfix patch from http://www.lua.org/download.html</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc macro</changelog>
<changelog author="pgajdos@suse.com" date="1324468800">- lua51 branched from lua package</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="joop.boonen@opensuse.org" date="1333195200">- Correction in Provides and Obsolete for lua-libs</changelog>
<changelog author="pgajdos@suse.com" date="1340020800">- updated to 5.1.5:
  * bug-fix release, see http://www.lua.org/bugs.html for
    more details
  - &gt; removed upstream-bugfix.patch</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mrdocs@opensuse.org" date="1367755200">- move the lua rpm macros to the devel package to avoid conflict
  with lua 5.2</changelog>
<changelog author="pgajdos@suse.com" date="1368705600">- move rpm macros back, but install it in /etc/rpm/macros.lua51
  and call lua5.1 in %lua_version definition</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382356800">- refresh patch lua51-5.1.5-module-path.diff
- new patch lua51-5.1.5-pkgconfig.patch
  * fix libraries in pkgconfig file</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382443200">- fix patch lua51-5.1.5-pkgconfig.patch
  * libdl is required not librt</changelog>
<changelog author="jmatejek@suse.com" date="1497528000">- add Lua(API) and Lua(devel) symbols (fixes lua51-luasocket build problem)
  (bsc#1051626)</changelog>

</package>
<package pkgid="3ce4a02e86287f75fcf243471b03805bd41e71b06f340c038249bb090029e6af" name="lua51" arch="x86_64">
    <version epoch="0" ver="5.1.5" rel="16.1"/>

<changelog author="pgajdos@suse.cz" date="1244462400">- package owns /usr/{lib,share}/lua directories from now
- emoved unneeded root.patch</changelog>
<changelog author="dmueller@suse.de" date="1253102400">- add baselibs.conf</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1260100800">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1260619200">- add baselibs.conf as a source
- package documentation as noarch</changelog>
<changelog author="pgajdos@suse.cz" date="1269345600">- modified LUA_PATH_DEFAULT [bnc#589441]: search modules under
  /usr/%{_lib}/lua/%{major_version} too</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="pgajdos@suse.cz" date="1276516800">- removed -L/usr/lib from Libs: in etc/lua.pc [bnc#613497]
- used upstream bugfix patch from http://www.lua.org/download.html</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc macro</changelog>
<changelog author="pgajdos@suse.com" date="1324468800">- lua51 branched from lua package</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="joop.boonen@opensuse.org" date="1333195200">- Correction in Provides and Obsolete for lua-libs</changelog>
<changelog author="pgajdos@suse.com" date="1340020800">- updated to 5.1.5:
  * bug-fix release, see http://www.lua.org/bugs.html for
    more details
  - &gt; removed upstream-bugfix.patch</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mrdocs@opensuse.org" date="1367755200">- move the lua rpm macros to the devel package to avoid conflict
  with lua 5.2</changelog>
<changelog author="pgajdos@suse.com" date="1368705600">- move rpm macros back, but install it in /etc/rpm/macros.lua51
  and call lua5.1 in %lua_version definition</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382356800">- refresh patch lua51-5.1.5-module-path.diff
- new patch lua51-5.1.5-pkgconfig.patch
  * fix libraries in pkgconfig file</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382443200">- fix patch lua51-5.1.5-pkgconfig.patch
  * libdl is required not librt</changelog>
<changelog author="jmatejek@suse.com" date="1497528000">- add Lua(API) and Lua(devel) symbols (fixes lua51-luasocket build problem)
  (bsc#1051626)</changelog>

</package>
<package pkgid="fe3e9e715de0cc2c4c1732d89a9f1fe057ec1abdf2b55ee55d05b70bcf83b31d" name="lua51-devel" arch="x86_64">
    <version epoch="0" ver="5.1.5" rel="16.1"/>

<changelog author="pgajdos@suse.cz" date="1244462400">- package owns /usr/{lib,share}/lua directories from now
- emoved unneeded root.patch</changelog>
<changelog author="dmueller@suse.de" date="1253102400">- add baselibs.conf</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1260100800">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1260619200">- add baselibs.conf as a source
- package documentation as noarch</changelog>
<changelog author="pgajdos@suse.cz" date="1269345600">- modified LUA_PATH_DEFAULT [bnc#589441]: search modules under
  /usr/%{_lib}/lua/%{major_version} too</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="pgajdos@suse.cz" date="1276516800">- removed -L/usr/lib from Libs: in etc/lua.pc [bnc#613497]
- used upstream bugfix patch from http://www.lua.org/download.html</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc macro</changelog>
<changelog author="pgajdos@suse.com" date="1324468800">- lua51 branched from lua package</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="joop.boonen@opensuse.org" date="1333195200">- Correction in Provides and Obsolete for lua-libs</changelog>
<changelog author="pgajdos@suse.com" date="1340020800">- updated to 5.1.5:
  * bug-fix release, see http://www.lua.org/bugs.html for
    more details
  - &gt; removed upstream-bugfix.patch</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mrdocs@opensuse.org" date="1367755200">- move the lua rpm macros to the devel package to avoid conflict
  with lua 5.2</changelog>
<changelog author="pgajdos@suse.com" date="1368705600">- move rpm macros back, but install it in /etc/rpm/macros.lua51
  and call lua5.1 in %lua_version definition</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382356800">- refresh patch lua51-5.1.5-module-path.diff
- new patch lua51-5.1.5-pkgconfig.patch
  * fix libraries in pkgconfig file</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382443200">- fix patch lua51-5.1.5-pkgconfig.patch
  * libdl is required not librt</changelog>
<changelog author="jmatejek@suse.com" date="1497528000">- add Lua(API) and Lua(devel) symbols (fixes lua51-luasocket build problem)
  (bsc#1051626)</changelog>

</package>
<package pkgid="9adc90eb6251c0f85694fdd0e4c97f991124c22088617eb0cea55f5b882c0e01" name="lua51-doc" arch="noarch">
    <version epoch="0" ver="5.1.5" rel="16.1"/>

<changelog author="pgajdos@suse.cz" date="1244462400">- package owns /usr/{lib,share}/lua directories from now
- emoved unneeded root.patch</changelog>
<changelog author="dmueller@suse.de" date="1253102400">- add baselibs.conf</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1260100800">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1260619200">- add baselibs.conf as a source
- package documentation as noarch</changelog>
<changelog author="pgajdos@suse.cz" date="1269345600">- modified LUA_PATH_DEFAULT [bnc#589441]: search modules under
  /usr/%{_lib}/lua/%{major_version} too</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="pgajdos@suse.cz" date="1276516800">- removed -L/usr/lib from Libs: in etc/lua.pc [bnc#613497]
- used upstream bugfix patch from http://www.lua.org/download.html</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc macro</changelog>
<changelog author="pgajdos@suse.com" date="1324468800">- lua51 branched from lua package</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="joop.boonen@opensuse.org" date="1333195200">- Correction in Provides and Obsolete for lua-libs</changelog>
<changelog author="pgajdos@suse.com" date="1340020800">- updated to 5.1.5:
  * bug-fix release, see http://www.lua.org/bugs.html for
    more details
  - &gt; removed upstream-bugfix.patch</changelog>
<changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mrdocs@opensuse.org" date="1367755200">- move the lua rpm macros to the devel package to avoid conflict
  with lua 5.2</changelog>
<changelog author="pgajdos@suse.com" date="1368705600">- move rpm macros back, but install it in /etc/rpm/macros.lua51
  and call lua5.1 in %lua_version definition</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382356800">- refresh patch lua51-5.1.5-module-path.diff
- new patch lua51-5.1.5-pkgconfig.patch
  * fix libraries in pkgconfig file</changelog>
<changelog author="peter.trommler@ohm-hochschule.de" date="1382443200">- fix patch lua51-5.1.5-pkgconfig.patch
  * libdl is required not librt</changelog>
<changelog author="jmatejek@suse.com" date="1497528000">- add Lua(API) and Lua(devel) symbols (fixes lua51-luasocket build problem)
  (bsc#1051626)</changelog>

</package>
<package pkgid="918900a3d0088143e372ab488fbd95a262f623fedf99c07730f3212e97b0fc93" name="lvm2" arch="src">
    <version epoch="0" ver="2.02.120" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="9b7c7509ff0359b077e15a04c582d843be623a10f194aaa61a70e85480cb3512" name="lvm2" arch="x86_64">
    <version epoch="0" ver="2.02.120" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="ab356f0f6df4207d672dab8a9d1b70c691b800fdcef80a44e931df2c5b53dc2b" name="lvm2-clvm" arch="x86_64">
    <version epoch="0" ver="2.02.120" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="c41ed0bcb6642081e4df11703ce73000b964c0ec373b989e3211f464df748180" name="lvm2-cmirrord" arch="x86_64">
    <version epoch="0" ver="2.02.120" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="775c35b55e0e4d27b026dfae4112c7cdb17af0aa1e2bd0590f6d2f91d927b391" name="lvm2-devel" arch="x86_64">
    <version epoch="0" ver="2.02.120" rel="77.1"/>

<changelog author="lwang@suse.com" date="1463400000">- clvm resources do not start because can't find lvmconf (bsc#979635)
  Add soft link to /usr/sbin/lvmconf in spec</changelog>
<changelog author="lwang@suse.com" date="1464004800">- Fix clvmd binary not found in case that users still use RA from
  ocf:lvm2:clvm (bsc#980200)
  Add sbindir=$HA_SBIN_DIR for clvmd.ocf and cmirrord.ocf</changelog>
<changelog author="lwang@suse.com" date="1464350400">- Remove lvm2-clvmd/cmirrord.service and related activation services
  from %service_add _pre/post/preun/postun because we start clvmd
  /clmirrord and activate via pacemaker and RA. (bsc#980296)</changelog>
<changelog author="lwang@suse.com" date="1465214400">- Modified raid10_segtype_default from "mirror" to "raid10"(bsc#982329)</changelog>
<changelog author="lwang@suse.com" date="1468843200">- Lvchange improve refresh by trying to deactivate snapshot thinLV
  in case it's preventing merge process. (bsc#984321)
  Add: lvchange-improve-refresh-for-merging-thin-volume.patch</changelog>
<changelog author="lwang@suse.com" date="1469793600">- Fix lvm2-{clvmd, cmirrord}.service cannot find binaries path. (bsc#991181)
  Add soft link to /usr/sbin/{clvmd, cmirrord} in spec</changelog>
<changelog author="hare@suse.de" date="1471608000">- 69-dm-lvm-metad.rules: Do not process rules for multipath
  devices (bsc#bsc#990538, bsc#986734)
  Add: 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch
- Rewrite patches to include patch header:
  * 10-dm.rules-Reset-state-variable-for-spurious-events.patch
  * device-mapper-link
  * device-mapper-type_punning.diff
  * udev_rules-update.diff</changelog>
<changelog author="lwang@suse.com" date="1471694400">- Fix DM_ABORT_ON_INTERNAL_ERRORS env var not take effect (bsc#984321)
  Add: log-Add-DM_ABORT_ON_INTERNAL_ERRORS-lvm-override.patch
- Remove require for %insserv_prereq %fillup_prereq (bsc#992843)</changelog>
<changelog author="lwang@suse.com" date="1472644800">- Delete the patch since it is not neccessary for the bug fix and has
  the risk to cause regression bug for thin-merge.sh (bsc#984321)
    Delete: activate-Improve-snapshot-merge-initiation.patch
    (Improve snapshot merge initiation (bsc#970943))</changelog>
<changelog author="lwang@suse.com" date="1475928000">- spec: Add BuildRequires: pkgconfig(systemd) (bsc#997637)
- udev: Instead of using = to override SYSTEMD_WANTS, use += to add
  the pvscan service (not root cause for bsc#997637, but still better
  to add this patch)
  Add : udev-use-for-SYSTEMD_WANTS-instead-of.patch</changelog>
<changelog author="gqjiang@suse.com" date="1482235200">- Add systemd_requires to device-mapper package (bsc#1015943)</changelog>
<changelog author="zren@suse.com" date="1488369600">- udev: Simplify special-case for md in 69-dm-lvm-metadata.rules
  (bsc#1012973)
  * add bug-1012973_Simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
<changelog author="zren@suse.com" date="1488369601">- systemd: use {local,remote}-fs-pre.target instead of
  {local,remote}-fs.target (bsc#1017034)</changelog>
<changelog author="zren@suse.com" date="1488369602">- Fix several trivial issues about clvmd/cmorriord RAs (bsc#1023283,
  bsc#1025560)
  * deal with time values  passed down with time units
  * make correct "return code"
  * fix format issue that tab messes up spaces</changelog>
<changelog author="zren@suse.com" date="1488369603">- Fix clvmd segfault on ppc64 arch (bsc#1025630)
  * bug-1025630_mem-add-extra-mem-pages-for-pthread-stack.patch</changelog>
<changelog author="zren@suse.com" date="1491480000">- Fix lvm2 activation issue when used on top of multipath
  bsc#998893
  * add bug-998893_make_pvscan_service_after_multipathd.patch</changelog>
<changelog author="zren@suse.com" date="1493121600">- Warn if PV size in metadata is larger than disk device size
  bsc#999878
  * add bug-999878_metadata-check-PV-dev-size-is-not-less-than-PV-size.patch
  * add bug-999878_conf-add-metadata-check_pv_device_sizes.patch
- Change License to "GPL-2.0+ and LGPL-2.1+ and GPL-3.0+"</changelog>
<changelog author="zren@suse.com" date="1497528000">- Fix stale device cache in clvmd, bsc#978055
  + bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch</changelog>
<changelog author="zren@suse.com" date="1499774400">- udev: also create /dev/disk/by-part{label,uuid} and gpt-auto-root symlinks
  (bsc#1028485)
  + bug-1028485_udev-also-create-dev-disk-by-part-label-uuid-and-gpt.patch
  * refreshed udev_rules-update.diff
- clvmd: try to refresh device cache on the first failure (bsc#978055)
  - bug-978055_pvscan-device-cache-in-clvmd-is-not-refreshed-as-nee.patch
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
<changelog author="zren@suse.com" date="1502971200">- Remove libdm-iface-not-output-error-message-inside-retry-loop.patch
  (bsc#1045628)</changelog>

</package>
<package pkgid="f04dffb17b37714ad70299e54e38c8bd2eb98efce7d8e0da3030336ac5848ac2" name="lxc" arch="src">
    <version epoch="0" ver="1.1.5" rel="19.1"/>

<changelog author="opensuse_buildservice@ojkastl.de" date="1408104000">- third patch to get lxc-autostart-helper to work on openSUSE
  * 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1411819200">- update to 1.0.6, which includes the following changes/fixes:
    rootfs_is_blockdev: don't run if no rootfs is specified
    confile: sanity-check netdev-&gt;type before setting netdev-&gt;priv elements
    Fix typo in previous patch
    Remove mention of mountcgroups in ubuntu.common config
    remove mountcgroup hook entirely
    Add SIGPWR support to lxc_init
    Sysvinit script fixes
    unprivileged containers: use next available nic name if unspecified
    fix typo in btrfs error msg
    apparmor: Allow slave bind mounts
    provide an example SELinux policy for older releases
    print a helpful message if creating unpriv container with no idmap
    use non-thread-safe getpwuid and getpwgid for android
    btrfs: support recursive subvolume deletion (v2)
    fix '--log-priority' --&gt; '--logpriority' in main
    Fix a file descriptor leak in the daemonization
    Fix a file descriptor leak in the monitord spawn
    Ensure /dev/pts directory exists on pts setup
    Do not allow snapshots of LVM backed containers
    add lxc.console.logpath
    coverity: don't use newname after null check
    coverity: malloc the right size for btrs_node tree
    introduce --with-distro=raspbian
    cgmanager get/set: clean up child (v2)
    Add extra debugging
    Fix typo in the previous commit...
    do_mount_entry: add nexec, nosuid, nodev, rdonly flags if needed at remount
    command socket: use hash if needed
    monitor: fix sockname calculation for long lxcpaths
    show additional info if btrfs subvolume deletion fails (issue #315)
    ignore SIGKILL (CTRL-C) and SIGQUIT (CTRL-\) - issue #313
    chmod container dir to 0770 (v2)
    build: Fix support for split build and source dirs
    mount_entry: use statvfs
    lxc_mount_auto_mounts: honor existing nodev etc at remounts
    statvfs: do nothing if statvfs does not exist (android/bionic)
    Prevent compiler warning by initializing ifindex
    build: don't remove configuration template on clean
    build: Make setup.py run from srcdir to avoid distutils errors
    handle hashed command socket names (v2)
    lxc-cgm: fix issue with nested chowning
    Report container exit status to monitord
    support use of 'all' containers when cgmanager supports it
    log: fix quiet mode
    Fix build error(ISO C90 specs violation) in lxc.c
    lxc_map_ids: don't do bogus chekc for newgidmap
    lxc_map_ids: add a comment
    clean autodev dir on container exit
    As discussed on ML, do not clean autodev dir on reboot
    Fix build failure due to slightly different rmdir
    Fix presentation of IPv6 addresses and gateway
    lxc-start: Add -F (foreground) option
    all: Discontinue the use of in-line comments (stable)
    all: Include hostname in DHCP requests
    all: Switch from arch command to uname -m
    altlinux: bugfixes
    archlinux: Properly set default locale in /etc/locale.conf
    centos template: prevent mingetty from calling vhangup(2)
    download: Have wget retry 3 times
    download: Make --keyserver actually work
    gentoo: keep original uid/gid of files/dirs when installing
    gentoo: Use portageq to determine portage distdir
    plamo: keep original uid/gid of files/dirs when installing
    plamo: bugfix template
    ssh: send hostname to dhcp server
    ubuntu: don't check for $rootfs/run/shm
    ubuntu: add help string
    lxc-test-{unpriv,usernic.in}: make sure to chgrp as well
    lxc-test-unpriv: test lxc-clone -s
    tests: Call sync before testing a shutdown
    tests: Copy the download cache when available [v2]
    Fix the unprivileged tests cgroup management
    doc: Mention that veth.pair is ignored for unpriv
    doc: Add mention that veth.pair is ignored for unpriv in Japanese man
    doc: Add -F option to Japanese lxc-start(1)
    doc: Update the description of SELinux in Japanese lxc.container.conf(5)
    doc: Add 'zfs' to the parameter of -B option in lxc-create(1)
    doc: add lxc.console.logpath to Japanese lxc.container.conf(5)
    doc: language correction
    doc: Fix Japanese translation of lxc.container.conf(5)
    doc: Add destroy option to lxc-snapshot(1)
    doc: Add description about ignoring lxc.cgroup.use when using cgmanager
- delete: 0002-lxc-autostart-helper-working-even-if-action-is-not-a.patch
- delete: 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1414411200">- added 0001-added-upstream-action-fallback-create-directory-loca.patch
  * adds action fallback available upstream
  * creates directory /run/lock/subsys/ if not available
- deleted 0001-systemd-Ensure-action-is-defined.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1416398400">- Added 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch
  Disable building opensuse containers on openSUSE 13.2 due to changed
  build behaviour (bsc#905638)</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417003200">- backported the patches from upstream, so that the opensuse template now accepts releases as arguments, and it is possible to install 12.3, 13.1 or 13.2
  * 0003-lxc-opensuse-template-now-understands-release-argume.patch
  * 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
  * 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417262400">- changed patch 0002 to work on newer Tumbleweed snapshots, where os-release does not contain 'Harlequin' anymore</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417867200">- update to version 1.0.7
  Core:
  Include network prefix when ipv4/ipv6 keys are queried
  apparmor: silence 'silent' mount denials
  add file/func/line to debug info
  apparmor: restrict signal and ptrace for processes
  cgmanager: several fixes
  lxc: don't call pivot_root if / is on a ramfs
  fix lxc.mount.auto clearing
  conf.c: Define MS_PRIVATE for Android
  network: convert param ifname to const.
  network: check result of if_nametoindex().
  network: allow lxc_network_move_by_index() rename netdev in moving.
  network: introduce a interface named lxc_netdev_isup().
  lxccontainer.c: rename enter_to_ns to enter_net_ns
  lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root
  do_rootfs_setup: fix return bugs
  lxc-start: don't re-try to mount rootfs if we already did so
  attach: don't use confstr(_CS_PATH)
  lxc_global_config_value: simplify the theme
  Fixed mismatch on ipvX gateway
  attach: don't ignore sigint/sigkill if stdin is redirected
  cgmanager: fix 'attach' with "all" controller support
  lxc/utils: bugfix freed pointer return value
  conf.c: change 'instanciate' to 'instantiate'
  fix wrong nlmsg_len
  Remounts bind mounts if read-only flag is provided
  Allow lxc_clear_config_item to clear idmaps.
  overlay and aufs clone_paths: be more robust
  overlayfs: overlayfs.v22 or higher needs workdir option
  Fix clone issues
  Improve veth error cases logging
  fixed typo in comment
  audit: added capacity and reserve() to nlmsg
  rmdir and lxc_unpriv returns non-negative error codes
  typofixes - https://github.com/vlajos/misspell_fixer
  Bindings:
  add src/python-lxc/setup.py into .gitignore
  Tests:
    tests: Fix unpriv test
    lxc-test-unpriv: don't clear out /etc/lxc/lxc-usernet
    lxc-test-unpriv: test for different cgroups per subsystem
    tests: try again when waitpid() sets errno as EINTR
  Commands:
  lxc_start: ERROR if container is already running.
  lxc-start: return 0 rather than error if container is already running
  Make legacy lxc-ls more robust
  lxc_info: flush stdout before calling routines which may fork
  Templates:
  Fix typo in lxc-gentoo template
  busybox template: support for unprivileged containers
  busybox template: mount fstab when available
  Fix another gentoo template typo
  Create the apt proxy in the cache instead of the 1st container
  lxc-plamo: mount tmpfs on /dev/shm
  lxc-cirros: support creating+running unprivileged
  Fix lxc-openmandriva.in typo.
  Fix lxc-centos.in typo.
  lxc-opensuse: Disable on 13.2
  lxc-alpine: make sure /dev/shm is world writeable
  lxc-alpine: create a default tty for console
  lxc-debian: added support for package installation
  lxc-debian: Fix default mirrors
  lxc-debian: support systemd as PID 1
  lxc-debian: adjust init system configurations
  lxc-debian: mask both Wheezy and Jessie udev services
  lxc-opensuse: Disabling builds on openSUSE Tumbleweed, detection improved.
  Documentation:
  Fix the lxc manpage a bit
  lxc-create -t option is not optional
  doc: Update kernel and cgroup info in Japanese lxc(7)
  tabs/spaces consistency</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417953600">- patch 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch has been sent upstream and is included in version 1.0.7</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418385600">- lxc-opensuse default release changed to 13.1, as 12.3 reaches end-of-life soon
  Patch 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817600">- Disabling builds on 13.2/Tumbleweed only, if build version before 20141120
  Patch 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817601">- Improved error message</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in lxc-autostart-helper script
- add patches:
  + lxc-1.0.7-fix-bashisms.patch</changelog>
<changelog author="jslaby@suse.com" date="1437480000">- update to 1.1.2
- Removed 0001-added-upstream-action-fallback-create-directory-loca.patch
- Removed 0003-lxc-opensuse-template-now-understands-release-argume.patch
- Removed 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
- Removed 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch
- Removed 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch
- Removed 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="jslaby@suse.com" date="1437652800">- Added CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch
  (bnc#938522)
- Added attach-mount-a-sane-prox-for-LSM-setup.patch (bnc#938523)
- Added CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch
  (bnc#938523)</changelog>
<changelog author="jslaby@suse.com" date="1438776000">- Added templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1443787200">- Added CVE-2015-1335-Protect-container-mounts-against-symlinks.patch
  (bsc#946744)</changelog>
<changelog author="asarai@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  CVE-2016-8649-attach-do-not-send-procfd-to-attached-process.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1485604800">- Update to version 1.1.5
  All patches except lxc-1.0.7-fix-bashisms.patch are upstream and were thus deleted
- fixes for boo#1019662
  added openSUSE_apparmor_mount.conf
  added apparmor reload in %post, necessary as the package installs apparmor-related files</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1490702400">- fix for boo#1028264
  added patch 0001-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1500465600">- fix for boo#1036360
  - added Requires for apparmor and BuildRequires for apparmor-rpm-macros
  - changed %post section to recommendation by cboltz</changelog>

</package>
<package pkgid="c46709963517f30211c1c27ae4fa8f3a5c691baa527d2c6f2a403ce8971f76fc" name="lxc" arch="x86_64">
    <version epoch="0" ver="1.1.5" rel="19.1"/>

<changelog author="opensuse_buildservice@ojkastl.de" date="1408104000">- third patch to get lxc-autostart-helper to work on openSUSE
  * 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1411819200">- update to 1.0.6, which includes the following changes/fixes:
    rootfs_is_blockdev: don't run if no rootfs is specified
    confile: sanity-check netdev-&gt;type before setting netdev-&gt;priv elements
    Fix typo in previous patch
    Remove mention of mountcgroups in ubuntu.common config
    remove mountcgroup hook entirely
    Add SIGPWR support to lxc_init
    Sysvinit script fixes
    unprivileged containers: use next available nic name if unspecified
    fix typo in btrfs error msg
    apparmor: Allow slave bind mounts
    provide an example SELinux policy for older releases
    print a helpful message if creating unpriv container with no idmap
    use non-thread-safe getpwuid and getpwgid for android
    btrfs: support recursive subvolume deletion (v2)
    fix '--log-priority' --&gt; '--logpriority' in main
    Fix a file descriptor leak in the daemonization
    Fix a file descriptor leak in the monitord spawn
    Ensure /dev/pts directory exists on pts setup
    Do not allow snapshots of LVM backed containers
    add lxc.console.logpath
    coverity: don't use newname after null check
    coverity: malloc the right size for btrs_node tree
    introduce --with-distro=raspbian
    cgmanager get/set: clean up child (v2)
    Add extra debugging
    Fix typo in the previous commit...
    do_mount_entry: add nexec, nosuid, nodev, rdonly flags if needed at remount
    command socket: use hash if needed
    monitor: fix sockname calculation for long lxcpaths
    show additional info if btrfs subvolume deletion fails (issue #315)
    ignore SIGKILL (CTRL-C) and SIGQUIT (CTRL-\) - issue #313
    chmod container dir to 0770 (v2)
    build: Fix support for split build and source dirs
    mount_entry: use statvfs
    lxc_mount_auto_mounts: honor existing nodev etc at remounts
    statvfs: do nothing if statvfs does not exist (android/bionic)
    Prevent compiler warning by initializing ifindex
    build: don't remove configuration template on clean
    build: Make setup.py run from srcdir to avoid distutils errors
    handle hashed command socket names (v2)
    lxc-cgm: fix issue with nested chowning
    Report container exit status to monitord
    support use of 'all' containers when cgmanager supports it
    log: fix quiet mode
    Fix build error(ISO C90 specs violation) in lxc.c
    lxc_map_ids: don't do bogus chekc for newgidmap
    lxc_map_ids: add a comment
    clean autodev dir on container exit
    As discussed on ML, do not clean autodev dir on reboot
    Fix build failure due to slightly different rmdir
    Fix presentation of IPv6 addresses and gateway
    lxc-start: Add -F (foreground) option
    all: Discontinue the use of in-line comments (stable)
    all: Include hostname in DHCP requests
    all: Switch from arch command to uname -m
    altlinux: bugfixes
    archlinux: Properly set default locale in /etc/locale.conf
    centos template: prevent mingetty from calling vhangup(2)
    download: Have wget retry 3 times
    download: Make --keyserver actually work
    gentoo: keep original uid/gid of files/dirs when installing
    gentoo: Use portageq to determine portage distdir
    plamo: keep original uid/gid of files/dirs when installing
    plamo: bugfix template
    ssh: send hostname to dhcp server
    ubuntu: don't check for $rootfs/run/shm
    ubuntu: add help string
    lxc-test-{unpriv,usernic.in}: make sure to chgrp as well
    lxc-test-unpriv: test lxc-clone -s
    tests: Call sync before testing a shutdown
    tests: Copy the download cache when available [v2]
    Fix the unprivileged tests cgroup management
    doc: Mention that veth.pair is ignored for unpriv
    doc: Add mention that veth.pair is ignored for unpriv in Japanese man
    doc: Add -F option to Japanese lxc-start(1)
    doc: Update the description of SELinux in Japanese lxc.container.conf(5)
    doc: Add 'zfs' to the parameter of -B option in lxc-create(1)
    doc: add lxc.console.logpath to Japanese lxc.container.conf(5)
    doc: language correction
    doc: Fix Japanese translation of lxc.container.conf(5)
    doc: Add destroy option to lxc-snapshot(1)
    doc: Add description about ignoring lxc.cgroup.use when using cgmanager
- delete: 0002-lxc-autostart-helper-working-even-if-action-is-not-a.patch
- delete: 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1414411200">- added 0001-added-upstream-action-fallback-create-directory-loca.patch
  * adds action fallback available upstream
  * creates directory /run/lock/subsys/ if not available
- deleted 0001-systemd-Ensure-action-is-defined.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1416398400">- Added 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch
  Disable building opensuse containers on openSUSE 13.2 due to changed
  build behaviour (bsc#905638)</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417003200">- backported the patches from upstream, so that the opensuse template now accepts releases as arguments, and it is possible to install 12.3, 13.1 or 13.2
  * 0003-lxc-opensuse-template-now-understands-release-argume.patch
  * 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
  * 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417262400">- changed patch 0002 to work on newer Tumbleweed snapshots, where os-release does not contain 'Harlequin' anymore</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417867200">- update to version 1.0.7
  Core:
  Include network prefix when ipv4/ipv6 keys are queried
  apparmor: silence 'silent' mount denials
  add file/func/line to debug info
  apparmor: restrict signal and ptrace for processes
  cgmanager: several fixes
  lxc: don't call pivot_root if / is on a ramfs
  fix lxc.mount.auto clearing
  conf.c: Define MS_PRIVATE for Android
  network: convert param ifname to const.
  network: check result of if_nametoindex().
  network: allow lxc_network_move_by_index() rename netdev in moving.
  network: introduce a interface named lxc_netdev_isup().
  lxccontainer.c: rename enter_to_ns to enter_net_ns
  lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root
  do_rootfs_setup: fix return bugs
  lxc-start: don't re-try to mount rootfs if we already did so
  attach: don't use confstr(_CS_PATH)
  lxc_global_config_value: simplify the theme
  Fixed mismatch on ipvX gateway
  attach: don't ignore sigint/sigkill if stdin is redirected
  cgmanager: fix 'attach' with "all" controller support
  lxc/utils: bugfix freed pointer return value
  conf.c: change 'instanciate' to 'instantiate'
  fix wrong nlmsg_len
  Remounts bind mounts if read-only flag is provided
  Allow lxc_clear_config_item to clear idmaps.
  overlay and aufs clone_paths: be more robust
  overlayfs: overlayfs.v22 or higher needs workdir option
  Fix clone issues
  Improve veth error cases logging
  fixed typo in comment
  audit: added capacity and reserve() to nlmsg
  rmdir and lxc_unpriv returns non-negative error codes
  typofixes - https://github.com/vlajos/misspell_fixer
  Bindings:
  add src/python-lxc/setup.py into .gitignore
  Tests:
    tests: Fix unpriv test
    lxc-test-unpriv: don't clear out /etc/lxc/lxc-usernet
    lxc-test-unpriv: test for different cgroups per subsystem
    tests: try again when waitpid() sets errno as EINTR
  Commands:
  lxc_start: ERROR if container is already running.
  lxc-start: return 0 rather than error if container is already running
  Make legacy lxc-ls more robust
  lxc_info: flush stdout before calling routines which may fork
  Templates:
  Fix typo in lxc-gentoo template
  busybox template: support for unprivileged containers
  busybox template: mount fstab when available
  Fix another gentoo template typo
  Create the apt proxy in the cache instead of the 1st container
  lxc-plamo: mount tmpfs on /dev/shm
  lxc-cirros: support creating+running unprivileged
  Fix lxc-openmandriva.in typo.
  Fix lxc-centos.in typo.
  lxc-opensuse: Disable on 13.2
  lxc-alpine: make sure /dev/shm is world writeable
  lxc-alpine: create a default tty for console
  lxc-debian: added support for package installation
  lxc-debian: Fix default mirrors
  lxc-debian: support systemd as PID 1
  lxc-debian: adjust init system configurations
  lxc-debian: mask both Wheezy and Jessie udev services
  lxc-opensuse: Disabling builds on openSUSE Tumbleweed, detection improved.
  Documentation:
  Fix the lxc manpage a bit
  lxc-create -t option is not optional
  doc: Update kernel and cgroup info in Japanese lxc(7)
  tabs/spaces consistency</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417953600">- patch 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch has been sent upstream and is included in version 1.0.7</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418385600">- lxc-opensuse default release changed to 13.1, as 12.3 reaches end-of-life soon
  Patch 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817600">- Disabling builds on 13.2/Tumbleweed only, if build version before 20141120
  Patch 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817601">- Improved error message</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in lxc-autostart-helper script
- add patches:
  + lxc-1.0.7-fix-bashisms.patch</changelog>
<changelog author="jslaby@suse.com" date="1437480000">- update to 1.1.2
- Removed 0001-added-upstream-action-fallback-create-directory-loca.patch
- Removed 0003-lxc-opensuse-template-now-understands-release-argume.patch
- Removed 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
- Removed 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch
- Removed 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch
- Removed 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="jslaby@suse.com" date="1437652800">- Added CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch
  (bnc#938522)
- Added attach-mount-a-sane-prox-for-LSM-setup.patch (bnc#938523)
- Added CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch
  (bnc#938523)</changelog>
<changelog author="jslaby@suse.com" date="1438776000">- Added templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1443787200">- Added CVE-2015-1335-Protect-container-mounts-against-symlinks.patch
  (bsc#946744)</changelog>
<changelog author="asarai@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  CVE-2016-8649-attach-do-not-send-procfd-to-attached-process.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1485604800">- Update to version 1.1.5
  All patches except lxc-1.0.7-fix-bashisms.patch are upstream and were thus deleted
- fixes for boo#1019662
  added openSUSE_apparmor_mount.conf
  added apparmor reload in %post, necessary as the package installs apparmor-related files</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1490702400">- fix for boo#1028264
  added patch 0001-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1500465600">- fix for boo#1036360
  - added Requires for apparmor and BuildRequires for apparmor-rpm-macros
  - changed %post section to recommendation by cboltz</changelog>

</package>
<package pkgid="3d6492ea387f0dad4c375d59df39b306106559513dbba793c0a6a114fc03c8e3" name="lxc-devel" arch="x86_64">
    <version epoch="0" ver="1.1.5" rel="19.1"/>

<changelog author="opensuse_buildservice@ojkastl.de" date="1408104000">- third patch to get lxc-autostart-helper to work on openSUSE
  * 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1411819200">- update to 1.0.6, which includes the following changes/fixes:
    rootfs_is_blockdev: don't run if no rootfs is specified
    confile: sanity-check netdev-&gt;type before setting netdev-&gt;priv elements
    Fix typo in previous patch
    Remove mention of mountcgroups in ubuntu.common config
    remove mountcgroup hook entirely
    Add SIGPWR support to lxc_init
    Sysvinit script fixes
    unprivileged containers: use next available nic name if unspecified
    fix typo in btrfs error msg
    apparmor: Allow slave bind mounts
    provide an example SELinux policy for older releases
    print a helpful message if creating unpriv container with no idmap
    use non-thread-safe getpwuid and getpwgid for android
    btrfs: support recursive subvolume deletion (v2)
    fix '--log-priority' --&gt; '--logpriority' in main
    Fix a file descriptor leak in the daemonization
    Fix a file descriptor leak in the monitord spawn
    Ensure /dev/pts directory exists on pts setup
    Do not allow snapshots of LVM backed containers
    add lxc.console.logpath
    coverity: don't use newname after null check
    coverity: malloc the right size for btrs_node tree
    introduce --with-distro=raspbian
    cgmanager get/set: clean up child (v2)
    Add extra debugging
    Fix typo in the previous commit...
    do_mount_entry: add nexec, nosuid, nodev, rdonly flags if needed at remount
    command socket: use hash if needed
    monitor: fix sockname calculation for long lxcpaths
    show additional info if btrfs subvolume deletion fails (issue #315)
    ignore SIGKILL (CTRL-C) and SIGQUIT (CTRL-\) - issue #313
    chmod container dir to 0770 (v2)
    build: Fix support for split build and source dirs
    mount_entry: use statvfs
    lxc_mount_auto_mounts: honor existing nodev etc at remounts
    statvfs: do nothing if statvfs does not exist (android/bionic)
    Prevent compiler warning by initializing ifindex
    build: don't remove configuration template on clean
    build: Make setup.py run from srcdir to avoid distutils errors
    handle hashed command socket names (v2)
    lxc-cgm: fix issue with nested chowning
    Report container exit status to monitord
    support use of 'all' containers when cgmanager supports it
    log: fix quiet mode
    Fix build error(ISO C90 specs violation) in lxc.c
    lxc_map_ids: don't do bogus chekc for newgidmap
    lxc_map_ids: add a comment
    clean autodev dir on container exit
    As discussed on ML, do not clean autodev dir on reboot
    Fix build failure due to slightly different rmdir
    Fix presentation of IPv6 addresses and gateway
    lxc-start: Add -F (foreground) option
    all: Discontinue the use of in-line comments (stable)
    all: Include hostname in DHCP requests
    all: Switch from arch command to uname -m
    altlinux: bugfixes
    archlinux: Properly set default locale in /etc/locale.conf
    centos template: prevent mingetty from calling vhangup(2)
    download: Have wget retry 3 times
    download: Make --keyserver actually work
    gentoo: keep original uid/gid of files/dirs when installing
    gentoo: Use portageq to determine portage distdir
    plamo: keep original uid/gid of files/dirs when installing
    plamo: bugfix template
    ssh: send hostname to dhcp server
    ubuntu: don't check for $rootfs/run/shm
    ubuntu: add help string
    lxc-test-{unpriv,usernic.in}: make sure to chgrp as well
    lxc-test-unpriv: test lxc-clone -s
    tests: Call sync before testing a shutdown
    tests: Copy the download cache when available [v2]
    Fix the unprivileged tests cgroup management
    doc: Mention that veth.pair is ignored for unpriv
    doc: Add mention that veth.pair is ignored for unpriv in Japanese man
    doc: Add -F option to Japanese lxc-start(1)
    doc: Update the description of SELinux in Japanese lxc.container.conf(5)
    doc: Add 'zfs' to the parameter of -B option in lxc-create(1)
    doc: add lxc.console.logpath to Japanese lxc.container.conf(5)
    doc: language correction
    doc: Fix Japanese translation of lxc.container.conf(5)
    doc: Add destroy option to lxc-snapshot(1)
    doc: Add description about ignoring lxc.cgroup.use when using cgmanager
- delete: 0002-lxc-autostart-helper-working-even-if-action-is-not-a.patch
- delete: 0003-lxc-autostart-helper-working-even-if-var-lock-subsys.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1414411200">- added 0001-added-upstream-action-fallback-create-directory-loca.patch
  * adds action fallback available upstream
  * creates directory /run/lock/subsys/ if not available
- deleted 0001-systemd-Ensure-action-is-defined.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1416398400">- Added 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch
  Disable building opensuse containers on openSUSE 13.2 due to changed
  build behaviour (bsc#905638)</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417003200">- backported the patches from upstream, so that the opensuse template now accepts releases as arguments, and it is possible to install 12.3, 13.1 or 13.2
  * 0003-lxc-opensuse-template-now-understands-release-argume.patch
  * 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
  * 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417262400">- changed patch 0002 to work on newer Tumbleweed snapshots, where os-release does not contain 'Harlequin' anymore</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417867200">- update to version 1.0.7
  Core:
  Include network prefix when ipv4/ipv6 keys are queried
  apparmor: silence 'silent' mount denials
  add file/func/line to debug info
  apparmor: restrict signal and ptrace for processes
  cgmanager: several fixes
  lxc: don't call pivot_root if / is on a ramfs
  fix lxc.mount.auto clearing
  conf.c: Define MS_PRIVATE for Android
  network: convert param ifname to const.
  network: check result of if_nametoindex().
  network: allow lxc_network_move_by_index() rename netdev in moving.
  network: introduce a interface named lxc_netdev_isup().
  lxccontainer.c: rename enter_to_ns to enter_net_ns
  lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root
  do_rootfs_setup: fix return bugs
  lxc-start: don't re-try to mount rootfs if we already did so
  attach: don't use confstr(_CS_PATH)
  lxc_global_config_value: simplify the theme
  Fixed mismatch on ipvX gateway
  attach: don't ignore sigint/sigkill if stdin is redirected
  cgmanager: fix 'attach' with "all" controller support
  lxc/utils: bugfix freed pointer return value
  conf.c: change 'instanciate' to 'instantiate'
  fix wrong nlmsg_len
  Remounts bind mounts if read-only flag is provided
  Allow lxc_clear_config_item to clear idmaps.
  overlay and aufs clone_paths: be more robust
  overlayfs: overlayfs.v22 or higher needs workdir option
  Fix clone issues
  Improve veth error cases logging
  fixed typo in comment
  audit: added capacity and reserve() to nlmsg
  rmdir and lxc_unpriv returns non-negative error codes
  typofixes - https://github.com/vlajos/misspell_fixer
  Bindings:
  add src/python-lxc/setup.py into .gitignore
  Tests:
    tests: Fix unpriv test
    lxc-test-unpriv: don't clear out /etc/lxc/lxc-usernet
    lxc-test-unpriv: test for different cgroups per subsystem
    tests: try again when waitpid() sets errno as EINTR
  Commands:
  lxc_start: ERROR if container is already running.
  lxc-start: return 0 rather than error if container is already running
  Make legacy lxc-ls more robust
  lxc_info: flush stdout before calling routines which may fork
  Templates:
  Fix typo in lxc-gentoo template
  busybox template: support for unprivileged containers
  busybox template: mount fstab when available
  Fix another gentoo template typo
  Create the apt proxy in the cache instead of the 1st container
  lxc-plamo: mount tmpfs on /dev/shm
  lxc-cirros: support creating+running unprivileged
  Fix lxc-openmandriva.in typo.
  Fix lxc-centos.in typo.
  lxc-opensuse: Disable on 13.2
  lxc-alpine: make sure /dev/shm is world writeable
  lxc-alpine: create a default tty for console
  lxc-debian: added support for package installation
  lxc-debian: Fix default mirrors
  lxc-debian: support systemd as PID 1
  lxc-debian: adjust init system configurations
  lxc-debian: mask both Wheezy and Jessie udev services
  lxc-opensuse: Disabling builds on openSUSE Tumbleweed, detection improved.
  Documentation:
  Fix the lxc manpage a bit
  lxc-create -t option is not optional
  doc: Update kernel and cgroup info in Japanese lxc(7)
  tabs/spaces consistency</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1417953600">- patch 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch has been sent upstream and is included in version 1.0.7</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418385600">- lxc-opensuse default release changed to 13.1, as 12.3 reaches end-of-life soon
  Patch 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817600">- Disabling builds on 13.2/Tumbleweed only, if build version before 20141120
  Patch 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1418817601">- Improved error message</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in lxc-autostart-helper script
- add patches:
  + lxc-1.0.7-fix-bashisms.patch</changelog>
<changelog author="jslaby@suse.com" date="1437480000">- update to 1.1.2
- Removed 0001-added-upstream-action-fallback-create-directory-loca.patch
- Removed 0003-lxc-opensuse-template-now-understands-release-argume.patch
- Removed 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch
- Removed 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch
- Removed 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch
- Removed 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch</changelog>
<changelog author="jslaby@suse.com" date="1437652800">- Added CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch
  (bnc#938522)
- Added attach-mount-a-sane-prox-for-LSM-setup.patch (bnc#938523)
- Added CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch
  (bnc#938523)</changelog>
<changelog author="jslaby@suse.com" date="1438776000">- Added templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch</changelog>
<changelog author="cbosdonnat@suse.com" date="1443787200">- Added CVE-2015-1335-Protect-container-mounts-against-symlinks.patch
  (bsc#946744)</changelog>
<changelog author="asarai@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  CVE-2016-8649-attach-do-not-send-procfd-to-attached-process.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1485604800">- Update to version 1.1.5
  All patches except lxc-1.0.7-fix-bashisms.patch are upstream and were thus deleted
- fixes for boo#1019662
  added openSUSE_apparmor_mount.conf
  added apparmor reload in %post, necessary as the package installs apparmor-related files</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1490702400">- fix for boo#1028264
  added patch 0001-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
<changelog author="opensuse_buildservice@ojkastl.de" date="1500465600">- fix for boo#1036360
  - added Requires for apparmor and BuildRequires for apparmor-rpm-macros
  - changed %post section to recommendation by cboltz</changelog>

</package>
<package pkgid="85d2b29a960a094efbaaa04f85707e64fb633d058c3117f62fbae4d40fde6701" name="lynx" arch="src">
    <version epoch="0" ver="2.8.7" rel="11.1"/>

<changelog author="ssommer@suse.de" date="1158580800">- updated to 2.8.6pre.3: Highlights from the Changelog:
  * add NESTED_TABLES setting to lynx.cfg to allow site override of
  the built-in default
  * add check for failure to write to disk, e.g., on disk full
  * add presentation for text/css, to allow browsing ".css" files
  * add presentation type for application/xml and text/xml mime types
  * add presentation type for application/xhtml+xml mime type
  * add "Anonymous FTP Password" to Options menu
  * add command-line option -syslog-urls to allow syslog'ing of URLs
  to be optional
  * highlight the target and pause for 20 milliseconds when selecting
  a link with the mouse
  * add -stderr option to write error messages when doing a -dump -or
  - source.
  * add -nonumbers option, which modifies the output of -dump to
  suppress the link-numbering
  * add -listonly option, which modifies the output of -dump to show
  only the list of links
  * modify treatment of symbolic links for ftp-URLs to show the link
  target, as with the local directory editor
  * lynx accepts multiple URLs on the command line
  * modify logic for -dump so it can dump all pages listed on the
  command line
- removed obsolete patches and updated the remaining patches
- config files are stored in sysconfdir not in libdir
- added /etc/lynx.lss config file</changelog>
<changelog author="ssommer@suse.de" date="1158667200">- updated to 2.8.6pre.4: Highlights:
  * add script samples/oldlynx, which gives the non-color-style
  scheme using an executable built for color-style
  * add DEFAULT_COLORS item to lynx.cfg to allow disabling the
  default colors feature at runtime, allowing better matching
  of old color scheme via a script</changelog>
<changelog author="ssommer@suse.de" date="1159963200">- updated to 2.8.6pre.5: Highlights:
  * buildsystem fixes
  * updated files from ftp.unicode.org</changelog>
<changelog author="ssommer@suse.de" date="1161000000">- updated to 2.8.6rel.2: Highligths:
  * broaden the conditions on which to reload the color-style info
  * documentation fixes</changelog>
<changelog author="kssingvo@suse.de" date="1162296000">- disabled color support for non-color lynx, enabled color support
  for lynx-color
- added helpful directories to pkg documentation: samples, scripts</changelog>
<changelog author="kssingvo@suse.de" date="1164024000">- added patch to have the 2.8.6 final version patches:
  * limit files set via PERSONAL_EXTENSION_MAP and PERSONAL_MAILCAP
    to be found relative to the user's home directory.
  * ensure that the configured values for GLOBAL_EXTENSION_MAP and
    GLOBAL_MAILCAP are absolute pathnames -TD
  * modify logic for reading PERSONAL_EXTENSION_MAP and
    PERSONAL_MAILCAP to ensure that they are files that are
    controlled only by the user.</changelog>
<changelog author="dmueller@suse.de" date="1175169600">- add ncurses-devel BuildRequires</changelog>
<changelog author="kssingvo@suse.de" date="1175601600">- upgrade to final version of 2.8.6
- removed patch with final changes</changelog>
<changelog author="kssingvo@suse.de" date="1183550400">- added official patch from lynx.isc.org:
  * correct loop-limit in print_crawl_to_fd(), which broke
    "lynx -crawl -dump" from 2.8.6dev.9 changes</changelog>
<changelog author="kssingvo@suse.de" date="1225281600">- fix for lynxcgi command execution CVE-2008-4690 (bnc#439149)
- not affected: .mailcap and .mime.types files read, CVE-2006-7234</changelog>
<changelog author="anicka@suse.cz" date="1260532800">- update to 2.8.7
  * many bugfixes
  * added many new options
  * improved SSL support, cookie support, HTML interpretation
- removed -ipv6 patch (feature implemented upstream)
- removed CVE-2008-4690 patch (fixed upstream)</changelog>
<changelog author="jengelh@medozas.de" date="1262520000">- enable parallel build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1283601600">- Do not include build date in binaries</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- update to 2.8.7rel.2
  * add limit-check for too-long URIs in href's (RedHat #605286)
  * fix a few places still referring to "2-8-6"</changelog>
<changelog author="meissner@suse.de" date="1311681600">- remove x bits from sample windows scripts</changelog>
<changelog author="vcizek@novell.com" date="1311854400">- removed the very long list of authors from spec</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1360584000">- lynx-openssl.patch : just like in the "links" case, HTTPS
  clients must not:
  * Negotiate SSLv2
  * Attempt to use SSL compression (due to CVE-2012-4929)
- Fix debuginfo generation.</changelog>
<changelog author="pgajdos@suse.com" date="1486382400">- security update:
  * CVE-2016-9179 [bsc#1008642]
    + lynx-CVE-2016-9179.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-1000211 [bsc#1068885]
    + lynx-CVE-2017-1000211.patch</changelog>

</package>
<package pkgid="63bafdbece32fdf36abaf318b57f4c57d085648d2a87b486a343d61cc4c50299" name="lynx" arch="x86_64">
    <version epoch="0" ver="2.8.7" rel="11.1"/>

<changelog author="anicka@suse.cz" date="1260532800">- update to 2.8.7
  * many bugfixes
  * added many new options
  * improved SSL support, cookie support, HTML interpretation
- removed -ipv6 patch (feature implemented upstream)
- removed CVE-2008-4690 patch (fixed upstream)</changelog>
<changelog author="jengelh@medozas.de" date="1262520000">- enable parallel build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1283601600">- Do not include build date in binaries</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- update to 2.8.7rel.2
  * add limit-check for too-long URIs in href's (RedHat #605286)
  * fix a few places still referring to "2-8-6"</changelog>
<changelog author="meissner@suse.de" date="1311681600">- remove x bits from sample windows scripts</changelog>
<changelog author="vcizek@novell.com" date="1311854400">- removed the very long list of authors from spec</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1360584000">- lynx-openssl.patch : just like in the "links" case, HTTPS
  clients must not:
  * Negotiate SSLv2
  * Attempt to use SSL compression (due to CVE-2012-4929)
- Fix debuginfo generation.</changelog>
<changelog author="pgajdos@suse.com" date="1486382400">- security update:
  * CVE-2016-9179 [bsc#1008642]
    + lynx-CVE-2016-9179.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-1000211 [bsc#1068885]
    + lynx-CVE-2017-1000211.patch</changelog>

</package>
<package pkgid="dbc30e4231c66d08caad4270f02f116b389df22c4c1be7769019c54d88303287" name="machinery" arch="src">
    <version epoch="0" ver="1.23.0" rel="5.1"/>

<changelog author="thardeck@suse.de" date="1442318400">- update to version 1.13.0
  * Fix: Show `Files extracted` status in `compare --html` when both
    status are the same (gh#SUSE/machinery#1218)
  * Fix: Validate port option in the `show`, `compare`,  and `serve`
    commands (gh#SUSE/machinery#1316)
  * Align output of `machinery config`
  * Add rpc_pipefs to filtered filesystems (gh#SUSE/machinery#1250)
  * Handle socket errors for `-i` option
  * Add `containerize` command to the experimental features
  * Export of autoyast files is now possible with system descriptions,
    which have empty repository scopes (gh#SUSE/machinery#1268)
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when the files are extracted
  * Introduce format version 5 which adds the "environment" scope (see
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-5).
    This scope is a hidden scope which is used internally by Machinery.
  * Only print binary path if it's not first in PATH (gh#SUSE/machinery#1284)
  * Do not exclude files with broken UTF-8 filenames anymore
- disable gem bundling for openSUSE Tumbleweed</changelog>
<changelog author="thardeck@suse.de" date="1444132800">- update to version 1.14.0
  * The machinery-helper is now built during gem-installation on x86_64
    machines if Go is available. The RPM package is still shipped with
    a precompiled version.
  * Allow limiting the `list` command output to certain system descriptions
    by passing them along as argument (gh#SUSE/machinery#1398)
  * Add `move` command to rename system descriptions (gh#SUSE/machinery#1397)
  * Add inspection of RPM based Docker containers
- machinery-helper is now built during gem installation and thus part of the
  gem file structure</changelog>
<changelog author="thardeck@suse.de" date="1444392000">- update to version 1.14.1
  * Fix: Clean up binding the server for HTML view to IP addresses
  * Fix: Make links to sections with common elements clearer in HTML comparison
    view (gh#SUSE/machinery#1222)
  * Fix: XML files are no longer treated as binary files in HTML view
  * Fix: Scrolling issue of file view (gh#SUSE/machinery#1155)</changelog>
<changelog author="thardeck@suse.de" date="1444824000">- update to version 1.14.2
  * Fix typo in HTML package view  (gh#SUSE/machinery#1493)
- tracking bug (bnc#950362)</changelog>
<changelog author="thardeck@suse.de" date="1445860800">- update to version 1.15.0
  * No information is cut off in the HTML view
  * Files containing special characters can now be downloaded
  * Links to common elements work in HTML when all scopes are collapsed
  * Show if description was result of a container inspection
  * Disable nav bar buttons when scope has been excluded (gh#SUSE/machinery#1199)
  * Show details of elements with changed attributes for all scopes in
    comparison view
  * Show progress indicator while loading file content in HTML view</changelog>
<changelog author="thardeck@suse.de" date="1446811200">- update to version 1.16.0
  * The error message "There is already a server with the same port running" has
    been cleaned up and is no longer misleading (gh#SUSE/machinery#1541)
  * Add OpenSUSE Leap as supported system
  * HTML comparison is now available without the experimental feature flag
  * Add error message to recommend using `--name` when a container with a slash is
    inspected (gh#SUSE/machinery#1490)
  * Fixed crash during inspection of a folder which contains special characters
    in its name (gh#SUSE/machinery#1580)
  * Speed up inspection of config and changed managed files
  * Fix docker inspection when specifying a docker image with tag
  * GConf XML files are no longer treated as binary files in HTML view
  * Add current outgoing ip and export directory to Autoyast README.md during
    export (gh#SUSE/machinery#1543)
  * Handle invalid utf-8 characters in /etc/passwd
  * Fix: "changed" link in compare view is visible while scope is collapsed but
    doesn't do anything (gh#SUSE/machinery#1555)
- tracking bug (bnc#953981)</changelog>
<changelog author="thardeck@suse.de" date="1447070400">- update to version 1.16.1
  * Fix type recognition in case of empty files for config- and changed-managed-files
    inspectors (gh#SUSE/machinery#1612)</changelog>
<changelog author="thardeck@suse.de" date="1448366400">- update to version 1.16.2
  * Fix crash when the user does not have enough permissions to create the image
    directory for the `build` command (gh#SUSE/machinery#1667)
  * Fix wrong hint for docker containers while running `analyze` command
  * Add a new hint when using the `--public` option for the `serve` command that it
    makes all descriptions publicly available
  * Fix Machinery failing to inspect changed config files in case of restrictive
    permissions (gh#SUSE/machinery#1609)
  * Remove hint for `show`, when `inspect` is run with `--show` option
  * Fix repository inspection on hosts that have a LANGUAGE variable set
  * Empty scopes now display a message in HTML &amp; CLI views (gh#SUSE/machinery#1615)
  * Fix SLES 11 SP4 os inspector output to be similar to SLES 11 SP3
  * Fix Autoyast export on openSUSE Leap and Tumbleweed (gh#SUSE/machinery#1627)
  * Allow building of openSUSE Leap and Tumbleweed on openSUSE Leap and Tumbleweed
  * Allow building of SLES11 and SLES12 on openSUSE Leap
  * Add HTML landing page, which lists all system descriptions on your system</changelog>
<changelog author="thardeck@suse.de" date="1452168000">- update to version 1.16.3
  * Remove concept of "supported systems" in favor of letting Machinery run
    everywhere. Whether a system can be built, exported, etc will be validated
    from its related task by checking if the propper tooling is installed
  * Remove hint for `show`, when `inspect-container` is run with `--show` option
  * Rephrase the startup messages and warn messages when starting the HTTP
    server for compare, show, or serve system descriptions
  * Change `serve` command to always list all system descriptions
- increase nokogiri requirement to &gt;= 1.6.1
- tracking bug (bnc#961011)</changelog>
<changelog author="thardeck@suse.de" date="1452772800">- update to version 1.16.4
  * The unmanaged-files scope filter will not include "/boot" by default anymore.
    In order to have the same behavior as before run:
  * Fix crash during image build on SLES12 SP1 (gh#SUSE/machinery#1828)
- reduce version restrictions for gems to the major version (bnc#961176)</changelog>
<changelog author="thardeck@suse.de" date="1453723200">- update to version 1.17.0
  * Fix reset button in HTML view (gh#SUSE/machinery#1899)
  * Align config-files scope in HTML view (gh#SUSE/machinery#1814)
  * Allow closing file dialog (in WebUI) by pressing ESC
  * Support inspection of Ubuntu 14.04 systems
  * New `--ssh-identity-file` option to specify a SSH private key when inspecting
    a remote system
  * New `--ssh-port` option to specify an SSH port when inspecting a remote system</changelog>
<changelog author="thardeck@suse.de" date="1456833600">- update to version 1.18.0
  * Make the machinery-helper exclusive to improve inspection performance significantly
    on all supported architectures.
    Following this change Go is required for installing the gem for now.
  * Fix treatment of the rpm `(replaced)` flag (gh#SUSE/machinery#1897)
  * Fix repository recognition on older Debian systems
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when a remote user is used
  * Show all available information for unmanaged files in HTML view (gh#SUSE/machinery#1905)
  * Move the machinery documentation from man page to HTML format
  * Implement "--extract-metadata" option for the unmanaged-files inspection to
    retrieve the file meta (e.g. owner, group, size) data without extracting the
    files.
  * Fixed counting of files in unmanaged directories (empty directories now report zero files
    as one would expect)
- remove dependency on Nokogiri gem
- tracking bug (bnc#968380)</changelog>
<changelog author="thardeck@suse.de" date="1459771200">- update to version 1.19.0
  * Rename config-files inspector to changed-config-files inspector to be more
    intuitive
  * Following the previous change the analyze operation was also renamed to
    changed-config-files-diffs
  * Add explanation for patterns-tasks relationship for Debian based
    systems (gh#SUSE/machinery#1820)
  * Public serve task now prints hostname for sharing (gh#SUSE/machinery#1699)
  * Fix export of description with no repositories scope to Autoyast (gh#SUSE/machinery#2024)
  * Only use required packages for bootstrap in Kiwi export
  * Fix regression which prevented changed-config-file diffs from being shown
    in the HTML output
  * Hint now mentions remote-user option (gh#SUSE/machinery#1813)
  * Hint is printed when `machinery` is called without options (gh#SUSE/machinery#1286)
  * Rename --exclude-scope option to --ignore-scope (gh#SUSE/machinery#897)</changelog>
<changelog author="thardeck@suse.de" date="1461326400">- update to version 1.20.0
  * Added explanation for 'N/A' fields for each scope (gh#SUSE/machinery#1904)
  * Added support of the ARM architectures "armv6l", "armv7l" and "aarch64" to
    our machinery-helper (This requires at least Go version 1.5)
  * Introduce format version 9 which fixes a migration issue (gh#SUSE/machinery#2041)
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-9</changelog>
<changelog author="thardeck@suse.de" date="1466510400">- update to version 1.21.0
  * Add attribute in patterns scope to identify the patterns manager
  * Improve navigation in HTML view to connect "list", "show" and "compare"
    functionality
  * Fix service inspector on systemd to include instanciated services
  * Introduce format version 10 to allow distinction between files and directories
    for meta data of unmanaged files.
    This distinction is only available for newly inspected descriptions.
    Additionally, an attribute in the patterns scope was added to identify the patterns manager.
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-10</changelog>
<changelog author="thardeck@suse.de" date="1475755200">- update to version 1.22.0
  * Add remaining systemd service states in Kiwi export (gh#SUSE/machinery#2122)
  * Add export of system descriptions as HTML page. This provides an offline
    view of descrptions (gh#SUSE/machinery#2119)
  * Fix changed files inspections on dpkg systems in case of diversions
- tracking bug (bnc#1002805)</changelog>
<changelog author="thardeck@suse.de" date="1476446400">- update to version 1.22.1
  * Only use sudo for reading files when necessary (gh#SUSE/machinery#2077)
  * Gracefully handle RequireTTY enabled sudo configs (gh#SUSE/machinery#2135)
  * Add rsync requirement check for remote system (gh#SUSE/machinery#2165)</changelog>
<changelog author="thardeck@suse.de" date="1479297600">- update to version 1.22.2
  * Prevent machinery-helper from crashing when files are inaccessible during
    inspection (bnc#1009774)
  * Fix analyze of changed-config-files when NFS or SMB repositories are
    used (gh#SUSE/machinery#2132)
  * Do not add repositories which require registration to built images (bnc#1004697)
  * Fix package inspection on older Debian systems
  * Fix extraction of information for Debian packages containing a dash in their name
- tracking bug (bnc#1035727)</changelog>
<changelog author="thardeck@suse.de" date="1497960000">- update to version 1.22.3
  * Gracefully handle incorrect filter pathes in the experimental filtering function
  * Error handling for disrupted ssh connection while inspecting
  * Fix resetting of scroll bar after clicking on button "inspection details"
- add support for HAML gems &gt;= 5.0 (bnc#1043785)
- add support for Sinatra gems &gt;= 2.0</changelog>
<changelog author="thardeck@suse.de" date="1503921600">- update to version 1.23.0
  * Support inspection of ppc64 systems (bnc#1052877)
- tracking bug (bnc#1055250)</changelog>

</package>
<package pkgid="95c1584bbd8dfd7cc7422aac394eb14051a9ac088ac72b3b9296670e2abfbb09" name="machinery" arch="x86_64">
    <version epoch="0" ver="1.23.0" rel="5.1"/>

<changelog author="thardeck@suse.de" date="1442318400">- update to version 1.13.0
  * Fix: Show `Files extracted` status in `compare --html` when both
    status are the same (gh#SUSE/machinery#1218)
  * Fix: Validate port option in the `show`, `compare`,  and `serve`
    commands (gh#SUSE/machinery#1316)
  * Align output of `machinery config`
  * Add rpc_pipefs to filtered filesystems (gh#SUSE/machinery#1250)
  * Handle socket errors for `-i` option
  * Add `containerize` command to the experimental features
  * Export of autoyast files is now possible with system descriptions,
    which have empty repository scopes (gh#SUSE/machinery#1268)
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when the files are extracted
  * Introduce format version 5 which adds the "environment" scope (see
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-5).
    This scope is a hidden scope which is used internally by Machinery.
  * Only print binary path if it's not first in PATH (gh#SUSE/machinery#1284)
  * Do not exclude files with broken UTF-8 filenames anymore
- disable gem bundling for openSUSE Tumbleweed</changelog>
<changelog author="thardeck@suse.de" date="1444132800">- update to version 1.14.0
  * The machinery-helper is now built during gem-installation on x86_64
    machines if Go is available. The RPM package is still shipped with
    a precompiled version.
  * Allow limiting the `list` command output to certain system descriptions
    by passing them along as argument (gh#SUSE/machinery#1398)
  * Add `move` command to rename system descriptions (gh#SUSE/machinery#1397)
  * Add inspection of RPM based Docker containers
- machinery-helper is now built during gem installation and thus part of the
  gem file structure</changelog>
<changelog author="thardeck@suse.de" date="1444392000">- update to version 1.14.1
  * Fix: Clean up binding the server for HTML view to IP addresses
  * Fix: Make links to sections with common elements clearer in HTML comparison
    view (gh#SUSE/machinery#1222)
  * Fix: XML files are no longer treated as binary files in HTML view
  * Fix: Scrolling issue of file view (gh#SUSE/machinery#1155)</changelog>
<changelog author="thardeck@suse.de" date="1444824000">- update to version 1.14.2
  * Fix typo in HTML package view  (gh#SUSE/machinery#1493)
- tracking bug (bnc#950362)</changelog>
<changelog author="thardeck@suse.de" date="1445860800">- update to version 1.15.0
  * No information is cut off in the HTML view
  * Files containing special characters can now be downloaded
  * Links to common elements work in HTML when all scopes are collapsed
  * Show if description was result of a container inspection
  * Disable nav bar buttons when scope has been excluded (gh#SUSE/machinery#1199)
  * Show details of elements with changed attributes for all scopes in
    comparison view
  * Show progress indicator while loading file content in HTML view</changelog>
<changelog author="thardeck@suse.de" date="1446811200">- update to version 1.16.0
  * The error message "There is already a server with the same port running" has
    been cleaned up and is no longer misleading (gh#SUSE/machinery#1541)
  * Add OpenSUSE Leap as supported system
  * HTML comparison is now available without the experimental feature flag
  * Add error message to recommend using `--name` when a container with a slash is
    inspected (gh#SUSE/machinery#1490)
  * Fixed crash during inspection of a folder which contains special characters
    in its name (gh#SUSE/machinery#1580)
  * Speed up inspection of config and changed managed files
  * Fix docker inspection when specifying a docker image with tag
  * GConf XML files are no longer treated as binary files in HTML view
  * Add current outgoing ip and export directory to Autoyast README.md during
    export (gh#SUSE/machinery#1543)
  * Handle invalid utf-8 characters in /etc/passwd
  * Fix: "changed" link in compare view is visible while scope is collapsed but
    doesn't do anything (gh#SUSE/machinery#1555)
- tracking bug (bnc#953981)</changelog>
<changelog author="thardeck@suse.de" date="1447070400">- update to version 1.16.1
  * Fix type recognition in case of empty files for config- and changed-managed-files
    inspectors (gh#SUSE/machinery#1612)</changelog>
<changelog author="thardeck@suse.de" date="1448366400">- update to version 1.16.2
  * Fix crash when the user does not have enough permissions to create the image
    directory for the `build` command (gh#SUSE/machinery#1667)
  * Fix wrong hint for docker containers while running `analyze` command
  * Add a new hint when using the `--public` option for the `serve` command that it
    makes all descriptions publicly available
  * Fix Machinery failing to inspect changed config files in case of restrictive
    permissions (gh#SUSE/machinery#1609)
  * Remove hint for `show`, when `inspect` is run with `--show` option
  * Fix repository inspection on hosts that have a LANGUAGE variable set
  * Empty scopes now display a message in HTML &amp; CLI views (gh#SUSE/machinery#1615)
  * Fix SLES 11 SP4 os inspector output to be similar to SLES 11 SP3
  * Fix Autoyast export on openSUSE Leap and Tumbleweed (gh#SUSE/machinery#1627)
  * Allow building of openSUSE Leap and Tumbleweed on openSUSE Leap and Tumbleweed
  * Allow building of SLES11 and SLES12 on openSUSE Leap
  * Add HTML landing page, which lists all system descriptions on your system</changelog>
<changelog author="thardeck@suse.de" date="1452168000">- update to version 1.16.3
  * Remove concept of "supported systems" in favor of letting Machinery run
    everywhere. Whether a system can be built, exported, etc will be validated
    from its related task by checking if the propper tooling is installed
  * Remove hint for `show`, when `inspect-container` is run with `--show` option
  * Rephrase the startup messages and warn messages when starting the HTTP
    server for compare, show, or serve system descriptions
  * Change `serve` command to always list all system descriptions
- increase nokogiri requirement to &gt;= 1.6.1
- tracking bug (bnc#961011)</changelog>
<changelog author="thardeck@suse.de" date="1452772800">- update to version 1.16.4
  * The unmanaged-files scope filter will not include "/boot" by default anymore.
    In order to have the same behavior as before run:
  * Fix crash during image build on SLES12 SP1 (gh#SUSE/machinery#1828)
- reduce version restrictions for gems to the major version (bnc#961176)</changelog>
<changelog author="thardeck@suse.de" date="1453723200">- update to version 1.17.0
  * Fix reset button in HTML view (gh#SUSE/machinery#1899)
  * Align config-files scope in HTML view (gh#SUSE/machinery#1814)
  * Allow closing file dialog (in WebUI) by pressing ESC
  * Support inspection of Ubuntu 14.04 systems
  * New `--ssh-identity-file` option to specify a SSH private key when inspecting
    a remote system
  * New `--ssh-port` option to specify an SSH port when inspecting a remote system</changelog>
<changelog author="thardeck@suse.de" date="1456833600">- update to version 1.18.0
  * Make the machinery-helper exclusive to improve inspection performance significantly
    on all supported architectures.
    Following this change Go is required for installing the gem for now.
  * Fix treatment of the rpm `(replaced)` flag (gh#SUSE/machinery#1897)
  * Fix repository recognition on older Debian systems
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when a remote user is used
  * Show all available information for unmanaged files in HTML view (gh#SUSE/machinery#1905)
  * Move the machinery documentation from man page to HTML format
  * Implement "--extract-metadata" option for the unmanaged-files inspection to
    retrieve the file meta (e.g. owner, group, size) data without extracting the
    files.
  * Fixed counting of files in unmanaged directories (empty directories now report zero files
    as one would expect)
- remove dependency on Nokogiri gem
- tracking bug (bnc#968380)</changelog>
<changelog author="thardeck@suse.de" date="1459771200">- update to version 1.19.0
  * Rename config-files inspector to changed-config-files inspector to be more
    intuitive
  * Following the previous change the analyze operation was also renamed to
    changed-config-files-diffs
  * Add explanation for patterns-tasks relationship for Debian based
    systems (gh#SUSE/machinery#1820)
  * Public serve task now prints hostname for sharing (gh#SUSE/machinery#1699)
  * Fix export of description with no repositories scope to Autoyast (gh#SUSE/machinery#2024)
  * Only use required packages for bootstrap in Kiwi export
  * Fix regression which prevented changed-config-file diffs from being shown
    in the HTML output
  * Hint now mentions remote-user option (gh#SUSE/machinery#1813)
  * Hint is printed when `machinery` is called without options (gh#SUSE/machinery#1286)
  * Rename --exclude-scope option to --ignore-scope (gh#SUSE/machinery#897)</changelog>
<changelog author="thardeck@suse.de" date="1461326400">- update to version 1.20.0
  * Added explanation for 'N/A' fields for each scope (gh#SUSE/machinery#1904)
  * Added support of the ARM architectures "armv6l", "armv7l" and "aarch64" to
    our machinery-helper (This requires at least Go version 1.5)
  * Introduce format version 9 which fixes a migration issue (gh#SUSE/machinery#2041)
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-9</changelog>
<changelog author="thardeck@suse.de" date="1466510400">- update to version 1.21.0
  * Add attribute in patterns scope to identify the patterns manager
  * Improve navigation in HTML view to connect "list", "show" and "compare"
    functionality
  * Fix service inspector on systemd to include instanciated services
  * Introduce format version 10 to allow distinction between files and directories
    for meta data of unmanaged files.
    This distinction is only available for newly inspected descriptions.
    Additionally, an attribute in the patterns scope was added to identify the patterns manager.
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-10</changelog>
<changelog author="thardeck@suse.de" date="1475755200">- update to version 1.22.0
  * Add remaining systemd service states in Kiwi export (gh#SUSE/machinery#2122)
  * Add export of system descriptions as HTML page. This provides an offline
    view of descrptions (gh#SUSE/machinery#2119)
  * Fix changed files inspections on dpkg systems in case of diversions
- tracking bug (bnc#1002805)</changelog>
<changelog author="thardeck@suse.de" date="1476446400">- update to version 1.22.1
  * Only use sudo for reading files when necessary (gh#SUSE/machinery#2077)
  * Gracefully handle RequireTTY enabled sudo configs (gh#SUSE/machinery#2135)
  * Add rsync requirement check for remote system (gh#SUSE/machinery#2165)</changelog>
<changelog author="thardeck@suse.de" date="1479297600">- update to version 1.22.2
  * Prevent machinery-helper from crashing when files are inaccessible during
    inspection (bnc#1009774)
  * Fix analyze of changed-config-files when NFS or SMB repositories are
    used (gh#SUSE/machinery#2132)
  * Do not add repositories which require registration to built images (bnc#1004697)
  * Fix package inspection on older Debian systems
  * Fix extraction of information for Debian packages containing a dash in their name
- tracking bug (bnc#1035727)</changelog>
<changelog author="thardeck@suse.de" date="1497960000">- update to version 1.22.3
  * Gracefully handle incorrect filter pathes in the experimental filtering function
  * Error handling for disrupted ssh connection while inspecting
  * Fix resetting of scroll bar after clicking on button "inspection details"
- add support for HAML gems &gt;= 5.0 (bnc#1043785)
- add support for Sinatra gems &gt;= 2.0</changelog>
<changelog author="thardeck@suse.de" date="1503921600">- update to version 1.23.0
  * Support inspection of ppc64 systems (bnc#1052877)
- tracking bug (bnc#1055250)</changelog>

</package>
<package pkgid="8594d82cc90c6dbcf04c3c1e810a6c48a74d72038ab5e48ea26a456eaeb02a3f" name="machinery-doc" arch="x86_64">
    <version epoch="0" ver="1.23.0" rel="5.1"/>

<changelog author="thardeck@suse.de" date="1442318400">- update to version 1.13.0
  * Fix: Show `Files extracted` status in `compare --html` when both
    status are the same (gh#SUSE/machinery#1218)
  * Fix: Validate port option in the `show`, `compare`,  and `serve`
    commands (gh#SUSE/machinery#1316)
  * Align output of `machinery config`
  * Add rpc_pipefs to filtered filesystems (gh#SUSE/machinery#1250)
  * Handle socket errors for `-i` option
  * Add `containerize` command to the experimental features
  * Export of autoyast files is now possible with system descriptions,
    which have empty repository scopes (gh#SUSE/machinery#1268)
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when the files are extracted
  * Introduce format version 5 which adds the "environment" scope (see
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-5).
    This scope is a hidden scope which is used internally by Machinery.
  * Only print binary path if it's not first in PATH (gh#SUSE/machinery#1284)
  * Do not exclude files with broken UTF-8 filenames anymore
- disable gem bundling for openSUSE Tumbleweed</changelog>
<changelog author="thardeck@suse.de" date="1444132800">- update to version 1.14.0
  * The machinery-helper is now built during gem-installation on x86_64
    machines if Go is available. The RPM package is still shipped with
    a precompiled version.
  * Allow limiting the `list` command output to certain system descriptions
    by passing them along as argument (gh#SUSE/machinery#1398)
  * Add `move` command to rename system descriptions (gh#SUSE/machinery#1397)
  * Add inspection of RPM based Docker containers
- machinery-helper is now built during gem installation and thus part of the
  gem file structure</changelog>
<changelog author="thardeck@suse.de" date="1444392000">- update to version 1.14.1
  * Fix: Clean up binding the server for HTML view to IP addresses
  * Fix: Make links to sections with common elements clearer in HTML comparison
    view (gh#SUSE/machinery#1222)
  * Fix: XML files are no longer treated as binary files in HTML view
  * Fix: Scrolling issue of file view (gh#SUSE/machinery#1155)</changelog>
<changelog author="thardeck@suse.de" date="1444824000">- update to version 1.14.2
  * Fix typo in HTML package view  (gh#SUSE/machinery#1493)
- tracking bug (bnc#950362)</changelog>
<changelog author="thardeck@suse.de" date="1445860800">- update to version 1.15.0
  * No information is cut off in the HTML view
  * Files containing special characters can now be downloaded
  * Links to common elements work in HTML when all scopes are collapsed
  * Show if description was result of a container inspection
  * Disable nav bar buttons when scope has been excluded (gh#SUSE/machinery#1199)
  * Show details of elements with changed attributes for all scopes in
    comparison view
  * Show progress indicator while loading file content in HTML view</changelog>
<changelog author="thardeck@suse.de" date="1446811200">- update to version 1.16.0
  * The error message "There is already a server with the same port running" has
    been cleaned up and is no longer misleading (gh#SUSE/machinery#1541)
  * Add OpenSUSE Leap as supported system
  * HTML comparison is now available without the experimental feature flag
  * Add error message to recommend using `--name` when a container with a slash is
    inspected (gh#SUSE/machinery#1490)
  * Fixed crash during inspection of a folder which contains special characters
    in its name (gh#SUSE/machinery#1580)
  * Speed up inspection of config and changed managed files
  * Fix docker inspection when specifying a docker image with tag
  * GConf XML files are no longer treated as binary files in HTML view
  * Add current outgoing ip and export directory to Autoyast README.md during
    export (gh#SUSE/machinery#1543)
  * Handle invalid utf-8 characters in /etc/passwd
  * Fix: "changed" link in compare view is visible while scope is collapsed but
    doesn't do anything (gh#SUSE/machinery#1555)
- tracking bug (bnc#953981)</changelog>
<changelog author="thardeck@suse.de" date="1447070400">- update to version 1.16.1
  * Fix type recognition in case of empty files for config- and changed-managed-files
    inspectors (gh#SUSE/machinery#1612)</changelog>
<changelog author="thardeck@suse.de" date="1448366400">- update to version 1.16.2
  * Fix crash when the user does not have enough permissions to create the image
    directory for the `build` command (gh#SUSE/machinery#1667)
  * Fix wrong hint for docker containers while running `analyze` command
  * Add a new hint when using the `--public` option for the `serve` command that it
    makes all descriptions publicly available
  * Fix Machinery failing to inspect changed config files in case of restrictive
    permissions (gh#SUSE/machinery#1609)
  * Remove hint for `show`, when `inspect` is run with `--show` option
  * Fix repository inspection on hosts that have a LANGUAGE variable set
  * Empty scopes now display a message in HTML &amp; CLI views (gh#SUSE/machinery#1615)
  * Fix SLES 11 SP4 os inspector output to be similar to SLES 11 SP3
  * Fix Autoyast export on openSUSE Leap and Tumbleweed (gh#SUSE/machinery#1627)
  * Allow building of openSUSE Leap and Tumbleweed on openSUSE Leap and Tumbleweed
  * Allow building of SLES11 and SLES12 on openSUSE Leap
  * Add HTML landing page, which lists all system descriptions on your system</changelog>
<changelog author="thardeck@suse.de" date="1452168000">- update to version 1.16.3
  * Remove concept of "supported systems" in favor of letting Machinery run
    everywhere. Whether a system can be built, exported, etc will be validated
    from its related task by checking if the propper tooling is installed
  * Remove hint for `show`, when `inspect-container` is run with `--show` option
  * Rephrase the startup messages and warn messages when starting the HTTP
    server for compare, show, or serve system descriptions
  * Change `serve` command to always list all system descriptions
- increase nokogiri requirement to &gt;= 1.6.1
- tracking bug (bnc#961011)</changelog>
<changelog author="thardeck@suse.de" date="1452772800">- update to version 1.16.4
  * The unmanaged-files scope filter will not include "/boot" by default anymore.
    In order to have the same behavior as before run:
  * Fix crash during image build on SLES12 SP1 (gh#SUSE/machinery#1828)
- reduce version restrictions for gems to the major version (bnc#961176)</changelog>
<changelog author="thardeck@suse.de" date="1453723200">- update to version 1.17.0
  * Fix reset button in HTML view (gh#SUSE/machinery#1899)
  * Align config-files scope in HTML view (gh#SUSE/machinery#1814)
  * Allow closing file dialog (in WebUI) by pressing ESC
  * Support inspection of Ubuntu 14.04 systems
  * New `--ssh-identity-file` option to specify a SSH private key when inspecting
    a remote system
  * New `--ssh-port` option to specify an SSH port when inspecting a remote system</changelog>
<changelog author="thardeck@suse.de" date="1456833600">- update to version 1.18.0
  * Make the machinery-helper exclusive to improve inspection performance significantly
    on all supported architectures.
    Following this change Go is required for installing the gem for now.
  * Fix treatment of the rpm `(replaced)` flag (gh#SUSE/machinery#1897)
  * Fix repository recognition on older Debian systems
  * Inspection of unmanaged-files is now also using the faster machinery-helper
    when a remote user is used
  * Show all available information for unmanaged files in HTML view (gh#SUSE/machinery#1905)
  * Move the machinery documentation from man page to HTML format
  * Implement "--extract-metadata" option for the unmanaged-files inspection to
    retrieve the file meta (e.g. owner, group, size) data without extracting the
    files.
  * Fixed counting of files in unmanaged directories (empty directories now report zero files
    as one would expect)
- remove dependency on Nokogiri gem
- tracking bug (bnc#968380)</changelog>
<changelog author="thardeck@suse.de" date="1459771200">- update to version 1.19.0
  * Rename config-files inspector to changed-config-files inspector to be more
    intuitive
  * Following the previous change the analyze operation was also renamed to
    changed-config-files-diffs
  * Add explanation for patterns-tasks relationship for Debian based
    systems (gh#SUSE/machinery#1820)
  * Public serve task now prints hostname for sharing (gh#SUSE/machinery#1699)
  * Fix export of description with no repositories scope to Autoyast (gh#SUSE/machinery#2024)
  * Only use required packages for bootstrap in Kiwi export
  * Fix regression which prevented changed-config-file diffs from being shown
    in the HTML output
  * Hint now mentions remote-user option (gh#SUSE/machinery#1813)
  * Hint is printed when `machinery` is called without options (gh#SUSE/machinery#1286)
  * Rename --exclude-scope option to --ignore-scope (gh#SUSE/machinery#897)</changelog>
<changelog author="thardeck@suse.de" date="1461326400">- update to version 1.20.0
  * Added explanation for 'N/A' fields for each scope (gh#SUSE/machinery#1904)
  * Added support of the ARM architectures "armv6l", "armv7l" and "aarch64" to
    our machinery-helper (This requires at least Go version 1.5)
  * Introduce format version 9 which fixes a migration issue (gh#SUSE/machinery#2041)
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-9</changelog>
<changelog author="thardeck@suse.de" date="1466510400">- update to version 1.21.0
  * Add attribute in patterns scope to identify the patterns manager
  * Improve navigation in HTML view to connect "list", "show" and "compare"
    functionality
  * Fix service inspector on systemd to include instanciated services
  * Introduce format version 10 to allow distinction between files and directories
    for meta data of unmanaged files.
    This distinction is only available for newly inspected descriptions.
    Additionally, an attribute in the patterns scope was added to identify the patterns manager.
    https://github.com/SUSE/machinery/blob/master/docs/System-Description-Format.md#version-10</changelog>
<changelog author="thardeck@suse.de" date="1475755200">- update to version 1.22.0
  * Add remaining systemd service states in Kiwi export (gh#SUSE/machinery#2122)
  * Add export of system descriptions as HTML page. This provides an offline
    view of descrptions (gh#SUSE/machinery#2119)
  * Fix changed files inspections on dpkg systems in case of diversions
- tracking bug (bnc#1002805)</changelog>
<changelog author="thardeck@suse.de" date="1476446400">- update to version 1.22.1
  * Only use sudo for reading files when necessary (gh#SUSE/machinery#2077)
  * Gracefully handle RequireTTY enabled sudo configs (gh#SUSE/machinery#2135)
  * Add rsync requirement check for remote system (gh#SUSE/machinery#2165)</changelog>
<changelog author="thardeck@suse.de" date="1479297600">- update to version 1.22.2
  * Prevent machinery-helper from crashing when files are inaccessible during
    inspection (bnc#1009774)
  * Fix analyze of changed-config-files when NFS or SMB repositories are
    used (gh#SUSE/machinery#2132)
  * Do not add repositories which require registration to built images (bnc#1004697)
  * Fix package inspection on older Debian systems
  * Fix extraction of information for Debian packages containing a dash in their name
- tracking bug (bnc#1035727)</changelog>
<changelog author="thardeck@suse.de" date="1497960000">- update to version 1.22.3
  * Gracefully handle incorrect filter pathes in the experimental filtering function
  * Error handling for disrupted ssh connection while inspecting
  * Fix resetting of scroll bar after clicking on button "inspection details"
- add support for HAML gems &gt;= 5.0 (bnc#1043785)
- add support for Sinatra gems &gt;= 2.0</changelog>
<changelog author="thardeck@suse.de" date="1503921600">- update to version 1.23.0
  * Support inspection of ppc64 systems (bnc#1052877)
- tracking bug (bnc#1055250)</changelog>

</package>
<package pkgid="020f4fb5568770a2680d0f7acc044dad90c3d2806cd5801a1904454904c94826" name="madplay" arch="src">
    <version epoch="0" ver="0.15.2b" rel="2.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1321099200">- initial version (0.15.2b)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1361793600">- buildrequire zlib-devel to fix build on 12.3+</changelog>
<changelog author="mpluskal@suse.com" date="1487764800">- Cleanup spec file with spec-cleaner</changelog>

</package>
<package pkgid="b1c599f68a501651d31ef14df7ae132a344bd8c05406fc6e8204f36b748f0ce6" name="madplay" arch="x86_64">
    <version epoch="0" ver="0.15.2b" rel="2.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1321099200">- initial version (0.15.2b)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1361793600">- buildrequire zlib-devel to fix build on 12.3+</changelog>
<changelog author="mpluskal@suse.com" date="1487764800">- Cleanup spec file with spec-cleaner</changelog>

</package>
<package pkgid="d730f5038dd93787c7fb96e7cffd16b8b85c3889bf3292ef8c6a3eebb0829461" name="madplay-lang" arch="noarch">
    <version epoch="0" ver="0.15.2b" rel="2.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1321099200">- initial version (0.15.2b)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1361793600">- buildrequire zlib-devel to fix build on 12.3+</changelog>
<changelog author="mpluskal@suse.com" date="1487764800">- Cleanup spec file with spec-cleaner</changelog>

</package>
<package pkgid="abf877cf1fb3f2371c05009956f27a1e843b54ef03b336cc613c081d367128fa" name="mango-doc" arch="x86_64">
    <version epoch="0" ver="0.0.0+hg20141127.23dea2f59f66" rel="2.1"/>

<changelog author="tboerger@suse.com" date="1465214400">- Initial packaging</changelog>
<changelog author="tboerger@suse.com" date="1465214401">- Also provide mango-doc</changelog>
<changelog author="tboerger@suse.com" date="1481630400">- Refactoring based on new packaging proposal</changelog>
<changelog author="thipp@suse.de" date="1488888000">- Update source</changelog>
<changelog author="thipp@suse.de" date="1489665600">- Rename rpmlintrc to golang-googlecode-mango-doc-rpmlintrc</changelog>

</package>
<package pkgid="2225573ed42016a66eebb8399e6bd669a2b1ab2c11c0971f0bb8cd33215da1aa" name="mariadb" arch="src">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="a7cd7be4e3cd9315d5f73cda0826a87fc66469c5e9f77897d733b638b283d99e" name="mariadb" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="5a71465102cf715b1695674c0542f28e912a32421b1fc4fb9ce10eaeb1ab2dc1" name="mariadb-bench" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="fb5ae03495303f3c8b0e326c952be6c914f2a0b77fbbbd2edd006a3976e74bee" name="mariadb-client" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="b895257e9accf49548cbed141cc009b895d8e39e667908ffe2b5b4229c6813f0" name="mariadb-errormessages" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="f62c81c608c42228c5356cc1b7adbd75d597efbf278399f0e18d4b25d197a7c3" name="mariadb-test" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="fb22347c88abe8e2befbc69101684385a493f5bebfb895f09bb42c79d042e18a" name="mariadb-tools" arch="x86_64">
    <version epoch="0" ver="10.0.31" rel="23.1"/>

<changelog author="ro@suse.de" date="1411473600">- switch from buildrequire systemd to pkgconfig(systemd) to avoid cycle</changelog>
<changelog author="kstreitova@suse.com" date="1423828800">- update to MariaDB 10.0.16 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10016-release-notes/
    https://kb.askmonty.org/en/mariadb-10015-release-notes/
    https://kb.askmonty.org/en/mariadb-10014-release-notes/
    https://kb.askmonty.org/en/mariadb-10013-release-notes/
    https://kb.askmonty.org/en/mariadb-10012-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10016-changelog/
    https://kb.askmonty.org/en/mariadb-10015-changelog/
    https://kb.askmonty.org/en/mariadb-10014-changelog/
    https://kb.askmonty.org/en/mariadb-10013-changelog/
    https://kb.askmonty.org/en/mariadb-10012-changelog/
  * fixed CVEs:
  * 10.0.16: CVE-2015-0411, CVE-2015-0382, CVE-2015-0381
    CVE-2015-0432, CVE-2014-6568, CVE-2015-0374
  * 10.0.15: CVE-2014-6507, CVE-2014-6491, CVE-2014-6500
    CVE-2014-6469, CVE-2014-6555, CVE-2014-6559
    CVE-2014-6494, CVE-2014-6496, CVE-2014-6464
  * 10.0.14: none
  * 10.0.13: CVE-2010-5298, CVE-2014-0195, CVE-2014-0198
    CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
    CVE-2014-6474, CVE-2014-6489, CVE-2014-6564
    CVE-2012-5615, CVE-2014-4274, CVE-2014-4287
    CVE-2014-6463, CVE-2014-6478, CVE-2014-6484
    CVE-2014-6495, CVE-2014-6505, CVE-2014-6520
    CVE-2014-6530, CVE-2014-6551, CVE-2015-0391
  * 10.0.12: CVE-2014-4258, CVE-2014-4260, CVE-2014-2494
    CVE-2014-4207
  * fixes bugs [bnc#906117], [bnc#911442], [bnc#906194],
    [bnc#915911], [bnc#915912], [bnc#915913] and [bnc#915914].
  * add mroonga to the mysql.files
  * remove mariadb-10.0.9-perl-in-bench.patch (no longer needed)
  * update 1000-header_files_const_warnings.patch
  * add mariadb-10.0.16-crash_after_disk_full.patch to fix crashing
    when disk full situation is reached on alter table [bnc#904627].</changelog>
<changelog author="kstreitova@suse.com" date="1424088000">- add mariadb-10.0.16-allow_md5_in_FIPS.patch that allows md5
  in FIPS mode [bnc#911556].</changelog>
<changelog author="kstreitova@suse.com" date="1424952000">- add mariadb-10.0.16-encoded_columns_names.patch that fix a
  situation when bit and hex string literals unintentionally
  changed column names [bnc#919229].
- update %define srv_vers to 5.6.23 in specfile</changelog>
<changelog author="kstreitova@suse.com" date="1435665600">- update to MariaDB 10.0.20 GA
  * Release notes:
    https://kb.askmonty.org/en/mariadb-10020-release-notes/
    https://kb.askmonty.org/en/mariadb-10019-release-notes/
    https://kb.askmonty.org/en/mariadb-10018-release-notes/
    https://kb.askmonty.org/en/mariadb-10017-release-notes/
  * Changelog:
    https://kb.askmonty.org/en/mariadb-10020-changelog/
    https://kb.askmonty.org/en/mariadb-10019-changelog/
    https://kb.askmonty.org/en/mariadb-10018-changelog/
    https://kb.askmonty.org/en/mariadb-10017-changelog/
  * fixed CVEs:
  * 10.0.20: CVE-2015-3152
  * 10.0.19: none
  * 10.0.18: CVE-2014-8964, CVE-2015-2325, CVE-2015-2326,
    CVE-2015-0501, CVE-2015-2571, CVE-2015-0505,
    CVE-2015-0499
  * 10.0.17: CVE-2015-2568, CVE-2015-2573, CVE-2015-0433,
    CVE-2015-0441
  * fixes bugs: [bnc#921333], [bnc#924663], [bnc#919053],
    [bnc#920865], [bnc#919062], [bnc#920896],
    [bnc#934789], [bnc#936409], [bnc#936408],
    [bnc#936407]
  * remove the following patches:
  * mariadb-10.0.16-crash_after_disk_full.patch (fixed in 10.0.17)
  * mariadb-10.0.16-allow_md5_in_FIPS.patch (fixed in 10.0.18)
  * mariadb-10.0.16-encoded_columns_names.patch (fixed in 10.0.18)
  * update mariadb-10.0.11-group.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Sync to git state, fixes bnc#937754 too</changelog>
<changelog author="kstreitova@suse.com" date="1438171200">- fix spurious macro expansion in comment
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use libedit for MariaDB in SLE
- format with spec-cleaner
- tweak some cmake switches to enable more things
- removed superfluous '--group' parameter from init script.
- use syntax that is accepted by both mariadb and mysql ('--mysqld'
  changed to 'mysqld') [boo#937767]</changelog>
<changelog author="kstreitova@suse.com" date="1442577600">- update to MariaDB 10.0.21 GA
  * release notes:
    https://kb.askmonty.org/en/mariadb-10021-release-notes/
  * changelog:
    https://kb.askmonty.org/en/mariadb-10021-changelog/
  * fixed CVEs:
  * none
  * the following patches were processed upstream and are no longer needed:
  * mariadb-5.5.28-hotcopy.patch
  * mariadb-5.1.50-strncat-overflow.patch
  * mysql-community-server-5.1.51-mysql_config.patch
  * mariadb-5.5.32-upgrade-exit-status.patch
  * mariadb-5.5.41-mariadb-admincrash.patch
- add mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch to
  reduce the number of rounds and operations to avoid testcase timeout
  [bnc#937343]
- use bundled readline
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- set cmake options for MariaDB Galera Cluster (valid for MariaDB 10.1.x)</changelog>
<changelog author="kstreitova@suse.com" date="1450267200">- update to MariaDB 10.0.22 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10022-release-notes/
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10022-changelog/
  * fixed CVEs:
  * 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,
    CVE-2015-4913, CVE-2015-4792
  * fixes bugs: [bnc#958789]
  * remove the following patches (applied upstream):
  * mysql-community-server-5.6.12-srv_buf_size.patch
  * mariadb-10.0.16-header_files_const_warnings.patch
  * mariadb-10.0.21-mysql-test_innodb_simulate_comp_failures.patch
- add mariadb-10.0.22-mysql-test_main_bootstrap.patch that fix
  main.bootstrap test (change default charset to utf8 in test
  result) [bnc#937787]
- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]
- add mariadb-10.0.22-fix_build_denabled_profiling_off.patch to
  fix compilation with '-DENABLED_PROFILING=OFF'</changelog>
<changelog author="kstreitova@suse.com" date="1464696000">- update to MariaDB 10.0.25 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10025-release-notes
  * https://kb.askmonty.org/en/mariadb-10024-release-notes
  * https://kb.askmonty.org/en/mariadb-10023-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10025-changelog
  * https://kb.askmonty.org/en/mariadb-10024-changelog
  * https://kb.askmonty.org/en/mariadb-10023-changelog
  * fixed CVEs:
  * 10.0.25: CVE-2016-0655, CVE-2016-0647, CVE-2016-0648,
    CVE-2016-0666, CVE-2016-0643
  * 10.0.24: CVE-2016-0668, CVE-2016-0640, CVE-2016-0644,
    CVE-2016-0646, CVE-2016-0649, CVE-2016-0650,
    CVE-2016-0641
  * 10.0.23: CVE-2016-0546, CVE-2016-0505, CVE-2016-0596,
    CVE-2016-0597, CVE-2016-0616, CVE-2016-0598,
    CVE-2016-0600, CVE-2016-0606, CVE-2016-0608,
    CVE-2016-0609, CVE-2016-0642, CVE-2016-0651,
    CVE-2016-2047
  * fixes bugs: [bnc#980904], [bnc#963806]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the following patches (applied upstream):
  * mariadb-10.0.15-covscan-signexpr.patch
  * mariadb-10.0.20-tabxml-bufferoverflowstrncat.patch
  * mariadb-10.0.22-fix_build_denabled_profiling_off.patch
- remove ha_tokudb.so plugin and tokuft_logprint and tokuftdump
  binaries as TokuDB storage engine requires the jemalloc library
  that isn't present in SLE-12-SP1 [bnc#970287]
- fix the leftovers of "logrotate.d/mysql" string in the logrotate
  error message. Occurrences of this string were changed to
  "logrotate.d/mariadb" in the
  mysql-community-server-5.1.46-logrotate.patch [bnc#970295]
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bnc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set,
    the error log is written to '/var/lib/mysql/$HOSTNAME.err',
    which is not picked up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work
    with files in the directory specified by 'secure-file-priv'
    option (='/var/lib/mysql-files').
- remove the leftovers of "openSUSE" string in the '-DWITH_COMMENT'
  and 'DCOMPILATION_COMMENT' options [bnc#961935]</changelog>
<changelog author="kstreitova@suse.com" date="1470312000">- update to Mariadb 10.0.26 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10026-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10026-changelog
  * fixed CVEs:
    CVE-2016-3477, CVE-2016-3521, CVE-2016-3615, CVE-2016-5440
  * fixes bugs:
    [bsc#991616]
- remove mariadb-10.0.22-mysql-test_main_bootstrap.patch that is no
  longer needed [bsc#984858]
- refresh mariadb-10.0.15-fortify-and-O.patch
- remove the leftovers of "openSUSE" string from specfile and
  my.cnf file [bsc#985217]
- remove unnecessary conditionals from specfile
- add '--ignore-db-dir=lost+found' option to mysql-systemd-helper
  in order not to misinterpret the lost+found directory as a
  database [bsc#986251]</changelog>
<changelog author="kstreitova@suse.com" date="1473768000">- update to Mariadb 10.0.27 GA
  * release notes:
  * https://kb.askmonty.org/en/mariadb-10027-release-notes
  * changelog:
  * https://kb.askmonty.org/en/mariadb-10027-changelog
  * fixes [CVE-2016-6662] [bsc#998309]  - security vulnerability
    that allowed a malicious user to create a my.cnf in the datadir
    and, under certain circumstances, execute arbitrary code as
    mysql (or even root) user
- add mariadb-10.0.27-optimizer.patch to make ORDER BY optimization
  functions take into account multiple equalities [bsc#949520]</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- add mariadb-10.0.27-mysql_install_db-mariadb_dirs.patch to fix
  mysql_install_db.sh script to find data files in mariadb
  directories when a user uses "--basedir" option [bsc#1006539]</changelog>
<changelog author="kstreitova@suse.com" date="1478088000">- add mariadb-10.0.27-mysql-test_optimizer_switch_basic.patch that
  adjusts mysql-test results in order to take account of a new option
  (orderby_uses_equalities) added by the optimizer patch [bsc#1003800]
- remove useless mysql@default.service [bsc#1004477]
- replace all occurrences of the string "@sysconfdir@" with "/etc"
  in mysql-community-server-5.1.46-logrotate.patch as it wasn't
  expanded properly [bsc#990890]</changelog>
<changelog author="kstreitova@suse.com" date="1478174400">- update to MariaDB 10.0.28 GA
  * notable changes:
  * XtraDB updated to 5.6.33-79.0
  * TokuDB updated to 5.6.33-79.0
  * Innodb updated to 5.6.33
  * Performance Schema updated to 5.6.33
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10028-release-notes
  * https://kb.askmonty.org/en/mariadb-10028-changelog
  * fixes the following CVEs:
    CVE-2016-5616 [bsc#1005562], CVE-2016-5624 [bsc#1005564],
    CVE-2016-5626 [bsc#1005566], CVE-2016-3492 [bsc#1005555],
    CVE-2016-5629 [bsc#1005569], CVE-2016-8283 [bsc#1005582],
    CVE-2016-7440 [bsc#1005581], CVE-2016-5584 [bsc#1005558],
    CVE-2016-6663 [bsc#1001367]
  * fixes also [bsc#1008318]
- refresh mariadb-10.0.17-group.patch</changelog>
<changelog author="kstreitova@suse.com" date="1485345600">- update to MariaDB 10.0.29 GA
  * notable changes:
  * XtraDB updated to 5.6.34-79.1
  * TokuDB updated to 5.6.34-79.1
  * Innodb updated to 5.6.35
  * Performance Schema updated to 5.6.35
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10029-release-notes
  * https://kb.askmonty.org/en/mariadb-10029-changelog
  * fixes the following CVEs:
    CVE-2017-3318 [bsc#1020896], CVE-2017-3317 [bsc#1020894]
    CVE-2017-3312 [bsc#1020873], CVE-2017-3291 [bsc#1020884]
    CVE-2017-3265 [bsc#1020885], CVE-2017-3258 [bsc#1020875]
    CVE-2017-3257 [bsc#1020878], CVE-2017-3244 [bsc#1020877]
    CVE-2017-3243 [bsc#1020891], CVE-2017-3238 [bsc#1020882]
    CVE-2016-6664 [bsc#1008253]
  * fixes also [bsc#1020868]
- refresh mariadb-10.0.17-group.patch
- add mysqld_safe_helper to the filelist</changelog>
<changelog author="kstreitova@suse.com" date="1485777600">- add mariadb-10.0.29-incorrect_list_handling.patch to fix incorrect
  linked list handling in mysql_prune_stmt_list() function that can
  cause use-after-free error [bsc#1022428]</changelog>
<changelog author="kstreitova@suse.com" date="1492603200">- update to MariaDB 10.0.30 GA
  * notable changes:
  * XtraDB updated to 5.6.35-80.0
  * TokuDB updated to 5.6.35-80.0
  * PCRE updated to 8.40
  * MDEV-11027: better InnoDB crash recovery progress reporting
  * MDEV-11520: improvements to how InnoDB data files are extended
  * Improvements to InnoDB startup/shutdown to make it more robust
  * MDEV-11233: fix for FULLTEXT index crash
  * MDEV-6143: MariaDB Linux binary tarballs will now always untar
    to directories that match their filename
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10030-release-notes
  * https://kb.askmonty.org/en/mariadb-10030-changelog
  * fixes the following CVEs:
    CVE-2017-3313 [bsc#1020890]
    CVE-2017-3302 [bsc#1022428] - remove our patch that is no
    longer needed (mariadb-10.0.29-incorrect_list_handling.patch)
- refresh mysql-community-server-5.1.46-logrotate.patch
- re-enable the profiling support in as it was enabled in SLE12SP0
  * it also fixes [bsc#996821]
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]
- [bsc#1034911] - tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1495195200">- fix permissions for /var/run/mysql in mysql-systemd-helper that
  were wrongly set to 700 instead of 755 due to added umask in
  [bsc#1020976]. This prevented non-root from connecting to the
  database [bsc#1038740]</changelog>
<changelog author="kstreitova@suse.com" date="1500552000">- update to MariaDB 10.0.31 GA
  * notable changes:
  * XtraDB updated to 5.6.36-82.0
  * TokuDB updated to 5.6.36-82.0
  * Innodb updated to 5.6.36
  * Performance Schema updated to 5.6.36
  * MDEV-11027: InnoDB log recovery is too noisy
  * MDEV-12091: Shutdown fails to wait for rollback of recovered
    transactions to finish
  * MDEV-12534: Use atomic operations whenever available
  * MDEV-12674: Innodb_row_lock_current_waits has overflow
  * MDEV-12188: information schema - errors populating fail to
    free memory, unlock mutexes
  * MDEV-12358: Fixes for GCC 7
  * Miscellaneous compiler warning fixes
  * MDEV-6262: Fixes from coverity report on MariaDB
  * release notes and changelog:
  * https://kb.askmonty.org/en/mariadb-10031-release-notes
  * https://kb.askmonty.org/en/mariadb-10031-changelog
  * fixes the following CVEs:
  * CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456,
    CVE-2017-3464
  * remove mariadb-10.0.10-string-overflow.patch that is no longer
    needed
- [bsc#1048715] tracker bug
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream. It also fixes
  hanging mysql-systemd-helper when mariadb fails (e.g. because of
  the misconfiguration) [bsc#963041]</changelog>

</package>
<package pkgid="472a20491711020260866628a9c45b84d97abbeee897ead314dee2bb5b991fa4" name="mbedtls" arch="src">
    <version epoch="0" ver="1.3.19" rel="18.1"/>

<changelog author="fisiu@opensuse.org" date="1363435200">- Update to 1.2.6:
  * Fixed memory leak in ssl_free() and ssl_reset()
  * Corrected GCM counter incrementation to use only 32-bits
    instead of 128-bits
  * Fixed net_bind() for specified IP addresses on little endian
    systems
  * Fixed assembly code for ARM (Thumb and regular)
  * Detailed information available in ChangeLog file.</changelog>
<changelog author="fisiu@opensuse.org" date="1368619200">- Update to 1.2.7:
  * Ability to specify allowed ciphersuites based on the protocol
    version.
  * Default Blowfish keysize is now 128-bits
  * Test suites made smaller to accommodate Raspberry Pi
  * Fix for MPI assembly for ARM
  * GCM adapted to support sizes &gt; 2^29</changelog>
<changelog author="fisiu@opensuse.org" date="1396094400">- Update to 1.3.5, detailed changes available in ChangeLog file:
  * Elliptic Curve Cryptography module added
  * Elliptic Curve Diffie Hellman module added
  * Ephemeral Elliptic Curve Diffie Hellman support for SSL/TLS
    (ECDHE-based ciphersuites)
  * Ephemeral Elliptic Curve Digital Signature Algorithm support for SSL/TLS
    (ECDSA-based ciphersuites)
  * Ability to specify allowed ciphersuites based on the protocol version.
  * PSK and DHE-PSK based ciphersuites added
  * Memory allocation abstraction layer added
  * Buffer-based memory allocator added (no malloc() / free() / HEAP usage)
  * Threading abstraction layer added (dummy / pthread / alternate)
  * Public Key abstraction layer added
  * Parsing Elliptic Curve keys
  * Parsing Elliptic Curve certificates
  * Support for max_fragment_length extension (RFC 6066)
  * Support for truncated_hmac extension (RFC 6066)
  * Support for zeros-and-length (ANSI X.923) padding, one-and-zeros
    (ISO/IEC 7816-4) padding and zero padding in the cipher layer
  * Support for session tickets (RFC 5077)
  * Certificate Request (CSR) generation with extensions (key_usage,
    ns_cert_type)
  * X509 Certificate writing with extensions (basic_constraints,
    issuer_key_identifier, etc)
  * Optional blinding for RSA, DHM and EC
  * Support for multiple active certificate / key pairs in SSL servers for
    the same host (Not to be confused with SNI!)</changelog>
<changelog author="fisiu@opensuse.org" date="1408104000">- Update to 1.3.8, detailed changes available in ChangeLog file:
  * Fix length checking for AEAD ciphersuites (found by Codenomicon).
    It was possible to crash the server (and client) using crafted messages
    when a GCM suite was chosen.
  * Add CCM module and cipher mode to Cipher Layer
  * Support for CCM and CCM_8 ciphersuites
  * Support for parsing and verifying RSASSA-PSS signatures in the X.509
    modules (certificates, CRLs and CSRs).
  * Blowfish in the cipher layer now supports variable length keys.
  * Add example config.h for PSK with CCM, optimized for low RAM usage.
  * Optimize for RAM usage in example config.h for NSA Suite B profile.
  * Add POLARSSL_REMOVE_ARC4_CIPHERSUITES to allow removing RC4 ciphersuites
    from the default list (inactive by default).
  * Add server-side enforcement of sent renegotiation requests
    (ssl_set_renegotiation_enforced())
  * Add SSL_CIPHERSUITES config.h flag to allow specifying a list of
    ciphersuites to use and save some memory if the list is small.</changelog>
<changelog author="fisiu@opensuse.org" date="1415016000">- Update to 1.3.9, detailed changes available in ChangeLog file:
  * Lowest common hash was selected from signature_algorithms extension in
    TLS 1.2: fix boo#903672, CVE-2014-8627.
  * Remotely-triggerable memory leak when parsing some X.509 certificates,
    CVE-2014-8628.
  * Remotely-triggerable memory leak when parsing crafted ClientHello,
    CVE-2014-8628.
  * Ciphersuites using SHA-256 or SHA-384 now require TLS 1.x.
  * Ciphersuites using RSA-PSK key exchange now require TLS 1.x.
  * POLARSSL_MPI_MAX_SIZE now defaults to 1024 in order to allow 8192 bits RSA
    keys.
  * X.509 certificates with more than one AttributeTypeAndValue per
    RelativeDistinguishedName are not accepted any more.
- Build with POLARSSL_THREADING_PTHREAD: fix boo#903671.</changelog>
<changelog author="fisiu@opensuse.org" date="1421755200">- Add polarssl-CVE-2015-1182.patch: Remote attack using crafted certificates:
  fix boo#913903, CVE-2015-1182.</changelog>
<changelog author="mpluskal@suse.com" date="1426420800">- Rename to mbedtls
- Use cmake macro for building
- Update to 1.3.10
  * NULL pointer dereference in the buffer-based allocator when the buffer is
    full and polarssl_free() is called (found by Mark Hasemeyer)
    (only possible if POLARSSL_MEMORY_BUFFER_ALLOC_C is enabled, which it is
    not by default).
  * Fix remotely-triggerable uninitialised pointer dereference caused by
    crafted X.509 certificate (TLS server is not affected if it doesn't ask for a
    client certificate) (found using Codenomicon Defensics).
  * Fix remotely-triggerable memory leak caused by crafted X.509 certificates
    (TLS server is not affected if it doesn't ask for a client certificate)
    (found using Codenomicon Defensics).
  * Fix potential stack overflow while parsing crafted X.509 certificates
    (TLS server is not affected if it doesn't ask for a client certificate)
    (found using Codenomicon Defensics).
  * Fix timing difference that could theoretically lead to a
    Bleichenbacher-style attack in the RSA and RSA-PSK key exchanges
    (reported by Sebastian Schinzel).
  * Add support for FALLBACK_SCSV (draft-ietf-tls-downgrade-scsv).
  * Add support for Extended Master Secret (draft-ietf-tls-session-hash).
  * Add support for Encrypt-then-MAC (RFC 7366).
  * Add function pk_check_pair() to test if public and private keys match.
  * Add x509_crl_parse_der().
  * Add compile-time option POLARSSL_X509_MAX_INTERMEDIATE_CA to limit the
    length of an X.509 verification chain.
  * Support for renegotiation can now be disabled at compile-time
  * Support for 1/n-1 record splitting, a countermeasure against BEAST.
  * Certificate selection based on signature hash, prefering SHA-1 over SHA-2
    for pre-1.2 clients when multiple certificates are available.
  * Add support for getrandom() syscall on recent Linux kernels with Glibc or
    a compatible enough libc (eg uClibc).
  * Add ssl_set_arc4_support() to make it easier to disable RC4 at runtime
    while using the default ciphersuite list.
  * Added new error codes and debug messages about selection of
    ciphersuite/certificate.</changelog>
<changelog author="mpluskal@suse.com" date="1426420801">- Fix sed for includes</changelog>
<changelog author="mpluskal@suse.com" date="1426507200">- Update provides/obsoletes</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Create symlink to ensure compatibility with polarssl</changelog>
<changelog author="mpluskal@suse.com" date="1427457600">- Update package categories</changelog>
<changelog author="schwab@suse.de" date="1427889600">- getrandom-syscall-fallback.patch: Fall back to /dev/urandom if getrandom
  syscall is not implemented.</changelog>
<changelog author="fisiu@opensuse.org" date="1434369600">- Update to 1.3.11:
  * Remove bias in mpi_gen_prime (contributed by Pascal Junod).
  * Remove potential sources of timing variations (some contributed by Pascal
    Junod).
  * Options POLARSSL_HAVE_INT8 and POLARSSL_HAVE_INT16 are deprecated.
  * Enabling POLARSSL_NET_C without POLARSSL_HAVE_IPV6 is deprecated.
  * compat-1.2.h and openssl.h are deprecated.
  * ssl_set_own_cert() no longer calls pk_check_pair() since the performance
    impact was bad for some users (this was introduced in 1.3.10).
  * Move from SHA-1 to SHA-256 in example programs using signatures (suggested
    by Thorsten Mühlfelder).
  * Remove dependency on sscanf() in X.509 parsing modules.
  * Fix compile errors with PLATFORM_NO_STD_FUNCTIONS.
  * Fix bug in entropy.c when THREADING_C is also enabled that caused
    entropy_free() to crash (thanks to Rafa? Przywara).
  * Fix memory leak when gcm_setkey() and ccm_setkey() are used more than once
    on the same context.
  * Fix bug in ssl_mail_client when password is longer that username (found by
    Bruno Pape).
  * Fix undefined behaviour (memcmp( NULL, NULL, 0 );) in X.509 modules
    (detected by Clang's 3.6 UBSan).
  * mpi_size() and mpi_msb() would segfault when called on an mpi that is
    initialized but not set (found by pravic).
  * Fix detection of support for getrandom() on Linux (reported by syzzer) by
    doing it at runtime (using uname) rather that compile time.
  * Fix handling of symlinks by "make install" (found by Gaël PORTAY).
  * Fix potential NULL pointer dereference (not trigerrable remotely) when
    ssl_write() is called before the handshake is finished (introduced in
    1.3.10) (first reported by Martin Blumenstingl).
  * Fix bug in pk_parse_key() that caused some valid private EC keys to be
    rejected.
  * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos).
  * Fix thread safety bug in RSA operations (found by Fredrik Axelsson).
  * Fix hardclock() (only used in the benchmarking program) with some versions
    of mingw64 (found by kxjhlele).
  * Fix potential unintended sign extension in asn1_get_len() on 64-bit
    platforms.
  * Fix potential memory leak in ssl_set_psk() (found by Mansour Moufid).
  * Fix compile error when POLARSSL_SSL_DISABLE_RENEGOTATION and
    POLARSSL_SSL_SSESSION_TICKETS where both enabled in config.h (introduced in
    1.3.10).
  * Add missing extern "C" guard in aesni.h (reported by amir zamani).
  * Add missing dependency on SHA-256 in some x509 programs (reported by
    Gergely Budai).
  * Fix bug related to ssl_set_curves(): the client didn't check that the curve
    picked by the server was actually allowed.
- Drop getrandom-syscall-fallback.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build libmbedtls9-32bit, as needed by
  libbzrtp0-32bit.</changelog>
<changelog author="mpluskal@suse.com" date="1444305600">- Update to 1.3.14
  * Added fix for CVE-2015-5291 (boo#949380) to prevent heap corruption due to buffer
    overflow of the hostname or session ticket. Found by Guido Vranken,
    Intelworks.
  * Fix stack buffer overflow in pkcs12 decryption (used by
    mbedtls_pk_parse_key(file)() when the password is &gt; 129 bytes. Found by
    Guido Vranken, Intelworks. Not triggerable remotely.
  * Fix potential buffer overflow in mbedtls_mpi_read_string().
    Found by Guido Vranken, Intelworks. Not exploitable remotely in the context
    of TLS, but might be in other uses. On 32 bit machines, requires reading a
    string of close to or larger than 1GB to exploit; on 64 bit machines, would
    require reading a string of close to or larger than 2^62 bytes.
  * Fix potential random memory allocation in mbedtls_pem_read_buffer()
    on crafted PEM input data. Found and fix provided by Guido Vranken,
    Intelworks. Not triggerable remotely in TLS. Triggerable remotely if you
    accept PEM data from an untrusted source.
  * Fix potential double-free if ssl_set_psk() is called repeatedly on
    the same ssl_context object and some memory allocations fail. Found by
    Guido Vranken, Intelworks. Can not be forced remotely.
  * Fix possible heap buffer overflow in base64_encode() when the input
    buffer is 512MB or larger on 32-bit platforms. Found by Guido Vranken,
    Intelworks. Found by Guido Vranken. Not trigerrable remotely in TLS.
  * Fix potential heap buffer overflow in servers that perform client
    authentication against a crafted CA cert. Cannot be triggered remotely
    unless you allow third parties to pick trust CAs for client auth. Found by
    Guido Vranken, Intelworks.
  * Fix compile error in net.c with musl libc. Found and patch provided by
    zhasha (#278).
  * Fix macroization of 'inline' keywork when building as C++. (#279)
  * Added checking of hostname length in ssl_set_hostname() to ensure domain
    names are compliant with RFC 1035.
- Changes for 1.3.13
  * Fix possible client-side NULL pointer dereference (read) when the client
    tries to continue the handshake after it failed (a misuse of the API).
    (Found and patch provided by Fabian Foerg, Gotham Digital Science using afl-fuzz.)
  * Add countermeasure against Lenstra's RSA-CRT attack for PKCS#1 v1.5
    signatures. (Found by Florian Weimer, Red Hat.)
    https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/
  * Setting SSL_MIN_DHM_BYTES in config.h had no effect (overriden in ssl.h)
    (found by Fabio Solari) (#256)
  * Fix bug in mbedtls_rsa_public() and mbedtls_rsa_private() that could
    result trying to unlock an unlocked mutex on invalid input (found by
    Fredrik Axelsson) (#257)
  * Fix -Wshadow warnings (found by hnrkp) (#240)
  * Fix unused function warning when using MBEDTLS_MDx_ALT or
    MBEDTLS_SHAxxx_ALT (found by Henrik) (#239)
  * Fix memory corruption in pkey programs (found by yankuncheng) (#210)
  * Fix memory corruption on client with overlong PSK identity, around
    SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by
    Aleksandrs Saveljevs) (#238)
  * Fix off-by-one error in parsing Supported Point Format extension that
    caused some handshakes to fail.
  * When verifying a certificate chain, if an intermediate certificate is
    trusted, no later cert is checked. (suggested by hannes-landeholm)
    (#220).
- Changes for 1.3.12
  * Increase the minimum size of Diffie-Hellman parameters accepted by the
    client to 1024 bits, to protect against Logjam attack.
  * Increase the size of default Diffie-Hellman parameters on the server to
    2048 bits. This can be changed with ssl_set_dh_params().
  * Fix thread-safety issue in SSL debug module (found by Edwin van Vliet).
  * Some example programs were not built using make, not included in Visual
    Studio projects (found by Kristian Bendiksen).
  * Fix build error with CMake and pre-4.5 versions of GCC (found by Hugo
    Leisink).
  * Fix missing -static-ligcc when building shared libraries for Windows with
    make.
  * Fix compile error with armcc5 --gnu.
  * Add SSL_MIN_DHM_BYTES configuration parameter in config.h to choose the
    minimum size of Diffie-Hellman parameters accepted by the client.
  * The PEM parser now accepts a trailing space at end of lines (#226).</changelog>
<changelog author="mpluskal@suse.com" date="1447848000">- Update to 1.3.15
  * Fix potential double free if ssl_set_psk() is called more than once and
    some allocation fails. Cannot be forced remotely. Found by Guido Vranken,
    Intelworks.
  * Fix potential heap corruption on Windows when
    x509_crt_parse_path() is passed a path longer than 2GB. Cannot be
    triggered remotely. Found by Guido Vranken, Intelworks.
  * Fix potential buffer overflow in some asn1_write_xxx() functions.
    Cannot be triggered remotely unless you create X.509 certificates based
    on untrusted input or write keys of untrusted origin. Found by Guido
    Vranken, Intelworks.
  * The X509 max_pathlen constraint was not enforced on intermediate
    certificates. Found by Nicholas Wilson, fix and tests provided by
    Janos Follath. #280 and #319
  * Self-signed certificates were not excluded from pathlen counting,
    resulting in some valid X.509 being incorrectly rejected. Found and fix
    provided by Janos Follath. #319
  * Fix bug causing some handshakes to fail due to some non-fatal alerts not
    begin properly ignored. Found by mancha and Kasom Koht-arsa, #308
  * Fix build error with configurations where ECDHE-PSK is the only key
    exchange. Found and fix provided by Chris Hammond. #270
  * Fix failures in MPI on Sparc(64) due to use of bad assembly code.
    Found by Kurt Danielson. #292
  * Fix typo in name of the extKeyUsage OID. Found by inestlerode, #314
  * Fix bug in ASN.1 encoding of booleans that caused generated CA
    certificates to be rejected by some applications, including OS X
    Keychain. Found and fixed by Jonathan Leroy, Inikup.
  * Fix "Destination buffer is too small" error in cert_write program.
    Found and fixed by Jonathan Leroy, Inikup.</changelog>
<changelog author="mpluskal@suse.com" date="1452427200">- Update to 1.3.16
  * Fixes a potential double free when
    mbedtls_asn1_store_named_data() fails to allocate memory. This
    was only used for certificate generation and was not
    triggerable remotely in SSL/TLS. boo#961290
  * Disables by default MD5 handshake signatures in TLS 1.2 to
    prevent the  SLOTH (CVE-2015-7575) attack on TLS 1.2 server
    authentication (other attacks from the SLOTH paper do not apply
    to any version of mbed TLS or PolarSSL). boo#961284
  * Fixes an over-restrictive length limit in GCM.
  * Fixes a bug in certificate validation that caused valid chains
    to be rejected when the first intermediate certificate has a
    pathLenConstraint equal to zero.
  * Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign()
  * Added config.h option POLARSSL_SSL_ENABLE_MD5_SIGNATURES to
    control use of MD5-based signatures for TLS 1.2 handshake
    (disabled by default).</changelog>
<changelog author="mpluskal@suse.com" date="1468497600">- Update to version 1.3.17 (boo#988956):
  * Security
    + Fix missing padding length check in
    mbedtls_rsa_rsaes_pkcs1_v15_decrypt required by PKCS1 v2.2
    + Fix a potential integer underflow to buffer overread in
    mbedtls_rsa_rsaes_oaep_decrypt. It is not triggerable
    remotely in SSL/TLS.
    + Fix potential integer overflow to buffer overflow in
    mbedtls_rsa_rsaes_pkcs1_v15_encrypt and
    mbedtls_rsa_rsaes_oaep_encrypt
  * Bugfix
    + Fix bug in mbedtls_mpi_add_mpi() that caused wrong results
    when the three arguments where the same (in-place doubling).
    Found and fixed by Janos Follath. #309
    + Fix issue in Makefile that prevented building using armar.
    + Fix issue that caused a hang up when generating RSA keys of
    odd bitlength
    + Fix bug in mbedtls_rsa_rsaes_pkcs1_v15_encrypt that made
    null pointer dereference possible.
    + Fix issue that caused a crash if invalid curves were passed
    to mbedtls_ssl_conf_curves. #373
  * Changes
    + On ARM platforms, when compiling with -O0 with GCC, Clang or
    armcc5, don't use the optimized assembly for bignum
    multiplication. This removes the need to pass
  - fomit-frame-pointer to avoid a build error with -O0.
    + Disabled SSLv3 in the default configuration.
    + Fix non-compliance server extension handling. Extensions for
    SSLv3 are now ignored, as required by RFC6101.</changelog>
<changelog author="mpluskal@suse.com" date="1489233600">- Update to version 1.3.19 (boo#1029017):
  * Add checks to prevent signature forgeries for very large messages while
    using RSA through the PK module in 64-bit systems. The issue was caused by
    some data loss when casting a size_t to an unsigned int value in the
    functions rsa_verify_wrap(), rsa_sign_wrap(), rsa_alt_sign_wrap() and
    pk_sign(). Found by Jean-Philippe Aumasson.
  * Fixed potential livelock during the parsing of a CRL in PEM format in
    mbedtls_x509_crl_parse(). A string containing a CRL followed by trailing
    characters after the footer could result in the execution of an infinite
    loop. The issue can be triggered remotely. Found by Greg Zaverucha,
    Microsoft.
  * Fixed a bug that caused freeing a buffer that was allocated on the stack,
    when verifying the validity of a key on secp224k1. This could be
    triggered remotely for example with a maliciously constructed certificate
    and potentially could lead to remote code execution on some platforms.
    Reported independently by rongsaws and Aleksandar Nikolic, Cisco Talos
    team. #569 CVE-2017-2784</changelog>
<changelog author="fisiu@opensuse.org" date="1507636800">- Add bypass-peer-auth-fix-CVE-2017-14032.patch: boo#1056544, CVE-2017-14032.</changelog>

</package>
<package pkgid="e0647f82eb108753653cfbdf8bd65c1b7f23843b48d8f0fab806d7f64d22f1cf" name="mbedtls-devel" arch="x86_64">
    <version epoch="0" ver="1.3.19" rel="18.1"/>

<changelog author="fisiu@opensuse.org" date="1363435200">- Update to 1.2.6:
  * Fixed memory leak in ssl_free() and ssl_reset()
  * Corrected GCM counter incrementation to use only 32-bits
    instead of 128-bits
  * Fixed net_bind() for specified IP addresses on little endian
    systems
  * Fixed assembly code for ARM (Thumb and regular)
  * Detailed information available in ChangeLog file.</changelog>
<changelog author="fisiu@opensuse.org" date="1368619200">- Update to 1.2.7:
  * Ability to specify allowed ciphersuites based on the protocol
    version.
  * Default Blowfish keysize is now 128-bits
  * Test suites made smaller to accommodate Raspberry Pi
  * Fix for MPI assembly for ARM
  * GCM adapted to support sizes &gt; 2^29</changelog>
<changelog author="fisiu@opensuse.org" date="1396094400">- Update to 1.3.5, detailed changes available in ChangeLog file:
  * Elliptic Curve Cryptography module added
  * Elliptic Curve Diffie Hellman module added
  * Ephemeral Elliptic Curve Diffie Hellman support for SSL/TLS
    (ECDHE-based ciphersuites)
  * Ephemeral Elliptic Curve Digital Signature Algorithm support for SSL/TLS
    (ECDSA-based ciphersuites)
  * Ability to specify allowed ciphersuites based on the protocol version.
  * PSK and DHE-PSK based ciphersuites added
  * Memory allocation abstraction layer added
  * Buffer-based memory allocator added (no malloc() / free() / HEAP usage)
  * Threading abstraction layer added (dummy / pthread / alternate)
  * Public Key abstraction layer added
  * Parsing Elliptic Curve keys
  * Parsing Elliptic Curve certificates
  * Support for max_fragment_length extension (RFC 6066)
  * Support for truncated_hmac extension (RFC 6066)
  * Support for zeros-and-length (ANSI X.923) padding, one-and-zeros
    (ISO/IEC 7816-4) padding and zero padding in the cipher layer
  * Support for session tickets (RFC 5077)
  * Certificate Request (CSR) generation with extensions (key_usage,
    ns_cert_type)
  * X509 Certificate writing with extensions (basic_constraints,
    issuer_key_identifier, etc)
  * Optional blinding for RSA, DHM and EC
  * Support for multiple active certificate / key pairs in SSL servers for
    the same host (Not to be confused with SNI!)</changelog>
<changelog author="fisiu@opensuse.org" date="1408104000">- Update to 1.3.8, detailed changes available in ChangeLog file:
  * Fix length checking for AEAD ciphersuites (found by Codenomicon).
    It was possible to crash the server (and client) using crafted messages
    when a GCM suite was chosen.
  * Add CCM module and cipher mode to Cipher Layer
  * Support for CCM and CCM_8 ciphersuites
  * Support for parsing and verifying RSASSA-PSS signatures in the X.509
    modules (certificates, CRLs and CSRs).
  * Blowfish in the cipher layer now supports variable length keys.
  * Add example config.h for PSK with CCM, optimized for low RAM usage.
  * Optimize for RAM usage in example config.h for NSA Suite B profile.
  * Add POLARSSL_REMOVE_ARC4_CIPHERSUITES to allow removing RC4 ciphersuites
    from the default list (inactive by default).
  * Add server-side enforcement of sent renegotiation requests
    (ssl_set_renegotiation_enforced())
  * Add SSL_CIPHERSUITES config.h flag to allow specifying a list of
    ciphersuites to use and save some memory if the list is small.</changelog>
<changelog author="fisiu@opensuse.org" date="1415016000">- Update to 1.3.9, detailed changes available in ChangeLog file:
  * Lowest common hash was selected from signature_algorithms extension in
    TLS 1.2: fix boo#903672, CVE-2014-8627.
  * Remotely-triggerable memory leak when parsing some X.509 certificates,
    CVE-2014-8628.
  * Remotely-triggerable memory leak when parsing crafted ClientHello,
    CVE-2014-8628.
  * Ciphersuites using SHA-256 or SHA-384 now require TLS 1.x.
  * Ciphersuites using RSA-PSK key exchange now require TLS 1.x.
  * POLARSSL_MPI_MAX_SIZE now defaults to 1024 in order to allow 8192 bits RSA
    keys.
  * X.509 certificates with more than one AttributeTypeAndValue per
    RelativeDistinguishedName are not accepted any more.
- Build with POLARSSL_THREADING_PTHREAD: fix boo#903671.</changelog>
<changelog author="fisiu@opensuse.org" date="1421755200">- Add polarssl-CVE-2015-1182.patch: Remote attack using crafted certificates:
  fix boo#913903, CVE-2015-1182.</changelog>
<changelog author="mpluskal@suse.com" date="1426420800">- Rename to mbedtls
- Use cmake macro for building
- Update to 1.3.10
  * NULL pointer dereference in the buffer-based allocator when the buffer is
    full and polarssl_free() is called (found by Mark Hasemeyer)
    (only possible if POLARSSL_MEMORY_BUFFER_ALLOC_C is enabled, which it is
    not by default).
  * Fix remotely-triggerable uninitialised pointer dereference caused by
    crafted X.509 certificate (TLS server is not affected if it doesn't ask for a
    client certificate) (found using Codenomicon Defensics).
  * Fix remotely-triggerable memory leak caused by crafted X.509 certificates
    (TLS server is not affected if it doesn't ask for a client certificate)
    (found using Codenomicon Defensics).
  * Fix potential stack overflow while parsing crafted X.509 certificates
    (TLS server is not affected if it doesn't ask for a client certificate)
    (found using Codenomicon Defensics).
  * Fix timing difference that could theoretically lead to a
    Bleichenbacher-style attack in the RSA and RSA-PSK key exchanges
    (reported by Sebastian Schinzel).
  * Add support for FALLBACK_SCSV (draft-ietf-tls-downgrade-scsv).
  * Add support for Extended Master Secret (draft-ietf-tls-session-hash).
  * Add support for Encrypt-then-MAC (RFC 7366).
  * Add function pk_check_pair() to test if public and private keys match.
  * Add x509_crl_parse_der().
  * Add compile-time option POLARSSL_X509_MAX_INTERMEDIATE_CA to limit the
    length of an X.509 verification chain.
  * Support for renegotiation can now be disabled at compile-time
  * Support for 1/n-1 record splitting, a countermeasure against BEAST.
  * Certificate selection based on signature hash, prefering SHA-1 over SHA-2
    for pre-1.2 clients when multiple certificates are available.
  * Add support for getrandom() syscall on recent Linux kernels with Glibc or
    a compatible enough libc (eg uClibc).
  * Add ssl_set_arc4_support() to make it easier to disable RC4 at runtime
    while using the default ciphersuite list.
  * Added new error codes and debug messages about selection of
    ciphersuite/certificate.</changelog>
<changelog author="mpluskal@suse.com" date="1426420801">- Fix sed for includes</changelog>
<changelog author="mpluskal@suse.com" date="1426507200">- Update provides/obsoletes</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Create symlink to ensure compatibility with polarssl</changelog>
<changelog author="mpluskal@suse.com" date="1427457600">- Update package categories</changelog>
<changelog author="schwab@suse.de" date="1427889600">- getrandom-syscall-fallback.patch: Fall back to /dev/urandom if getrandom
  syscall is not implemented.</changelog>
<changelog author="fisiu@opensuse.org" date="1434369600">- Update to 1.3.11:
  * Remove bias in mpi_gen_prime (contributed by Pascal Junod).
  * Remove potential sources of timing variations (some contributed by Pascal
    Junod).
  * Options POLARSSL_HAVE_INT8 and POLARSSL_HAVE_INT16 are deprecated.
  * Enabling POLARSSL_NET_C without POLARSSL_HAVE_IPV6 is deprecated.
  * compat-1.2.h and openssl.h are deprecated.
  * ssl_set_own_cert() no longer calls pk_check_pair() since the performance
    impact was bad for some users (this was introduced in 1.3.10).
  * Move from SHA-1 to SHA-256 in example programs using signatures (suggested
    by Thorsten Mühlfelder).
  * Remove dependency on sscanf() in X.509 parsing modules.
  * Fix compile errors with PLATFORM_NO_STD_FUNCTIONS.
  * Fix bug in entropy.c when THREADING_C is also enabled that caused
    entropy_free() to crash (thanks to Rafa? Przywara).
  * Fix memory leak when gcm_setkey() and ccm_setkey() are used more than once
    on the same context.
  * Fix bug in ssl_mail_client when password is longer that username (found by
    Bruno Pape).
  * Fix undefined behaviour (memcmp( NULL, NULL, 0 );) in X.509 modules
    (detected by Clang's 3.6 UBSan).
  * mpi_size() and mpi_msb() would segfault when called on an mpi that is
    initialized but not set (found by pravic).
  * Fix detection of support for getrandom() on Linux (reported by syzzer) by
    doing it at runtime (using uname) rather that compile time.
  * Fix handling of symlinks by "make install" (found by Gaël PORTAY).
  * Fix potential NULL pointer dereference (not trigerrable remotely) when
    ssl_write() is called before the handshake is finished (introduced in
    1.3.10) (first reported by Martin Blumenstingl).
  * Fix bug in pk_parse_key() that caused some valid private EC keys to be
    rejected.
  * Fix bug in Via Padlock support (found by Nikos Mavrogiannopoulos).
  * Fix thread safety bug in RSA operations (found by Fredrik Axelsson).
  * Fix hardclock() (only used in the benchmarking program) with some versions
    of mingw64 (found by kxjhlele).
  * Fix potential unintended sign extension in asn1_get_len() on 64-bit
    platforms.
  * Fix potential memory leak in ssl_set_psk() (found by Mansour Moufid).
  * Fix compile error when POLARSSL_SSL_DISABLE_RENEGOTATION and
    POLARSSL_SSL_SSESSION_TICKETS where both enabled in config.h (introduced in
    1.3.10).
  * Add missing extern "C" guard in aesni.h (reported by amir zamani).
  * Add missing dependency on SHA-256 in some x509 programs (reported by
    Gergely Budai).
  * Fix bug related to ssl_set_curves(): the client didn't check that the curve
    picked by the server was actually allowed.
- Drop getrandom-syscall-fallback.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build libmbedtls9-32bit, as needed by
  libbzrtp0-32bit.</changelog>
<changelog author="mpluskal@suse.com" date="1444305600">- Update to 1.3.14
  * Added fix for CVE-2015-5291 (boo#949380) to prevent heap corruption due to buffer
    overflow of the hostname or session ticket. Found by Guido Vranken,
    Intelworks.
  * Fix stack buffer overflow in pkcs12 decryption (used by
    mbedtls_pk_parse_key(file)() when the password is &gt; 129 bytes. Found by
    Guido Vranken, Intelworks. Not triggerable remotely.
  * Fix potential buffer overflow in mbedtls_mpi_read_string().
    Found by Guido Vranken, Intelworks. Not exploitable remotely in the context
    of TLS, but might be in other uses. On 32 bit machines, requires reading a
    string of close to or larger than 1GB to exploit; on 64 bit machines, would
    require reading a string of close to or larger than 2^62 bytes.
  * Fix potential random memory allocation in mbedtls_pem_read_buffer()
    on crafted PEM input data. Found and fix provided by Guido Vranken,
    Intelworks. Not triggerable remotely in TLS. Triggerable remotely if you
    accept PEM data from an untrusted source.
  * Fix potential double-free if ssl_set_psk() is called repeatedly on
    the same ssl_context object and some memory allocations fail. Found by
    Guido Vranken, Intelworks. Can not be forced remotely.
  * Fix possible heap buffer overflow in base64_encode() when the input
    buffer is 512MB or larger on 32-bit platforms. Found by Guido Vranken,
    Intelworks. Found by Guido Vranken. Not trigerrable remotely in TLS.
  * Fix potential heap buffer overflow in servers that perform client
    authentication against a crafted CA cert. Cannot be triggered remotely
    unless you allow third parties to pick trust CAs for client auth. Found by
    Guido Vranken, Intelworks.
  * Fix compile error in net.c with musl libc. Found and patch provided by
    zhasha (#278).
  * Fix macroization of 'inline' keywork when building as C++. (#279)
  * Added checking of hostname length in ssl_set_hostname() to ensure domain
    names are compliant with RFC 1035.
- Changes for 1.3.13
  * Fix possible client-side NULL pointer dereference (read) when the client
    tries to continue the handshake after it failed (a misuse of the API).
    (Found and patch provided by Fabian Foerg, Gotham Digital Science using afl-fuzz.)
  * Add countermeasure against Lenstra's RSA-CRT attack for PKCS#1 v1.5
    signatures. (Found by Florian Weimer, Red Hat.)
    https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/
  * Setting SSL_MIN_DHM_BYTES in config.h had no effect (overriden in ssl.h)
    (found by Fabio Solari) (#256)
  * Fix bug in mbedtls_rsa_public() and mbedtls_rsa_private() that could
    result trying to unlock an unlocked mutex on invalid input (found by
    Fredrik Axelsson) (#257)
  * Fix -Wshadow warnings (found by hnrkp) (#240)
  * Fix unused function warning when using MBEDTLS_MDx_ALT or
    MBEDTLS_SHAxxx_ALT (found by Henrik) (#239)
  * Fix memory corruption in pkey programs (found by yankuncheng) (#210)
  * Fix memory corruption on client with overlong PSK identity, around
    SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by
    Aleksandrs Saveljevs) (#238)
  * Fix off-by-one error in parsing Supported Point Format extension that
    caused some handshakes to fail.
  * When verifying a certificate chain, if an intermediate certificate is
    trusted, no later cert is checked. (suggested by hannes-landeholm)
    (#220).
- Changes for 1.3.12
  * Increase the minimum size of Diffie-Hellman parameters accepted by the
    client to 1024 bits, to protect against Logjam attack.
  * Increase the size of default Diffie-Hellman parameters on the server to
    2048 bits. This can be changed with ssl_set_dh_params().
  * Fix thread-safety issue in SSL debug module (found by Edwin van Vliet).
  * Some example programs were not built using make, not included in Visual
    Studio projects (found by Kristian Bendiksen).
  * Fix build error with CMake and pre-4.5 versions of GCC (found by Hugo
    Leisink).
  * Fix missing -static-ligcc when building shared libraries for Windows with
    make.
  * Fix compile error with armcc5 --gnu.
  * Add SSL_MIN_DHM_BYTES configuration parameter in config.h to choose the
    minimum size of Diffie-Hellman parameters accepted by the client.
  * The PEM parser now accepts a trailing space at end of lines (#226).</changelog>
<changelog author="mpluskal@suse.com" date="1447848000">- Update to 1.3.15
  * Fix potential double free if ssl_set_psk() is called more than once and
    some allocation fails. Cannot be forced remotely. Found by Guido Vranken,
    Intelworks.
  * Fix potential heap corruption on Windows when
    x509_crt_parse_path() is passed a path longer than 2GB. Cannot be
    triggered remotely. Found by Guido Vranken, Intelworks.
  * Fix potential buffer overflow in some asn1_write_xxx() functions.
    Cannot be triggered remotely unless you create X.509 certificates based
    on untrusted input or write keys of untrusted origin. Found by Guido
    Vranken, Intelworks.
  * The X509 max_pathlen constraint was not enforced on intermediate
    certificates. Found by Nicholas Wilson, fix and tests provided by
    Janos Follath. #280 and #319
  * Self-signed certificates were not excluded from pathlen counting,
    resulting in some valid X.509 being incorrectly rejected. Found and fix
    provided by Janos Follath. #319
  * Fix bug causing some handshakes to fail due to some non-fatal alerts not
    begin properly ignored. Found by mancha and Kasom Koht-arsa, #308
  * Fix build error with configurations where ECDHE-PSK is the only key
    exchange. Found and fix provided by Chris Hammond. #270
  * Fix failures in MPI on Sparc(64) due to use of bad assembly code.
    Found by Kurt Danielson. #292
  * Fix typo in name of the extKeyUsage OID. Found by inestlerode, #314
  * Fix bug in ASN.1 encoding of booleans that caused generated CA
    certificates to be rejected by some applications, including OS X
    Keychain. Found and fixed by Jonathan Leroy, Inikup.
  * Fix "Destination buffer is too small" error in cert_write program.
    Found and fixed by Jonathan Leroy, Inikup.</changelog>
<changelog author="mpluskal@suse.com" date="1452427200">- Update to 1.3.16
  * Fixes a potential double free when
    mbedtls_asn1_store_named_data() fails to allocate memory. This
    was only used for certificate generation and was not
    triggerable remotely in SSL/TLS. boo#961290
  * Disables by default MD5 handshake signatures in TLS 1.2 to
    prevent the  SLOTH (CVE-2015-7575) attack on TLS 1.2 server
    authentication (other attacks from the SLOTH paper do not apply
    to any version of mbed TLS or PolarSSL). boo#961284
  * Fixes an over-restrictive length limit in GCM.
  * Fixes a bug in certificate validation that caused valid chains
    to be rejected when the first intermediate certificate has a
    pathLenConstraint equal to zero.
  * Removed potential leak in mbedtls_rsa_rsassa_pkcs1_v15_sign()
  * Added config.h option POLARSSL_SSL_ENABLE_MD5_SIGNATURES to
    control use of MD5-based signatures for TLS 1.2 handshake
    (disabled by default).</changelog>
<changelog author="mpluskal@suse.com" date="1468497600">- Update to version 1.3.17 (boo#988956):
  * Security
    + Fix missing padding length check in
    mbedtls_rsa_rsaes_pkcs1_v15_decrypt required by PKCS1 v2.2
    + Fix a potential integer underflow to buffer overread in
    mbedtls_rsa_rsaes_oaep_decrypt. It is not triggerable
    remotely in SSL/TLS.
    + Fix potential integer overflow to buffer overflow in
    mbedtls_rsa_rsaes_pkcs1_v15_encrypt and
    mbedtls_rsa_rsaes_oaep_encrypt
  * Bugfix
    + Fix bug in mbedtls_mpi_add_mpi() that caused wrong results
    when the three arguments where the same (in-place doubling).
    Found and fixed by Janos Follath. #309
    + Fix issue in Makefile that prevented building using armar.
    + Fix issue that caused a hang up when generating RSA keys of
    odd bitlength
    + Fix bug in mbedtls_rsa_rsaes_pkcs1_v15_encrypt that made
    null pointer dereference possible.
    + Fix issue that caused a crash if invalid curves were passed
    to mbedtls_ssl_conf_curves. #373
  * Changes
    + On ARM platforms, when compiling with -O0 with GCC, Clang or
    armcc5, don't use the optimized assembly for bignum
    multiplication. This removes the need to pass
  - fomit-frame-pointer to avoid a build error with -O0.
    + Disabled SSLv3 in the default configuration.
    + Fix non-compliance server extension handling. Extensions for
    SSLv3 are now ignored, as required by RFC6101.</changelog>
<changelog author="mpluskal@suse.com" date="1489233600">- Update to version 1.3.19 (boo#1029017):
  * Add checks to prevent signature forgeries for very large messages while
    using RSA through the PK module in 64-bit systems. The issue was caused by
    some data loss when casting a size_t to an unsigned int value in the
    functions rsa_verify_wrap(), rsa_sign_wrap(), rsa_alt_sign_wrap() and
    pk_sign(). Found by Jean-Philippe Aumasson.
  * Fixed potential livelock during the parsing of a CRL in PEM format in
    mbedtls_x509_crl_parse(). A string containing a CRL followed by trailing
    characters after the footer could result in the execution of an infinite
    loop. The issue can be triggered remotely. Found by Greg Zaverucha,
    Microsoft.
  * Fixed a bug that caused freeing a buffer that was allocated on the stack,
    when verifying the validity of a key on secp224k1. This could be
    triggered remotely for example with a maliciously constructed certificate
    and potentially could lead to remote code execution on some platforms.
    Reported independently by rongsaws and Aleksandar Nikolic, Cisco Talos
    team. #569 CVE-2017-2784</changelog>
<changelog author="fisiu@opensuse.org" date="1507636800">- Add bypass-peer-auth-fix-CVE-2017-14032.patch: boo#1056544, CVE-2017-14032.</changelog>

</package>
<package pkgid="db7b5eefc99e5aa740f51319c8de50462c02f11e3124c8c169d7074e984a2035" name="mercurial" arch="src">
    <version epoch="0" ver="4.2.3" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1446984000">- update to 3.6
  Regularly-scheduled feature release.
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6_.282015-11-1.29</changelog>
<changelog author="wr@rosenauer.org" date="1447243200">- update to 3.6.1
  This is an out-of-cycle bugfix release for issues related to hooks
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6.1_.282015-11-9.29</changelog>
<changelog author="wr@rosenauer.org" date="1449403200">- update to 3.6.2
  This is a regularly-scheduled bugfix release.
  + docker: match more version of 'hg docker version'
  + localrepo.commit: check all files for resolve state
  + rebase: add returning value from pullrebase function
  + resolve: restore .orig only after merge is fully complete
  + share: wrap bmstore._writerepo for transaction sensitivity
  + tags: create new sortdict for performance reasons</changelog>
<changelog author="develop7@develop7.info" date="1454414400">- update to v3.7
  * Features
    + Generaldelta: the original Mercurial compression format had an inefficient way of storing history in very branchy
    repositories. Generaldelta addresses this weakness. As a result, depending on the repository, this can improve
    the size of the history up to a factor of 10. Mercurial 1.9 was the first release to support generaldelta
    (behind a feature flag), but Mercurial 3.7 also allows pulling a mixture of non-generaldelta and generaldelta
    history without having to recompute everything, which avoids overloading servers. As a result, generaldelta is
    now enabled by default. You can convert a repository to generaldelta using:
    `hg clone -U --config format.generaldelta=1 --pull originalrepo generaldeltarepo`
    + Clonebundles: this is an server-side extension. It allows using a pre-generated bundle for an initial Mercurial
    clone. Clients will automatically use clonebundles if a server advertises them. Clonebundles allows much faster
    initial clones and reduces the load on a central server significantly. Mercurial 3.6 was the first version to
    include experimental clonebundles support, it's now been marked non-experimental. You can find out more using:
    `hg help clonebundles`.
    + Filesets now support 'missing()', to specify all files missing according to `hg status`.
    + Interactive committing (`hg commit -i`) and amending (`hg commit --amend`) can now be used together.
    + Merging can now handle collisions between untracked and tracked files, configurable according to the config
    option `merge.checkunknown`.
    + Default 'histedit' destination: it's now possible to run `hg histedit` without specifying a base revision.
    Mercurial will try to determine an appropriate base automatically. The revset used for this is
    "`reverse(only(.) and not public() and not ::merge())`", which specifies the first ancestor of the current
    changeset that is not public and does not have any descendants that are merges.
    + The '*.orig' files created by revert can now be stored in a different location, specified by the config option
    `ui.origbackuppath`.
    + `hg shelve` now supports storing untracked files.
    + `hg unshelve` now supports using a custom merge tool.
    + `hg backout` now commits by default if no conflicts were encountered.
    + hgweb now supports rendering sub-topics.
    + Server operators can now limit interaction with legacy clients speaking an outdated wire protocol. This is useful
    for preventing excessive CPU use when the server is using generaldelta repositories. See the various `bundle1`
    options in `hg help config.server`.
    + Python wheel packages are now available for Windows on PyPI
    + `[paths]` entries can now define a separate URL for pushes. See `hg help config.paths` for more.
  * Improvements
    This release includes many improvements, including (but not limited to):
    + performance improvements (speedup for '`hg log &lt;file/folder&gt;`')
    + many documentation improvements (clarification, additional examples (see `hg help &lt;command&gt; --verbose`), ...)
    + improved PyPy support
    + `hg clone --uncompressed` is now 3-4x faster on Windows. See the `backgroundclose*` options in
    `hg help config.worker` for more.</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to 3.7.1
  This addresses an urgent regression in compilation on Solaris
  and metadata handling for conversions.
  + amend: don't preserve most extra fields
  + graft: don't preserve most extra fields
  + histedit: fix typo in documentation
  + osutil: disable compilation of recvfds() on unsupported platforms
  + osutil: do not abort loading pure module just because libc has no recvmsg()
  + rebase: backout changeset 986d04b9fedd
  + rebase: backout changeset d755a9531fce
  + rebase: don't preserve most extra fields</changelog>
<changelog author="develop7@develop7.info" date="1457870400">- update to v3.7.2
  This is a regularly-scheduled bugfix release.
  + bundlerepo: properly handle hidden linkrev in filelog (issue4945)
  + bundlerepo: properly handle hidden linkrev in manifestlog (issue4945)
  + demandimport: add _imp to ignore list
  + doc: correct example concerning "hg purge" alias in man page "hgrc.5"
  + doc: remove deprecated option from synopsis of command help
  + fileset: fix copy/paste in eol() error message
  + help: fix typo in backgroundclose documentation
  + help: hg.intevation.de is new primary name of hg.intevation.de (and new cert)
  + help: update template examples to use reST literal syntax
  + hg: obtain lock when creating share from pooled repo (issue5104)
  + log: fix order of revisions filtered by multiple OR options (issue5100)
  + rebase: update working directory when aborting (issue5084)
  + revert: properly revert to ancestor of p2 during merge (issue5052)
  + revset: flatten chained 'list' operations (aka function args) (issue5072)
  + setup: avoid procedure related to hg.exe at setup.py --pure
  + ui: fix crash by non-interactive prompt echo for user name
  + unionrepo: properly handle hidden linkrev in revlog (issue5070)
  + zeroconf: forward all arguments passed to ui.configitems() wrapper</changelog>
<changelog author="develop7@develop7.info" date="1459339200">- update to v3.7.3
  This is an out of cycle release to address three security issues:
  * CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
    Mercurial prior to 3.7.3 contained two bounds-checking errors in its binary
    delta decoder that may be exploitable via clone, push, or pull.
  * CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
    Mercurial prior to 3.7.3 allowed URLs for Git subrepos that could result in
    arbitrary code execution on clone. This is a further side-effect of Git
    CVE-2015-7545. Reported by Blake Burkhart.
  * CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
    Mercurial prior to 3.7.3 allowed arbitrary code execution when converting
    Git repos with hostile names. This could affect automated conversion
    services. Reported by Blake Burkhart.
  + bdiff: (pure) support array.array arrays (issue5130)
  + convert: add new, non-clowny interface for shelling out to git (SEC)
  + convert: dead code removal - old git calling functions (SEC)
  + convert: rewrite calls to Git to use the new shelling mechanism (SEC)
  + convert: rewrite gitpipe to use common.commandline (SEC)
  + convert: test for shell injection in git calls (SEC)
  + files: don't recurse into subrepos without a path or -S (issue5127)
  + hg: perform update after pulling during clone with share (issue5103)
  + mq: restrict generated patch name to 75 characters (issue5117)
  + obsolete: fix n^2 marker computation behavior
  + parsers: detect short records (SEC)
  + parsers: fix list sizing rounding error (SEC)
  + streamclone: fix error when store files grow while stream cloning
  + subrepo: adapt to git's recent renames-by-default
  + subrepo: set GIT_ALLOW_PROTOCOL to limit git clone protocols (SEC)</changelog>
<changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
<changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
<changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
<changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
<changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
<changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
<changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
<changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
<changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
<changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
<changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
<changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
<changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115, boo#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>

</package>
<package pkgid="ba7209d70645849b23045189033362ebd8e41dc977811fc534b23f6501032590" name="mercurial" arch="src">
    <version epoch="0" ver="4.2.3" rel="7.1"/>

<changelog author="wr@rosenauer.org" date="1447243200">- update to 3.6.1
  This is an out-of-cycle bugfix release for issues related to hooks
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6.1_.282015-11-9.29</changelog>
<changelog author="wr@rosenauer.org" date="1449403200">- update to 3.6.2
  This is a regularly-scheduled bugfix release.
  + docker: match more version of 'hg docker version'
  + localrepo.commit: check all files for resolve state
  + rebase: add returning value from pullrebase function
  + resolve: restore .orig only after merge is fully complete
  + share: wrap bmstore._writerepo for transaction sensitivity
  + tags: create new sortdict for performance reasons</changelog>
<changelog author="develop7@develop7.info" date="1454414400">- update to v3.7
  * Features
    + Generaldelta: the original Mercurial compression format had an inefficient way of storing history in very branchy
    repositories. Generaldelta addresses this weakness. As a result, depending on the repository, this can improve
    the size of the history up to a factor of 10. Mercurial 1.9 was the first release to support generaldelta
    (behind a feature flag), but Mercurial 3.7 also allows pulling a mixture of non-generaldelta and generaldelta
    history without having to recompute everything, which avoids overloading servers. As a result, generaldelta is
    now enabled by default. You can convert a repository to generaldelta using:
    `hg clone -U --config format.generaldelta=1 --pull originalrepo generaldeltarepo`
    + Clonebundles: this is an server-side extension. It allows using a pre-generated bundle for an initial Mercurial
    clone. Clients will automatically use clonebundles if a server advertises them. Clonebundles allows much faster
    initial clones and reduces the load on a central server significantly. Mercurial 3.6 was the first version to
    include experimental clonebundles support, it's now been marked non-experimental. You can find out more using:
    `hg help clonebundles`.
    + Filesets now support 'missing()', to specify all files missing according to `hg status`.
    + Interactive committing (`hg commit -i`) and amending (`hg commit --amend`) can now be used together.
    + Merging can now handle collisions between untracked and tracked files, configurable according to the config
    option `merge.checkunknown`.
    + Default 'histedit' destination: it's now possible to run `hg histedit` without specifying a base revision.
    Mercurial will try to determine an appropriate base automatically. The revset used for this is
    "`reverse(only(.) and not public() and not ::merge())`", which specifies the first ancestor of the current
    changeset that is not public and does not have any descendants that are merges.
    + The '*.orig' files created by revert can now be stored in a different location, specified by the config option
    `ui.origbackuppath`.
    + `hg shelve` now supports storing untracked files.
    + `hg unshelve` now supports using a custom merge tool.
    + `hg backout` now commits by default if no conflicts were encountered.
    + hgweb now supports rendering sub-topics.
    + Server operators can now limit interaction with legacy clients speaking an outdated wire protocol. This is useful
    for preventing excessive CPU use when the server is using generaldelta repositories. See the various `bundle1`
    options in `hg help config.server`.
    + Python wheel packages are now available for Windows on PyPI
    + `[paths]` entries can now define a separate URL for pushes. See `hg help config.paths` for more.
  * Improvements
    This release includes many improvements, including (but not limited to):
    + performance improvements (speedup for '`hg log &lt;file/folder&gt;`')
    + many documentation improvements (clarification, additional examples (see `hg help &lt;command&gt; --verbose`), ...)
    + improved PyPy support
    + `hg clone --uncompressed` is now 3-4x faster on Windows. See the `backgroundclose*` options in
    `hg help config.worker` for more.</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to 3.7.1
  This addresses an urgent regression in compilation on Solaris
  and metadata handling for conversions.
  + amend: don't preserve most extra fields
  + graft: don't preserve most extra fields
  + histedit: fix typo in documentation
  + osutil: disable compilation of recvfds() on unsupported platforms
  + osutil: do not abort loading pure module just because libc has no recvmsg()
  + rebase: backout changeset 986d04b9fedd
  + rebase: backout changeset d755a9531fce
  + rebase: don't preserve most extra fields</changelog>
<changelog author="develop7@develop7.info" date="1457870400">- update to v3.7.2
  This is a regularly-scheduled bugfix release.
  + bundlerepo: properly handle hidden linkrev in filelog (issue4945)
  + bundlerepo: properly handle hidden linkrev in manifestlog (issue4945)
  + demandimport: add _imp to ignore list
  + doc: correct example concerning "hg purge" alias in man page "hgrc.5"
  + doc: remove deprecated option from synopsis of command help
  + fileset: fix copy/paste in eol() error message
  + help: fix typo in backgroundclose documentation
  + help: hg.intevation.de is new primary name of hg.intevation.de (and new cert)
  + help: update template examples to use reST literal syntax
  + hg: obtain lock when creating share from pooled repo (issue5104)
  + log: fix order of revisions filtered by multiple OR options (issue5100)
  + rebase: update working directory when aborting (issue5084)
  + revert: properly revert to ancestor of p2 during merge (issue5052)
  + revset: flatten chained 'list' operations (aka function args) (issue5072)
  + setup: avoid procedure related to hg.exe at setup.py --pure
  + ui: fix crash by non-interactive prompt echo for user name
  + unionrepo: properly handle hidden linkrev in revlog (issue5070)
  + zeroconf: forward all arguments passed to ui.configitems() wrapper</changelog>
<changelog author="develop7@develop7.info" date="1459339200">- update to v3.7.3
  This is an out of cycle release to address three security issues:
  * CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
    Mercurial prior to 3.7.3 contained two bounds-checking errors in its binary
    delta decoder that may be exploitable via clone, push, or pull.
  * CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
    Mercurial prior to 3.7.3 allowed URLs for Git subrepos that could result in
    arbitrary code execution on clone. This is a further side-effect of Git
    CVE-2015-7545. Reported by Blake Burkhart.
  * CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
    Mercurial prior to 3.7.3 allowed arbitrary code execution when converting
    Git repos with hostile names. This could affect automated conversion
    services. Reported by Blake Burkhart.
  + bdiff: (pure) support array.array arrays (issue5130)
  + convert: add new, non-clowny interface for shelling out to git (SEC)
  + convert: dead code removal - old git calling functions (SEC)
  + convert: rewrite calls to Git to use the new shelling mechanism (SEC)
  + convert: rewrite gitpipe to use common.commandline (SEC)
  + convert: test for shell injection in git calls (SEC)
  + files: don't recurse into subrepos without a path or -S (issue5127)
  + hg: perform update after pulling during clone with share (issue5103)
  + mq: restrict generated patch name to 75 characters (issue5117)
  + obsolete: fix n^2 marker computation behavior
  + parsers: detect short records (SEC)
  + parsers: fix list sizing rounding error (SEC)
  + streamclone: fix error when store files grow while stream cloning
  + subrepo: adapt to git's recent renames-by-default
  + subrepo: set GIT_ALLOW_PROTOCOL to limit git clone protocols (SEC)</changelog>
<changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
<changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
<changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
<changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
<changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
<changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
<changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
<changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
<changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
<changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
<changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
<changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
<changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115, boo#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
<changelog author="tiwai@suse.de" date="1513080000">- Fix arbitrary command execution in mercurial repo with a git
  submodule (CVE-2017-17458, bsc#1071715):
  git and subversion subrepos are disabled by default to mitigate
  a potential security risk:
  hg-subrepo-bsc1071715-fix01.patch
  hg-subrepo-bsc1071715-fix02.patch
  hg-subrepo-bsc1071715-fix03.patch
  hg-subrepo-bsc1071715-fix04.patch
  hg-subrepo-bsc1071715-fix05.patch
  hg-subrepo-bsc1071715-fix06.patch
  hg-subrepo-bsc1071715-fix07.patch</changelog>

</package>
<package pkgid="eca24d590ed854821a84d2b370de5bcf1bb452b2ab8d93db0750278279e02357" name="mercurial" arch="x86_64">
    <version epoch="0" ver="4.2.3" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1446984000">- update to 3.6
  Regularly-scheduled feature release.
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6_.282015-11-1.29</changelog>
<changelog author="wr@rosenauer.org" date="1447243200">- update to 3.6.1
  This is an out-of-cycle bugfix release for issues related to hooks
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6.1_.282015-11-9.29</changelog>
<changelog author="wr@rosenauer.org" date="1449403200">- update to 3.6.2
  This is a regularly-scheduled bugfix release.
  + docker: match more version of 'hg docker version'
  + localrepo.commit: check all files for resolve state
  + rebase: add returning value from pullrebase function
  + resolve: restore .orig only after merge is fully complete
  + share: wrap bmstore._writerepo for transaction sensitivity
  + tags: create new sortdict for performance reasons</changelog>
<changelog author="develop7@develop7.info" date="1454414400">- update to v3.7
  * Features
    + Generaldelta: the original Mercurial compression format had an inefficient way of storing history in very branchy
    repositories. Generaldelta addresses this weakness. As a result, depending on the repository, this can improve
    the size of the history up to a factor of 10. Mercurial 1.9 was the first release to support generaldelta
    (behind a feature flag), but Mercurial 3.7 also allows pulling a mixture of non-generaldelta and generaldelta
    history without having to recompute everything, which avoids overloading servers. As a result, generaldelta is
    now enabled by default. You can convert a repository to generaldelta using:
    `hg clone -U --config format.generaldelta=1 --pull originalrepo generaldeltarepo`
    + Clonebundles: this is an server-side extension. It allows using a pre-generated bundle for an initial Mercurial
    clone. Clients will automatically use clonebundles if a server advertises them. Clonebundles allows much faster
    initial clones and reduces the load on a central server significantly. Mercurial 3.6 was the first version to
    include experimental clonebundles support, it's now been marked non-experimental. You can find out more using:
    `hg help clonebundles`.
    + Filesets now support 'missing()', to specify all files missing according to `hg status`.
    + Interactive committing (`hg commit -i`) and amending (`hg commit --amend`) can now be used together.
    + Merging can now handle collisions between untracked and tracked files, configurable according to the config
    option `merge.checkunknown`.
    + Default 'histedit' destination: it's now possible to run `hg histedit` without specifying a base revision.
    Mercurial will try to determine an appropriate base automatically. The revset used for this is
    "`reverse(only(.) and not public() and not ::merge())`", which specifies the first ancestor of the current
    changeset that is not public and does not have any descendants that are merges.
    + The '*.orig' files created by revert can now be stored in a different location, specified by the config option
    `ui.origbackuppath`.
    + `hg shelve` now supports storing untracked files.
    + `hg unshelve` now supports using a custom merge tool.
    + `hg backout` now commits by default if no conflicts were encountered.
    + hgweb now supports rendering sub-topics.
    + Server operators can now limit interaction with legacy clients speaking an outdated wire protocol. This is useful
    for preventing excessive CPU use when the server is using generaldelta repositories. See the various `bundle1`
    options in `hg help config.server`.
    + Python wheel packages are now available for Windows on PyPI
    + `[paths]` entries can now define a separate URL for pushes. See `hg help config.paths` for more.
  * Improvements
    This release includes many improvements, including (but not limited to):
    + performance improvements (speedup for '`hg log &lt;file/folder&gt;`')
    + many documentation improvements (clarification, additional examples (see `hg help &lt;command&gt; --verbose`), ...)
    + improved PyPy support
    + `hg clone --uncompressed` is now 3-4x faster on Windows. See the `backgroundclose*` options in
    `hg help config.worker` for more.</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to 3.7.1
  This addresses an urgent regression in compilation on Solaris
  and metadata handling for conversions.
  + amend: don't preserve most extra fields
  + graft: don't preserve most extra fields
  + histedit: fix typo in documentation
  + osutil: disable compilation of recvfds() on unsupported platforms
  + osutil: do not abort loading pure module just because libc has no recvmsg()
  + rebase: backout changeset 986d04b9fedd
  + rebase: backout changeset d755a9531fce
  + rebase: don't preserve most extra fields</changelog>
<changelog author="develop7@develop7.info" date="1457870400">- update to v3.7.2
  This is a regularly-scheduled bugfix release.
  + bundlerepo: properly handle hidden linkrev in filelog (issue4945)
  + bundlerepo: properly handle hidden linkrev in manifestlog (issue4945)
  + demandimport: add _imp to ignore list
  + doc: correct example concerning "hg purge" alias in man page "hgrc.5"
  + doc: remove deprecated option from synopsis of command help
  + fileset: fix copy/paste in eol() error message
  + help: fix typo in backgroundclose documentation
  + help: hg.intevation.de is new primary name of hg.intevation.de (and new cert)
  + help: update template examples to use reST literal syntax
  + hg: obtain lock when creating share from pooled repo (issue5104)
  + log: fix order of revisions filtered by multiple OR options (issue5100)
  + rebase: update working directory when aborting (issue5084)
  + revert: properly revert to ancestor of p2 during merge (issue5052)
  + revset: flatten chained 'list' operations (aka function args) (issue5072)
  + setup: avoid procedure related to hg.exe at setup.py --pure
  + ui: fix crash by non-interactive prompt echo for user name
  + unionrepo: properly handle hidden linkrev in revlog (issue5070)
  + zeroconf: forward all arguments passed to ui.configitems() wrapper</changelog>
<changelog author="develop7@develop7.info" date="1459339200">- update to v3.7.3
  This is an out of cycle release to address three security issues:
  * CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
    Mercurial prior to 3.7.3 contained two bounds-checking errors in its binary
    delta decoder that may be exploitable via clone, push, or pull.
  * CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
    Mercurial prior to 3.7.3 allowed URLs for Git subrepos that could result in
    arbitrary code execution on clone. This is a further side-effect of Git
    CVE-2015-7545. Reported by Blake Burkhart.
  * CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
    Mercurial prior to 3.7.3 allowed arbitrary code execution when converting
    Git repos with hostile names. This could affect automated conversion
    services. Reported by Blake Burkhart.
  + bdiff: (pure) support array.array arrays (issue5130)
  + convert: add new, non-clowny interface for shelling out to git (SEC)
  + convert: dead code removal - old git calling functions (SEC)
  + convert: rewrite calls to Git to use the new shelling mechanism (SEC)
  + convert: rewrite gitpipe to use common.commandline (SEC)
  + convert: test for shell injection in git calls (SEC)
  + files: don't recurse into subrepos without a path or -S (issue5127)
  + hg: perform update after pulling during clone with share (issue5103)
  + mq: restrict generated patch name to 75 characters (issue5117)
  + obsolete: fix n^2 marker computation behavior
  + parsers: detect short records (SEC)
  + parsers: fix list sizing rounding error (SEC)
  + streamclone: fix error when store files grow while stream cloning
  + subrepo: adapt to git's recent renames-by-default
  + subrepo: set GIT_ALLOW_PROTOCOL to limit git clone protocols (SEC)</changelog>
<changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
<changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
<changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
<changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
<changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
<changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
<changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
<changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
<changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
<changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
<changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
<changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
<changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115, boo#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>

</package>
<package pkgid="929c6ebc9cdd7480765c1ce945154e85bdb8f82dd67f7c77d04508426ec9d877" name="mercurial" arch="x86_64">
    <version epoch="0" ver="4.2.3" rel="7.1"/>

<changelog author="wr@rosenauer.org" date="1447243200">- update to 3.6.1
  This is an out-of-cycle bugfix release for issues related to hooks
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6.1_.282015-11-9.29</changelog>
<changelog author="wr@rosenauer.org" date="1449403200">- update to 3.6.2
  This is a regularly-scheduled bugfix release.
  + docker: match more version of 'hg docker version'
  + localrepo.commit: check all files for resolve state
  + rebase: add returning value from pullrebase function
  + resolve: restore .orig only after merge is fully complete
  + share: wrap bmstore._writerepo for transaction sensitivity
  + tags: create new sortdict for performance reasons</changelog>
<changelog author="develop7@develop7.info" date="1454414400">- update to v3.7
  * Features
    + Generaldelta: the original Mercurial compression format had an inefficient way of storing history in very branchy
    repositories. Generaldelta addresses this weakness. As a result, depending on the repository, this can improve
    the size of the history up to a factor of 10. Mercurial 1.9 was the first release to support generaldelta
    (behind a feature flag), but Mercurial 3.7 also allows pulling a mixture of non-generaldelta and generaldelta
    history without having to recompute everything, which avoids overloading servers. As a result, generaldelta is
    now enabled by default. You can convert a repository to generaldelta using:
    `hg clone -U --config format.generaldelta=1 --pull originalrepo generaldeltarepo`
    + Clonebundles: this is an server-side extension. It allows using a pre-generated bundle for an initial Mercurial
    clone. Clients will automatically use clonebundles if a server advertises them. Clonebundles allows much faster
    initial clones and reduces the load on a central server significantly. Mercurial 3.6 was the first version to
    include experimental clonebundles support, it's now been marked non-experimental. You can find out more using:
    `hg help clonebundles`.
    + Filesets now support 'missing()', to specify all files missing according to `hg status`.
    + Interactive committing (`hg commit -i`) and amending (`hg commit --amend`) can now be used together.
    + Merging can now handle collisions between untracked and tracked files, configurable according to the config
    option `merge.checkunknown`.
    + Default 'histedit' destination: it's now possible to run `hg histedit` without specifying a base revision.
    Mercurial will try to determine an appropriate base automatically. The revset used for this is
    "`reverse(only(.) and not public() and not ::merge())`", which specifies the first ancestor of the current
    changeset that is not public and does not have any descendants that are merges.
    + The '*.orig' files created by revert can now be stored in a different location, specified by the config option
    `ui.origbackuppath`.
    + `hg shelve` now supports storing untracked files.
    + `hg unshelve` now supports using a custom merge tool.
    + `hg backout` now commits by default if no conflicts were encountered.
    + hgweb now supports rendering sub-topics.
    + Server operators can now limit interaction with legacy clients speaking an outdated wire protocol. This is useful
    for preventing excessive CPU use when the server is using generaldelta repositories. See the various `bundle1`
    options in `hg help config.server`.
    + Python wheel packages are now available for Windows on PyPI
    + `[paths]` entries can now define a separate URL for pushes. See `hg help config.paths` for more.
  * Improvements
    This release includes many improvements, including (but not limited to):
    + performance improvements (speedup for '`hg log &lt;file/folder&gt;`')
    + many documentation improvements (clarification, additional examples (see `hg help &lt;command&gt; --verbose`), ...)
    + improved PyPy support
    + `hg clone --uncompressed` is now 3-4x faster on Windows. See the `backgroundclose*` options in
    `hg help config.worker` for more.</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to 3.7.1
  This addresses an urgent regression in compilation on Solaris
  and metadata handling for conversions.
  + amend: don't preserve most extra fields
  + graft: don't preserve most extra fields
  + histedit: fix typo in documentation
  + osutil: disable compilation of recvfds() on unsupported platforms
  + osutil: do not abort loading pure module just because libc has no recvmsg()
  + rebase: backout changeset 986d04b9fedd
  + rebase: backout changeset d755a9531fce
  + rebase: don't preserve most extra fields</changelog>
<changelog author="develop7@develop7.info" date="1457870400">- update to v3.7.2
  This is a regularly-scheduled bugfix release.
  + bundlerepo: properly handle hidden linkrev in filelog (issue4945)
  + bundlerepo: properly handle hidden linkrev in manifestlog (issue4945)
  + demandimport: add _imp to ignore list
  + doc: correct example concerning "hg purge" alias in man page "hgrc.5"
  + doc: remove deprecated option from synopsis of command help
  + fileset: fix copy/paste in eol() error message
  + help: fix typo in backgroundclose documentation
  + help: hg.intevation.de is new primary name of hg.intevation.de (and new cert)
  + help: update template examples to use reST literal syntax
  + hg: obtain lock when creating share from pooled repo (issue5104)
  + log: fix order of revisions filtered by multiple OR options (issue5100)
  + rebase: update working directory when aborting (issue5084)
  + revert: properly revert to ancestor of p2 during merge (issue5052)
  + revset: flatten chained 'list' operations (aka function args) (issue5072)
  + setup: avoid procedure related to hg.exe at setup.py --pure
  + ui: fix crash by non-interactive prompt echo for user name
  + unionrepo: properly handle hidden linkrev in revlog (issue5070)
  + zeroconf: forward all arguments passed to ui.configitems() wrapper</changelog>
<changelog author="develop7@develop7.info" date="1459339200">- update to v3.7.3
  This is an out of cycle release to address three security issues:
  * CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
    Mercurial prior to 3.7.3 contained two bounds-checking errors in its binary
    delta decoder that may be exploitable via clone, push, or pull.
  * CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
    Mercurial prior to 3.7.3 allowed URLs for Git subrepos that could result in
    arbitrary code execution on clone. This is a further side-effect of Git
    CVE-2015-7545. Reported by Blake Burkhart.
  * CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
    Mercurial prior to 3.7.3 allowed arbitrary code execution when converting
    Git repos with hostile names. This could affect automated conversion
    services. Reported by Blake Burkhart.
  + bdiff: (pure) support array.array arrays (issue5130)
  + convert: add new, non-clowny interface for shelling out to git (SEC)
  + convert: dead code removal - old git calling functions (SEC)
  + convert: rewrite calls to Git to use the new shelling mechanism (SEC)
  + convert: rewrite gitpipe to use common.commandline (SEC)
  + convert: test for shell injection in git calls (SEC)
  + files: don't recurse into subrepos without a path or -S (issue5127)
  + hg: perform update after pulling during clone with share (issue5103)
  + mq: restrict generated patch name to 75 characters (issue5117)
  + obsolete: fix n^2 marker computation behavior
  + parsers: detect short records (SEC)
  + parsers: fix list sizing rounding error (SEC)
  + streamclone: fix error when store files grow while stream cloning
  + subrepo: adapt to git's recent renames-by-default
  + subrepo: set GIT_ALLOW_PROTOCOL to limit git clone protocols (SEC)</changelog>
<changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
<changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
<changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
<changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
<changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
<changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
<changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
<changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
<changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
<changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
<changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
<changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
<changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115, boo#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
<changelog author="tiwai@suse.de" date="1513080000">- Fix arbitrary command execution in mercurial repo with a git
  submodule (CVE-2017-17458, bsc#1071715):
  git and subversion subrepos are disabled by default to mitigate
  a potential security risk:
  hg-subrepo-bsc1071715-fix01.patch
  hg-subrepo-bsc1071715-fix02.patch
  hg-subrepo-bsc1071715-fix03.patch
  hg-subrepo-bsc1071715-fix04.patch
  hg-subrepo-bsc1071715-fix05.patch
  hg-subrepo-bsc1071715-fix06.patch
  hg-subrepo-bsc1071715-fix07.patch</changelog>

</package>
<package pkgid="729dbd7573c2cfab556e66a3d0c2c366d14598aa59a42b107e9390cfc6d01138" name="mercurial-lang" arch="noarch">
    <version epoch="0" ver="4.2.3" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1446984000">- update to 3.6
  Regularly-scheduled feature release.
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6_.282015-11-1.29</changelog>
<changelog author="wr@rosenauer.org" date="1447243200">- update to 3.6.1
  This is an out-of-cycle bugfix release for issues related to hooks
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6.1_.282015-11-9.29</changelog>
<changelog author="wr@rosenauer.org" date="1449403200">- update to 3.6.2
  This is a regularly-scheduled bugfix release.
  + docker: match more version of 'hg docker version'
  + localrepo.commit: check all files for resolve state
  + rebase: add returning value from pullrebase function
  + resolve: restore .orig only after merge is fully complete
  + share: wrap bmstore._writerepo for transaction sensitivity
  + tags: create new sortdict for performance reasons</changelog>
<changelog author="develop7@develop7.info" date="1454414400">- update to v3.7
  * Features
    + Generaldelta: the original Mercurial compression format had an inefficient way of storing history in very branchy
    repositories. Generaldelta addresses this weakness. As a result, depending on the repository, this can improve
    the size of the history up to a factor of 10. Mercurial 1.9 was the first release to support generaldelta
    (behind a feature flag), but Mercurial 3.7 also allows pulling a mixture of non-generaldelta and generaldelta
    history without having to recompute everything, which avoids overloading servers. As a result, generaldelta is
    now enabled by default. You can convert a repository to generaldelta using:
    `hg clone -U --config format.generaldelta=1 --pull originalrepo generaldeltarepo`
    + Clonebundles: this is an server-side extension. It allows using a pre-generated bundle for an initial Mercurial
    clone. Clients will automatically use clonebundles if a server advertises them. Clonebundles allows much faster
    initial clones and reduces the load on a central server significantly. Mercurial 3.6 was the first version to
    include experimental clonebundles support, it's now been marked non-experimental. You can find out more using:
    `hg help clonebundles`.
    + Filesets now support 'missing()', to specify all files missing according to `hg status`.
    + Interactive committing (`hg commit -i`) and amending (`hg commit --amend`) can now be used together.
    + Merging can now handle collisions between untracked and tracked files, configurable according to the config
    option `merge.checkunknown`.
    + Default 'histedit' destination: it's now possible to run `hg histedit` without specifying a base revision.
    Mercurial will try to determine an appropriate base automatically. The revset used for this is
    "`reverse(only(.) and not public() and not ::merge())`", which specifies the first ancestor of the current
    changeset that is not public and does not have any descendants that are merges.
    + The '*.orig' files created by revert can now be stored in a different location, specified by the config option
    `ui.origbackuppath`.
    + `hg shelve` now supports storing untracked files.
    + `hg unshelve` now supports using a custom merge tool.
    + `hg backout` now commits by default if no conflicts were encountered.
    + hgweb now supports rendering sub-topics.
    + Server operators can now limit interaction with legacy clients speaking an outdated wire protocol. This is useful
    for preventing excessive CPU use when the server is using generaldelta repositories. See the various `bundle1`
    options in `hg help config.server`.
    + Python wheel packages are now available for Windows on PyPI
    + `[paths]` entries can now define a separate URL for pushes. See `hg help config.paths` for more.
  * Improvements
    This release includes many improvements, including (but not limited to):
    + performance improvements (speedup for '`hg log &lt;file/folder&gt;`')
    + many documentation improvements (clarification, additional examples (see `hg help &lt;command&gt; --verbose`), ...)
    + improved PyPy support
    + `hg clone --uncompressed` is now 3-4x faster on Windows. See the `backgroundclose*` options in
    `hg help config.worker` for more.</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to 3.7.1
  This addresses an urgent regression in compilation on Solaris
  and metadata handling for conversions.
  + amend: don't preserve most extra fields
  + graft: don't preserve most extra fields
  + histedit: fix typo in documentation
  + osutil: disable compilation of recvfds() on unsupported platforms
  + osutil: do not abort loading pure module just because libc has no recvmsg()
  + rebase: backout changeset 986d04b9fedd
  + rebase: backout changeset d755a9531fce
  + rebase: don't preserve most extra fields</changelog>
<changelog author="develop7@develop7.info" date="1457870400">- update to v3.7.2
  This is a regularly-scheduled bugfix release.
  + bundlerepo: properly handle hidden linkrev in filelog (issue4945)
  + bundlerepo: properly handle hidden linkrev in manifestlog (issue4945)
  + demandimport: add _imp to ignore list
  + doc: correct example concerning "hg purge" alias in man page "hgrc.5"
  + doc: remove deprecated option from synopsis of command help
  + fileset: fix copy/paste in eol() error message
  + help: fix typo in backgroundclose documentation
  + help: hg.intevation.de is new primary name of hg.intevation.de (and new cert)
  + help: update template examples to use reST literal syntax
  + hg: obtain lock when creating share from pooled repo (issue5104)
  + log: fix order of revisions filtered by multiple OR options (issue5100)
  + rebase: update working directory when aborting (issue5084)
  + revert: properly revert to ancestor of p2 during merge (issue5052)
  + revset: flatten chained 'list' operations (aka function args) (issue5072)
  + setup: avoid procedure related to hg.exe at setup.py --pure
  + ui: fix crash by non-interactive prompt echo for user name
  + unionrepo: properly handle hidden linkrev in revlog (issue5070)
  + zeroconf: forward all arguments passed to ui.configitems() wrapper</changelog>
<changelog author="develop7@develop7.info" date="1459339200">- update to v3.7.3
  This is an out of cycle release to address three security issues:
  * CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
    Mercurial prior to 3.7.3 contained two bounds-checking errors in its binary
    delta decoder that may be exploitable via clone, push, or pull.
  * CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
    Mercurial prior to 3.7.3 allowed URLs for Git subrepos that could result in
    arbitrary code execution on clone. This is a further side-effect of Git
    CVE-2015-7545. Reported by Blake Burkhart.
  * CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
    Mercurial prior to 3.7.3 allowed arbitrary code execution when converting
    Git repos with hostile names. This could affect automated conversion
    services. Reported by Blake Burkhart.
  + bdiff: (pure) support array.array arrays (issue5130)
  + convert: add new, non-clowny interface for shelling out to git (SEC)
  + convert: dead code removal - old git calling functions (SEC)
  + convert: rewrite calls to Git to use the new shelling mechanism (SEC)
  + convert: rewrite gitpipe to use common.commandline (SEC)
  + convert: test for shell injection in git calls (SEC)
  + files: don't recurse into subrepos without a path or -S (issue5127)
  + hg: perform update after pulling during clone with share (issue5103)
  + mq: restrict generated patch name to 75 characters (issue5117)
  + obsolete: fix n^2 marker computation behavior
  + parsers: detect short records (SEC)
  + parsers: fix list sizing rounding error (SEC)
  + streamclone: fix error when store files grow while stream cloning
  + subrepo: adapt to git's recent renames-by-default
  + subrepo: set GIT_ALLOW_PROTOCOL to limit git clone protocols (SEC)</changelog>
<changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
<changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
<changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
<changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
<changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
<changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
<changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
<changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
<changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
<changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
<changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
<changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
<changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115, boo#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>

</package>
<package pkgid="4596459560c51ac9059527d7ce383ada3fb247a284462ef0913d66ce20cc60d1" name="mercurial-lang" arch="noarch">
    <version epoch="0" ver="4.2.3" rel="7.1"/>

<changelog author="wr@rosenauer.org" date="1447243200">- update to 3.6.1
  This is an out-of-cycle bugfix release for issues related to hooks
  See detailed release notes on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.6.1_.282015-11-9.29</changelog>
<changelog author="wr@rosenauer.org" date="1449403200">- update to 3.6.2
  This is a regularly-scheduled bugfix release.
  + docker: match more version of 'hg docker version'
  + localrepo.commit: check all files for resolve state
  + rebase: add returning value from pullrebase function
  + resolve: restore .orig only after merge is fully complete
  + share: wrap bmstore._writerepo for transaction sensitivity
  + tags: create new sortdict for performance reasons</changelog>
<changelog author="develop7@develop7.info" date="1454414400">- update to v3.7
  * Features
    + Generaldelta: the original Mercurial compression format had an inefficient way of storing history in very branchy
    repositories. Generaldelta addresses this weakness. As a result, depending on the repository, this can improve
    the size of the history up to a factor of 10. Mercurial 1.9 was the first release to support generaldelta
    (behind a feature flag), but Mercurial 3.7 also allows pulling a mixture of non-generaldelta and generaldelta
    history without having to recompute everything, which avoids overloading servers. As a result, generaldelta is
    now enabled by default. You can convert a repository to generaldelta using:
    `hg clone -U --config format.generaldelta=1 --pull originalrepo generaldeltarepo`
    + Clonebundles: this is an server-side extension. It allows using a pre-generated bundle for an initial Mercurial
    clone. Clients will automatically use clonebundles if a server advertises them. Clonebundles allows much faster
    initial clones and reduces the load on a central server significantly. Mercurial 3.6 was the first version to
    include experimental clonebundles support, it's now been marked non-experimental. You can find out more using:
    `hg help clonebundles`.
    + Filesets now support 'missing()', to specify all files missing according to `hg status`.
    + Interactive committing (`hg commit -i`) and amending (`hg commit --amend`) can now be used together.
    + Merging can now handle collisions between untracked and tracked files, configurable according to the config
    option `merge.checkunknown`.
    + Default 'histedit' destination: it's now possible to run `hg histedit` without specifying a base revision.
    Mercurial will try to determine an appropriate base automatically. The revset used for this is
    "`reverse(only(.) and not public() and not ::merge())`", which specifies the first ancestor of the current
    changeset that is not public and does not have any descendants that are merges.
    + The '*.orig' files created by revert can now be stored in a different location, specified by the config option
    `ui.origbackuppath`.
    + `hg shelve` now supports storing untracked files.
    + `hg unshelve` now supports using a custom merge tool.
    + `hg backout` now commits by default if no conflicts were encountered.
    + hgweb now supports rendering sub-topics.
    + Server operators can now limit interaction with legacy clients speaking an outdated wire protocol. This is useful
    for preventing excessive CPU use when the server is using generaldelta repositories. See the various `bundle1`
    options in `hg help config.server`.
    + Python wheel packages are now available for Windows on PyPI
    + `[paths]` entries can now define a separate URL for pushes. See `hg help config.paths` for more.
  * Improvements
    This release includes many improvements, including (but not limited to):
    + performance improvements (speedup for '`hg log &lt;file/folder&gt;`')
    + many documentation improvements (clarification, additional examples (see `hg help &lt;command&gt; --verbose`), ...)
    + improved PyPy support
    + `hg clone --uncompressed` is now 3-4x faster on Windows. See the `backgroundclose*` options in
    `hg help config.worker` for more.</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to 3.7.1
  This addresses an urgent regression in compilation on Solaris
  and metadata handling for conversions.
  + amend: don't preserve most extra fields
  + graft: don't preserve most extra fields
  + histedit: fix typo in documentation
  + osutil: disable compilation of recvfds() on unsupported platforms
  + osutil: do not abort loading pure module just because libc has no recvmsg()
  + rebase: backout changeset 986d04b9fedd
  + rebase: backout changeset d755a9531fce
  + rebase: don't preserve most extra fields</changelog>
<changelog author="develop7@develop7.info" date="1457870400">- update to v3.7.2
  This is a regularly-scheduled bugfix release.
  + bundlerepo: properly handle hidden linkrev in filelog (issue4945)
  + bundlerepo: properly handle hidden linkrev in manifestlog (issue4945)
  + demandimport: add _imp to ignore list
  + doc: correct example concerning "hg purge" alias in man page "hgrc.5"
  + doc: remove deprecated option from synopsis of command help
  + fileset: fix copy/paste in eol() error message
  + help: fix typo in backgroundclose documentation
  + help: hg.intevation.de is new primary name of hg.intevation.de (and new cert)
  + help: update template examples to use reST literal syntax
  + hg: obtain lock when creating share from pooled repo (issue5104)
  + log: fix order of revisions filtered by multiple OR options (issue5100)
  + rebase: update working directory when aborting (issue5084)
  + revert: properly revert to ancestor of p2 during merge (issue5052)
  + revset: flatten chained 'list' operations (aka function args) (issue5072)
  + setup: avoid procedure related to hg.exe at setup.py --pure
  + ui: fix crash by non-interactive prompt echo for user name
  + unionrepo: properly handle hidden linkrev in revlog (issue5070)
  + zeroconf: forward all arguments passed to ui.configitems() wrapper</changelog>
<changelog author="develop7@develop7.info" date="1459339200">- update to v3.7.3
  This is an out of cycle release to address three security issues:
  * CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
    Mercurial prior to 3.7.3 contained two bounds-checking errors in its binary
    delta decoder that may be exploitable via clone, push, or pull.
  * CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
    Mercurial prior to 3.7.3 allowed URLs for Git subrepos that could result in
    arbitrary code execution on clone. This is a further side-effect of Git
    CVE-2015-7545. Reported by Blake Burkhart.
  * CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
    Mercurial prior to 3.7.3 allowed arbitrary code execution when converting
    Git repos with hostile names. This could affect automated conversion
    services. Reported by Blake Burkhart.
  + bdiff: (pure) support array.array arrays (issue5130)
  + convert: add new, non-clowny interface for shelling out to git (SEC)
  + convert: dead code removal - old git calling functions (SEC)
  + convert: rewrite calls to Git to use the new shelling mechanism (SEC)
  + convert: rewrite gitpipe to use common.commandline (SEC)
  + convert: test for shell injection in git calls (SEC)
  + files: don't recurse into subrepos without a path or -S (issue5127)
  + hg: perform update after pulling during clone with share (issue5103)
  + mq: restrict generated patch name to 75 characters (issue5117)
  + obsolete: fix n^2 marker computation behavior
  + parsers: detect short records (SEC)
  + parsers: fix list sizing rounding error (SEC)
  + streamclone: fix error when store files grow while stream cloning
  + subrepo: adapt to git's recent renames-by-default
  + subrepo: set GIT_ALLOW_PROTOCOL to limit git clone protocols (SEC)</changelog>
<changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
<changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
<changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
<changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
<changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
<changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
<changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
<changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
<changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
<changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
<changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
<changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
<changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115, boo#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
<changelog author="tiwai@suse.de" date="1513080000">- Fix arbitrary command execution in mercurial repo with a git
  submodule (CVE-2017-17458, bsc#1071715):
  git and subversion subrepos are disabled by default to mitigate
  a potential security risk:
  hg-subrepo-bsc1071715-fix01.patch
  hg-subrepo-bsc1071715-fix02.patch
  hg-subrepo-bsc1071715-fix03.patch
  hg-subrepo-bsc1071715-fix04.patch
  hg-subrepo-bsc1071715-fix05.patch
  hg-subrepo-bsc1071715-fix06.patch
  hg-subrepo-bsc1071715-fix07.patch</changelog>

</package>
<package pkgid="4328aef61a68db24fb39ed3202b35d7165bc74825167f12ba98ad4e9718eae98" name="messagelib" arch="src">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1467892800">- Update to KDE Applications 16.04.3
  * KDE Applications 16.04.3
  * https://www.kde.org/announcements/announce-applications-16.04.3.php</changelog>
<changelog author="wbauer@tmo.at" date="1469102400">- Cleanup build requirements
- Add necessary dependencies to the devel package</changelog>
<changelog author="tittiatcoke@gmail.com" date="1470657600">- Update to KDE Applications 16.07.90
  * KDE Applications 16.07.90 (16.08-RC)
  * https://www.kde.org/announcements/announce-applications-16.07.90.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1471003200">- Update to KDE Applications 16.08.0
  * KDE Applications 16.08.0
  * https://www.kde.org/announcements/announce-applications-16.08.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471953600">- Build only on architectures supported by libqt5-qtwebengine</changelog>
<changelog author="tittiatcoke@gmail.com" date="1473422400">- Update to KDE Applications 16.08.1
  * KDE Applications 16.08.1
  * https://www.kde.org/announcements/announce-applications-16.08.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1476187200">- KDE Applications 16.08.2
  https://www.kde.org/announcements/announce-applications-16.08.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1478692800">- Update to KDE Applications 16.08.3
  * KDE Applications 16.08.3
  * https://www.kde.org/announcements/announce-applications-16.08.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Fix Bug 377247 - kMail 2 does not properly escape header (kde#377247)
  * Use correct variable for date direction
  * Finish removing the user agent from sent emails.
  * Rename method as requested by David
  * Keep "disable emoticon" state even if we switch message</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * Minor optimization
  * Fix html here too
  * Fix i18n(...) it's a "block" variable here.
  * Reduce number of toUpper calling
  * Fix gpgsm processes being leaked due to QGpgME::KeyListJob not being deleted
  * Add metainfo.yaml</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
<changelog author="wbauer@tmo.at" date="1502280000">- Add fix-charset-when-exporting-as-html.patch to fix umlauts and
  other special characters when a mail is exported as html for
  print preview and printing via an external browser (boo#1052482)</changelog>

</package>
<package pkgid="3f9f0053722eb07fda159e2f4c35e414166e5b30d42c4b47ba090c9ba883bb4b" name="messagelib" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1467892800">- Update to KDE Applications 16.04.3
  * KDE Applications 16.04.3
  * https://www.kde.org/announcements/announce-applications-16.04.3.php</changelog>
<changelog author="wbauer@tmo.at" date="1469102400">- Cleanup build requirements
- Add necessary dependencies to the devel package</changelog>
<changelog author="tittiatcoke@gmail.com" date="1470657600">- Update to KDE Applications 16.07.90
  * KDE Applications 16.07.90 (16.08-RC)
  * https://www.kde.org/announcements/announce-applications-16.07.90.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1471003200">- Update to KDE Applications 16.08.0
  * KDE Applications 16.08.0
  * https://www.kde.org/announcements/announce-applications-16.08.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471953600">- Build only on architectures supported by libqt5-qtwebengine</changelog>
<changelog author="tittiatcoke@gmail.com" date="1473422400">- Update to KDE Applications 16.08.1
  * KDE Applications 16.08.1
  * https://www.kde.org/announcements/announce-applications-16.08.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1476187200">- KDE Applications 16.08.2
  https://www.kde.org/announcements/announce-applications-16.08.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1478692800">- Update to KDE Applications 16.08.3
  * KDE Applications 16.08.3
  * https://www.kde.org/announcements/announce-applications-16.08.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Fix Bug 377247 - kMail 2 does not properly escape header (kde#377247)
  * Use correct variable for date direction
  * Finish removing the user agent from sent emails.
  * Rename method as requested by David
  * Keep "disable emoticon" state even if we switch message</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * Minor optimization
  * Fix html here too
  * Fix i18n(...) it's a "block" variable here.
  * Reduce number of toUpper calling
  * Fix gpgsm processes being leaked due to QGpgME::KeyListJob not being deleted
  * Add metainfo.yaml</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
<changelog author="wbauer@tmo.at" date="1502280000">- Add fix-charset-when-exporting-as-html.patch to fix umlauts and
  other special characters when a mail is exported as html for
  print preview and printing via an external browser (boo#1052482)</changelog>

</package>
<package pkgid="f2f4019374f9f856ec1b0a441be66340d5a1b812dea96f17b0b620083731e71d" name="messagelib-devel" arch="x86_64">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1467892800">- Update to KDE Applications 16.04.3
  * KDE Applications 16.04.3
  * https://www.kde.org/announcements/announce-applications-16.04.3.php</changelog>
<changelog author="wbauer@tmo.at" date="1469102400">- Cleanup build requirements
- Add necessary dependencies to the devel package</changelog>
<changelog author="tittiatcoke@gmail.com" date="1470657600">- Update to KDE Applications 16.07.90
  * KDE Applications 16.07.90 (16.08-RC)
  * https://www.kde.org/announcements/announce-applications-16.07.90.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1471003200">- Update to KDE Applications 16.08.0
  * KDE Applications 16.08.0
  * https://www.kde.org/announcements/announce-applications-16.08.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471953600">- Build only on architectures supported by libqt5-qtwebengine</changelog>
<changelog author="tittiatcoke@gmail.com" date="1473422400">- Update to KDE Applications 16.08.1
  * KDE Applications 16.08.1
  * https://www.kde.org/announcements/announce-applications-16.08.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1476187200">- KDE Applications 16.08.2
  https://www.kde.org/announcements/announce-applications-16.08.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1478692800">- Update to KDE Applications 16.08.3
  * KDE Applications 16.08.3
  * https://www.kde.org/announcements/announce-applications-16.08.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Fix Bug 377247 - kMail 2 does not properly escape header (kde#377247)
  * Use correct variable for date direction
  * Finish removing the user agent from sent emails.
  * Rename method as requested by David
  * Keep "disable emoticon" state even if we switch message</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * Minor optimization
  * Fix html here too
  * Fix i18n(...) it's a "block" variable here.
  * Reduce number of toUpper calling
  * Fix gpgsm processes being leaked due to QGpgME::KeyListJob not being deleted
  * Add metainfo.yaml</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
<changelog author="wbauer@tmo.at" date="1502280000">- Add fix-charset-when-exporting-as-html.patch to fix umlauts and
  other special characters when a mail is exported as html for
  print preview and printing via an external browser (boo#1052482)</changelog>

</package>
<package pkgid="62c418d854cc891b559f9808e023d2e9414004d613df15edd2b2aaf563a8ac22" name="messagelib-lang" arch="noarch">
    <version epoch="0" ver="17.04.2" rel="3.1"/>

<changelog author="tittiatcoke@gmail.com" date="1467892800">- Update to KDE Applications 16.04.3
  * KDE Applications 16.04.3
  * https://www.kde.org/announcements/announce-applications-16.04.3.php</changelog>
<changelog author="wbauer@tmo.at" date="1469102400">- Cleanup build requirements
- Add necessary dependencies to the devel package</changelog>
<changelog author="tittiatcoke@gmail.com" date="1470657600">- Update to KDE Applications 16.07.90
  * KDE Applications 16.07.90 (16.08-RC)
  * https://www.kde.org/announcements/announce-applications-16.07.90.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1471003200">- Update to KDE Applications 16.08.0
  * KDE Applications 16.08.0
  * https://www.kde.org/announcements/announce-applications-16.08.0.php</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471953600">- Build only on architectures supported by libqt5-qtwebengine</changelog>
<changelog author="tittiatcoke@gmail.com" date="1473422400">- Update to KDE Applications 16.08.1
  * KDE Applications 16.08.1
  * https://www.kde.org/announcements/announce-applications-16.08.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1476187200">- KDE Applications 16.08.2
  https://www.kde.org/announcements/announce-applications-16.08.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1478692800">- Update to KDE Applications 16.08.3
  * KDE Applications 16.08.3
  * https://www.kde.org/announcements/announce-applications-16.08.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480420800">- Update to KDE Applications 16.11.80
  * KDE Applications 16.12.0 Beta
  * https://www.kde.org/announcements/announce-applications-16.12-beta.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1480766400">- Update to KDE Applications 16.11.90
  * KDE Applications 16.12.0 RC
  * https://www.kde.org/announcements/announce-applications-16.12-rc.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1481630400">- Update to KDE Applications 16.12.0
  * KDE Applications 16.12.0
  * https://www.kde.org/announcements/announce-applications-16.12.0.php</changelog>
<changelog author="lbeltrame@kde.org" date="1484395200">- - Update to KDE Applications 16.12.1
  * KDE Applications 16.12.1
  * https://www.kde.org/announcements/announce-applications-16.12.1.php</changelog>
<changelog author="lbeltrame@kde.org" date="1486641600">- Update to KDE Applications 16.12.2
  * KDE Applications 16.12.2
  * https://www.kde.org/announcements/announce-applications-16.12.2.php</changelog>
<changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-16.12.3.php
- Changes since 16.12.2:
  * Fix Bug 377247 - kMail 2 does not properly escape header (kde#377247)
  * Use correct variable for date direction
  * Finish removing the user agent from sent emails.
  * Rename method as requested by David
  * Keep "disable emoticon" state even if we switch message</changelog>
<changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
<changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Minor optimization
  * Minor optimization
  * Fix html here too
  * Fix i18n(...) it's a "block" variable here.
  * Reduce number of toUpper calling
  * Fix gpgsm processes being leaked due to QGpgME::KeyListJob not being deleted
  * Add metainfo.yaml</changelog>
<changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Port isScrolledToBottom from jQuery to standard DOM, so it works even when jQuery isn't loaded
  * Rework timing of script injection for showing attachments in message viewer.
  * Use QFileInfo::exists(...) static method here
  * [autotests] more work towards stable autotests
  * [autotests] Let's see if this fixes the flakiness of the test
  * [autotests] Enable test mode in QStandardPaths to avoid interference from user settings.
  * Avoid timeout
  * Don't continue when we have error during compression.
  * Use QByteArrayLiteral here
  * [autotest] avoid timeout due to waiting for klauncher to exit
  * Use the same name as filename and name. It's more logical as discussed with David
  * Const'ify here
  * Use QByteArrayLiteral here
  * Use nullptr
  * Fix typo as reported by David</changelog>
<changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Use base64 encoding for all non-text attachments (kde#95733)
  * crypto unittests can't be run in parallel since they start/stop gpg-agent
  * Don't break i18n
  * Fix Bug 379066 - Bug in Grantlee template when viewing SMIME Msg: plain HTML code is shown (kde#379066)
  * Handle help:/ URLs through QDesktopServices
  * [autotests] repair mailwebenginescripttest after my changes in 37b99257</changelog>
<changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Make sure to sign/encrypt message when we send later
  * Change encryption too
  * Fix potential crash as david reported
  * Workaround assert in QtWebEngine 5.9 (ASSERT: "m_updateHttpCache")
  * Fix runtime warning about application/x-pkcs7-signature.
  * Use QTemporaryDir as discussed with David
  * Fix Bug 378526 - KMail 5.4.3: Attachment displayed with wrong filename (kde#378526)</changelog>
<changelog author="wbauer@tmo.at" date="1502280000">- Add fix-charset-when-exporting-as-html.patch to fix umlauts and
  other special characters when a mail is exported as html for
  print preview and printing via an external browser (boo#1052482)</changelog>

</package>
<package pkgid="2198a298aa2a61920cb4583e28e445a7e0a0522cba4600015a50cde0b53bc7b5" name="minicom" arch="src">
    <version epoch="0" ver="2.7" rel="8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1260964800">- take over the package
- Import patches from Ubuntu</changelog>
<changelog author="lnussel@suse.de" date="1268136000">- use lockdev (FATE#308360)</changelog>
<changelog author="lnussel@suse.de" date="1272456000">- remove 01manual.diff as it's Debian specific</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not hardcode build dates in binaries</changelog>
<changelog author="anicka@suse.cz" date="1283256000">- update to 2.4
  * Add options -b, -D and -R.
  * Remove environment variable for the remote
  charset and make it available via option -R.
  * remove all code that deals with running as suid-root. Also
  remove minicom.users as it's not needed anymore. Handle
  permissions within the file-system.
  * Consolidate lockfile handling into separate functions and use them,
  also do lockfile handling before and after launching kermit.
  * Add -b %b (Baudrate) to kermit command call.</changelog>
<changelog author="lnussel@suse.de" date="1294747200">- enable and fix socket support (bnc#661749)
- change default device to /dev/modem as /dev/tty8 doesn't make sense
- save to home if running as non-root</changelog>
<changelog author="vcizek@novell.com" date="1296475200">- update to 2.5
  * src/script.c: Make word handling more dynamic, and thus allowing
    words &gt; 89 chars. Reported via Debian BTS #610511.
  * src/rwconf.c: Fix config file parsing bug, Thanks Jan Görig,
    https://bugzilla.redhat.com/show_bug.cgi?id=669406
  * src/updown.c: Check for error conditions on fd of running script.
    for minicom bug-tracker #312517, by Chris Simmonds
  * src/updown.c: Removed static buffers that limit multi-file
    zmodem functionality. (Redhat #98654)
- removed two unneeded patches</changelog>
<changelog author="vcizek@novell.com" date="1311681600">- increased length of serial device (bnc#707860)</changelog>
<changelog author="lnussel@suse.de" date="1314187200">- fix lockdev suppport (bnc#713330)</changelog>
<changelog author="vcizek@suse.com" date="1318939200">- a complete fix for (bnc#707860)</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- update to 2.6
  * Add possibility to add delay after every character transmission.
  * Fix build issues on Mac OS X.
  * Stop providing default modem init and reset strings (still available when
    editing).
  * Added possibility for timestamps in output, added by minicom
  * Added lockdev support.
  * Added new dialdir format that is supposed to be interoperable between 32
    and 64 bits archs.</changelog>
<changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12
  - add: automake-1.12.patch</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove not needed minicom-2.3-ncurses.patch to get rid of
  automake dependency
- update to 2.6.1
  * src/main.c, src/minicom.c: iconv: Handle the case that iconv
    did not convert anything. Reported by Mike Crowe, Debian #659351.
  * src/main.c: ETIME -&gt; ETIMEDOUT as ETIME is not available on BSDs
  * src/main.c: Fix invalid memory used, reported by Larry Baker</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356696000">- configure wants "ckermit" present during build and at runtime.
- Prefer ncurses6w.</changelog>
<changelog author="mvyskocil@suse.com" date="1387368000">- update to 2.6.2
  * Alternative hex output (to be improved)
  * Print creation date of serial device file (if &lt; 20 hrs), useful for
  identifying just plugged in USB-Serial adapters
  * Support ':' (colon) in device path names. Note, that this changes old
  behaviour which used ':' as a device path delimiter.
  * Several language updates.
- refreshed/rebased patches
  * minicom-2.3-no-build-date.patch
  * minicom-2.4-norootsetup.diff
  * minicom-2.5-serial_device_path_length.patch</changelog>
<changelog author="vcizek@suse.com" date="1388664000">- update to 2.7
  * Configurable status line via -F option, see manpage for a listing
    of format specifier.
  * Improve display of device name in status line.
  * Script: Binary transmission feature via "!&lt;"
  * Fixes.</changelog>
<changelog author="dmueller@suse.com" date="1389700800">- fix Source url</changelog>
<changelog author="sflees@suse.de" date="1492084800">- Invalid cursor coordinates and scroll regions could lead to code
  execution
  * fix-upstream-CVE-2017-7467.patch
  * CVE-2017-7467, bsc#1033783
- Merge with Leap spec file so we can share the 1 package between
  both</changelog>

</package>
<package pkgid="a58b9f51d3eba4208dd862a86772a7ccb43f4e316444cff86ce221e0fb4001d7" name="minicom" arch="x86_64">
    <version epoch="0" ver="2.7" rel="8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1260964800">- take over the package
- Import patches from Ubuntu</changelog>
<changelog author="lnussel@suse.de" date="1268136000">- use lockdev (FATE#308360)</changelog>
<changelog author="lnussel@suse.de" date="1272456000">- remove 01manual.diff as it's Debian specific</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not hardcode build dates in binaries</changelog>
<changelog author="anicka@suse.cz" date="1283256000">- update to 2.4
  * Add options -b, -D and -R.
  * Remove environment variable for the remote
  charset and make it available via option -R.
  * remove all code that deals with running as suid-root. Also
  remove minicom.users as it's not needed anymore. Handle
  permissions within the file-system.
  * Consolidate lockfile handling into separate functions and use them,
  also do lockfile handling before and after launching kermit.
  * Add -b %b (Baudrate) to kermit command call.</changelog>
<changelog author="lnussel@suse.de" date="1294747200">- enable and fix socket support (bnc#661749)
- change default device to /dev/modem as /dev/tty8 doesn't make sense
- save to home if running as non-root</changelog>
<changelog author="vcizek@novell.com" date="1296475200">- update to 2.5
  * src/script.c: Make word handling more dynamic, and thus allowing
    words &gt; 89 chars. Reported via Debian BTS #610511.
  * src/rwconf.c: Fix config file parsing bug, Thanks Jan Görig,
    https://bugzilla.redhat.com/show_bug.cgi?id=669406
  * src/updown.c: Check for error conditions on fd of running script.
    for minicom bug-tracker #312517, by Chris Simmonds
  * src/updown.c: Removed static buffers that limit multi-file
    zmodem functionality. (Redhat #98654)
- removed two unneeded patches</changelog>
<changelog author="vcizek@novell.com" date="1311681600">- increased length of serial device (bnc#707860)</changelog>
<changelog author="lnussel@suse.de" date="1314187200">- fix lockdev suppport (bnc#713330)</changelog>
<changelog author="vcizek@suse.com" date="1318939200">- a complete fix for (bnc#707860)</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- update to 2.6
  * Add possibility to add delay after every character transmission.
  * Fix build issues on Mac OS X.
  * Stop providing default modem init and reset strings (still available when
    editing).
  * Added possibility for timestamps in output, added by minicom
  * Added lockdev support.
  * Added new dialdir format that is supposed to be interoperable between 32
    and 64 bits archs.</changelog>
<changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12
  - add: automake-1.12.patch</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove not needed minicom-2.3-ncurses.patch to get rid of
  automake dependency
- update to 2.6.1
  * src/main.c, src/minicom.c: iconv: Handle the case that iconv
    did not convert anything. Reported by Mike Crowe, Debian #659351.
  * src/main.c: ETIME -&gt; ETIMEDOUT as ETIME is not available on BSDs
  * src/main.c: Fix invalid memory used, reported by Larry Baker</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356696000">- configure wants "ckermit" present during build and at runtime.
- Prefer ncurses6w.</changelog>
<changelog author="mvyskocil@suse.com" date="1387368000">- update to 2.6.2
  * Alternative hex output (to be improved)
  * Print creation date of serial device file (if &lt; 20 hrs), useful for
  identifying just plugged in USB-Serial adapters
  * Support ':' (colon) in device path names. Note, that this changes old
  behaviour which used ':' as a device path delimiter.
  * Several language updates.
- refreshed/rebased patches
  * minicom-2.3-no-build-date.patch
  * minicom-2.4-norootsetup.diff
  * minicom-2.5-serial_device_path_length.patch</changelog>
<changelog author="vcizek@suse.com" date="1388664000">- update to 2.7
  * Configurable status line via -F option, see manpage for a listing
    of format specifier.
  * Improve display of device name in status line.
  * Script: Binary transmission feature via "!&lt;"
  * Fixes.</changelog>
<changelog author="dmueller@suse.com" date="1389700800">- fix Source url</changelog>
<changelog author="sflees@suse.de" date="1492084800">- Invalid cursor coordinates and scroll regions could lead to code
  execution
  * fix-upstream-CVE-2017-7467.patch
  * CVE-2017-7467, bsc#1033783
- Merge with Leap spec file so we can share the 1 package between
  both</changelog>

</package>
<package pkgid="f5f626316cec2dc2596baf1b85e8858f7d5a4cdbab10a37794c79ae86f97eaf0" name="minicom-lang" arch="noarch">
    <version epoch="0" ver="2.7" rel="8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1260964800">- take over the package
- Import patches from Ubuntu</changelog>
<changelog author="lnussel@suse.de" date="1268136000">- use lockdev (FATE#308360)</changelog>
<changelog author="lnussel@suse.de" date="1272456000">- remove 01manual.diff as it's Debian specific</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not hardcode build dates in binaries</changelog>
<changelog author="anicka@suse.cz" date="1283256000">- update to 2.4
  * Add options -b, -D and -R.
  * Remove environment variable for the remote
  charset and make it available via option -R.
  * remove all code that deals with running as suid-root. Also
  remove minicom.users as it's not needed anymore. Handle
  permissions within the file-system.
  * Consolidate lockfile handling into separate functions and use them,
  also do lockfile handling before and after launching kermit.
  * Add -b %b (Baudrate) to kermit command call.</changelog>
<changelog author="lnussel@suse.de" date="1294747200">- enable and fix socket support (bnc#661749)
- change default device to /dev/modem as /dev/tty8 doesn't make sense
- save to home if running as non-root</changelog>
<changelog author="vcizek@novell.com" date="1296475200">- update to 2.5
  * src/script.c: Make word handling more dynamic, and thus allowing
    words &gt; 89 chars. Reported via Debian BTS #610511.
  * src/rwconf.c: Fix config file parsing bug, Thanks Jan Görig,
    https://bugzilla.redhat.com/show_bug.cgi?id=669406
  * src/updown.c: Check for error conditions on fd of running script.
    for minicom bug-tracker #312517, by Chris Simmonds
  * src/updown.c: Removed static buffers that limit multi-file
    zmodem functionality. (Redhat #98654)
- removed two unneeded patches</changelog>
<changelog author="vcizek@novell.com" date="1311681600">- increased length of serial device (bnc#707860)</changelog>
<changelog author="lnussel@suse.de" date="1314187200">- fix lockdev suppport (bnc#713330)</changelog>
<changelog author="vcizek@suse.com" date="1318939200">- a complete fix for (bnc#707860)</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- update to 2.6
  * Add possibility to add delay after every character transmission.
  * Fix build issues on Mac OS X.
  * Stop providing default modem init and reset strings (still available when
    editing).
  * Added possibility for timestamps in output, added by minicom
  * Added lockdev support.
  * Added new dialdir format that is supposed to be interoperable between 32
    and 64 bits archs.</changelog>
<changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12
  - add: automake-1.12.patch</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove not needed minicom-2.3-ncurses.patch to get rid of
  automake dependency
- update to 2.6.1
  * src/main.c, src/minicom.c: iconv: Handle the case that iconv
    did not convert anything. Reported by Mike Crowe, Debian #659351.
  * src/main.c: ETIME -&gt; ETIMEDOUT as ETIME is not available on BSDs
  * src/main.c: Fix invalid memory used, reported by Larry Baker</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356696000">- configure wants "ckermit" present during build and at runtime.
- Prefer ncurses6w.</changelog>
<changelog author="mvyskocil@suse.com" date="1387368000">- update to 2.6.2
  * Alternative hex output (to be improved)
  * Print creation date of serial device file (if &lt; 20 hrs), useful for
  identifying just plugged in USB-Serial adapters
  * Support ':' (colon) in device path names. Note, that this changes old
  behaviour which used ':' as a device path delimiter.
  * Several language updates.
- refreshed/rebased patches
  * minicom-2.3-no-build-date.patch
  * minicom-2.4-norootsetup.diff
  * minicom-2.5-serial_device_path_length.patch</changelog>
<changelog author="vcizek@suse.com" date="1388664000">- update to 2.7
  * Configurable status line via -F option, see manpage for a listing
    of format specifier.
  * Improve display of device name in status line.
  * Script: Binary transmission feature via "!&lt;"
  * Fixes.</changelog>
<changelog author="dmueller@suse.com" date="1389700800">- fix Source url</changelog>
<changelog author="sflees@suse.de" date="1492084800">- Invalid cursor coordinates and scroll regions could lead to code
  execution
  * fix-upstream-CVE-2017-7467.patch
  * CVE-2017-7467, bsc#1033783
- Merge with Leap spec file so we can share the 1 package between
  both</changelog>

</package>
<package pkgid="2f754e9eebf485804e54b682914806cdf331a901f5b9768b996ec4195d25fee7" name="mkvtoolnix" arch="src">
    <version epoch="0" ver="14.0.0" rel="5.1"/>

<changelog author="rpm@fthiessen.de" date="1449316800">- Update to upstream release 8.6.1:
  * all: MKVToolNix now requires gcc 4.8.0 or later or clang 3.4 or
    later for compilation.
  change: none of the tools will write a byte-order mark (BOM) to
  text files encoded any of the UTF-* schemes anymore.
  * mkvmerge: bug fix: the VC-1 handlig code was duplicating the
    first sequence headers with each mux.
  enhancement: added JSON as an output format for file type
    identification.
  bug fix: fixed two issues causing mkvmerge to write invalid data
    when updating track headers.
  bug fix: the change to do a deeper file analysis if no seek head
    was found was causing huge increases in file type detection time
    as popular tools like x264 don?t write seek heads. The way
    elements at the end are searched has been changed to only scan
    the last 5 MB of the file instead of iterating over every
    level 1 element from the beginning of the file.
  * MKVToolNix GUI: bug fix: the options for linking to the
    next/previous segment UID were wrong.
  bug fix: the program changes its working directory to the
    user?s profile/home directory on startup allowing the removal of
    its installation folder even if a program started by the GUI
    (e.g. a web browser) is still running.
  bug fix: in certain situations the modified file would not contain
    a seek head before the first cluster anymore resulting in most
    players not finding elements such as attachments or the index
    located at the end of the file anymore.
  * Some other enhancements and bugfixes, see full changelog:
  https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog
- Split package into commandline- (base) and gui-package,
  reduces overhead when installing on a headless system.
- Replaced sed in prep with disable-update-check.patch to disable
  update check on startup (not needed with a package system).
- Added mkvtoolnix-use-system-boost.patch from fedora to fix includes
  when building against boost from system.</changelog>
<changelog author="rpm@fthiessen.de" date="1452168000">- Update to upstream release 8.7.0:
  * all: reversion of a change: several ISO 639-2 codes of languages
    that are very old and not spoken anymore have been re-added
    due to feedback from users who did have a use for such codes.
    reversion of a change: all of the tools will write a byte-order
    mark (BOM) to text files encoded any of the UTF-* schemes again.
  * mkvmerge: bug fix: fixed the key frame detection for VP9 video
    tracks.
    bug fix: chapters were output as both "chapters" and
    "track_tags" in JSON identification mode.
    bug fix: AAC with low sampling frequencies was sometimes
    mis-detected with the wrong profile preventing appending it
    to other AAC tracks.
    bug fix: the progress calculation was sometimes outputting
    negative numbers when appending Matroska files whose timestamps
    don?t start at 0.
    bug fix: fixed the decisions whether or not to write the last
    frame of a track as a BlockGroup or a SimpleBlock and whether
    or not to write a block duration for that frame.
    bug fix: the Matroska reader now uses TrueHD-specific code
    when reading Matroska files. This can fix things like wrong
    frame type flags.
  * MKVToolNix GUI: bug fix: relative file names given on the
    command line were interpreted as being relative to the user?s
    home directory.
    bug fix: the "split mode" drop-down box got reset to
    "do not split" each time the preferences dialog was closed
    with the "OK" button
  * And a lot more enhancements and bugfixes, see full changelog:
    https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog</changelog>
<changelog author="rpm@fthiessen.de" date="1452427200">- Update to upstream release 8.8.0:
  * MKVToolNix GUI: bug fix: when using one of the
    "select all tracks (of type?)" actions the "properties" column
    didn?t show the selection.
    bug fix: the paths used in the variables and the executable are
    converted to the platforms native path separators.
  * mkvmerge: bug fix: fixed a mis-detection of an MPEG-2 video
    elementary stream as a TrueHD file which then caused a
    segmentation fault.
    bug fix: Matroska attachments with the same name, size and MIME
    type were not output during file identification.
    bug fix: fixed TrueHD detection both as raw streams as well as
    inside other contains if the stream does not start with a
    TrueHD sync frame.
  * Some GUI enhancements and new features, see full changelog:
    https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog
- some spec file cleanup</changelog>
<changelog author="jengelh@inai.de" date="1456142400">- Update to new upstream release 8.9.0
  * gui: the default font size adjustment has been. Deactivated for
  the time being as it causes problems on high DPI Displays.
  * gui: ampersands in file names were shown as keyboard shortcuts
  in tab titles in various tools
  * gui: add ability (menu entry) for removing chapters from an
  existing Matroska file.
  * Polish translation provided</changelog>
<changelog author="jengelh@inai.de" date="1459166400">- Update to new upstream release 9.0.0
  * mkvmerge: bug fix: fixed two more issues in the conversion of
  teletext subtitles to SRT subtitles.
  * mkvmerge: MP4/QuickTime reader: audio tracks with the FourCC
  "lpcm" are muxed as A_PCM/INT/LIT instead of A_QUICKTIME.
  * mkvmerge: bug fix: MP4/QuickTime reader: audio tracks can contain
  two instances of certain header fields in the STSD atom;
  mkvmerge now uses the v2 structure over v0, if present.
  * mkvextract: new feature: implemented the extraction of Big
  Endian PCM (codec ID A_PCM/INT/BIG) to WAV files. The content will
  be byte-swapped into Little Endian PCM in the process.
  * mkvmerge: enhancement: Big Endian PCM tracks will now be
  byte-swapped into Little Endian PCM, and the codec ID
  A_PCM/INT/LIT will be used, as many players do not support BE PCM
  inside MKVs.</changelog>
<changelog author="rpm@fthiessen.de" date="1459166401">- Update to new upstream release 9.0.1:
  * mkvmerge: bug fix: regression in v9.0.0: the text subtitle
  packetizer was wrongfully assuming an encoding of UTF-8 if none
  was given instead of assuming the system's encoding. Fixes #1639.
  bug fix: if too many chapters had been generated with
  - -generate-chapters then mkvmerge created a bogus entry in the
  meta seek element and did not actually write the chapters to the
  file.
  bug fix: the DTS packetizer was setting the number of
  channels wrong sometimes when reducing to the DTS core. It was
  using the number of channels including the extensions instead of
  the channels of the core only.</changelog>
<changelog author="rpm@fthiessen.de" date="1461585600">- Update to new upstream release 9.1.0:
  * mkvmerge: bug fix: AVC/h.264: fixed handling of interlaced frames
  with bottom field first.
  bug fix: mkvmerge will no longer abort reading a Matroska file
  with a structural error right before the first cluster.
  bug fix: the "text_subtitles" property of the JSON/verbose
  identification modes was always set to true for all subtitle
  tracks, even for those that aren't text subtitles (VobSub, PG).
  bug fix: the language code signaled in the MPEG TS PMT is taken
  into account when selecting the character encoding to use
  during decoding of the teletext subtitles, not just the
  "national character set" stored in the teletext page headers.
  * MKVToolNix GUI: bug fix: Fixed huge memory consumption in the
  JSON library by updating said JSON library.
  bug fix: In merge-tool: when adding playlists the GUI won't ask
  the user whether or not to scan if there's only a single
  playlist in that directory.</changelog>
<changelog author="rpm@fthiessen.de" date="1464696000">- Update to new upstream release 9.2.0:
  * mkvmerge: bug fix: the "interval" chapter generation mode was
  always creating one chapter too many.
  bug fix: if a certain number of chapters had been generated with
  - -generate-chapters then mkvmerge wasn't replacing the void
  placerholder with the actual chapters.
  bug fix: fixed detection of (E-)AC-3 in MPEG TS files with
  unusual stream types (e.g. 0x87) but with (E-)AC-3 PMT
  descriptors.
  * mkvmerge, mkvextract: bug fix: fixed handling of Big Endian PCM
  with a bit depth other than 16, 32 or 64 bits/sample. Other
  formats were using the Little Endian codec ID, but their content
  was actually not byte-swapped to match it. Now those other bit
  depths are byte-swapped to Little Endian, too.
  * MKVToolNix GUI: merge tool bug fix: the track column "default
  track in output" wasn't taking into account if the track had its
  "default track" flag set to "no" in the source file. This would
  result in the column showing "yes" in certain situations even
  though mkvmerge would assign "no".
  * Some other improvements, some enhancements and other bugfixes,
  please refer to the changelog file provides with the package.</changelog>
<changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 9.3.1:
  * libebml &gt;= 1.3.4 and libmatroska &gt;= 1.4.5 are now required
  * A lot of bugfixes and new features, new mkv elements are
    supported, for a list of all changes, please refer to the
    changelog provided by the package.</changelog>
<changelog author="rpm@fthiessen.de" date="1472731200">- Update to new upstream release 9.4.0:
  * MKVToolNix GUI: merge tool bug fix: the automatic adjustments
    to the output file name based on the track types selected for
    muxing and the mechanism for keeping output file names unique
    had been broken since release v9.3.0.
    chapter editor bug fix: overly long chapter names don't cause
    the GUI's window to become overly wide anymore.
  * mkvmerge: bug fix: mkvmerge does no longer emit a warning if no
    comment header packet is found when reading tracks from
    Ogg/OGM files.
    bug fix: VP8 in Ogg: fixed dropping the first frame and the
    timestamp calculation.
    bug fix: when appending files mkvmerge wasn't starting clusters
    on video key frame anymore for the first and all following
    appended files.
    DTS bug fix: if present mkvmerge will use an XLL extension's
    sample rate information as the sample rate to put into
    the track headers.
  * mkvpropedit: bug fix: mkvpropedit will no longer say that it's
    writing the changes if only attachment changes are specified
    and none of the specified attachments can be found.
  * Some enhancements, please refer to the changelog within the
    package.</changelog>
<changelog author="rpm@fthiessen.de" date="1474027200">- Update to new release 9.4.2:
  * mkvmerge: bug fix: using very large --sync values with certain
    container formats was causing mkvmerge to abort muxing.
    bug fix: fixed an invalid memory access (use after free)
    during global destruction phase.
    bug fix: HEVC parser: fixed three invalid memory accesses.
    bug fix: MP4 reader: fixed an invalid memory access
    bug fix: AAC reader: fixed mkvmerge throwing an uncaught
    exception due to the sample rate being 0.
    bug fix: MP4 reader: an error message will be printed
    instead of an uncaught exception when an invalid atom chunk
    size is encountered during resync.
    bug fix: AVC &amp; HEVC readers: the readers will now refuse to
    handle files where the detected pixel width or height is
    equal to or less than 0.</changelog>
<changelog author="rpm@fthiessen.de" date="1477569600">- Update to new release 9.5.0
  * mkvmerge: bug fix: The Ogg/OGM reader did not recognize Opus
    files with comment headers anymore.
    WAV reader bug fix: the track properties (channels, samplerate)
    for DTS and AC-3 in WAV will now be derived from the decoded
    bitstream headers instead of the WAV file header as the latter
    is often incorrect.
    WAV reader bug fix: fixed detection and merging of DTS in WAV
    that uses the 14-bytes-in-16-bytes packing method.
    MPEG transport stream reader bug fix: fixed mis-detection of
    certain h.264 files as MPEG transport streams.
    MPEG transport stream reader bug fix: fixed the handling of
    Blu-ray PCM audio with an odd number of channels by removing
    their alignment bytes.
    h.264 elementary stream handling bug fix: if mkvmerge ever
    encounters changing SPS or PPS NALUs (ones where their ID has
    been encountered before with different settings) in the h.264
    then it will prepend all following key frames with all
    currently active SPS and PPS NALUs. This enables playback from
    arbitrary key frames even if they require other SPS or PPS
    settings than the ones stored in the AVCC in CodecPrivate.
    VobSub handling bug fix: mkvmerge and mkvextract will now
    update the duration stored in the SPU bitsream with the
    duration from the container level if it differs at least 1ms.
  * mkvprpedit, MKVToolNix GUI: Added support for "field order"
    video track header element.
- Use GPG signature for verification.</changelog>
<changelog author="rpm@fthiessen.de" date="1480507200">- Update to new release 9.6.0
  * mkvmerge: bug fix: mkvmerge was entering endless loops under
    certain conditions when appending files.
    MPLS parser bug fix: fixed reading the "in" &amp; "out"
    timestamps for "play items". This bug resulted in mkvmerge
    not reading the correct range from the referenced M2TS file
    under certain rare circumstances.
  * MKVToolNix GUI: job output tool bug fix: the button for
    acknowledging warnings &amp; errors wasn't properly disabled when
    the user used outside methods of acknowledging them
  * mkvextract: VobSub bug fix: mkvextract will add a "langidx"
    line to the .idx file upon extraction.
  * mkvmerge &amp; mkvextract: added support for HDMV TextST subtitles.</changelog>
<changelog author="rpm@fthiessen.de" date="1485518400">- Update to new release 9.8.0
  * mkvmerge: MP4 reader: when an MP4 file contained fewer entries
  for timestamps than frames (which they never should), mkvmerge
  would use 0 as the timestamp for all the other frames. This
  resulted in effects such as the last frame of an output file
  having a timestamp of 0 and in split files having a much longer
  duration than they should have. Fixes #1847.
  bug fix: the MPEG transport stream reader was using an outdated
  format for the "CodecPrivate" element for HDMV TextST subtitles.
  This has been updated to the current format which only contains
  the "dialog style element". Existing Matroska files using this
  outdated scheme can be fixed by running them through mkvmerge.
  bug fix: files smaller than 4 bytes were wrongly identified as
  MPEG transport streams.
  bug fix: if a codec delay is set for a track in the input file,
  it is kept. Fixes #1849. bug fix: fixed that the error message
  "not enough space on disk" was shown twice on some operating systems.
  teletext subtitle bug fix: fixed the handling of DVB teletext subtitles
  signaled with data unit ID 0x02 and that contain pages from multiple magazines.
  bug fix: when using --track-order without specifying all tracks,
  the track numbers could end up in a way the user did not expect.
  Now mkvmerge will always assign track numbers for those tracks
  that are listed in --track-order first. The other tracks are
  assigned numbers afterwards. Fixes the second part of #1832.
  bug fix: when reading Matroska files the movie title was always
  taken from the first Matroska source file, even if that file
  didn't have a title set. Fixes one part of #1832.
  MP4: fixed detection of MP3 audio when the object type ID in the
  ESDS signals MP2 and the track headers have invalid values for
  number of channels or sampling frequency. Fixes #1844.
  The command line option "--check-for-updates" has been removed.
  * GUI: the cache cleanup process that's run automatically when
  the GUI starts no longer blocks file identification until it
  is finished. Additionally the process will only be run once
  per release of MKVToolNix. Fixes #1860.
  certain failures during file identification that can be
  traced to broken installations won't be stored in the cache
  anymore. Without this fix the GUI would still use the cached
  failed identification result even though the underlying
  might have already been fixed.
  multiplexer: changing default values in the preferences (e.g. the
  default track language to set) did not affect files whose
  identification results had already been cached.
  multiplex tool bug fix: under certain circumstances the GUI was
  creating invalid JSON files when starting to multiplex resulting
  in an error message ("JSON option files must contain a JSON
  array consisting solely of JSON strings").
  re-worked the startup code not to use lock files when trying to
  open a socket for communicating with an already-running instance.
  This aims to prevent situations with stale lock files not being
  cleaned up and the GUI not starting anymore as a result.
  This might fix or prevent issues like #1805.
  * A lot of new features and enhancements, please refer to NEWS.md
- Rebased disable-update-check.patch
- spec file cleanup
- Adjusted BuildRequires
  * Since 9.7.1 QT &gt;= 5.3 is required
  * Since 9.7.1 a c++ compiler with some c++14 features is required
    e.g. gcc &gt;= 4.9 or clang &gt;= 3.4</changelog>
<changelog author="rpm@fthiessen.de" date="1487592000">- Update to new release 9.9.0
  * mkvmerge: AC-3 handling: some source files provide timestamps
    for audio tracks only once every n audio frames. In such
    situations mkvmerge was buffering too much data resulting in
    a single gap in the timestamps of one frame duration after frame
    number n - 1 (the second audio timestamp read from the source
    file was used one output frame too early).
  bugfix MP4 reader: mkvmerge was only reading a small part of MP4
    DASH files where the first "moov" "mdat" atoms occur before the
    first "moof" atom.
  bugfix MP4 reader: edit list ("edts" atoms) that are part of the
    "moof" atoms used in MP4 DASH files weren't parsed. Instead the
    edit lists from the main track headers inside the "moov" atom
    were used.
  bugfix MP4 reader: when an MP4 DASH file contained both normal
    chunk offset table in their regular "moov" atoms, a
    sample-to-chunk table ("stsc" atom) whose last entry had a
    "samples per chunk" count greater than 1 and DASH "trun" atoms,
    then mkvmerge was calculating wrong positions the frame content.
  bugfix MP4 reader: mkvmerge couldn't deal with the key frame index
    table having duplicate entries. The result was that only key
    frames up to and including the first duplicate entry were marked
    as key frames in the output file. All other frames weren't, even
    though some of them were referenced from the key frame table
    after the first duplicate entry.
  bufix MP4 reader: when an MP4 file contained more than one copy of
    the "moov" atom (the track headers etc.), mkvmerge was parsing
    them all adding tracks multiple times.
  bugfix MP4 reader: fixed an integer overflow during the timestamp
    calculation leading to files with wrong timestamps. Such files
    could not be played back properly by most players.
  bugfix MPEG TS reader: if the PMT lists a DVBSUB track, mkvmerge
    will now recognize it without having to find a packet for it
    within the probed range.
  bugfix splitting by parts (both the "timestamps" and the "frames"
    variants): fixed the calculation of track statistics tags. When
    calculating the duration the skipped portions weren't taken into
    account leading to a too-high duration. As a consequence the BPS
    tag (bits per second) was wrong, too.
  bugfix reading files with DVB/HDMV TextSV subtitle tracks with
    invalid CodecPrivate caused mkvmerge to abort with an error
    from boost::format about the format string not having enough
    arguments.
  bugfix: fixed misdetection of certain AC-3 files as MP3 files
    which led to an error message that
    "the demultiplexer could not be initialized".
  bugfix: fixed huge memory consumption when appending big Matroska
    files with sparse tracks (e.g. forced subtitle tracks).
    The Matroska reader will now queue at most 128 MB of data.
  bugfix MP4 reader: the timestamps of all multiplexed tracks will
    now be 0-based properly.
  bugfix MP4 reader: the DTS-to-PTS offsets given by the "ctts"
    atoms are now applied for all tracks containing a "ctts" atom,
    not just h.264 &amp; h.265 tracks.
  * Some new features and enhancements
- Now required for man pages:
  libxslt-tools, docbook-xsl-stylesheets  and po4a</changelog>
<changelog author="rpm@fthiessen.de" date="1490702400">- Update to new release 10.0.0
  * mkvmerge: new feature AVC/h.264 and HEVC/h.265 parser: mkvmerge
    will now drop all frames before the first key frame as they
    cannot be decoded properly anyway.
  new feature HEVC/h.265 parser: added a workaround for invalid
    values for the "default display window" in the VUI parameters
    of sequence parameter sets.
  bugfix MP4 reader: fixed track offsets being wrong in certain
    situations regarding the presence or absence of edit lists
    ('elst' atoms) &amp; composition timestamps ('ctts' atoms).
  bugfix MP4 reader: offsets in "ctts" are now always treated
    as signed integers, even with version 0 atoms.
  bugfix Matroska reader: fixed handling BlockGroups and
    SimpleBlocks with negative timestamps.
  bugfix MP3 packetizer: the MP3 packetizer will no longer drop
    timestamps from source containers if they go backwards.
    This keeps A/V in sync for files where the source was in sync
    even though their timestamps aren't monotonic increasing.
  bugfix AVC/h.264 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  bugfix HEVC/h.265 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  * mkvinfo: the timestamps of SimpleBlocks with negative
  timestamps are now shown correctly.
  * mkvextract: SSA/ASS: fixed extraction when the "Format"
  line in the "[Events]" section contains less fields than the
  default for SSA/ASS would indicate.</changelog>
<changelog author="rpm@fthiessen.de" date="1496145600">- Update to version 12.0.0
  * MKVToolNix GUI: new feature: the key combination
    Ctrl+Shift+Space will now toggle the selection of the current
    item in all tree views where multiple selections are allowed.
  new feature: chapter editor: added the extension `*.cue`
    to the "open chapter file" dialog.
  bugfix:preferences ? job actions, type "play audio file":
    the GUI will no longer clear the audio file name input if the
    user aborts the audio file selection dialog.
  bugfix: multiplexer tool: the "show command line" dialog will no
    longer include the mkvmerge executable's location as the first
    argument for the two "MKVToolNix option files" escape modes.
  bugfix: header editor: empty track language elements are now
    treated the same as those set to invalid ISO 639-2 codes:
    as if they were set to `und` = "undetermined".
  new feature: watch jobs: the user can now have the GUI execute
    an action once as soon as the current job or the whole queue
    finishes. The actions are the same ones that can be configured
    to be run automatically after job or queue completion.
  new feature: implemented several built-in actions that can be
    executed either on special events or once via the "watch jobs"
    tool. These are: playing an audio file; hibernating, sleeping
    and shutting down the computer.
  new feature: multiplex tool: added a new option for what to do
    after starting to multiplex/adding to the job queue:
    "close current settings" will close the current multiplex
    settings without opening new ones.
  * mkvmerge: New feature: cue sheet parser: if the cue sheet
    contains a non-empty `TITLE` entry and if no other segment title
    has been set yet, then the segment title will be set to the
    cue sheet's `TITLE` value.
  new feature: added an option `--no-date` that prevents the "date"
    field from being written to the segment information headers.
  new feature: FLAC reader: added support for handling embedded
    pictures as attachments.
  new feature: MP4 reader: Added support for parsing the "COLR"
    atom and including its values as track headers.
  bugfix: HEVC/h.265 parser: fixed the superfluous copying of the
    'bitstream_restriction_flag' and its dependent flags in the
    VUI parameters of the sequence parameter sets if the timing
    information is present, too.
  bugfix: MPEG TS reader, AAC parser: the MPEG TS reader will now
    force the AAC parser to use the multiplex mode that the MPEG TS
    reader has detected. This prevents the AAC packetizer from
    mis-detecting it in its own attempt to identify the mode.
  bugfix: MPEG TS reader: valid MPEG transport streams that start
    with an h.264/h.265 start code were not recognized as a
    supported file type.
  bugfix: MPEG TS reader: fixed a potential read access from
    invalid memory addresses in the code parsing the program
    map table (PMT).
  bugfix: MPEG TS reader: if packets are encountered that belong
    to a PID not listed in the program map table (PMT), mkvmerge
    will attempt to determine their type and codec from the content.
    This supported content types are AAC (ADTS only) and AC-3.
  bugfix: MP4 reader: fixed finding and parsing the `colr` atom if
    there are more than one video extension atoms and the `colr` atom
    is not the first one.
  bugfix: MP4 reader: the `nclx` colour type of the `colr` atom is
    now recognized, too.
  bugfix: AAC parser: fixed mis-detection of certain data as valid
    ADTS AAC headers resulting in memory allocation failures.
  bugfix: AVC/h.264 parser: mkvmerge will now ignore bogus timing
    information in the sequence parameter sets.
  bugfix: AVC/h.264 &amp; HEVC/h.265 parsers: all trailing zero bytes
    will now be removed from NALUs.
  bugfix: HEVC/h.265 parser: fixed copying the
    `bitstream_restriction_flag` and all dependent fields in the VUI
    parameters of the sequence parameter sets.
  bugfix: HEVC/h.265 parser: fixed the calculation of the number of
    parameter set arrays in the HEVCC data structure stored in
    CodecPrivate.
  * mkvpropedit: bugfix: header editor: added support for editing the
    "date" segment information field.</changelog>
<changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
<changelog author="rpm@fthiessen.de" date="1499947200">- Update to version 13.0.0
  * mkvmerge: new feature: MPEG TS reader: information about
    multiple programs will be output as container properties during
    verbose/JSON identification.
  bugfix: MP4 reader: MPEG-1/2 video read from MP4 files was written
    with an invalid codec ID (e.g. `V_MPEG7`) in certain cases.
  bugfix: MPEG PS reader: made the file type detection less strict
    so that garbage at the start of the file doesn't prevent detection.
  bugfix: MPEG PS reader: (E-)AC-3 tracks were not detected if the very
    first packet for that track didn't contain a full (E-)AC-3 frame.
  bugfix: MPEG TS reader: fixed mkvmerge not detecting all tracks in
    MPEG transport streams containing multiple programs.
  bugfix: MPEG TS reader: fixed track content being broken for some
    tracks read from MPEG transport streams containing multiple programs.
  bugfix: JSON identification: the `stream_id` and `sub_stream_id`
    track properties were output as hexadecimal strings instead
    of unsigned integers. As the `ts_pid` track property was only
    used for MPEG transport streams, its value is now output as
    `stream_id` instead, and the `ts_pid` property has been removed.
    The JSON schema version has been bumped to 8 due to this change.
  bugfix: fixed a crash when appending video tracks where one track
    has a CodecPrivate member and the other one doesn't.
  bugfix: track statistics tags: the `NUMBER_OF_BYTES` tag
    is supposed to contain the number of bytes in a track before any
    of the content encoding schemes such as lossless compression
    is applied; however, mkvmerge was wrongfully using the number of
    bytes after the schemes had been applied.
  bugfix: CLPI &amp; MPLS parsers: MPLS and CLPI files with version
    number `0300` as used on Ultra HD Blu-ray Discs are
    now accepted as well.
  * MKVToolNix GUI: new feature: multiplex tool: added a column
    "program" to the tracks list. Certain container types such
    as MPEG transport streams can contain multiple programs.
    The new column will contain the service name (think TV station
    names such as "arte HD") for such streams.
  bugfix: fixed computation of value of total progress bar for
    multiple jobs running.
  bugfix: multiplexer, adding new attachments: when the GUI checks
    if there's an attachment with the same name it will now
    disregard disabled attached files.
  new feature: multiplex tool: the dialog asking the user what to
    do with dropped files (add to current settings, add to new
    settings etc.) now remembers the previous decision and defaults
    to it the next time it's shown.
  new feature: tabs can now be closed by pressing the middle mouse
    button.
  * mkvpropedit: bugfix: fixed a crash when the selector used
    for `--tags` is invalid.</changelog>
<changelog author="rpm@fthiessen.de" date="1503662400">- Split boost-devel BuildRequires for Tumbleweed
- Update to version 14.0.0
  * mkvmerge, mkvpropedit, MKVToolNix GUI (chapter editor):
  new feature: added support for chapters in WebM files that is
    spec-compliant by removing all tag elements not supported
    by the WebM spec.
  * translations: added a Romanian translation of the programs.
  * mkvmerge: bugfix: AVC/h.264 and HEVC/h.265 parser: fixed wrong
    frame order &amp; timestamp calculation in certain situations when
    SPS (sequence parameter sets) or PPS (picture parameter sets)
    change mid-stream.
  bugfix: MPEG-1/-2 video: the "remove stuffing bytes" feature
    introduced in v5.8.0 was broken. In a lot of situations it
    did not detect the end of a slice correctly and removed 0 bytes
    that were actually part of the slice structure. Often there
    were no visual problems as decoders were able to ignore such
    errors, but in other cases there are visual artifacts upon
    decoding. As detecting the slice end properly requires parsing
    the whole slice structure, this feature has been removed again.
  bugfix: MPEG PS reader: fixed mkvmerge trying to handle an "end"
    code the same way as a "program stream map" code.
  bugfix: MPEG TS reader: mkvmerge won't emit warnings if the
    system's `iconv` library doesn't support the ISO 6937
    character set.
  bugfix: when appending fails the error message details (e.g.
    "the number of channels differs: 1 and 2") were often not output.
  new feature: AAC: implemented support for AAC with 960 samples per
    frame.
  new feature: identification: if the encoding/character set of a
    text subtitle track is known (e.g. because a byte order mark is
    present in the file), then it will be output during
    identification as the `encoding` property.
  new feature: WAV reader: added support for Wave64 files.
  * MKVToolNix GUI: bugfix: multiplex tool: implemented a workaround
    for a crash that could occur during drag &amp; drop if at least one
    of the columns is hidden.
  bugifx: multiplex tool: appended tracks can no longer be enabled
    (selected for multiplexing) if the track they're going to be
    appended to is not enabled.
  bugifx: multiplex tool: if the GUI is set to ensure unique output
    file names, it will now verify that right before starting to
    multiplex/adding the job to the queue, too.
  bugifx: fixed the total progress reverting to 0% instead of
    staying at 100% when all jobs have finished. This was introduced
    by the attempt at fixing the computation of the value of total
    progress bar for multiple jobs running.
  new feature: multiplexer: if the encoding/character set of a
    subtitle track cannot be changed, the GUI will deactivate the
    "subtitle character set" drop-down box and ignore changes to it
    when multiple tracks are selected. Additionally, if the track's
    encoding is known and cannot be changed (e.g. due to a
    byte order mark in the file), that encoding will be selected in
    the drop-down box automatically. Both changes signal to the user
    that she doesn't have to take care of the encoding herself.
  new feature: chapter editor: added a function to the "additional
    modifications" dialog for calculating and setting the end
    timestamps.
  new feature: changed the shortcuts for switching between the
    various tools from `Alt+number` (e.g. `Alt+1` for the multiplexer
    tool) to `Ctrl+Alt+number` in order to avoid clashing with
    Windows' input method for arbitrary characters (pressing and
    holding `Alt` and typing the codepoint on the number pad).
  new feature: added a "Window" menu and entries with shortcuts for
    selecting the next (`Ctrl+F6`) respectively previous tab
    (`Ctrl+Shift+F6`) in the current tool.</changelog>

</package>
<package pkgid="180f4cac20e91260228a9a635c87ef06ce8ee6fa609fd8de811b69bb496061c0" name="mkvtoolnix" arch="x86_64">
    <version epoch="0" ver="14.0.0" rel="5.1"/>

<changelog author="rpm@fthiessen.de" date="1449316800">- Update to upstream release 8.6.1:
  * all: MKVToolNix now requires gcc 4.8.0 or later or clang 3.4 or
    later for compilation.
  change: none of the tools will write a byte-order mark (BOM) to
  text files encoded any of the UTF-* schemes anymore.
  * mkvmerge: bug fix: the VC-1 handlig code was duplicating the
    first sequence headers with each mux.
  enhancement: added JSON as an output format for file type
    identification.
  bug fix: fixed two issues causing mkvmerge to write invalid data
    when updating track headers.
  bug fix: the change to do a deeper file analysis if no seek head
    was found was causing huge increases in file type detection time
    as popular tools like x264 don?t write seek heads. The way
    elements at the end are searched has been changed to only scan
    the last 5 MB of the file instead of iterating over every
    level 1 element from the beginning of the file.
  * MKVToolNix GUI: bug fix: the options for linking to the
    next/previous segment UID were wrong.
  bug fix: the program changes its working directory to the
    user?s profile/home directory on startup allowing the removal of
    its installation folder even if a program started by the GUI
    (e.g. a web browser) is still running.
  bug fix: in certain situations the modified file would not contain
    a seek head before the first cluster anymore resulting in most
    players not finding elements such as attachments or the index
    located at the end of the file anymore.
  * Some other enhancements and bugfixes, see full changelog:
  https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog
- Split package into commandline- (base) and gui-package,
  reduces overhead when installing on a headless system.
- Replaced sed in prep with disable-update-check.patch to disable
  update check on startup (not needed with a package system).
- Added mkvtoolnix-use-system-boost.patch from fedora to fix includes
  when building against boost from system.</changelog>
<changelog author="rpm@fthiessen.de" date="1452168000">- Update to upstream release 8.7.0:
  * all: reversion of a change: several ISO 639-2 codes of languages
    that are very old and not spoken anymore have been re-added
    due to feedback from users who did have a use for such codes.
    reversion of a change: all of the tools will write a byte-order
    mark (BOM) to text files encoded any of the UTF-* schemes again.
  * mkvmerge: bug fix: fixed the key frame detection for VP9 video
    tracks.
    bug fix: chapters were output as both "chapters" and
    "track_tags" in JSON identification mode.
    bug fix: AAC with low sampling frequencies was sometimes
    mis-detected with the wrong profile preventing appending it
    to other AAC tracks.
    bug fix: the progress calculation was sometimes outputting
    negative numbers when appending Matroska files whose timestamps
    don?t start at 0.
    bug fix: fixed the decisions whether or not to write the last
    frame of a track as a BlockGroup or a SimpleBlock and whether
    or not to write a block duration for that frame.
    bug fix: the Matroska reader now uses TrueHD-specific code
    when reading Matroska files. This can fix things like wrong
    frame type flags.
  * MKVToolNix GUI: bug fix: relative file names given on the
    command line were interpreted as being relative to the user?s
    home directory.
    bug fix: the "split mode" drop-down box got reset to
    "do not split" each time the preferences dialog was closed
    with the "OK" button
  * And a lot more enhancements and bugfixes, see full changelog:
    https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog</changelog>
<changelog author="rpm@fthiessen.de" date="1452427200">- Update to upstream release 8.8.0:
  * MKVToolNix GUI: bug fix: when using one of the
    "select all tracks (of type?)" actions the "properties" column
    didn?t show the selection.
    bug fix: the paths used in the variables and the executable are
    converted to the platforms native path separators.
  * mkvmerge: bug fix: fixed a mis-detection of an MPEG-2 video
    elementary stream as a TrueHD file which then caused a
    segmentation fault.
    bug fix: Matroska attachments with the same name, size and MIME
    type were not output during file identification.
    bug fix: fixed TrueHD detection both as raw streams as well as
    inside other contains if the stream does not start with a
    TrueHD sync frame.
  * Some GUI enhancements and new features, see full changelog:
    https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog
- some spec file cleanup</changelog>
<changelog author="jengelh@inai.de" date="1456142400">- Update to new upstream release 8.9.0
  * gui: the default font size adjustment has been. Deactivated for
  the time being as it causes problems on high DPI Displays.
  * gui: ampersands in file names were shown as keyboard shortcuts
  in tab titles in various tools
  * gui: add ability (menu entry) for removing chapters from an
  existing Matroska file.
  * Polish translation provided</changelog>
<changelog author="jengelh@inai.de" date="1459166400">- Update to new upstream release 9.0.0
  * mkvmerge: bug fix: fixed two more issues in the conversion of
  teletext subtitles to SRT subtitles.
  * mkvmerge: MP4/QuickTime reader: audio tracks with the FourCC
  "lpcm" are muxed as A_PCM/INT/LIT instead of A_QUICKTIME.
  * mkvmerge: bug fix: MP4/QuickTime reader: audio tracks can contain
  two instances of certain header fields in the STSD atom;
  mkvmerge now uses the v2 structure over v0, if present.
  * mkvextract: new feature: implemented the extraction of Big
  Endian PCM (codec ID A_PCM/INT/BIG) to WAV files. The content will
  be byte-swapped into Little Endian PCM in the process.
  * mkvmerge: enhancement: Big Endian PCM tracks will now be
  byte-swapped into Little Endian PCM, and the codec ID
  A_PCM/INT/LIT will be used, as many players do not support BE PCM
  inside MKVs.</changelog>
<changelog author="rpm@fthiessen.de" date="1459166401">- Update to new upstream release 9.0.1:
  * mkvmerge: bug fix: regression in v9.0.0: the text subtitle
  packetizer was wrongfully assuming an encoding of UTF-8 if none
  was given instead of assuming the system's encoding. Fixes #1639.
  bug fix: if too many chapters had been generated with
  - -generate-chapters then mkvmerge created a bogus entry in the
  meta seek element and did not actually write the chapters to the
  file.
  bug fix: the DTS packetizer was setting the number of
  channels wrong sometimes when reducing to the DTS core. It was
  using the number of channels including the extensions instead of
  the channels of the core only.</changelog>
<changelog author="rpm@fthiessen.de" date="1461585600">- Update to new upstream release 9.1.0:
  * mkvmerge: bug fix: AVC/h.264: fixed handling of interlaced frames
  with bottom field first.
  bug fix: mkvmerge will no longer abort reading a Matroska file
  with a structural error right before the first cluster.
  bug fix: the "text_subtitles" property of the JSON/verbose
  identification modes was always set to true for all subtitle
  tracks, even for those that aren't text subtitles (VobSub, PG).
  bug fix: the language code signaled in the MPEG TS PMT is taken
  into account when selecting the character encoding to use
  during decoding of the teletext subtitles, not just the
  "national character set" stored in the teletext page headers.
  * MKVToolNix GUI: bug fix: Fixed huge memory consumption in the
  JSON library by updating said JSON library.
  bug fix: In merge-tool: when adding playlists the GUI won't ask
  the user whether or not to scan if there's only a single
  playlist in that directory.</changelog>
<changelog author="rpm@fthiessen.de" date="1464696000">- Update to new upstream release 9.2.0:
  * mkvmerge: bug fix: the "interval" chapter generation mode was
  always creating one chapter too many.
  bug fix: if a certain number of chapters had been generated with
  - -generate-chapters then mkvmerge wasn't replacing the void
  placerholder with the actual chapters.
  bug fix: fixed detection of (E-)AC-3 in MPEG TS files with
  unusual stream types (e.g. 0x87) but with (E-)AC-3 PMT
  descriptors.
  * mkvmerge, mkvextract: bug fix: fixed handling of Big Endian PCM
  with a bit depth other than 16, 32 or 64 bits/sample. Other
  formats were using the Little Endian codec ID, but their content
  was actually not byte-swapped to match it. Now those other bit
  depths are byte-swapped to Little Endian, too.
  * MKVToolNix GUI: merge tool bug fix: the track column "default
  track in output" wasn't taking into account if the track had its
  "default track" flag set to "no" in the source file. This would
  result in the column showing "yes" in certain situations even
  though mkvmerge would assign "no".
  * Some other improvements, some enhancements and other bugfixes,
  please refer to the changelog file provides with the package.</changelog>
<changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 9.3.1:
  * libebml &gt;= 1.3.4 and libmatroska &gt;= 1.4.5 are now required
  * A lot of bugfixes and new features, new mkv elements are
    supported, for a list of all changes, please refer to the
    changelog provided by the package.</changelog>
<changelog author="rpm@fthiessen.de" date="1472731200">- Update to new upstream release 9.4.0:
  * MKVToolNix GUI: merge tool bug fix: the automatic adjustments
    to the output file name based on the track types selected for
    muxing and the mechanism for keeping output file names unique
    had been broken since release v9.3.0.
    chapter editor bug fix: overly long chapter names don't cause
    the GUI's window to become overly wide anymore.
  * mkvmerge: bug fix: mkvmerge does no longer emit a warning if no
    comment header packet is found when reading tracks from
    Ogg/OGM files.
    bug fix: VP8 in Ogg: fixed dropping the first frame and the
    timestamp calculation.
    bug fix: when appending files mkvmerge wasn't starting clusters
    on video key frame anymore for the first and all following
    appended files.
    DTS bug fix: if present mkvmerge will use an XLL extension's
    sample rate information as the sample rate to put into
    the track headers.
  * mkvpropedit: bug fix: mkvpropedit will no longer say that it's
    writing the changes if only attachment changes are specified
    and none of the specified attachments can be found.
  * Some enhancements, please refer to the changelog within the
    package.</changelog>
<changelog author="rpm@fthiessen.de" date="1474027200">- Update to new release 9.4.2:
  * mkvmerge: bug fix: using very large --sync values with certain
    container formats was causing mkvmerge to abort muxing.
    bug fix: fixed an invalid memory access (use after free)
    during global destruction phase.
    bug fix: HEVC parser: fixed three invalid memory accesses.
    bug fix: MP4 reader: fixed an invalid memory access
    bug fix: AAC reader: fixed mkvmerge throwing an uncaught
    exception due to the sample rate being 0.
    bug fix: MP4 reader: an error message will be printed
    instead of an uncaught exception when an invalid atom chunk
    size is encountered during resync.
    bug fix: AVC &amp; HEVC readers: the readers will now refuse to
    handle files where the detected pixel width or height is
    equal to or less than 0.</changelog>
<changelog author="rpm@fthiessen.de" date="1477569600">- Update to new release 9.5.0
  * mkvmerge: bug fix: The Ogg/OGM reader did not recognize Opus
    files with comment headers anymore.
    WAV reader bug fix: the track properties (channels, samplerate)
    for DTS and AC-3 in WAV will now be derived from the decoded
    bitstream headers instead of the WAV file header as the latter
    is often incorrect.
    WAV reader bug fix: fixed detection and merging of DTS in WAV
    that uses the 14-bytes-in-16-bytes packing method.
    MPEG transport stream reader bug fix: fixed mis-detection of
    certain h.264 files as MPEG transport streams.
    MPEG transport stream reader bug fix: fixed the handling of
    Blu-ray PCM audio with an odd number of channels by removing
    their alignment bytes.
    h.264 elementary stream handling bug fix: if mkvmerge ever
    encounters changing SPS or PPS NALUs (ones where their ID has
    been encountered before with different settings) in the h.264
    then it will prepend all following key frames with all
    currently active SPS and PPS NALUs. This enables playback from
    arbitrary key frames even if they require other SPS or PPS
    settings than the ones stored in the AVCC in CodecPrivate.
    VobSub handling bug fix: mkvmerge and mkvextract will now
    update the duration stored in the SPU bitsream with the
    duration from the container level if it differs at least 1ms.
  * mkvprpedit, MKVToolNix GUI: Added support for "field order"
    video track header element.
- Use GPG signature for verification.</changelog>
<changelog author="rpm@fthiessen.de" date="1480507200">- Update to new release 9.6.0
  * mkvmerge: bug fix: mkvmerge was entering endless loops under
    certain conditions when appending files.
    MPLS parser bug fix: fixed reading the "in" &amp; "out"
    timestamps for "play items". This bug resulted in mkvmerge
    not reading the correct range from the referenced M2TS file
    under certain rare circumstances.
  * MKVToolNix GUI: job output tool bug fix: the button for
    acknowledging warnings &amp; errors wasn't properly disabled when
    the user used outside methods of acknowledging them
  * mkvextract: VobSub bug fix: mkvextract will add a "langidx"
    line to the .idx file upon extraction.
  * mkvmerge &amp; mkvextract: added support for HDMV TextST subtitles.</changelog>
<changelog author="rpm@fthiessen.de" date="1485518400">- Update to new release 9.8.0
  * mkvmerge: MP4 reader: when an MP4 file contained fewer entries
  for timestamps than frames (which they never should), mkvmerge
  would use 0 as the timestamp for all the other frames. This
  resulted in effects such as the last frame of an output file
  having a timestamp of 0 and in split files having a much longer
  duration than they should have. Fixes #1847.
  bug fix: the MPEG transport stream reader was using an outdated
  format for the "CodecPrivate" element for HDMV TextST subtitles.
  This has been updated to the current format which only contains
  the "dialog style element". Existing Matroska files using this
  outdated scheme can be fixed by running them through mkvmerge.
  bug fix: files smaller than 4 bytes were wrongly identified as
  MPEG transport streams.
  bug fix: if a codec delay is set for a track in the input file,
  it is kept. Fixes #1849. bug fix: fixed that the error message
  "not enough space on disk" was shown twice on some operating systems.
  teletext subtitle bug fix: fixed the handling of DVB teletext subtitles
  signaled with data unit ID 0x02 and that contain pages from multiple magazines.
  bug fix: when using --track-order without specifying all tracks,
  the track numbers could end up in a way the user did not expect.
  Now mkvmerge will always assign track numbers for those tracks
  that are listed in --track-order first. The other tracks are
  assigned numbers afterwards. Fixes the second part of #1832.
  bug fix: when reading Matroska files the movie title was always
  taken from the first Matroska source file, even if that file
  didn't have a title set. Fixes one part of #1832.
  MP4: fixed detection of MP3 audio when the object type ID in the
  ESDS signals MP2 and the track headers have invalid values for
  number of channels or sampling frequency. Fixes #1844.
  The command line option "--check-for-updates" has been removed.
  * GUI: the cache cleanup process that's run automatically when
  the GUI starts no longer blocks file identification until it
  is finished. Additionally the process will only be run once
  per release of MKVToolNix. Fixes #1860.
  certain failures during file identification that can be
  traced to broken installations won't be stored in the cache
  anymore. Without this fix the GUI would still use the cached
  failed identification result even though the underlying
  might have already been fixed.
  multiplexer: changing default values in the preferences (e.g. the
  default track language to set) did not affect files whose
  identification results had already been cached.
  multiplex tool bug fix: under certain circumstances the GUI was
  creating invalid JSON files when starting to multiplex resulting
  in an error message ("JSON option files must contain a JSON
  array consisting solely of JSON strings").
  re-worked the startup code not to use lock files when trying to
  open a socket for communicating with an already-running instance.
  This aims to prevent situations with stale lock files not being
  cleaned up and the GUI not starting anymore as a result.
  This might fix or prevent issues like #1805.
  * A lot of new features and enhancements, please refer to NEWS.md
- Rebased disable-update-check.patch
- spec file cleanup
- Adjusted BuildRequires
  * Since 9.7.1 QT &gt;= 5.3 is required
  * Since 9.7.1 a c++ compiler with some c++14 features is required
    e.g. gcc &gt;= 4.9 or clang &gt;= 3.4</changelog>
<changelog author="rpm@fthiessen.de" date="1487592000">- Update to new release 9.9.0
  * mkvmerge: AC-3 handling: some source files provide timestamps
    for audio tracks only once every n audio frames. In such
    situations mkvmerge was buffering too much data resulting in
    a single gap in the timestamps of one frame duration after frame
    number n - 1 (the second audio timestamp read from the source
    file was used one output frame too early).
  bugfix MP4 reader: mkvmerge was only reading a small part of MP4
    DASH files where the first "moov" "mdat" atoms occur before the
    first "moof" atom.
  bugfix MP4 reader: edit list ("edts" atoms) that are part of the
    "moof" atoms used in MP4 DASH files weren't parsed. Instead the
    edit lists from the main track headers inside the "moov" atom
    were used.
  bugfix MP4 reader: when an MP4 DASH file contained both normal
    chunk offset table in their regular "moov" atoms, a
    sample-to-chunk table ("stsc" atom) whose last entry had a
    "samples per chunk" count greater than 1 and DASH "trun" atoms,
    then mkvmerge was calculating wrong positions the frame content.
  bugfix MP4 reader: mkvmerge couldn't deal with the key frame index
    table having duplicate entries. The result was that only key
    frames up to and including the first duplicate entry were marked
    as key frames in the output file. All other frames weren't, even
    though some of them were referenced from the key frame table
    after the first duplicate entry.
  bufix MP4 reader: when an MP4 file contained more than one copy of
    the "moov" atom (the track headers etc.), mkvmerge was parsing
    them all adding tracks multiple times.
  bugfix MP4 reader: fixed an integer overflow during the timestamp
    calculation leading to files with wrong timestamps. Such files
    could not be played back properly by most players.
  bugfix MPEG TS reader: if the PMT lists a DVBSUB track, mkvmerge
    will now recognize it without having to find a packet for it
    within the probed range.
  bugfix splitting by parts (both the "timestamps" and the "frames"
    variants): fixed the calculation of track statistics tags. When
    calculating the duration the skipped portions weren't taken into
    account leading to a too-high duration. As a consequence the BPS
    tag (bits per second) was wrong, too.
  bugfix reading files with DVB/HDMV TextSV subtitle tracks with
    invalid CodecPrivate caused mkvmerge to abort with an error
    from boost::format about the format string not having enough
    arguments.
  bugfix: fixed misdetection of certain AC-3 files as MP3 files
    which led to an error message that
    "the demultiplexer could not be initialized".
  bugfix: fixed huge memory consumption when appending big Matroska
    files with sparse tracks (e.g. forced subtitle tracks).
    The Matroska reader will now queue at most 128 MB of data.
  bugfix MP4 reader: the timestamps of all multiplexed tracks will
    now be 0-based properly.
  bugfix MP4 reader: the DTS-to-PTS offsets given by the "ctts"
    atoms are now applied for all tracks containing a "ctts" atom,
    not just h.264 &amp; h.265 tracks.
  * Some new features and enhancements
- Now required for man pages:
  libxslt-tools, docbook-xsl-stylesheets  and po4a</changelog>
<changelog author="rpm@fthiessen.de" date="1490702400">- Update to new release 10.0.0
  * mkvmerge: new feature AVC/h.264 and HEVC/h.265 parser: mkvmerge
    will now drop all frames before the first key frame as they
    cannot be decoded properly anyway.
  new feature HEVC/h.265 parser: added a workaround for invalid
    values for the "default display window" in the VUI parameters
    of sequence parameter sets.
  bugfix MP4 reader: fixed track offsets being wrong in certain
    situations regarding the presence or absence of edit lists
    ('elst' atoms) &amp; composition timestamps ('ctts' atoms).
  bugfix MP4 reader: offsets in "ctts" are now always treated
    as signed integers, even with version 0 atoms.
  bugfix Matroska reader: fixed handling BlockGroups and
    SimpleBlocks with negative timestamps.
  bugfix MP3 packetizer: the MP3 packetizer will no longer drop
    timestamps from source containers if they go backwards.
    This keeps A/V in sync for files where the source was in sync
    even though their timestamps aren't monotonic increasing.
  bugfix AVC/h.264 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  bugfix HEVC/h.265 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  * mkvinfo: the timestamps of SimpleBlocks with negative
  timestamps are now shown correctly.
  * mkvextract: SSA/ASS: fixed extraction when the "Format"
  line in the "[Events]" section contains less fields than the
  default for SSA/ASS would indicate.</changelog>
<changelog author="rpm@fthiessen.de" date="1496145600">- Update to version 12.0.0
  * MKVToolNix GUI: new feature: the key combination
    Ctrl+Shift+Space will now toggle the selection of the current
    item in all tree views where multiple selections are allowed.
  new feature: chapter editor: added the extension `*.cue`
    to the "open chapter file" dialog.
  bugfix:preferences ? job actions, type "play audio file":
    the GUI will no longer clear the audio file name input if the
    user aborts the audio file selection dialog.
  bugfix: multiplexer tool: the "show command line" dialog will no
    longer include the mkvmerge executable's location as the first
    argument for the two "MKVToolNix option files" escape modes.
  bugfix: header editor: empty track language elements are now
    treated the same as those set to invalid ISO 639-2 codes:
    as if they were set to `und` = "undetermined".
  new feature: watch jobs: the user can now have the GUI execute
    an action once as soon as the current job or the whole queue
    finishes. The actions are the same ones that can be configured
    to be run automatically after job or queue completion.
  new feature: implemented several built-in actions that can be
    executed either on special events or once via the "watch jobs"
    tool. These are: playing an audio file; hibernating, sleeping
    and shutting down the computer.
  new feature: multiplex tool: added a new option for what to do
    after starting to multiplex/adding to the job queue:
    "close current settings" will close the current multiplex
    settings without opening new ones.
  * mkvmerge: New feature: cue sheet parser: if the cue sheet
    contains a non-empty `TITLE` entry and if no other segment title
    has been set yet, then the segment title will be set to the
    cue sheet's `TITLE` value.
  new feature: added an option `--no-date` that prevents the "date"
    field from being written to the segment information headers.
  new feature: FLAC reader: added support for handling embedded
    pictures as attachments.
  new feature: MP4 reader: Added support for parsing the "COLR"
    atom and including its values as track headers.
  bugfix: HEVC/h.265 parser: fixed the superfluous copying of the
    'bitstream_restriction_flag' and its dependent flags in the
    VUI parameters of the sequence parameter sets if the timing
    information is present, too.
  bugfix: MPEG TS reader, AAC parser: the MPEG TS reader will now
    force the AAC parser to use the multiplex mode that the MPEG TS
    reader has detected. This prevents the AAC packetizer from
    mis-detecting it in its own attempt to identify the mode.
  bugfix: MPEG TS reader: valid MPEG transport streams that start
    with an h.264/h.265 start code were not recognized as a
    supported file type.
  bugfix: MPEG TS reader: fixed a potential read access from
    invalid memory addresses in the code parsing the program
    map table (PMT).
  bugfix: MPEG TS reader: if packets are encountered that belong
    to a PID not listed in the program map table (PMT), mkvmerge
    will attempt to determine their type and codec from the content.
    This supported content types are AAC (ADTS only) and AC-3.
  bugfix: MP4 reader: fixed finding and parsing the `colr` atom if
    there are more than one video extension atoms and the `colr` atom
    is not the first one.
  bugfix: MP4 reader: the `nclx` colour type of the `colr` atom is
    now recognized, too.
  bugfix: AAC parser: fixed mis-detection of certain data as valid
    ADTS AAC headers resulting in memory allocation failures.
  bugfix: AVC/h.264 parser: mkvmerge will now ignore bogus timing
    information in the sequence parameter sets.
  bugfix: AVC/h.264 &amp; HEVC/h.265 parsers: all trailing zero bytes
    will now be removed from NALUs.
  bugfix: HEVC/h.265 parser: fixed copying the
    `bitstream_restriction_flag` and all dependent fields in the VUI
    parameters of the sequence parameter sets.
  bugfix: HEVC/h.265 parser: fixed the calculation of the number of
    parameter set arrays in the HEVCC data structure stored in
    CodecPrivate.
  * mkvpropedit: bugfix: header editor: added support for editing the
    "date" segment information field.</changelog>
<changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
<changelog author="rpm@fthiessen.de" date="1499947200">- Update to version 13.0.0
  * mkvmerge: new feature: MPEG TS reader: information about
    multiple programs will be output as container properties during
    verbose/JSON identification.
  bugfix: MP4 reader: MPEG-1/2 video read from MP4 files was written
    with an invalid codec ID (e.g. `V_MPEG7`) in certain cases.
  bugfix: MPEG PS reader: made the file type detection less strict
    so that garbage at the start of the file doesn't prevent detection.
  bugfix: MPEG PS reader: (E-)AC-3 tracks were not detected if the very
    first packet for that track didn't contain a full (E-)AC-3 frame.
  bugfix: MPEG TS reader: fixed mkvmerge not detecting all tracks in
    MPEG transport streams containing multiple programs.
  bugfix: MPEG TS reader: fixed track content being broken for some
    tracks read from MPEG transport streams containing multiple programs.
  bugfix: JSON identification: the `stream_id` and `sub_stream_id`
    track properties were output as hexadecimal strings instead
    of unsigned integers. As the `ts_pid` track property was only
    used for MPEG transport streams, its value is now output as
    `stream_id` instead, and the `ts_pid` property has been removed.
    The JSON schema version has been bumped to 8 due to this change.
  bugfix: fixed a crash when appending video tracks where one track
    has a CodecPrivate member and the other one doesn't.
  bugfix: track statistics tags: the `NUMBER_OF_BYTES` tag
    is supposed to contain the number of bytes in a track before any
    of the content encoding schemes such as lossless compression
    is applied; however, mkvmerge was wrongfully using the number of
    bytes after the schemes had been applied.
  bugfix: CLPI &amp; MPLS parsers: MPLS and CLPI files with version
    number `0300` as used on Ultra HD Blu-ray Discs are
    now accepted as well.
  * MKVToolNix GUI: new feature: multiplex tool: added a column
    "program" to the tracks list. Certain container types such
    as MPEG transport streams can contain multiple programs.
    The new column will contain the service name (think TV station
    names such as "arte HD") for such streams.
  bugfix: fixed computation of value of total progress bar for
    multiple jobs running.
  bugfix: multiplexer, adding new attachments: when the GUI checks
    if there's an attachment with the same name it will now
    disregard disabled attached files.
  new feature: multiplex tool: the dialog asking the user what to
    do with dropped files (add to current settings, add to new
    settings etc.) now remembers the previous decision and defaults
    to it the next time it's shown.
  new feature: tabs can now be closed by pressing the middle mouse
    button.
  * mkvpropedit: bugfix: fixed a crash when the selector used
    for `--tags` is invalid.</changelog>
<changelog author="rpm@fthiessen.de" date="1503662400">- Split boost-devel BuildRequires for Tumbleweed
- Update to version 14.0.0
  * mkvmerge, mkvpropedit, MKVToolNix GUI (chapter editor):
  new feature: added support for chapters in WebM files that is
    spec-compliant by removing all tag elements not supported
    by the WebM spec.
  * translations: added a Romanian translation of the programs.
  * mkvmerge: bugfix: AVC/h.264 and HEVC/h.265 parser: fixed wrong
    frame order &amp; timestamp calculation in certain situations when
    SPS (sequence parameter sets) or PPS (picture parameter sets)
    change mid-stream.
  bugfix: MPEG-1/-2 video: the "remove stuffing bytes" feature
    introduced in v5.8.0 was broken. In a lot of situations it
    did not detect the end of a slice correctly and removed 0 bytes
    that were actually part of the slice structure. Often there
    were no visual problems as decoders were able to ignore such
    errors, but in other cases there are visual artifacts upon
    decoding. As detecting the slice end properly requires parsing
    the whole slice structure, this feature has been removed again.
  bugfix: MPEG PS reader: fixed mkvmerge trying to handle an "end"
    code the same way as a "program stream map" code.
  bugfix: MPEG TS reader: mkvmerge won't emit warnings if the
    system's `iconv` library doesn't support the ISO 6937
    character set.
  bugfix: when appending fails the error message details (e.g.
    "the number of channels differs: 1 and 2") were often not output.
  new feature: AAC: implemented support for AAC with 960 samples per
    frame.
  new feature: identification: if the encoding/character set of a
    text subtitle track is known (e.g. because a byte order mark is
    present in the file), then it will be output during
    identification as the `encoding` property.
  new feature: WAV reader: added support for Wave64 files.
  * MKVToolNix GUI: bugfix: multiplex tool: implemented a workaround
    for a crash that could occur during drag &amp; drop if at least one
    of the columns is hidden.
  bugifx: multiplex tool: appended tracks can no longer be enabled
    (selected for multiplexing) if the track they're going to be
    appended to is not enabled.
  bugifx: multiplex tool: if the GUI is set to ensure unique output
    file names, it will now verify that right before starting to
    multiplex/adding the job to the queue, too.
  bugifx: fixed the total progress reverting to 0% instead of
    staying at 100% when all jobs have finished. This was introduced
    by the attempt at fixing the computation of the value of total
    progress bar for multiple jobs running.
  new feature: multiplexer: if the encoding/character set of a
    subtitle track cannot be changed, the GUI will deactivate the
    "subtitle character set" drop-down box and ignore changes to it
    when multiple tracks are selected. Additionally, if the track's
    encoding is known and cannot be changed (e.g. due to a
    byte order mark in the file), that encoding will be selected in
    the drop-down box automatically. Both changes signal to the user
    that she doesn't have to take care of the encoding herself.
  new feature: chapter editor: added a function to the "additional
    modifications" dialog for calculating and setting the end
    timestamps.
  new feature: changed the shortcuts for switching between the
    various tools from `Alt+number` (e.g. `Alt+1` for the multiplexer
    tool) to `Ctrl+Alt+number` in order to avoid clashing with
    Windows' input method for arbitrary characters (pressing and
    holding `Alt` and typing the codepoint on the number pad).
  new feature: added a "Window" menu and entries with shortcuts for
    selecting the next (`Ctrl+F6`) respectively previous tab
    (`Ctrl+Shift+F6`) in the current tool.</changelog>

</package>
<package pkgid="d8337ad7f1fc2a46ce7eaaa58b899ebe6b45d911a227a56a016ed2ca951ccd3c" name="mkvtoolnix-gui" arch="x86_64">
    <version epoch="0" ver="14.0.0" rel="5.1"/>

<changelog author="rpm@fthiessen.de" date="1449316800">- Update to upstream release 8.6.1:
  * all: MKVToolNix now requires gcc 4.8.0 or later or clang 3.4 or
    later for compilation.
  change: none of the tools will write a byte-order mark (BOM) to
  text files encoded any of the UTF-* schemes anymore.
  * mkvmerge: bug fix: the VC-1 handlig code was duplicating the
    first sequence headers with each mux.
  enhancement: added JSON as an output format for file type
    identification.
  bug fix: fixed two issues causing mkvmerge to write invalid data
    when updating track headers.
  bug fix: the change to do a deeper file analysis if no seek head
    was found was causing huge increases in file type detection time
    as popular tools like x264 don?t write seek heads. The way
    elements at the end are searched has been changed to only scan
    the last 5 MB of the file instead of iterating over every
    level 1 element from the beginning of the file.
  * MKVToolNix GUI: bug fix: the options for linking to the
    next/previous segment UID were wrong.
  bug fix: the program changes its working directory to the
    user?s profile/home directory on startup allowing the removal of
    its installation folder even if a program started by the GUI
    (e.g. a web browser) is still running.
  bug fix: in certain situations the modified file would not contain
    a seek head before the first cluster anymore resulting in most
    players not finding elements such as attachments or the index
    located at the end of the file anymore.
  * Some other enhancements and bugfixes, see full changelog:
  https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog
- Split package into commandline- (base) and gui-package,
  reduces overhead when installing on a headless system.
- Replaced sed in prep with disable-update-check.patch to disable
  update check on startup (not needed with a package system).
- Added mkvtoolnix-use-system-boost.patch from fedora to fix includes
  when building against boost from system.</changelog>
<changelog author="rpm@fthiessen.de" date="1452168000">- Update to upstream release 8.7.0:
  * all: reversion of a change: several ISO 639-2 codes of languages
    that are very old and not spoken anymore have been re-added
    due to feedback from users who did have a use for such codes.
    reversion of a change: all of the tools will write a byte-order
    mark (BOM) to text files encoded any of the UTF-* schemes again.
  * mkvmerge: bug fix: fixed the key frame detection for VP9 video
    tracks.
    bug fix: chapters were output as both "chapters" and
    "track_tags" in JSON identification mode.
    bug fix: AAC with low sampling frequencies was sometimes
    mis-detected with the wrong profile preventing appending it
    to other AAC tracks.
    bug fix: the progress calculation was sometimes outputting
    negative numbers when appending Matroska files whose timestamps
    don?t start at 0.
    bug fix: fixed the decisions whether or not to write the last
    frame of a track as a BlockGroup or a SimpleBlock and whether
    or not to write a block duration for that frame.
    bug fix: the Matroska reader now uses TrueHD-specific code
    when reading Matroska files. This can fix things like wrong
    frame type flags.
  * MKVToolNix GUI: bug fix: relative file names given on the
    command line were interpreted as being relative to the user?s
    home directory.
    bug fix: the "split mode" drop-down box got reset to
    "do not split" each time the preferences dialog was closed
    with the "OK" button
  * And a lot more enhancements and bugfixes, see full changelog:
    https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog</changelog>
<changelog author="rpm@fthiessen.de" date="1452427200">- Update to upstream release 8.8.0:
  * MKVToolNix GUI: bug fix: when using one of the
    "select all tracks (of type?)" actions the "properties" column
    didn?t show the selection.
    bug fix: the paths used in the variables and the executable are
    converted to the platforms native path separators.
  * mkvmerge: bug fix: fixed a mis-detection of an MPEG-2 video
    elementary stream as a TrueHD file which then caused a
    segmentation fault.
    bug fix: Matroska attachments with the same name, size and MIME
    type were not output during file identification.
    bug fix: fixed TrueHD detection both as raw streams as well as
    inside other contains if the stream does not start with a
    TrueHD sync frame.
  * Some GUI enhancements and new features, see full changelog:
    https://bunkus.org/videotools/mkvtoolnix/doc/ChangeLog
- some spec file cleanup</changelog>
<changelog author="jengelh@inai.de" date="1456142400">- Update to new upstream release 8.9.0
  * gui: the default font size adjustment has been. Deactivated for
  the time being as it causes problems on high DPI Displays.
  * gui: ampersands in file names were shown as keyboard shortcuts
  in tab titles in various tools
  * gui: add ability (menu entry) for removing chapters from an
  existing Matroska file.
  * Polish translation provided</changelog>
<changelog author="jengelh@inai.de" date="1459166400">- Update to new upstream release 9.0.0
  * mkvmerge: bug fix: fixed two more issues in the conversion of
  teletext subtitles to SRT subtitles.
  * mkvmerge: MP4/QuickTime reader: audio tracks with the FourCC
  "lpcm" are muxed as A_PCM/INT/LIT instead of A_QUICKTIME.
  * mkvmerge: bug fix: MP4/QuickTime reader: audio tracks can contain
  two instances of certain header fields in the STSD atom;
  mkvmerge now uses the v2 structure over v0, if present.
  * mkvextract: new feature: implemented the extraction of Big
  Endian PCM (codec ID A_PCM/INT/BIG) to WAV files. The content will
  be byte-swapped into Little Endian PCM in the process.
  * mkvmerge: enhancement: Big Endian PCM tracks will now be
  byte-swapped into Little Endian PCM, and the codec ID
  A_PCM/INT/LIT will be used, as many players do not support BE PCM
  inside MKVs.</changelog>
<changelog author="rpm@fthiessen.de" date="1459166401">- Update to new upstream release 9.0.1:
  * mkvmerge: bug fix: regression in v9.0.0: the text subtitle
  packetizer was wrongfully assuming an encoding of UTF-8 if none
  was given instead of assuming the system's encoding. Fixes #1639.
  bug fix: if too many chapters had been generated with
  - -generate-chapters then mkvmerge created a bogus entry in the
  meta seek element and did not actually write the chapters to the
  file.
  bug fix: the DTS packetizer was setting the number of
  channels wrong sometimes when reducing to the DTS core. It was
  using the number of channels including the extensions instead of
  the channels of the core only.</changelog>
<changelog author="rpm@fthiessen.de" date="1461585600">- Update to new upstream release 9.1.0:
  * mkvmerge: bug fix: AVC/h.264: fixed handling of interlaced frames
  with bottom field first.
  bug fix: mkvmerge will no longer abort reading a Matroska file
  with a structural error right before the first cluster.
  bug fix: the "text_subtitles" property of the JSON/verbose
  identification modes was always set to true for all subtitle
  tracks, even for those that aren't text subtitles (VobSub, PG).
  bug fix: the language code signaled in the MPEG TS PMT is taken
  into account when selecting the character encoding to use
  during decoding of the teletext subtitles, not just the
  "national character set" stored in the teletext page headers.
  * MKVToolNix GUI: bug fix: Fixed huge memory consumption in the
  JSON library by updating said JSON library.
  bug fix: In merge-tool: when adding playlists the GUI won't ask
  the user whether or not to scan if there's only a single
  playlist in that directory.</changelog>
<changelog author="rpm@fthiessen.de" date="1464696000">- Update to new upstream release 9.2.0:
  * mkvmerge: bug fix: the "interval" chapter generation mode was
  always creating one chapter too many.
  bug fix: if a certain number of chapters had been generated with
  - -generate-chapters then mkvmerge wasn't replacing the void
  placerholder with the actual chapters.
  bug fix: fixed detection of (E-)AC-3 in MPEG TS files with
  unusual stream types (e.g. 0x87) but with (E-)AC-3 PMT
  descriptors.
  * mkvmerge, mkvextract: bug fix: fixed handling of Big Endian PCM
  with a bit depth other than 16, 32 or 64 bits/sample. Other
  formats were using the Little Endian codec ID, but their content
  was actually not byte-swapped to match it. Now those other bit
  depths are byte-swapped to Little Endian, too.
  * MKVToolNix GUI: merge tool bug fix: the track column "default
  track in output" wasn't taking into account if the track had its
  "default track" flag set to "no" in the source file. This would
  result in the column showing "yes" in certain situations even
  though mkvmerge would assign "no".
  * Some other improvements, some enhancements and other bugfixes,
  please refer to the changelog file provides with the package.</changelog>
<changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 9.3.1:
  * libebml &gt;= 1.3.4 and libmatroska &gt;= 1.4.5 are now required
  * A lot of bugfixes and new features, new mkv elements are
    supported, for a list of all changes, please refer to the
    changelog provided by the package.</changelog>
<changelog author="rpm@fthiessen.de" date="1472731200">- Update to new upstream release 9.4.0:
  * MKVToolNix GUI: merge tool bug fix: the automatic adjustments
    to the output file name based on the track types selected for
    muxing and the mechanism for keeping output file names unique
    had been broken since release v9.3.0.
    chapter editor bug fix: overly long chapter names don't cause
    the GUI's window to become overly wide anymore.
  * mkvmerge: bug fix: mkvmerge does no longer emit a warning if no
    comment header packet is found when reading tracks from
    Ogg/OGM files.
    bug fix: VP8 in Ogg: fixed dropping the first frame and the
    timestamp calculation.
    bug fix: when appending files mkvmerge wasn't starting clusters
    on video key frame anymore for the first and all following
    appended files.
    DTS bug fix: if present mkvmerge will use an XLL extension's
    sample rate information as the sample rate to put into
    the track headers.
  * mkvpropedit: bug fix: mkvpropedit will no longer say that it's
    writing the changes if only attachment changes are specified
    and none of the specified attachments can be found.
  * Some enhancements, please refer to the changelog within the
    package.</changelog>
<changelog author="rpm@fthiessen.de" date="1474027200">- Update to new release 9.4.2:
  * mkvmerge: bug fix: using very large --sync values with certain
    container formats was causing mkvmerge to abort muxing.
    bug fix: fixed an invalid memory access (use after free)
    during global destruction phase.
    bug fix: HEVC parser: fixed three invalid memory accesses.
    bug fix: MP4 reader: fixed an invalid memory access
    bug fix: AAC reader: fixed mkvmerge throwing an uncaught
    exception due to the sample rate being 0.
    bug fix: MP4 reader: an error message will be printed
    instead of an uncaught exception when an invalid atom chunk
    size is encountered during resync.
    bug fix: AVC &amp; HEVC readers: the readers will now refuse to
    handle files where the detected pixel width or height is
    equal to or less than 0.</changelog>
<changelog author="rpm@fthiessen.de" date="1477569600">- Update to new release 9.5.0
  * mkvmerge: bug fix: The Ogg/OGM reader did not recognize Opus
    files with comment headers anymore.
    WAV reader bug fix: the track properties (channels, samplerate)
    for DTS and AC-3 in WAV will now be derived from the decoded
    bitstream headers instead of the WAV file header as the latter
    is often incorrect.
    WAV reader bug fix: fixed detection and merging of DTS in WAV
    that uses the 14-bytes-in-16-bytes packing method.
    MPEG transport stream reader bug fix: fixed mis-detection of
    certain h.264 files as MPEG transport streams.
    MPEG transport stream reader bug fix: fixed the handling of
    Blu-ray PCM audio with an odd number of channels by removing
    their alignment bytes.
    h.264 elementary stream handling bug fix: if mkvmerge ever
    encounters changing SPS or PPS NALUs (ones where their ID has
    been encountered before with different settings) in the h.264
    then it will prepend all following key frames with all
    currently active SPS and PPS NALUs. This enables playback from
    arbitrary key frames even if they require other SPS or PPS
    settings than the ones stored in the AVCC in CodecPrivate.
    VobSub handling bug fix: mkvmerge and mkvextract will now
    update the duration stored in the SPU bitsream with the
    duration from the container level if it differs at least 1ms.
  * mkvprpedit, MKVToolNix GUI: Added support for "field order"
    video track header element.
- Use GPG signature for verification.</changelog>
<changelog author="rpm@fthiessen.de" date="1480507200">- Update to new release 9.6.0
  * mkvmerge: bug fix: mkvmerge was entering endless loops under
    certain conditions when appending files.
    MPLS parser bug fix: fixed reading the "in" &amp; "out"
    timestamps for "play items". This bug resulted in mkvmerge
    not reading the correct range from the referenced M2TS file
    under certain rare circumstances.
  * MKVToolNix GUI: job output tool bug fix: the button for
    acknowledging warnings &amp; errors wasn't properly disabled when
    the user used outside methods of acknowledging them
  * mkvextract: VobSub bug fix: mkvextract will add a "langidx"
    line to the .idx file upon extraction.
  * mkvmerge &amp; mkvextract: added support for HDMV TextST subtitles.</changelog>
<changelog author="rpm@fthiessen.de" date="1485518400">- Update to new release 9.8.0
  * mkvmerge: MP4 reader: when an MP4 file contained fewer entries
  for timestamps than frames (which they never should), mkvmerge
  would use 0 as the timestamp for all the other frames. This
  resulted in effects such as the last frame of an output file
  having a timestamp of 0 and in split files having a much longer
  duration than they should have. Fixes #1847.
  bug fix: the MPEG transport stream reader was using an outdated
  format for the "CodecPrivate" element for HDMV TextST subtitles.
  This has been updated to the current format which only contains
  the "dialog style element". Existing Matroska files using this
  outdated scheme can be fixed by running them through mkvmerge.
  bug fix: files smaller than 4 bytes were wrongly identified as
  MPEG transport streams.
  bug fix: if a codec delay is set for a track in the input file,
  it is kept. Fixes #1849. bug fix: fixed that the error message
  "not enough space on disk" was shown twice on some operating systems.
  teletext subtitle bug fix: fixed the handling of DVB teletext subtitles
  signaled with data unit ID 0x02 and that contain pages from multiple magazines.
  bug fix: when using --track-order without specifying all tracks,
  the track numbers could end up in a way the user did not expect.
  Now mkvmerge will always assign track numbers for those tracks
  that are listed in --track-order first. The other tracks are
  assigned numbers afterwards. Fixes the second part of #1832.
  bug fix: when reading Matroska files the movie title was always
  taken from the first Matroska source file, even if that file
  didn't have a title set. Fixes one part of #1832.
  MP4: fixed detection of MP3 audio when the object type ID in the
  ESDS signals MP2 and the track headers have invalid values for
  number of channels or sampling frequency. Fixes #1844.
  The command line option "--check-for-updates" has been removed.
  * GUI: the cache cleanup process that's run automatically when
  the GUI starts no longer blocks file identification until it
  is finished. Additionally the process will only be run once
  per release of MKVToolNix. Fixes #1860.
  certain failures during file identification that can be
  traced to broken installations won't be stored in the cache
  anymore. Without this fix the GUI would still use the cached
  failed identification result even though the underlying
  might have already been fixed.
  multiplexer: changing default values in the preferences (e.g. the
  default track language to set) did not affect files whose
  identification results had already been cached.
  multiplex tool bug fix: under certain circumstances the GUI was
  creating invalid JSON files when starting to multiplex resulting
  in an error message ("JSON option files must contain a JSON
  array consisting solely of JSON strings").
  re-worked the startup code not to use lock files when trying to
  open a socket for communicating with an already-running instance.
  This aims to prevent situations with stale lock files not being
  cleaned up and the GUI not starting anymore as a result.
  This might fix or prevent issues like #1805.
  * A lot of new features and enhancements, please refer to NEWS.md
- Rebased disable-update-check.patch
- spec file cleanup
- Adjusted BuildRequires
  * Since 9.7.1 QT &gt;= 5.3 is required
  * Since 9.7.1 a c++ compiler with some c++14 features is required
    e.g. gcc &gt;= 4.9 or clang &gt;= 3.4</changelog>
<changelog author="rpm@fthiessen.de" date="1487592000">- Update to new release 9.9.0
  * mkvmerge: AC-3 handling: some source files provide timestamps
    for audio tracks only once every n audio frames. In such
    situations mkvmerge was buffering too much data resulting in
    a single gap in the timestamps of one frame duration after frame
    number n - 1 (the second audio timestamp read from the source
    file was used one output frame too early).
  bugfix MP4 reader: mkvmerge was only reading a small part of MP4
    DASH files where the first "moov" "mdat" atoms occur before the
    first "moof" atom.
  bugfix MP4 reader: edit list ("edts" atoms) that are part of the
    "moof" atoms used in MP4 DASH files weren't parsed. Instead the
    edit lists from the main track headers inside the "moov" atom
    were used.
  bugfix MP4 reader: when an MP4 DASH file contained both normal
    chunk offset table in their regular "moov" atoms, a
    sample-to-chunk table ("stsc" atom) whose last entry had a
    "samples per chunk" count greater than 1 and DASH "trun" atoms,
    then mkvmerge was calculating wrong positions the frame content.
  bugfix MP4 reader: mkvmerge couldn't deal with the key frame index
    table having duplicate entries. The result was that only key
    frames up to and including the first duplicate entry were marked
    as key frames in the output file. All other frames weren't, even
    though some of them were referenced from the key frame table
    after the first duplicate entry.
  bufix MP4 reader: when an MP4 file contained more than one copy of
    the "moov" atom (the track headers etc.), mkvmerge was parsing
    them all adding tracks multiple times.
  bugfix MP4 reader: fixed an integer overflow during the timestamp
    calculation leading to files with wrong timestamps. Such files
    could not be played back properly by most players.
  bugfix MPEG TS reader: if the PMT lists a DVBSUB track, mkvmerge
    will now recognize it without having to find a packet for it
    within the probed range.
  bugfix splitting by parts (both the "timestamps" and the "frames"
    variants): fixed the calculation of track statistics tags. When
    calculating the duration the skipped portions weren't taken into
    account leading to a too-high duration. As a consequence the BPS
    tag (bits per second) was wrong, too.
  bugfix reading files with DVB/HDMV TextSV subtitle tracks with
    invalid CodecPrivate caused mkvmerge to abort with an error
    from boost::format about the format string not having enough
    arguments.
  bugfix: fixed misdetection of certain AC-3 files as MP3 files
    which led to an error message that
    "the demultiplexer could not be initialized".
  bugfix: fixed huge memory consumption when appending big Matroska
    files with sparse tracks (e.g. forced subtitle tracks).
    The Matroska reader will now queue at most 128 MB of data.
  bugfix MP4 reader: the timestamps of all multiplexed tracks will
    now be 0-based properly.
  bugfix MP4 reader: the DTS-to-PTS offsets given by the "ctts"
    atoms are now applied for all tracks containing a "ctts" atom,
    not just h.264 &amp; h.265 tracks.
  * Some new features and enhancements
- Now required for man pages:
  libxslt-tools, docbook-xsl-stylesheets  and po4a</changelog>
<changelog author="rpm@fthiessen.de" date="1490702400">- Update to new release 10.0.0
  * mkvmerge: new feature AVC/h.264 and HEVC/h.265 parser: mkvmerge
    will now drop all frames before the first key frame as they
    cannot be decoded properly anyway.
  new feature HEVC/h.265 parser: added a workaround for invalid
    values for the "default display window" in the VUI parameters
    of sequence parameter sets.
  bugfix MP4 reader: fixed track offsets being wrong in certain
    situations regarding the presence or absence of edit lists
    ('elst' atoms) &amp; composition timestamps ('ctts' atoms).
  bugfix MP4 reader: offsets in "ctts" are now always treated
    as signed integers, even with version 0 atoms.
  bugfix Matroska reader: fixed handling BlockGroups and
    SimpleBlocks with negative timestamps.
  bugfix MP3 packetizer: the MP3 packetizer will no longer drop
    timestamps from source containers if they go backwards.
    This keeps A/V in sync for files where the source was in sync
    even though their timestamps aren't monotonic increasing.
  bugfix AVC/h.264 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  bugfix HEVC/h.265 parser: mkvmerge will now drop timestamps
    from the source container if no frame is emitted for that
    timestamp.
  * mkvinfo: the timestamps of SimpleBlocks with negative
  timestamps are now shown correctly.
  * mkvextract: SSA/ASS: fixed extraction when the "Format"
  line in the "[Events]" section contains less fields than the
  default for SSA/ASS would indicate.</changelog>
<changelog author="rpm@fthiessen.de" date="1496145600">- Update to version 12.0.0
  * MKVToolNix GUI: new feature: the key combination
    Ctrl+Shift+Space will now toggle the selection of the current
    item in all tree views where multiple selections are allowed.
  new feature: chapter editor: added the extension `*.cue`
    to the "open chapter file" dialog.
  bugfix:preferences ? job actions, type "play audio file":
    the GUI will no longer clear the audio file name input if the
    user aborts the audio file selection dialog.
  bugfix: multiplexer tool: the "show command line" dialog will no
    longer include the mkvmerge executable's location as the first
    argument for the two "MKVToolNix option files" escape modes.
  bugfix: header editor: empty track language elements are now
    treated the same as those set to invalid ISO 639-2 codes:
    as if they were set to `und` = "undetermined".
  new feature: watch jobs: the user can now have the GUI execute
    an action once as soon as the current job or the whole queue
    finishes. The actions are the same ones that can be configured
    to be run automatically after job or queue completion.
  new feature: implemented several built-in actions that can be
    executed either on special events or once via the "watch jobs"
    tool. These are: playing an audio file; hibernating, sleeping
    and shutting down the computer.
  new feature: multiplex tool: added a new option for what to do
    after starting to multiplex/adding to the job queue:
    "close current settings" will close the current multiplex
    settings without opening new ones.
  * mkvmerge: New feature: cue sheet parser: if the cue sheet
    contains a non-empty `TITLE` entry and if no other segment title
    has been set yet, then the segment title will be set to the
    cue sheet's `TITLE` value.
  new feature: added an option `--no-date` that prevents the "date"
    field from being written to the segment information headers.
  new feature: FLAC reader: added support for handling embedded
    pictures as attachments.
  new feature: MP4 reader: Added support for parsing the "COLR"
    atom and including its values as track headers.
  bugfix: HEVC/h.265 parser: fixed the superfluous copying of the
    'bitstream_restriction_flag' and its dependent flags in the
    VUI parameters of the sequence parameter sets if the timing
    information is present, too.
  bugfix: MPEG TS reader, AAC parser: the MPEG TS reader will now
    force the AAC parser to use the multiplex mode that the MPEG TS
    reader has detected. This prevents the AAC packetizer from
    mis-detecting it in its own attempt to identify the mode.
  bugfix: MPEG TS reader: valid MPEG transport streams that start
    with an h.264/h.265 start code were not recognized as a
    supported file type.
  bugfix: MPEG TS reader: fixed a potential read access from
    invalid memory addresses in the code parsing the program
    map table (PMT).
  bugfix: MPEG TS reader: if packets are encountered that belong
    to a PID not listed in the program map table (PMT), mkvmerge
    will attempt to determine their type and codec from the content.
    This supported content types are AAC (ADTS only) and AC-3.
  bugfix: MP4 reader: fixed finding and parsing the `colr` atom if
    there are more than one video extension atoms and the `colr` atom
    is not the first one.
  bugfix: MP4 reader: the `nclx` colour type of the `colr` atom is
    now recognized, too.
  bugfix: AAC parser: fixed mis-detection of certain data as valid
    ADTS AAC headers resulting in memory allocation failures.
  bugfix: AVC/h.264 parser: mkvmerge will now ignore bogus timing
    information in the sequence parameter sets.
  bugfix: AVC/h.264 &amp; HEVC/h.265 parsers: all trailing zero bytes
    will now be removed from NALUs.
  bugfix: HEVC/h.265 parser: fixed copying the
    `bitstream_restriction_flag` and all dependent fields in the VUI
    parameters of the sequence parameter sets.
  bugfix: HEVC/h.265 parser: fixed the calculation of the number of
    parameter set arrays in the HEVCC data structure stored in
    CodecPrivate.
  * mkvpropedit: bugfix: header editor: added support for editing the
    "date" segment information field.</changelog>
<changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
<changelog author="rpm@fthiessen.de" date="1499947200">- Update to version 13.0.0
  * mkvmerge: new feature: MPEG TS reader: information about
    multiple programs will be output as container properties during
    verbose/JSON identification.
  bugfix: MP4 reader: MPEG-1/2 video read from MP4 files was written
    with an invalid codec ID (e.g. `V_MPEG7`) in certain cases.
  bugfix: MPEG PS reader: made the file type detection less strict
    so that garbage at the start of the file doesn't prevent detection.
  bugfix: MPEG PS reader: (E-)AC-3 tracks were not detected if the very
    first packet for that track didn't contain a full (E-)AC-3 frame.
  bugfix: MPEG TS reader: fixed mkvmerge not detecting all tracks in
    MPEG transport streams containing multiple programs.
  bugfix: MPEG TS reader: fixed track content being broken for some
    tracks read from MPEG transport streams containing multiple programs.
  bugfix: JSON identification: the `stream_id` and `sub_stream_id`
    track properties were output as hexadecimal strings instead
    of unsigned integers. As the `ts_pid` track property was only
    used for MPEG transport streams, its value is now output as
    `stream_id` instead, and the `ts_pid` property has been removed.
    The JSON schema version has been bumped to 8 due to this change.
  bugfix: fixed a crash when appending video tracks where one track
    has a CodecPrivate member and the other one doesn't.
  bugfix: track statistics tags: the `NUMBER_OF_BYTES` tag
    is supposed to contain the number of bytes in a track before any
    of the content encoding schemes such as lossless compression
    is applied; however, mkvmerge was wrongfully using the number of
    bytes after the schemes had been applied.
  bugfix: CLPI &amp; MPLS parsers: MPLS and CLPI files with version
    number `0300` as used on Ultra HD Blu-ray Discs are
    now accepted as well.
  * MKVToolNix GUI: new feature: multiplex tool: added a column
    "program" to the tracks list. Certain container types such
    as MPEG transport streams can contain multiple programs.
    The new column will contain the service name (think TV station
    names such as "arte HD") for such streams.
  bugfix: fixed computation of value of total progress bar for
    multiple jobs running.
  bugfix: multiplexer, adding new attachments: when the GUI checks
    if there's an attachment with the same name it will now
    disregard disabled attached files.
  new feature: multiplex tool: the dialog asking the user what to
    do with dropped files (add to current settings, add to new
    settings etc.) now remembers the previous decision and defaults
    to it the next time it's shown.
  new feature: tabs can now be closed by pressing the middle mouse
    button.
  * mkvpropedit: bugfix: fixed a crash when the selector used
    for `--tags` is invalid.</changelog>
<changelog author="rpm@fthiessen.de" date="1503662400">- Split boost-devel BuildRequires for Tumbleweed
- Update to version 14.0.0
  * mkvmerge, mkvpropedit, MKVToolNix GUI (chapter editor):
  new feature: added support for chapters in WebM files that is
    spec-compliant by removing all tag elements not supported
    by the WebM spec.
  * translations: added a Romanian translation of the programs.
  * mkvmerge: bugfix: AVC/h.264 and HEVC/h.265 parser: fixed wrong
    frame order &amp; timestamp calculation in certain situations when
    SPS (sequence parameter sets) or PPS (picture parameter sets)
    change mid-stream.
  bugfix: MPEG-1/-2 video: the "remove stuffing bytes" feature
    introduced in v5.8.0 was broken. In a lot of situations it
    did not detect the end of a slice correctly and removed 0 bytes
    that were actually part of the slice structure. Often there
    were no visual problems as decoders were able to ignore such
    errors, but in other cases there are visual artifacts upon
    decoding. As detecting the slice end properly requires parsing
    the whole slice structure, this feature has been removed again.
  bugfix: MPEG PS reader: fixed mkvmerge trying to handle an "end"
    code the same way as a "program stream map" code.
  bugfix: MPEG TS reader: mkvmerge won't emit warnings if the
    system's `iconv` library doesn't support the ISO 6937
    character set.
  bugfix: when appending fails the error message details (e.g.
    "the number of channels differs: 1 and 2") were often not output.
  new feature: AAC: implemented support for AAC with 960 samples per
    frame.
  new feature: identification: if the encoding/character set of a
    text subtitle track is known (e.g. because a byte order mark is
    present in the file), then it will be output during
    identification as the `encoding` property.
  new feature: WAV reader: added support for Wave64 files.
  * MKVToolNix GUI: bugfix: multiplex tool: implemented a workaround
    for a crash that could occur during drag &amp; drop if at least one
    of the columns is hidden.
  bugifx: multiplex tool: appended tracks can no longer be enabled
    (selected for multiplexing) if the track they're going to be
    appended to is not enabled.
  bugifx: multiplex tool: if the GUI is set to ensure unique output
    file names, it will now verify that right before starting to
    multiplex/adding the job to the queue, too.
  bugifx: fixed the total progress reverting to 0% instead of
    staying at 100% when all jobs have finished. This was introduced
    by the attempt at fixing the computation of the value of total
    progress bar for multiple jobs running.
  new feature: multiplexer: if the encoding/character set of a
    subtitle track cannot be changed, the GUI will deactivate the
    "subtitle character set" drop-down box and ignore changes to it
    when multiple tracks are selected. Additionally, if the track's
    encoding is known and cannot be changed (e.g. due to a
    byte order mark in the file), that encoding will be selected in
    the drop-down box automatically. Both changes signal to the user
    that she doesn't have to take care of the encoding herself.
  new feature: chapter editor: added a function to the "additional
    modifications" dialog for calculating and setting the end
    timestamps.
  new feature: changed the shortcuts for switching between the
    various tools from `Alt+number` (e.g. `Alt+1` for the multiplexer
    tool) to `Ctrl+Alt+number` in order to avoid clashing with
    Windows' input method for arbitrary characters (pressing and
    holding `Alt` and typing the codepoint on the number pad).
  new feature: added a "Window" menu and entries with shortcuts for
    selecting the next (`Ctrl+F6`) respectively previous tab
    (`Ctrl+Shift+F6`) in the current tool.</changelog>

</package>
<package pkgid="2102e9a5f7b08a6961e0d86a6633af588ea8d0968043e1995b3f990d69f84aae" name="mongodb" arch="src">
    <version epoch="0" ver="3.4.10" rel="3.1"/>

<changelog author="normand@linux.vnet.ibm.com" date="1423656000">- Add V8 3.14 in src/third_part/v8-3.14 used for opensuse &gt;=13.2
- Add PowerPC specific patches based on two git trees:
  (only for ppc64 and ppc64le, not ppc)
  * https://github.com/ibmsoe/mongo
  * https://github.com/andrewlow/v8ppc</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1424865600">- update version 2.4.12
- 2.4.12:
  * Sharding: Sharded connection cleanup on setup error can crash mongos
  * Sharding: "type 7" (OID) error when acquiring distributed lock
    for first time
  * Storage: explicitly zero .ns files on creation
  * Storage: partially written journal last section causes recovery to fail
- 2.4.11:
  * Indexes: Fixed issue that can cause index corruption when building
    indexes concurrently
  * Indexes: Fixed issue that can cause index corruption when shutting
    down secondary node during index build
  * Indexes: Mongod now recognizes incompatible "future" text and geo
    index versions and exits gracefully
  * Indexes: Fixed issue that can cause secondaries to fail replication
    when building the same index multiple times concurrently
  * Indexes: Fixed issue that can cause index corruption on the tenth
    index in a collection if the index build fails
  * Indexes: Introduced versioning for text and geo indexes to ensure
    backwards compatibility
  * Indexes: Disallowed building indexes on the system.indexes
    collection, which can lead to initial sync failure on secondaries
  * Sharding: Avoid frequent immediate balancer retries when config
    servers are out of sync
  * Sharding: Add indexes to locks collection on config servers to
    avoid long queries in case of large numbers of collections
  * Sharding: Fixed issue that can corrupt the config metadata cache
    when sharding collections concurrently
  * Sharding: Don?t move chunks created on collections with a hashed
    shard key if the collection already contains data
  * Replication: Fixed issue where node appears to be down in a replica
    set during a compact operation
  * Replication: Fixed issue that could cause delays in elections
    when a node is not vetoing an election
  * Replication: Step down all primaries if multiple primaries are
    detected in replica set to ensure correct election result
  * Replication: Upon clock skew detection, secondaries will switch
    to sync directly from the primary to avoid sync cycles
  * Runtime: The SIGXCPU signal is now caught and mongod writes a log
    message and exits gracefully
  * Runtime: Fixed issue where mongod fails to start on Linux when
    /sys/dev/block directory is not readable
  * GridFS: Chunk size is decreased to 255 KB (from 256 KB) to avoid
    overhead with usePowerOf2Sizes option
  * SNMP: Fixed MIB file validation under smilint
  * Shell: Fixed issue in V8 memory allocation that could cause
    long-running shell commands to crash
  * Shell: Fixed memory leak in the md5sumFile shell utility method
- remove patches:
  * mongodb-no-werror.patch
- add patches:
  * mongodb-src-r2.4.12-no-werror.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425124800">- Use systemd for openSUSE &gt; 12.2</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425211200">- fix typo is spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425297600">- fix typo in changelog</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425384000">- update version 2.4.13:
  * Security: Enforce BSON BinData length validation (SERVER-17278)
  * Security: Disable SSLv3 ciphers (SERVER-15673)
  * Networking: Improve BSON validation (SERVER-17264)
    (bnc#921759, CVE-2015-1609)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425470400">- update patches:
  * mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch</changelog>
<changelog author="aplanas@suse.com" date="1432209600">- Remove `void_return.patch`
  * This patch is used only in SLE11 because a boost problem. Now
    mongodb is using a local copy of boost.
  * Also this patch avoid the deletion and repair of the database
    (bnc#738050)</changelog>
<changelog author="bwiedemann@suse.com" date="1434888000">- Enable IPv6 in default config (bnc#930566)</changelog>
<changelog author="aplanas@suse.com" date="1435147200">- Update to mongodb-2.4.14
  * Init script sets process ulimit to different value compared to
    documentation SERVER-17780
  * Compute BinData length in v8 SERVER-17647
  * Upgrade PCRE Version from 8.30 to Latest SERVER-17252</changelog>
<changelog author="jacobwinski@gmail.com" date="1438689600">- Update to version 3.0.5.
- Drop mongodb-ssl-FIPS_mode_set.patch: fixed upstream.
- Drop most of mongo-tools, they are not a seperate project.
- Update spec file to reflect build, compilation and package requirements.
- Update mongodb.conf file to reflect new filetype:
  * all existing defaults were ported over to the new mongodb.conf
  * mongodb.conf file was based on the default upstream
  * old style conf file is still supported by MongoDB 3.0.5,
    but migration is recommended.
- Drop mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch due to incompatibilities:
  * MongoDB now uses the new WiredTiger storage engine. Newest IBM Power8 (PPC) patch:
    1) has not been updated for MongoDB 3.0.5
  2) pre-dates WiredTiger support
  3) upstream has already started to incorporate PPC64 support based on the IBM patchset
  * Therefore, to avoid major issues like data corruption and conflicts resulting from
    upstream already incorporating partial PPC64 supprt, this patch set has been dropped.
  * PPC64 is enabled using upstream code.
  * WARNING: quoting upstream: "Please note that MongoDB does no testing on Power8
    at this time, so this is definitely not a supported configuration."
- Drop mongodb-src-r2.4.12-no-werror.patch: no longer applies.
- Drop mongodb_2_4_10_add_js_engine_v8_3_14_option.patch: no longer valid
  as upstream now provides its own newer version of v8_3.XX
- Drop mongodb_2_4_10_import_v8_3_14_5_JS2C_Python_scripts.patch: no longer valid
  as upstream now provides its own Python scripts matching provided v8_3.XX
- Drop mongodb_2_4_10_update_v8_3_14_SConscript_for_ppc.patch: v8_3.14 no longer used.
- Enable WiredTiger on supported architectures:
  * quoting upstream: "WiredTiger as embedded in the MongoDB source tree
    does not currently support PPC64."
- Use upstream gperftool when possible:
  * "Changed in version 3.0.0: MongoDB uses a customized built-in version of tcmalloc
    to achieve significant performance gains. Building with --use-system-tcmalloc
    produces binaries that lack these performance gains."
- Update "ulimit" settings to recommended upstream in sysv &amp; systemd files</changelog>
<changelog author="jacobwinski@gmail.com" date="1465041600">- Update to version 3.0.12:
  * Background index build may result in extra index key entries that do not correspond to indexed documents: SERVER-22970
  * Documents that contain embedded null characters can be created: SERVER-7005
  * IX GlobalLock being held while waiting for WiredTiger cache eviction: SERVER-22964
- Update to version 3.0.11:
  * For MongoDB 3.0.9 and MongoDB 3.0.10, during chunk migration, insert and update operations to documents in the migrating chunk are not reflected in the destination shard: SERVER-23425
- Update to version 3.0.10:
  * Read preference of secondaryPreferred can end up using unversioned connections: SERVER-18671
  * For MMAPv1 journaling, the ?last sequence number? file (lsn file) may be ahead of what is synced to the data files: SERVER-22261.
  * Data size change for oplog deletes can overflow 32-bit int: SERVER-22634
  * High fragmentation on WiredTiger databases under write workloads: SERVER-22898.
- Update to version 3.0.9:
  * Queries which specify sort and batch size can return results out of order if documents are concurrently updated. SERVER-19996
  * Large amounts of create and drop collections can cause listDatabases to be slow under WiredTiger. SERVER-20961
  * Authentication failure message includes server IP address instead of the client IP address. SERVER-22054
- Updates to version 3.0.8:
  * findAndModify on mongos can upsert to the wrong shard. SERVER-20407.
  * WiredTiger commit visibility caused document not found. SERVER-21275.
  * The oplog can grow to 3x configured size. SERVER-21553
- Updates to version 3.0.7:
  * WiredTiger memory handling and performance issues: SERVER-20159, SERVER-20204, SERVER-20091, and SERVER-20176.
  * Reconfig during a pending step down may prevent a primary from stepping down: SERVER-20262.
  * Built-in roles requires additional privileges: SERVER-19131, SERVER-15893, and SERVER-13647.
- Updates to version 3.0.6:
  * WiredTiger Stability issues: SERVER-19751, SERVER-19673, and SERVER-19573.
  * Interaction between SSL and Auditing: SERVER-19538.
  * Aggregation $sort on sharded systems SERVER-19464.
- Update requirements to reflect upstream.
- Add proper Source file with URL.
- Cleanup spec file.</changelog>
<changelog author="rpm@fthiessen.de" date="1474113600">- spec file cleanup
- Update to version 3.2.9</changelog>
<changelog author="plinnell@suse.com" date="1480593600">- add  Requires:  shadow - fixes build on SuseStudio</changelog>
<changelog author="plinnell@opensuse.org" date="1481544000">- update to 3.2.11
  + detailed change log:
  https://docs.mongodb.com/manual/release-notes/3.2-changelog</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1490788800">- Update to version 3.4.3. Change log at https://docs.mongodb.com/manual/release-notes/3.4-changelog/</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1491480000">- Exclude i586 build architecture.</changelog>
<changelog author="jengelh@inai.de" date="1491566400">- Replace buzzword-rich description by something meaningful.
- Drop unused -devel subpackage.</changelog>
<changelog author="idonmez@suse.com" date="1493208000">- Use gcc6 on SLE &gt;= 12SP2 and enable s390x port</changelog>
<changelog author="astieger@suse.com" date="1509537600">- MongoDB 3.4.10:
  * The networkMessageCompressors configuration setting (aka wire
    protocol compression), which is disabled by default, exposed a
    vulnerability when enabled that could be exploited by a
    malicious attacker to deny service or modify memory.
    CVE-2017-15535 bsc#1065956
  * Avoid G_X lock for rename_collection within database
  * View with collation doesn?t work as expected in sharded cluster
  * Calling shardCollection after enableSharding may fail if
    executed against different mongos
- includes changes from 3.4.9:
  * Sharding an existing small collection results in large number
    of chunks
  * Reduce calls to allocator for large $in expressions
  * RangeDeleter holds WT transaction open while waiting for
    majority
  * Range deleter assert failed because of replication lag
- includes changes from 3.4.7:
  * BSON Document Size can be exceeded when grouping inserts on
    SECONDARY nodes
  * Enable configuration of OpenSSL cipher suite via setParameter
  * Optimize incremental update performance of ChunkManager and
    CollectionMetadata
- includes changrs from 3.4.6:
  * Only close idle cached cursors on the WiredTiger ident that
    is busy.
  * $geoWithin in aggregation pipeline after $lookup and $unwind
    returns incorrect results.
  * Cursor opens should never block for the duration of a checkpoint.
- includes changes from 3.4.5:
  * Multikey indexes should not be eligible for DISTINCT_SCAN if
    distinct key is an array component.
  * GlobalLock with timeout can still block indefinitely.
  * mongos can segfault in getMore on views with find batchSize of
    0.
- includes changes from 3.4.4:
  * Add an aggregation operator $objectToArray to convert an object
    to an array of key, value pairs.
  * Add an aggregation operator $arrayToObject to convert an array
    of pairs to an object.
  * ChunkManager refresh can occasionally cause a full reload.</changelog>

</package>
<package pkgid="554660af2c47c18f05ff550236eb4a46c3ff68819cc764022a7314e86a89f2c4" name="mongodb" arch="x86_64">
    <version epoch="0" ver="3.4.10" rel="3.1"/>

<changelog author="normand@linux.vnet.ibm.com" date="1423656000">- Add V8 3.14 in src/third_part/v8-3.14 used for opensuse &gt;=13.2
- Add PowerPC specific patches based on two git trees:
  (only for ppc64 and ppc64le, not ppc)
  * https://github.com/ibmsoe/mongo
  * https://github.com/andrewlow/v8ppc</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1424865600">- update version 2.4.12
- 2.4.12:
  * Sharding: Sharded connection cleanup on setup error can crash mongos
  * Sharding: "type 7" (OID) error when acquiring distributed lock
    for first time
  * Storage: explicitly zero .ns files on creation
  * Storage: partially written journal last section causes recovery to fail
- 2.4.11:
  * Indexes: Fixed issue that can cause index corruption when building
    indexes concurrently
  * Indexes: Fixed issue that can cause index corruption when shutting
    down secondary node during index build
  * Indexes: Mongod now recognizes incompatible "future" text and geo
    index versions and exits gracefully
  * Indexes: Fixed issue that can cause secondaries to fail replication
    when building the same index multiple times concurrently
  * Indexes: Fixed issue that can cause index corruption on the tenth
    index in a collection if the index build fails
  * Indexes: Introduced versioning for text and geo indexes to ensure
    backwards compatibility
  * Indexes: Disallowed building indexes on the system.indexes
    collection, which can lead to initial sync failure on secondaries
  * Sharding: Avoid frequent immediate balancer retries when config
    servers are out of sync
  * Sharding: Add indexes to locks collection on config servers to
    avoid long queries in case of large numbers of collections
  * Sharding: Fixed issue that can corrupt the config metadata cache
    when sharding collections concurrently
  * Sharding: Don?t move chunks created on collections with a hashed
    shard key if the collection already contains data
  * Replication: Fixed issue where node appears to be down in a replica
    set during a compact operation
  * Replication: Fixed issue that could cause delays in elections
    when a node is not vetoing an election
  * Replication: Step down all primaries if multiple primaries are
    detected in replica set to ensure correct election result
  * Replication: Upon clock skew detection, secondaries will switch
    to sync directly from the primary to avoid sync cycles
  * Runtime: The SIGXCPU signal is now caught and mongod writes a log
    message and exits gracefully
  * Runtime: Fixed issue where mongod fails to start on Linux when
    /sys/dev/block directory is not readable
  * GridFS: Chunk size is decreased to 255 KB (from 256 KB) to avoid
    overhead with usePowerOf2Sizes option
  * SNMP: Fixed MIB file validation under smilint
  * Shell: Fixed issue in V8 memory allocation that could cause
    long-running shell commands to crash
  * Shell: Fixed memory leak in the md5sumFile shell utility method
- remove patches:
  * mongodb-no-werror.patch
- add patches:
  * mongodb-src-r2.4.12-no-werror.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425124800">- Use systemd for openSUSE &gt; 12.2</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425211200">- fix typo is spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425297600">- fix typo in changelog</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425384000">- update version 2.4.13:
  * Security: Enforce BSON BinData length validation (SERVER-17278)
  * Security: Disable SSLv3 ciphers (SERVER-15673)
  * Networking: Improve BSON validation (SERVER-17264)
    (bnc#921759, CVE-2015-1609)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425470400">- update patches:
  * mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch</changelog>
<changelog author="aplanas@suse.com" date="1432209600">- Remove `void_return.patch`
  * This patch is used only in SLE11 because a boost problem. Now
    mongodb is using a local copy of boost.
  * Also this patch avoid the deletion and repair of the database
    (bnc#738050)</changelog>
<changelog author="bwiedemann@suse.com" date="1434888000">- Enable IPv6 in default config (bnc#930566)</changelog>
<changelog author="aplanas@suse.com" date="1435147200">- Update to mongodb-2.4.14
  * Init script sets process ulimit to different value compared to
    documentation SERVER-17780
  * Compute BinData length in v8 SERVER-17647
  * Upgrade PCRE Version from 8.30 to Latest SERVER-17252</changelog>
<changelog author="jacobwinski@gmail.com" date="1438689600">- Update to version 3.0.5.
- Drop mongodb-ssl-FIPS_mode_set.patch: fixed upstream.
- Drop most of mongo-tools, they are not a seperate project.
- Update spec file to reflect build, compilation and package requirements.
- Update mongodb.conf file to reflect new filetype:
  * all existing defaults were ported over to the new mongodb.conf
  * mongodb.conf file was based on the default upstream
  * old style conf file is still supported by MongoDB 3.0.5,
    but migration is recommended.
- Drop mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch due to incompatibilities:
  * MongoDB now uses the new WiredTiger storage engine. Newest IBM Power8 (PPC) patch:
    1) has not been updated for MongoDB 3.0.5
  2) pre-dates WiredTiger support
  3) upstream has already started to incorporate PPC64 support based on the IBM patchset
  * Therefore, to avoid major issues like data corruption and conflicts resulting from
    upstream already incorporating partial PPC64 supprt, this patch set has been dropped.
  * PPC64 is enabled using upstream code.
  * WARNING: quoting upstream: "Please note that MongoDB does no testing on Power8
    at this time, so this is definitely not a supported configuration."
- Drop mongodb-src-r2.4.12-no-werror.patch: no longer applies.
- Drop mongodb_2_4_10_add_js_engine_v8_3_14_option.patch: no longer valid
  as upstream now provides its own newer version of v8_3.XX
- Drop mongodb_2_4_10_import_v8_3_14_5_JS2C_Python_scripts.patch: no longer valid
  as upstream now provides its own Python scripts matching provided v8_3.XX
- Drop mongodb_2_4_10_update_v8_3_14_SConscript_for_ppc.patch: v8_3.14 no longer used.
- Enable WiredTiger on supported architectures:
  * quoting upstream: "WiredTiger as embedded in the MongoDB source tree
    does not currently support PPC64."
- Use upstream gperftool when possible:
  * "Changed in version 3.0.0: MongoDB uses a customized built-in version of tcmalloc
    to achieve significant performance gains. Building with --use-system-tcmalloc
    produces binaries that lack these performance gains."
- Update "ulimit" settings to recommended upstream in sysv &amp; systemd files</changelog>
<changelog author="jacobwinski@gmail.com" date="1465041600">- Update to version 3.0.12:
  * Background index build may result in extra index key entries that do not correspond to indexed documents: SERVER-22970
  * Documents that contain embedded null characters can be created: SERVER-7005
  * IX GlobalLock being held while waiting for WiredTiger cache eviction: SERVER-22964
- Update to version 3.0.11:
  * For MongoDB 3.0.9 and MongoDB 3.0.10, during chunk migration, insert and update operations to documents in the migrating chunk are not reflected in the destination shard: SERVER-23425
- Update to version 3.0.10:
  * Read preference of secondaryPreferred can end up using unversioned connections: SERVER-18671
  * For MMAPv1 journaling, the ?last sequence number? file (lsn file) may be ahead of what is synced to the data files: SERVER-22261.
  * Data size change for oplog deletes can overflow 32-bit int: SERVER-22634
  * High fragmentation on WiredTiger databases under write workloads: SERVER-22898.
- Update to version 3.0.9:
  * Queries which specify sort and batch size can return results out of order if documents are concurrently updated. SERVER-19996
  * Large amounts of create and drop collections can cause listDatabases to be slow under WiredTiger. SERVER-20961
  * Authentication failure message includes server IP address instead of the client IP address. SERVER-22054
- Updates to version 3.0.8:
  * findAndModify on mongos can upsert to the wrong shard. SERVER-20407.
  * WiredTiger commit visibility caused document not found. SERVER-21275.
  * The oplog can grow to 3x configured size. SERVER-21553
- Updates to version 3.0.7:
  * WiredTiger memory handling and performance issues: SERVER-20159, SERVER-20204, SERVER-20091, and SERVER-20176.
  * Reconfig during a pending step down may prevent a primary from stepping down: SERVER-20262.
  * Built-in roles requires additional privileges: SERVER-19131, SERVER-15893, and SERVER-13647.
- Updates to version 3.0.6:
  * WiredTiger Stability issues: SERVER-19751, SERVER-19673, and SERVER-19573.
  * Interaction between SSL and Auditing: SERVER-19538.
  * Aggregation $sort on sharded systems SERVER-19464.
- Update requirements to reflect upstream.
- Add proper Source file with URL.
- Cleanup spec file.</changelog>
<changelog author="rpm@fthiessen.de" date="1474113600">- spec file cleanup
- Update to version 3.2.9</changelog>
<changelog author="plinnell@suse.com" date="1480593600">- add  Requires:  shadow - fixes build on SuseStudio</changelog>
<changelog author="plinnell@opensuse.org" date="1481544000">- update to 3.2.11
  + detailed change log:
  https://docs.mongodb.com/manual/release-notes/3.2-changelog</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1490788800">- Update to version 3.4.3. Change log at https://docs.mongodb.com/manual/release-notes/3.4-changelog/</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1491480000">- Exclude i586 build architecture.</changelog>
<changelog author="jengelh@inai.de" date="1491566400">- Replace buzzword-rich description by something meaningful.
- Drop unused -devel subpackage.</changelog>
<changelog author="idonmez@suse.com" date="1493208000">- Use gcc6 on SLE &gt;= 12SP2 and enable s390x port</changelog>
<changelog author="astieger@suse.com" date="1509537600">- MongoDB 3.4.10:
  * The networkMessageCompressors configuration setting (aka wire
    protocol compression), which is disabled by default, exposed a
    vulnerability when enabled that could be exploited by a
    malicious attacker to deny service or modify memory.
    CVE-2017-15535 bsc#1065956
  * Avoid G_X lock for rename_collection within database
  * View with collation doesn?t work as expected in sharded cluster
  * Calling shardCollection after enableSharding may fail if
    executed against different mongos
- includes changes from 3.4.9:
  * Sharding an existing small collection results in large number
    of chunks
  * Reduce calls to allocator for large $in expressions
  * RangeDeleter holds WT transaction open while waiting for
    majority
  * Range deleter assert failed because of replication lag
- includes changes from 3.4.7:
  * BSON Document Size can be exceeded when grouping inserts on
    SECONDARY nodes
  * Enable configuration of OpenSSL cipher suite via setParameter
  * Optimize incremental update performance of ChunkManager and
    CollectionMetadata
- includes changrs from 3.4.6:
  * Only close idle cached cursors on the WiredTiger ident that
    is busy.
  * $geoWithin in aggregation pipeline after $lookup and $unwind
    returns incorrect results.
  * Cursor opens should never block for the duration of a checkpoint.
- includes changes from 3.4.5:
  * Multikey indexes should not be eligible for DISTINCT_SCAN if
    distinct key is an array component.
  * GlobalLock with timeout can still block indefinitely.
  * mongos can segfault in getMore on views with find batchSize of
    0.
- includes changes from 3.4.4:
  * Add an aggregation operator $objectToArray to convert an object
    to an array of key, value pairs.
  * Add an aggregation operator $arrayToObject to convert an array
    of pairs to an object.
  * ChunkManager refresh can occasionally cause a full reload.</changelog>

</package>
<package pkgid="02ffa0657cdfd77d6b254e4b7e80fd742a62b4bbf384d32dab08d78176444200" name="mongodb-mongoperf" arch="x86_64">
    <version epoch="0" ver="3.4.10" rel="3.1"/>

<changelog author="normand@linux.vnet.ibm.com" date="1423656000">- Add V8 3.14 in src/third_part/v8-3.14 used for opensuse &gt;=13.2
- Add PowerPC specific patches based on two git trees:
  (only for ppc64 and ppc64le, not ppc)
  * https://github.com/ibmsoe/mongo
  * https://github.com/andrewlow/v8ppc</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1424865600">- update version 2.4.12
- 2.4.12:
  * Sharding: Sharded connection cleanup on setup error can crash mongos
  * Sharding: "type 7" (OID) error when acquiring distributed lock
    for first time
  * Storage: explicitly zero .ns files on creation
  * Storage: partially written journal last section causes recovery to fail
- 2.4.11:
  * Indexes: Fixed issue that can cause index corruption when building
    indexes concurrently
  * Indexes: Fixed issue that can cause index corruption when shutting
    down secondary node during index build
  * Indexes: Mongod now recognizes incompatible "future" text and geo
    index versions and exits gracefully
  * Indexes: Fixed issue that can cause secondaries to fail replication
    when building the same index multiple times concurrently
  * Indexes: Fixed issue that can cause index corruption on the tenth
    index in a collection if the index build fails
  * Indexes: Introduced versioning for text and geo indexes to ensure
    backwards compatibility
  * Indexes: Disallowed building indexes on the system.indexes
    collection, which can lead to initial sync failure on secondaries
  * Sharding: Avoid frequent immediate balancer retries when config
    servers are out of sync
  * Sharding: Add indexes to locks collection on config servers to
    avoid long queries in case of large numbers of collections
  * Sharding: Fixed issue that can corrupt the config metadata cache
    when sharding collections concurrently
  * Sharding: Don?t move chunks created on collections with a hashed
    shard key if the collection already contains data
  * Replication: Fixed issue where node appears to be down in a replica
    set during a compact operation
  * Replication: Fixed issue that could cause delays in elections
    when a node is not vetoing an election
  * Replication: Step down all primaries if multiple primaries are
    detected in replica set to ensure correct election result
  * Replication: Upon clock skew detection, secondaries will switch
    to sync directly from the primary to avoid sync cycles
  * Runtime: The SIGXCPU signal is now caught and mongod writes a log
    message and exits gracefully
  * Runtime: Fixed issue where mongod fails to start on Linux when
    /sys/dev/block directory is not readable
  * GridFS: Chunk size is decreased to 255 KB (from 256 KB) to avoid
    overhead with usePowerOf2Sizes option
  * SNMP: Fixed MIB file validation under smilint
  * Shell: Fixed issue in V8 memory allocation that could cause
    long-running shell commands to crash
  * Shell: Fixed memory leak in the md5sumFile shell utility method
- remove patches:
  * mongodb-no-werror.patch
- add patches:
  * mongodb-src-r2.4.12-no-werror.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425124800">- Use systemd for openSUSE &gt; 12.2</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425211200">- fix typo is spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425297600">- fix typo in changelog</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425384000">- update version 2.4.13:
  * Security: Enforce BSON BinData length validation (SERVER-17278)
  * Security: Disable SSLv3 ciphers (SERVER-15673)
  * Networking: Improve BSON validation (SERVER-17264)
    (bnc#921759, CVE-2015-1609)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425470400">- update patches:
  * mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch</changelog>
<changelog author="aplanas@suse.com" date="1432209600">- Remove `void_return.patch`
  * This patch is used only in SLE11 because a boost problem. Now
    mongodb is using a local copy of boost.
  * Also this patch avoid the deletion and repair of the database
    (bnc#738050)</changelog>
<changelog author="bwiedemann@suse.com" date="1434888000">- Enable IPv6 in default config (bnc#930566)</changelog>
<changelog author="aplanas@suse.com" date="1435147200">- Update to mongodb-2.4.14
  * Init script sets process ulimit to different value compared to
    documentation SERVER-17780
  * Compute BinData length in v8 SERVER-17647
  * Upgrade PCRE Version from 8.30 to Latest SERVER-17252</changelog>
<changelog author="jacobwinski@gmail.com" date="1438689600">- Update to version 3.0.5.
- Drop mongodb-ssl-FIPS_mode_set.patch: fixed upstream.
- Drop most of mongo-tools, they are not a seperate project.
- Update spec file to reflect build, compilation and package requirements.
- Update mongodb.conf file to reflect new filetype:
  * all existing defaults were ported over to the new mongodb.conf
  * mongodb.conf file was based on the default upstream
  * old style conf file is still supported by MongoDB 3.0.5,
    but migration is recommended.
- Drop mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch due to incompatibilities:
  * MongoDB now uses the new WiredTiger storage engine. Newest IBM Power8 (PPC) patch:
    1) has not been updated for MongoDB 3.0.5
  2) pre-dates WiredTiger support
  3) upstream has already started to incorporate PPC64 support based on the IBM patchset
  * Therefore, to avoid major issues like data corruption and conflicts resulting from
    upstream already incorporating partial PPC64 supprt, this patch set has been dropped.
  * PPC64 is enabled using upstream code.
  * WARNING: quoting upstream: "Please note that MongoDB does no testing on Power8
    at this time, so this is definitely not a supported configuration."
- Drop mongodb-src-r2.4.12-no-werror.patch: no longer applies.
- Drop mongodb_2_4_10_add_js_engine_v8_3_14_option.patch: no longer valid
  as upstream now provides its own newer version of v8_3.XX
- Drop mongodb_2_4_10_import_v8_3_14_5_JS2C_Python_scripts.patch: no longer valid
  as upstream now provides its own Python scripts matching provided v8_3.XX
- Drop mongodb_2_4_10_update_v8_3_14_SConscript_for_ppc.patch: v8_3.14 no longer used.
- Enable WiredTiger on supported architectures:
  * quoting upstream: "WiredTiger as embedded in the MongoDB source tree
    does not currently support PPC64."
- Use upstream gperftool when possible:
  * "Changed in version 3.0.0: MongoDB uses a customized built-in version of tcmalloc
    to achieve significant performance gains. Building with --use-system-tcmalloc
    produces binaries that lack these performance gains."
- Update "ulimit" settings to recommended upstream in sysv &amp; systemd files</changelog>
<changelog author="jacobwinski@gmail.com" date="1465041600">- Update to version 3.0.12:
  * Background index build may result in extra index key entries that do not correspond to indexed documents: SERVER-22970
  * Documents that contain embedded null characters can be created: SERVER-7005
  * IX GlobalLock being held while waiting for WiredTiger cache eviction: SERVER-22964
- Update to version 3.0.11:
  * For MongoDB 3.0.9 and MongoDB 3.0.10, during chunk migration, insert and update operations to documents in the migrating chunk are not reflected in the destination shard: SERVER-23425
- Update to version 3.0.10:
  * Read preference of secondaryPreferred can end up using unversioned connections: SERVER-18671
  * For MMAPv1 journaling, the ?last sequence number? file (lsn file) may be ahead of what is synced to the data files: SERVER-22261.
  * Data size change for oplog deletes can overflow 32-bit int: SERVER-22634
  * High fragmentation on WiredTiger databases under write workloads: SERVER-22898.
- Update to version 3.0.9:
  * Queries which specify sort and batch size can return results out of order if documents are concurrently updated. SERVER-19996
  * Large amounts of create and drop collections can cause listDatabases to be slow under WiredTiger. SERVER-20961
  * Authentication failure message includes server IP address instead of the client IP address. SERVER-22054
- Updates to version 3.0.8:
  * findAndModify on mongos can upsert to the wrong shard. SERVER-20407.
  * WiredTiger commit visibility caused document not found. SERVER-21275.
  * The oplog can grow to 3x configured size. SERVER-21553
- Updates to version 3.0.7:
  * WiredTiger memory handling and performance issues: SERVER-20159, SERVER-20204, SERVER-20091, and SERVER-20176.
  * Reconfig during a pending step down may prevent a primary from stepping down: SERVER-20262.
  * Built-in roles requires additional privileges: SERVER-19131, SERVER-15893, and SERVER-13647.
- Updates to version 3.0.6:
  * WiredTiger Stability issues: SERVER-19751, SERVER-19673, and SERVER-19573.
  * Interaction between SSL and Auditing: SERVER-19538.
  * Aggregation $sort on sharded systems SERVER-19464.
- Update requirements to reflect upstream.
- Add proper Source file with URL.
- Cleanup spec file.</changelog>
<changelog author="rpm@fthiessen.de" date="1474113600">- spec file cleanup
- Update to version 3.2.9</changelog>
<changelog author="plinnell@suse.com" date="1480593600">- add  Requires:  shadow - fixes build on SuseStudio</changelog>
<changelog author="plinnell@opensuse.org" date="1481544000">- update to 3.2.11
  + detailed change log:
  https://docs.mongodb.com/manual/release-notes/3.2-changelog</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1490788800">- Update to version 3.4.3. Change log at https://docs.mongodb.com/manual/release-notes/3.4-changelog/</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1491480000">- Exclude i586 build architecture.</changelog>
<changelog author="jengelh@inai.de" date="1491566400">- Replace buzzword-rich description by something meaningful.
- Drop unused -devel subpackage.</changelog>
<changelog author="idonmez@suse.com" date="1493208000">- Use gcc6 on SLE &gt;= 12SP2 and enable s390x port</changelog>
<changelog author="astieger@suse.com" date="1509537600">- MongoDB 3.4.10:
  * The networkMessageCompressors configuration setting (aka wire
    protocol compression), which is disabled by default, exposed a
    vulnerability when enabled that could be exploited by a
    malicious attacker to deny service or modify memory.
    CVE-2017-15535 bsc#1065956
  * Avoid G_X lock for rename_collection within database
  * View with collation doesn?t work as expected in sharded cluster
  * Calling shardCollection after enableSharding may fail if
    executed against different mongos
- includes changes from 3.4.9:
  * Sharding an existing small collection results in large number
    of chunks
  * Reduce calls to allocator for large $in expressions
  * RangeDeleter holds WT transaction open while waiting for
    majority
  * Range deleter assert failed because of replication lag
- includes changes from 3.4.7:
  * BSON Document Size can be exceeded when grouping inserts on
    SECONDARY nodes
  * Enable configuration of OpenSSL cipher suite via setParameter
  * Optimize incremental update performance of ChunkManager and
    CollectionMetadata
- includes changrs from 3.4.6:
  * Only close idle cached cursors on the WiredTiger ident that
    is busy.
  * $geoWithin in aggregation pipeline after $lookup and $unwind
    returns incorrect results.
  * Cursor opens should never block for the duration of a checkpoint.
- includes changes from 3.4.5:
  * Multikey indexes should not be eligible for DISTINCT_SCAN if
    distinct key is an array component.
  * GlobalLock with timeout can still block indefinitely.
  * mongos can segfault in getMore on views with find batchSize of
    0.
- includes changes from 3.4.4:
  * Add an aggregation operator $objectToArray to convert an object
    to an array of key, value pairs.
  * Add an aggregation operator $arrayToObject to convert an array
    of pairs to an object.
  * ChunkManager refresh can occasionally cause a full reload.</changelog>

</package>
<package pkgid="a847a674a7de99207c4c2557c5c48bd72499339c34d8b3f3b9102d20e8c151a8" name="mongodb-mongos" arch="x86_64">
    <version epoch="0" ver="3.4.10" rel="3.1"/>

<changelog author="normand@linux.vnet.ibm.com" date="1423656000">- Add V8 3.14 in src/third_part/v8-3.14 used for opensuse &gt;=13.2
- Add PowerPC specific patches based on two git trees:
  (only for ppc64 and ppc64le, not ppc)
  * https://github.com/ibmsoe/mongo
  * https://github.com/andrewlow/v8ppc</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1424865600">- update version 2.4.12
- 2.4.12:
  * Sharding: Sharded connection cleanup on setup error can crash mongos
  * Sharding: "type 7" (OID) error when acquiring distributed lock
    for first time
  * Storage: explicitly zero .ns files on creation
  * Storage: partially written journal last section causes recovery to fail
- 2.4.11:
  * Indexes: Fixed issue that can cause index corruption when building
    indexes concurrently
  * Indexes: Fixed issue that can cause index corruption when shutting
    down secondary node during index build
  * Indexes: Mongod now recognizes incompatible "future" text and geo
    index versions and exits gracefully
  * Indexes: Fixed issue that can cause secondaries to fail replication
    when building the same index multiple times concurrently
  * Indexes: Fixed issue that can cause index corruption on the tenth
    index in a collection if the index build fails
  * Indexes: Introduced versioning for text and geo indexes to ensure
    backwards compatibility
  * Indexes: Disallowed building indexes on the system.indexes
    collection, which can lead to initial sync failure on secondaries
  * Sharding: Avoid frequent immediate balancer retries when config
    servers are out of sync
  * Sharding: Add indexes to locks collection on config servers to
    avoid long queries in case of large numbers of collections
  * Sharding: Fixed issue that can corrupt the config metadata cache
    when sharding collections concurrently
  * Sharding: Don?t move chunks created on collections with a hashed
    shard key if the collection already contains data
  * Replication: Fixed issue where node appears to be down in a replica
    set during a compact operation
  * Replication: Fixed issue that could cause delays in elections
    when a node is not vetoing an election
  * Replication: Step down all primaries if multiple primaries are
    detected in replica set to ensure correct election result
  * Replication: Upon clock skew detection, secondaries will switch
    to sync directly from the primary to avoid sync cycles
  * Runtime: The SIGXCPU signal is now caught and mongod writes a log
    message and exits gracefully
  * Runtime: Fixed issue where mongod fails to start on Linux when
    /sys/dev/block directory is not readable
  * GridFS: Chunk size is decreased to 255 KB (from 256 KB) to avoid
    overhead with usePowerOf2Sizes option
  * SNMP: Fixed MIB file validation under smilint
  * Shell: Fixed issue in V8 memory allocation that could cause
    long-running shell commands to crash
  * Shell: Fixed memory leak in the md5sumFile shell utility method
- remove patches:
  * mongodb-no-werror.patch
- add patches:
  * mongodb-src-r2.4.12-no-werror.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425124800">- Use systemd for openSUSE &gt; 12.2</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425211200">- fix typo is spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425297600">- fix typo in changelog</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425384000">- update version 2.4.13:
  * Security: Enforce BSON BinData length validation (SERVER-17278)
  * Security: Disable SSLv3 ciphers (SERVER-15673)
  * Networking: Improve BSON validation (SERVER-17264)
    (bnc#921759, CVE-2015-1609)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425470400">- update patches:
  * mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch</changelog>
<changelog author="aplanas@suse.com" date="1432209600">- Remove `void_return.patch`
  * This patch is used only in SLE11 because a boost problem. Now
    mongodb is using a local copy of boost.
  * Also this patch avoid the deletion and repair of the database
    (bnc#738050)</changelog>
<changelog author="bwiedemann@suse.com" date="1434888000">- Enable IPv6 in default config (bnc#930566)</changelog>
<changelog author="aplanas@suse.com" date="1435147200">- Update to mongodb-2.4.14
  * Init script sets process ulimit to different value compared to
    documentation SERVER-17780
  * Compute BinData length in v8 SERVER-17647
  * Upgrade PCRE Version from 8.30 to Latest SERVER-17252</changelog>
<changelog author="jacobwinski@gmail.com" date="1438689600">- Update to version 3.0.5.
- Drop mongodb-ssl-FIPS_mode_set.patch: fixed upstream.
- Drop most of mongo-tools, they are not a seperate project.
- Update spec file to reflect build, compilation and package requirements.
- Update mongodb.conf file to reflect new filetype:
  * all existing defaults were ported over to the new mongodb.conf
  * mongodb.conf file was based on the default upstream
  * old style conf file is still supported by MongoDB 3.0.5,
    but migration is recommended.
- Drop mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch due to incompatibilities:
  * MongoDB now uses the new WiredTiger storage engine. Newest IBM Power8 (PPC) patch:
    1) has not been updated for MongoDB 3.0.5
  2) pre-dates WiredTiger support
  3) upstream has already started to incorporate PPC64 support based on the IBM patchset
  * Therefore, to avoid major issues like data corruption and conflicts resulting from
    upstream already incorporating partial PPC64 supprt, this patch set has been dropped.
  * PPC64 is enabled using upstream code.
  * WARNING: quoting upstream: "Please note that MongoDB does no testing on Power8
    at this time, so this is definitely not a supported configuration."
- Drop mongodb-src-r2.4.12-no-werror.patch: no longer applies.
- Drop mongodb_2_4_10_add_js_engine_v8_3_14_option.patch: no longer valid
  as upstream now provides its own newer version of v8_3.XX
- Drop mongodb_2_4_10_import_v8_3_14_5_JS2C_Python_scripts.patch: no longer valid
  as upstream now provides its own Python scripts matching provided v8_3.XX
- Drop mongodb_2_4_10_update_v8_3_14_SConscript_for_ppc.patch: v8_3.14 no longer used.
- Enable WiredTiger on supported architectures:
  * quoting upstream: "WiredTiger as embedded in the MongoDB source tree
    does not currently support PPC64."
- Use upstream gperftool when possible:
  * "Changed in version 3.0.0: MongoDB uses a customized built-in version of tcmalloc
    to achieve significant performance gains. Building with --use-system-tcmalloc
    produces binaries that lack these performance gains."
- Update "ulimit" settings to recommended upstream in sysv &amp; systemd files</changelog>
<changelog author="jacobwinski@gmail.com" date="1465041600">- Update to version 3.0.12:
  * Background index build may result in extra index key entries that do not correspond to indexed documents: SERVER-22970
  * Documents that contain embedded null characters can be created: SERVER-7005
  * IX GlobalLock being held while waiting for WiredTiger cache eviction: SERVER-22964
- Update to version 3.0.11:
  * For MongoDB 3.0.9 and MongoDB 3.0.10, during chunk migration, insert and update operations to documents in the migrating chunk are not reflected in the destination shard: SERVER-23425
- Update to version 3.0.10:
  * Read preference of secondaryPreferred can end up using unversioned connections: SERVER-18671
  * For MMAPv1 journaling, the ?last sequence number? file (lsn file) may be ahead of what is synced to the data files: SERVER-22261.
  * Data size change for oplog deletes can overflow 32-bit int: SERVER-22634
  * High fragmentation on WiredTiger databases under write workloads: SERVER-22898.
- Update to version 3.0.9:
  * Queries which specify sort and batch size can return results out of order if documents are concurrently updated. SERVER-19996
  * Large amounts of create and drop collections can cause listDatabases to be slow under WiredTiger. SERVER-20961
  * Authentication failure message includes server IP address instead of the client IP address. SERVER-22054
- Updates to version 3.0.8:
  * findAndModify on mongos can upsert to the wrong shard. SERVER-20407.
  * WiredTiger commit visibility caused document not found. SERVER-21275.
  * The oplog can grow to 3x configured size. SERVER-21553
- Updates to version 3.0.7:
  * WiredTiger memory handling and performance issues: SERVER-20159, SERVER-20204, SERVER-20091, and SERVER-20176.
  * Reconfig during a pending step down may prevent a primary from stepping down: SERVER-20262.
  * Built-in roles requires additional privileges: SERVER-19131, SERVER-15893, and SERVER-13647.
- Updates to version 3.0.6:
  * WiredTiger Stability issues: SERVER-19751, SERVER-19673, and SERVER-19573.
  * Interaction between SSL and Auditing: SERVER-19538.
  * Aggregation $sort on sharded systems SERVER-19464.
- Update requirements to reflect upstream.
- Add proper Source file with URL.
- Cleanup spec file.</changelog>
<changelog author="rpm@fthiessen.de" date="1474113600">- spec file cleanup
- Update to version 3.2.9</changelog>
<changelog author="plinnell@suse.com" date="1480593600">- add  Requires:  shadow - fixes build on SuseStudio</changelog>
<changelog author="plinnell@opensuse.org" date="1481544000">- update to 3.2.11
  + detailed change log:
  https://docs.mongodb.com/manual/release-notes/3.2-changelog</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1490788800">- Update to version 3.4.3. Change log at https://docs.mongodb.com/manual/release-notes/3.4-changelog/</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1491480000">- Exclude i586 build architecture.</changelog>
<changelog author="jengelh@inai.de" date="1491566400">- Replace buzzword-rich description by something meaningful.
- Drop unused -devel subpackage.</changelog>
<changelog author="idonmez@suse.com" date="1493208000">- Use gcc6 on SLE &gt;= 12SP2 and enable s390x port</changelog>
<changelog author="astieger@suse.com" date="1509537600">- MongoDB 3.4.10:
  * The networkMessageCompressors configuration setting (aka wire
    protocol compression), which is disabled by default, exposed a
    vulnerability when enabled that could be exploited by a
    malicious attacker to deny service or modify memory.
    CVE-2017-15535 bsc#1065956
  * Avoid G_X lock for rename_collection within database
  * View with collation doesn?t work as expected in sharded cluster
  * Calling shardCollection after enableSharding may fail if
    executed against different mongos
- includes changes from 3.4.9:
  * Sharding an existing small collection results in large number
    of chunks
  * Reduce calls to allocator for large $in expressions
  * RangeDeleter holds WT transaction open while waiting for
    majority
  * Range deleter assert failed because of replication lag
- includes changes from 3.4.7:
  * BSON Document Size can be exceeded when grouping inserts on
    SECONDARY nodes
  * Enable configuration of OpenSSL cipher suite via setParameter
  * Optimize incremental update performance of ChunkManager and
    CollectionMetadata
- includes changrs from 3.4.6:
  * Only close idle cached cursors on the WiredTiger ident that
    is busy.
  * $geoWithin in aggregation pipeline after $lookup and $unwind
    returns incorrect results.
  * Cursor opens should never block for the duration of a checkpoint.
- includes changes from 3.4.5:
  * Multikey indexes should not be eligible for DISTINCT_SCAN if
    distinct key is an array component.
  * GlobalLock with timeout can still block indefinitely.
  * mongos can segfault in getMore on views with find batchSize of
    0.
- includes changes from 3.4.4:
  * Add an aggregation operator $objectToArray to convert an object
    to an array of key, value pairs.
  * Add an aggregation operator $arrayToObject to convert an array
    of pairs to an object.
  * ChunkManager refresh can occasionally cause a full reload.</changelog>

</package>
<package pkgid="b8c4c53647d18b55c2fd5ea053d194acc1b729d42074179e59a65f0a675ba162" name="mongodb-server" arch="x86_64">
    <version epoch="0" ver="3.4.10" rel="3.1"/>

<changelog author="normand@linux.vnet.ibm.com" date="1423656000">- Add V8 3.14 in src/third_part/v8-3.14 used for opensuse &gt;=13.2
- Add PowerPC specific patches based on two git trees:
  (only for ppc64 and ppc64le, not ppc)
  * https://github.com/ibmsoe/mongo
  * https://github.com/andrewlow/v8ppc</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1424865600">- update version 2.4.12
- 2.4.12:
  * Sharding: Sharded connection cleanup on setup error can crash mongos
  * Sharding: "type 7" (OID) error when acquiring distributed lock
    for first time
  * Storage: explicitly zero .ns files on creation
  * Storage: partially written journal last section causes recovery to fail
- 2.4.11:
  * Indexes: Fixed issue that can cause index corruption when building
    indexes concurrently
  * Indexes: Fixed issue that can cause index corruption when shutting
    down secondary node during index build
  * Indexes: Mongod now recognizes incompatible "future" text and geo
    index versions and exits gracefully
  * Indexes: Fixed issue that can cause secondaries to fail replication
    when building the same index multiple times concurrently
  * Indexes: Fixed issue that can cause index corruption on the tenth
    index in a collection if the index build fails
  * Indexes: Introduced versioning for text and geo indexes to ensure
    backwards compatibility
  * Indexes: Disallowed building indexes on the system.indexes
    collection, which can lead to initial sync failure on secondaries
  * Sharding: Avoid frequent immediate balancer retries when config
    servers are out of sync
  * Sharding: Add indexes to locks collection on config servers to
    avoid long queries in case of large numbers of collections
  * Sharding: Fixed issue that can corrupt the config metadata cache
    when sharding collections concurrently
  * Sharding: Don?t move chunks created on collections with a hashed
    shard key if the collection already contains data
  * Replication: Fixed issue where node appears to be down in a replica
    set during a compact operation
  * Replication: Fixed issue that could cause delays in elections
    when a node is not vetoing an election
  * Replication: Step down all primaries if multiple primaries are
    detected in replica set to ensure correct election result
  * Replication: Upon clock skew detection, secondaries will switch
    to sync directly from the primary to avoid sync cycles
  * Runtime: The SIGXCPU signal is now caught and mongod writes a log
    message and exits gracefully
  * Runtime: Fixed issue where mongod fails to start on Linux when
    /sys/dev/block directory is not readable
  * GridFS: Chunk size is decreased to 255 KB (from 256 KB) to avoid
    overhead with usePowerOf2Sizes option
  * SNMP: Fixed MIB file validation under smilint
  * Shell: Fixed issue in V8 memory allocation that could cause
    long-running shell commands to crash
  * Shell: Fixed memory leak in the md5sumFile shell utility method
- remove patches:
  * mongodb-no-werror.patch
- add patches:
  * mongodb-src-r2.4.12-no-werror.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425124800">- Use systemd for openSUSE &gt; 12.2</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425211200">- fix typo is spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425297600">- fix typo in changelog</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425384000">- update version 2.4.13:
  * Security: Enforce BSON BinData length validation (SERVER-17278)
  * Security: Disable SSLv3 ciphers (SERVER-15673)
  * Networking: Improve BSON validation (SERVER-17264)
    (bnc#921759, CVE-2015-1609)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425470400">- update patches:
  * mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch</changelog>
<changelog author="aplanas@suse.com" date="1432209600">- Remove `void_return.patch`
  * This patch is used only in SLE11 because a boost problem. Now
    mongodb is using a local copy of boost.
  * Also this patch avoid the deletion and repair of the database
    (bnc#738050)</changelog>
<changelog author="bwiedemann@suse.com" date="1434888000">- Enable IPv6 in default config (bnc#930566)</changelog>
<changelog author="aplanas@suse.com" date="1435147200">- Update to mongodb-2.4.14
  * Init script sets process ulimit to different value compared to
    documentation SERVER-17780
  * Compute BinData length in v8 SERVER-17647
  * Upgrade PCRE Version from 8.30 to Latest SERVER-17252</changelog>
<changelog author="jacobwinski@gmail.com" date="1438689600">- Update to version 3.0.5.
- Drop mongodb-ssl-FIPS_mode_set.patch: fixed upstream.
- Drop most of mongo-tools, they are not a seperate project.
- Update spec file to reflect build, compilation and package requirements.
- Update mongodb.conf file to reflect new filetype:
  * all existing defaults were ported over to the new mongodb.conf
  * mongodb.conf file was based on the default upstream
  * old style conf file is still supported by MongoDB 3.0.5,
    but migration is recommended.
- Drop mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch due to incompatibilities:
  * MongoDB now uses the new WiredTiger storage engine. Newest IBM Power8 (PPC) patch:
    1) has not been updated for MongoDB 3.0.5
  2) pre-dates WiredTiger support
  3) upstream has already started to incorporate PPC64 support based on the IBM patchset
  * Therefore, to avoid major issues like data corruption and conflicts resulting from
    upstream already incorporating partial PPC64 supprt, this patch set has been dropped.
  * PPC64 is enabled using upstream code.
  * WARNING: quoting upstream: "Please note that MongoDB does no testing on Power8
    at this time, so this is definitely not a supported configuration."
- Drop mongodb-src-r2.4.12-no-werror.patch: no longer applies.
- Drop mongodb_2_4_10_add_js_engine_v8_3_14_option.patch: no longer valid
  as upstream now provides its own newer version of v8_3.XX
- Drop mongodb_2_4_10_import_v8_3_14_5_JS2C_Python_scripts.patch: no longer valid
  as upstream now provides its own Python scripts matching provided v8_3.XX
- Drop mongodb_2_4_10_update_v8_3_14_SConscript_for_ppc.patch: v8_3.14 no longer used.
- Enable WiredTiger on supported architectures:
  * quoting upstream: "WiredTiger as embedded in the MongoDB source tree
    does not currently support PPC64."
- Use upstream gperftool when possible:
  * "Changed in version 3.0.0: MongoDB uses a customized built-in version of tcmalloc
    to achieve significant performance gains. Building with --use-system-tcmalloc
    produces binaries that lack these performance gains."
- Update "ulimit" settings to recommended upstream in sysv &amp; systemd files</changelog>
<changelog author="jacobwinski@gmail.com" date="1465041600">- Update to version 3.0.12:
  * Background index build may result in extra index key entries that do not correspond to indexed documents: SERVER-22970
  * Documents that contain embedded null characters can be created: SERVER-7005
  * IX GlobalLock being held while waiting for WiredTiger cache eviction: SERVER-22964
- Update to version 3.0.11:
  * For MongoDB 3.0.9 and MongoDB 3.0.10, during chunk migration, insert and update operations to documents in the migrating chunk are not reflected in the destination shard: SERVER-23425
- Update to version 3.0.10:
  * Read preference of secondaryPreferred can end up using unversioned connections: SERVER-18671
  * For MMAPv1 journaling, the ?last sequence number? file (lsn file) may be ahead of what is synced to the data files: SERVER-22261.
  * Data size change for oplog deletes can overflow 32-bit int: SERVER-22634
  * High fragmentation on WiredTiger databases under write workloads: SERVER-22898.
- Update to version 3.0.9:
  * Queries which specify sort and batch size can return results out of order if documents are concurrently updated. SERVER-19996
  * Large amounts of create and drop collections can cause listDatabases to be slow under WiredTiger. SERVER-20961
  * Authentication failure message includes server IP address instead of the client IP address. SERVER-22054
- Updates to version 3.0.8:
  * findAndModify on mongos can upsert to the wrong shard. SERVER-20407.
  * WiredTiger commit visibility caused document not found. SERVER-21275.
  * The oplog can grow to 3x configured size. SERVER-21553
- Updates to version 3.0.7:
  * WiredTiger memory handling and performance issues: SERVER-20159, SERVER-20204, SERVER-20091, and SERVER-20176.
  * Reconfig during a pending step down may prevent a primary from stepping down: SERVER-20262.
  * Built-in roles requires additional privileges: SERVER-19131, SERVER-15893, and SERVER-13647.
- Updates to version 3.0.6:
  * WiredTiger Stability issues: SERVER-19751, SERVER-19673, and SERVER-19573.
  * Interaction between SSL and Auditing: SERVER-19538.
  * Aggregation $sort on sharded systems SERVER-19464.
- Update requirements to reflect upstream.
- Add proper Source file with URL.
- Cleanup spec file.</changelog>
<changelog author="rpm@fthiessen.de" date="1474113600">- spec file cleanup
- Update to version 3.2.9</changelog>
<changelog author="plinnell@suse.com" date="1480593600">- add  Requires:  shadow - fixes build on SuseStudio</changelog>
<changelog author="plinnell@opensuse.org" date="1481544000">- update to 3.2.11
  + detailed change log:
  https://docs.mongodb.com/manual/release-notes/3.2-changelog</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1490788800">- Update to version 3.4.3. Change log at https://docs.mongodb.com/manual/release-notes/3.4-changelog/</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1491480000">- Exclude i586 build architecture.</changelog>
<changelog author="jengelh@inai.de" date="1491566400">- Replace buzzword-rich description by something meaningful.
- Drop unused -devel subpackage.</changelog>
<changelog author="idonmez@suse.com" date="1493208000">- Use gcc6 on SLE &gt;= 12SP2 and enable s390x port</changelog>
<changelog author="astieger@suse.com" date="1509537600">- MongoDB 3.4.10:
  * The networkMessageCompressors configuration setting (aka wire
    protocol compression), which is disabled by default, exposed a
    vulnerability when enabled that could be exploited by a
    malicious attacker to deny service or modify memory.
    CVE-2017-15535 bsc#1065956
  * Avoid G_X lock for rename_collection within database
  * View with collation doesn?t work as expected in sharded cluster
  * Calling shardCollection after enableSharding may fail if
    executed against different mongos
- includes changes from 3.4.9:
  * Sharding an existing small collection results in large number
    of chunks
  * Reduce calls to allocator for large $in expressions
  * RangeDeleter holds WT transaction open while waiting for
    majority
  * Range deleter assert failed because of replication lag
- includes changes from 3.4.7:
  * BSON Document Size can be exceeded when grouping inserts on
    SECONDARY nodes
  * Enable configuration of OpenSSL cipher suite via setParameter
  * Optimize incremental update performance of ChunkManager and
    CollectionMetadata
- includes changrs from 3.4.6:
  * Only close idle cached cursors on the WiredTiger ident that
    is busy.
  * $geoWithin in aggregation pipeline after $lookup and $unwind
    returns incorrect results.
  * Cursor opens should never block for the duration of a checkpoint.
- includes changes from 3.4.5:
  * Multikey indexes should not be eligible for DISTINCT_SCAN if
    distinct key is an array component.
  * GlobalLock with timeout can still block indefinitely.
  * mongos can segfault in getMore on views with find batchSize of
    0.
- includes changes from 3.4.4:
  * Add an aggregation operator $objectToArray to convert an object
    to an array of key, value pairs.
  * Add an aggregation operator $arrayToObject to convert an array
    of pairs to an object.
  * ChunkManager refresh can occasionally cause a full reload.</changelog>

</package>
<package pkgid="f69b9f41c78fb048ee236d8143d667a711398093e2599e897b871564e98a75f1" name="mongodb-shell" arch="x86_64">
    <version epoch="0" ver="3.4.10" rel="3.1"/>

<changelog author="normand@linux.vnet.ibm.com" date="1423656000">- Add V8 3.14 in src/third_part/v8-3.14 used for opensuse &gt;=13.2
- Add PowerPC specific patches based on two git trees:
  (only for ppc64 and ppc64le, not ppc)
  * https://github.com/ibmsoe/mongo
  * https://github.com/andrewlow/v8ppc</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1424865600">- update version 2.4.12
- 2.4.12:
  * Sharding: Sharded connection cleanup on setup error can crash mongos
  * Sharding: "type 7" (OID) error when acquiring distributed lock
    for first time
  * Storage: explicitly zero .ns files on creation
  * Storage: partially written journal last section causes recovery to fail
- 2.4.11:
  * Indexes: Fixed issue that can cause index corruption when building
    indexes concurrently
  * Indexes: Fixed issue that can cause index corruption when shutting
    down secondary node during index build
  * Indexes: Mongod now recognizes incompatible "future" text and geo
    index versions and exits gracefully
  * Indexes: Fixed issue that can cause secondaries to fail replication
    when building the same index multiple times concurrently
  * Indexes: Fixed issue that can cause index corruption on the tenth
    index in a collection if the index build fails
  * Indexes: Introduced versioning for text and geo indexes to ensure
    backwards compatibility
  * Indexes: Disallowed building indexes on the system.indexes
    collection, which can lead to initial sync failure on secondaries
  * Sharding: Avoid frequent immediate balancer retries when config
    servers are out of sync
  * Sharding: Add indexes to locks collection on config servers to
    avoid long queries in case of large numbers of collections
  * Sharding: Fixed issue that can corrupt the config metadata cache
    when sharding collections concurrently
  * Sharding: Don?t move chunks created on collections with a hashed
    shard key if the collection already contains data
  * Replication: Fixed issue where node appears to be down in a replica
    set during a compact operation
  * Replication: Fixed issue that could cause delays in elections
    when a node is not vetoing an election
  * Replication: Step down all primaries if multiple primaries are
    detected in replica set to ensure correct election result
  * Replication: Upon clock skew detection, secondaries will switch
    to sync directly from the primary to avoid sync cycles
  * Runtime: The SIGXCPU signal is now caught and mongod writes a log
    message and exits gracefully
  * Runtime: Fixed issue where mongod fails to start on Linux when
    /sys/dev/block directory is not readable
  * GridFS: Chunk size is decreased to 255 KB (from 256 KB) to avoid
    overhead with usePowerOf2Sizes option
  * SNMP: Fixed MIB file validation under smilint
  * Shell: Fixed issue in V8 memory allocation that could cause
    long-running shell commands to crash
  * Shell: Fixed memory leak in the md5sumFile shell utility method
- remove patches:
  * mongodb-no-werror.patch
- add patches:
  * mongodb-src-r2.4.12-no-werror.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425124800">- Use systemd for openSUSE &gt; 12.2</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425211200">- fix typo is spec</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425297600">- fix typo in changelog</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425384000">- update version 2.4.13:
  * Security: Enforce BSON BinData length validation (SERVER-17278)
  * Security: Disable SSLv3 ciphers (SERVER-15673)
  * Networking: Improve BSON validation (SERVER-17264)
    (bnc#921759, CVE-2015-1609)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1425470400">- update patches:
  * mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch</changelog>
<changelog author="aplanas@suse.com" date="1432209600">- Remove `void_return.patch`
  * This patch is used only in SLE11 because a boost problem. Now
    mongodb is using a local copy of boost.
  * Also this patch avoid the deletion and repair of the database
    (bnc#738050)</changelog>
<changelog author="bwiedemann@suse.com" date="1434888000">- Enable IPv6 in default config (bnc#930566)</changelog>
<changelog author="aplanas@suse.com" date="1435147200">- Update to mongodb-2.4.14
  * Init script sets process ulimit to different value compared to
    documentation SERVER-17780
  * Compute BinData length in v8 SERVER-17647
  * Upgrade PCRE Version from 8.30 to Latest SERVER-17252</changelog>
<changelog author="jacobwinski@gmail.com" date="1438689600">- Update to version 3.0.5.
- Drop mongodb-ssl-FIPS_mode_set.patch: fixed upstream.
- Drop most of mongo-tools, they are not a seperate project.
- Update spec file to reflect build, compilation and package requirements.
- Update mongodb.conf file to reflect new filetype:
  * all existing defaults were ported over to the new mongodb.conf
  * mongodb.conf file was based on the default upstream
  * old style conf file is still supported by MongoDB 3.0.5,
    but migration is recommended.
- Drop mongodb-2.4.11-ppc_patch_based_on_mongo_ibmsoe.patch due to incompatibilities:
  * MongoDB now uses the new WiredTiger storage engine. Newest IBM Power8 (PPC) patch:
    1) has not been updated for MongoDB 3.0.5
  2) pre-dates WiredTiger support
  3) upstream has already started to incorporate PPC64 support based on the IBM patchset
  * Therefore, to avoid major issues like data corruption and conflicts resulting from
    upstream already incorporating partial PPC64 supprt, this patch set has been dropped.
  * PPC64 is enabled using upstream code.
  * WARNING: quoting upstream: "Please note that MongoDB does no testing on Power8
    at this time, so this is definitely not a supported configuration."
- Drop mongodb-src-r2.4.12-no-werror.patch: no longer applies.
- Drop mongodb_2_4_10_add_js_engine_v8_3_14_option.patch: no longer valid
  as upstream now provides its own newer version of v8_3.XX
- Drop mongodb_2_4_10_import_v8_3_14_5_JS2C_Python_scripts.patch: no longer valid
  as upstream now provides its own Python scripts matching provided v8_3.XX
- Drop mongodb_2_4_10_update_v8_3_14_SConscript_for_ppc.patch: v8_3.14 no longer used.
- Enable WiredTiger on supported architectures:
  * quoting upstream: "WiredTiger as embedded in the MongoDB source tree
    does not currently support PPC64."
- Use upstream gperftool when possible:
  * "Changed in version 3.0.0: MongoDB uses a customized built-in version of tcmalloc
    to achieve significant performance gains. Building with --use-system-tcmalloc
    produces binaries that lack these performance gains."
- Update "ulimit" settings to recommended upstream in sysv &amp; systemd files</changelog>
<changelog author="jacobwinski@gmail.com" date="1465041600">- Update to version 3.0.12:
  * Background index build may result in extra index key entries that do not correspond to indexed documents: SERVER-22970
  * Documents that contain embedded null characters can be created: SERVER-7005
  * IX GlobalLock being held while waiting for WiredTiger cache eviction: SERVER-22964
- Update to version 3.0.11:
  * For MongoDB 3.0.9 and MongoDB 3.0.10, during chunk migration, insert and update operations to documents in the migrating chunk are not reflected in the destination shard: SERVER-23425
- Update to version 3.0.10:
  * Read preference of secondaryPreferred can end up using unversioned connections: SERVER-18671
  * For MMAPv1 journaling, the ?last sequence number? file (lsn file) may be ahead of what is synced to the data files: SERVER-22261.
  * Data size change for oplog deletes can overflow 32-bit int: SERVER-22634
  * High fragmentation on WiredTiger databases under write workloads: SERVER-22898.
- Update to version 3.0.9:
  * Queries which specify sort and batch size can return results out of order if documents are concurrently updated. SERVER-19996
  * Large amounts of create and drop collections can cause listDatabases to be slow under WiredTiger. SERVER-20961
  * Authentication failure message includes server IP address instead of the client IP address. SERVER-22054
- Updates to version 3.0.8:
  * findAndModify on mongos can upsert to the wrong shard. SERVER-20407.
  * WiredTiger commit visibility caused document not found. SERVER-21275.
  * The oplog can grow to 3x configured size. SERVER-21553
- Updates to version 3.0.7:
  * WiredTiger memory handling and performance issues: SERVER-20159, SERVER-20204, SERVER-20091, and SERVER-20176.
  * Reconfig during a pending step down may prevent a primary from stepping down: SERVER-20262.
  * Built-in roles requires additional privileges: SERVER-19131, SERVER-15893, and SERVER-13647.
- Updates to version 3.0.6:
  * WiredTiger Stability issues: SERVER-19751, SERVER-19673, and SERVER-19573.
  * Interaction between SSL and Auditing: SERVER-19538.
  * Aggregation $sort on sharded systems SERVER-19464.
- Update requirements to reflect upstream.
- Add proper Source file with URL.
- Cleanup spec file.</changelog>
<changelog author="rpm@fthiessen.de" date="1474113600">- spec file cleanup
- Update to version 3.2.9</changelog>
<changelog author="plinnell@suse.com" date="1480593600">- add  Requires:  shadow - fixes build on SuseStudio</changelog>
<changelog author="plinnell@opensuse.org" date="1481544000">- update to 3.2.11
  + detailed change log:
  https://docs.mongodb.com/manual/release-notes/3.2-changelog</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1490788800">- Update to version 3.4.3. Change log at https://docs.mongodb.com/manual/release-notes/3.4-changelog/</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1491480000">- Exclude i586 build architecture.</changelog>
<changelog author="jengelh@inai.de" date="1491566400">- Replace buzzword-rich description by something meaningful.
- Drop unused -devel subpackage.</changelog>
<changelog author="idonmez@suse.com" date="1493208000">- Use gcc6 on SLE &gt;= 12SP2 and enable s390x port</changelog>
<changelog author="astieger@suse.com" date="1509537600">- MongoDB 3.4.10:
  * The networkMessageCompressors configuration setting (aka wire
    protocol compression), which is disabled by default, exposed a
    vulnerability when enabled that could be exploited by a
    malicious attacker to deny service or modify memory.
    CVE-2017-15535 bsc#1065956
  * Avoid G_X lock for rename_collection within database
  * View with collation doesn?t work as expected in sharded cluster
  * Calling shardCollection after enableSharding may fail if
    executed against different mongos
- includes changes from 3.4.9:
  * Sharding an existing small collection results in large number
    of chunks
  * Reduce calls to allocator for large $in expressions
  * RangeDeleter holds WT transaction open while waiting for
    majority
  * Range deleter assert failed because of replication lag
- includes changes from 3.4.7:
  * BSON Document Size can be exceeded when grouping inserts on
    SECONDARY nodes
  * Enable configuration of OpenSSL cipher suite via setParameter
  * Optimize incremental update performance of ChunkManager and
    CollectionMetadata
- includes changrs from 3.4.6:
  * Only close idle cached cursors on the WiredTiger ident that
    is busy.
  * $geoWithin in aggregation pipeline after $lookup and $unwind
    returns incorrect results.
  * Cursor opens should never block for the duration of a checkpoint.
- includes changes from 3.4.5:
  * Multikey indexes should not be eligible for DISTINCT_SCAN if
    distinct key is an array component.
  * GlobalLock with timeout can still block indefinitely.
  * mongos can segfault in getMore on views with find batchSize of
    0.
- includes changes from 3.4.4:
  * Add an aggregation operator $objectToArray to convert an object
    to an array of key, value pairs.
  * Add an aggregation operator $arrayToObject to convert an array
    of pairs to an object.
  * ChunkManager refresh can occasionally cause a full reload.</changelog>

</package>
<package pkgid="af0094b28605b7b27c40e8656866f0211a4929230cd95f24996555db0f227e39" name="monitoring-plugins-metadata" arch="noarch">
    <version epoch="0" ver="4.0.1+git.1495055229.643177f1" rel="3.1"/>

<changelog author="kgronlund@suse.com" date="1453118400">- Update to version 3.9.6+git.1452867140.fc8ace0:
  + SAPDatabase: Add Oracle 12 to list of supported databases (bsc#953991)
  + High: clvm: fix issue with only first option of daemon_options being used
  + High: mysql: fix grep failure on MySQL5.6 or higher when checking read_only variable
  + Medium: sg_persist: remove uncalled for ocf_run calls
  + Medium: ocf_shellfuncs: suppress bash specific trace_ra log on dash
  + Medium: ocf-rarun: replace error log messages with calls to ocf_exit_reason
  + Medium: nfsserver: do redhat specific stuff on redhat
  + Medium: iscsi: replace error log messages with calls to ocf_exit_reason
  + Medium: oracle/oralsnr: replace error log messages with calls to ocf_exit_reason
  + Medium: pingd: replace error log messages with calls to ocf_exit_reason
  + Medium: Raid1: replace error log messages with calls to ocf_exit_reason
  + Medium: pgsql: replace error log messages with calls to ocf_exit_reason
  + Medium: exportfs: don't increment fsid for single directory
  + Medium: Filesystem: add overlay as supported filesystem
  + Medium: mysql: When mysql has been already stopped, mysql is finished normally.
  + Low: pgsql: fix to be used valid charcters when the invalid characters is used in replication_slot_name.
  + Low: mysql: fix missing variables
  + Low: mysql: tmpfile is leaking when set the OCF_CHECK_LEVEL to 10
  + Low: nfsserver: prevent error messages on platforms without rpcuser (again)
  + Low: pgsql : fix invalid log message
  + Low: apache-conf: handle parsing includes with values in quotes
  + Low: pgsql: properly show default values in meta-data
  + Low : Changed the check handling of pid to the common function.
  + Low : Changed it that the message which pid file deleted repeated and did not appear
  + Low: pgsql: fix grep failure when using pacemaker 1.1.12
  + LVM: Allow vgck failures if partial
  + LVM: Correct grammar in partial_activation descriptions
  + IPaddr2: Add IPv6 DAD collision detection
  + VirtualDomain: New resource attributes migration_speed and migration_downtime
  + Nagios Resource Agent
  + Fix 90s wait/killing of databases containing the name of the database being killed, and added cleanup code to kill remaining listener process.
  + mysql.sh: wait up to startup_wait seconds before failing if mysqld startup is slow
- Remove patches that have been merged upstream
  - Remove 0001-nfsserver-Add-EXEC_MODE-for-systemd-without-nfs-lock.patch
  - Remove 0002-nfsserver-Use-rpc-statd.service-for-NFS-locking-in-E.patch</changelog>
<changelog author="kgronlund@suse.com" date="1453982400">- Update to version 3.9.7~rc1+git.1453889774.3446b99:
  + Low: ldirectord: Fix unset failcount error (bsc#962795)</changelog>
<changelog author="kgronlund@suse.com" date="1454500800">- Update to version 3.9.7+git.1454497075.e697f43:
  + Medium: nfsserver: fix monitor for systemd
  + galera: force crash recovery if needed during last commit detection
  + galera: prevent recovered nodes from bootstrapping cluster when possible
  + galera: remove bashism
  + Add portal check to open_iscsi_get_session_id()</changelog>
<changelog author="kgronlund@suse.com" date="1455883200">- Update to version 3.9.7+git.1454950092.6f56933:
  + Dev: ocft: include runocft to the tarball</changelog>
<changelog author="kgronlund@suse.com" date="1458561600">- Update to version 3.9.7+git.1458512170.48350a9:
  + High: SAPDatabase: Add support for Oracle 12c (bsc#967380)
  + High: sapdb.sh evaluate parameter DBOSUSER also in start and stop methods (bsc#971914)
  + Low: SAPInstance: Update version support statement (bsc#965872)
  + Low: apache: ensure readable $TESTCONFFILE
  + Added iSER enabled portal support
  + quote vgchange options
  + Added pgagent RA
  + galera: fix monitoring of joining node for long running SST
  + galera: don't bootstrap from a node with no grastate.dat when possible
  + oralsnr: fix status check fail when username is more than 8 characters long</changelog>
<changelog author="kgronlund@suse.com" date="1461672000">- Update to version 3.9.7+git.1461679689.18a78f5:
  + Medium: symlink: Handle missing directories in target (bsc#973054)
  + oracle: "shutdown immediate;" is needed after cleanup to be able to recover from the ORA-01081 error
  + oracle: inform user that monprofile must start with C## for container databases
  + tickle_tcp: Fix "Failed to open raw socket (Invalid argument)" issue</changelog>
<changelog author="kgronlund@suse.com" date="1462276800">- Update to version 3.9.7+git.1461938976.cb7c36a:
  + High: managing "Elastic IP" for EC2 instances
  + High: managing "Secondary Private IP" for EC2 instances
  + Low: VirtualDomain: fix unnecessary error when probing nonexistent domain
  + Low: mysql: Handle non-standard mysql server port
  + Low: Fix protential error for RA:nagios
  + Medium: iSCSILogicalUnit: Fix when using rbd store.
  + Low: iSCSILogicalUnit: Add tgt_bsopts parameter.
  + Low: Don't send Inaccessible real server e-mails in fork=yes mode</changelog>
<changelog author="jengelh@inai.de" date="1463745600">- Remove redundant %clean section. Ensure systemd-tmpfiles is run.</changelog>
<changelog author="kgronlund@suse.com" date="1464609600">- Medium: ldirectord: Remove IPv6 workaround (bsc#977193)
- Medium: CTDB: Use --logging syntax for ctdbd (bsc#981863)
- Add 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
- Add 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1467115200">- exportfs: Add pseudo resource factor (bsc#978680)
- Add 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="tchvatal@suse.com" date="1467288000">- Remove unused conditions from the spec-file as we build only on
  new enough distributions
- Sort all variables with spec-cleaner for better readability
- Enable monitoring subpkg as we now have all the needed dependencies
- Convert to pkgconfig style dependencies where applicable</changelog>
<changelog author="kgronlund@suse.com" date="1470916800">- Use non-libnet version of send_arp for IB support (bsc#985486)</changelog>
<changelog author="kgronlund@suse.com" date="1475755200">- Update to version 3.9.7+git.1475676827.4af1003:
  * High: rabbitmq-cluster: forget stopped rmq nodes with notify=true
  * [rabbitmq-cluster] Backup and restore rabbitmq users during resource restart
  * RabbitMQ: New error code - 69
  * RabbitMQ: Forget node before 2nd joining attempt
  * rabbitmq: Allow automatic cluster recovery before forcing it
  * oracle: fix MONPROFILE to use monprofile parameter when set
  * oracle: fix issue with C## in monprofile (bsc#1005424)
  * oracle: add quotes for monuser and monpassword
  * Medium: pgsql: change stop_escalate parameter as usable value
  * Low: pgsql: adjust stop_escalate time when it is longer than the timeout
  * [galera] Add /etc/default/clustercheck importation
  * Medium: ldirectord: Fix the issue in IPv4/IPv6 mixed environment
  * ldirectord: Do an initial check of all services in when in 'starting' status
  * Low NFS: add more default init scripts to check
  * exportfs: Add pseudo resource factor (bsc#978680)
  * exportfs: Add IPv6 support
  * Low: extend support for AWS elastic ip association
  * Low: Rename ra-dev-guide.txt to ra-dev-guide.asc
  * garbd: Introduces garbd resource-agent
- Drop merged patches:
  * Remove 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
  * Remove 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="kgronlund@suse.com" date="1476792000">- Revert send_arp to libnet version (bsc#985486)
  * For infiniband support in IPaddr2, install ipoibtools</changelog>
<changelog author="kgronlund@suse.com" date="1476792001">- Update to version 3.9.7+git.1475827855.a95ea74:
  * High: nfsserver: Delete the temp file correctly.
  * Low: nfsserver: Prevent unnecessary log output</changelog>
<changelog author="kgronlund@suse.com" date="1478001600">- Update to version 3.9.7+git.1477655995.de4be97:
  * adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142)
  * Medium: docker: Use docker exec for monitor_cmd if supported (bsc#1007867)
  * sg_persist: fix matching of hex node ids
  * sg_persist: do not spill info output to stderr
  * lvm.sh: fix status clustered to check the specified logical volume
  * Delay: set default startdelay lower than start timeout to avoid it timing out before starting with default values
  * Low: Filesystem: Clearer exit reason if mount fails</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 3.9.7+git.1478106349.5ff08d4:
  * tomcat: Add force_systemd parameter to rely on systemd service
  * nfsserver: dont stop rpcbind, as other services might use it
  * ldirectord: a further fix for spurious reminder e-mails
  * Medium: docker: Reduce monitor log spam
  * Medium: mysql-proxy: Fix incorrect conditional reported by shellcheck
  * Medium: garbd: Fix broken probe check
  * Doc: docker: Clarify limitations of monitor_cmd in parameter description</changelog>
<changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
<changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>

</package>
<package pkgid="c2448f7ac968862184f5be541115d307e2f4b7b7f973a5cb28117df506c994ca" name="monitoring-plugins-metadata" arch="noarch">
    <version epoch="0" ver="4.0.1+git.1495055229.643177f1" rel="6.1"/>

<changelog author="kgronlund@suse.com" date="1453982400">- Update to version 3.9.7~rc1+git.1453889774.3446b99:
  + Low: ldirectord: Fix unset failcount error (bsc#962795)</changelog>
<changelog author="kgronlund@suse.com" date="1454500800">- Update to version 3.9.7+git.1454497075.e697f43:
  + Medium: nfsserver: fix monitor for systemd
  + galera: force crash recovery if needed during last commit detection
  + galera: prevent recovered nodes from bootstrapping cluster when possible
  + galera: remove bashism
  + Add portal check to open_iscsi_get_session_id()</changelog>
<changelog author="kgronlund@suse.com" date="1455883200">- Update to version 3.9.7+git.1454950092.6f56933:
  + Dev: ocft: include runocft to the tarball</changelog>
<changelog author="kgronlund@suse.com" date="1458561600">- Update to version 3.9.7+git.1458512170.48350a9:
  + High: SAPDatabase: Add support for Oracle 12c (bsc#967380)
  + High: sapdb.sh evaluate parameter DBOSUSER also in start and stop methods (bsc#971914)
  + Low: SAPInstance: Update version support statement (bsc#965872)
  + Low: apache: ensure readable $TESTCONFFILE
  + Added iSER enabled portal support
  + quote vgchange options
  + Added pgagent RA
  + galera: fix monitoring of joining node for long running SST
  + galera: don't bootstrap from a node with no grastate.dat when possible
  + oralsnr: fix status check fail when username is more than 8 characters long</changelog>
<changelog author="kgronlund@suse.com" date="1461672000">- Update to version 3.9.7+git.1461679689.18a78f5:
  + Medium: symlink: Handle missing directories in target (bsc#973054)
  + oracle: "shutdown immediate;" is needed after cleanup to be able to recover from the ORA-01081 error
  + oracle: inform user that monprofile must start with C## for container databases
  + tickle_tcp: Fix "Failed to open raw socket (Invalid argument)" issue</changelog>
<changelog author="kgronlund@suse.com" date="1462276800">- Update to version 3.9.7+git.1461938976.cb7c36a:
  + High: managing "Elastic IP" for EC2 instances
  + High: managing "Secondary Private IP" for EC2 instances
  + Low: VirtualDomain: fix unnecessary error when probing nonexistent domain
  + Low: mysql: Handle non-standard mysql server port
  + Low: Fix protential error for RA:nagios
  + Medium: iSCSILogicalUnit: Fix when using rbd store.
  + Low: iSCSILogicalUnit: Add tgt_bsopts parameter.
  + Low: Don't send Inaccessible real server e-mails in fork=yes mode</changelog>
<changelog author="jengelh@inai.de" date="1463745600">- Remove redundant %clean section. Ensure systemd-tmpfiles is run.</changelog>
<changelog author="kgronlund@suse.com" date="1464609600">- Medium: ldirectord: Remove IPv6 workaround (bsc#977193)
- Medium: CTDB: Use --logging syntax for ctdbd (bsc#981863)
- Add 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
- Add 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1467115200">- exportfs: Add pseudo resource factor (bsc#978680)
- Add 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="tchvatal@suse.com" date="1467288000">- Remove unused conditions from the spec-file as we build only on
  new enough distributions
- Sort all variables with spec-cleaner for better readability
- Enable monitoring subpkg as we now have all the needed dependencies
- Convert to pkgconfig style dependencies where applicable</changelog>
<changelog author="kgronlund@suse.com" date="1470916800">- Use non-libnet version of send_arp for IB support (bsc#985486)</changelog>
<changelog author="kgronlund@suse.com" date="1475755200">- Update to version 3.9.7+git.1475676827.4af1003:
  * High: rabbitmq-cluster: forget stopped rmq nodes with notify=true
  * [rabbitmq-cluster] Backup and restore rabbitmq users during resource restart
  * RabbitMQ: New error code - 69
  * RabbitMQ: Forget node before 2nd joining attempt
  * rabbitmq: Allow automatic cluster recovery before forcing it
  * oracle: fix MONPROFILE to use monprofile parameter when set
  * oracle: fix issue with C## in monprofile (bsc#1005424)
  * oracle: add quotes for monuser and monpassword
  * Medium: pgsql: change stop_escalate parameter as usable value
  * Low: pgsql: adjust stop_escalate time when it is longer than the timeout
  * [galera] Add /etc/default/clustercheck importation
  * Medium: ldirectord: Fix the issue in IPv4/IPv6 mixed environment
  * ldirectord: Do an initial check of all services in when in 'starting' status
  * Low NFS: add more default init scripts to check
  * exportfs: Add pseudo resource factor (bsc#978680)
  * exportfs: Add IPv6 support
  * Low: extend support for AWS elastic ip association
  * Low: Rename ra-dev-guide.txt to ra-dev-guide.asc
  * garbd: Introduces garbd resource-agent
- Drop merged patches:
  * Remove 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
  * Remove 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="kgronlund@suse.com" date="1476792000">- Revert send_arp to libnet version (bsc#985486)
  * For infiniband support in IPaddr2, install ipoibtools</changelog>
<changelog author="kgronlund@suse.com" date="1476792001">- Update to version 3.9.7+git.1475827855.a95ea74:
  * High: nfsserver: Delete the temp file correctly.
  * Low: nfsserver: Prevent unnecessary log output</changelog>
<changelog author="kgronlund@suse.com" date="1478001600">- Update to version 3.9.7+git.1477655995.de4be97:
  * adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142)
  * Medium: docker: Use docker exec for monitor_cmd if supported (bsc#1007867)
  * sg_persist: fix matching of hex node ids
  * sg_persist: do not spill info output to stderr
  * lvm.sh: fix status clustered to check the specified logical volume
  * Delay: set default startdelay lower than start timeout to avoid it timing out before starting with default values
  * Low: Filesystem: Clearer exit reason if mount fails</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 3.9.7+git.1478106349.5ff08d4:
  * tomcat: Add force_systemd parameter to rely on systemd service
  * nfsserver: dont stop rpcbind, as other services might use it
  * ldirectord: a further fix for spurious reminder e-mails
  * Medium: docker: Reduce monitor log spam
  * Medium: mysql-proxy: Fix incorrect conditional reported by shellcheck
  * Medium: garbd: Fix broken probe check
  * Doc: docker: Clarify limitations of monitor_cmd in parameter description</changelog>
<changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
<changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
<changelog author="kgronlund@suse.com" date="1504612800">- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Add 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
- Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Add 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
- Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * Add 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
- High: galera: Backport fixes from upstream
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)
  * Add 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch</changelog>

</package>
<package pkgid="21e1f9df5d213545b277c7d2225d17515451fd91097e066bc58ed81e92db6663" name="monitoring-plugins-zypper" arch="noarch">
    <version epoch="0" ver="1.94" rel="5.1"/>

<changelog author="lars@linux-schulserver.de" date="1418472000">- allow DNS resolution for abstraction RPM and kernel random usage
  for zypp abstraction (apparmor) - based on 13.1
- include local/usr.lib.nagios.plugins.check_zypper in apparmor
  profile to allow users to override default settings</changelog>
<changelog author="lars@linux-schulserver.de" date="1425211200">- use BSD-3-Clause as license</changelog>
<changelog author="lars@linux-schulserver.de" date="1425384000">- allow to open /var/lib/YaST2/cookies in zypp-refresh</changelog>
<changelog author="lars@linux-schulserver.de" date="1440072000">- also include the local changes file in some subprofiles, so people
  can overwrite the settings there (bnc #914493)
- Update to 1.83:
  + Tumbleweed is a rolling release - so asume it is not outdated
    at any time. Need to be clarified if we should check actively if
    the installed Tumbleweed is outdated or not. Maybe we can use
    /etc/products.d/baseproduct to check for end-of-life information?</changelog>
<changelog author="lars@linux-schulserver.de" date="1443441600">- run a simple test during %%check</changelog>
<changelog author="lars@linux-schulserver.de" date="1452081600">- add local/usr.lib.nagios.plugins.check_zypper.zypp_refresh as
  additional overwrite file</changelog>
<changelog author="lars@linux-schulserver.de" date="1454068800">- update to 1.84
  * openSUSE: supported are 13.2, 13.3 and Leap 42.1
    try to add Tumbleweed as supported (TODO)
  * SLE: supported are 10.4, 11.3, 11.4, 12.0 and 12.1
  =&gt; fixes bnc#963993 - thanks to Ansgar Esztermann</changelog>
<changelog author="lars@linux-schulserver.de" date="1460462400">- update to 1.90:
  + support (and prefer) the new /etc/os-release file instead of
    /etc/SuSE-release
  + remove SLE-11-SP3 from supported distributions
  + better check supported distribution</changelog>
<changelog author="lars@linux-schulserver.de" date="1460548800">- restart apparmor to get changes in the apparmor profiles updated
- require apparmor-abstractions</changelog>
<changelog author="ro@suse.de" date="1460548801">- fix os-release parser to get version properly</changelog>
<changelog author="lars@linux-schulserver.de" date="1460635200">- build require apparmor-parser to run apparmor restart in %post
- SLE11 needs apparmor-profiles instead of apparmor-abstractions</changelog>
<changelog author="ro@suse.de" date="1464091200">- require apparmor-profiles on older releases
- add SLE12.2 as supported</changelog>
<changelog author="ro@suse.de" date="1464091201">- ignore if restarting boot.apparmor fails</changelog>
<changelog author="lars@linux-schulserver.de" date="1472817600">- update to 1.91:
  + make openSUSE Leap 42.2 supported</changelog>
<changelog author="ro@suse.de" date="1476273600">- change Tumbleweed check, PRETTY_NAME is actually
  "openSUSE Tumbleweed (DATEVERSION) (ARCH)"</changelog>
<changelog author="lars@linux-schulserver.de" date="1498824000">- update to 1.92:
  + remove unsupported openSUSE 13.2, 13.3 and Tumbleweed 2016*
  + remove unsupported SLE 12.0 and 12.1
  + add openSUSE 42.3 and Tumbleweed 2017*
  + add SLE 12.3</changelog>
<changelog author="ro@suse.de" date="1500984000">- use systemctl for try-restart call for apparmor in postinstall</changelog>
<changelog author="lars@linux-schulserver.de" date="1507636800">- update to 1.93
  + remove unsupported openSUSE 42.1 and SLE-10-SP4</changelog>
<changelog author="ro@suse.de" date="1511524800">- move restart stuff from post to postun where it belongs
- use proper macros for systemd restart</changelog>
<changelog author="lars@linux-schulserver.de" date="1512216000">- update to 1.94:
  + support Leap 15.0 and Tumbleweed 2018* (boo#1049950)</changelog>

</package>
<package pkgid="6ded2cc1a77d29ce28959d23eb7b25e34643ffd4c7db01c5b93e6f9671b4cb07" name="monitoring-plugins-zypper" arch="src">
    <version epoch="0" ver="1.94" rel="5.1"/>

<changelog author="lars@linux-schulserver.de" date="1418472000">- allow DNS resolution for abstraction RPM and kernel random usage
  for zypp abstraction (apparmor) - based on 13.1
- include local/usr.lib.nagios.plugins.check_zypper in apparmor
  profile to allow users to override default settings</changelog>
<changelog author="lars@linux-schulserver.de" date="1425211200">- use BSD-3-Clause as license</changelog>
<changelog author="lars@linux-schulserver.de" date="1425384000">- allow to open /var/lib/YaST2/cookies in zypp-refresh</changelog>
<changelog author="lars@linux-schulserver.de" date="1440072000">- also include the local changes file in some subprofiles, so people
  can overwrite the settings there (bnc #914493)
- Update to 1.83:
  + Tumbleweed is a rolling release - so asume it is not outdated
    at any time. Need to be clarified if we should check actively if
    the installed Tumbleweed is outdated or not. Maybe we can use
    /etc/products.d/baseproduct to check for end-of-life information?</changelog>
<changelog author="lars@linux-schulserver.de" date="1443441600">- run a simple test during %%check</changelog>
<changelog author="lars@linux-schulserver.de" date="1452081600">- add local/usr.lib.nagios.plugins.check_zypper.zypp_refresh as
  additional overwrite file</changelog>
<changelog author="lars@linux-schulserver.de" date="1454068800">- update to 1.84
  * openSUSE: supported are 13.2, 13.3 and Leap 42.1
    try to add Tumbleweed as supported (TODO)
  * SLE: supported are 10.4, 11.3, 11.4, 12.0 and 12.1
  =&gt; fixes bnc#963993 - thanks to Ansgar Esztermann</changelog>
<changelog author="lars@linux-schulserver.de" date="1460462400">- update to 1.90:
  + support (and prefer) the new /etc/os-release file instead of
    /etc/SuSE-release
  + remove SLE-11-SP3 from supported distributions
  + better check supported distribution</changelog>
<changelog author="lars@linux-schulserver.de" date="1460548800">- restart apparmor to get changes in the apparmor profiles updated
- require apparmor-abstractions</changelog>
<changelog author="ro@suse.de" date="1460548801">- fix os-release parser to get version properly</changelog>
<changelog author="lars@linux-schulserver.de" date="1460635200">- build require apparmor-parser to run apparmor restart in %post
- SLE11 needs apparmor-profiles instead of apparmor-abstractions</changelog>
<changelog author="ro@suse.de" date="1464091200">- require apparmor-profiles on older releases
- add SLE12.2 as supported</changelog>
<changelog author="ro@suse.de" date="1464091201">- ignore if restarting boot.apparmor fails</changelog>
<changelog author="lars@linux-schulserver.de" date="1472817600">- update to 1.91:
  + make openSUSE Leap 42.2 supported</changelog>
<changelog author="ro@suse.de" date="1476273600">- change Tumbleweed check, PRETTY_NAME is actually
  "openSUSE Tumbleweed (DATEVERSION) (ARCH)"</changelog>
<changelog author="lars@linux-schulserver.de" date="1498824000">- update to 1.92:
  + remove unsupported openSUSE 13.2, 13.3 and Tumbleweed 2016*
  + remove unsupported SLE 12.0 and 12.1
  + add openSUSE 42.3 and Tumbleweed 2017*
  + add SLE 12.3</changelog>
<changelog author="ro@suse.de" date="1500984000">- use systemctl for try-restart call for apparmor in postinstall</changelog>
<changelog author="lars@linux-schulserver.de" date="1507636800">- update to 1.93
  + remove unsupported openSUSE 42.1 and SLE-10-SP4</changelog>
<changelog author="ro@suse.de" date="1511524800">- move restart stuff from post to postun where it belongs
- use proper macros for systemd restart</changelog>
<changelog author="lars@linux-schulserver.de" date="1512216000">- update to 1.94:
  + support Leap 15.0 and Tumbleweed 2018* (boo#1049950)</changelog>

</package>
<package pkgid="5dd336532625799880361756e9dd467181f0abe91fe59a3ef27e0d57df11f917" name="mozilla-nss" arch="src">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="cb6af667d25b38b22f8941cfd437bd68c442b1f8ee7e5161beecf9b300252451" name="mozilla-nss" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="3fbc0eefcc8d26a26791f64aaf83b15f48435530b0f9a896939ce8147daefa0f" name="mozilla-nss-32bit" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="9001de2bc9b7b36a0745d804c5e84af90d111551e8d4bd8fd657c26339805e24" name="mozilla-nss-certs" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="a89449705dded07bed4a1d006a3028e0a53faea93bda181033ff8416ac60f6c9" name="mozilla-nss-certs-32bit" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="0961e355e9bf0e7f96cb3c3a98109e3f76bd5f2ffea759a9b164fba11ad81dda" name="mozilla-nss-devel" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="e1a465eabf261d65386e4f187da30759de8153529dea5129736b671cc5fa5018" name="mozilla-nss-sysinit" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="bebcf51c44a04d628f66756d87842c34a21cba9c4c7d63e77499bba35b5cf7b9" name="mozilla-nss-sysinit-32bit" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="be66692df73b99da76c357dcdd3212118a78d510b12f80ad8545465d700609a4" name="mozilla-nss-tools" arch="x86_64">
    <version epoch="0" ver="3.28.6" rel="44.1"/>

<changelog author="fstrba@suse.com" date="1443096000">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 3.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>
<changelog author="wr@rosenauer.org" date="1450526400">- update to NSS 3.20.2 (bnc#959888)
  * MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature</changelog>
<changelog author="wr@rosenauer.org" date="1450612800">- update to NSS 3.21
  * required for Firefox 44.0
  New functionality:
  * certutil now supports a --rename option to change a nickname (bmo#1142209)
  * TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
  * New info functions added for use during mid-handshake callbacks (bmo#1084669)
  New Functions:
  * NSS_OptionSet - sets NSS global options
  * NSS_OptionGet - gets the current value of NSS global options
  * SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
    string, module parameters string, NSS specific parameters string, and NSS
    configuration parameter string. The module represented by the module
    structure is not loaded. The difference with SECMOD_CreateModule is the new
    function handles NSS configuration parameter strings.
  * SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
    to the handshake being completed, for use with the callbacks that are invoked
    during the handshake
  * SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
    for TLS
  * SSL_SignaturePrefGet - retrieves the currently configured signature and hash
    algorithms
  * SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
    can be configured with SSL_SignaturePrefSet
  * NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
    library string, module name string, module parameters string, NSS specific
    parameters string, and NSS configuration parameter strings. The returned
    strings must be freed by the caller. The difference with
    NSS_ArgParseModuleSpec is the new function handles NSS configuration
    parameter strings.
  * NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
    module parameters string, NSS specific parameters string, and NSS
    configuration parameter string and returns a module string which the caller
    must free when it is done. The difference with NSS_MkModuleSpec is the new
    function handles NSS configuration parameter strings.
  New Types:
  * CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_MASTER_KEY_DERIVE
  * CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
    CKM_TLS12_KEY_AND_MAC_DERIVE
  * CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
  * CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
  * SSLHashType - identifies a hash function
  * SSLSignatureAndHashAlg - identifies a signature and hash function
  * SSLPreliminaryChannelInfo - provides information about the session state
    prior to handshake completion
  New Macros:
  * NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum RSA key size
  * NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DH key size
  * NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
    get the minimum DSA key size
  * CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
  * CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
  * CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
    ECDH) cipher suites
  * CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
    PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
  * CKM_TLS_MAC - computes TLS Finished MAC
  * NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
    exchange
  * SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
    DTLS record in a UDP packet
  * SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
    signature and hash algorithm is available
  * SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
    unsupported signature and hash algorithm is configured
  * SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
    master secret is missing after having been negotiated
  * SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
    extended master secret when previously not negotiated
  * SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
    master secret extension (RFC 7627)
  * ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
    TLS version has been selected
  * ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
    that a TLS cipher suite has been selected
  * ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
    preliminary information has been set
  Notable Changes:
  * NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
  * NSS now builds with warnings as errors (bmo#1182667)
  * The following CA certificates were Removed
  - CN = VeriSign Class 4 Public Primary Certification Authority - G3
  - CN = UTN-USERFirst-Network Applications
  - CN = TC TrustCenter Universal CA III
  - CN = A-Trust-nQual-03
  - CN = USERTrust Legacy Secure Server CA
  - Friendly Name: Digital Signature Trust Co. Global CA 1
  - Friendly Name: Digital Signature Trust Co. Global CA 3
  - CN = UTN - DATACorp SGC
  - O = TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?. (c) Kas?m 2005
  * The following CA certificate had the Websites trust bit turned off
  - OU = Equifax Secure Certificate Authority
  * The following CA certificates were Added
  - CN = Certification Authority of WoSign G2
  - CN = CA WoSign ECC Root
  - CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
  (softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340)</changelog>
<changelog author="wr@rosenauer.org" date="1457352000">- update to NSS 3.21.1 (bmo#969894)
  * required for Firefox 45.0
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS</changelog>
<changelog author="wr@rosenauer.org" date="1457524800">- update to NSS 3.22.2
  New functionality:
  * RSA-PSS signatures are now supported (bmo#1215295)
  * Pseudorandom functions based on hashes other than SHA-1 are now supported
  * Enforce an External Policy on NSS from a config file (bmo#1009429)
  New functions:
  * PK11_SignWithMechanism - an extended version PK11_Sign()
  * PK11_VerifyWithMechanism - an extended version of PK11_Verify()
  * SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
    TLS extension data
  * SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
    TLS extension data
  New types:
  * ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
  * Constants for several object IDs are added to SECOidTag
  New macros:
  * SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
  * NSS_USE_ALG_IN_SSL
  * NSS_USE_POLICY_IN_SSL
  * NSS_RSA_MIN_KEY_SIZE
  * NSS_DH_MIN_KEY_SIZE
  * NSS_DSA_MIN_KEY_SIZE
  * NSS_TLS_VERSION_MIN_POLICY
  * NSS_TLS_VERSION_MAX_POLICY
  * NSS_DTLS_VERSION_MIN_POLICY
  * NSS_DTLS_VERSION_MAX_POLICY
  * CKP_PKCS5_PBKD2_HMAC_SHA224
  * CKP_PKCS5_PBKD2_HMAC_SHA256
  * CKP_PKCS5_PBKD2_HMAC_SHA384
  * CKP_PKCS5_PBKD2_HMAC_SHA512
  * CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
  * CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
  Notable changes:
  * NSS C++ tests are built by default, requiring a C++11 compiler.
    Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
  * NSS has been changed to use the PR_GetEnvSecure function that
    was made available in NSPR 4.12</changelog>
<changelog author="wr@rosenauer.org" date="1458043200">- update to NSS 3.22.3
  * required for Firefox 46.0
  * Increase compatibility of TLS extended master secret,
    don't send an empty TLS extension last in the handshake
    (bmo#1243641)
  * Fixed a heap-based buffer overflow related to the parsing of
    certain ASN.1 structures. An attacker could create a specially-crafted
    certificate which, when parsed by NSS, would cause a crash or
    execution of arbitrary code with the permissions of the user.
    (CVE-2016-1950, bmo#1245528)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1460980800">-  add nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1464264000">- update to NSS 3.23
  New functionality:
  * ChaCha20/Poly1305 cipher and TLS cipher suites now supported
  * Experimental-only support TLS 1.3 1-RTT mode (draft-11).
    This code is not ready for production use.
  New functions:
  * SSL_SetDowngradeCheckVersion - Set maximum version for new
    ServerRandom anti-downgrade mechanism. Clients that perform a
    version downgrade (which is generally a very bad idea) call this
    with the highest version number that they possibly support.
    This gives them access to the version downgrade protection from
    TLS 1.3.
  Notable changes:
  * The copy of SQLite shipped with NSS has been updated to version
    3.10.2
  * The list of TLS extensions sent in the TLS handshake has been
    reordered to increase compatibility of the Extended Master Secret
    with with servers
  * The build time environment variable NSS_ENABLE_ZLIB has been
    renamed to NSS_SSL_ENABLE_ZLIB
  * The build time environment variable NSS_DISABLE_CHACHAPOLY was
    added, which can be used to prevent compilation of the
    ChaCha20/Poly1305 code.
  * The following CA certificates were Removed
  - Staat der Nederlanden Root CA
  - NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  - NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
  - VeriSign Class 1 Public PCA ? G2
  - VeriSign Class 3 Public PCA
  - VeriSign Class 3 Public PCA ? G2
  - CA Disig
  * The following CA certificates were Added
    + SZAFIR ROOT CA2
    + Certum Trusted Network CA 2
  * The following CA certificate had the Email trust bit turned on
    + Actalis Authentication Root CA
  Security fixes:
  * CVE-2016-2834: Memory safety bugs (boo#983639)
    MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch</changelog>
<changelog author="wr@rosenauer.org" date="1469880000">- update to NSS 3.24
  New functionality:
  * NSS softoken has been updated with the latest National Institute
    of Standards and Technology (NIST) guidance (as of 2015):
  - Software integrity checks and POST functions are executed on
    shared library load. These checks have been disabled by default,
    as they can cause a performance regression. To enable these
    checks, you must define symbol NSS_FORCE_FIPS when building NSS.
  - Counter mode and Galois/Counter Mode (GCM) have checks to
    prevent counter overflow.
  - Additional CSPs are zeroed in the code.
  - NSS softoken uses new guidance for how many Rabin-Miller tests
    are needed to verify a prime based on prime size.
  * NSS softoken has also been updated to allow NSS to run in FIPS
    Level 1 (no password). This mode is triggered by setting the
    database password to the empty string. In FIPS mode, you may move
    from Level 1 to Level 2 (by setting an appropriate password),
    but not the reverse.
  * A SSL_ConfigServerCert function has been added for configuring
    SSL/TLS server sockets with a certificate and private key. Use
    this new function in place of SSL_ConfigSecureServer,
    SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
    and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
    determines the certificate type from the certificate and private key.
    The caller is no longer required to use SSLKEAType explicitly to
    select a "slot" into which the certificate is configured (which
    incorrectly identifies a key agreement type rather than a certificate).
    Separate functions for configuring Online Certificate Status Protocol
    (OCSP) responses or Signed Certificate Timestamps are not needed,
    since these can be added to the optional SSLExtraServerCertData struct
    provided to SSL_ConfigServerCert.  Also, partial support for RSA
    Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
    Although these certificates can be configured, they will not be
    used by NSS in this version.
  New functions
  * SSL_ConfigServerCert - Configures an SSL/TLS socket with a
    certificate, private key, and other information.
  * PORT_InitCheapArena - Initializes an arena that was created on
    the stack. (See PORTCheapArenaPool.=
  * PORT_DestroyCheapArena - Destroys an arena that was created on
    the stack. (See PORTCheapArenaPool.)
  New types
  * SSLExtraServerCertData - Optionally passed as an argument to
    SSL_ConfigServerCert. This struct contains supplementary information
    about a certificate, such as the intended type of the certificate,
    stapled OCSP responses, or Signed Certificate Timestamps (used for
    certificate transparency).
  * PORTCheapArenaPool - A stack-allocated arena pool, to be used for
    temporary arena allocations.
  New macros
  * CKM_TLS12_MAC
  * SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
    TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
    only for session resumption in TLS 1.3.
  Notable changes:
  * Deprecate the following functions. (Applications should instead use the new
    SSL_ConfigServerCert function.):
  - SSL_SetStapledOCSPResponses
  - SSL_SetSignedCertTimestamps
  - SSL_ConfigSecureServer
  - SSL_ConfigSecureServerWithCertChain
  * Deprecate the NSS_FindCertKEAType function, as it reports a misleading
    value for certificates that might be used for signing rather than
    key exchange.
  * Update SSLAuthType to define a larger number of authentication key types.
  * Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
    Instead, applications should use the newly added attribute authType.
  * Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
  * Add a shared library (libfreeblpriv3) on Linux platforms that
    define FREEBL_LOWHASH.
  * Remove most code related to SSL v2, including the ability to actively
    send a SSLv2-compatible client hello. However, the server-side
    implementation of the SSL/TLS protocol still supports processing
    of received v2-compatible client hello messages.
  * Disable (by default) NSS support in optimized builds for logging SSL/TLS
    key material to a logfile if the SSLKEYLOGFILE environment variable
    is set. To enable the functionality in optimized builds, you must define
    the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
  * Update NSS to protect it against the Cachebleed attack.
  * Disable support for DTLS compression.
  * Improve support for TLS 1.3. This includes support for DTLS 1.3.
    Note that TLS 1.3 support is experimental and not suitable for
    production use.
- removed obsolete nss-bmo1236011.patch</changelog>
<changelog author="wr@rosenauer.org" date="1470312000">- also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236)</changelog>
<changelog author="wr@rosenauer.org" date="1471867200">- fix build on certain toolchains (nss-uninitialized.patch)
  jarfile.c:805:13: error: 'it' may be used uninitialized in this
  function [-Werror=maybe-uninitialized]</changelog>
<changelog author="wr@rosenauer.org" date="1471867201">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
<changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
<changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
<changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
<changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
<changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.28.4
  * A rare crash when initializing an SSL socket fails has been fixed
    (bmo#1342358)
  * Rare crashes in the base 64 decoder and encoder were fixed
    (bmo#1344380)
  * A carry over bug in the RNG was fixed (bmo#1345089)
- Add nss-fix-hash.patch to fix hash computation
  (boo#1030071, bmo#1348767)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695)</changelog>
<changelog author="wr@rosenauer.org" date="1497441600">- update to NSS 3.28.5
  * Implemented domain name constraints for CA: TUBITAK Kamu SM SSL
    Kok Sertifikasi - Surum 1. (bmo#1350859)
  * March 2017 batch of root CA changes (bmo#1350859) (version 2.14)
    CA certificates removed:
    O = Japanese Government, OU = ApplicationCA
    CN = WellsSecure Public Root Certificate Authority
    CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
    CN = Microsec e-Szigno Root
    CA certificates added:
    CN = D-TRUST Root CA 3 2013
    CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
<changelog author="wr@rosenauer.org" date="1506686400">- update to NSS 3.28.6 (boo#1060445)
  * CVE-2017-7805 (bmo#1377618) (boo#1061005)
    Use-after-free in TLS 1.2 generating handshake hashes</changelog>

</package>
<package pkgid="7996473ea486ea1e760d527d4dd89533572632900c3e21415ba08e03aadf46c3" name="mpg123" arch="src">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="11df2df6e5860a2748052bdaaa9bdea13e9293d1e08bf6a8e9ff1541d22ee35e" name="mpg123" arch="src">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="6eda7f33bc818089fcc50770685ba70b2159b4a85c3ccec225593928287c7360" name="mpg123" arch="src">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="80f5a816de42f6ae5d6dbb8c45bbfa810f4eb59a07a011294f64d66eeac91e63" name="mpg123" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="66f5aedd274c578ec610c9e8c76b008cae4d8e5850a39887b7c52061cdc7fe4b" name="mpg123" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="5a63a8599c1d007e6b164cf6209952d5e79776945ad194bab9fcd52931c33b27" name="mpg123" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="d034f9cc213eddbe0044bc7271e3329a556062f8bd2715a50a9585d255b24331" name="mpg123-devel" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="4d68e0d79fb6e460915a00243fcec632e4852a30d9351bcc20ca8f39bcba1b68" name="mpg123-devel" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="fe1124be4fd7d59bd30b80bd2870601979ed6e9d018a14c00311149f1d219240" name="mpg123-devel" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="a8594517bb5aa85ff48b5021e75769e942c51d4a64ce4abdbf0e9d3d4b8708c5" name="mpg123-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="d0cc24bb235ef463ff973972aeec250214741e8473e8bf34c21bf28027b87279" name="mpg123-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="30f2ef7401b14833b7d008f80f2cebb917fd16f0780ae31dfb70f9f137e29706" name="mpg123-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="df999b96017751ea037b59a76d9d8978a87478ddb5115350df0351e1c969e26e" name="mpg123-esound" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="95931242cb33fd870af7f49bd77ab082c28c7c1887e3ea96038c909ea38dfce2" name="mpg123-esound" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="e5dad7add796beb2ec7d4e8a508cd61f6bcc09e07e553be9a568bdb23c2fefb1" name="mpg123-esound" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="baf697902ae284711e6a17a5e6f33543d6ee6927cb5cb478d71f8d7390a145d8" name="mpg123-esound-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="5b477dbe34e6372a51a209034df16a1ae05258a0f082ccf960e3fbc9de9a565d" name="mpg123-esound-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="7b876dc6dead9bf1a8e22145cd5ffb0b54a1511ef03519edb60e173b0aebeeba" name="mpg123-esound-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="03fe22ac39d01e38929c84f7dc0ffb80d1d67911d67081a1246e76480dfeb86f" name="mpg123-jack" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="b89eda50deb74e13e1ab4fd94bfc02300a85b4f4914c221c3783af55411075d3" name="mpg123-jack" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="f4476587ce9f0fe712023499f44a92f79c5f02385cde033ebf173bdd9da9e16e" name="mpg123-jack" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="f8333c6be932d213025e99d5ac09e5e57d0ee59f61bd50149b6aa1820d4a7ca5" name="mpg123-jack-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="25d214b60ad092ecae58be565a4a235c7a9d19f028cb501d2f1a739d53150beb" name="mpg123-jack-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="29306cc81672f6717acf8dfdc08beec1fb36421c3f4e2e9abf66d576bedcd262" name="mpg123-jack-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="36ce635cfaca9856565217dbfeb6a90a3513bf38f37c8d831b727eb056744562" name="mpg123-openal" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="d51d4a8f2464fbacaab2971ce398598a0cf571a5d334a7b3012c3cea44b1db9f" name="mpg123-openal" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="573e7ce2325b4e8b4178534f8ea675dd43d4b0a88788a849a9cb0f63cdb1cb23" name="mpg123-openal" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="639ef73df4993e243fcc23c349fde3fd2f6feac281df5b673a7961e70e0a040e" name="mpg123-openal-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="7e85014d25a3e4ddc37640bbbdc5aeb776e44da81c755c47381f4ca9da6cba0a" name="mpg123-openal-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="68a40e80c3d5c9fe6c7ce8c51b4fbf8ea5e427b82a5b596788319fcc8a03c348" name="mpg123-openal-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="918b0170b3e69b828438db784c2079c0b8b4f2b3f4492076d1585e7882e7d872" name="mpg123-portaudio" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="f1592b546708ecb839ebe5aba395006d1aa704c73f3f6984d035a4b7da7744c6" name="mpg123-portaudio" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="5ac34f1d962e3727bbaf03d82cfcd5886dc1d12c7c28b34905e0c816c19dd3c0" name="mpg123-portaudio" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="734d7c7d58e63991e433cff12abfbde667cc2ff430ae3052d0b78eeaa267c411" name="mpg123-portaudio-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="96502f38248a4cd525f6cad38539e909aaf89bfe70e27416048938baf50326c9" name="mpg123-portaudio-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="d4487c3c8d89dc0137c803b9481da7e9d51172333e9e245c9a648dcea2bb803c" name="mpg123-portaudio-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="2feb4b2408ebcfd7c968d339a4cab8166437db4f62f0e39a8b3c1cb8c90ed113" name="mpg123-pulse" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="c5d35bfd91ef70c156ec82eb2bc20b563b778d346dc12b2499fb58ce4d64c406" name="mpg123-pulse" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="826ebf3e153bf77c660e508137201964135d91ba07cc3e0379d92922aded8a16" name="mpg123-pulse" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="02a2c9471286ddb01d4bb8a67a506cd318c8eba8345c5dff067249813aec3795" name="mpg123-pulse-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="6d5d2b4af15d23b8004c5f020f2b1fe7f6d477f455bc288e333c619e763ff057" name="mpg123-pulse-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="3142c64caf3324daa9f63d789c083b918e545b72a8fde7a8be9c9bbc28338f79" name="mpg123-pulse-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="554b589f636e5f1cfdcb98c04c1415f09b2b45013ceef8f07a40187740fed299" name="mpg123-sdl" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="1fb8955c6cd57eee3eeedf7f995a6227111f6377ffee4d3ef339765e6be21420" name="mpg123-sdl" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="5a3e839d88c9f9a9ecfafbf1b8a5cebf581c562ed55c9303d9a969ab73f71f21" name="mpg123-sdl" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="7318d9b35e59d05e0f448569cd56d65925115f43dfa92a6a35cb6872e4e81cf1" name="mpg123-sdl-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.3" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>

</package>
<package pkgid="f5424ba17c8abfa5bd37d309817af7d36b3cf012d8f56dfba2fbf25c9a8851fc" name="mpg123-sdl-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.6" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>

</package>
<package pkgid="19118bd2719438067dba2427b7dfb3d3dffcfc83a50e319cab0d0f90387fb8f4" name="mpg123-sdl-32bit" arch="x86_64">
    <version epoch="0" ver="1.25.7" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1478865600">- Initial package for openSUSE Tumbleweed, version 1.23.8.</changelog>
<changelog author="aloisio@gmx.com" date="1488715200">- Update to version 1.24.0
  * Avoid repeating genre in metadata printout for
    specifications like (144)Thrash Metal.
  * In remote control mode, only enforce --quiet if no
    verbosity was required.
  * Prevent --loop and --shuffle or --random from messing with
    the remote control LOADLIST command (printout of the list
    would loop without reason).
  * Fix the mpg123 command (esp. our provided binaries on
    Windows) to now find modules again relative to the
    executable directory, not the current working directory.
    This was a regression in 1.23 and might be security-relevant
    if you called mpg123 in working directories with untrusted
    content. Note that mpg123 1.23 looked for modules relative
    to the current working directory only if the installation
    prefix for modules did not exist. So, usage on an intact
    installation (with /usr/lib/mpg123 or the like) was safe.
    Nevertheless this new version fixes the search to be
    relative to the binary path as it was with 1.22 and before.
  * At least consistent behaviour of playlist code in the face
    of looping. Looping is about individual tracks, always.
    They are looped also in random mode. Jumping (prev/next
    keys) is between tracks and resets the loop counter.
    The display of currently playing track in the playlist is
    fixed for random and looped play now (bug 198).
  * Looping is now mentioned for a to-be-repeated track with
  - -verbose.
  * Move some compiler nagging from --enable-debug to
  - -enable-nagging, fix up some new build failures by adding
    some pesky feature test macros.
  * Try not to pollute the terminal buffer with old progress
    bars in inverse video. Only the currently live one shall
    be seen. That one is pretty. The others are not.
  * Using plain dlopen()/LoadLibrary() for opening modules
    instead of libltdl. This also means that
  - -with-module-suffix is gone in configure.
  * Windows builds only work when Unicode support is there
    (older than Windows 2000/XP will definitely not work
    anymore).
  * The out123 tool now features tone generation, with a mix
    of differing wave patterns. Makes sense to be able to test
    the audio  output by itself, and it's fun. See --wave-freq
    and related parameters.
  * libmpg123 version 43:
    + Add flags MPG123_NO_PEEK_END and MPG123_FORCE_SEEKABLE,
    as suggested by Bent Bisballe Nyeng.
    + Build fix for MSVC (consistent definition of ssize_t,
    spotted by manx, bug 243).
    + Build fix for --with-cpu=ppc_nofpu (thanks to Michael
    Kostylev, bug 244).
    + Add asm optimized MSVC++ Win32|x64 and UWP|x64 builds
    + Remove old, broken MSVC++ builds
  * libout123 version 2:
    + Added OUT123_BINDIR.
    + New search order for output plugin directory:
    MPG123_MODDIR, or (relative to executable directory
    OUT123_BINDIR) ../lib/mpg123, plugins
    libout123/modules/.libs, libout123/modules,
    ../libout123/modules/.libs, ../libout123/modules, and at
    last the installation prefix $libdir/mpg213/. This shall
    ensure that a build inside a source tree does not try to
    use old modules from the system prefix. The normal libtool
    wrapper deals with the shared libout123 or libmpg123 only,
    not modules. Note that if you set MPG123_MODDIR to a
    non-existing directory, no modules will be found (earlier
    versions fell back to other choices).
    + The OUT123_NAME parameter is now copied by
    out123_param_from(), as is the newly added OUT123_BINDIR.
    + Coreaudio: Use AudioComponents API on OSX &gt;= 10.6 (thanks
    to Michael Weiser).
    + Coreaudio: Fix behaviour of out123_drop(), not killing
    the output anymore without re-opening the device (bug 236,
    thanks to Taihei for the fix).
- Build esound, pulse, jack, portaudio, sdl modules and created
  package for each of them.</changelog>
<changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of description</changelog>
<changelog author="aloisio@gmx.com" date="1490270400">- Create mpg123-openal as separate package
- Added Supplements lines for some subpackages</changelog>
<changelog author="meissner@suse.com" date="1493553600">- add a baselibs.conf, so 32bit wine can use it or even
  build against it.</changelog>
<changelog author="mpluskal@suse.com" date="1494936000">- Update baselibs.conf</changelog>
<changelog author="meissner@suse.com" date="1494936001">- dont require mpg123-32bit, it is not present</changelog>
<changelog author="aloisio@gmx.com" date="1499083200">- Update to version 1.25.1
  * libmpg123:
    + Avoid memset(NULL, 0, 0) to calm down the paranoid.
    + Fix bug 252, invalid read of size 1 in ID3v2 parser due to
    forgotten offset from the frame flag bytes (unnoticed in
    practice for a long time). Fuzzers are in the house again.
    This one got CVE-2017-10683.
    + Avoid a mostly harmless conditional jump depending on
    uninitialised fr-&gt;lay in compute_bpf() (mpg123_position())
    when track is not ready yet.
    + Fix undefined shifts on signed long mask in layer3.c
    (worked in practice, never right in theory). Code might be
    a bit faster now, even. Thanks to Agostino Sarubbo for
    reporting.
  1.25.0:
  * Silence test for artsc-config if it is not there.
  * Make sure -static-libgcc from LDFLAGS gets through libtool,
    fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
  * Fix build with non-GNU make by using plain rm -f instead of
    silly $(RM) in libout123/modules makefile fragment.
  * Make build work on iOS, including coreaudio backend.
  * libmpg123:
    + Finally provide position-independent code for x86 with
    assembly optimisations.The textrels are gone thanks to Won
    Kyu Park and Taihei Momma.
    + Clarify some license language in files descending from the
    original MMX optimisation.
    + Fix return value overflow check for MPG123_BUFFERFILL.
    + Introduced mpg123_getformat2() to enable the FORMAT command
    for the generic control not stealing MPG123_NEW_FORMAT from
    the main playback loop. The sequence LOADPAUSED-FORMAT-PAUSE
    (play) is supposed to work now.
    + Enable aarch64 optimisations on *BSD by default, too. You
    can always override that stupid OS whitelist using
  - -with-optimization, anyway.
    + Use of the i486 decoder is now discouraged more
    prominently, in configure output.
  * out123: Fix stupid crash with verbose mode and tone
    generation (print the string if the pointer is non-null, not if
    it is null).
  * libout123: More consistent error messages for dynamic and
    legacy (built-in) modules. Namely, you get a hint how if you
    choose a different module than the built-in ones for a static
    libout123.
- Fixes (boo#1046766)</changelog>
<changelog author="aloisio@gmx.com" date="1499774400">- Update to version 1.25.2
  libmpg123:
  * Extend pow tables for layer III to properly handle files
    with i-stereo and 5-bit scalefactors. Never observed them
    for real, just as fuzzed input to trigger the read overflow.
    Note: This one goes on record as CVE-2017-11126, calling
    remote denial of service. While the accesses are out of
    bounds for the pow tables, they still are safely within
    libmpg123's memory (other static tables). Just wrong values
    are used for computation, no actual crash unless you use
    something like GCC's AddressSanitizer, nor any information
    disclosure.
  * Avoid left-shifts of negative integers in layer I decoding.</changelog>
<changelog author="aloisio@gmx.com" date="1500379200">- Update to version 1.25.3
  libmpg123:
  * Better checks for xrpnt overflow in III_dequantize_sample()
    before each use, avoiding false positives and catching cases
    that were rendered harmless by alignment-enlarged buffers.</changelog>
<changelog author="aloisio@gmx.com" date="1500897600">- Update to version 1.25.4
  libmpg123:
  * Prevent harmless call to memcpy(NULL, NULL, 0).
  * More early checking of ID3v2 encoding values to avoid bogus
    text being stored.</changelog>
<changelog author="aloisio@gmx.com" date="1502193600">- Update to version 1.25.5
  * Avoid another buffer read overflow in the ID3 parser on 32 bit
    platforms (bug 254). (CVE-2017-12797/boo#1056999)</changelog>
<changelog author="aloisio@gmx.com" date="1502452800">- Update to version 1.25.6
  * Hotfix for bug 255: Overflow reading frame data bits in layer
    II decoding. Now, all-zero data is returned if the frame data
    is exhausted. This might have a slight impact on performance,
    but not easily measurable so far.</changelog>
<changelog author="aloisio@gmx.com" date="1507118400">- Update to version 1.25.7
  mpg123:
  * Do not play with cursor and inverse video for progress bar
    when TERM=dumb.
  * Fix parsing of host port for numerical IPv6 addresses (just did
    not work before, only for textual host names).
  libmpg123:
  * Proper fix for the xrpnt overflow problems by correctly
    initialising certain tables for MPEG 2.x layer III. The checks
    that catch the resulting overflow are still in place, but
    likely superfluous now. Note that this means certain valid
    files would have been misdecoded before, if anyone actually
    produced them. Thanks to Robert Hegemann for the fix!
  * Silently handle granules with part2_3_length == 0, but
    scalefac_compress != 0 (ignore the latter).</changelog>

</package>
<package pkgid="18cfba161584bed7bd30d321922fa325780b544a2c32efc8dcf55ad59e2938d5" name="multipath-tools" arch="src">
    <version epoch="0" ver="0.7.1+11+suse.246dd815" rel="3.1"/>

<changelog author="hare@suse.de" date="1472040000">- multipathd: start daemon after udev trigger (bsc#986734)
- Load device handler and multipath module at boot (bsc#991634)</changelog>
<changelog author="hare@suse.de" date="1472212800">- multipath: fixup check from udev rules (bsc#986734)</changelog>
<changelog author="hare@suse.de" date="1472212801">- Fixup module name in /usr/lib/modules-load.d (bsc#986734)</changelog>
<changelog author="jthumshirn@suse.com" date="1472472000">- libmultipath: fall back to search paths by devt (bsc#995645)</changelog>
<changelog author="hare@suse.de" date="1473336000">- Fixup glitch from patch 'fixup check from udev rules' (bsc#986734)
- Remove 0001-libmultipath-fall-back-to-search-paths-by-devt.patch;
  integrated into git repository</changelog>
<changelog author="hare@suse.de" date="1474286400">- libmultipath: Do not crash on empty features (bsc#994812)
- multipathd: Set CLI timeout correctly (bsc#999061)
- Moved multipath-tools repository to
  github.com:/openSUSE/multipath-tools.git</changelog>
<changelog author="hare@suse.de" date="1475064000">- multipath: avoid crash when using modified configuration
  (bsc#1000914)</changelog>
<changelog author="hare@suse.de" date="1475150400">- Implement support for 'multipath=off' and 'nompath'
  kernel commandline options (bsc#1001691)</changelog>
<changelog author="mwilck@suse.com" date="1475150401">- Update to version 0.6.2+suse20160928.8939fb6</changelog>
<changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous PreReq for insserv and fillup</changelog>
<changelog author="mwilck@suse.com" date="1488283200">- Update to version 0.6.4+101.f01ef4da (SLES12 SP2 changes wrt upstream):
  * Make libdmmp build optional
  * multipath.rules: use -i flag to multipath
  * kpartx: create symlinks for dmraid devices
  * kpartx: Add udev compability rules for SUSE
  * libmultipath/checkers: make RADOS checker optional
  * multipathd: fixup check for new path states (bsc#1019798)
  * tur: Add pthread_testcancel() (bsc#101979)
  * kpartx: sanitize delete partitions (bsc#100869)
  * libmultipath: coalesce_paths: trigger uevent if nothing done
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: differentiate ACT_NOTHING and ACT_IMPOSSIBLE
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: reload map if not known to udev
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: sysfs_attr_set_value: use const char*
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: select_action: check special features separately
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: treat aminio like assemble_map does
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: skip no_path_retry check
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: handle "retain_attached_hw_handler"
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: print log msg if no_path_retry cant be set
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_features: log msg if queue_if_no_path is ignored
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: use weaker "force_reload" at startup
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: imply -n if find_multipaths is set (bsc#1012910)
  * multipath: ignore -i if find_multipaths is set (bsc#1012910)
  * libmultipath: move suspend logic to _dm_flush_map (bsc#986838)
  * multipath -ll: set DI_SERIAL (bsc#991432)
  * libmultipath: use existing alias from bindings file (bsc#1005255)
  * libmultipath/discovery: do not cache 'access_state' sysfs attribute (bsc#1004858)
  * multipathd: issue systemd READY after initial configuration (bsc#1006469)
  * multipath: avoid crash when using modified configuration (bsc#1000914)
  * multipathd: Set CLI timeout correctly (bsc#999061)
  * libmultipath: Do not crash on empty features (bsc#994812)
  * libmultipath: fall back to search paths by devt (bsc#995645)
  * multipathd: set timeout for CLI commands correctly (bsc#999061)
  * Invalid error code when using multipathd CLI
  * multipath: do not check daemon from udev rules (bsc#986734)
  * Add support for "multipath=off" and "nompath" on kernel cmdline
  * multipathd: start daemon after udev trigger (bsc#98673)
  * multipathd.service: fixup Wants= and Before= statements (bsc#1019181, bsc#991742, bsc#986734)
- Update to current upstream (0.6.4-65-ga2675025)
  * Avoid that reloading a map sporadically triggers I/O errors
  * fix udev rules for failed multipath devices
  * multipathd: allow resetting stats
  * multipathd: add messages on delayed path addition
  * multipathd: don't update priority of failed paths
  * libmultipath: cleanup orphan device states
  * libmultipath: add detect_checker option
  * kpartx: don't keep creating recursive partitions
  * multipath-tools: Introducing multipath C API
  * multipath-tools: sync valgrind.h with 3.12 upstream
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * Fill NVMe specific path info
  * Don't blacklist nvme
  * multipath-tools: fix misspellings
  * multipath-tools: git should ignore rej and orig files
  * Include sys/sysmacros.h
  * Tolerate modprobe failures in multipathd.service
  * multipath-tools: Remove trailing and leading whitespaces
  * multipath-tools: Perform socket client uid check on IPC commands.
  * multipath-tools: Set errno mpath_recv_reply() when failure
  * multipath-tools: New way to limit the IPC command length.
  * multipath-tools: libmultipath: Removed unused functions.
  * multipath-tools: libmultipath: fix gcc link failure on rcu_register_thread_mb.
  * multipath-tools: multipathd: Fix memory leak on load_config().
  * [multipathd] Remove trailing whitespaces
  * multipathd: deterministic io throughput in multipath</changelog>
<changelog author="mwilck@suse.com" date="1488283201">- Update to version 0.6.4+102.df7d367e:
  * libmultipath/propsel: Do not select sysfs prioritizer for RDAC arrays
    (bsc#1004858)</changelog>
<changelog author="mwilck@suse.com" date="1488369600">- spec file changes: optional librados and libdmmp support
  * enabled by default on Factory and Leap
    (disable with --without-rados, --without-libdmmp)
  * disabled by default on SLES12
    (enable with --with-rados, --with-libdmmp)
  * libdmmp0_1_0 and libdmmp-devel as separate packages
  * minor fixes for RPMLINT warnings
- Update to version 0.6.4+102.0119472d:
  * rebased, code-wise identical to previous checkout</changelog>
<changelog author="mwilck@suse.com" date="1489147200">- Spec file: Added dependency on sg3_utils (#boo1028857)</changelog>
<changelog author="mwilck@suse.com" date="1489147201">- Update to version 0.6.4+103+suse.bcb5d0f4:
  * changed to official github repo openSUSE/multipath-tools
    (no changes code-wise)</changelog>
<changelog author="mwilck@suse.com" date="1490097600">- Spec file: disable librados for architectures for which ceph
  is not built
- Spec file: enable librados by default for SLES12 SP3, disable
  it on Leap &lt;= 42.1
- Update to version 0.6.4+104+suse.ac0df678:
  * multipathd: fix SIGUSR2 handling</changelog>
<changelog author="mwilck@suse.com" date="1490270400">- Enable rados for SLES only for x86_64 and aarch64 (ceph is currently
  disabled on SLES on s390x and ppc64le) (bsc#1030699)
- Downgrade to version 0.6.4+103+suse.bcb5d0f4:
  * temporarily remove commit "multipathd: fix SIGUSR2 handling"
  until it's merged in official repo (bsc#1030699)</changelog>
<changelog author="mwilck@suse.com" date="1490356800">- spec file changes suggested by factory review team (bsc#1030699)
  * RPM group adjustments.
  * Avoid %__ macro indirections</changelog>
<changelog author="mwilck@suse.com" date="1493294400">- spec file: Disable RADOS support for i586 on Leap 42.x (bsc#1036271)
- spec file: Move libdmmp to /usr/lib[64] (bsc#1036652)
- Update to version 0.7.1+7+suse.3edc5f7d:
  * kpartx: use mapname if no uuid is present (bsc#1033541)
  * kpartx: relax check when checking for a kpartx device (bsc#1033541)
  * libmpathpersist: use extern struct udev (bsc#1027188)
  * kpartx: include sys/sysmacros.h (fix compilation warning)
- Update to upstream version 0.7.1:
  * multipath-tools: improve processing efficiency for addition and deletion of multipath devices
  * uevent_can_discard: optimize devpath check
  * multipathd: fix SIGUSR2 handling
  * multipath-tools: clean up libdmmp/Makefile
  * multipath-tools: libdmmp: Fix incorrect use of __attribute__
  * multipath-tools: Remove trailing whitespaces
  * multipath-tools: add missing "-l" flag for pthread in libdmmp/Makefile
  * multipath-tools: build objects for libdmmp and libmpathpersist independently
  * libdmmp: minor Makefile cleanup
  * multipath-tools: remove incdir from Makefiles
  * libdmmp: don't disconnect from multipathd twice
  * multipathd: don't call strlen on NULL variables
  * libdmmp: move libdmmp.pc install location
  * multipathd: drop lock before calling uev_add_path
  * multipathd: allow devices to switch from RW to RO
  * libmultipath: don't set max_sectors_kb on reloads
  * Remove a trailing tab
  * multipath: fix segfault with disable_changed_wwids
  * multipath-tools: amend text from multipath/multipath.conf.5
  * Bump the version code and date
  * multipath-tools: replace multipath configuration output
  * Revert "multipathd: set timeout for CLI commands correctly"
  * libmultipath: fix skip_kpartx support for removing maps
  * Bump version to 0.7.1</changelog>
<changelog author="mwilck@suse.com" date="1500552000">- Update to version 0.7.1+11+suse.246dd815
  * libmultipath: get_udev_uid: make sure pp-&gt;wwid is 0-terminated
  (bsc#1048146)
  * libmultipath: drop uevent_can_discard_by_devpath (bsc#1048052)
  * libmultipath: only listen for uevents with DEVTYPE=disk
  (bsc#1048052)
  * libmultipath: fix over-long NVME WWIDs
  (bsc#1048146)
- _service: Pull this from the branch sles12-sp3-fixes (minimal set
  of fixes against SLE12-SP3 RC2). Use match-tag to generate correct
  version</changelog>

</package>
<package pkgid="6ad342aa1aebd5ecf47c47a6cec771c6b7d9ad906b1aaf5dd573a2eadd6f8355" name="multipath-tools" arch="x86_64">
    <version epoch="0" ver="0.7.1+11+suse.246dd815" rel="3.1"/>

<changelog author="hare@suse.de" date="1472040000">- multipathd: start daemon after udev trigger (bsc#986734)
- Load device handler and multipath module at boot (bsc#991634)</changelog>
<changelog author="hare@suse.de" date="1472212800">- multipath: fixup check from udev rules (bsc#986734)</changelog>
<changelog author="hare@suse.de" date="1472212801">- Fixup module name in /usr/lib/modules-load.d (bsc#986734)</changelog>
<changelog author="jthumshirn@suse.com" date="1472472000">- libmultipath: fall back to search paths by devt (bsc#995645)</changelog>
<changelog author="hare@suse.de" date="1473336000">- Fixup glitch from patch 'fixup check from udev rules' (bsc#986734)
- Remove 0001-libmultipath-fall-back-to-search-paths-by-devt.patch;
  integrated into git repository</changelog>
<changelog author="hare@suse.de" date="1474286400">- libmultipath: Do not crash on empty features (bsc#994812)
- multipathd: Set CLI timeout correctly (bsc#999061)
- Moved multipath-tools repository to
  github.com:/openSUSE/multipath-tools.git</changelog>
<changelog author="hare@suse.de" date="1475064000">- multipath: avoid crash when using modified configuration
  (bsc#1000914)</changelog>
<changelog author="hare@suse.de" date="1475150400">- Implement support for 'multipath=off' and 'nompath'
  kernel commandline options (bsc#1001691)</changelog>
<changelog author="mwilck@suse.com" date="1475150401">- Update to version 0.6.2+suse20160928.8939fb6</changelog>
<changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous PreReq for insserv and fillup</changelog>
<changelog author="mwilck@suse.com" date="1488283200">- Update to version 0.6.4+101.f01ef4da (SLES12 SP2 changes wrt upstream):
  * Make libdmmp build optional
  * multipath.rules: use -i flag to multipath
  * kpartx: create symlinks for dmraid devices
  * kpartx: Add udev compability rules for SUSE
  * libmultipath/checkers: make RADOS checker optional
  * multipathd: fixup check for new path states (bsc#1019798)
  * tur: Add pthread_testcancel() (bsc#101979)
  * kpartx: sanitize delete partitions (bsc#100869)
  * libmultipath: coalesce_paths: trigger uevent if nothing done
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: differentiate ACT_NOTHING and ACT_IMPOSSIBLE
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: reload map if not known to udev
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: sysfs_attr_set_value: use const char*
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: select_action: check special features separately
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: treat aminio like assemble_map does
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: skip no_path_retry check
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: handle "retain_attached_hw_handler"
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: print log msg if no_path_retry cant be set
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_features: log msg if queue_if_no_path is ignored
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: use weaker "force_reload" at startup
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: imply -n if find_multipaths is set (bsc#1012910)
  * multipath: ignore -i if find_multipaths is set (bsc#1012910)
  * libmultipath: move suspend logic to _dm_flush_map (bsc#986838)
  * multipath -ll: set DI_SERIAL (bsc#991432)
  * libmultipath: use existing alias from bindings file (bsc#1005255)
  * libmultipath/discovery: do not cache 'access_state' sysfs attribute (bsc#1004858)
  * multipathd: issue systemd READY after initial configuration (bsc#1006469)
  * multipath: avoid crash when using modified configuration (bsc#1000914)
  * multipathd: Set CLI timeout correctly (bsc#999061)
  * libmultipath: Do not crash on empty features (bsc#994812)
  * libmultipath: fall back to search paths by devt (bsc#995645)
  * multipathd: set timeout for CLI commands correctly (bsc#999061)
  * Invalid error code when using multipathd CLI
  * multipath: do not check daemon from udev rules (bsc#986734)
  * Add support for "multipath=off" and "nompath" on kernel cmdline
  * multipathd: start daemon after udev trigger (bsc#98673)
  * multipathd.service: fixup Wants= and Before= statements (bsc#1019181, bsc#991742, bsc#986734)
- Update to current upstream (0.6.4-65-ga2675025)
  * Avoid that reloading a map sporadically triggers I/O errors
  * fix udev rules for failed multipath devices
  * multipathd: allow resetting stats
  * multipathd: add messages on delayed path addition
  * multipathd: don't update priority of failed paths
  * libmultipath: cleanup orphan device states
  * libmultipath: add detect_checker option
  * kpartx: don't keep creating recursive partitions
  * multipath-tools: Introducing multipath C API
  * multipath-tools: sync valgrind.h with 3.12 upstream
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * Fill NVMe specific path info
  * Don't blacklist nvme
  * multipath-tools: fix misspellings
  * multipath-tools: git should ignore rej and orig files
  * Include sys/sysmacros.h
  * Tolerate modprobe failures in multipathd.service
  * multipath-tools: Remove trailing and leading whitespaces
  * multipath-tools: Perform socket client uid check on IPC commands.
  * multipath-tools: Set errno mpath_recv_reply() when failure
  * multipath-tools: New way to limit the IPC command length.
  * multipath-tools: libmultipath: Removed unused functions.
  * multipath-tools: libmultipath: fix gcc link failure on rcu_register_thread_mb.
  * multipath-tools: multipathd: Fix memory leak on load_config().
  * [multipathd] Remove trailing whitespaces
  * multipathd: deterministic io throughput in multipath</changelog>
<changelog author="mwilck@suse.com" date="1488283201">- Update to version 0.6.4+102.df7d367e:
  * libmultipath/propsel: Do not select sysfs prioritizer for RDAC arrays
    (bsc#1004858)</changelog>
<changelog author="mwilck@suse.com" date="1488369600">- spec file changes: optional librados and libdmmp support
  * enabled by default on Factory and Leap
    (disable with --without-rados, --without-libdmmp)
  * disabled by default on SLES12
    (enable with --with-rados, --with-libdmmp)
  * libdmmp0_1_0 and libdmmp-devel as separate packages
  * minor fixes for RPMLINT warnings
- Update to version 0.6.4+102.0119472d:
  * rebased, code-wise identical to previous checkout</changelog>
<changelog author="mwilck@suse.com" date="1489147200">- Spec file: Added dependency on sg3_utils (#boo1028857)</changelog>
<changelog author="mwilck@suse.com" date="1489147201">- Update to version 0.6.4+103+suse.bcb5d0f4:
  * changed to official github repo openSUSE/multipath-tools
    (no changes code-wise)</changelog>
<changelog author="mwilck@suse.com" date="1490097600">- Spec file: disable librados for architectures for which ceph
  is not built
- Spec file: enable librados by default for SLES12 SP3, disable
  it on Leap &lt;= 42.1
- Update to version 0.6.4+104+suse.ac0df678:
  * multipathd: fix SIGUSR2 handling</changelog>
<changelog author="mwilck@suse.com" date="1490270400">- Enable rados for SLES only for x86_64 and aarch64 (ceph is currently
  disabled on SLES on s390x and ppc64le) (bsc#1030699)
- Downgrade to version 0.6.4+103+suse.bcb5d0f4:
  * temporarily remove commit "multipathd: fix SIGUSR2 handling"
  until it's merged in official repo (bsc#1030699)</changelog>
<changelog author="mwilck@suse.com" date="1490356800">- spec file changes suggested by factory review team (bsc#1030699)
  * RPM group adjustments.
  * Avoid %__ macro indirections</changelog>
<changelog author="mwilck@suse.com" date="1493294400">- spec file: Disable RADOS support for i586 on Leap 42.x (bsc#1036271)
- spec file: Move libdmmp to /usr/lib[64] (bsc#1036652)
- Update to version 0.7.1+7+suse.3edc5f7d:
  * kpartx: use mapname if no uuid is present (bsc#1033541)
  * kpartx: relax check when checking for a kpartx device (bsc#1033541)
  * libmpathpersist: use extern struct udev (bsc#1027188)
  * kpartx: include sys/sysmacros.h (fix compilation warning)
- Update to upstream version 0.7.1:
  * multipath-tools: improve processing efficiency for addition and deletion of multipath devices
  * uevent_can_discard: optimize devpath check
  * multipathd: fix SIGUSR2 handling
  * multipath-tools: clean up libdmmp/Makefile
  * multipath-tools: libdmmp: Fix incorrect use of __attribute__
  * multipath-tools: Remove trailing whitespaces
  * multipath-tools: add missing "-l" flag for pthread in libdmmp/Makefile
  * multipath-tools: build objects for libdmmp and libmpathpersist independently
  * libdmmp: minor Makefile cleanup
  * multipath-tools: remove incdir from Makefiles
  * libdmmp: don't disconnect from multipathd twice
  * multipathd: don't call strlen on NULL variables
  * libdmmp: move libdmmp.pc install location
  * multipathd: drop lock before calling uev_add_path
  * multipathd: allow devices to switch from RW to RO
  * libmultipath: don't set max_sectors_kb on reloads
  * Remove a trailing tab
  * multipath: fix segfault with disable_changed_wwids
  * multipath-tools: amend text from multipath/multipath.conf.5
  * Bump the version code and date
  * multipath-tools: replace multipath configuration output
  * Revert "multipathd: set timeout for CLI commands correctly"
  * libmultipath: fix skip_kpartx support for removing maps
  * Bump version to 0.7.1</changelog>
<changelog author="mwilck@suse.com" date="1500552000">- Update to version 0.7.1+11+suse.246dd815
  * libmultipath: get_udev_uid: make sure pp-&gt;wwid is 0-terminated
  (bsc#1048146)
  * libmultipath: drop uevent_can_discard_by_devpath (bsc#1048052)
  * libmultipath: only listen for uevents with DEVTYPE=disk
  (bsc#1048052)
  * libmultipath: fix over-long NVME WWIDs
  (bsc#1048146)
- _service: Pull this from the branch sles12-sp3-fixes (minimal set
  of fixes against SLE12-SP3 RC2). Use match-tag to generate correct
  version</changelog>

</package>
<package pkgid="ff418a64cfa4c1586cb650a9ec03902bb3a1921edb6261b9d93ec333f98c6d39" name="multipath-tools-devel" arch="x86_64">
    <version epoch="0" ver="0.7.1+11+suse.246dd815" rel="3.1"/>

<changelog author="hare@suse.de" date="1472040000">- multipathd: start daemon after udev trigger (bsc#986734)
- Load device handler and multipath module at boot (bsc#991634)</changelog>
<changelog author="hare@suse.de" date="1472212800">- multipath: fixup check from udev rules (bsc#986734)</changelog>
<changelog author="hare@suse.de" date="1472212801">- Fixup module name in /usr/lib/modules-load.d (bsc#986734)</changelog>
<changelog author="jthumshirn@suse.com" date="1472472000">- libmultipath: fall back to search paths by devt (bsc#995645)</changelog>
<changelog author="hare@suse.de" date="1473336000">- Fixup glitch from patch 'fixup check from udev rules' (bsc#986734)
- Remove 0001-libmultipath-fall-back-to-search-paths-by-devt.patch;
  integrated into git repository</changelog>
<changelog author="hare@suse.de" date="1474286400">- libmultipath: Do not crash on empty features (bsc#994812)
- multipathd: Set CLI timeout correctly (bsc#999061)
- Moved multipath-tools repository to
  github.com:/openSUSE/multipath-tools.git</changelog>
<changelog author="hare@suse.de" date="1475064000">- multipath: avoid crash when using modified configuration
  (bsc#1000914)</changelog>
<changelog author="hare@suse.de" date="1475150400">- Implement support for 'multipath=off' and 'nompath'
  kernel commandline options (bsc#1001691)</changelog>
<changelog author="mwilck@suse.com" date="1475150401">- Update to version 0.6.2+suse20160928.8939fb6</changelog>
<changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous PreReq for insserv and fillup</changelog>
<changelog author="mwilck@suse.com" date="1488283200">- Update to version 0.6.4+101.f01ef4da (SLES12 SP2 changes wrt upstream):
  * Make libdmmp build optional
  * multipath.rules: use -i flag to multipath
  * kpartx: create symlinks for dmraid devices
  * kpartx: Add udev compability rules for SUSE
  * libmultipath/checkers: make RADOS checker optional
  * multipathd: fixup check for new path states (bsc#1019798)
  * tur: Add pthread_testcancel() (bsc#101979)
  * kpartx: sanitize delete partitions (bsc#100869)
  * libmultipath: coalesce_paths: trigger uevent if nothing done
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: differentiate ACT_NOTHING and ACT_IMPOSSIBLE
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: reload map if not known to udev
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: sysfs_attr_set_value: use const char*
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: select_action: check special features separately
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: treat aminio like assemble_map does
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: disassemble_map: skip no_path_retry check
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: handle "retain_attached_hw_handler"
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_feature: print log msg if no_path_retry cant be set
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * libmultipath: setup_features: log msg if queue_if_no_path is ignored
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: use weaker "force_reload" at startup
    (bsc#998906, bsc#998893, bsc#1005763, bsc#1011400)
  * multipathd: imply -n if find_multipaths is set (bsc#1012910)
  * multipath: ignore -i if find_multipaths is set (bsc#1012910)
  * libmultipath: move suspend logic to _dm_flush_map (bsc#986838)
  * multipath -ll: set DI_SERIAL (bsc#991432)
  * libmultipath: use existing alias from bindings file (bsc#1005255)
  * libmultipath/discovery: do not cache 'access_state' sysfs attribute (bsc#1004858)
  * multipathd: issue systemd READY after initial configuration (bsc#1006469)
  * multipath: avoid crash when using modified configuration (bsc#1000914)
  * multipathd: Set CLI timeout correctly (bsc#999061)
  * libmultipath: Do not crash on empty features (bsc#994812)
  * libmultipath: fall back to search paths by devt (bsc#995645)
  * multipathd: set timeout for CLI commands correctly (bsc#999061)
  * Invalid error code when using multipathd CLI
  * multipath: do not check daemon from udev rules (bsc#986734)
  * Add support for "multipath=off" and "nompath" on kernel cmdline
  * multipathd: start daemon after udev trigger (bsc#98673)
  * multipathd.service: fixup Wants= and Before= statements (bsc#1019181, bsc#991742, bsc#986734)
- Update to current upstream (0.6.4-65-ga2675025)
  * Avoid that reloading a map sporadically triggers I/O errors
  * fix udev rules for failed multipath devices
  * multipathd: allow resetting stats
  * multipathd: add messages on delayed path addition
  * multipathd: don't update priority of failed paths
  * libmultipath: cleanup orphan device states
  * libmultipath: add detect_checker option
  * kpartx: don't keep creating recursive partitions
  * multipath-tools: Introducing multipath C API
  * multipath-tools: sync valgrind.h with 3.12 upstream
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * multipath-tools: add availability of service-time and queue-length to multipath.conf.5
  * Fill NVMe specific path info
  * Don't blacklist nvme
  * multipath-tools: fix misspellings
  * multipath-tools: git should ignore rej and orig files
  * Include sys/sysmacros.h
  * Tolerate modprobe failures in multipathd.service
  * multipath-tools: Remove trailing and leading whitespaces
  * multipath-tools: Perform socket client uid check on IPC commands.
  * multipath-tools: Set errno mpath_recv_reply() when failure
  * multipath-tools: New way to limit the IPC command length.
  * multipath-tools: libmultipath: Removed unused functions.
  * multipath-tools: libmultipath: fix gcc link failure on rcu_register_thread_mb.
  * multipath-tools: multipathd: Fix memory leak on load_config().
  * [multipathd] Remove trailing whitespaces
  * multipathd: deterministic io throughput in multipath</changelog>
<changelog author="mwilck@suse.com" date="1488283201">- Update to version 0.6.4+102.df7d367e:
  * libmultipath/propsel: Do not select sysfs prioritizer for RDAC arrays
    (bsc#1004858)</changelog>
<changelog author="mwilck@suse.com" date="1488369600">- spec file changes: optional librados and libdmmp support
  * enabled by default on Factory and Leap
    (disable with --without-rados, --without-libdmmp)
  * disabled by default on SLES12
    (enable with --with-rados, --with-libdmmp)
  * libdmmp0_1_0 and libdmmp-devel as separate packages
  * minor fixes for RPMLINT warnings
- Update to version 0.6.4+102.0119472d:
  * rebased, code-wise identical to previous checkout</changelog>
<changelog author="mwilck@suse.com" date="1489147200">- Spec file: Added dependency on sg3_utils (#boo1028857)</changelog>
<changelog author="mwilck@suse.com" date="1489147201">- Update to version 0.6.4+103+suse.bcb5d0f4:
  * changed to official github repo openSUSE/multipath-tools
    (no changes code-wise)</changelog>
<changelog author="mwilck@suse.com" date="1490097600">- Spec file: disable librados for architectures for which ceph
  is not built
- Spec file: enable librados by default for SLES12 SP3, disable
  it on Leap &lt;= 42.1
- Update to version 0.6.4+104+suse.ac0df678:
  * multipathd: fix SIGUSR2 handling</changelog>
<changelog author="mwilck@suse.com" date="1490270400">- Enable rados for SLES only for x86_64 and aarch64 (ceph is currently
  disabled on SLES on s390x and ppc64le) (bsc#1030699)
- Downgrade to version 0.6.4+103+suse.bcb5d0f4:
  * temporarily remove commit "multipathd: fix SIGUSR2 handling"
  until it's merged in official repo (bsc#1030699)</changelog>
<changelog author="mwilck@suse.com" date="1490356800">- spec file changes suggested by factory review team (bsc#1030699)
  * RPM group adjustments.
  * Avoid %__ macro indirections</changelog>
<changelog author="mwilck@suse.com" date="1493294400">- spec file: Disable RADOS support for i586 on Leap 42.x (bsc#1036271)
- spec file: Move libdmmp to /usr/lib[64] (bsc#1036652)
- Update to version 0.7.1+7+suse.3edc5f7d:
  * kpartx: use mapname if no uuid is present (bsc#1033541)
  * kpartx: relax check when checking for a kpartx device (bsc#1033541)
  * libmpathpersist: use extern struct udev (bsc#1027188)
  * kpartx: include sys/sysmacros.h (fix compilation warning)
- Update to upstream version 0.7.1:
  * multipath-tools: improve processing efficiency for addition and deletion of multipath devices
  * uevent_can_discard: optimize devpath check
  * multipathd: fix SIGUSR2 handling
  * multipath-tools: clean up libdmmp/Makefile
  * multipath-tools: libdmmp: Fix incorrect use of __attribute__
  * multipath-tools: Remove trailing whitespaces
  * multipath-tools: add missing "-l" flag for pthread in libdmmp/Makefile
  * multipath-tools: build objects for libdmmp and libmpathpersist independently
  * libdmmp: minor Makefile cleanup
  * multipath-tools: remove incdir from Makefiles
  * libdmmp: don't disconnect from multipathd twice
  * multipathd: don't call strlen on NULL variables
  * libdmmp: move libdmmp.pc install location
  * multipathd: drop lock before calling uev_add_path
  * multipathd: allow devices to switch from RW to RO
  * libmultipath: don't set max_sectors_kb on reloads
  * Remove a trailing tab
  * multipath: fix segfault with disable_changed_wwids
  * multipath-tools: amend text from multipath/multipath.conf.5
  * Bump the version code and date
  * multipath-tools: replace multipath configuration output
  * Revert "multipathd: set timeout for CLI commands correctly"
  * libmultipath: fix skip_kpartx support for removing maps
  * Bump version to 0.7.1</changelog>
<changelog author="mwilck@suse.com" date="1500552000">- Update to version 0.7.1+11+suse.246dd815
  * libmultipath: get_udev_uid: make sure pp-&gt;wwid is 0-terminated
  (bsc#1048146)
  * libmultipath: drop uevent_can_discard_by_devpath (bsc#1048052)
  * libmultipath: only listen for uevents with DEVTYPE=disk
  (bsc#1048052)
  * libmultipath: fix over-long NVME WWIDs
  (bsc#1048146)
- _service: Pull this from the branch sles12-sp3-fixes (minimal set
  of fixes against SLE12-SP3 RC2). Use match-tag to generate correct
  version</changelog>

</package>
<package pkgid="eb286119ddff954ee761462284f94a28d8c3f4667ee3adf926cbfba78427cfe5" name="mupdf" arch="src">
    <version epoch="0" ver="1.11" rel="16.1"/>

<changelog author="gber@opensuse.org" date="1409054400">- update to version 1.5
  * This is a bugfix release: dozens of bugs have been found and
    exterminated!
  * A typo resulting in a potential stack overflow that could
    corrupt files when saving edits to a PDF has been fixed.
    Another bug which caused a significant slowdown has also been
    fixed.</changelog>
<changelog author="trcs@gmx.com" date="1420027200">- update to version 1.6
  * Features:
    + Color detection device (mudraw -T).
    + Sepia mode full-page color tinting in X11 and win32 viewer
    (keybinding: shift-C).
    + Re-implement printf and strtod due to portability issue with
    locales and number formatting.
    + Add experimental 'gsview' project: a Windows Modern UI viewer.
    + Improve XML parser interface.
  * Bug fixes:
    + CBZ page ordering
    + ZIP64 support
    + iOS and Android bug fixes
    + Miscellaneous minor fixes</changelog>
<changelog author="aloisio@gmx.com" date="1429444800">- Update to version 1.7
  Headline changes:
  * New 'Indie dev' licensing options - contact sales@artifex.com
    for more details.
  * New HTML layout engine, and (DRM-free) EPUB viewer.
  * Reduced memory usage - displaylists and internal PDF
    representation take much less memory, reducing total memory
    use on some files by over 60%.
  Important API changes:
  * Bound contexts have been removed; we now pass fz_contexts
    explicitly.
  * Reference counting of paths and text structures.
  Features:
  * Add mutool pages option.
  * Tweaked rendering to prevent feature dropout in common cases.
  * Viewer tweaks
  * Better mouse wheel handling
  * Shift-space support
  * Mouse button control of presentation mode
  Internal changes:
  * Removal of bound contexts; fz_contexts now passed explicitly
    everywhere.
  * PDF filter revamp - simpler interface.
  * Devices use derived structures rather than user pointer.
  * Sparse PDF xrefs held in more compact form.
  * New gsview viewer split out to its own repository.
  Bug fixes:
  * Improved handling of broken files.
  * Fix BBoxes of Type 3 fonts.
  * Updated fonts (including greek and cyrillic).
  * Various memory leaks and crashes.
  * And many more.</changelog>
<changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.7a
  * Bug fixes:
    + Fixed bug that allocated too much memory when packing paths.
    + Fixed EPUB font scaling bug.
    + Fixed EPUB file type handling in viewers.
    + Improved tolerance for broken and unsupported CSS.
  * New features:
    + Added -z option to mutool clean.</changelog>
<changelog author="idonmez@suse.com" date="1447329600">- Update to version 1.8
  * New URW fonts with greek and cyrillic.
  * 64-bit file support.
  * Updated FreeType to version 2.6.1.
  * Various font substitution bug fixes.
  * Fix setjmp/longjmp behaviour which could cause optimizing
    compilers to misbehave.
  * EPUB improvements: User style sheets, GIF images, Table of Contents,
    CJK text, Page margins and many bug fixes.</changelog>
<changelog author="idonmez@suse.com" date="1447934400">- Ship mupdf-x11-curl as default mupdf. Drop non-curl version.
- Drop mujstest as it seems to be a test utility.</changelog>
<changelog author="idonmez@suse.com" date="1458561600">- Set to best anti-alias mode (8) by default.</changelog>
<changelog author="idonmez@suse.com" date="1461067200">- Update to version 1.9
  * Bidirectional layout for Arabic and Hebrew scripts.
  * Shaping complex scripts for EPUB text layout.
  * Noto fallback fonts for EPUB layout.
  * mutool create:
  - Create new PDF files from scratch.
  - Read an annotated content stream in a text file and write a
    PDF file, automatically embedding font and image resources.
  * mutool run:
  - Run javascript scripts with MuPDF bindings.
  - The interface is similar to the new Java interface.
  * mutool draw:
  - Optional multi-threaded operation (Windows and pthreads).
  - Optional low memory mode (primarily for testing).</changelog>
<changelog author="idonmez@suse.com" date="1461326400">- Update to version 1.9a
  * Fix a regression in text extraction.</changelog>
<changelog author="idonmez@suse.com" date="1469188800">- Add CVE-2016-6265.patch to fix a use-after-free bsc#990195</changelog>
<changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
<changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
<changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
<changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
<changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
<changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
<changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
<changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
<changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>

</package>
<package pkgid="6ef22493b5352986235284cf5dea7286890686462d9cbe2059d0662d9e0827cf" name="mupdf" arch="x86_64">
    <version epoch="0" ver="1.11" rel="16.1"/>

<changelog author="gber@opensuse.org" date="1409054400">- update to version 1.5
  * This is a bugfix release: dozens of bugs have been found and
    exterminated!
  * A typo resulting in a potential stack overflow that could
    corrupt files when saving edits to a PDF has been fixed.
    Another bug which caused a significant slowdown has also been
    fixed.</changelog>
<changelog author="trcs@gmx.com" date="1420027200">- update to version 1.6
  * Features:
    + Color detection device (mudraw -T).
    + Sepia mode full-page color tinting in X11 and win32 viewer
    (keybinding: shift-C).
    + Re-implement printf and strtod due to portability issue with
    locales and number formatting.
    + Add experimental 'gsview' project: a Windows Modern UI viewer.
    + Improve XML parser interface.
  * Bug fixes:
    + CBZ page ordering
    + ZIP64 support
    + iOS and Android bug fixes
    + Miscellaneous minor fixes</changelog>
<changelog author="aloisio@gmx.com" date="1429444800">- Update to version 1.7
  Headline changes:
  * New 'Indie dev' licensing options - contact sales@artifex.com
    for more details.
  * New HTML layout engine, and (DRM-free) EPUB viewer.
  * Reduced memory usage - displaylists and internal PDF
    representation take much less memory, reducing total memory
    use on some files by over 60%.
  Important API changes:
  * Bound contexts have been removed; we now pass fz_contexts
    explicitly.
  * Reference counting of paths and text structures.
  Features:
  * Add mutool pages option.
  * Tweaked rendering to prevent feature dropout in common cases.
  * Viewer tweaks
  * Better mouse wheel handling
  * Shift-space support
  * Mouse button control of presentation mode
  Internal changes:
  * Removal of bound contexts; fz_contexts now passed explicitly
    everywhere.
  * PDF filter revamp - simpler interface.
  * Devices use derived structures rather than user pointer.
  * Sparse PDF xrefs held in more compact form.
  * New gsview viewer split out to its own repository.
  Bug fixes:
  * Improved handling of broken files.
  * Fix BBoxes of Type 3 fonts.
  * Updated fonts (including greek and cyrillic).
  * Various memory leaks and crashes.
  * And many more.</changelog>
<changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.7a
  * Bug fixes:
    + Fixed bug that allocated too much memory when packing paths.
    + Fixed EPUB font scaling bug.
    + Fixed EPUB file type handling in viewers.
    + Improved tolerance for broken and unsupported CSS.
  * New features:
    + Added -z option to mutool clean.</changelog>
<changelog author="idonmez@suse.com" date="1447329600">- Update to version 1.8
  * New URW fonts with greek and cyrillic.
  * 64-bit file support.
  * Updated FreeType to version 2.6.1.
  * Various font substitution bug fixes.
  * Fix setjmp/longjmp behaviour which could cause optimizing
    compilers to misbehave.
  * EPUB improvements: User style sheets, GIF images, Table of Contents,
    CJK text, Page margins and many bug fixes.</changelog>
<changelog author="idonmez@suse.com" date="1447934400">- Ship mupdf-x11-curl as default mupdf. Drop non-curl version.
- Drop mujstest as it seems to be a test utility.</changelog>
<changelog author="idonmez@suse.com" date="1458561600">- Set to best anti-alias mode (8) by default.</changelog>
<changelog author="idonmez@suse.com" date="1461067200">- Update to version 1.9
  * Bidirectional layout for Arabic and Hebrew scripts.
  * Shaping complex scripts for EPUB text layout.
  * Noto fallback fonts for EPUB layout.
  * mutool create:
  - Create new PDF files from scratch.
  - Read an annotated content stream in a text file and write a
    PDF file, automatically embedding font and image resources.
  * mutool run:
  - Run javascript scripts with MuPDF bindings.
  - The interface is similar to the new Java interface.
  * mutool draw:
  - Optional multi-threaded operation (Windows and pthreads).
  - Optional low memory mode (primarily for testing).</changelog>
<changelog author="idonmez@suse.com" date="1461326400">- Update to version 1.9a
  * Fix a regression in text extraction.</changelog>
<changelog author="idonmez@suse.com" date="1469188800">- Add CVE-2016-6265.patch to fix a use-after-free bsc#990195</changelog>
<changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
<changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
<changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
<changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
<changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
<changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
<changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
<changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
<changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>

</package>
<package pkgid="d8dfadd4e5585fa278a1fc91cf01a9440bc844b8b4f8d62f4a7966adec4862c3" name="mupdf-devel-static" arch="x86_64">
    <version epoch="0" ver="1.11" rel="16.1"/>

<changelog author="gber@opensuse.org" date="1409054400">- update to version 1.5
  * This is a bugfix release: dozens of bugs have been found and
    exterminated!
  * A typo resulting in a potential stack overflow that could
    corrupt files when saving edits to a PDF has been fixed.
    Another bug which caused a significant slowdown has also been
    fixed.</changelog>
<changelog author="trcs@gmx.com" date="1420027200">- update to version 1.6
  * Features:
    + Color detection device (mudraw -T).
    + Sepia mode full-page color tinting in X11 and win32 viewer
    (keybinding: shift-C).
    + Re-implement printf and strtod due to portability issue with
    locales and number formatting.
    + Add experimental 'gsview' project: a Windows Modern UI viewer.
    + Improve XML parser interface.
  * Bug fixes:
    + CBZ page ordering
    + ZIP64 support
    + iOS and Android bug fixes
    + Miscellaneous minor fixes</changelog>
<changelog author="aloisio@gmx.com" date="1429444800">- Update to version 1.7
  Headline changes:
  * New 'Indie dev' licensing options - contact sales@artifex.com
    for more details.
  * New HTML layout engine, and (DRM-free) EPUB viewer.
  * Reduced memory usage - displaylists and internal PDF
    representation take much less memory, reducing total memory
    use on some files by over 60%.
  Important API changes:
  * Bound contexts have been removed; we now pass fz_contexts
    explicitly.
  * Reference counting of paths and text structures.
  Features:
  * Add mutool pages option.
  * Tweaked rendering to prevent feature dropout in common cases.
  * Viewer tweaks
  * Better mouse wheel handling
  * Shift-space support
  * Mouse button control of presentation mode
  Internal changes:
  * Removal of bound contexts; fz_contexts now passed explicitly
    everywhere.
  * PDF filter revamp - simpler interface.
  * Devices use derived structures rather than user pointer.
  * Sparse PDF xrefs held in more compact form.
  * New gsview viewer split out to its own repository.
  Bug fixes:
  * Improved handling of broken files.
  * Fix BBoxes of Type 3 fonts.
  * Updated fonts (including greek and cyrillic).
  * Various memory leaks and crashes.
  * And many more.</changelog>
<changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.7a
  * Bug fixes:
    + Fixed bug that allocated too much memory when packing paths.
    + Fixed EPUB font scaling bug.
    + Fixed EPUB file type handling in viewers.
    + Improved tolerance for broken and unsupported CSS.
  * New features:
    + Added -z option to mutool clean.</changelog>
<changelog author="idonmez@suse.com" date="1447329600">- Update to version 1.8
  * New URW fonts with greek and cyrillic.
  * 64-bit file support.
  * Updated FreeType to version 2.6.1.
  * Various font substitution bug fixes.
  * Fix setjmp/longjmp behaviour which could cause optimizing
    compilers to misbehave.
  * EPUB improvements: User style sheets, GIF images, Table of Contents,
    CJK text, Page margins and many bug fixes.</changelog>
<changelog author="idonmez@suse.com" date="1447934400">- Ship mupdf-x11-curl as default mupdf. Drop non-curl version.
- Drop mujstest as it seems to be a test utility.</changelog>
<changelog author="idonmez@suse.com" date="1458561600">- Set to best anti-alias mode (8) by default.</changelog>
<changelog author="idonmez@suse.com" date="1461067200">- Update to version 1.9
  * Bidirectional layout for Arabic and Hebrew scripts.
  * Shaping complex scripts for EPUB text layout.
  * Noto fallback fonts for EPUB layout.
  * mutool create:
  - Create new PDF files from scratch.
  - Read an annotated content stream in a text file and write a
    PDF file, automatically embedding font and image resources.
  * mutool run:
  - Run javascript scripts with MuPDF bindings.
  - The interface is similar to the new Java interface.
  * mutool draw:
  - Optional multi-threaded operation (Windows and pthreads).
  - Optional low memory mode (primarily for testing).</changelog>
<changelog author="idonmez@suse.com" date="1461326400">- Update to version 1.9a
  * Fix a regression in text extraction.</changelog>
<changelog author="idonmez@suse.com" date="1469188800">- Add CVE-2016-6265.patch to fix a use-after-free bsc#990195</changelog>
<changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
<changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
<changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
<changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
<changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
<changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
<changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
<changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
<changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>

</package>
<package pkgid="d652abd5c02386c45bea6ff6f884fc3d81671d87f8e46603e1994048bd95df0e" name="mysql-community-server" arch="src">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="253d9754a65497be11668d35ae72800da69153cd6c3c1356f2a20d3ca8609a5c" name="mysql-community-server" arch="src">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="084a55741fdccb24a5ec433330179529049e1df931fec8f62476f7cf766a8810" name="mysql-community-server" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="c0a5ba0abf2fc97c3cf3b3f8da86f11ce4221d691012ce279c3580097051bc17" name="mysql-community-server" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="66dc6fe15e78a1861245e25e8ee84ad572cd80888b2f1a7f90babec2fdae5fed" name="mysql-community-server-bench" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="92590740eaec47a6d2b92c3b608c75569aac3ef0f77ff8f5afa0c5a67a602f70" name="mysql-community-server-bench" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="d44751ad3c6331144641c66ff2817ce122c6c95ab97355529328d2f22614dc3e" name="mysql-community-server-client" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="3ab6034349378bd9127211b4600b08d399182888cc13538dbd6f68a47902d161" name="mysql-community-server-client" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="39566667f2da8032e0a63b3393562f9e1b4cc26c3730e18fb8effc457caffae6" name="mysql-community-server-errormessages" arch="noarch">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="df8b7a02a58076682f7e7b8616980799c8dce3b44bb308c07e72ef5bc38276dc" name="mysql-community-server-errormessages" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="1268d19d0f21693175c9ed9864f82e53a12640af10214fc92eb74be989dbdf3f" name="mysql-community-server-test" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="061d77b33e542a56c701ac6eb871b036f61b57b24732b44ae294b442ad97b8c4" name="mysql-community-server-test" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="a4789bf330bf963930370ddbfb24280fddb5dedd07b667a66bcf3b98959a4aef" name="mysql-community-server-tools" arch="x86_64">
    <version epoch="0" ver="5.6.37" rel="27.1"/>

<changelog author="schwab@suse.de" date="1379419200">- mysql-community-server-5.6.12-va_list.patch: Fix invalid use of va_list</changelog>
<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>

</package>
<package pkgid="cfb1c65d77f610fcda59ce6286080ec206765721e676ab106610b415cb1eca74" name="mysql-community-server-tools" arch="x86_64">
    <version epoch="0" ver="5.6.38" rel="30.1"/>

<changelog author="mhrusecky@suse.cz" date="1400846400">- updated to 5.6.17
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-13.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
- merge latest fixes from other variants
  * systemd unit file
  * not enabling plugins by default
  * first time install warning</changelog>
<changelog author="sfalken@opensuse.org" date="1407412800">- Removed mysql.info.* from %files section to clear build failure, as reported in declined request 235821 to openSUSE:Factory</changelog>
<changelog author="michal.hrusecky@opensuse.org" date="1434888000">- merge latest packaging fixes from other variants
  * mainly simplified packaging
- updated to 5.6.25
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-18.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-22.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-24.html
  http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html</changelog>
<changelog author="tchvatal@suse.com" date="1435060800">- Sync with git state to allow build on Factory</changelog>
<changelog author="tchvatal@suse.com" date="1435233600">- Update again to git state now with reshaped initscript
  now better supporting initialization/migration</changelog>
<changelog author="tchvatal@suse.com" date="1435320000">- Enable testsuite</changelog>
<changelog author="tchvatal@suse.com" date="1435665600">- Add patch to fix bnc#934789 Logjam Attack: mysql uses 512 bit dh
  groups in SSL</changelog>
<changelog author="tchvatal@suse.com" date="1436270400">- Sync to git state fixing few triv issues</changelog>
<changelog author="mpluskal@suse.com" date="1436788800">- Use proper syntax in systemd unit helper (boo#937767)</changelog>
<changelog author="kstreitova@suse.com" date="1440763200">- update to MySQL 5.6.26
  * changes:
  * http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html
  * fixed CVEs:
    CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582
    CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772
    CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771
    CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641
    CVE-2015-2661, CVE-2015-4767
  * fix [bnc#938412]
  * remove the following patches (changes were merged upstream):
  * mysql-community-server-5.6.24-regex_heap_overflow.patch
  * mysql-5.6.25-logjam.patch
- disable Performance Schema by default. Since MySQL 5.6.6 upstream
  enabled Performance Schema by default which results in increased
  memory usage. The added option disable Performance Schema again in
  order to decrease MySQL memory usage [bnc#852477].
- fix spurious macro expansion in comment in specfile
- install INFO_BIN and INFO_SRC, noticed in MDEV-6912
- use spec-cleaner
- tweak some cmake switches to enable more things
  * WITH_ASAN=ON adress sanitization
    WITH_LIBWRAP=ON tcp wrappers
    ENABLED_PROFILING=OFF profiling disable
    ENABLE_DEBUG_SYNC=OFF debug testing sync disable
    WITH_PIC=ON by default we want pic generated binaries
- remove superfluous '--group' parameter from mysql-systemd-helper
- make -devel package installable in the presence of LibreSSL
- cleanup after the update-message if it was displayed
- add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly
  [bnc#943096]
- remove redundant entry from %{_tmpfilesdir}/mysql.conf. Using both
  'x' and 'X' options is redundant and causes a warning message.
  Leaving only the 'x' line fixes this problem. [bnc#942908]
- mariadb: replace readline-devel for readline5-devel (MDEV-6912)
  [bnc#902396]
- mariadb-101: set cmake options for MariaDB Galera Cluster</changelog>
<changelog author="kstreitova@suse.com" date="1448884800">- update to 5.6.27
  * changes:
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html
  * fixed CVEs:
    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,
    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,
    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,
    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,
    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,
    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,
    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,
    CVE-2015-4913
  * fix [bnc#951391]
- add mysql-community-server-5.6.26-enforce_ssl.patch to fix MySQL lack
  of SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*]
  implies that the ssl connection is required. The mysql client will
  now print an error if ssl is required, but the server can not handle
  a ssl connection [bnc#924663], [bnc#928962], [CVE-2015-3152].</changelog>
<changelog author="kstreitova@suse.com" date="1453896000">- update to 5.6.28
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-28.html
  * fixed CVEs:
    CVE-2016-0546, CVE-2016-0504, CVE-2016-0505, CVE-2016-0594,
    CVE-2016-0595, CVE-2016-0503, CVE-2016-0596, CVE-2016-0502,
    CVE-2016-0597, CVE-2016-0611, CVE-2016-0598, CVE-2016-0600,
    CVE-2016-0610, CVE-2016-0606, CVE-2016-0608, CVE-2016-0607,
    CVE-2015-7744, CVE-2016-0605, CVE-2016-0609
  * fix [bnc#962779], [bnc#959724]
- refresh mysql-community-server-5.6.12-upgrade-datadir.patch</changelog>
<changelog author="kstreitova@suse.com" date="1454500800">- fix information leak via mysql-systemd-helper script
  [CVE-2015-5969], [bnc#957174]</changelog>
<changelog author="kstreitova@suse.com" date="1461672000">- update to 5.6.30
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html
  * fixed CVEs:
    CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640,
    CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647,
    CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665,
    CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655,
    CVE-2016-0661, CVE-2016-0668, CVE-2016-0643
  * fix [bnc#962779], [bnc#959724]
- don't delete the log data when migration fails
- add 'log-error' and 'secure-file-priv' configuration options
  (added via configuration-tweaks.tar.bz2) [bsc#963810]
  * add '/etc/my.cnf.d/error_log.conf' that specifies
    'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error
    log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked
    up by logrotate.
  * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that
    'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with
    files in the directory specified by 'secure-file-priv' option
    (='/var/lib/mysql-files').</changelog>
<changelog author="kstreitova@suse.com" date="1477483200">- update to 5.6.34
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-34.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-33.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-32.html
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-31.html
  * fixed CVEs:
    CVE-2016-6304, CVE-2016-6662, CVE-2016-7440, CVE-2016-5584,
    CVE-2016-5617, CVE-2016-5616, CVE-2016-5626, CVE-2016-3492,
    CVE-2016-5629, CVE-2016-5507, CVE-2016-8283, CVE-2016-5609,
    CVE-2016-5612, CVE-2016-5627, CVE-2016-5630, CVE-2016-8284,
    CVE-2016-8288, CVE-2016-3477, CVE-2016-2105, CVE-2016-3486,
    CVE-2016-3501, CVE-2016-3521, CVE-2016-3615, CVE-2016-3614,
    CVE-2016-3459, CVE-2016-5439, CVE-2016-5440
  * fix
    [bsc#999666],  [bsc#998309],  [bsc#1005581], [bsc#1005558],
    [bsc#1005563], [bsc#1005562], [bsc#1005566], [bsc#1005555],
    [bsc#1005569], [bsc#1005557], [bsc#1005582], [bsc#1005560],
    [bsc#1005561], [bsc#1005567], [bsc#1005570], [bsc#1005583],
    [bsc#1005586], [bsc#989913],  [bsc#977614],  [bsc#989914],
    [bsc#989915],  [bsc#989919],  [bsc#989922],  [bsc#989921],
    [bsc#989911],  [bsc#989925],  [bsc#989926]
  * refresh mysql-community-server-5.6.10-group.patch
- requires devel packages for aio and lzo2
- append "--ignore-db-dir=lost+found" to the mysqld options in
  "mysql-systemd-helper" script if "lost+found" directory is found
  in $datadir [bnc#986251]
- remove syslog.target from *.service files [bsc#983938]
- add BuildRequires: systemd-devel
- make some dependecies switchable
- add systemd to deps to build on leap and friends
- replace '%{_libexecdir}/systemd/system' with %{_unitdir} macro
- remove useless mysql@default.service [bsc#971456]
- replace all occurrences of the string "@sysconfdir@" with "/etc" in
  mysql-community-server-5.6.3-logrotate.patch as it wasn't expanded
  properly [bsc#990890]
- remove '%define _rundir' as 13.1 is out of support scope
- run 'usermod -g mysql mysql' only if mysql user is not in mysql group.
  Run 'usermod -s /bin/false/ mysql' only if mysql user doesn't have
  '/bin/false' shell set.
- re-enable mysql profiling
- fix constraints conditions for 32bit architectures</changelog>
<changelog author="kstreitova@suse.com" date="1486641600">- update to 5.6.35
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html
  * fixed CVEs:
    CVE-2016-8318 [bsc#1020872], CVE-2017-3312 [bsc#1020873],
    CVE-2017-3258 [bsc#1020875], CVE-2017-3273 [bsc#1020876],
    CVE-2017-3244 [bsc#1020877], CVE-2017-3257 [bsc#1020878],
    CVE-2017-3238 [bsc#1020882], CVE-2017-3291 [bsc#1020884],
    CVE-2017-3265 [bsc#1020885], CVE-2017-3313 [bsc#1020890],
    CVE-2016-8327 [bsc#1020893], CVE-2017-3317 [bsc#1020894],
    CVE-2017-3318 [bsc#1020896]
- refresh mysql-community-server-5.6.10-group.patch
- replace systemd and systemd-devel BuildRequires with
  pkgconfig(libsystemd), which matches what the build system is
  actually looking for.
- switch to xz compression instead of bz2 for the following tarballs:
  mysql-patches.tar.bz2 renamed to mysql-patches.tar.xz
  configuration-tweaks.tar.bz2 renamed to configuration-tweaks.tar.xz
- replace bzip2 with xz in README.debug</changelog>
<changelog author="kstreitova@suse.com" date="1493121600">- update to 5.6.36
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-36.html
  * fixed CVEs:
    CVE-2017-3308, CVE-2017-3309, CVE-2017-3450, CVE-2017-3599,
    CVE-2017-3329, CVE-2017-3600, CVE-2017-3453, CVE-2017-3452,
    CVE-2017-3302, CVE-2017-3456, CVE-2017-3463, CVE-2017-3462,
    CVE-2017-3461, CVE-2017-3464
    CVE-2017-3305 [bsc#1029396] - Riddle vulnerability
    CVE-2016-5483 [bsc#1029014] - mysqldump failed to properly
    quote certain identifiers in SQL statements written to the
    dump output
  * remove mysql-community-server-5.6.26-enforce_ssl.patch that
    is no longer needed
  * upstream fixed BACKRONYM issue (bsc#924663, CVE-2015-3152)
  * '--ssl-mode=REQUIRED' can be specified to require a secure
    connection (it fails if a secure connection cannot be
    obtained)
- change permissions of the configuration dir/files to 755/644.
  Please note that storing the password in the /etc/my.cnf file is
  not safe. Use for example an option file that is accessible only
  by yourself [bsc#889126]
- increase required physical memory from 5 GB to 7 GB in order to
  try to fix i586 build that fails because of "Out of memory" error
- set the default umask to 077 in mysql-systemd-helper [bsc#1020976]</changelog>
<changelog author="kstreitova@suse.com" date="1495108800">- fix permissions for /var/run/mysql that were wrongly set to
  700 instead of 755 due to added umask. This prevented non-root
  from connecting to the database [bsc#1038740]
- switch from '/var/run' to '/run' as /var/run is just a symlink
  to /run</changelog>
<changelog author="kstreitova@suse.com" date="1500897600">- update to 5.6.37
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html
  * fixed CVEs:
    [bsc#1049394] CVE-2017-3633, [bsc#1049396] CVE-2017-3634,
    [bsc#1049398] CVE-2017-3635, [bsc#1049399] CVE-2017-3636,
    [bsc#1049404] CVE-2017-3641, [bsc#1049410] CVE-2017-3647,
    [bsc#1049411] CVE-2017-3648, [bsc#1049412] CVE-2017-3649,
    [bsc#1049415] CVE-2017-3651, [bsc#1049416] CVE-2017-3652,
    [bsc#1049417] CVE-2017-3653, [bsc#1049421] CVE-2017-3732,
- refresh  mysql-community-server-5.6.10-group.patch
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream
- update file lists for new man-pages and tools (for mariadb)
- [bsc#1049422] tracker bug</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- update to 5.6.38
  * changes
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-38.html
  * fixed CVEs:
    [bnc#1064116] CVE-2017-10379
    [bnc#1064117] CVE-2017-10384
    [bnc#1064115] CVE-2017-10378
    [bnc#1064101] CVE-2017-10268
    [bnc#1064096] CVE-2017-10155
    [bnc#1064118] CVE-2017-3731
    [bnc#1064102] CVE-2017-10276
    [bnc#1064105] CVE-2017-10283
    [bnc#1064112] CVE-2017-10314
    [bnc#1064100] CVE-2017-10227
    [bnc#1064104] CVE-2017-10279
    [bnc#1064108] CVE-2017-10294
    [bnc#1064107] CVE-2017-10286
- [bsc#1064119] - tracker bug
- add "BuildRequires: unixODBC-devel" to allow ODBC support for
  Connect engine [bsc#1039034]
- update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern
- some scripts from the tools subpackage, namely: wsrep_sst_xtrabackup,
  wsrep_sst_mariabackup.sh and wsrep_sst_xtrabackup-v2.sh need socat
- fix incorrect descriptions and mismatching RPM groups</changelog>

</package>
<package pkgid="85da6e6e4d6ea006c7e43a5678805638b1343b820155932970376cb56b7a3644" name="mysql-connector-cpp" arch="src">
    <version epoch="0" ver="1.1.8" rel="8.1"/>

<changelog author="mhrusecky@suse.cz" date="1239969600">- initial version of MySQL Connector/C++ package (version 1.0.4 beta)</changelog>
<changelog author="mhrusecky@suse.cz" date="1242648000">- fixed compilation using gcc44</changelog>
<changelog author="mhrusecky@suse.cz" date="1242907200">- updated to version 1.0.5
  * Changed the interface of sql::ConnectionMetaData, sql::ResultSetMetaData
    and sql::ParameterMetaData to have a protected destructor. In this way the
    client code doesn't need, and won't be able, to destruct the metadata
    objects returned by the connector. The connector will handle their
    destruction.  This enables statements like :
    connection-&gt;getMetaData-&gt;getSchema(); without the result of leaking memory
    because we lost the pointer returned by getMetaData().  (Lawrin, Andrey)
  * Large overhaul of the code to improve the memory management to not leak in
    exceptional situations. Big improvement compared to Beta1. (Andrey)
  * Fixed the interface of sql::Driver and sql::Connection so they accept the
    options map by alias instead of by value. (Andrey)
  * Changed the return type of sql::SQLException::getSQLState() from
    std::string to const char * to be consistent with std::exception::what().
    (Andrey)
  * Implemented getResultSetType() and setResultSetType() for Statement. Used
    are TYPE_FORWARD_ONLY, which means unbuffered result set and
    TYPE_SCROLL_INSENSITIVE, which means buffered result set. (Andrey)
  * Implemented getResultSetType() for PreparedStatement. The setter is not
    implemented because currently PreparedStatement can't do refetching and
    storing the result means the bind buffers will be correct. (Andrey)
  * Added "defaultStatementResultType" to MySQL_Connection::setClientOption()
    as an option. Also the method now returns `sql::Connection *`. (Andrey)
  * Added Result::getType() and implemented it in the three result set classes.
    (Andrey)
  * Enabled tracing functionality when building with VC8 and up (VS2005 and
    up). (Andrey)
  * Added better support for named pipes, on Windows. Use pipe:// and add the
    path to the pipe. Shared memory connections are currently not supported.
    (Andrey)
  * Fixed a bug in MySQL_Connection::setSessionVariable() which led to
    exception being thrown. (Andrey)</changelog>
<changelog author="mhrusecky@suse.cz" date="1248782400">- Better description (bnc#522682)</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="mhrusecky@suse.cz" date="1307016000">- updated to version 1.1.0, see
  http://forge.mysql.com/wiki/Connector_C%2B%2B#MySQL_Connector.2FC.2B.2B_1.1.0_GA_.2813.09.2010.29</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cdenicolo@suse.com" date="1326888000">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  GPL has FLOSS exception.</changelog>
<changelog author="adam@mizerski.pl" date="1360756800">- update to 1.1.2, see
  https://dev.mysql.com/doc/relnotes/connector-cpp/en/ccpp-news-1-1-1.html
  https://dev.mysql.com/doc/relnotes/connector-cpp/en/ccpp-news-1-1-2.html
- libmysqlcppconn5 changed to libmysqlcppconn6 (number bump)
- spec file cleanup
- removed patch for driver/mysql_art_resultset.cpp from
  mysql-connector-cpp-1.1.0-gcc44.patch
- added mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch</changelog>
<changelog author="saschpe@suse.de" date="1362744000">- Fix library requirement for devel package due to wrong soversion</changelog>
<changelog author="mhrusecky@suse.com" date="1364990400">- Merge with package by Tomas Chvatal (to make it work with LO)</changelog>
<changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
<changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
<changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
<changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
<changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
<changelog author="kstreitova@suse.com" date="1504612800">- add "Requires: boost-devel" for libmysqlcppconn-devel subpackage
  [bsc#838038]</changelog>

</package>
<package pkgid="c7a99e27fc62020a6ae3bd3a891be27430f5d9bd58ad4add67063486a187740a" name="nano-plugin-conky" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="12.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>
<changelog author="olaf@aepfle.de" date="1448107200">- Its always /usr/bin/lua5.1</changelog>
<changelog author="simon@simotek.net" date="1450440000">- Add conky-1.10.0-fix-upstream-issue-187-IPV6-crash.patch fixing
  upstream issue #187 and (boo#958897) patch taken from upstream
  https://github.com/brndnmtthws/conky/commit/ee08a9e1b045e8d2f4f13a0e60c2f603b66b0d69?diff=unified</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1452168000">- for suse_version after 1320
  add BuildRequires:	libtolua++-5_1-devel</changelog>
<changelog author="i@marguerite.su" date="1452168001">- update version 1.10.1
  * bugfix release
  * If BUILD_IPV6=ON (default), but the user has disabled ipv6
    support in the kernel using the parameter ipv6.disable=1,
    then conky fails to open /proc/net/if_inet6. This leads to
    a segfault when conky calls fclose(file) regardless. This
    fix simply moves the fclose call into the preceding if
    statement. (boo#958897)
- drop patch: conky-1.10.0-libdir.patch
- add patch: conky-libdir.patch
- add patch: conky-1.10.1-avoid-git.patch
- add patch: conky-1.10.1-check_include_file.patch
  * fix check_include_file not found
- enable builds for sles 12</changelog>
<changelog author="ronisbr@gmail.com" date="1464004800">- Update version 1.10.2.
  * Bugfix release.
- Drop patches already applied by upstream:
  * conky-libdir.patch
  * conky-1.10.1-check_include_file.patch</changelog>
<changelog author="aloisio@gmx.com" date="1474718400">- Update to version 1.10.4
- Enabled pulseaudio
- Added conky-1.10.4-ncurses.patch</changelog>
<changelog author="i@marguerite.su" date="1481976000">- update version 1.10.6
  * try more than one sysctl to get CPU temperature
  * cached versions of get_nvidia_value and get_nvidia_string_value
- changes in 1.10.5
  * check st_ctime to work with mutt MUA
  * update uri to get NOAA METAR data</changelog>
<changelog author="olaf@aepfle.de" date="1483531200">- Remove timestamp from binaries
- add conky.timestamp.patch</changelog>
<changelog author="olaf@aepfle.de" date="1488456000">- Add buildconditional for audacious, cmus, libXNVCtrl, xmms2
- Remove unused BuildRequires, convert to pkgconfig()</changelog>
<changelog author="olaf@aepfle.de" date="1490097600">- Remove more timestamps from binaries</changelog>
<changelog author="olaf@aepfle.de" date="1497960000">- Fix build with conky.luamm.patch</changelog>
<changelog author="joerg.lorenzen@ki.tng.de" date="1501156800">- BuildRequires libtolua++-5_1-devel on Leap.</changelog>
<changelog author="zaitor@opensuse.org" date="1504267200">- Submit version and bugfix update for Leap 42.3 (boo#1056946).</changelog>

</package>
<package pkgid="82b0b702a589d60d326c4fc08fbd9d7845159a64bcdb4ed47656e7a5143b19bf" name="nasm" arch="src">
    <version epoch="0" ver="2.10.09" rel="10.1"/>

<changelog author="sf@suse.de" date="1103630400">- use vsnprintf to avoid buffer overflow (#49336)</changelog>
<changelog author="uli@suse.de" date="1127390400">- update -&gt; 0.98.39 (includes secfix and no longer builds with
  - ansi, among other things)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="ro@suse.de" date="1169812800">- replace ghostscript-mini by ghostscript_any in BuildReq (#119914)</changelog>
<changelog author="pth@suse.de" date="1199966400">- Update to 2.01rc2:
  2.01
  - ---
  * Fix the handling of MMX registers with explicit "qword" tags on
    memory (broken in 2.00 due to 64-bit changes.)
  * Fix the PREFETCH instructions.
  * Fix the documentation.
  * Fix debugging info when using "-f elf" (backwards alias for "-f
    elf32").
  * Man pages for rdoff tools (from the Debian project.)
  2.00
  - ---
  * Added c99 data-type compliance.
  * Added general x86-64 support.
  * Added win64 (x86-64 COFF) output format.
  * Added __BITS__ standard macro.
  * Renamed the elf output format to elf32 for clarity.
  * Added elf64 and macho (MacOS X) output formats.
  * Added Numeric constants in DQ directive.
  * Added oword, do and reso pseudo operands.
  * Allow underscores in numbers.
  * Added 8-, 16- and 128-bit floating-point formats.
  * Added binary, octal and hexadecimal floating-point.
  * Correct the generation of floating-point constants.
  * Added Floating-point option control.
  * Added Infinity and NaN floating point support.
  * Added ELF Symbol Visibility support.
  * Added Setting OSABI value in ELF header directive.
  * Added Generate Makefile Dependencies option.
  * Added Unlimited Optimization Passes option.
  * Added %IFN and %ELIFN support.
  * Added Logical Negation Operator.
  * Enhanced Stack Relative Preprocessor Directives.
  * Enhanced ELF Debug Formats.
  * Enhanced Send Errors to a File option.
  * Added SSSE3, SSE4.1, SSE4.2, SSE5 support.
  * Added a large number of additional instructions.
  * Significant performance improvements.
- Fix array sized to low.
- Fix pointer-&gt;int cast.</changelog>
<changelog author="pth@suse.de" date="1201003200">- Update to 2.01 final.</changelog>
<changelog author="pth@suse.de" date="1207569600">- Update to 2.02:
  * Additional fixes for MMX operands with explicit "qword", as well as
    (hopefully) SSE operands with "oword".
  * Fix handling of truncated strings with DO.
  * Fix segfaults due to memory overwrites when floating-point constants
    were used.
  * Fix segfaults due to missing include files.
  * Add autogenerated instruction list back into the documentation.
  * ELF: Fix segfault when generating stabs, and no symbols have been
    defined.
  * ELF: Experimental support for DWARF debugging information.
  * New compile date and time standard macros.
  * %ifnum now returns true for negative numbers.
  * Add support for the XSAVE instruction group.
  * Fix issue with some warnings getting emitted way too many times.
  * Autogenerated instruction list added to the documentation.
- Split off -doc subpackage</changelog>
<changelog author="coolo@suse.de" date="1208260800">- fix crash in syslinux</changelog>
<changelog author="pth@suse.de" date="1213272000">- Update to 2.03:
  * Add support for Intel AVX, CLMUL and FMA instructions,
    including YMM registers.
  * "dy", "resy" and "yword" for 32-byte operands.
  * Fix some SSE5 instructions.
  * Intel INVEPT, INVVPID and MOVBE instructions.
  * Fix checking for critical expressions when the optimizer is enabled.
  * Support the DWARF debugging format for ELF targets.
  * Fix optimizations of signed bytes.
  * Fix operation on bigendian machines.
  * Fix buffer overflow in the preprocessor.
  * SAFESEH support for Win32, IMAGEREL for Win64 (SEH).
  * %? and %?? to refer to the name of a macro itself.  In particular,
    "%idefine keyword $%?" can be used to make a keyword "disappear".
  * New options for dependency generation: -MD, -MF, -MP, -MT, -MQ.
  * New preprocessor directives %pathsearch and %depend; INCBIN
    reimplemented as a macro.
  * %include now resolves macros in a sane manner.
  * %substr can now be used to get other than one-character substrings.
  * New type of character/string constants, using backquotes (`...`),
    which support C-style escape sequences.
  * %defstr and %idefstr to stringize macro definitions before creation.
  * Fix forward references used in EQU statements.
- remove nasm-fix-crash.diff as its obsoleted by this version.</changelog>
<changelog author="pth@suse.de" date="1220961600">- Update to 2.04rc1. Changes since 2.03:
  2.04.rc1:
  * Sanitize macro handing in the %error directive.
  * New %warning directive to issue user-controlled warnings.
  * __utf16__ and __utf32__ operators to generate UTF-16 and UTF-32
    strings.
  * Correct the handling of nested %reps.
  * Support for x87 packed BCD constants.
  * New %strcat directive to join quoted strings together.
  * Correct the LTR instruction in 64-bit mode.
  * Fix unnecessary REX.W prefix on indirect jumps in 64-bit mode.
  * New %use macro directive to support standard macro directives.
  * Excess default parameters to %macro now issues a warning by default.
  * Numerous bug fixes, especially to the AES, AVX and VTX instructions.
  2.03.01:
  * Fix buffer overflow in the listing module.
  * Fix the handling of hexadecimal escape codes in `...` strings.
  * The -F option now implies -g.</changelog>
<changelog author="pth@suse.de" date="1231934400">- Update to 2.06rc2. Changes since 2.04.rc1:
    2.06:
  * Support for indirect macro expansion ('%[...]').
  * %pop' can now take an argument.
  * The argument to %use' is no longer macro-expanded. Use '%[...]'
    if macro expansion is desired.
  * Support for thread-local storage in ELF32 and ELF64.
  * Fix crash on '%ifmacro' without an argument.
  * Correct the arguments to the 'POPCNT' instruction.
    2.05.01:
  * Fix the -w'/-W' option parsing, which was broken in NASM 2.05.
    2.05:
  * Fix redundant REX.W prefix on MP reg64'.
  * Make the behaviour of -O0' match NASM 0.98 legacy behavior.
  * -w-user' can be used to suppress the output of %warning'
    directives.
  * Fix bug where LIGN' would issue a full alignment datum instead
    of zero bytes.
  * Fix offsets in list files.
  * Fix '%include' inside multi-line macros or loops.
  * Fix error where NASM would generate a spurious warning on valid
    optimizations of immediate values.
  * Fix arguments to a number of the 'CVT' SSE instructions.
  * Fix RIP-relative offsets when the instruction carries an
    immediate.
  * Massive overhaul of the ELF64 backend for spec compliance.
  * Fix the Geode 'PFRCPV' and 'PFRSQRTV' instruction.
  * Fix the SSE 4.2 'CRC32' instruction.</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- Enable parallel building</changelog>
<changelog author="ro@suse.de" date="1267444800">- update to 2.07
  * NASM is now under the 2-clause BSD license.  See legal.
  * Fix the section type for the .strtab section in the elf64
  output format.
  * Fix the handling of COMMON directives in the obj output format.
  * New ith and srec output formats; these are variants of the
  bin output format which output Intel hex and Motorola S-records,
  respectively.  See ithfmt and srecfmt.
  * rdf2ihx replaced with an enhanced rdf2bin, which can output
  binary, COM, Intel hex or Motorola S-records.
  * The Windows installer now puts the NASM directory first in the
  PATH of the "NASM Shell".
  * Revert the early expansion behavior of %+ to pre-2.06 behavior:
  %+ is only expanded late.
  * Yet another Mach-O alignment fix.
  * Don't delete the list file on errors.  Also, include error and
  warning information in the list file.
  * Support for 64-bit Mach-O output, see machofmt.
  * Fix assert failure on certain operations that involve strings with
  high-bit bytes.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1283169600">- use __TIMESTAMP__ instead of __DATE__ to make build-compare
  happy.</changelog>
<changelog author="pgajdos@suse.cz" date="1292587200">- don't include pdf in documentation, remove ghostscript from
  build requires to break dependency cycle (jpeg-turbo needs
  nasm for build)</changelog>
<changelog author="per@computer.org" date="1308225600">upgrade to 2.09.08. Lots of changes &amp; fixes since version 2.07:
  C.1.1 Version 2.09.08
  * Fix __OUTPUT_FORMAT__ assignment when output driver alias is used. For example when -f elf
    is used __OUTPUT_FORMAT__ must be set to elf, if -f elf32 is used __OUTPUT_FORMAT__ must be
    assigned accordingly, i.e. to elf32. The rule applies to all output driver aliases. See
    section 4.11.6.
  C.1.2 Version 2.09.07
  * Fix attempts to close same file several times when -a option is used.
  * Fixes for VEXTRACTF128, VMASKMOVPS encoding.
  C.1.3 Version 2.09.06
  * Fix missed section attribute initialization in bin output target.
  C.1.4 Version 2.09.05
  * Fix arguments encoding for VPEXTRW instruction.
  * Remove invalid form of VPEXTRW instruction.
  * Add VLDDQU as alias for VLDQQU to match specification.
  C.1.5 Version 2.09.04
  * Fix incorrect labels offset for VEX intructions.
  * Eliminate bogus warning on implicit operand size override.
  * %if term could not handle 64 bit numbers.
  * The COFF backend was limiting relocations number to 16 bits even if in real there were a way
    more relocations.
  C.1.6 Version 2.09.03
  * Print %macro name inside %rep blocks on error.
  * Fix preprocessor expansion behaviour. It happened sometime too early and sometime simply
    wrong. Move behaviour back to the origins (down to NASM 2.05.01).
  * Fix unitialized data dereference on OMF output format.
  * Issue warning on unterminated %{ construct.
  * Fix for documentation typo.
  C.1.7 Version 2.09.02
  * Fix reversed tokens when %deftok produces more than one output token.
  * Fix segmentation fault on disassembling some VEX instructions.
  * Missing %endif did not always cause error.
  * Fix typo in documentation.
  * Compound context local preprocessor single line macro identifiers were not expanded
    early enough and as result lead to unresolved symbols.
  C.1.8 Version 2.09.01
  * Fix NULL dereference on missed %deftok second parameter.
  * Fix NULL dereference on invalid %substr parameters.
  C.1.9 Version 2.09
  * Fixed assignment the magnitude of %rep counter. It is limited to 62 bits now.
  * Fixed NULL dereference if argument of %strlen resolves to whitespace. For example if
    nonexistent macro parameter is used.
  * %ifenv, %elifenv, %ifnenv, and %elifnenv directives introduced. See section 4.4.9.
  * Fixed NULL dereference if environment variable is missed.
  * Updates of new AVX v7 Intel instructions.
  * PUSH imm32 is now officially documented.
  * Fix for encoding the LFS, LGS and LSS in 64-bit mode.
  * Fixes for compatibility with OpenWatcom compiler and DOS 8.3 file format limitation.
  * Macros parameters range expansion introduced. See section 4.3.4.
  * Backward compatibility on expanging of local sigle macros restored.
  * 8 bit relocations for elf and bin output formats are introduced.
  * Short intersegment jumps are permitted now.
  * An alignment more than 64 bytes are allowed for win32, win64 output formats.
  * SECTALIGN directive introduced. See section 4.11.13.
  * nojmp option introduced in smartalign package. See section 5.2.
  * Short aliases win, elf and macho for output formats are introduced. Each stands for
    win32, elf32 and macho32 accordingly.
  * Faster handling of missing directives implemented.
  * Various small improvements in documentation.
  * No hang anymore if unable to open malloc.log file.
  * The environments without vsnprintf function are able to build nasm again.
  * AMD LWP instructions updated.
  * Tighten EA checks. We warn a user if there overflow in EA addressing.
  * Make -Ox the default optimization level. For the legacy behavior, specify -O0 explicitly.
    See section 2.1.22.
  * Environment variables read with %! or tested with %ifenv can now contain non-identifier
    characters if surrounded by quotes. See section 4.10.2.
  * Add a new standard macro package %use fp for floating-point convenience macros. See
    section 5.3.
  C.1.10 Version 2.08.02
  * Fix crash under certain circumstances when using the %+ operator.
  C.1.11 Version 2.08.01
  * Fix the %use statement, which was broken in 2.08.
  C.1.12 Version 2.08
  * A number of enhancements/fixes in macros area.
  * Support for converting strings to tokens. See section 4.1.9.
  * Fuzzy operand size logic introduced.
  * Fix COFF stack overrun on too long export identifiers.
  * Fix Macho-O alignment bug.
  * Fix crashes with -fwin32 on file with many exports.
  * Fix stack overrun for too long [DEBUG id].
  * Fix incorrect sbyte usage in IMUL (hit only if optimization flag passed).
  * Append ending token for .stabs records in the ELF output format.
  * New NSIS script which uses ModernUI and MultiUser approach.
  * Visual Studio 2008 NASM integration (rules file).
  * Warn a user if a constant is too long (and as result will be stripped).
  * The obsoleted pre-XOP AMD SSE5 instruction set which was never actualized was removed.
  * Fix stack overrun on too long error file name passed from the command line.
  * Bind symbols to the .text section by default (ie in case if SECTION directive was omitted) in
    the ELF output format.
  * Fix sync points array index wrapping.
  * A few fixes for FMA4 and XOP instruction templates.
  * Add AMD Lightweight Profiling (LWP) instructions.
  * Fix the offset for %arg in 64-bit mode.
  * An undefined local macro (%$) no longer matches a global macro with the same name.
  * Fix NULL dereference on too long local labels.</changelog>
<changelog author="idonmez@suse.com" date="1347105600">- Add explicit build dependency on makeinfo</changelog>
<changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374840000">- version 2.10.09
  * Add support for the Intel AVX2 instruction set.
  * Add support for Bit Manipulation Instructions 1 and 2.
  * Add support for Intel Transactional Synchronization Extensions (TSX).
  * Add support for x32 ELF
  * Add the ifunc macro package with integer functions,
  currently only integer logarithms.
  * Add support for RDSEED
  * Support of AMD SVM instructions in 32 bit mode
  * Add a bunch of AMD TBM instructions.
  * 2 years of bugfixes</changelog>
<changelog author="adam.majer@suse.de" date="1500984000">- memory_fixes.patch: Fix usage-after-free and buffer overflow
  bugs (bsc#1047925, bsc#1047936, CVE-2017-11111, CVE-2017-10686)
- Enable unit tests in %check target</changelog>

</package>
<package pkgid="a4850f568aad85bb1aad249fbe25a5f9a0e6edf814e9af2881157e7b75164c0b" name="nasm" arch="x86_64">
    <version epoch="0" ver="2.10.09" rel="10.1"/>

<changelog author="pth@suse.de" date="1231934400">- Update to 2.06rc2. Changes since 2.04.rc1:
    2.06:
  * Support for indirect macro expansion ('%[...]').
  * %pop' can now take an argument.
  * The argument to %use' is no longer macro-expanded. Use '%[...]'
    if macro expansion is desired.
  * Support for thread-local storage in ELF32 and ELF64.
  * Fix crash on '%ifmacro' without an argument.
  * Correct the arguments to the 'POPCNT' instruction.
    2.05.01:
  * Fix the -w'/-W' option parsing, which was broken in NASM 2.05.
    2.05:
  * Fix redundant REX.W prefix on MP reg64'.
  * Make the behaviour of -O0' match NASM 0.98 legacy behavior.
  * -w-user' can be used to suppress the output of %warning'
    directives.
  * Fix bug where LIGN' would issue a full alignment datum instead
    of zero bytes.
  * Fix offsets in list files.
  * Fix '%include' inside multi-line macros or loops.
  * Fix error where NASM would generate a spurious warning on valid
    optimizations of immediate values.
  * Fix arguments to a number of the 'CVT' SSE instructions.
  * Fix RIP-relative offsets when the instruction carries an
    immediate.
  * Massive overhaul of the ELF64 backend for spec compliance.
  * Fix the Geode 'PFRCPV' and 'PFRSQRTV' instruction.
  * Fix the SSE 4.2 'CRC32' instruction.</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- Enable parallel building</changelog>
<changelog author="ro@suse.de" date="1267444800">- update to 2.07
  * NASM is now under the 2-clause BSD license.  See legal.
  * Fix the section type for the .strtab section in the elf64
  output format.
  * Fix the handling of COMMON directives in the obj output format.
  * New ith and srec output formats; these are variants of the
  bin output format which output Intel hex and Motorola S-records,
  respectively.  See ithfmt and srecfmt.
  * rdf2ihx replaced with an enhanced rdf2bin, which can output
  binary, COM, Intel hex or Motorola S-records.
  * The Windows installer now puts the NASM directory first in the
  PATH of the "NASM Shell".
  * Revert the early expansion behavior of %+ to pre-2.06 behavior:
  %+ is only expanded late.
  * Yet another Mach-O alignment fix.
  * Don't delete the list file on errors.  Also, include error and
  warning information in the list file.
  * Support for 64-bit Mach-O output, see machofmt.
  * Fix assert failure on certain operations that involve strings with
  high-bit bytes.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1283169600">- use __TIMESTAMP__ instead of __DATE__ to make build-compare
  happy.</changelog>
<changelog author="pgajdos@suse.cz" date="1292587200">- don't include pdf in documentation, remove ghostscript from
  build requires to break dependency cycle (jpeg-turbo needs
  nasm for build)</changelog>
<changelog author="per@computer.org" date="1308225600">upgrade to 2.09.08. Lots of changes &amp; fixes since version 2.07:
  C.1.1 Version 2.09.08
  * Fix __OUTPUT_FORMAT__ assignment when output driver alias is used. For example when -f elf
    is used __OUTPUT_FORMAT__ must be set to elf, if -f elf32 is used __OUTPUT_FORMAT__ must be
    assigned accordingly, i.e. to elf32. The rule applies to all output driver aliases. See
    section 4.11.6.
  C.1.2 Version 2.09.07
  * Fix attempts to close same file several times when -a option is used.
  * Fixes for VEXTRACTF128, VMASKMOVPS encoding.
  C.1.3 Version 2.09.06
  * Fix missed section attribute initialization in bin output target.
  C.1.4 Version 2.09.05
  * Fix arguments encoding for VPEXTRW instruction.
  * Remove invalid form of VPEXTRW instruction.
  * Add VLDDQU as alias for VLDQQU to match specification.
  C.1.5 Version 2.09.04
  * Fix incorrect labels offset for VEX intructions.
  * Eliminate bogus warning on implicit operand size override.
  * %if term could not handle 64 bit numbers.
  * The COFF backend was limiting relocations number to 16 bits even if in real there were a way
    more relocations.
  C.1.6 Version 2.09.03
  * Print %macro name inside %rep blocks on error.
  * Fix preprocessor expansion behaviour. It happened sometime too early and sometime simply
    wrong. Move behaviour back to the origins (down to NASM 2.05.01).
  * Fix unitialized data dereference on OMF output format.
  * Issue warning on unterminated %{ construct.
  * Fix for documentation typo.
  C.1.7 Version 2.09.02
  * Fix reversed tokens when %deftok produces more than one output token.
  * Fix segmentation fault on disassembling some VEX instructions.
  * Missing %endif did not always cause error.
  * Fix typo in documentation.
  * Compound context local preprocessor single line macro identifiers were not expanded
    early enough and as result lead to unresolved symbols.
  C.1.8 Version 2.09.01
  * Fix NULL dereference on missed %deftok second parameter.
  * Fix NULL dereference on invalid %substr parameters.
  C.1.9 Version 2.09
  * Fixed assignment the magnitude of %rep counter. It is limited to 62 bits now.
  * Fixed NULL dereference if argument of %strlen resolves to whitespace. For example if
    nonexistent macro parameter is used.
  * %ifenv, %elifenv, %ifnenv, and %elifnenv directives introduced. See section 4.4.9.
  * Fixed NULL dereference if environment variable is missed.
  * Updates of new AVX v7 Intel instructions.
  * PUSH imm32 is now officially documented.
  * Fix for encoding the LFS, LGS and LSS in 64-bit mode.
  * Fixes for compatibility with OpenWatcom compiler and DOS 8.3 file format limitation.
  * Macros parameters range expansion introduced. See section 4.3.4.
  * Backward compatibility on expanging of local sigle macros restored.
  * 8 bit relocations for elf and bin output formats are introduced.
  * Short intersegment jumps are permitted now.
  * An alignment more than 64 bytes are allowed for win32, win64 output formats.
  * SECTALIGN directive introduced. See section 4.11.13.
  * nojmp option introduced in smartalign package. See section 5.2.
  * Short aliases win, elf and macho for output formats are introduced. Each stands for
    win32, elf32 and macho32 accordingly.
  * Faster handling of missing directives implemented.
  * Various small improvements in documentation.
  * No hang anymore if unable to open malloc.log file.
  * The environments without vsnprintf function are able to build nasm again.
  * AMD LWP instructions updated.
  * Tighten EA checks. We warn a user if there overflow in EA addressing.
  * Make -Ox the default optimization level. For the legacy behavior, specify -O0 explicitly.
    See section 2.1.22.
  * Environment variables read with %! or tested with %ifenv can now contain non-identifier
    characters if surrounded by quotes. See section 4.10.2.
  * Add a new standard macro package %use fp for floating-point convenience macros. See
    section 5.3.
  C.1.10 Version 2.08.02
  * Fix crash under certain circumstances when using the %+ operator.
  C.1.11 Version 2.08.01
  * Fix the %use statement, which was broken in 2.08.
  C.1.12 Version 2.08
  * A number of enhancements/fixes in macros area.
  * Support for converting strings to tokens. See section 4.1.9.
  * Fuzzy operand size logic introduced.
  * Fix COFF stack overrun on too long export identifiers.
  * Fix Macho-O alignment bug.
  * Fix crashes with -fwin32 on file with many exports.
  * Fix stack overrun for too long [DEBUG id].
  * Fix incorrect sbyte usage in IMUL (hit only if optimization flag passed).
  * Append ending token for .stabs records in the ELF output format.
  * New NSIS script which uses ModernUI and MultiUser approach.
  * Visual Studio 2008 NASM integration (rules file).
  * Warn a user if a constant is too long (and as result will be stripped).
  * The obsoleted pre-XOP AMD SSE5 instruction set which was never actualized was removed.
  * Fix stack overrun on too long error file name passed from the command line.
  * Bind symbols to the .text section by default (ie in case if SECTION directive was omitted) in
    the ELF output format.
  * Fix sync points array index wrapping.
  * A few fixes for FMA4 and XOP instruction templates.
  * Add AMD Lightweight Profiling (LWP) instructions.
  * Fix the offset for %arg in 64-bit mode.
  * An undefined local macro (%$) no longer matches a global macro with the same name.
  * Fix NULL dereference on too long local labels.</changelog>
<changelog author="idonmez@suse.com" date="1347105600">- Add explicit build dependency on makeinfo</changelog>
<changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374840000">- version 2.10.09
  * Add support for the Intel AVX2 instruction set.
  * Add support for Bit Manipulation Instructions 1 and 2.
  * Add support for Intel Transactional Synchronization Extensions (TSX).
  * Add support for x32 ELF
  * Add the ifunc macro package with integer functions,
  currently only integer logarithms.
  * Add support for RDSEED
  * Support of AMD SVM instructions in 32 bit mode
  * Add a bunch of AMD TBM instructions.
  * 2 years of bugfixes</changelog>
<changelog author="adam.majer@suse.de" date="1500984000">- memory_fixes.patch: Fix usage-after-free and buffer overflow
  bugs (bsc#1047925, bsc#1047936, CVE-2017-11111, CVE-2017-10686)
- Enable unit tests in %check target</changelog>

</package>
<package pkgid="5ce61419b8951aa9e071a814bfd4a8cb3b8066b558ffce3d06d800efdc21deaa" name="nasm-doc" arch="x86_64">
    <version epoch="0" ver="2.10.09" rel="10.1"/>

<changelog author="pth@suse.de" date="1231934400">- Update to 2.06rc2. Changes since 2.04.rc1:
    2.06:
  * Support for indirect macro expansion ('%[...]').
  * %pop' can now take an argument.
  * The argument to %use' is no longer macro-expanded. Use '%[...]'
    if macro expansion is desired.
  * Support for thread-local storage in ELF32 and ELF64.
  * Fix crash on '%ifmacro' without an argument.
  * Correct the arguments to the 'POPCNT' instruction.
    2.05.01:
  * Fix the -w'/-W' option parsing, which was broken in NASM 2.05.
    2.05:
  * Fix redundant REX.W prefix on MP reg64'.
  * Make the behaviour of -O0' match NASM 0.98 legacy behavior.
  * -w-user' can be used to suppress the output of %warning'
    directives.
  * Fix bug where LIGN' would issue a full alignment datum instead
    of zero bytes.
  * Fix offsets in list files.
  * Fix '%include' inside multi-line macros or loops.
  * Fix error where NASM would generate a spurious warning on valid
    optimizations of immediate values.
  * Fix arguments to a number of the 'CVT' SSE instructions.
  * Fix RIP-relative offsets when the instruction carries an
    immediate.
  * Massive overhaul of the ELF64 backend for spec compliance.
  * Fix the Geode 'PFRCPV' and 'PFRSQRTV' instruction.
  * Fix the SSE 4.2 'CRC32' instruction.</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- Enable parallel building</changelog>
<changelog author="ro@suse.de" date="1267444800">- update to 2.07
  * NASM is now under the 2-clause BSD license.  See legal.
  * Fix the section type for the .strtab section in the elf64
  output format.
  * Fix the handling of COMMON directives in the obj output format.
  * New ith and srec output formats; these are variants of the
  bin output format which output Intel hex and Motorola S-records,
  respectively.  See ithfmt and srecfmt.
  * rdf2ihx replaced with an enhanced rdf2bin, which can output
  binary, COM, Intel hex or Motorola S-records.
  * The Windows installer now puts the NASM directory first in the
  PATH of the "NASM Shell".
  * Revert the early expansion behavior of %+ to pre-2.06 behavior:
  %+ is only expanded late.
  * Yet another Mach-O alignment fix.
  * Don't delete the list file on errors.  Also, include error and
  warning information in the list file.
  * Support for 64-bit Mach-O output, see machofmt.
  * Fix assert failure on certain operations that involve strings with
  high-bit bytes.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1283169600">- use __TIMESTAMP__ instead of __DATE__ to make build-compare
  happy.</changelog>
<changelog author="pgajdos@suse.cz" date="1292587200">- don't include pdf in documentation, remove ghostscript from
  build requires to break dependency cycle (jpeg-turbo needs
  nasm for build)</changelog>
<changelog author="per@computer.org" date="1308225600">upgrade to 2.09.08. Lots of changes &amp; fixes since version 2.07:
  C.1.1 Version 2.09.08
  * Fix __OUTPUT_FORMAT__ assignment when output driver alias is used. For example when -f elf
    is used __OUTPUT_FORMAT__ must be set to elf, if -f elf32 is used __OUTPUT_FORMAT__ must be
    assigned accordingly, i.e. to elf32. The rule applies to all output driver aliases. See
    section 4.11.6.
  C.1.2 Version 2.09.07
  * Fix attempts to close same file several times when -a option is used.
  * Fixes for VEXTRACTF128, VMASKMOVPS encoding.
  C.1.3 Version 2.09.06
  * Fix missed section attribute initialization in bin output target.
  C.1.4 Version 2.09.05
  * Fix arguments encoding for VPEXTRW instruction.
  * Remove invalid form of VPEXTRW instruction.
  * Add VLDDQU as alias for VLDQQU to match specification.
  C.1.5 Version 2.09.04
  * Fix incorrect labels offset for VEX intructions.
  * Eliminate bogus warning on implicit operand size override.
  * %if term could not handle 64 bit numbers.
  * The COFF backend was limiting relocations number to 16 bits even if in real there were a way
    more relocations.
  C.1.6 Version 2.09.03
  * Print %macro name inside %rep blocks on error.
  * Fix preprocessor expansion behaviour. It happened sometime too early and sometime simply
    wrong. Move behaviour back to the origins (down to NASM 2.05.01).
  * Fix unitialized data dereference on OMF output format.
  * Issue warning on unterminated %{ construct.
  * Fix for documentation typo.
  C.1.7 Version 2.09.02
  * Fix reversed tokens when %deftok produces more than one output token.
  * Fix segmentation fault on disassembling some VEX instructions.
  * Missing %endif did not always cause error.
  * Fix typo in documentation.
  * Compound context local preprocessor single line macro identifiers were not expanded
    early enough and as result lead to unresolved symbols.
  C.1.8 Version 2.09.01
  * Fix NULL dereference on missed %deftok second parameter.
  * Fix NULL dereference on invalid %substr parameters.
  C.1.9 Version 2.09
  * Fixed assignment the magnitude of %rep counter. It is limited to 62 bits now.
  * Fixed NULL dereference if argument of %strlen resolves to whitespace. For example if
    nonexistent macro parameter is used.
  * %ifenv, %elifenv, %ifnenv, and %elifnenv directives introduced. See section 4.4.9.
  * Fixed NULL dereference if environment variable is missed.
  * Updates of new AVX v7 Intel instructions.
  * PUSH imm32 is now officially documented.
  * Fix for encoding the LFS, LGS and LSS in 64-bit mode.
  * Fixes for compatibility with OpenWatcom compiler and DOS 8.3 file format limitation.
  * Macros parameters range expansion introduced. See section 4.3.4.
  * Backward compatibility on expanging of local sigle macros restored.
  * 8 bit relocations for elf and bin output formats are introduced.
  * Short intersegment jumps are permitted now.
  * An alignment more than 64 bytes are allowed for win32, win64 output formats.
  * SECTALIGN directive introduced. See section 4.11.13.
  * nojmp option introduced in smartalign package. See section 5.2.
  * Short aliases win, elf and macho for output formats are introduced. Each stands for
    win32, elf32 and macho32 accordingly.
  * Faster handling of missing directives implemented.
  * Various small improvements in documentation.
  * No hang anymore if unable to open malloc.log file.
  * The environments without vsnprintf function are able to build nasm again.
  * AMD LWP instructions updated.
  * Tighten EA checks. We warn a user if there overflow in EA addressing.
  * Make -Ox the default optimization level. For the legacy behavior, specify -O0 explicitly.
    See section 2.1.22.
  * Environment variables read with %! or tested with %ifenv can now contain non-identifier
    characters if surrounded by quotes. See section 4.10.2.
  * Add a new standard macro package %use fp for floating-point convenience macros. See
    section 5.3.
  C.1.10 Version 2.08.02
  * Fix crash under certain circumstances when using the %+ operator.
  C.1.11 Version 2.08.01
  * Fix the %use statement, which was broken in 2.08.
  C.1.12 Version 2.08
  * A number of enhancements/fixes in macros area.
  * Support for converting strings to tokens. See section 4.1.9.
  * Fuzzy operand size logic introduced.
  * Fix COFF stack overrun on too long export identifiers.
  * Fix Macho-O alignment bug.
  * Fix crashes with -fwin32 on file with many exports.
  * Fix stack overrun for too long [DEBUG id].
  * Fix incorrect sbyte usage in IMUL (hit only if optimization flag passed).
  * Append ending token for .stabs records in the ELF output format.
  * New NSIS script which uses ModernUI and MultiUser approach.
  * Visual Studio 2008 NASM integration (rules file).
  * Warn a user if a constant is too long (and as result will be stripped).
  * The obsoleted pre-XOP AMD SSE5 instruction set which was never actualized was removed.
  * Fix stack overrun on too long error file name passed from the command line.
  * Bind symbols to the .text section by default (ie in case if SECTION directive was omitted) in
    the ELF output format.
  * Fix sync points array index wrapping.
  * A few fixes for FMA4 and XOP instruction templates.
  * Add AMD Lightweight Profiling (LWP) instructions.
  * Fix the offset for %arg in 64-bit mode.
  * An undefined local macro (%$) no longer matches a global macro with the same name.
  * Fix NULL dereference on too long local labels.</changelog>
<changelog author="idonmez@suse.com" date="1347105600">- Add explicit build dependency on makeinfo</changelog>
<changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374840000">- version 2.10.09
  * Add support for the Intel AVX2 instruction set.
  * Add support for Bit Manipulation Instructions 1 and 2.
  * Add support for Intel Transactional Synchronization Extensions (TSX).
  * Add support for x32 ELF
  * Add the ifunc macro package with integer functions,
  currently only integer logarithms.
  * Add support for RDSEED
  * Support of AMD SVM instructions in 32 bit mode
  * Add a bunch of AMD TBM instructions.
  * 2 years of bugfixes</changelog>
<changelog author="adam.majer@suse.de" date="1500984000">- memory_fixes.patch: Fix usage-after-free and buffer overflow
  bugs (bsc#1047925, bsc#1047936, CVE-2017-11111, CVE-2017-10686)
- Enable unit tests in %check target</changelog>

</package>
<package pkgid="cd5c3e0c1ca6fe319916958715e5eff1b176ddcdbedc9b60eae8294e74556d31" name="nautilus-evince" arch="x86_64">
    <version epoch="0" ver="3.20.2" rel="6.1"/>

<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Split the backends in their own respective packages. This allows
  to extend evince with features as required.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728000">- Update to version 3.16.1:
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Never save n-copies in the persistent print-settings file
    (bgo#748549).
  + Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1432728001">- Update to version 3.17.1:
  + New features and improvements:
  - Provide a symbolic variant of the app icon (bgo#746844).
  - Add search support to browser plugin.
  - Create popup windows for all markup annotation that can have
    a popup associated (bgo#733603).
  - Add shortcuts for Continuous and Dual modes (bgo#670964).
  - Remove custom search bar implementation and use GtkSearchBar
    instead.
  + Bug fixes:
  - Never save n-copies in the persistent print-settings file
    (bgo#748549).
  - Fix the background color of annotation popup windows
    (bgo#732211).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1432814400">- Update to version 3.17.2:
  + Add initial support for PDF multimedia using GStreamer
    (bgo#573748).
  + Add accessible relations between the labels in properties
    dialog (bgo#749127).
  + Updated translations.
- Add pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(gstreamer-video-1.0) BuildRequires for the new
  multimedia support.
- Pass --enable-multimedia to configure, to ensure MM support is
  built.
- Drop --with-smclient=xsmp and --disable-scrollkeeper configure
  parameters: they are no longer understood for a while already.</changelog>
<changelog author="zaitor@opensuse.org" date="1435147200">- Update to version 3.17.3:
  + Add initial support for adding highlight annotations
    (bgo#583377).
  + Add support for squiggly highlight annotations too
    (bgo#750612).
  + Add support for moving text annotations (bgo#649043).
  + Force text annotations to have a fixed size 24x24 (bgo#685334).
  + Handle GTK_SCROLL_START/GTK_SCROLL_END also in fit-to-page mode
    (bgo#737996).
  + Bugs fixed: bgo#750548, bgo#741979.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 3.17.4:
  + The sidebar tab to add new annotations has been removed, and a
    new annotations toolbar has been added making it easier to
    discover and more convenient to annotate documents
    (bgo#649045).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + When copying a file, use the default permissions for the new
    file instead of copying the ones from the original file
    (bgo#753019).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.18.1:
  + Fix performance regression with recent versions of GTK+ when
    getting colors from GtkStyleContext for a different state
    (bgo#755442).
  + Fix a crash in PDF backend when opening documents containing
    screen annotations with no actions (bgo#756572).
  + Ignore right clicks while adding new annotations (bgo#755619).
  + Escape bookmark titles to be correctly rendered when they
    contain characters like &amp; (bgo#663019).
  + Fix handling of multiple files provided as command line
    arguments (bgo#755796).
  + Show error messages also in recent view mode (bgo#755064).
  + Do not crash when the rendering or thumbnail jobs fail
    (bgo#744049).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1447243200">- Update to version 3.18.2:
  + Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + New features and improvements:
  - Use a popover for view and action menus (bgo#760527).
  - Add shortcuts help window (bgo#757828).
  - Add Shift+Space keybinding to go back in presentation mode
    (bgo#758162).
  - Rename links sidebar title from Index to Outline
    (bgo#732547).
  - Add missing tooltips to the headerbar (bgo#595467).
  - Show the page label instead of page number in find sidebar
    (#756683).
  - Add a systemd user unit corresponding to the D-Bus session
    service (bgo#755897).
  - Recognize multipage DjVu MIME type (bgo#754467).
  - Add support for utf8 filenames on Mac OS X to comics backend
    (bgo#761161).
  + Bug fixes:
  - Fix text selection on Wayland (bgo#759506).
  - Manually destroy the search popover on toolbar dispose in
    browser plugin to try to fix a crashes on plugin destruction
    (bgo#762838).
  - Check boundaries of accessible pages to avoid crashes when
    the document is reloaded due to changes in the document file
    (bgo#735744).
  - Fix translations in thumbnailer help message (bgo#760418).
  - Fix text selections in annotation popups (bgo#749727).
  - Fix special characters in path to cbz (bgo#643843).
  - Fix css style of loading message (bgo#758356).
  - Fix warning with no document loaded (bgo#758596).
  - Fix unbalanced quote in configure script.
  - Fix installation of symbolic app icon.
  - Fix the position of the zoom action GtkPopover in Wayland
    (bgo#756976).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1463572800">- Add evince-fix-deprecated-warning.patch: Fix deprecation warning
  (boo#980576, bgo#765395).
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
<changelog author="zaitor@opensuse.org" date="1464004800">- Change Group in devel sub-package to Development/Languages/C and
  C++: Silence rpmlint.
- Drop old Provides and Obsoletes that do not make any sense
  keeping around anymore. Silence even more rpmlint warnings.
  + Provides: ggv, gpdf, evince-doc.
  + Obsoletes: ggv, gpdf, evince-doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1466078400">- Add AppStream metainfo for the -lang package (pass --metainfo
  to find_lang).</changelog>
<changelog author="zaitor@opensuse.org" date="1466683200">- Update to version 3.20.1:
  + Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  + Remove the MimeType association from the previewer desktop file
    (bgo#744893).
  + Fix build with GCC 6.
  + Fix calculation of the maximum width of page selector
    (bgo#764771).
  + Remove X11 dependency of nautilus extension (bgo#766710).
  + Preserve window chrome when opening a copy in new window
    (bgo#767532).
  + Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  + Updated translations.
- Drop evince-fix-deprecated-warning.patch: Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1467633600">- Only inject -lang-metainfo on Tumbleweed (older releases don't
  have the logic available yet).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083)</changelog>
<changelog author="adrien.plazas@suse.com" date="1511352000">- Update to version 3.20.2:
  + Remove support for tar and tar-like commands in comics backend.
    (bnc#1046856, bgo#784630, CVE-2017-1000083)
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.</changelog>

</package>
<package pkgid="305ac5f52aca1b000d56e32b6d9b73bc11b71eef901b8e9b35cb30693875a0ec" name="ncurses" arch="src">
    <version epoch="0" ver="5.9" rel="59.1"/>

<changelog author="werner@suse.de" date="1361188800">- Add ncurses patch 20130126
  + further fixes to mvcur to pass callback function (cf: 20130112),
    needed to make test/dots_mvcur work.
  + reduce calls to SetConsoleActiveScreenBuffer in win_driver.c, to
    help reduce flicker.
  + modify configure script to omit "+b" from linker options for very
    old HP-UX systems (report by Dennis Grevenstein)
  + add HP-UX workaround for missing EILSEQ on old HP-UX systems (patch
    by Dennis Grevenstein).
  + restore memmove/strdup support for antique systems (request by
    Dennis Grevenstein).
  + change %l behavior in tparm to push the string length onto the stack
    rather than saving the formatted length into the output buffer
    (report by Roy Marples, cf: 980620).
- Add ncurses patch 20130202
  + correct initialization in knight.c which let it occasionally make
    an incorrect move (cf: 20001028).
  + improve documentation of the terminfo/termcap search path.
- Add ncurses patch 20130209
  + modify test/configure script to make it simpler to override names
    of curses-related libraries, to help with linking with pdcurses in
    mingw environment.
  + if the --with-terminfo-dirs configure option is not used, there is
    no corresponding compiled-in value for that.  Fill in "no default
    value" for that part of the manpage substitution.
- Add ncurses patch 20130216
  + modify test/testcurs.c to work with mouse for ncurses as it does for
    pdcurses.
  + modify test/knight.c to work with mouse for pdcurses as it does for
    ncurses.
  + modify internal recursion in wgetch() which handles cooked mode to
    check if the call to wgetnstr() returned an error.  This can happen
    when both nocbreak() and nodelay() are set, for instance (report by
    Nils Christopher Brause) (cf: 960418).
  + fixes for issues found by Coverity:
    + add a check for valid position in ClearToEOS()
    + fix in lib_twait.c when --enable-wgetch-events is used, pointer
    use after free.
    + improve a limit-check in make_hash.c
    + fix a memory leak in hashed_db.c
- Add ncurses patch 20130218
  + correct ifdef on change to lib_twait.c (report by  Werner Fink).
  + update config.guess, config.sub
- Use screen to emulate a terminal to enable the configure script to
  use poll(2) system call on stderr file descriptor</changelog>
<changelog author="werner@suse.de" date="1364299200">- Add ncurses patch 20130324
  + build-fix for libtool configuration (reports by Daniel Silva Ferreira
    and Roumen Petrov).
- Add ncurses patch 20130323
  + build-fix for OS X, to handle changes for --with-cxx-shared feature
    (report by Christian Ebert).
  + change initialization for vt220, similar entries for consistency
    with cursor-key strings (NetBSD #47674) -TD
  + further improvements to linux-16color (Benjamin Sittler)
- Add ncurses patch 20130316
  + additional fix for tic.c, to allocate missing buffer space.
  + eliminate configure-script warnings for gen-pkgconfig.in
  + correct typo in sgr string for sun-color,
    add bold for consistency with sgr,
    change smso for consistency with sgr -TD
  + correct typo in sgr string for terminator -TD
  + add blink to the attributes masked by ncv in linux-16color (report
    by Benjamin Sittler)
  + improve warning message from post-load checking for missing "%?"
    operator by tic/infocmp by showing the entry name and capability.
  + minor formatting improvement to tic/infocmp -f option to ensure
    line split after "%;".
  + amend scripting for --with-cxx-shared option to handle the debug
    library "libncurses++_g.a" (report by Sven Joachim).
- Add ncurses patch 20130309
  + amend change to toe.c for reading from /dev/zero, to ensure that
    there is a buffer for the temporary filename (cf: 20120324).
  + regenerated html manpages.
  + fix typo in terminfo.head (report by Sven Joachim, cf: 20130302).
  + updated some autoconf macros:
    + CF_ACVERSION_CHECK, from byacc 1.9 20130304
    + CF_INTEL_COMPILER, CF_XOPEN_SOURCE from luit 2.0-20130217
  + add configure option --with-cxx-shared to permit building
    libncurses++ as a shared library when using g++, e.g., the same
    limitations as libtool but better integrated with the usual build
    configuration (Redhat 911540).
  + modify MKkey_defs.sh to filter out build-path which was unnecessarily
    shown in curses.h (Debian #689131).
- Add ncurses patch 20130302
  + add section to terminfo manpage discussing user-defined capabilities.
  + update manpage description of NCURSES_NO_SETBUF, explaining why it
    is obsolete.
  + add a check in waddch_nosync() to ensure that tab characters are
    treated as control characters; some broken locales claim they are
    printable.
  + add some traces to the Windows console driver.
  + initialize a temporary array in _nc_mbtowc, needed for some cases
    of raw input in MinGW port.
- Make it build even with shared libncurses++ and its demo test program</changelog>
<changelog author="werner@suse.de" date="1368446400">- Add ncurses patch 20130511
  + move nsterm-related entries out of "obsolete" section to more
    plausible "ansi consoles" -TD
  + additional cleanup of table-of-contents by reordering -TD
  + revise fix for check for 8-bit value in _nc_insert_ch(); prior fix
    prevented inserts when video attributes were attached to the data
    (cf: 20121215) (Redhat #959534).
- Add ncurses patch 20130504
  + fixes for issues found by Coverity:
    + correct FNKEY() macro in progs/dump_entry.c, allowing kf11-kf63 to
    display when infocmp's -R option is used for HP or AIX subsets.
    + fix dead-code issue with test/movewindow.c
    + improve limited-checking in _nc_read_termtype().
- Add ncurses patch 20130427
  + fix clang 3.2 warning in progs/dump_entry.c
  + drop AC_TYPE_SIGNAL check; ncurses relies on c89 and later.
- Add ncurses patch 20130413
  + add MinGW to cases where ncurses installs by default into /usr
    (prompted by discussion with Daniel Silva Ferreira).
  + add -D option to infocmp's usage-message (patch by Miroslav Lichvar).
  + add a missing 'int' type for main function in configure check for
    type of bool variable, to work with clang 3.2 (report by Dmitri
    Gribenko).
  + improve configure check for static_cast, to work with clang 3.2
    (report by Dmitri Gribenko).
  + re-order rule for demo.o and macros defining header dependencies in
    c++/Makefile.in to accommodate gmake (report by Dmitri Gribenko).
- Add ncurses patch 20130406
  + improve parameter checking in copywin().
  + modify configure script to work around OS X's "libtool" program, to
    choose glibtool instead.  At the same time, chance the autoconf macro
    to look for a "tool" rather than a "prog", to help with potential use
    in cross-compiling.
  + separate the rpath usage for c++ library from demo program
    (Redhat #911540)
  + update/correct header-dependencies in c++ makefile (report by Werner
    Fink).
  + add --with-cxx-shared to dpkg-script, as done for rpm-script.</changelog>
<changelog author="werner@suse.de" date="1368446401">- Make LD_LIBRARY_PATH include %_lib to make sure use and test the
  fresh build libraries</changelog>
<changelog author="werner@suse.de" date="1371816000">- Add some more terminfo entries to terminfo-base (bnc#826171)</changelog>
<changelog author="werner@suse.de" date="1375704000">- Add ncurses patch 20130805
  + minor fixes to the --disable-overwrite logic, to ensure that the
    configured $(includedir) is not cancelled by the mingwxx-filesystem
    rpm macros.
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.
- Add ncurses patch 20130727
  + improve configure macros from ongoing work on cdk, dialog, xterm:
    + CF_ADD_LIB_AFTER - fix a problem with -Wl options
    + CF_RPATH_HACK - add missing result-message
    + CF_SHARED_OPTS - modify to use $rel_builddir in cygwin and mingw
    dll symbols (which can be overridden) rather than explicit "../".
    + CF_SHARED_OPTS - modify NetBSD and DragonFly symbols to use ${CC}
    rather than ${LD} to improve rpath support.
    + CF_SHARED_OPTS - add a symbol to denote the temporary files that
    are created by the macro, to simplify clean-rules.
    + CF_X_ATHENA - trim extra libraries to work with -Wl,--as-needed
  + fix a regression in hashed-database support for NetBSD, which uses
    the key-size differently from other implementations (cf: 20121229).
- Add ncurses patch 20130720
  + further improvements for setupterm manpage, clarifying the
    initialization of cur_term.
- Add ncurses patch 20130713
  + improve manpages for initscr and setupterm.
  + minor compiler-warning fixes
- Add ncurses patch 20130706
  + add fallback defs for &lt;inttypes.h&gt; and &lt;stdint.h&gt; (cf: 20120225).
  + add check for size of wchar_t, use that to suppress a chunk of
    wcwidth.h in MinGW port.
  + quiet linker warnings for MinGW cross-compile with dll's using the
  - -enable-auto-import flag.
  + add ncurses.map rule to ncurses/Makefile to help diagnose symbol
    table issues.
- Add ncurses patch 20130622
  + modify the clear program to take into account the E3 extended
    capability to clear the terminal's scrollback buffer (patch by
    Miroslav Lichvar, Redhat #815790).
  + clarify in resizeterm manpage that LINES and COLS are updated.
  + updated ansi example in terminfo.tail, correct misordered example
    of sgr.
  + fix other doclifter warnings for manpages
  + remove unnecessary ".ta" in terminfo.tail, add missing ".fi"
    (patch by Eric Raymond).
- Add ncurses patch 20130615
  + minor changes to some configure macros to make them more reusable.
  + fixes for tabs program (prompted by report by Nick Andrik):
    + corrected logic in command-line parsing of -a and -c predefined
    tab-lists options.
    + allow "-0" and "-8" options to be combined with others, e.g.,"-0d".
    + make warning messages more consistent with the other utilities by
    not printing the full pathname of the program.
    + add -V option for consistency with other utilities.
  + fix off-by-one in columns for tabs program when processing an option
    such as "-5" (patch by Nick Andrik).
- Add ncurses patch 20130608
  + add to test/demo_forms.c examples of using the menu-hooks as well
    as showing how the menu item user-data can be used to pass a callback
    function pointer.
  + add test/dots_termcap.c
  + remove setupterm call from test/demo_termcap.c
  + build-fix if --disable-ext-funcs configure option is used.
  + modified test/edit_field.c and test/demo_forms.c to move the lengths
    into a user-data structure, keeping the original string for later
    expansion to free-format input/out demo.
  + modified test/demo_forms.c to load data from file.
  + added note to clarify Terminal.app's non-emulation of the various
    terminal types listed in the preferences dialog -TD
  + fix regression in error-reporting in lib_setup.c (Debian #711134,
    cf: 20121117).
  + build-fix for a case where --enable-broken_linker and
  - -enable-reentrant options are combined (report by George R Goffe).
- Add ncurses patch 20130525
  + modify mvcur() to distinguish between internal use by the ncurses
    library, and external callers, preventing it from reading the content
    of the screen which is only nonblank when curses calls have updated
    it.  This makes test/dots_mvcur.c avoid painting colored cells in
    the left margin of the display.
  + minor fix to test/dots_mvcur.c
  + move configured symbols USE_DATABASE and USE_TERMCAP to term.h as
    NCURSES_USE_DATABASE and NCURSES_USE_TERMCAP to allow consistent
    use of these symbols in term_entry.h
- Add ncurses patch 20130518
  + corrected ifdefs in test/testcurs.c to allow comparison of mouse
    interface versus pdcurses (cf: 20130316).
  + add pow() to configure-check for math library, needed since
    20121208 for test/hanoi (Debian #708056).
  + regenerated html manpages.
  + update doctype used for html documentation.</changelog>
<changelog author="werner@suse.de" date="1380542400">- Add ncurses patch 20130928
  + fix a possible null-pointer reference in a trace message from newterm.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.
- Add ncurses patch 20130921
  + fix typo in curs_attr.3x (patch by Sven Joachim, cf: 20130831).
  + build-fix for --with-shared option for DragonFly and FreeBSD (report
    by Rong-En Fan, cf: 20130727).
- Add ncurses patch 20130907
  + revert change to two of the dpkg format files, to work with dpkg
    before/after Debian #700177.
  + fix gcc -Wconversion warning in wattr_get() macro.
  + add msys and msysdll to known host/configuration types (patch by
    Alexey Pavlov).
  + modify CF_RPATH_HACK configure macro to not rely upon "-u" option
    of sort, improving portability.
- Add ncurses patch 20130831
  + modify test/ncurses.c b/B tests to display lines only for the
    attributes which a given terminal supports, to make room for an
    italics test.
  + completed ncv table in terminfo.tail; it did not list the wide
    character codes listed in X/Open Curses issue 7.
  + add A_ITALIC extension (prompted by discussion with Egmont Koblinger).
- Add ncurses patch 20130824
  + fix some gcc 4.8 -Wconversion warnings.
  + change format of dpkg test-scripts to quilted to work around bug
    introduced by Debian #700177.
  + discard cached keyname() values if meta() is changed after a value
    was cached using (report by Kurban Mallachiev).
- Add ncurses patch 20130816
  + add checks in tic to warn about terminals which lack cursor
    addressing, capabilities or having those, are marked as hard_copy or
    generic_type.
  + use --without-progs in mingw-ncurses rpm.
  + split out _nc_init_termtype() from alloc_entry.c to use in MinGW
    port when tic and other programs are not needed.
- Add ncurses patch 20130805
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.</changelog>
<changelog author="werner@suse.de" date="1383048000">- Make it build even with new tar command
- Add ncurses patch 20131027
  + correct/simplify ifdef's for cur_term versus broken-linker and
    reentrant options (report by Jean-Pierre Flori, cf: 20090530).
  + modify release/version combinations in test build-scripts to make
    them more consistent with other packages.
- Add ncurses patch 20131019
  + add nc_mingw.h to installed headers for MinGW port; needed for
    compiling ncurses-examples.
  + add rpm-script for testing cross-compile of ncurses-examples.
- Add ncurses patch 20131014
  + fix new typo in CF_ADA_INCLUDE_DIRS macro (report by Roumen Petrov).
- Add ncurses patch 20131012
  + fix a few compiler warnings in progs and test.
  + minor fix to package/debian-mingw/rules, do not strip dll's.
  + minor fixes to configure script for empty $prefix, e.g., when doing
    cross-compiles to MinGW.
  + add script for building test-packages of binaries cross-compiled to
    MinGW using NSIS.
- Add ncurses patch 20131005
  + minor fixes for ncurses-example package and makefile.
  + add scripts for test-builds of cross-compiler packages for ncurses6
    to MinGW.
- Add ncurses patch 20130928
  + some build-fixes for ncurses-examples with NetBSD-6.0 curses, though
    it lacks some common functions such as use_env() which is not yet
    addressed.
  + build-fix and some compiler warning fixes for ncurses-examples with
    OpenBSD 5.3
  + fix a possible null-pointer reference in a trace message from newterm.
  + quiet a few warnings from NetBSD 6.0 namespace pollution by
    nonstandard popcount() function in standard strings.h header.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.</changelog>
<changelog author="werner@suse.de" date="1383739200">- Add ncurses patch 20131102
  + use TS extension to describe xterm's title-escapes -TD
  + modify terminator and nsterm-s to use xterm+sl-twm building block -TD
  + simplify pfkey expression in ansi.sys -TD</changelog>
<changelog author="werner@suse.de" date="1385726400">- On S390(x) use other fallback terminal types, that is have the
  ibm327x and vt220 available even if no terminfo-base is installed.</changelog>
<changelog author="werner@suse.de" date="1385726401">- Add ncurses patch 20131123
  + minor fix for CF_GCC_WARNINGS to special-case options which are not
  recognized by clang.
- Add ncurses patch 20131116
  + add special case to configure script to move _XOPEN_SOURCE_EXTENDED
    definition from CPPFLAGS to CFLAGS if it happens to be needed for
    Solaris, because g++ errors with that definition (report by
    Jean-Pierre Flori, Sage #15268).
  + correct logic in infocmp's -i option which was intended to ignore
    strings which correspond to function-keys as candidates for piecing
    together initialization- or reset-strings.  The problem dates to
    1.9.7a, but was overlooked until changes in -Wlogical-op warnings for
    gcc 4.8 (report by David Binderman).
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, adding
    checks for -Wextra, -Wignored-qualifiers and -Wlogical-op
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, moving
    checks for -Wextra and -Wdeclaration-after-statement into the macro,
    and adding checks for -Wignored-qualifiers, -Wlogical-op and -Wvarargs
  + updated CF_CURSES_UNCTRL_H and CF_SHARED_OPTS macros from ongoing
    work on cdk.
- Add ncurses patch 20131110
  + minor cleanup of terminfo.tail</changelog>
<changelog author="werner@suse.de" date="1386676800">- Add ncurses patch 20131207
  + add form_driver_w() entrypoint to wide-character forms library,
    as well as test program form_driver_w (adapted from patch by
    Gaute Hope).</changelog>
<changelog author="werner@suse.de" date="1387281600">- Add ncurses patch 20131214
  + modify configure-script/ifdef's to allow OLD_TTY feature to be
    suppressed if the type of ospeed is configured using the option
  - -with-ospeed to not be a short.  By default, it is a short for
    termcap-compatibility (adapted from suggestion by Christian
    Weisgerber).
  + correct a typo in _nc_baudrate() (patch by Christian Weisgerber,
    cf: 20061230).
  + fix a few -Wlogical-op warnings.
  + updated llib-l* files.</changelog>
<changelog author="werner@suse.de" date="1390219200">- Add ncurses patch 20140118
  + apply includesubdir variable which was introduced in 20130805 to
    gen-pkgconfig.in (Debian #735782).
- Correct spec file irarch to make S390(x) fallback terminal types
  working on S390(x) (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1390910400">- Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
  terminal type but a more dumb one (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1391428800">- Add ncurses patch 20140201
  + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
    which "short" types are for color pairs and which are color values.
  + fix build for s390x, by correcting field bit offsets in generated
    representation clauses when int=32 long=64 and endian=big, or at
    least on s390x (patch by Nicolas Boulenguez).
  + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
- Add ncurses patch 20140125
  + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
    not work as is with gcc 4.8 due to fixes using chtype cast made for
    new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
    by Nicolas Boulenguez).</changelog>
<changelog author="werner@suse.de" date="1477569600">- Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
  not need it anymore and as well as it causes bug bsc#1000662</changelog>
<changelog author="werner@suse.de" date="1499083200">- Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
  from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
  CVE-2017-10685 (bsc#1046853, bsc#1046858)</changelog>
<changelog author="werner@suse.de" date="1499688000">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
  change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
  and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
- This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
  bsc#1047965)</changelog>
<changelog author="werner@suse.de" date="1500465600">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
  termcap format caused by the backport of change 20170701  (boo#1049344)</changelog>

</package>
<package pkgid="6a213f0083f8c9d916f4d17745e80928d8df49646407519e2df921c6e54bd3f4" name="ncurses-devel" arch="x86_64">
    <version epoch="0" ver="5.9" rel="59.1"/>

<changelog author="werner@suse.de" date="1361188800">- Add ncurses patch 20130126
  + further fixes to mvcur to pass callback function (cf: 20130112),
    needed to make test/dots_mvcur work.
  + reduce calls to SetConsoleActiveScreenBuffer in win_driver.c, to
    help reduce flicker.
  + modify configure script to omit "+b" from linker options for very
    old HP-UX systems (report by Dennis Grevenstein)
  + add HP-UX workaround for missing EILSEQ on old HP-UX systems (patch
    by Dennis Grevenstein).
  + restore memmove/strdup support for antique systems (request by
    Dennis Grevenstein).
  + change %l behavior in tparm to push the string length onto the stack
    rather than saving the formatted length into the output buffer
    (report by Roy Marples, cf: 980620).
- Add ncurses patch 20130202
  + correct initialization in knight.c which let it occasionally make
    an incorrect move (cf: 20001028).
  + improve documentation of the terminfo/termcap search path.
- Add ncurses patch 20130209
  + modify test/configure script to make it simpler to override names
    of curses-related libraries, to help with linking with pdcurses in
    mingw environment.
  + if the --with-terminfo-dirs configure option is not used, there is
    no corresponding compiled-in value for that.  Fill in "no default
    value" for that part of the manpage substitution.
- Add ncurses patch 20130216
  + modify test/testcurs.c to work with mouse for ncurses as it does for
    pdcurses.
  + modify test/knight.c to work with mouse for pdcurses as it does for
    ncurses.
  + modify internal recursion in wgetch() which handles cooked mode to
    check if the call to wgetnstr() returned an error.  This can happen
    when both nocbreak() and nodelay() are set, for instance (report by
    Nils Christopher Brause) (cf: 960418).
  + fixes for issues found by Coverity:
    + add a check for valid position in ClearToEOS()
    + fix in lib_twait.c when --enable-wgetch-events is used, pointer
    use after free.
    + improve a limit-check in make_hash.c
    + fix a memory leak in hashed_db.c
- Add ncurses patch 20130218
  + correct ifdef on change to lib_twait.c (report by  Werner Fink).
  + update config.guess, config.sub
- Use screen to emulate a terminal to enable the configure script to
  use poll(2) system call on stderr file descriptor</changelog>
<changelog author="werner@suse.de" date="1364299200">- Add ncurses patch 20130324
  + build-fix for libtool configuration (reports by Daniel Silva Ferreira
    and Roumen Petrov).
- Add ncurses patch 20130323
  + build-fix for OS X, to handle changes for --with-cxx-shared feature
    (report by Christian Ebert).
  + change initialization for vt220, similar entries for consistency
    with cursor-key strings (NetBSD #47674) -TD
  + further improvements to linux-16color (Benjamin Sittler)
- Add ncurses patch 20130316
  + additional fix for tic.c, to allocate missing buffer space.
  + eliminate configure-script warnings for gen-pkgconfig.in
  + correct typo in sgr string for sun-color,
    add bold for consistency with sgr,
    change smso for consistency with sgr -TD
  + correct typo in sgr string for terminator -TD
  + add blink to the attributes masked by ncv in linux-16color (report
    by Benjamin Sittler)
  + improve warning message from post-load checking for missing "%?"
    operator by tic/infocmp by showing the entry name and capability.
  + minor formatting improvement to tic/infocmp -f option to ensure
    line split after "%;".
  + amend scripting for --with-cxx-shared option to handle the debug
    library "libncurses++_g.a" (report by Sven Joachim).
- Add ncurses patch 20130309
  + amend change to toe.c for reading from /dev/zero, to ensure that
    there is a buffer for the temporary filename (cf: 20120324).
  + regenerated html manpages.
  + fix typo in terminfo.head (report by Sven Joachim, cf: 20130302).
  + updated some autoconf macros:
    + CF_ACVERSION_CHECK, from byacc 1.9 20130304
    + CF_INTEL_COMPILER, CF_XOPEN_SOURCE from luit 2.0-20130217
  + add configure option --with-cxx-shared to permit building
    libncurses++ as a shared library when using g++, e.g., the same
    limitations as libtool but better integrated with the usual build
    configuration (Redhat 911540).
  + modify MKkey_defs.sh to filter out build-path which was unnecessarily
    shown in curses.h (Debian #689131).
- Add ncurses patch 20130302
  + add section to terminfo manpage discussing user-defined capabilities.
  + update manpage description of NCURSES_NO_SETBUF, explaining why it
    is obsolete.
  + add a check in waddch_nosync() to ensure that tab characters are
    treated as control characters; some broken locales claim they are
    printable.
  + add some traces to the Windows console driver.
  + initialize a temporary array in _nc_mbtowc, needed for some cases
    of raw input in MinGW port.
- Make it build even with shared libncurses++ and its demo test program</changelog>
<changelog author="werner@suse.de" date="1368446400">- Add ncurses patch 20130511
  + move nsterm-related entries out of "obsolete" section to more
    plausible "ansi consoles" -TD
  + additional cleanup of table-of-contents by reordering -TD
  + revise fix for check for 8-bit value in _nc_insert_ch(); prior fix
    prevented inserts when video attributes were attached to the data
    (cf: 20121215) (Redhat #959534).
- Add ncurses patch 20130504
  + fixes for issues found by Coverity:
    + correct FNKEY() macro in progs/dump_entry.c, allowing kf11-kf63 to
    display when infocmp's -R option is used for HP or AIX subsets.
    + fix dead-code issue with test/movewindow.c
    + improve limited-checking in _nc_read_termtype().
- Add ncurses patch 20130427
  + fix clang 3.2 warning in progs/dump_entry.c
  + drop AC_TYPE_SIGNAL check; ncurses relies on c89 and later.
- Add ncurses patch 20130413
  + add MinGW to cases where ncurses installs by default into /usr
    (prompted by discussion with Daniel Silva Ferreira).
  + add -D option to infocmp's usage-message (patch by Miroslav Lichvar).
  + add a missing 'int' type for main function in configure check for
    type of bool variable, to work with clang 3.2 (report by Dmitri
    Gribenko).
  + improve configure check for static_cast, to work with clang 3.2
    (report by Dmitri Gribenko).
  + re-order rule for demo.o and macros defining header dependencies in
    c++/Makefile.in to accommodate gmake (report by Dmitri Gribenko).
- Add ncurses patch 20130406
  + improve parameter checking in copywin().
  + modify configure script to work around OS X's "libtool" program, to
    choose glibtool instead.  At the same time, chance the autoconf macro
    to look for a "tool" rather than a "prog", to help with potential use
    in cross-compiling.
  + separate the rpath usage for c++ library from demo program
    (Redhat #911540)
  + update/correct header-dependencies in c++ makefile (report by Werner
    Fink).
  + add --with-cxx-shared to dpkg-script, as done for rpm-script.</changelog>
<changelog author="werner@suse.de" date="1368446401">- Make LD_LIBRARY_PATH include %_lib to make sure use and test the
  fresh build libraries</changelog>
<changelog author="werner@suse.de" date="1371816000">- Add some more terminfo entries to terminfo-base (bnc#826171)</changelog>
<changelog author="werner@suse.de" date="1375704000">- Add ncurses patch 20130805
  + minor fixes to the --disable-overwrite logic, to ensure that the
    configured $(includedir) is not cancelled by the mingwxx-filesystem
    rpm macros.
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.
- Add ncurses patch 20130727
  + improve configure macros from ongoing work on cdk, dialog, xterm:
    + CF_ADD_LIB_AFTER - fix a problem with -Wl options
    + CF_RPATH_HACK - add missing result-message
    + CF_SHARED_OPTS - modify to use $rel_builddir in cygwin and mingw
    dll symbols (which can be overridden) rather than explicit "../".
    + CF_SHARED_OPTS - modify NetBSD and DragonFly symbols to use ${CC}
    rather than ${LD} to improve rpath support.
    + CF_SHARED_OPTS - add a symbol to denote the temporary files that
    are created by the macro, to simplify clean-rules.
    + CF_X_ATHENA - trim extra libraries to work with -Wl,--as-needed
  + fix a regression in hashed-database support for NetBSD, which uses
    the key-size differently from other implementations (cf: 20121229).
- Add ncurses patch 20130720
  + further improvements for setupterm manpage, clarifying the
    initialization of cur_term.
- Add ncurses patch 20130713
  + improve manpages for initscr and setupterm.
  + minor compiler-warning fixes
- Add ncurses patch 20130706
  + add fallback defs for &lt;inttypes.h&gt; and &lt;stdint.h&gt; (cf: 20120225).
  + add check for size of wchar_t, use that to suppress a chunk of
    wcwidth.h in MinGW port.
  + quiet linker warnings for MinGW cross-compile with dll's using the
  - -enable-auto-import flag.
  + add ncurses.map rule to ncurses/Makefile to help diagnose symbol
    table issues.
- Add ncurses patch 20130622
  + modify the clear program to take into account the E3 extended
    capability to clear the terminal's scrollback buffer (patch by
    Miroslav Lichvar, Redhat #815790).
  + clarify in resizeterm manpage that LINES and COLS are updated.
  + updated ansi example in terminfo.tail, correct misordered example
    of sgr.
  + fix other doclifter warnings for manpages
  + remove unnecessary ".ta" in terminfo.tail, add missing ".fi"
    (patch by Eric Raymond).
- Add ncurses patch 20130615
  + minor changes to some configure macros to make them more reusable.
  + fixes for tabs program (prompted by report by Nick Andrik):
    + corrected logic in command-line parsing of -a and -c predefined
    tab-lists options.
    + allow "-0" and "-8" options to be combined with others, e.g.,"-0d".
    + make warning messages more consistent with the other utilities by
    not printing the full pathname of the program.
    + add -V option for consistency with other utilities.
  + fix off-by-one in columns for tabs program when processing an option
    such as "-5" (patch by Nick Andrik).
- Add ncurses patch 20130608
  + add to test/demo_forms.c examples of using the menu-hooks as well
    as showing how the menu item user-data can be used to pass a callback
    function pointer.
  + add test/dots_termcap.c
  + remove setupterm call from test/demo_termcap.c
  + build-fix if --disable-ext-funcs configure option is used.
  + modified test/edit_field.c and test/demo_forms.c to move the lengths
    into a user-data structure, keeping the original string for later
    expansion to free-format input/out demo.
  + modified test/demo_forms.c to load data from file.
  + added note to clarify Terminal.app's non-emulation of the various
    terminal types listed in the preferences dialog -TD
  + fix regression in error-reporting in lib_setup.c (Debian #711134,
    cf: 20121117).
  + build-fix for a case where --enable-broken_linker and
  - -enable-reentrant options are combined (report by George R Goffe).
- Add ncurses patch 20130525
  + modify mvcur() to distinguish between internal use by the ncurses
    library, and external callers, preventing it from reading the content
    of the screen which is only nonblank when curses calls have updated
    it.  This makes test/dots_mvcur.c avoid painting colored cells in
    the left margin of the display.
  + minor fix to test/dots_mvcur.c
  + move configured symbols USE_DATABASE and USE_TERMCAP to term.h as
    NCURSES_USE_DATABASE and NCURSES_USE_TERMCAP to allow consistent
    use of these symbols in term_entry.h
- Add ncurses patch 20130518
  + corrected ifdefs in test/testcurs.c to allow comparison of mouse
    interface versus pdcurses (cf: 20130316).
  + add pow() to configure-check for math library, needed since
    20121208 for test/hanoi (Debian #708056).
  + regenerated html manpages.
  + update doctype used for html documentation.</changelog>
<changelog author="werner@suse.de" date="1380542400">- Add ncurses patch 20130928
  + fix a possible null-pointer reference in a trace message from newterm.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.
- Add ncurses patch 20130921
  + fix typo in curs_attr.3x (patch by Sven Joachim, cf: 20130831).
  + build-fix for --with-shared option for DragonFly and FreeBSD (report
    by Rong-En Fan, cf: 20130727).
- Add ncurses patch 20130907
  + revert change to two of the dpkg format files, to work with dpkg
    before/after Debian #700177.
  + fix gcc -Wconversion warning in wattr_get() macro.
  + add msys and msysdll to known host/configuration types (patch by
    Alexey Pavlov).
  + modify CF_RPATH_HACK configure macro to not rely upon "-u" option
    of sort, improving portability.
- Add ncurses patch 20130831
  + modify test/ncurses.c b/B tests to display lines only for the
    attributes which a given terminal supports, to make room for an
    italics test.
  + completed ncv table in terminfo.tail; it did not list the wide
    character codes listed in X/Open Curses issue 7.
  + add A_ITALIC extension (prompted by discussion with Egmont Koblinger).
- Add ncurses patch 20130824
  + fix some gcc 4.8 -Wconversion warnings.
  + change format of dpkg test-scripts to quilted to work around bug
    introduced by Debian #700177.
  + discard cached keyname() values if meta() is changed after a value
    was cached using (report by Kurban Mallachiev).
- Add ncurses patch 20130816
  + add checks in tic to warn about terminals which lack cursor
    addressing, capabilities or having those, are marked as hard_copy or
    generic_type.
  + use --without-progs in mingw-ncurses rpm.
  + split out _nc_init_termtype() from alloc_entry.c to use in MinGW
    port when tic and other programs are not needed.
- Add ncurses patch 20130805
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.</changelog>
<changelog author="werner@suse.de" date="1383048000">- Make it build even with new tar command
- Add ncurses patch 20131027
  + correct/simplify ifdef's for cur_term versus broken-linker and
    reentrant options (report by Jean-Pierre Flori, cf: 20090530).
  + modify release/version combinations in test build-scripts to make
    them more consistent with other packages.
- Add ncurses patch 20131019
  + add nc_mingw.h to installed headers for MinGW port; needed for
    compiling ncurses-examples.
  + add rpm-script for testing cross-compile of ncurses-examples.
- Add ncurses patch 20131014
  + fix new typo in CF_ADA_INCLUDE_DIRS macro (report by Roumen Petrov).
- Add ncurses patch 20131012
  + fix a few compiler warnings in progs and test.
  + minor fix to package/debian-mingw/rules, do not strip dll's.
  + minor fixes to configure script for empty $prefix, e.g., when doing
    cross-compiles to MinGW.
  + add script for building test-packages of binaries cross-compiled to
    MinGW using NSIS.
- Add ncurses patch 20131005
  + minor fixes for ncurses-example package and makefile.
  + add scripts for test-builds of cross-compiler packages for ncurses6
    to MinGW.
- Add ncurses patch 20130928
  + some build-fixes for ncurses-examples with NetBSD-6.0 curses, though
    it lacks some common functions such as use_env() which is not yet
    addressed.
  + build-fix and some compiler warning fixes for ncurses-examples with
    OpenBSD 5.3
  + fix a possible null-pointer reference in a trace message from newterm.
  + quiet a few warnings from NetBSD 6.0 namespace pollution by
    nonstandard popcount() function in standard strings.h header.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.</changelog>
<changelog author="werner@suse.de" date="1383739200">- Add ncurses patch 20131102
  + use TS extension to describe xterm's title-escapes -TD
  + modify terminator and nsterm-s to use xterm+sl-twm building block -TD
  + simplify pfkey expression in ansi.sys -TD</changelog>
<changelog author="werner@suse.de" date="1385726400">- On S390(x) use other fallback terminal types, that is have the
  ibm327x and vt220 available even if no terminfo-base is installed.</changelog>
<changelog author="werner@suse.de" date="1385726401">- Add ncurses patch 20131123
  + minor fix for CF_GCC_WARNINGS to special-case options which are not
  recognized by clang.
- Add ncurses patch 20131116
  + add special case to configure script to move _XOPEN_SOURCE_EXTENDED
    definition from CPPFLAGS to CFLAGS if it happens to be needed for
    Solaris, because g++ errors with that definition (report by
    Jean-Pierre Flori, Sage #15268).
  + correct logic in infocmp's -i option which was intended to ignore
    strings which correspond to function-keys as candidates for piecing
    together initialization- or reset-strings.  The problem dates to
    1.9.7a, but was overlooked until changes in -Wlogical-op warnings for
    gcc 4.8 (report by David Binderman).
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, adding
    checks for -Wextra, -Wignored-qualifiers and -Wlogical-op
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, moving
    checks for -Wextra and -Wdeclaration-after-statement into the macro,
    and adding checks for -Wignored-qualifiers, -Wlogical-op and -Wvarargs
  + updated CF_CURSES_UNCTRL_H and CF_SHARED_OPTS macros from ongoing
    work on cdk.
- Add ncurses patch 20131110
  + minor cleanup of terminfo.tail</changelog>
<changelog author="werner@suse.de" date="1386676800">- Add ncurses patch 20131207
  + add form_driver_w() entrypoint to wide-character forms library,
    as well as test program form_driver_w (adapted from patch by
    Gaute Hope).</changelog>
<changelog author="werner@suse.de" date="1387281600">- Add ncurses patch 20131214
  + modify configure-script/ifdef's to allow OLD_TTY feature to be
    suppressed if the type of ospeed is configured using the option
  - -with-ospeed to not be a short.  By default, it is a short for
    termcap-compatibility (adapted from suggestion by Christian
    Weisgerber).
  + correct a typo in _nc_baudrate() (patch by Christian Weisgerber,
    cf: 20061230).
  + fix a few -Wlogical-op warnings.
  + updated llib-l* files.</changelog>
<changelog author="werner@suse.de" date="1390219200">- Add ncurses patch 20140118
  + apply includesubdir variable which was introduced in 20130805 to
    gen-pkgconfig.in (Debian #735782).
- Correct spec file irarch to make S390(x) fallback terminal types
  working on S390(x) (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1390910400">- Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
  terminal type but a more dumb one (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1391428800">- Add ncurses patch 20140201
  + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
    which "short" types are for color pairs and which are color values.
  + fix build for s390x, by correcting field bit offsets in generated
    representation clauses when int=32 long=64 and endian=big, or at
    least on s390x (patch by Nicolas Boulenguez).
  + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
- Add ncurses patch 20140125
  + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
    not work as is with gcc 4.8 due to fixes using chtype cast made for
    new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
    by Nicolas Boulenguez).</changelog>
<changelog author="werner@suse.de" date="1477569600">- Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
  not need it anymore and as well as it causes bug bsc#1000662</changelog>
<changelog author="werner@suse.de" date="1499083200">- Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
  from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
  CVE-2017-10685 (bsc#1046853, bsc#1046858)</changelog>
<changelog author="werner@suse.de" date="1499688000">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
  change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
  and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
- This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
  bsc#1047965)</changelog>
<changelog author="werner@suse.de" date="1500465600">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
  termcap format caused by the backport of change 20170701  (boo#1049344)</changelog>

</package>
<package pkgid="b7263b00b025f5f060f7b9ff7e338a9e157f878fb26cf8a9a80d75a0f019dfca" name="ncurses-devel-32bit" arch="x86_64">
    <version epoch="0" ver="5.9" rel="59.1"/>

<changelog author="werner@suse.de" date="1361188800">- Add ncurses patch 20130126
  + further fixes to mvcur to pass callback function (cf: 20130112),
    needed to make test/dots_mvcur work.
  + reduce calls to SetConsoleActiveScreenBuffer in win_driver.c, to
    help reduce flicker.
  + modify configure script to omit "+b" from linker options for very
    old HP-UX systems (report by Dennis Grevenstein)
  + add HP-UX workaround for missing EILSEQ on old HP-UX systems (patch
    by Dennis Grevenstein).
  + restore memmove/strdup support for antique systems (request by
    Dennis Grevenstein).
  + change %l behavior in tparm to push the string length onto the stack
    rather than saving the formatted length into the output buffer
    (report by Roy Marples, cf: 980620).
- Add ncurses patch 20130202
  + correct initialization in knight.c which let it occasionally make
    an incorrect move (cf: 20001028).
  + improve documentation of the terminfo/termcap search path.
- Add ncurses patch 20130209
  + modify test/configure script to make it simpler to override names
    of curses-related libraries, to help with linking with pdcurses in
    mingw environment.
  + if the --with-terminfo-dirs configure option is not used, there is
    no corresponding compiled-in value for that.  Fill in "no default
    value" for that part of the manpage substitution.
- Add ncurses patch 20130216
  + modify test/testcurs.c to work with mouse for ncurses as it does for
    pdcurses.
  + modify test/knight.c to work with mouse for pdcurses as it does for
    ncurses.
  + modify internal recursion in wgetch() which handles cooked mode to
    check if the call to wgetnstr() returned an error.  This can happen
    when both nocbreak() and nodelay() are set, for instance (report by
    Nils Christopher Brause) (cf: 960418).
  + fixes for issues found by Coverity:
    + add a check for valid position in ClearToEOS()
    + fix in lib_twait.c when --enable-wgetch-events is used, pointer
    use after free.
    + improve a limit-check in make_hash.c
    + fix a memory leak in hashed_db.c
- Add ncurses patch 20130218
  + correct ifdef on change to lib_twait.c (report by  Werner Fink).
  + update config.guess, config.sub
- Use screen to emulate a terminal to enable the configure script to
  use poll(2) system call on stderr file descriptor</changelog>
<changelog author="werner@suse.de" date="1364299200">- Add ncurses patch 20130324
  + build-fix for libtool configuration (reports by Daniel Silva Ferreira
    and Roumen Petrov).
- Add ncurses patch 20130323
  + build-fix for OS X, to handle changes for --with-cxx-shared feature
    (report by Christian Ebert).
  + change initialization for vt220, similar entries for consistency
    with cursor-key strings (NetBSD #47674) -TD
  + further improvements to linux-16color (Benjamin Sittler)
- Add ncurses patch 20130316
  + additional fix for tic.c, to allocate missing buffer space.
  + eliminate configure-script warnings for gen-pkgconfig.in
  + correct typo in sgr string for sun-color,
    add bold for consistency with sgr,
    change smso for consistency with sgr -TD
  + correct typo in sgr string for terminator -TD
  + add blink to the attributes masked by ncv in linux-16color (report
    by Benjamin Sittler)
  + improve warning message from post-load checking for missing "%?"
    operator by tic/infocmp by showing the entry name and capability.
  + minor formatting improvement to tic/infocmp -f option to ensure
    line split after "%;".
  + amend scripting for --with-cxx-shared option to handle the debug
    library "libncurses++_g.a" (report by Sven Joachim).
- Add ncurses patch 20130309
  + amend change to toe.c for reading from /dev/zero, to ensure that
    there is a buffer for the temporary filename (cf: 20120324).
  + regenerated html manpages.
  + fix typo in terminfo.head (report by Sven Joachim, cf: 20130302).
  + updated some autoconf macros:
    + CF_ACVERSION_CHECK, from byacc 1.9 20130304
    + CF_INTEL_COMPILER, CF_XOPEN_SOURCE from luit 2.0-20130217
  + add configure option --with-cxx-shared to permit building
    libncurses++ as a shared library when using g++, e.g., the same
    limitations as libtool but better integrated with the usual build
    configuration (Redhat 911540).
  + modify MKkey_defs.sh to filter out build-path which was unnecessarily
    shown in curses.h (Debian #689131).
- Add ncurses patch 20130302
  + add section to terminfo manpage discussing user-defined capabilities.
  + update manpage description of NCURSES_NO_SETBUF, explaining why it
    is obsolete.
  + add a check in waddch_nosync() to ensure that tab characters are
    treated as control characters; some broken locales claim they are
    printable.
  + add some traces to the Windows console driver.
  + initialize a temporary array in _nc_mbtowc, needed for some cases
    of raw input in MinGW port.
- Make it build even with shared libncurses++ and its demo test program</changelog>
<changelog author="werner@suse.de" date="1368446400">- Add ncurses patch 20130511
  + move nsterm-related entries out of "obsolete" section to more
    plausible "ansi consoles" -TD
  + additional cleanup of table-of-contents by reordering -TD
  + revise fix for check for 8-bit value in _nc_insert_ch(); prior fix
    prevented inserts when video attributes were attached to the data
    (cf: 20121215) (Redhat #959534).
- Add ncurses patch 20130504
  + fixes for issues found by Coverity:
    + correct FNKEY() macro in progs/dump_entry.c, allowing kf11-kf63 to
    display when infocmp's -R option is used for HP or AIX subsets.
    + fix dead-code issue with test/movewindow.c
    + improve limited-checking in _nc_read_termtype().
- Add ncurses patch 20130427
  + fix clang 3.2 warning in progs/dump_entry.c
  + drop AC_TYPE_SIGNAL check; ncurses relies on c89 and later.
- Add ncurses patch 20130413
  + add MinGW to cases where ncurses installs by default into /usr
    (prompted by discussion with Daniel Silva Ferreira).
  + add -D option to infocmp's usage-message (patch by Miroslav Lichvar).
  + add a missing 'int' type for main function in configure check for
    type of bool variable, to work with clang 3.2 (report by Dmitri
    Gribenko).
  + improve configure check for static_cast, to work with clang 3.2
    (report by Dmitri Gribenko).
  + re-order rule for demo.o and macros defining header dependencies in
    c++/Makefile.in to accommodate gmake (report by Dmitri Gribenko).
- Add ncurses patch 20130406
  + improve parameter checking in copywin().
  + modify configure script to work around OS X's "libtool" program, to
    choose glibtool instead.  At the same time, chance the autoconf macro
    to look for a "tool" rather than a "prog", to help with potential use
    in cross-compiling.
  + separate the rpath usage for c++ library from demo program
    (Redhat #911540)
  + update/correct header-dependencies in c++ makefile (report by Werner
    Fink).
  + add --with-cxx-shared to dpkg-script, as done for rpm-script.</changelog>
<changelog author="werner@suse.de" date="1368446401">- Make LD_LIBRARY_PATH include %_lib to make sure use and test the
  fresh build libraries</changelog>
<changelog author="werner@suse.de" date="1371816000">- Add some more terminfo entries to terminfo-base (bnc#826171)</changelog>
<changelog author="werner@suse.de" date="1375704000">- Add ncurses patch 20130805
  + minor fixes to the --disable-overwrite logic, to ensure that the
    configured $(includedir) is not cancelled by the mingwxx-filesystem
    rpm macros.
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.
- Add ncurses patch 20130727
  + improve configure macros from ongoing work on cdk, dialog, xterm:
    + CF_ADD_LIB_AFTER - fix a problem with -Wl options
    + CF_RPATH_HACK - add missing result-message
    + CF_SHARED_OPTS - modify to use $rel_builddir in cygwin and mingw
    dll symbols (which can be overridden) rather than explicit "../".
    + CF_SHARED_OPTS - modify NetBSD and DragonFly symbols to use ${CC}
    rather than ${LD} to improve rpath support.
    + CF_SHARED_OPTS - add a symbol to denote the temporary files that
    are created by the macro, to simplify clean-rules.
    + CF_X_ATHENA - trim extra libraries to work with -Wl,--as-needed
  + fix a regression in hashed-database support for NetBSD, which uses
    the key-size differently from other implementations (cf: 20121229).
- Add ncurses patch 20130720
  + further improvements for setupterm manpage, clarifying the
    initialization of cur_term.
- Add ncurses patch 20130713
  + improve manpages for initscr and setupterm.
  + minor compiler-warning fixes
- Add ncurses patch 20130706
  + add fallback defs for &lt;inttypes.h&gt; and &lt;stdint.h&gt; (cf: 20120225).
  + add check for size of wchar_t, use that to suppress a chunk of
    wcwidth.h in MinGW port.
  + quiet linker warnings for MinGW cross-compile with dll's using the
  - -enable-auto-import flag.
  + add ncurses.map rule to ncurses/Makefile to help diagnose symbol
    table issues.
- Add ncurses patch 20130622
  + modify the clear program to take into account the E3 extended
    capability to clear the terminal's scrollback buffer (patch by
    Miroslav Lichvar, Redhat #815790).
  + clarify in resizeterm manpage that LINES and COLS are updated.
  + updated ansi example in terminfo.tail, correct misordered example
    of sgr.
  + fix other doclifter warnings for manpages
  + remove unnecessary ".ta" in terminfo.tail, add missing ".fi"
    (patch by Eric Raymond).
- Add ncurses patch 20130615
  + minor changes to some configure macros to make them more reusable.
  + fixes for tabs program (prompted by report by Nick Andrik):
    + corrected logic in command-line parsing of -a and -c predefined
    tab-lists options.
    + allow "-0" and "-8" options to be combined with others, e.g.,"-0d".
    + make warning messages more consistent with the other utilities by
    not printing the full pathname of the program.
    + add -V option for consistency with other utilities.
  + fix off-by-one in columns for tabs program when processing an option
    such as "-5" (patch by Nick Andrik).
- Add ncurses patch 20130608
  + add to test/demo_forms.c examples of using the menu-hooks as well
    as showing how the menu item user-data can be used to pass a callback
    function pointer.
  + add test/dots_termcap.c
  + remove setupterm call from test/demo_termcap.c
  + build-fix if --disable-ext-funcs configure option is used.
  + modified test/edit_field.c and test/demo_forms.c to move the lengths
    into a user-data structure, keeping the original string for later
    expansion to free-format input/out demo.
  + modified test/demo_forms.c to load data from file.
  + added note to clarify Terminal.app's non-emulation of the various
    terminal types listed in the preferences dialog -TD
  + fix regression in error-reporting in lib_setup.c (Debian #711134,
    cf: 20121117).
  + build-fix for a case where --enable-broken_linker and
  - -enable-reentrant options are combined (report by George R Goffe).
- Add ncurses patch 20130525
  + modify mvcur() to distinguish between internal use by the ncurses
    library, and external callers, preventing it from reading the content
    of the screen which is only nonblank when curses calls have updated
    it.  This makes test/dots_mvcur.c avoid painting colored cells in
    the left margin of the display.
  + minor fix to test/dots_mvcur.c
  + move configured symbols USE_DATABASE and USE_TERMCAP to term.h as
    NCURSES_USE_DATABASE and NCURSES_USE_TERMCAP to allow consistent
    use of these symbols in term_entry.h
- Add ncurses patch 20130518
  + corrected ifdefs in test/testcurs.c to allow comparison of mouse
    interface versus pdcurses (cf: 20130316).
  + add pow() to configure-check for math library, needed since
    20121208 for test/hanoi (Debian #708056).
  + regenerated html manpages.
  + update doctype used for html documentation.</changelog>
<changelog author="werner@suse.de" date="1380542400">- Add ncurses patch 20130928
  + fix a possible null-pointer reference in a trace message from newterm.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.
- Add ncurses patch 20130921
  + fix typo in curs_attr.3x (patch by Sven Joachim, cf: 20130831).
  + build-fix for --with-shared option for DragonFly and FreeBSD (report
    by Rong-En Fan, cf: 20130727).
- Add ncurses patch 20130907
  + revert change to two of the dpkg format files, to work with dpkg
    before/after Debian #700177.
  + fix gcc -Wconversion warning in wattr_get() macro.
  + add msys and msysdll to known host/configuration types (patch by
    Alexey Pavlov).
  + modify CF_RPATH_HACK configure macro to not rely upon "-u" option
    of sort, improving portability.
- Add ncurses patch 20130831
  + modify test/ncurses.c b/B tests to display lines only for the
    attributes which a given terminal supports, to make room for an
    italics test.
  + completed ncv table in terminfo.tail; it did not list the wide
    character codes listed in X/Open Curses issue 7.
  + add A_ITALIC extension (prompted by discussion with Egmont Koblinger).
- Add ncurses patch 20130824
  + fix some gcc 4.8 -Wconversion warnings.
  + change format of dpkg test-scripts to quilted to work around bug
    introduced by Debian #700177.
  + discard cached keyname() values if meta() is changed after a value
    was cached using (report by Kurban Mallachiev).
- Add ncurses patch 20130816
  + add checks in tic to warn about terminals which lack cursor
    addressing, capabilities or having those, are marked as hard_copy or
    generic_type.
  + use --without-progs in mingw-ncurses rpm.
  + split out _nc_init_termtype() from alloc_entry.c to use in MinGW
    port when tic and other programs are not needed.
- Add ncurses patch 20130805
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.</changelog>
<changelog author="werner@suse.de" date="1383048000">- Make it build even with new tar command
- Add ncurses patch 20131027
  + correct/simplify ifdef's for cur_term versus broken-linker and
    reentrant options (report by Jean-Pierre Flori, cf: 20090530).
  + modify release/version combinations in test build-scripts to make
    them more consistent with other packages.
- Add ncurses patch 20131019
  + add nc_mingw.h to installed headers for MinGW port; needed for
    compiling ncurses-examples.
  + add rpm-script for testing cross-compile of ncurses-examples.
- Add ncurses patch 20131014
  + fix new typo in CF_ADA_INCLUDE_DIRS macro (report by Roumen Petrov).
- Add ncurses patch 20131012
  + fix a few compiler warnings in progs and test.
  + minor fix to package/debian-mingw/rules, do not strip dll's.
  + minor fixes to configure script for empty $prefix, e.g., when doing
    cross-compiles to MinGW.
  + add script for building test-packages of binaries cross-compiled to
    MinGW using NSIS.
- Add ncurses patch 20131005
  + minor fixes for ncurses-example package and makefile.
  + add scripts for test-builds of cross-compiler packages for ncurses6
    to MinGW.
- Add ncurses patch 20130928
  + some build-fixes for ncurses-examples with NetBSD-6.0 curses, though
    it lacks some common functions such as use_env() which is not yet
    addressed.
  + build-fix and some compiler warning fixes for ncurses-examples with
    OpenBSD 5.3
  + fix a possible null-pointer reference in a trace message from newterm.
  + quiet a few warnings from NetBSD 6.0 namespace pollution by
    nonstandard popcount() function in standard strings.h header.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.</changelog>
<changelog author="werner@suse.de" date="1383739200">- Add ncurses patch 20131102
  + use TS extension to describe xterm's title-escapes -TD
  + modify terminator and nsterm-s to use xterm+sl-twm building block -TD
  + simplify pfkey expression in ansi.sys -TD</changelog>
<changelog author="werner@suse.de" date="1385726400">- On S390(x) use other fallback terminal types, that is have the
  ibm327x and vt220 available even if no terminfo-base is installed.</changelog>
<changelog author="werner@suse.de" date="1385726401">- Add ncurses patch 20131123
  + minor fix for CF_GCC_WARNINGS to special-case options which are not
  recognized by clang.
- Add ncurses patch 20131116
  + add special case to configure script to move _XOPEN_SOURCE_EXTENDED
    definition from CPPFLAGS to CFLAGS if it happens to be needed for
    Solaris, because g++ errors with that definition (report by
    Jean-Pierre Flori, Sage #15268).
  + correct logic in infocmp's -i option which was intended to ignore
    strings which correspond to function-keys as candidates for piecing
    together initialization- or reset-strings.  The problem dates to
    1.9.7a, but was overlooked until changes in -Wlogical-op warnings for
    gcc 4.8 (report by David Binderman).
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, adding
    checks for -Wextra, -Wignored-qualifiers and -Wlogical-op
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, moving
    checks for -Wextra and -Wdeclaration-after-statement into the macro,
    and adding checks for -Wignored-qualifiers, -Wlogical-op and -Wvarargs
  + updated CF_CURSES_UNCTRL_H and CF_SHARED_OPTS macros from ongoing
    work on cdk.
- Add ncurses patch 20131110
  + minor cleanup of terminfo.tail</changelog>
<changelog author="werner@suse.de" date="1386676800">- Add ncurses patch 20131207
  + add form_driver_w() entrypoint to wide-character forms library,
    as well as test program form_driver_w (adapted from patch by
    Gaute Hope).</changelog>
<changelog author="werner@suse.de" date="1387281600">- Add ncurses patch 20131214
  + modify configure-script/ifdef's to allow OLD_TTY feature to be
    suppressed if the type of ospeed is configured using the option
  - -with-ospeed to not be a short.  By default, it is a short for
    termcap-compatibility (adapted from suggestion by Christian
    Weisgerber).
  + correct a typo in _nc_baudrate() (patch by Christian Weisgerber,
    cf: 20061230).
  + fix a few -Wlogical-op warnings.
  + updated llib-l* files.</changelog>
<changelog author="werner@suse.de" date="1390219200">- Add ncurses patch 20140118
  + apply includesubdir variable which was introduced in 20130805 to
    gen-pkgconfig.in (Debian #735782).
- Correct spec file irarch to make S390(x) fallback terminal types
  working on S390(x) (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1390910400">- Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
  terminal type but a more dumb one (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1391428800">- Add ncurses patch 20140201
  + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
    which "short" types are for color pairs and which are color values.
  + fix build for s390x, by correcting field bit offsets in generated
    representation clauses when int=32 long=64 and endian=big, or at
    least on s390x (patch by Nicolas Boulenguez).
  + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
- Add ncurses patch 20140125
  + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
    not work as is with gcc 4.8 due to fixes using chtype cast made for
    new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
    by Nicolas Boulenguez).</changelog>
<changelog author="werner@suse.de" date="1477569600">- Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
  not need it anymore and as well as it causes bug bsc#1000662</changelog>
<changelog author="werner@suse.de" date="1499083200">- Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
  from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
  CVE-2017-10685 (bsc#1046853, bsc#1046858)</changelog>
<changelog author="werner@suse.de" date="1499688000">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
  change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
  and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
- This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
  bsc#1047965)</changelog>
<changelog author="werner@suse.de" date="1500465600">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
  termcap format caused by the backport of change 20170701  (boo#1049344)</changelog>

</package>
<package pkgid="9c0fc60f62e0f628ea8a256ebc5418f4452b3815277e23fa39c9788811b7b12d" name="ncurses-utils" arch="x86_64">
    <version epoch="0" ver="5.9" rel="59.1"/>

<changelog author="werner@suse.de" date="1361188800">- Add ncurses patch 20130126
  + further fixes to mvcur to pass callback function (cf: 20130112),
    needed to make test/dots_mvcur work.
  + reduce calls to SetConsoleActiveScreenBuffer in win_driver.c, to
    help reduce flicker.
  + modify configure script to omit "+b" from linker options for very
    old HP-UX systems (report by Dennis Grevenstein)
  + add HP-UX workaround for missing EILSEQ on old HP-UX systems (patch
    by Dennis Grevenstein).
  + restore memmove/strdup support for antique systems (request by
    Dennis Grevenstein).
  + change %l behavior in tparm to push the string length onto the stack
    rather than saving the formatted length into the output buffer
    (report by Roy Marples, cf: 980620).
- Add ncurses patch 20130202
  + correct initialization in knight.c which let it occasionally make
    an incorrect move (cf: 20001028).
  + improve documentation of the terminfo/termcap search path.
- Add ncurses patch 20130209
  + modify test/configure script to make it simpler to override names
    of curses-related libraries, to help with linking with pdcurses in
    mingw environment.
  + if the --with-terminfo-dirs configure option is not used, there is
    no corresponding compiled-in value for that.  Fill in "no default
    value" for that part of the manpage substitution.
- Add ncurses patch 20130216
  + modify test/testcurs.c to work with mouse for ncurses as it does for
    pdcurses.
  + modify test/knight.c to work with mouse for pdcurses as it does for
    ncurses.
  + modify internal recursion in wgetch() which handles cooked mode to
    check if the call to wgetnstr() returned an error.  This can happen
    when both nocbreak() and nodelay() are set, for instance (report by
    Nils Christopher Brause) (cf: 960418).
  + fixes for issues found by Coverity:
    + add a check for valid position in ClearToEOS()
    + fix in lib_twait.c when --enable-wgetch-events is used, pointer
    use after free.
    + improve a limit-check in make_hash.c
    + fix a memory leak in hashed_db.c
- Add ncurses patch 20130218
  + correct ifdef on change to lib_twait.c (report by  Werner Fink).
  + update config.guess, config.sub
- Use screen to emulate a terminal to enable the configure script to
  use poll(2) system call on stderr file descriptor</changelog>
<changelog author="werner@suse.de" date="1364299200">- Add ncurses patch 20130324
  + build-fix for libtool configuration (reports by Daniel Silva Ferreira
    and Roumen Petrov).
- Add ncurses patch 20130323
  + build-fix for OS X, to handle changes for --with-cxx-shared feature
    (report by Christian Ebert).
  + change initialization for vt220, similar entries for consistency
    with cursor-key strings (NetBSD #47674) -TD
  + further improvements to linux-16color (Benjamin Sittler)
- Add ncurses patch 20130316
  + additional fix for tic.c, to allocate missing buffer space.
  + eliminate configure-script warnings for gen-pkgconfig.in
  + correct typo in sgr string for sun-color,
    add bold for consistency with sgr,
    change smso for consistency with sgr -TD
  + correct typo in sgr string for terminator -TD
  + add blink to the attributes masked by ncv in linux-16color (report
    by Benjamin Sittler)
  + improve warning message from post-load checking for missing "%?"
    operator by tic/infocmp by showing the entry name and capability.
  + minor formatting improvement to tic/infocmp -f option to ensure
    line split after "%;".
  + amend scripting for --with-cxx-shared option to handle the debug
    library "libncurses++_g.a" (report by Sven Joachim).
- Add ncurses patch 20130309
  + amend change to toe.c for reading from /dev/zero, to ensure that
    there is a buffer for the temporary filename (cf: 20120324).
  + regenerated html manpages.
  + fix typo in terminfo.head (report by Sven Joachim, cf: 20130302).
  + updated some autoconf macros:
    + CF_ACVERSION_CHECK, from byacc 1.9 20130304
    + CF_INTEL_COMPILER, CF_XOPEN_SOURCE from luit 2.0-20130217
  + add configure option --with-cxx-shared to permit building
    libncurses++ as a shared library when using g++, e.g., the same
    limitations as libtool but better integrated with the usual build
    configuration (Redhat 911540).
  + modify MKkey_defs.sh to filter out build-path which was unnecessarily
    shown in curses.h (Debian #689131).
- Add ncurses patch 20130302
  + add section to terminfo manpage discussing user-defined capabilities.
  + update manpage description of NCURSES_NO_SETBUF, explaining why it
    is obsolete.
  + add a check in waddch_nosync() to ensure that tab characters are
    treated as control characters; some broken locales claim they are
    printable.
  + add some traces to the Windows console driver.
  + initialize a temporary array in _nc_mbtowc, needed for some cases
    of raw input in MinGW port.
- Make it build even with shared libncurses++ and its demo test program</changelog>
<changelog author="werner@suse.de" date="1368446400">- Add ncurses patch 20130511
  + move nsterm-related entries out of "obsolete" section to more
    plausible "ansi consoles" -TD
  + additional cleanup of table-of-contents by reordering -TD
  + revise fix for check for 8-bit value in _nc_insert_ch(); prior fix
    prevented inserts when video attributes were attached to the data
    (cf: 20121215) (Redhat #959534).
- Add ncurses patch 20130504
  + fixes for issues found by Coverity:
    + correct FNKEY() macro in progs/dump_entry.c, allowing kf11-kf63 to
    display when infocmp's -R option is used for HP or AIX subsets.
    + fix dead-code issue with test/movewindow.c
    + improve limited-checking in _nc_read_termtype().
- Add ncurses patch 20130427
  + fix clang 3.2 warning in progs/dump_entry.c
  + drop AC_TYPE_SIGNAL check; ncurses relies on c89 and later.
- Add ncurses patch 20130413
  + add MinGW to cases where ncurses installs by default into /usr
    (prompted by discussion with Daniel Silva Ferreira).
  + add -D option to infocmp's usage-message (patch by Miroslav Lichvar).
  + add a missing 'int' type for main function in configure check for
    type of bool variable, to work with clang 3.2 (report by Dmitri
    Gribenko).
  + improve configure check for static_cast, to work with clang 3.2
    (report by Dmitri Gribenko).
  + re-order rule for demo.o and macros defining header dependencies in
    c++/Makefile.in to accommodate gmake (report by Dmitri Gribenko).
- Add ncurses patch 20130406
  + improve parameter checking in copywin().
  + modify configure script to work around OS X's "libtool" program, to
    choose glibtool instead.  At the same time, chance the autoconf macro
    to look for a "tool" rather than a "prog", to help with potential use
    in cross-compiling.
  + separate the rpath usage for c++ library from demo program
    (Redhat #911540)
  + update/correct header-dependencies in c++ makefile (report by Werner
    Fink).
  + add --with-cxx-shared to dpkg-script, as done for rpm-script.</changelog>
<changelog author="werner@suse.de" date="1368446401">- Make LD_LIBRARY_PATH include %_lib to make sure use and test the
  fresh build libraries</changelog>
<changelog author="werner@suse.de" date="1371816000">- Add some more terminfo entries to terminfo-base (bnc#826171)</changelog>
<changelog author="werner@suse.de" date="1375704000">- Add ncurses patch 20130805
  + minor fixes to the --disable-overwrite logic, to ensure that the
    configured $(includedir) is not cancelled by the mingwxx-filesystem
    rpm macros.
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.
- Add ncurses patch 20130727
  + improve configure macros from ongoing work on cdk, dialog, xterm:
    + CF_ADD_LIB_AFTER - fix a problem with -Wl options
    + CF_RPATH_HACK - add missing result-message
    + CF_SHARED_OPTS - modify to use $rel_builddir in cygwin and mingw
    dll symbols (which can be overridden) rather than explicit "../".
    + CF_SHARED_OPTS - modify NetBSD and DragonFly symbols to use ${CC}
    rather than ${LD} to improve rpath support.
    + CF_SHARED_OPTS - add a symbol to denote the temporary files that
    are created by the macro, to simplify clean-rules.
    + CF_X_ATHENA - trim extra libraries to work with -Wl,--as-needed
  + fix a regression in hashed-database support for NetBSD, which uses
    the key-size differently from other implementations (cf: 20121229).
- Add ncurses patch 20130720
  + further improvements for setupterm manpage, clarifying the
    initialization of cur_term.
- Add ncurses patch 20130713
  + improve manpages for initscr and setupterm.
  + minor compiler-warning fixes
- Add ncurses patch 20130706
  + add fallback defs for &lt;inttypes.h&gt; and &lt;stdint.h&gt; (cf: 20120225).
  + add check for size of wchar_t, use that to suppress a chunk of
    wcwidth.h in MinGW port.
  + quiet linker warnings for MinGW cross-compile with dll's using the
  - -enable-auto-import flag.
  + add ncurses.map rule to ncurses/Makefile to help diagnose symbol
    table issues.
- Add ncurses patch 20130622
  + modify the clear program to take into account the E3 extended
    capability to clear the terminal's scrollback buffer (patch by
    Miroslav Lichvar, Redhat #815790).
  + clarify in resizeterm manpage that LINES and COLS are updated.
  + updated ansi example in terminfo.tail, correct misordered example
    of sgr.
  + fix other doclifter warnings for manpages
  + remove unnecessary ".ta" in terminfo.tail, add missing ".fi"
    (patch by Eric Raymond).
- Add ncurses patch 20130615
  + minor changes to some configure macros to make them more reusable.
  + fixes for tabs program (prompted by report by Nick Andrik):
    + corrected logic in command-line parsing of -a and -c predefined
    tab-lists options.
    + allow "-0" and "-8" options to be combined with others, e.g.,"-0d".
    + make warning messages more consistent with the other utilities by
    not printing the full pathname of the program.
    + add -V option for consistency with other utilities.
  + fix off-by-one in columns for tabs program when processing an option
    such as "-5" (patch by Nick Andrik).
- Add ncurses patch 20130608
  + add to test/demo_forms.c examples of using the menu-hooks as well
    as showing how the menu item user-data can be used to pass a callback
    function pointer.
  + add test/dots_termcap.c
  + remove setupterm call from test/demo_termcap.c
  + build-fix if --disable-ext-funcs configure option is used.
  + modified test/edit_field.c and test/demo_forms.c to move the lengths
    into a user-data structure, keeping the original string for later
    expansion to free-format input/out demo.
  + modified test/demo_forms.c to load data from file.
  + added note to clarify Terminal.app's non-emulation of the various
    terminal types listed in the preferences dialog -TD
  + fix regression in error-reporting in lib_setup.c (Debian #711134,
    cf: 20121117).
  + build-fix for a case where --enable-broken_linker and
  - -enable-reentrant options are combined (report by George R Goffe).
- Add ncurses patch 20130525
  + modify mvcur() to distinguish between internal use by the ncurses
    library, and external callers, preventing it from reading the content
    of the screen which is only nonblank when curses calls have updated
    it.  This makes test/dots_mvcur.c avoid painting colored cells in
    the left margin of the display.
  + minor fix to test/dots_mvcur.c
  + move configured symbols USE_DATABASE and USE_TERMCAP to term.h as
    NCURSES_USE_DATABASE and NCURSES_USE_TERMCAP to allow consistent
    use of these symbols in term_entry.h
- Add ncurses patch 20130518
  + corrected ifdefs in test/testcurs.c to allow comparison of mouse
    interface versus pdcurses (cf: 20130316).
  + add pow() to configure-check for math library, needed since
    20121208 for test/hanoi (Debian #708056).
  + regenerated html manpages.
  + update doctype used for html documentation.</changelog>
<changelog author="werner@suse.de" date="1380542400">- Add ncurses patch 20130928
  + fix a possible null-pointer reference in a trace message from newterm.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.
- Add ncurses patch 20130921
  + fix typo in curs_attr.3x (patch by Sven Joachim, cf: 20130831).
  + build-fix for --with-shared option for DragonFly and FreeBSD (report
    by Rong-En Fan, cf: 20130727).
- Add ncurses patch 20130907
  + revert change to two of the dpkg format files, to work with dpkg
    before/after Debian #700177.
  + fix gcc -Wconversion warning in wattr_get() macro.
  + add msys and msysdll to known host/configuration types (patch by
    Alexey Pavlov).
  + modify CF_RPATH_HACK configure macro to not rely upon "-u" option
    of sort, improving portability.
- Add ncurses patch 20130831
  + modify test/ncurses.c b/B tests to display lines only for the
    attributes which a given terminal supports, to make room for an
    italics test.
  + completed ncv table in terminfo.tail; it did not list the wide
    character codes listed in X/Open Curses issue 7.
  + add A_ITALIC extension (prompted by discussion with Egmont Koblinger).
- Add ncurses patch 20130824
  + fix some gcc 4.8 -Wconversion warnings.
  + change format of dpkg test-scripts to quilted to work around bug
    introduced by Debian #700177.
  + discard cached keyname() values if meta() is changed after a value
    was cached using (report by Kurban Mallachiev).
- Add ncurses patch 20130816
  + add checks in tic to warn about terminals which lack cursor
    addressing, capabilities or having those, are marked as hard_copy or
    generic_type.
  + use --without-progs in mingw-ncurses rpm.
  + split out _nc_init_termtype() from alloc_entry.c to use in MinGW
    port when tic and other programs are not needed.
- Add ncurses patch 20130805
  + add --disable-db-install configure option, to simplify building
    cross-compile support packages.</changelog>
<changelog author="werner@suse.de" date="1383048000">- Make it build even with new tar command
- Add ncurses patch 20131027
  + correct/simplify ifdef's for cur_term versus broken-linker and
    reentrant options (report by Jean-Pierre Flori, cf: 20090530).
  + modify release/version combinations in test build-scripts to make
    them more consistent with other packages.
- Add ncurses patch 20131019
  + add nc_mingw.h to installed headers for MinGW port; needed for
    compiling ncurses-examples.
  + add rpm-script for testing cross-compile of ncurses-examples.
- Add ncurses patch 20131014
  + fix new typo in CF_ADA_INCLUDE_DIRS macro (report by Roumen Petrov).
- Add ncurses patch 20131012
  + fix a few compiler warnings in progs and test.
  + minor fix to package/debian-mingw/rules, do not strip dll's.
  + minor fixes to configure script for empty $prefix, e.g., when doing
    cross-compiles to MinGW.
  + add script for building test-packages of binaries cross-compiled to
    MinGW using NSIS.
- Add ncurses patch 20131005
  + minor fixes for ncurses-example package and makefile.
  + add scripts for test-builds of cross-compiler packages for ncurses6
    to MinGW.
- Add ncurses patch 20130928
  + some build-fixes for ncurses-examples with NetBSD-6.0 curses, though
    it lacks some common functions such as use_env() which is not yet
    addressed.
  + build-fix and some compiler warning fixes for ncurses-examples with
    OpenBSD 5.3
  + fix a possible null-pointer reference in a trace message from newterm.
  + quiet a few warnings from NetBSD 6.0 namespace pollution by
    nonstandard popcount() function in standard strings.h header.
  + ignore g++ 4.2.1 warnings for "-Weffc++" in c++/cursesmain.cc
  + fix a few overlooked places for --enable-string-hacks option.</changelog>
<changelog author="werner@suse.de" date="1383739200">- Add ncurses patch 20131102
  + use TS extension to describe xterm's title-escapes -TD
  + modify terminator and nsterm-s to use xterm+sl-twm building block -TD
  + simplify pfkey expression in ansi.sys -TD</changelog>
<changelog author="werner@suse.de" date="1385726400">- On S390(x) use other fallback terminal types, that is have the
  ibm327x and vt220 available even if no terminfo-base is installed.</changelog>
<changelog author="werner@suse.de" date="1385726401">- Add ncurses patch 20131123
  + minor fix for CF_GCC_WARNINGS to special-case options which are not
  recognized by clang.
- Add ncurses patch 20131116
  + add special case to configure script to move _XOPEN_SOURCE_EXTENDED
    definition from CPPFLAGS to CFLAGS if it happens to be needed for
    Solaris, because g++ errors with that definition (report by
    Jean-Pierre Flori, Sage #15268).
  + correct logic in infocmp's -i option which was intended to ignore
    strings which correspond to function-keys as candidates for piecing
    together initialization- or reset-strings.  The problem dates to
    1.9.7a, but was overlooked until changes in -Wlogical-op warnings for
    gcc 4.8 (report by David Binderman).
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, adding
    checks for -Wextra, -Wignored-qualifiers and -Wlogical-op
  + updated CF_GCC_WARNINGS to documented options for gcc 4.9.0, moving
    checks for -Wextra and -Wdeclaration-after-statement into the macro,
    and adding checks for -Wignored-qualifiers, -Wlogical-op and -Wvarargs
  + updated CF_CURSES_UNCTRL_H and CF_SHARED_OPTS macros from ongoing
    work on cdk.
- Add ncurses patch 20131110
  + minor cleanup of terminfo.tail</changelog>
<changelog author="werner@suse.de" date="1386676800">- Add ncurses patch 20131207
  + add form_driver_w() entrypoint to wide-character forms library,
    as well as test program form_driver_w (adapted from patch by
    Gaute Hope).</changelog>
<changelog author="werner@suse.de" date="1387281600">- Add ncurses patch 20131214
  + modify configure-script/ifdef's to allow OLD_TTY feature to be
    suppressed if the type of ospeed is configured using the option
  - -with-ospeed to not be a short.  By default, it is a short for
    termcap-compatibility (adapted from suggestion by Christian
    Weisgerber).
  + correct a typo in _nc_baudrate() (patch by Christian Weisgerber,
    cf: 20061230).
  + fix a few -Wlogical-op warnings.
  + updated llib-l* files.</changelog>
<changelog author="werner@suse.de" date="1390219200">- Add ncurses patch 20140118
  + apply includesubdir variable which was introduced in 20130805 to
    gen-pkgconfig.in (Debian #735782).
- Correct spec file irarch to make S390(x) fallback terminal types
  working on S390(x) (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1390910400">- Add patch ncurses-5.9-ibm327x.dif to make ibm327x not a generic
  terminal type but a more dumb one (bnc#859214)</changelog>
<changelog author="werner@suse.de" date="1391428800">- Add ncurses patch 20140201
  + add/use symbol NCURSES_PAIRS_T like NCURSES_COLOR_T, to illustrate
    which "short" types are for color pairs and which are color values.
  + fix build for s390x, by correcting field bit offsets in generated
    representation clauses when int=32 long=64 and endian=big, or at
    least on s390x (patch by Nicolas Boulenguez).
  + minor cleanup change to test/form_driver_w.c (patch by Gaute Hope).
- Add ncurses patch 20140125
  + remove unnecessary ifdef's in Ada95/gen/gen.c, which reportedly do
    not work as is with gcc 4.8 due to fixes using chtype cast made for
    new compiler warnings by gcc 4.8 in 20130824 (Debian #735753, patch
    by Nicolas Boulenguez).</changelog>
<changelog author="werner@suse.de" date="1477569600">- Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does
  not need it anymore and as well as it causes bug bsc#1000662</changelog>
<changelog author="werner@suse.de" date="1499083200">- Add patch ncurses-5.9-bsc1046853_1046858.dif which is a backport
  from patch 20170701 for ncurses 6.0 to fix CVE-2017-10684 and
  CVE-2017-10685 (bsc#1046853, bsc#1046858)</changelog>
<changelog author="werner@suse.de" date="1499688000">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to add the last
  change from patch 20170708 for ncurses 6.0 to fix CVE-2017-10684
  and CVE-2017-10685 on 32bit (bsc#1046853, bsc#1046858)
- This also fixes CVE-2017-11112 and CVE-2017-11113 (bsc#1047964,
  bsc#1047965)</changelog>
<changelog author="werner@suse.de" date="1500465600">- Modify patch ncurses-5.9-bsc1046853_1046858.dif to avoid broken
  termcap format caused by the backport of change 20170701  (boo#1049344)</changelog>

</package>
<package pkgid="c9bf840732a1e340b16752995bc260e3a5c157d222600e2de187bb3fb7528d54" name="netcat-openbsd" arch="src">
    <version epoch="0" ver="1.89" rel="99.1"/>

<changelog author="crrodriguez@suse.de" date="1208088000">- initial version for the OBS</changelog>
<changelog author="crrodriguez@suse.de" date="1215259200">-  netcat-openbsd conflicts with netcat but it should not [BNC#406581]</changelog>
<changelog author="crrodriguez@suse.de" date="1235131200">- sync most recent bugfixes from debian/Ubuntu</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1274184000">- sync recent bugfixes from Ubuntu</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1275048000">- Obsolete nc6</changelog>
<changelog author="lmuelle@suse.de" date="1277467200">- Use update-alternatives to set netcat symbolic links for compatibility.
- Provides and obsoltes netcat.</changelog>
<changelog author="andrea.turrini@gmail.com" date="1310817600">- Fixed typos in description of netcat-openbsd.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1323518400">- Update xbuntu patches.
- Ensure we have large file support in 32 bit builds
- Fix rpmlint warnings</changelog>
<changelog author="pth@suse.de" date="1378123200">- Split up the huge ubuntu patch into a debian specific patch,
  a patch that creates the examples, a patch with the openbasd-compat
  stuff and single files for each of the patches in debian/patches.
  This hugely eases maintainabilty:
  connect-timeout.patch, dccp.patch, gcc-warnings.patch,
  getservbyname.patch, glib-strlcpy.patch, help-version-exit.patch,
  nc-1.84-udp_stop.patch, netcat-info.patch, netcat-openbsd-debian.patch,
  netcat-openbsd-examples.patch, netcat-openbsd-openbsd-compat.patch,
  no-strtonum.patch, pollhup.patch, quit-timer.patch, reuseaddr.patch,
  send-crlf.patch, silence-z.patch, socks-b64-prototype.patch,
  udp-scan-timeout.patch, verbose-message-to-stderr.patch,
  verbose-numeric-port.patch.</changelog>
<changelog author="psimons@suse.com" date="1506945600">- Add "fix-sending-of-udp-packets.patch" to fix a logic error that
  would prevent netcat from sending out UDP packets. [bsc#1061165]</changelog>

</package>
<package pkgid="34fb23967edfc897116800f8adbf0dde9244c08a079d3753597799e97a596e61" name="netcat-openbsd" arch="x86_64">
    <version epoch="0" ver="1.89" rel="99.1"/>

<changelog author="crrodriguez@suse.de" date="1208088000">- initial version for the OBS</changelog>
<changelog author="crrodriguez@suse.de" date="1215259200">-  netcat-openbsd conflicts with netcat but it should not [BNC#406581]</changelog>
<changelog author="crrodriguez@suse.de" date="1235131200">- sync most recent bugfixes from debian/Ubuntu</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1274184000">- sync recent bugfixes from Ubuntu</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1275048000">- Obsolete nc6</changelog>
<changelog author="lmuelle@suse.de" date="1277467200">- Use update-alternatives to set netcat symbolic links for compatibility.
- Provides and obsoltes netcat.</changelog>
<changelog author="andrea.turrini@gmail.com" date="1310817600">- Fixed typos in description of netcat-openbsd.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1323518400">- Update xbuntu patches.
- Ensure we have large file support in 32 bit builds
- Fix rpmlint warnings</changelog>
<changelog author="pth@suse.de" date="1378123200">- Split up the huge ubuntu patch into a debian specific patch,
  a patch that creates the examples, a patch with the openbasd-compat
  stuff and single files for each of the patches in debian/patches.
  This hugely eases maintainabilty:
  connect-timeout.patch, dccp.patch, gcc-warnings.patch,
  getservbyname.patch, glib-strlcpy.patch, help-version-exit.patch,
  nc-1.84-udp_stop.patch, netcat-info.patch, netcat-openbsd-debian.patch,
  netcat-openbsd-examples.patch, netcat-openbsd-openbsd-compat.patch,
  no-strtonum.patch, pollhup.patch, quit-timer.patch, reuseaddr.patch,
  send-crlf.patch, silence-z.patch, socks-b64-prototype.patch,
  udp-scan-timeout.patch, verbose-message-to-stderr.patch,
  verbose-numeric-port.patch.</changelog>
<changelog author="psimons@suse.com" date="1506945600">- Add "fix-sending-of-udp-packets.patch" to fix a logic error that
  would prevent netcat from sending out UDP packets. [bsc#1061165]</changelog>

</package>
<package pkgid="5741e1acdc261893e22294ef577c7e2987cc4780134f469fef6f98b4e69ca86f" name="nextcloud" arch="noarch">
    <version epoch="0" ver="11.0.3" rel="3.1"/>

<changelog author="asemen@suse.de" date="1467374400">- initial build nextcloud 9.0.51</changelog>
<changelog author="asemen@suse.de" date="1467720000">- upstream update to version 9.0.52</changelog>
<changelog author="ecsos@opensuse.org" date="1467979200">- make apache_secure_data more restrictiver
- add missing .user.ini
- move README and README.SELinux to docdor to fix message code
  integrity check</changelog>
<changelog author="asemen@suse.de" date="1469102400">- upstream update to version 9.0.53 (bsc#989998)</changelog>
<changelog author="ecsos@opensuse.org" date="1469275200">- enable HSTS to prevent the warning "The Strict-Transport-Security
  HTTP header is not configured" in admin-page
- turn maintenance:mode off after upgrade</changelog>
<changelog author="chris@computersalat.de" date="1470571200">- update spec file
  * osc service localrun format_spec_file
  * update Source with full URL
  * simplify deps mainly for openSUSE</changelog>
<changelog author="ecsos@opensuse.org" date="1472299200">- upstream update to version 10.0.0</changelog>
<changelog author="ecsos@opensuse.org" date="1475236800">- upstream update to version 10.0.1</changelog>
<changelog author="ecsos@opensuse.org" date="1481716800">- upstream update to version 11.0.0</changelog>
<changelog author="ecsos@opensuse.org" date="1485172800">- upstream update to version 11.0.1</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1485518400">- Add php-openssl dependency</changelog>
<changelog author="ecsos@opensuse.org" date="1488283200">- upstream update to version 11.0.2
  * Server
  - Use login name to fix password confirm with ldap users
    (server/2953)
  - Change the row-format before changing the collation
    (server/3063)
  - Generate correct path for owner and use the display name
    (server/3080)
  - Markdown support for app descriptions (server/3117)
  - Fix style in comment (server/3143)
  - Escape the name for the jquery selector (server/3138)
  - Define spreed calls (server/3115)
  - LDAP Backend OCS Api (server/3213)
  - Fix Sharing app description (server/3397)
  - Fix shared-as-busy events for owner (server/3363)
  - Use correct theming when returning the defaults (server/3399)
  - Filter out sensitive appconfig values (server/3400)
  - Add transifex config for sharebymail (server/3423)
  - Update the email in the accounts table as well (server/3411)
  - Don't log the password on confirmPassword when LDAP throws an
    exception (server/3414)
  - Make sure ownCloud 8.2 activities also can get displayed
    (server/3412)
  - Popovermenu backport (server/3286)
  - Set vendor during install (server/3426)
  - Make sure the file information is available when sending the
    email (server/3433)
  - Add profile data to provisioning api (server/3259)
  - Fix detection of the new iOS app (server/3431)
  - Add integration tests for legacy DAV endpoints (server/3445)
  - Make sure invalid images don't flood the log file
    (server/3440)
  - Fix printing backup code (server/3510)
  - Fix cookie name (nctoken instead of octoken) (server/3511)
  - LDAP's checkPassword should only catch when a user was not
    found (server/3493)
  - Return unknown free space from nullstorage (server/3508)
  - Fix for address book data lost when any user receiving a
    share is deleted (server/3499)
  - Rename database password toggle (server/3500)
  - Popovermenu files css fix (server/3494)
  - Add screensharing icon (server/3481)
  - Fix misleading wording: searching is affected, not user
    access (server/3560)
  - Backport of Fix Broken UUID Attribute Detection (server/3528)
  * Activity
  - Make sure integer like names are still strings (activity/103)
  - Fix activities for public uploads (activity/113)
  - Show the parent as target when the file was not renamed
    (activity/114)
  - Fix activities for "Files drop" on external storages
    (activity/118)
  * SAML &amp; SSO
  - Setup account later (user_saml/79)
  * Serverinfo
  - Fix SQL syntax error on MariaDB 10.0.27 and 10.1.19
    (serverinfo/77)
  - Don't throw an error when /proc/meminfo is not readable
    (serverinfo/76)
  * Survey_Client
  - Fix problem when checking size with dash in DB name
    (survey_client/50)</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Remove empty %postun and redundant %clean.
- Ensure summary/description is neutral.</changelog>
<changelog author="adamradovits12@hotmail.com" date="1493035200">- upstream update to version 11.0.3
  * Server
  - Use the correct principal for shared addressbooks
  (server/3608)
  - Fix saving backup codes by using a correct data uri
  (server/3652)
  - Update icewind/streams to 0.5.2 (server/32931)
  - Fix string comparison and return docs (server/3665)
  - Typecast shared mount's storage_id to int as documented
    + some refactor to avoid similar bugs (server/3658)
  - Use a proper date format for transfer ownership
  (server/3700)
  - DAV sharing permissions should not depend on the order
  (server/3722)
  - Add new user agent of windows 10 dav backend
  (server/37641)
  - Add back appstoreenabled config switch (server/37671)
  - Call right function after sudo mode (server/3820)
  - Dont allow empty wildcard search (server/3842)
  - Remove single quotes around search query like in
  user search (server/3849)
  - Fix mimetype detection on public uploads for the
  workflow engine (server/3765)
  - Fix branding and show Nextcloud (server/39691)
  - Fix reshare with user activity message (server/39812)
  - Create correct VCard and return correct error codes
  (server/4029)
  - Prevent migration from ownCloud 10 to Nextcloud 11
  (server/34151)
  - Make sure transparency is an integer when saving a
  calendar (server/4167)
  - Make public links work with master key (server/42071)
  - Don't try to render the avatars if avatars are
  disabled (server/4214)
  - Reduce error message text (server/42281)
  - Don't list on public calendar endpoints (server/4229)
  - Fix upload of folders in Chrome (server/4154)
  - Make sure blob columns are correctly converted as
  parameters (server/4233)
  - Save the scope of an auth token in the session
  (server/4225)
  - Take share by mail into consideration if we calculate
  the access list (server/4242)
  - Also add the root of external storages to the file id
  list (server/4237)
  - Fix LDAP description (server/42382)
  - Remove the double password confirmation on changing
  cron (server/4236)
  - Fix scheduling plugin on legacy caldav endpoint
  (server/4235)
  - Directly fix invalid values of DTEND and DTSTART
  (server/4234)
  - Make JobList::next() lock free (server/4254)
  - Don't remove owner property for public calendars
  (server/4272)
  - Add capabilities for share by mail (server/42511)
  - Dont use the permissions mask while scanning
  (server/4278)
  - Add missing maintenance plugin to new DAV endpoint
  (server/4290)
  - Fix bug with shared_by for own calendars if shared
  (server/4301)
  - Translation string corrected &gt; 1 user (server/4377)
  * Activity
  - Fix activities for "Files drop" on external storages
  (activity/118)
  * User_SAML
  - Bump to php-saml 2.10.5 (user_saml/1001)
  * Logreader
  - Small screen layout improvements
  (logreader/2bcd915969386ceb77c7f91dfd5fc19fd3212346
  - Fix log filtering
  (logreader/4095dfc62dcceb3c59a3f581baa5589737d0e6f3)
  - Greatly speedup log iteration
  (logreader/71a4c6849641f821e80d96674c57a69fe7a8aa9e)
  - Search more rows
  (logreader/b9d00b5599ac8a76862895266f1c23096391aad8)
  - Stop iterating if we dont have a valid file handle
  (logreader/a87a8e653ecae5efef6342e645b98f2878219c87)
  - Don't return a LogIterator on a broken handle
  (logreader/39069108f99d463b1cb8bc944f3ef24324b9f43d)
  - More robust log iteration
  (logreader/c0eb04d55bf1dee94ef523dae0e3b0e6afc272a6)
  - Use proper iso date format
  (logreader/13a31181a6d72d084797a71f49f2c5edee8c8dae)
  - Automatically try to fix some common escape errors from
  copy-pasted log entries
  (logreader/031db2a7f9b9f8cee42acf6eae7d993d31d4660a)
  - Fix stack trace parsing of incorrectly escaped logentries
  (logreader/538667770edfdd48374ef33e9c15498ed98ece60)
  - Highlight entries from the same request when clicking
  on an entry
  (logreader/2d1ccd0e4cca32220fcbe0b4d79d1cd23f0e73a5)
  - Fix copy paste info searchfield
  (logreader/0e91b2f46649a720feb7c3b6b8266b8657db5574)
  - Fix reset search after 0 results
  (logreader/50bec8ecf7edd81cfb96a35089283c0d879b41f3)
  - Allow searching for requestId and user
  (logreader/7f84e55bb4a1e4086ab0918a6bf58ad3885bbd91)
  - Allow searching in url
  (logreader/7833d97cf85fd351d2f7550d67d21bd0c2a815f4)
  - Fix infinite scroll
  (logreader/cbe874c6c068b9156ad8456edf31d112da40cbc9)
  - Dont show loading indicator if we already have entries
  (logreader/d26a08dc0540126177e8d20c3e243b44c5a399c4)
  * Gallery
  - Fix upload after core changes
  (gallery/b4ac4429841cfe2b7ea260dfb37fcde25580143c2)
  - Update JavaScript libraries (gallery/247)</changelog>
<changelog author="ecsos@opensuse.org" date="1506600000">- fix boo#1036756: package security issue</changelog>

</package>
<package pkgid="aabf768aa6b0de90c2c8083c8bac0ebeeec12db919c52c9da3a69e2b749735aa" name="nextcloud" arch="src">
    <version epoch="0" ver="11.0.3" rel="3.1"/>

<changelog author="asemen@suse.de" date="1467374400">- initial build nextcloud 9.0.51</changelog>
<changelog author="asemen@suse.de" date="1467720000">- upstream update to version 9.0.52</changelog>
<changelog author="ecsos@opensuse.org" date="1467979200">- make apache_secure_data more restrictiver
- add missing .user.ini
- move README and README.SELinux to docdor to fix message code
  integrity check</changelog>
<changelog author="asemen@suse.de" date="1469102400">- upstream update to version 9.0.53 (bsc#989998)</changelog>
<changelog author="ecsos@opensuse.org" date="1469275200">- enable HSTS to prevent the warning "The Strict-Transport-Security
  HTTP header is not configured" in admin-page
- turn maintenance:mode off after upgrade</changelog>
<changelog author="chris@computersalat.de" date="1470571200">- update spec file
  * osc service localrun format_spec_file
  * update Source with full URL
  * simplify deps mainly for openSUSE</changelog>
<changelog author="ecsos@opensuse.org" date="1472299200">- upstream update to version 10.0.0</changelog>
<changelog author="ecsos@opensuse.org" date="1475236800">- upstream update to version 10.0.1</changelog>
<changelog author="ecsos@opensuse.org" date="1481716800">- upstream update to version 11.0.0</changelog>
<changelog author="ecsos@opensuse.org" date="1485172800">- upstream update to version 11.0.1</changelog>
<changelog author="guoyunhebrave@gmail.com" date="1485518400">- Add php-openssl dependency</changelog>
<changelog author="ecsos@opensuse.org" date="1488283200">- upstream update to version 11.0.2
  * Server
  - Use login name to fix password confirm with ldap users
    (server/2953)
  - Change the row-format before changing the collation
    (server/3063)
  - Generate correct path for owner and use the display name
    (server/3080)
  - Markdown support for app descriptions (server/3117)
  - Fix style in comment (server/3143)
  - Escape the name for the jquery selector (server/3138)
  - Define spreed calls (server/3115)
  - LDAP Backend OCS Api (server/3213)
  - Fix Sharing app description (server/3397)
  - Fix shared-as-busy events for owner (server/3363)
  - Use correct theming when returning the defaults (server/3399)
  - Filter out sensitive appconfig values (server/3400)
  - Add transifex config for sharebymail (server/3423)
  - Update the email in the accounts table as well (server/3411)
  - Don't log the password on confirmPassword when LDAP throws an
    exception (server/3414)
  - Make sure ownCloud 8.2 activities also can get displayed
    (server/3412)
  - Popovermenu backport (server/3286)
  - Set vendor during install (server/3426)
  - Make sure the file information is available when sending the
    email (server/3433)
  - Add profile data to provisioning api (server/3259)
  - Fix detection of the new iOS app (server/3431)
  - Add integration tests for legacy DAV endpoints (server/3445)
  - Make sure invalid images don't flood the log file
    (server/3440)
  - Fix printing backup code (server/3510)
  - Fix cookie name (nctoken instead of octoken) (server/3511)
  - LDAP's checkPassword should only catch when a user was not
    found (server/3493)
  - Return unknown free space from nullstorage (server/3508)
  - Fix for address book data lost when any user receiving a
    share is deleted (server/3499)
  - Rename database password toggle (server/3500)
  - Popovermenu files css fix (server/3494)
  - Add screensharing icon (server/3481)
  - Fix misleading wording: searching is affected, not user
    access (server/3560)
  - Backport of Fix Broken UUID Attribute Detection (server/3528)
  * Activity
  - Make sure integer like names are still strings (activity/103)
  - Fix activities for public uploads (activity/113)
  - Show the parent as target when the file was not renamed
    (activity/114)
  - Fix activities for "Files drop" on external storages
    (activity/118)
  * SAML &amp; SSO
  - Setup account later (user_saml/79)
  * Serverinfo
  - Fix SQL syntax error on MariaDB 10.0.27 and 10.1.19
    (serverinfo/77)
  - Don't throw an error when /proc/meminfo is not readable
    (serverinfo/76)
  * Survey_Client
  - Fix problem when checking size with dash in DB name
    (survey_client/50)</changelog>
<changelog author="jengelh@inai.de" date="1488456000">- Remove empty %postun and redundant %clean.
- Ensure summary/description is neutral.</changelog>
<changelog author="adamradovits12@hotmail.com" date="1493035200">- upstream update to version 11.0.3
  * Server
  - Use the correct principal for shared addressbooks
  (server/3608)
  - Fix saving backup codes by using a correct data uri
  (server/3652)
  - Update icewind/streams to 0.5.2 (server/32931)
  - Fix string comparison and return docs (server/3665)
  - Typecast shared mount's storage_id to int as documented
    + some refactor to avoid similar bugs (server/3658)
  - Use a proper date format for transfer ownership
  (server/3700)
  - DAV sharing permissions should not depend on the order
  (server/3722)
  - Add new user agent of windows 10 dav backend
  (server/37641)
  - Add back appstoreenabled config switch (server/37671)
  - Call right function after sudo mode (server/3820)
  - Dont allow empty wildcard search (server/3842)
  - Remove single quotes around search query like in
  user search (server/3849)
  - Fix mimetype detection on public uploads for the
  workflow engine (server/3765)
  - Fix branding and show Nextcloud (server/39691)
  - Fix reshare with user activity message (server/39812)
  - Create correct VCard and return correct error codes
  (server/4029)
  - Prevent migration from ownCloud 10 to Nextcloud 11
  (server/34151)
  - Make sure transparency is an integer when saving a
  calendar (server/4167)
  - Make public links work with master key (server/42071)
  - Don't try to render the avatars if avatars are
  disabled (server/4214)
  - Reduce error message text (server/42281)
  - Don't list on public calendar endpoints (server/4229)
  - Fix upload of folders in Chrome (server/4154)
  - Make sure blob columns are correctly converted as
  parameters (server/4233)
  - Save the scope of an auth token in the session
  (server/4225)
  - Take share by mail into consideration if we calculate
  the access list (server/4242)
  - Also add the root of external storages to the file id
  list (server/4237)
  - Fix LDAP description (server/42382)
  - Remove the double password confirmation on changing
  cron (server/4236)
  - Fix scheduling plugin on legacy caldav endpoint
  (server/4235)
  - Directly fix invalid values of DTEND and DTSTART
  (server/4234)
  - Make JobList::next() lock free (server/4254)
  - Don't remove owner property for public calendars
  (server/4272)
  - Add capabilities for share by mail (server/42511)
  - Dont use the permissions mask while scanning
  (server/4278)
  - Add missing maintenance plugin to new DAV endpoint
  (server/4290)
  - Fix bug with shared_by for own calendars if shared
  (server/4301)
  - Translation string corrected &gt; 1 user (server/4377)
  * Activity
  - Fix activities for "Files drop" on external storages
  (activity/118)
  * User_SAML
  - Bump to php-saml 2.10.5 (user_saml/1001)
  * Logreader
  - Small screen layout improvements
  (logreader/2bcd915969386ceb77c7f91dfd5fc19fd3212346
  - Fix log filtering
  (logreader/4095dfc62dcceb3c59a3f581baa5589737d0e6f3)
  - Greatly speedup log iteration
  (logreader/71a4c6849641f821e80d96674c57a69fe7a8aa9e)
  - Search more rows
  (logreader/b9d00b5599ac8a76862895266f1c23096391aad8)
  - Stop iterating if we dont have a valid file handle
  (logreader/a87a8e653ecae5efef6342e645b98f2878219c87)
  - Don't return a LogIterator on a broken handle
  (logreader/39069108f99d463b1cb8bc944f3ef24324b9f43d)
  - More robust log iteration
  (logreader/c0eb04d55bf1dee94ef523dae0e3b0e6afc272a6)
  - Use proper iso date format
  (logreader/13a31181a6d72d084797a71f49f2c5edee8c8dae)
  - Automatically try to fix some common escape errors from
  copy-pasted log entries
  (logreader/031db2a7f9b9f8cee42acf6eae7d993d31d4660a)
  - Fix stack trace parsing of incorrectly escaped logentries
  (logreader/538667770edfdd48374ef33e9c15498ed98ece60)
  - Highlight entries from the same request when clicking
  on an entry
  (logreader/2d1ccd0e4cca32220fcbe0b4d79d1cd23f0e73a5)
  - Fix copy paste info searchfield
  (logreader/0e91b2f46649a720feb7c3b6b8266b8657db5574)
  - Fix reset search after 0 results
  (logreader/50bec8ecf7edd81cfb96a35089283c0d879b41f3)
  - Allow searching for requestId and user
  (logreader/7f84e55bb4a1e4086ab0918a6bf58ad3885bbd91)
  - Allow searching in url
  (logreader/7833d97cf85fd351d2f7550d67d21bd0c2a815f4)
  - Fix infinite scroll
  (logreader/cbe874c6c068b9156ad8456edf31d112da40cbc9)
  - Dont show loading indicator if we already have entries
  (logreader/d26a08dc0540126177e8d20c3e243b44c5a399c4)
  * Gallery
  - Fix upload after core changes
  (gallery/b4ac4429841cfe2b7ea260dfb37fcde25580143c2)
  - Update JavaScript libraries (gallery/247)</changelog>
<changelog author="ecsos@opensuse.org" date="1506600000">- fix boo#1036756: package security issue</changelog>

</package>
<package pkgid="850ff608489377f667dcbff88c808e138b88c08128afbbc63c93ed149c5bbf79" name="ninja" arch="src">
    <version epoch="0" ver="1.7.2" rel="14.1"/>

<changelog author="idonmez@suse.com" date="1357819200">- First release</changelog>
<changelog author="idonmez@suse.com" date="1361534400">- Update to git hash b26d217
  * Documentation updates
  * Fix wrong usage of std::string::find</changelog>
<changelog author="idonmez@suse.com" date="1363089600">- Update to git hash ecc876e
  * Add compdb command to generate compile_commands.json for clang.
  * Add elapsed time (%e) to NINJA_STATUS.</changelog>
<changelog author="idonmez@suse.com" date="1366200000">- Update to git hash 7bf53c6
  * Build ninja itself in deps mode
  * Bugfixes
  * Documentation updates</changelog>
<changelog author="idonmez@suse.com" date="1370433600">- Update to git hash 0f53fd3
  * Version 3.0 now
  * Don't poll pipes using POLLRDHUP
  * Recompact the deps log when it gets too big</changelog>
<changelog author="idonmez@suse.com" date="1379505600">- Update to version 1.4.0
  * Bug fixes
- Fix version field. Its 1.x not 3.x</changelog>
<changelog author="idonmez@suse.com" date="1404043200">- Update to version 1.5.1
  * Recompacting removes more entries from the build and deps logs.
  * Add a manifest parsing perftest and generator that generates
    random build manifests.
  * $in, $out are escaped more robustly.
  * `depfile=$out.d` now works if $out gets escaped.
  * ninja doesn't error out when it tries to create a directory and
    the directory already exists.
  * Ninja now accepts both / and \ on windows when making directories.
  * \r\n line endings are now accepted in depfiles.
  * depfile file names can now contain '{' and '}'.
  * -t compdb no longer crashes on edges with emtpy inputs.
  * 'keeprsp' is now included in the spelling suggestestions for -d
  * Many improvements to ninja-mode.el.
  * ninja_syntax.py is now faster.
  * bash completion and zsh completion provides completions more often.
  * ninja.vim now highlights $$ correctly.</changelog>
<changelog author="idonmez@suse.com" date="1410436800">- Only depend on python-base to trim down BuildRequires
- Do not build the html manual
- Use upstream pristine tarball</changelog>
<changelog author="idonmez@suse.com" date="1417003200">- Update to version 1.5.3
  * Reaping finished subprocesses now has precedence over
    starting new jobs
  * ninja no longer depends on googletest
- Install bash/zsh completion
- Install vim syntax file
- Implement %check
- Add ninja-disable-maxprocs-test.patch to disable max procs test,
  it needs a ulimit raise.</changelog>
<changelog author="foss@grueninger.de" date="1435752000">- Update to version 1.6.0
  * rules are now scoped to the subninja they're in.
  * dupe edges with multiple outputs now uses first edge
    instead of last (#867)
  * pools actually work now
  * generators can now run more often than twice if needed
  * unexpected output names now cause a rebuild instead of
    a hard error
  * POSIX-specific changes
  + child processes get detached from terminal
  + check for SIGINT after ppoll/pselect -&gt; faster Ctrl-C
  + add an explicit SIGTERM signal handler
  * Ran ninja under afl-fuzz and fixed all crashes and bugs it found
  + fix crashes on cyclic graphs with multiple outputs
  + failing stat() now aborts build
  + cyclic rule bindings no longer crash
  + dependency cycles with multiple outputs no longer get
    ninja into a stuck state
- Update ninja-disable-maxprocs-test.patch to match upstream
  changes
- use Python 3 for configure</changelog>
<changelog author="mpluskal@suse.com" date="1454155200">- Update dependencies
- Use optflags when building
- Make building more verbose</changelog>
<changelog author="sndirsch@suse.com" date="1456228800">- needed for building current llvm on sle12
  (fate #315643-315645, 319159-319161, 319618)</changelog>
<changelog author="matz@suse.de" date="1461672000">- Make it build on SLE11 (use python2 there).</changelog>
<changelog author="foss@grueninger.de" date="1461844800">- update to version 1.7.0
  * ninja now supports implicit outputs.
  * Ninja's output has slightly changed, to make it easier to
    automated tools to look at ninja's output.
  * Ninja now explicitly handles SIGHUP and cleans up after itself.
  * Ninja now uses posix_spawn instead of fork/exec to launch
    subprocesses (on POSIX).
- adjust links to new wesite</changelog>
<changelog author="idonmez@suse.com" date="1461931200">- Update to version 1.7.1
  * Change default NINJA_STATUS to [%f/%t] github issue #1143</changelog>
<changelog author="mpluskal@suse.com" date="1479038400">- Update to version 1.7.2:
  * %e and %r work again in dumb terminals (#1146, #1148)
  * `-t browse` now HTML-escapes rule names (#1157)
  * an edge may now have 0 explicit outputs if it has implicit
    outputs (#1159)
  * make misc/measure.py python 3-compatible
  * misc/write_fake_manifest.py now optionally writes source files,
    use it to quickly produce large, buildable projects for testing
    (#1109, #1198)
  * on newer FreeBSDs, use ppoll()
- Refresh ninja-disable-maxprocs-test.patch</changelog>
<changelog author="badshah400@gmail.com" date="1481025600">- Add macros.ninja as an external source file and install it to
  the %{_rpmconfigdir}/macros.d/; this installs macros for RPM
  that are in turn used by the RPM macros for meson.</changelog>
<changelog author="mpluskal@suse.com" date="1481112000">- Add macros.ninja (boo#1014177)
- Backport latest release to SLE12 bsc#1055189 fate#323787</changelog>

</package>
<package pkgid="7d5d6b7e18c3cb5266444b21b53a56d3a154ab75fbb83adfeeaa8f0e214dfe9e" name="ninja" arch="x86_64">
    <version epoch="0" ver="1.7.2" rel="14.1"/>

<changelog author="idonmez@suse.com" date="1357819200">- First release</changelog>
<changelog author="idonmez@suse.com" date="1361534400">- Update to git hash b26d217
  * Documentation updates
  * Fix wrong usage of std::string::find</changelog>
<changelog author="idonmez@suse.com" date="1363089600">- Update to git hash ecc876e
  * Add compdb command to generate compile_commands.json for clang.
  * Add elapsed time (%e) to NINJA_STATUS.</changelog>
<changelog author="idonmez@suse.com" date="1366200000">- Update to git hash 7bf53c6
  * Build ninja itself in deps mode
  * Bugfixes
  * Documentation updates</changelog>
<changelog author="idonmez@suse.com" date="1370433600">- Update to git hash 0f53fd3
  * Version 3.0 now
  * Don't poll pipes using POLLRDHUP
  * Recompact the deps log when it gets too big</changelog>
<changelog author="idonmez@suse.com" date="1379505600">- Update to version 1.4.0
  * Bug fixes
- Fix version field. Its 1.x not 3.x</changelog>
<changelog author="idonmez@suse.com" date="1404043200">- Update to version 1.5.1
  * Recompacting removes more entries from the build and deps logs.
  * Add a manifest parsing perftest and generator that generates
    random build manifests.
  * $in, $out are escaped more robustly.
  * `depfile=$out.d` now works if $out gets escaped.
  * ninja doesn't error out when it tries to create a directory and
    the directory already exists.
  * Ninja now accepts both / and \ on windows when making directories.
  * \r\n line endings are now accepted in depfiles.
  * depfile file names can now contain '{' and '}'.
  * -t compdb no longer crashes on edges with emtpy inputs.
  * 'keeprsp' is now included in the spelling suggestestions for -d
  * Many improvements to ninja-mode.el.
  * ninja_syntax.py is now faster.
  * bash completion and zsh completion provides completions more often.
  * ninja.vim now highlights $$ correctly.</changelog>
<changelog author="idonmez@suse.com" date="1410436800">- Only depend on python-base to trim down BuildRequires
- Do not build the html manual
- Use upstream pristine tarball</changelog>
<changelog author="idonmez@suse.com" date="1417003200">- Update to version 1.5.3
  * Reaping finished subprocesses now has precedence over
    starting new jobs
  * ninja no longer depends on googletest
- Install bash/zsh completion
- Install vim syntax file
- Implement %check
- Add ninja-disable-maxprocs-test.patch to disable max procs test,
  it needs a ulimit raise.</changelog>
<changelog author="foss@grueninger.de" date="1435752000">- Update to version 1.6.0
  * rules are now scoped to the subninja they're in.
  * dupe edges with multiple outputs now uses first edge
    instead of last (#867)
  * pools actually work now
  * generators can now run more often than twice if needed
  * unexpected output names now cause a rebuild instead of
    a hard error
  * POSIX-specific changes
  + child processes get detached from terminal
  + check for SIGINT after ppoll/pselect -&gt; faster Ctrl-C
  + add an explicit SIGTERM signal handler
  * Ran ninja under afl-fuzz and fixed all crashes and bugs it found
  + fix crashes on cyclic graphs with multiple outputs
  + failing stat() now aborts build
  + cyclic rule bindings no longer crash
  + dependency cycles with multiple outputs no longer get
    ninja into a stuck state
- Update ninja-disable-maxprocs-test.patch to match upstream
  changes
- use Python 3 for configure</changelog>
<changelog author="mpluskal@suse.com" date="1454155200">- Update dependencies
- Use optflags when building
- Make building more verbose</changelog>
<changelog author="sndirsch@suse.com" date="1456228800">- needed for building current llvm on sle12
  (fate #315643-315645, 319159-319161, 319618)</changelog>
<changelog author="matz@suse.de" date="1461672000">- Make it build on SLE11 (use python2 there).</changelog>
<changelog author="foss@grueninger.de" date="1461844800">- update to version 1.7.0
  * ninja now supports implicit outputs.
  * Ninja's output has slightly changed, to make it easier to
    automated tools to look at ninja's output.
  * Ninja now explicitly handles SIGHUP and cleans up after itself.
  * Ninja now uses posix_spawn instead of fork/exec to launch
    subprocesses (on POSIX).
- adjust links to new wesite</changelog>
<changelog author="idonmez@suse.com" date="1461931200">- Update to version 1.7.1
  * Change default NINJA_STATUS to [%f/%t] github issue #1143</changelog>
<changelog author="mpluskal@suse.com" date="1479038400">- Update to version 1.7.2:
  * %e and %r work again in dumb terminals (#1146, #1148)
  * `-t browse` now HTML-escapes rule names (#1157)
  * an edge may now have 0 explicit outputs if it has implicit
    outputs (#1159)
  * make misc/measure.py python 3-compatible
  * misc/write_fake_manifest.py now optionally writes source files,
    use it to quickly produce large, buildable projects for testing
    (#1109, #1198)
  * on newer FreeBSDs, use ppoll()
- Refresh ninja-disable-maxprocs-test.patch</changelog>
<changelog author="badshah400@gmail.com" date="1481025600">- Add macros.ninja as an external source file and install it to
  the %{_rpmconfigdir}/macros.d/; this installs macros for RPM
  that are in turn used by the RPM macros for meson.</changelog>
<changelog author="mpluskal@suse.com" date="1481112000">- Add macros.ninja (boo#1014177)
- Backport latest release to SLE12 bsc#1055189 fate#323787</changelog>

</package>
<package pkgid="798b763e815ef2e7c92124bb6b4c7b4df40af0b3d6876d9d2ec0871736776c6f" name="nodejs-common" arch="noarch">
    <version epoch="0" ver="1.0" rel="2.1"/>

<changelog author="adam.majer@suse.de" date="1499428800">- Initial release.</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- Use MIT license so we don't have to ship the license text.</changelog>

</package>
<package pkgid="9de7ed630f5097c171322af524e2cca51e55ef271c4339850199eb77a6bac68d" name="nodejs-common" arch="src">
    <version epoch="0" ver="1.0" rel="2.1"/>

<changelog author="adam.majer@suse.de" date="1499428800">- Initial release.</changelog>
<changelog author="adam.majer@suse.de" date="1500379200">- Use MIT license so we don't have to ship the license text.</changelog>

</package>
<package pkgid="bee41e4fe5913bca5ea375c01220c86d87ba50794c929efe257e85c4ca8a7987" name="nodejs4" arch="src">
    <version epoch="0" ver="4.8.4" rel="8.1"/>

<changelog author="adam.majer@suse.de" date="1475150400">- enable usage of system certificate store on SLE11SP4 by
  requiring openssl1 (boo#1000036)
- nodejs-libpath.patch:
  * adapt patch from main nodejs project so it builds on SLE11
- New upstream LTS version 4.6.0
  * openssl update (not applicable for SLE12SP2, Leap 42.2 and later)
    + upgrade to 1.0.2j (CVE-2016-6304, CVE-2016-2183, CVE-2016-2178,
    CVE-2016-6306, CVE-2016-7052)
    + remove support for dynamic 3rd party engine modules
  * http: Properly validate for allowable characters in input
    user data. This introduces a new case where throw may occur
    when configuring HTTP responses, users should already
    be adopting try/catch here. (CVE-2016-5325, bnc#985201)
  * tls: properly validate wildcard certificates
    (CVE-2016-7099, bnc#1001652)
  * buffer: Zero-fill excess bytes in new Buffer objects created
    with Buffer.concat()</changelog>
<changelog author="adam.majer@suse.de" date="1475582400">- npm4 now provides nodejs-npm to ease upgrades for Leap</changelog>
<changelog author="qantas94heavy@gmail.com" date="1476878400">- New upstream LTS version 4.6.1
  * c-ares: fix for single-byte buffer overwrite, CVE-2016-5180
    more information at https://c-ares.haxx.se/adv_20160929.html
    (bnc #1007728)</changelog>
<changelog author="adam.majer@suse.de" date="1478606400">- npm4 should provide versioned nodejs-npm and npm allowing
  nodejs-packaging to continue to function properly in Leap 42.2
  (bnc #1009011)</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- remove support-arm64-build.patch: no longer required
- remove nodejs-libpath64.patch: obsolete</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1480593600">- New upstream LTS version 4.6.2
  * build:
    + It is now possible to build the documentation from the release tarball.
  * buffer:
    + Buffer.alloc() will no longer incorrectly return a zero filled buffer
    when an encoding is passed.
  * deps:
    + Upgrade npm in LTS to 2.15.11.
  * repl:
    + Enable tab completion for global properties.
  * url:
    + url.format() will now encode all "#" in search.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 4.7.0
  * build: introduce the configure --shared option for embedders
  * debugger: make listen address configurable in debugger server
  * dgram: generalized send queue to handle close, fixing a
    potential throw when dgram socket is closed in the
    listening event handler
  * http: introduce the 451 status code "Unavailable For
    Legal Reasons"
  * gtest: the test reporter now outputs tap comments as yamlish
  * tls: introduce secureContext for tls.connect (useful for
    caching client certificates, key, and CA certificates)
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
  * src: node no longer aborts when c-ares initialization fails
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code
- Refresh nodejs-libpath.patch</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 4.7.1
  * build: shared library support is now working for AIX builds
  * repl: passing options to the repl will no longer overwrite
    defaults
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 4.7.3
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS version 4.7.2
- Adjusted 8334.diff to be inline with accepted changes
- Merge nodejs4.changes from SLE and devel project</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 4.8.0
  * child_process: add shell option to spawn()
  * crypto: add ALPN Support
  * crypto: allow adding extra certs to well-known CAs
  * deps/v8: expose statistics about heap spaces
  * fs: add the fs.mkdtemp() function
  * process: add process.memoryUsage().external
  * process: add process.cpuUsage()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream maintenance release 4.8.2
  * crypto: fix memory leak if certificate is revoked (#12089)
- Changes not applicable to openSUSE in 4.8.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
- Changes in LTS release 4.8.1
  * buffer: The performance of .toJSON() is now up to 2859% faster
    on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * http: Control characters are now always rejected when using
    http.request().
  * node: Heap statistics now support values larger than 4GB.
- Modify 8334.diff:
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 4.8.3
  * v8: trigger OOM crash if memory allocation fails
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + TLSSocket emits 'error' on handshake failure
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: GCC 7 compilation fixes for v8
  backported and add missing ICU59 headers (bnc#1041283)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- Fix typo in node-gyp-addon-gypi.patch patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New LTS upstream version 4.8.4
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found (bnc#1048299, CVE-2017-11499).
  * http: fixes http.get with numeric authorization options that
    created/used uninitialized buffers as the authentication string
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="ff3ea8b3bbe2c65c7168e8850f854e98c2c76dcbd586231afe3138be2ec1f1df" name="nodejs4" arch="x86_64">
    <version epoch="0" ver="4.8.4" rel="8.1"/>

<changelog author="adam.majer@suse.de" date="1475150400">- enable usage of system certificate store on SLE11SP4 by
  requiring openssl1 (boo#1000036)
- nodejs-libpath.patch:
  * adapt patch from main nodejs project so it builds on SLE11
- New upstream LTS version 4.6.0
  * openssl update (not applicable for SLE12SP2, Leap 42.2 and later)
    + upgrade to 1.0.2j (CVE-2016-6304, CVE-2016-2183, CVE-2016-2178,
    CVE-2016-6306, CVE-2016-7052)
    + remove support for dynamic 3rd party engine modules
  * http: Properly validate for allowable characters in input
    user data. This introduces a new case where throw may occur
    when configuring HTTP responses, users should already
    be adopting try/catch here. (CVE-2016-5325, bnc#985201)
  * tls: properly validate wildcard certificates
    (CVE-2016-7099, bnc#1001652)
  * buffer: Zero-fill excess bytes in new Buffer objects created
    with Buffer.concat()</changelog>
<changelog author="adam.majer@suse.de" date="1475582400">- npm4 now provides nodejs-npm to ease upgrades for Leap</changelog>
<changelog author="qantas94heavy@gmail.com" date="1476878400">- New upstream LTS version 4.6.1
  * c-ares: fix for single-byte buffer overwrite, CVE-2016-5180
    more information at https://c-ares.haxx.se/adv_20160929.html
    (bnc #1007728)</changelog>
<changelog author="adam.majer@suse.de" date="1478606400">- npm4 should provide versioned nodejs-npm and npm allowing
  nodejs-packaging to continue to function properly in Leap 42.2
  (bnc #1009011)</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- remove support-arm64-build.patch: no longer required
- remove nodejs-libpath64.patch: obsolete</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1480593600">- New upstream LTS version 4.6.2
  * build:
    + It is now possible to build the documentation from the release tarball.
  * buffer:
    + Buffer.alloc() will no longer incorrectly return a zero filled buffer
    when an encoding is passed.
  * deps:
    + Upgrade npm in LTS to 2.15.11.
  * repl:
    + Enable tab completion for global properties.
  * url:
    + url.format() will now encode all "#" in search.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 4.7.0
  * build: introduce the configure --shared option for embedders
  * debugger: make listen address configurable in debugger server
  * dgram: generalized send queue to handle close, fixing a
    potential throw when dgram socket is closed in the
    listening event handler
  * http: introduce the 451 status code "Unavailable For
    Legal Reasons"
  * gtest: the test reporter now outputs tap comments as yamlish
  * tls: introduce secureContext for tls.connect (useful for
    caching client certificates, key, and CA certificates)
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
  * src: node no longer aborts when c-ares initialization fails
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code
- Refresh nodejs-libpath.patch</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 4.7.1
  * build: shared library support is now working for AIX builds
  * repl: passing options to the repl will no longer overwrite
    defaults
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 4.7.3
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS version 4.7.2
- Adjusted 8334.diff to be inline with accepted changes
- Merge nodejs4.changes from SLE and devel project</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 4.8.0
  * child_process: add shell option to spawn()
  * crypto: add ALPN Support
  * crypto: allow adding extra certs to well-known CAs
  * deps/v8: expose statistics about heap spaces
  * fs: add the fs.mkdtemp() function
  * process: add process.memoryUsage().external
  * process: add process.cpuUsage()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream maintenance release 4.8.2
  * crypto: fix memory leak if certificate is revoked (#12089)
- Changes not applicable to openSUSE in 4.8.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
- Changes in LTS release 4.8.1
  * buffer: The performance of .toJSON() is now up to 2859% faster
    on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * http: Control characters are now always rejected when using
    http.request().
  * node: Heap statistics now support values larger than 4GB.
- Modify 8334.diff:
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 4.8.3
  * v8: trigger OOM crash if memory allocation fails
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + TLSSocket emits 'error' on handshake failure
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: GCC 7 compilation fixes for v8
  backported and add missing ICU59 headers (bnc#1041283)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- Fix typo in node-gyp-addon-gypi.patch patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New LTS upstream version 4.8.4
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found (bnc#1048299, CVE-2017-11499).
  * http: fixes http.get with numeric authorization options that
    created/used uninitialized buffers as the authentication string
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="b494e756315555c7e182e450519a6596d05f516e482c31bb638fe795c6dc05f9" name="nodejs4-devel" arch="x86_64">
    <version epoch="0" ver="4.8.4" rel="8.1"/>

<changelog author="adam.majer@suse.de" date="1475150400">- enable usage of system certificate store on SLE11SP4 by
  requiring openssl1 (boo#1000036)
- nodejs-libpath.patch:
  * adapt patch from main nodejs project so it builds on SLE11
- New upstream LTS version 4.6.0
  * openssl update (not applicable for SLE12SP2, Leap 42.2 and later)
    + upgrade to 1.0.2j (CVE-2016-6304, CVE-2016-2183, CVE-2016-2178,
    CVE-2016-6306, CVE-2016-7052)
    + remove support for dynamic 3rd party engine modules
  * http: Properly validate for allowable characters in input
    user data. This introduces a new case where throw may occur
    when configuring HTTP responses, users should already
    be adopting try/catch here. (CVE-2016-5325, bnc#985201)
  * tls: properly validate wildcard certificates
    (CVE-2016-7099, bnc#1001652)
  * buffer: Zero-fill excess bytes in new Buffer objects created
    with Buffer.concat()</changelog>
<changelog author="adam.majer@suse.de" date="1475582400">- npm4 now provides nodejs-npm to ease upgrades for Leap</changelog>
<changelog author="qantas94heavy@gmail.com" date="1476878400">- New upstream LTS version 4.6.1
  * c-ares: fix for single-byte buffer overwrite, CVE-2016-5180
    more information at https://c-ares.haxx.se/adv_20160929.html
    (bnc #1007728)</changelog>
<changelog author="adam.majer@suse.de" date="1478606400">- npm4 should provide versioned nodejs-npm and npm allowing
  nodejs-packaging to continue to function properly in Leap 42.2
  (bnc #1009011)</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- remove support-arm64-build.patch: no longer required
- remove nodejs-libpath64.patch: obsolete</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1480593600">- New upstream LTS version 4.6.2
  * build:
    + It is now possible to build the documentation from the release tarball.
  * buffer:
    + Buffer.alloc() will no longer incorrectly return a zero filled buffer
    when an encoding is passed.
  * deps:
    + Upgrade npm in LTS to 2.15.11.
  * repl:
    + Enable tab completion for global properties.
  * url:
    + url.format() will now encode all "#" in search.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 4.7.0
  * build: introduce the configure --shared option for embedders
  * debugger: make listen address configurable in debugger server
  * dgram: generalized send queue to handle close, fixing a
    potential throw when dgram socket is closed in the
    listening event handler
  * http: introduce the 451 status code "Unavailable For
    Legal Reasons"
  * gtest: the test reporter now outputs tap comments as yamlish
  * tls: introduce secureContext for tls.connect (useful for
    caching client certificates, key, and CA certificates)
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
  * src: node no longer aborts when c-ares initialization fails
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code
- Refresh nodejs-libpath.patch</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 4.7.1
  * build: shared library support is now working for AIX builds
  * repl: passing options to the repl will no longer overwrite
    defaults
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 4.7.3
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS version 4.7.2
- Adjusted 8334.diff to be inline with accepted changes
- Merge nodejs4.changes from SLE and devel project</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 4.8.0
  * child_process: add shell option to spawn()
  * crypto: add ALPN Support
  * crypto: allow adding extra certs to well-known CAs
  * deps/v8: expose statistics about heap spaces
  * fs: add the fs.mkdtemp() function
  * process: add process.memoryUsage().external
  * process: add process.cpuUsage()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream maintenance release 4.8.2
  * crypto: fix memory leak if certificate is revoked (#12089)
- Changes not applicable to openSUSE in 4.8.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
- Changes in LTS release 4.8.1
  * buffer: The performance of .toJSON() is now up to 2859% faster
    on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * http: Control characters are now always rejected when using
    http.request().
  * node: Heap statistics now support values larger than 4GB.
- Modify 8334.diff:
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 4.8.3
  * v8: trigger OOM crash if memory allocation fails
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + TLSSocket emits 'error' on handshake failure
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: GCC 7 compilation fixes for v8
  backported and add missing ICU59 headers (bnc#1041283)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- Fix typo in node-gyp-addon-gypi.patch patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New LTS upstream version 4.8.4
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found (bnc#1048299, CVE-2017-11499).
  * http: fixes http.get with numeric authorization options that
    created/used uninitialized buffers as the authentication string
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="07d7028d58015172f750e8868f97a1adeac2a81d34cdf4baa4021828afc029dd" name="nodejs4-docs" arch="noarch">
    <version epoch="0" ver="4.8.4" rel="8.1"/>

<changelog author="adam.majer@suse.de" date="1475150400">- enable usage of system certificate store on SLE11SP4 by
  requiring openssl1 (boo#1000036)
- nodejs-libpath.patch:
  * adapt patch from main nodejs project so it builds on SLE11
- New upstream LTS version 4.6.0
  * openssl update (not applicable for SLE12SP2, Leap 42.2 and later)
    + upgrade to 1.0.2j (CVE-2016-6304, CVE-2016-2183, CVE-2016-2178,
    CVE-2016-6306, CVE-2016-7052)
    + remove support for dynamic 3rd party engine modules
  * http: Properly validate for allowable characters in input
    user data. This introduces a new case where throw may occur
    when configuring HTTP responses, users should already
    be adopting try/catch here. (CVE-2016-5325, bnc#985201)
  * tls: properly validate wildcard certificates
    (CVE-2016-7099, bnc#1001652)
  * buffer: Zero-fill excess bytes in new Buffer objects created
    with Buffer.concat()</changelog>
<changelog author="adam.majer@suse.de" date="1475582400">- npm4 now provides nodejs-npm to ease upgrades for Leap</changelog>
<changelog author="qantas94heavy@gmail.com" date="1476878400">- New upstream LTS version 4.6.1
  * c-ares: fix for single-byte buffer overwrite, CVE-2016-5180
    more information at https://c-ares.haxx.se/adv_20160929.html
    (bnc #1007728)</changelog>
<changelog author="adam.majer@suse.de" date="1478606400">- npm4 should provide versioned nodejs-npm and npm allowing
  nodejs-packaging to continue to function properly in Leap 42.2
  (bnc #1009011)</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- remove support-arm64-build.patch: no longer required
- remove nodejs-libpath64.patch: obsolete</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1480593600">- New upstream LTS version 4.6.2
  * build:
    + It is now possible to build the documentation from the release tarball.
  * buffer:
    + Buffer.alloc() will no longer incorrectly return a zero filled buffer
    when an encoding is passed.
  * deps:
    + Upgrade npm in LTS to 2.15.11.
  * repl:
    + Enable tab completion for global properties.
  * url:
    + url.format() will now encode all "#" in search.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 4.7.0
  * build: introduce the configure --shared option for embedders
  * debugger: make listen address configurable in debugger server
  * dgram: generalized send queue to handle close, fixing a
    potential throw when dgram socket is closed in the
    listening event handler
  * http: introduce the 451 status code "Unavailable For
    Legal Reasons"
  * gtest: the test reporter now outputs tap comments as yamlish
  * tls: introduce secureContext for tls.connect (useful for
    caching client certificates, key, and CA certificates)
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
  * src: node no longer aborts when c-ares initialization fails
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code
- Refresh nodejs-libpath.patch</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 4.7.1
  * build: shared library support is now working for AIX builds
  * repl: passing options to the repl will no longer overwrite
    defaults
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 4.7.3
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS version 4.7.2
- Adjusted 8334.diff to be inline with accepted changes
- Merge nodejs4.changes from SLE and devel project</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 4.8.0
  * child_process: add shell option to spawn()
  * crypto: add ALPN Support
  * crypto: allow adding extra certs to well-known CAs
  * deps/v8: expose statistics about heap spaces
  * fs: add the fs.mkdtemp() function
  * process: add process.memoryUsage().external
  * process: add process.cpuUsage()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream maintenance release 4.8.2
  * crypto: fix memory leak if certificate is revoked (#12089)
- Changes not applicable to openSUSE in 4.8.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
- Changes in LTS release 4.8.1
  * buffer: The performance of .toJSON() is now up to 2859% faster
    on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * http: Control characters are now always rejected when using
    http.request().
  * node: Heap statistics now support values larger than 4GB.
- Modify 8334.diff:
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 4.8.3
  * v8: trigger OOM crash if memory allocation fails
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + TLSSocket emits 'error' on handshake failure
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: GCC 7 compilation fixes for v8
  backported and add missing ICU59 headers (bnc#1041283)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- Fix typo in node-gyp-addon-gypi.patch patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New LTS upstream version 4.8.4
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found (bnc#1048299, CVE-2017-11499).
  * http: fixes http.get with numeric authorization options that
    created/used uninitialized buffers as the authentication string
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="b539f9b57dd028136b36b0857aea54fbd20ae556e27f772bcbda937bee823ecc" name="nodejs6" arch="src">
    <version epoch="0" ver="6.11.1" rel="3.1"/>

<changelog author="qantas94heavy@gmail.com" date="1478088000">- Fork package devel:languages:nodejs/nodejs
- Remove support-arm64-build.patch (not necessary for aarch64 build)
- Use system library versions of c-ares and ICU where supported
- Remove /usr/{lib,lib64}/node_modules from global module paths
  * This is deprecated behaviour that was caused by an incorrect patch
    in devel:languages:nodejs/nodejs almost 6 months ago (boo#985350)
- Modify nodejs-libpath.patch
  * Move /usr/lib64/node_modules to %{_libexecpath} as npm isn't
    architecture dependent (only npm itself is stored there)
- Remove nodejs-libpath64.patch
- Use separate .sig file instead of .asc file for source verification
- Use exec instead of xargs to remove files in install script</changelog>
<changelog author="adam.majer@suse.de" date="1478520000">- Add versioned dependencies for unbundling of c-ares and icu
  libraries
- SLE12 can have unbundled libicu</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- NodeJS 6.x LTS package, based on NodeJS 4.x LTS layout. All
  NodeJS packages are interchangeable. (FATE #321373)</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 6.9.2
  * buffer: coerce slice parameters consistently
  * deps/npm: upgrade npm to 3.10.9
  * deps/V8: Various fixes to destructuring edge cases
    + cherry-pick 3c39bac from V8 upstream
    + cherry pick 7166503 from upstream v8
  * gtest: the test reporter now outputs tap comments as yamlish
  * inspector: inspector now prompts user to use 127.0.0.1 rather
    than localhost
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 6.9.3
  * build: shared library support is now working for AIX builds
  * deps/npm: upgrade npm to 3.10.10
  * deps/V8: destructuring of arrow function arguments via computed
    property no longer throws
  * inspector: /json/version returns object, not an object wrapped
    in an array
  * module: using --debug-brk and --eval together now works
    as expected
  * process: improve performance of nextTick up to 20%
  * repl: the division operator will no longer be accidentally
    parsed as regex
  * repl: improved support for generator functions
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 6.9.5
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS release 6.9.4
- Adjusted 8334.diff to be inline with accepted changes</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 6.10.0
  * crypto: allow adding extra certs to well-known CAs
  * deps: upgrade INTL ICU to version 58
  * fs: cache non-symlinks in realpathSync
  * process: add process.memoryUsage().external
  * repl: allow autocompletion for scoped packages
  * src: add wrapper for process.emitWarning()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream LTS release 6.10.2
  * crypto: fix memory leak if certificate is revoked (#12089)
  * deps: backport V8 fixes for spread syntax regression
    causing segfaults (#12037)
- Changes not applicable to openSUSE in 6.10.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
  * repl: revert commit that broke REPL display on Windows (#12123)
- Changes in LTS release 6.10.1
  * performance: The performance of several APIs has been improved.
    + Buffer.compare() is up to 35% faster on average.
    + buffer.toJSON() is up to 2859% faster on average.
    + fs.*statSync() functions are now up to 9% faster on average.
    + os.loadavg is up to 151% faster.
    + process.memoryUsage() is up to 34% faster.
    + querystring.unescape() for Buffers is 15% faster on average.
    + querystring.stringify() is up to 7.8% faster on average.
    + querystring.parse() is up to 21% faster on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * child_process: spawnSync now returns a null status when child
    is terminated by a signal. This fixes the behavior to act like
    spawn() does.
  * http: Control characters are now always rejected when using
    http.request(). Debug messages have been added for cases when
    headers contain invalid values.
  * node: Heap statistics now support values larger than 4GB.
  * timers: Timer callbacks now always maintain order when
    interacting with domain error handling.</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 6.10.3
  * b8:
    + Trigger OOM crash on memory allcation errors
    + Don't treat catch scopes as possibly-shadowing for sloppy eval
  * lib: fix event race condition with -e
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + fix macro to check NPN feature
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: backported GCC 7 compilation fixes
  for v8 backported and add missing ICU59 includes (bnc#1041282)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- New upstream LTS release 6.11.0
  * added support for building mips64el
  * cluster:
    + disconnect() now returns a reference to the disconnected
    worker.
  * crypto:
    + ability to select cert store at runtime
    + Use system CAs instead of using bundled ones
    (obsoletes 8334.diff)
    + The Decipher methods setAuthTag() and setAAD now return this
    + adding support for OPENSSL_CONF again
    + make LazyTransform compabile with Streams1
  * deps:
    + upgrade libuv to 1.11.0
  * dns:
    + Implemented {ttl: true} for resolve4() and resolve6().
  * process:
    + add NODE_NO_WARNINGS environment variable
  * readline:
    + add option to stop duplicates in history
  * src:
    + support "--" after "-e" as end-of-options
  * tls:
    + new tls.TLSSocket() supports sec ctx options
    + Allow obvious key/passphrase combinations.
- Fix typo in node-gyp-addon-gypi.patch patch
- Refresh icu59.patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New upstream LTS release 6.11.1
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found. (bnc#1048299, CVE-2017-11499)
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="acda1539d87fa1a4098d9fd2d0e50771eee19ee2b6a23db7d9117041ae6db015" name="nodejs6" arch="x86_64">
    <version epoch="0" ver="6.11.1" rel="3.1"/>

<changelog author="qantas94heavy@gmail.com" date="1478088000">- Fork package devel:languages:nodejs/nodejs
- Remove support-arm64-build.patch (not necessary for aarch64 build)
- Use system library versions of c-ares and ICU where supported
- Remove /usr/{lib,lib64}/node_modules from global module paths
  * This is deprecated behaviour that was caused by an incorrect patch
    in devel:languages:nodejs/nodejs almost 6 months ago (boo#985350)
- Modify nodejs-libpath.patch
  * Move /usr/lib64/node_modules to %{_libexecpath} as npm isn't
    architecture dependent (only npm itself is stored there)
- Remove nodejs-libpath64.patch
- Use separate .sig file instead of .asc file for source verification
- Use exec instead of xargs to remove files in install script</changelog>
<changelog author="adam.majer@suse.de" date="1478520000">- Add versioned dependencies for unbundling of c-ares and icu
  libraries
- SLE12 can have unbundled libicu</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- NodeJS 6.x LTS package, based on NodeJS 4.x LTS layout. All
  NodeJS packages are interchangeable. (FATE #321373)</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 6.9.2
  * buffer: coerce slice parameters consistently
  * deps/npm: upgrade npm to 3.10.9
  * deps/V8: Various fixes to destructuring edge cases
    + cherry-pick 3c39bac from V8 upstream
    + cherry pick 7166503 from upstream v8
  * gtest: the test reporter now outputs tap comments as yamlish
  * inspector: inspector now prompts user to use 127.0.0.1 rather
    than localhost
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 6.9.3
  * build: shared library support is now working for AIX builds
  * deps/npm: upgrade npm to 3.10.10
  * deps/V8: destructuring of arrow function arguments via computed
    property no longer throws
  * inspector: /json/version returns object, not an object wrapped
    in an array
  * module: using --debug-brk and --eval together now works
    as expected
  * process: improve performance of nextTick up to 20%
  * repl: the division operator will no longer be accidentally
    parsed as regex
  * repl: improved support for generator functions
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 6.9.5
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS release 6.9.4
- Adjusted 8334.diff to be inline with accepted changes</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 6.10.0
  * crypto: allow adding extra certs to well-known CAs
  * deps: upgrade INTL ICU to version 58
  * fs: cache non-symlinks in realpathSync
  * process: add process.memoryUsage().external
  * repl: allow autocompletion for scoped packages
  * src: add wrapper for process.emitWarning()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream LTS release 6.10.2
  * crypto: fix memory leak if certificate is revoked (#12089)
  * deps: backport V8 fixes for spread syntax regression
    causing segfaults (#12037)
- Changes not applicable to openSUSE in 6.10.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
  * repl: revert commit that broke REPL display on Windows (#12123)
- Changes in LTS release 6.10.1
  * performance: The performance of several APIs has been improved.
    + Buffer.compare() is up to 35% faster on average.
    + buffer.toJSON() is up to 2859% faster on average.
    + fs.*statSync() functions are now up to 9% faster on average.
    + os.loadavg is up to 151% faster.
    + process.memoryUsage() is up to 34% faster.
    + querystring.unescape() for Buffers is 15% faster on average.
    + querystring.stringify() is up to 7.8% faster on average.
    + querystring.parse() is up to 21% faster on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * child_process: spawnSync now returns a null status when child
    is terminated by a signal. This fixes the behavior to act like
    spawn() does.
  * http: Control characters are now always rejected when using
    http.request(). Debug messages have been added for cases when
    headers contain invalid values.
  * node: Heap statistics now support values larger than 4GB.
  * timers: Timer callbacks now always maintain order when
    interacting with domain error handling.</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 6.10.3
  * b8:
    + Trigger OOM crash on memory allcation errors
    + Don't treat catch scopes as possibly-shadowing for sloppy eval
  * lib: fix event race condition with -e
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + fix macro to check NPN feature
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: backported GCC 7 compilation fixes
  for v8 backported and add missing ICU59 includes (bnc#1041282)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- New upstream LTS release 6.11.0
  * added support for building mips64el
  * cluster:
    + disconnect() now returns a reference to the disconnected
    worker.
  * crypto:
    + ability to select cert store at runtime
    + Use system CAs instead of using bundled ones
    (obsoletes 8334.diff)
    + The Decipher methods setAuthTag() and setAAD now return this
    + adding support for OPENSSL_CONF again
    + make LazyTransform compabile with Streams1
  * deps:
    + upgrade libuv to 1.11.0
  * dns:
    + Implemented {ttl: true} for resolve4() and resolve6().
  * process:
    + add NODE_NO_WARNINGS environment variable
  * readline:
    + add option to stop duplicates in history
  * src:
    + support "--" after "-e" as end-of-options
  * tls:
    + new tls.TLSSocket() supports sec ctx options
    + Allow obvious key/passphrase combinations.
- Fix typo in node-gyp-addon-gypi.patch patch
- Refresh icu59.patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New upstream LTS release 6.11.1
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found. (bnc#1048299, CVE-2017-11499)
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="ad36d3cb58c9a97c52bddf1c65d2868b76369f2a8659a300dd57a97ad6420dd4" name="nodejs6-devel" arch="x86_64">
    <version epoch="0" ver="6.11.1" rel="3.1"/>

<changelog author="qantas94heavy@gmail.com" date="1478088000">- Fork package devel:languages:nodejs/nodejs
- Remove support-arm64-build.patch (not necessary for aarch64 build)
- Use system library versions of c-ares and ICU where supported
- Remove /usr/{lib,lib64}/node_modules from global module paths
  * This is deprecated behaviour that was caused by an incorrect patch
    in devel:languages:nodejs/nodejs almost 6 months ago (boo#985350)
- Modify nodejs-libpath.patch
  * Move /usr/lib64/node_modules to %{_libexecpath} as npm isn't
    architecture dependent (only npm itself is stored there)
- Remove nodejs-libpath64.patch
- Use separate .sig file instead of .asc file for source verification
- Use exec instead of xargs to remove files in install script</changelog>
<changelog author="adam.majer@suse.de" date="1478520000">- Add versioned dependencies for unbundling of c-ares and icu
  libraries
- SLE12 can have unbundled libicu</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- NodeJS 6.x LTS package, based on NodeJS 4.x LTS layout. All
  NodeJS packages are interchangeable. (FATE #321373)</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 6.9.2
  * buffer: coerce slice parameters consistently
  * deps/npm: upgrade npm to 3.10.9
  * deps/V8: Various fixes to destructuring edge cases
    + cherry-pick 3c39bac from V8 upstream
    + cherry pick 7166503 from upstream v8
  * gtest: the test reporter now outputs tap comments as yamlish
  * inspector: inspector now prompts user to use 127.0.0.1 rather
    than localhost
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 6.9.3
  * build: shared library support is now working for AIX builds
  * deps/npm: upgrade npm to 3.10.10
  * deps/V8: destructuring of arrow function arguments via computed
    property no longer throws
  * inspector: /json/version returns object, not an object wrapped
    in an array
  * module: using --debug-brk and --eval together now works
    as expected
  * process: improve performance of nextTick up to 20%
  * repl: the division operator will no longer be accidentally
    parsed as regex
  * repl: improved support for generator functions
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 6.9.5
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS release 6.9.4
- Adjusted 8334.diff to be inline with accepted changes</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 6.10.0
  * crypto: allow adding extra certs to well-known CAs
  * deps: upgrade INTL ICU to version 58
  * fs: cache non-symlinks in realpathSync
  * process: add process.memoryUsage().external
  * repl: allow autocompletion for scoped packages
  * src: add wrapper for process.emitWarning()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream LTS release 6.10.2
  * crypto: fix memory leak if certificate is revoked (#12089)
  * deps: backport V8 fixes for spread syntax regression
    causing segfaults (#12037)
- Changes not applicable to openSUSE in 6.10.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
  * repl: revert commit that broke REPL display on Windows (#12123)
- Changes in LTS release 6.10.1
  * performance: The performance of several APIs has been improved.
    + Buffer.compare() is up to 35% faster on average.
    + buffer.toJSON() is up to 2859% faster on average.
    + fs.*statSync() functions are now up to 9% faster on average.
    + os.loadavg is up to 151% faster.
    + process.memoryUsage() is up to 34% faster.
    + querystring.unescape() for Buffers is 15% faster on average.
    + querystring.stringify() is up to 7.8% faster on average.
    + querystring.parse() is up to 21% faster on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * child_process: spawnSync now returns a null status when child
    is terminated by a signal. This fixes the behavior to act like
    spawn() does.
  * http: Control characters are now always rejected when using
    http.request(). Debug messages have been added for cases when
    headers contain invalid values.
  * node: Heap statistics now support values larger than 4GB.
  * timers: Timer callbacks now always maintain order when
    interacting with domain error handling.</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 6.10.3
  * b8:
    + Trigger OOM crash on memory allcation errors
    + Don't treat catch scopes as possibly-shadowing for sloppy eval
  * lib: fix event race condition with -e
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + fix macro to check NPN feature
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: backported GCC 7 compilation fixes
  for v8 backported and add missing ICU59 includes (bnc#1041282)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- New upstream LTS release 6.11.0
  * added support for building mips64el
  * cluster:
    + disconnect() now returns a reference to the disconnected
    worker.
  * crypto:
    + ability to select cert store at runtime
    + Use system CAs instead of using bundled ones
    (obsoletes 8334.diff)
    + The Decipher methods setAuthTag() and setAAD now return this
    + adding support for OPENSSL_CONF again
    + make LazyTransform compabile with Streams1
  * deps:
    + upgrade libuv to 1.11.0
  * dns:
    + Implemented {ttl: true} for resolve4() and resolve6().
  * process:
    + add NODE_NO_WARNINGS environment variable
  * readline:
    + add option to stop duplicates in history
  * src:
    + support "--" after "-e" as end-of-options
  * tls:
    + new tls.TLSSocket() supports sec ctx options
    + Allow obvious key/passphrase combinations.
- Fix typo in node-gyp-addon-gypi.patch patch
- Refresh icu59.patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New upstream LTS release 6.11.1
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found. (bnc#1048299, CVE-2017-11499)
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="1a292b736d76fa1b879d2b479a21dd4986439df2eabcbd49b90fe292102bc32d" name="nodejs6-docs" arch="noarch">
    <version epoch="0" ver="6.11.1" rel="3.1"/>

<changelog author="qantas94heavy@gmail.com" date="1478088000">- Fork package devel:languages:nodejs/nodejs
- Remove support-arm64-build.patch (not necessary for aarch64 build)
- Use system library versions of c-ares and ICU where supported
- Remove /usr/{lib,lib64}/node_modules from global module paths
  * This is deprecated behaviour that was caused by an incorrect patch
    in devel:languages:nodejs/nodejs almost 6 months ago (boo#985350)
- Modify nodejs-libpath.patch
  * Move /usr/lib64/node_modules to %{_libexecpath} as npm isn't
    architecture dependent (only npm itself is stored there)
- Remove nodejs-libpath64.patch
- Use separate .sig file instead of .asc file for source verification
- Use exec instead of xargs to remove files in install script</changelog>
<changelog author="adam.majer@suse.de" date="1478520000">- Add versioned dependencies for unbundling of c-ares and icu
  libraries
- SLE12 can have unbundled libicu</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- NodeJS 6.x LTS package, based on NodeJS 4.x LTS layout. All
  NodeJS packages are interchangeable. (FATE #321373)</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 6.9.2
  * buffer: coerce slice parameters consistently
  * deps/npm: upgrade npm to 3.10.9
  * deps/V8: Various fixes to destructuring edge cases
    + cherry-pick 3c39bac from V8 upstream
    + cherry pick 7166503 from upstream v8
  * gtest: the test reporter now outputs tap comments as yamlish
  * inspector: inspector now prompts user to use 127.0.0.1 rather
    than localhost
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 6.9.3
  * build: shared library support is now working for AIX builds
  * deps/npm: upgrade npm to 3.10.10
  * deps/V8: destructuring of arrow function arguments via computed
    property no longer throws
  * inspector: /json/version returns object, not an object wrapped
    in an array
  * module: using --debug-brk and --eval together now works
    as expected
  * process: improve performance of nextTick up to 20%
  * repl: the division operator will no longer be accidentally
    parsed as regex
  * repl: improved support for generator functions
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 6.9.5
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS release 6.9.4
- Adjusted 8334.diff to be inline with accepted changes</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 6.10.0
  * crypto: allow adding extra certs to well-known CAs
  * deps: upgrade INTL ICU to version 58
  * fs: cache non-symlinks in realpathSync
  * process: add process.memoryUsage().external
  * repl: allow autocompletion for scoped packages
  * src: add wrapper for process.emitWarning()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream LTS release 6.10.2
  * crypto: fix memory leak if certificate is revoked (#12089)
  * deps: backport V8 fixes for spread syntax regression
    causing segfaults (#12037)
- Changes not applicable to openSUSE in 6.10.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
  * repl: revert commit that broke REPL display on Windows (#12123)
- Changes in LTS release 6.10.1
  * performance: The performance of several APIs has been improved.
    + Buffer.compare() is up to 35% faster on average.
    + buffer.toJSON() is up to 2859% faster on average.
    + fs.*statSync() functions are now up to 9% faster on average.
    + os.loadavg is up to 151% faster.
    + process.memoryUsage() is up to 34% faster.
    + querystring.unescape() for Buffers is 15% faster on average.
    + querystring.stringify() is up to 7.8% faster on average.
    + querystring.parse() is up to 21% faster on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * child_process: spawnSync now returns a null status when child
    is terminated by a signal. This fixes the behavior to act like
    spawn() does.
  * http: Control characters are now always rejected when using
    http.request(). Debug messages have been added for cases when
    headers contain invalid values.
  * node: Heap statistics now support values larger than 4GB.
  * timers: Timer callbacks now always maintain order when
    interacting with domain error handling.</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 6.10.3
  * b8:
    + Trigger OOM crash on memory allcation errors
    + Don't treat catch scopes as possibly-shadowing for sloppy eval
  * lib: fix event race condition with -e
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + fix macro to check NPN feature
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: backported GCC 7 compilation fixes
  for v8 backported and add missing ICU59 includes (bnc#1041282)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- New upstream LTS release 6.11.0
  * added support for building mips64el
  * cluster:
    + disconnect() now returns a reference to the disconnected
    worker.
  * crypto:
    + ability to select cert store at runtime
    + Use system CAs instead of using bundled ones
    (obsoletes 8334.diff)
    + The Decipher methods setAuthTag() and setAAD now return this
    + adding support for OPENSSL_CONF again
    + make LazyTransform compabile with Streams1
  * deps:
    + upgrade libuv to 1.11.0
  * dns:
    + Implemented {ttl: true} for resolve4() and resolve6().
  * process:
    + add NODE_NO_WARNINGS environment variable
  * readline:
    + add option to stop duplicates in history
  * src:
    + support "--" after "-e" as end-of-options
  * tls:
    + new tls.TLSSocket() supports sec ctx options
    + Allow obvious key/passphrase combinations.
- Fix typo in node-gyp-addon-gypi.patch patch
- Refresh icu59.patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New upstream LTS release 6.11.1
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found. (bnc#1048299, CVE-2017-11499)
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="9f6ade434368dab0beaac784a11f922e3c702724c2b1f8adc879032208bc10c3" name="npm4" arch="x86_64">
    <version epoch="0" ver="4.8.4" rel="8.1"/>

<changelog author="adam.majer@suse.de" date="1475150400">- enable usage of system certificate store on SLE11SP4 by
  requiring openssl1 (boo#1000036)
- nodejs-libpath.patch:
  * adapt patch from main nodejs project so it builds on SLE11
- New upstream LTS version 4.6.0
  * openssl update (not applicable for SLE12SP2, Leap 42.2 and later)
    + upgrade to 1.0.2j (CVE-2016-6304, CVE-2016-2183, CVE-2016-2178,
    CVE-2016-6306, CVE-2016-7052)
    + remove support for dynamic 3rd party engine modules
  * http: Properly validate for allowable characters in input
    user data. This introduces a new case where throw may occur
    when configuring HTTP responses, users should already
    be adopting try/catch here. (CVE-2016-5325, bnc#985201)
  * tls: properly validate wildcard certificates
    (CVE-2016-7099, bnc#1001652)
  * buffer: Zero-fill excess bytes in new Buffer objects created
    with Buffer.concat()</changelog>
<changelog author="adam.majer@suse.de" date="1475582400">- npm4 now provides nodejs-npm to ease upgrades for Leap</changelog>
<changelog author="qantas94heavy@gmail.com" date="1476878400">- New upstream LTS version 4.6.1
  * c-ares: fix for single-byte buffer overwrite, CVE-2016-5180
    more information at https://c-ares.haxx.se/adv_20160929.html
    (bnc #1007728)</changelog>
<changelog author="adam.majer@suse.de" date="1478606400">- npm4 should provide versioned nodejs-npm and npm allowing
  nodejs-packaging to continue to function properly in Leap 42.2
  (bnc #1009011)</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- remove support-arm64-build.patch: no longer required
- remove nodejs-libpath64.patch: obsolete</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1480593600">- New upstream LTS version 4.6.2
  * build:
    + It is now possible to build the documentation from the release tarball.
  * buffer:
    + Buffer.alloc() will no longer incorrectly return a zero filled buffer
    when an encoding is passed.
  * deps:
    + Upgrade npm in LTS to 2.15.11.
  * repl:
    + Enable tab completion for global properties.
  * url:
    + url.format() will now encode all "#" in search.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 4.7.0
  * build: introduce the configure --shared option for embedders
  * debugger: make listen address configurable in debugger server
  * dgram: generalized send queue to handle close, fixing a
    potential throw when dgram socket is closed in the
    listening event handler
  * http: introduce the 451 status code "Unavailable For
    Legal Reasons"
  * gtest: the test reporter now outputs tap comments as yamlish
  * tls: introduce secureContext for tls.connect (useful for
    caching client certificates, key, and CA certificates)
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
  * src: node no longer aborts when c-ares initialization fails
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code
- Refresh nodejs-libpath.patch</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 4.7.1
  * build: shared library support is now working for AIX builds
  * repl: passing options to the repl will no longer overwrite
    defaults
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 4.7.3
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS version 4.7.2
- Adjusted 8334.diff to be inline with accepted changes
- Merge nodejs4.changes from SLE and devel project</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 4.8.0
  * child_process: add shell option to spawn()
  * crypto: add ALPN Support
  * crypto: allow adding extra certs to well-known CAs
  * deps/v8: expose statistics about heap spaces
  * fs: add the fs.mkdtemp() function
  * process: add process.memoryUsage().external
  * process: add process.cpuUsage()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream maintenance release 4.8.2
  * crypto: fix memory leak if certificate is revoked (#12089)
- Changes not applicable to openSUSE in 4.8.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
- Changes in LTS release 4.8.1
  * buffer: The performance of .toJSON() is now up to 2859% faster
    on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * http: Control characters are now always rejected when using
    http.request().
  * node: Heap statistics now support values larger than 4GB.
- Modify 8334.diff:
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 4.8.3
  * v8: trigger OOM crash if memory allocation fails
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + TLSSocket emits 'error' on handshake failure
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: GCC 7 compilation fixes for v8
  backported and add missing ICU59 headers (bnc#1041283)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- Fix typo in node-gyp-addon-gypi.patch patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New LTS upstream version 4.8.4
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found (bnc#1048299, CVE-2017-11499).
  * http: fixes http.get with numeric authorization options that
    created/used uninitialized buffers as the authentication string
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="c9ad587f8f56d6cc2d297a456aa5620a2f294427a36a9914bfc6cffa2f51d6e2" name="npm6" arch="x86_64">
    <version epoch="0" ver="6.11.1" rel="3.1"/>

<changelog author="qantas94heavy@gmail.com" date="1478088000">- Fork package devel:languages:nodejs/nodejs
- Remove support-arm64-build.patch (not necessary for aarch64 build)
- Use system library versions of c-ares and ICU where supported
- Remove /usr/{lib,lib64}/node_modules from global module paths
  * This is deprecated behaviour that was caused by an incorrect patch
    in devel:languages:nodejs/nodejs almost 6 months ago (boo#985350)
- Modify nodejs-libpath.patch
  * Move /usr/lib64/node_modules to %{_libexecpath} as npm isn't
    architecture dependent (only npm itself is stored there)
- Remove nodejs-libpath64.patch
- Use separate .sig file instead of .asc file for source verification
- Use exec instead of xargs to remove files in install script</changelog>
<changelog author="adam.majer@suse.de" date="1478520000">- Add versioned dependencies for unbundling of c-ares and icu
  libraries
- SLE12 can have unbundled libicu</changelog>
<changelog author="adam.majer@suse.de" date="1479470400">- Package unification across various branches of NodeJS. Package
  for 4.x, 6.x and current (7.x) branches of NodeJS are now
  handled via GitHub repository.
- NodeJS 6.x LTS package, based on NodeJS 4.x LTS layout. All
  NodeJS packages are interchangeable. (FATE #321373)</changelog>
<changelog author="adam.majer@suse.de" date="1479902400">- Add missing conflicts to base package. It's not possible to have
  concurrent nodejs installations.</changelog>
<changelog author="qantas94heavy@gmail.com" date="1481284800">- New upstream LTS version 6.9.2
  * buffer: coerce slice parameters consistently
  * deps/npm: upgrade npm to 3.10.9
  * deps/V8: Various fixes to destructuring edge cases
    + cherry-pick 3c39bac from V8 upstream
    + cherry pick 7166503 from upstream v8
  * gtest: the test reporter now outputs tap comments as yamlish
  * inspector: inspector now prompts user to use 127.0.0.1 rather
    than localhost
  * tls: fix memory leak when writing data to TLSWrap instance
    during handshake
- Modify 8334.diff:
  * ported and updated system CA store for the new node crypto code</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483531200">- New upstream LTS release 6.9.3
  * build: shared library support is now working for AIX builds
  * deps/npm: upgrade npm to 3.10.10
  * deps/V8: destructuring of arrow function arguments via computed
    property no longer throws
  * inspector: /json/version returns object, not an object wrapped
    in an array
  * module: using --debug-brk and --eval together now works
    as expected
  * process: improve performance of nextTick up to 20%
  * repl: the division operator will no longer be accidentally
    parsed as regex
  * repl: improved support for generator functions
  * timers: recanceling a cancelled timers will no longer throw</changelog>
<changelog author="qantas94heavy@gmail.com" date="1483704000">- Add basic check that Node.js loads successfully to spec file</changelog>
<changelog author="adam.majer@suse.de" date="1486123200">- New upstream LTS release 6.9.5
  * deps: upgrade openssl sources to 1.0.2k
    (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055,
    bnc#1022085, bnc#1022086, bnc#1009528)
- No changes in LTS release 6.9.4
- Adjusted 8334.diff to be inline with accepted changes</changelog>
<changelog author="qantas94heavy@gmail.com" date="1488110400">- New upstream LTS release 6.10.0
  * crypto: allow adding extra certs to well-known CAs
  * deps: upgrade INTL ICU to version 58
  * fs: cache non-symlinks in realpathSync
  * process: add process.memoryUsage().external
  * repl: allow autocompletion for scoped packages
  * src: add wrapper for process.emitWarning()
- Modify 8334.diff:
  * Remove merged reference counting code (#9409)
  * Bring patch in line with upstream changes (#8334)</changelog>
<changelog author="qantas94heavy@gmail.com" date="1491393600">- New upstream LTS release 6.10.2
  * crypto: fix memory leak if certificate is revoked (#12089)
  * deps: backport V8 fixes for spread syntax regression
    causing segfaults (#12037)
- Changes not applicable to openSUSE in 6.10.2:
  * deps: upgrade zlib to 1.2.11 (#10980)
  * repl: revert commit that broke REPL display on Windows (#12123)
- Changes in LTS release 6.10.1
  * performance: The performance of several APIs has been improved.
    + Buffer.compare() is up to 35% faster on average.
    + buffer.toJSON() is up to 2859% faster on average.
    + fs.*statSync() functions are now up to 9% faster on average.
    + os.loadavg is up to 151% faster.
    + process.memoryUsage() is up to 34% faster.
    + querystring.unescape() for Buffers is 15% faster on average.
    + querystring.stringify() is up to 7.8% faster on average.
    + querystring.parse() is up to 21% faster on average.
  * IPC: Batched writes have been enabled for process IPC on
    platforms that support Unix Domain Sockets. Performance gains
    may be up to 40% for some workloads.
  * child_process: spawnSync now returns a null status when child
    is terminated by a signal. This fixes the behavior to act like
    spawn() does.
  * http: Control characters are now always rejected when using
    http.request(). Debug messages have been added for cases when
    headers contain invalid values.
  * node: Heap statistics now support values larger than 4GB.
  * timers: Timer callbacks now always maintain order when
    interacting with domain error handling.</changelog>
<changelog author="adam.majer@suse.de" date="1495540800">- New upstream LTS release 6.10.3
  * b8:
    + Trigger OOM crash on memory allcation errors
    + Don't treat catch scopes as possibly-shadowing for sloppy eval
  * lib: fix event race condition with -e
  * src: fix base64 decoding in rare edgecase
  * tls:
    + fix segfault on destroy after partial read
    + keep track of stream that is closed
    + fix macro to check NPN feature
- nodejs-libpath.patch: updated</changelog>
<changelog author="adam.majer@suse.de" date="1496145600">- 0f3e69db.patch, icu59.patch: backported GCC 7 compilation fixes
  for v8 backported and add missing ICU59 includes (bnc#1041282)</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- New upstream LTS release 6.11.0
  * added support for building mips64el
  * cluster:
    + disconnect() now returns a reference to the disconnected
    worker.
  * crypto:
    + ability to select cert store at runtime
    + Use system CAs instead of using bundled ones
    (obsoletes 8334.diff)
    + The Decipher methods setAuthTag() and setAAD now return this
    + adding support for OPENSSL_CONF again
    + make LazyTransform compabile with Streams1
  * deps:
    + upgrade libuv to 1.11.0
  * dns:
    + Implemented {ttl: true} for resolve4() and resolve6().
  * process:
    + add NODE_NO_WARNINGS environment variable
  * readline:
    + add option to stop duplicates in history
  * src:
    + support "--" after "-e" as end-of-options
  * tls:
    + new tls.TLSSocket() supports sec ctx options
    + Allow obvious key/passphrase combinations.
- Fix typo in node-gyp-addon-gypi.patch patch
- Refresh icu59.patch</changelog>
<changelog author="adam.majer@suse.de" date="1499342400">- npm_search_paths.patch: Since concurrent installations are now
  possible, node manual pages are moved once again back under npm
  searcheable locations only.
- versioned.patch: All files are now under versioned directoies
  and names. node and npm symlinks are now managed by
  update-alternatives
- node-gyp-addon-gypi.patch: Reference versioned directories only</changelog>
<changelog author="adam.majer@suse.de" date="1499428800">- Depend on nodejs-common that is then used to pick correctly
  versioned node or npm binary. This is required since 3rd party
  modules use `/usr/bin/env node` which breaks if multiple versions
  of NodeJS are installed at the same time and non-default version
  is used (for example, to compile a native module)</changelog>
<changelog author="adam.majer@suse.de" date="1499860800">- New upstream LTS release 6.11.1
  * v8: disable V8 snapshots. The hashseed embedded in the snapshot
    is currently the same for all runs of the binary. This opens
    node up to collision attacks which could result in a Denial
    of Service. We have temporarily disabled snapshots until a more
    robust solution is found. (bnc#1048299, CVE-2017-11499)
  * The c-ares function ares_parse_naptr_reply(), which is used for
    parsing NAPTR responses, could be triggered to read memory
    outside of the given input buffer if the passed in DNS response
    packet was crafted in a particular way.
    (CVE-2017-1000381, bnc#1044946)</changelog>
<changelog author="adam.majer@suse.de" date="1501675200">- Fix update-alternative handling in %postun - don't remove
  links on upgrades.</changelog>

</package>
<package pkgid="a4e5f40ce5a81a8d571eb6dfee2b3704422cdd1e6eb5069509d8fff2726132b2" name="nss-myhostname" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="d67bf07a47baee7a624c3262751f4035e9b0e005d1a1d3849611d28ce4082f18" name="nss-myhostname" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="3f1f111c5be6eb2aad3e5049c9038f5655c70f5c382d0096505000083b21b800" name="nss-myhostname" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="bf1c08bfab56818e41ffc69147afbb8694e3de21a500174d75e64944a0f251e4" name="nss-myhostname" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="c52c431070e10e895e7c533a5f3525df9cac4ea6a1672409809761c3b893c106" name="nss-myhostname-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="572c419af90c7031b0647e1c00f036a105d4519bc18be9c08fa5583257ee7207" name="nss-myhostname-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="9a101d3044bc6cc8cbb42bcef28c211b1f0ef023acef38db788df363f8022fb6" name="nss-myhostname-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="73491824646d1f4e9e82c92736560cdfdd9ed59647f96b99cec6fd942da03e51" name="nss-myhostname-32bit" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="cd75d79b7e2171cf53507eccbae2a88d72fc2aacf320b1aacad18a1b4f780c0f" name="nss-mymachines" arch="x86_64">
    <version epoch="0" ver="228" rel="29.1"/>

<changelog author="fbui@suse.com" date="1484827200">- Fix permissions set on permanent timer timestamp files (bsc#1020601) (CVE-2016-10156)
  This change makes sure to fix the permissions of the timestamp files
  which could have been created by an affected version of systemd.
  Local unprivileged users could have run arbitrary code as root if
  systemd previously created world writable suid root files such as
  permanent timer stamp files.
  This change and commit a59d1ad28 previously merged should close this
  issue.</changelog>
<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>

</package>
<package pkgid="38ac452c62353f35892cfdae48d68409f96b39231b74c2b82ffcaefe78dad2ee" name="nss-mymachines" arch="x86_64">
    <version epoch="0" ver="228" rel="32.2"/>

<changelog author="fbui@suse.com" date="1485172800">- Fix permission set on /var/lib/systemd/linger/*
  Those files are created by logind which run with umask(0022), so
  they are not world writable and shouldn't be affected by
  bsc#1020601. But it's cleaner to not let files forever with their
  setuid bit set for no good reason.</changelog>
<changelog author="fbui@suse.com" date="1485345600">- Don't ship ldconfig.service anymore (boo#1019470)
  This service was introduced to support stateless systems that
  support offline /usr updates properly.
  AFAIK we don't support any such system for now, so disable it. If
  it's wrong it's easy enough to restore it back.
  The commits fixing the ordering of ldconfig.service (which are the
  actual fixes for boo#1019470) have been imported in the git repo so
  we should be fine even if this service is re-enabled later.</changelog>
<changelog author="fbui@suse.com" date="1488283200">- Import commit 1eabbe7ee24275b0aa1e9fe2a56ae5f00b9d2f8a
  4ceed0ab6 core: fix memory leak in transient units (bsc#1025598)
  addfa1fd0 core: make sure to destroy all name watching bus slots when we are kicked off the bus (#5294) (bsc#1006687)
  1485aabfc sd-event: "when exiting no signal event are pending" is a wrong assertion (#5271) (boo#995936 bsc#1022014)
  bc8d6d7b8 journald: don't flush to /var/log/journal before we get asked to (bsc#1004094)
  61577f1db sd-event: fix sd_event_source_get_priority() (#4712)
  2d35b4062 core: downgrade warning about duplicate device names again (bsc#1022047)
  a14fe8a55 units: restore ConditionNeesUpdate=/etc in ldconfig.service (#3311) (bsc#1019470)
  b71e81664 units: run ldconfig.service after we have mounted all local file systems (bsc#1019470)</changelog>
<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>

</package>
<package pkgid="420b03e1d20151508f406d62d66cec272948ef6bf03835044ac2a9e11a91681d" name="nss-mymachines" arch="x86_64">
    <version epoch="0" ver="228" rel="35.1"/>

<changelog author="fbui@suse.com" date="1490184000">- Consider chroot updates in fix-machines-subvol-for-rollbacks.sh (bsc#1030290)</changelog>
<changelog author="fbui@suse.com" date="1491307200">- Import commit 5d860329bfcad3cc92293dad5c49509d9d3e423e
  143904b19 udev: net_id - support predictable ifnames on vio buses (#5675) (bnc#1029183)
  7a2a3b134 udev: add a persistent rule for ibmvnic devices (bsc#1029183)
  61e76bf12 Set user@.service TasksMax=infinity
  d946cc777 units: apply plymouth warning fix to in rescue mode as well (#5615)
  dcf5aa16b units: do not throw a warning in emergency mode if plymouth is not installed (#5528) (bsc#1025398)
  390561d37 emergency.service: Don't say "Welcome" when it's an emergency (#3569)
  35c9c55cd core: downgrade "Time has been changed" to debug (#4906) (bsc#1028610)
  1c864f423 vconsole: don't do GIO_SCRNMAP / GIO_UNISCRNMAP (bsc#1029691)
  0dd2c52ac udev: fix variable assignment
  715883c3b udev-rules: perform whitespace replacement for symlink subst values (bsc#1025886)
  3c7ffd27c udev-event: add replace_whitespace param to udev_event_apply_format
  062560dc3 libudev-util: change util_replace_whitespace to return number of chars in dest
  efb7f3a2e udev: allow substitutions for SECLABEL key (#4505)
  724539088 automount: if an automount unit is masked, don't react to activation anymore (#5445)
  1154ed4b5 automount: make sure the expire event is restarted after a daemon-reload (#4265)
  81213aa18 automount: don't cancel mount/umount request on reload/reexec (#3670)
  fc7def4a6 automount: add debug message when we get notified about mount state changes
  edad27c01 core: remove duplicate code in automount_update_mount()</changelog>
<changelog author="fbui@suse.com" date="1491393600">- Import commit bfa8c31f508c3ac1815f85508045159dbb0f7be3
  b45b23b8d units: move Before deps for quota services to remote-fs.target (#5627) (bsc#1028263)</changelog>
<changelog author="fbui@suse.com" date="1491825600">- Import commit 5fa6783ca8329b08941dcef9e95c78bf8170a944
  87fdab070 core: when a unit's SourcePath points to API VFS pretend we are never out-of-date (#5487) (boo#1032538)
  115b538cc pid1: do not use mtime==0 as sign of masking (#4388) (boo#1032538)
  5a40f634b core: simplify unit_need_daemon_reload() a bit (boo#1032538)
  2475c27c0 core: fix detection whether per-unit drop-ins changed (boo#1032538)
  8435c2f5e core: treat masked files as "unchanged" (boo#1032538)
  6d2c7e6c1 core/unit: extract checking of stat paths into helper function (boo#1032538)</changelog>
<changelog author="fbui@suse.com" date="1493726400">- Restart logind on package update only on SLE12 distros (boo#1032660)
  Fully restarting logind is currently not supported by upstream as
  the file descriptors of the share session devices are not
  preserved. However on SLE12, the Xorg server isn't built with the
  logind support which makes the restart of logind possible. OTOH Leap
  ships the xorg server with the logind support enabled and in this
  case we don't want to restart logind.</changelog>
<changelog author="fbui@suse.com" date="1493726401">- Import commit 3421d540c7fdcb59e5104718357f33a039296bfb
  d53559ccf logind: update empty and "infinity" handling for [User]TasksMax (#3835) (bsc#1031355)
  f5b2bcfb7 logind: update documentation for cf7d1a30e44
  f562d65dc include sys/sysmacros.h in more places
  107432c4a importd: support SUSE style checksums supplementary (#5800)
  ddc4933c4 importd: support SUSE style checksums (#5206) (fate#322054)
  7b447beb0 journal: don't remove leading spaces (bsc#1033855)
  75f82f3f3 journal: drop empty lines after level_prefix removing
  d5de9e0ae make sure all swap units are ordered before the swap target (bsc#955770 bsc#1034565)
  57f3f96d6 hwdb: fix warning "atkbd serio0: Unknown key pressed" (#5772) (boo#1010220)</changelog>
<changelog author="fbui@suse.com" date="1494504000">- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.</changelog>
<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>

</package>
<package pkgid="4f49e40029b7015441a04b15522bb707a16ef67fbe49fd7eafc96bc3ba76034e" name="nss-mymachines" arch="x86_64">
    <version epoch="0" ver="228" rel="38.1"/>

<changelog author="fbui@suse.com" date="1495108800">- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.</changelog>
<changelog author="fbui@suse.com" date="1495108801">- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.</changelog>
<changelog author="fbui@suse.com" date="1497614400">- Import commit 651d7679b0d4f93aa39557d67dd063f421d63762
  e4c5ae561 core/mount: pass "-c" flag to /bin/umount (#6093)
  c9a8292ad automount: handle expire_tokens when the mount unit changes its state (#3434) (bsc#1040942)
  96ff1f249 automount: rework propagation between automount and mount units
  a9cd26c8a build: *really* install tmpfiles.d/systemd-remote.conf when necessary (#6061)
  70ad17e6c build: only install tmpfiles.d/systemd-remote.conf when necessary (#6051)
  262879be4 build: fix systemd-journal-upload installation
  3798d3737 basic: Bugfix Detect XEN Dom0 as no virtualization (bsc#1036873)
  5e11b17b4 basic: Debug-logging of Virtualisation detection
  e4476be25 virt: make sure we don't ignore some errors
  5dd3c811b fstab-generator: do not skip Before= ordering for noauto mountpoints (#5547)
  262d95fec resolved: bugfix of null pointer p-&gt;question dereferencing (#6020) (bsc#1040614 CVE-2017-9217)
  4f398c0e2 fstab-gen: don't convert device timeout into seconds when initializing JobTimeoutSec
  c45f3c6f0 man: loding.conf RemoveIPC= defaults to no
  c34a0c88d core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995)
  156582042 fstab-generator: Apply _netdev option also to device units (bsc#1004995)
  54d2b4e23 job: add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995)
  bd03ae2cc Export NVMe WWID udev attribute (#5348) (bsc#1038865)
  f7f877939 rules: introduce disk/by-id (model_serial) symlinks for NVMe drives (#3974)
  ac36e2fe3 rules: add NVMe rules (#3136)
  e9c9a30ff sysusers: make group shadow support configurable (bsc#1029516)
  8e0d295a2 core: when deserializing a unit, fully restore its cgroup state (bsc#1029102)
  77cf84419 core: introduce cg_mask_from_string()/cg_mask_to_string()</changelog>
<changelog author="fbui@suse.com" date="1498132800">- Import commit 20b3d47e6505c3850d1ae175821dc896ea201bd3
  d75f37071 only check signature job error if signature job exists (#6118) (boo#1043758)
  e162b497f job: Ensure JobRunningTimeoutSec= survives serialization (#6128) (bsc#1004995)</changelog>
<changelog author="fbui@suse.com" date="1498219200">- Import commit 6c14b00040edfe5b60aadb6a195955990e8a423f
  e2026f234 core:execute: fix fork() fail handling in exec_spawn() (bsc#1040258)</changelog>
<changelog author="fbui@suse.com" date="1499083200">- Import commit 3c369f1c4a4931c3bd807413859fb1967d269e12
  3bf83e8bf resolved: simplify alloc size calculation (bsc#1045290 CVE-2017-9445)
  bd7b84227 build-sys: add check for gperf lookup function signature (#5055)</changelog>
<changelog author="fbui@suse.com" date="1499083201">- Import commit 642a5846a465085dc0af184e38a79e1be25080bd
  Here is a special import: the udev rules kept for generating some
  old/deprecated persistent symlinks have been moved into a separate
  rule file rules/61-persistent-storage-compat.rules. This has been
  done mainly to prevent generating them for new installations.
  642a5846a rules: move the rules dealing with SCSI truncated serials for ATA device to the compat persistent storage file
  2c4fe971f Revert "udev add path_compat_id to provide backwards compatibility with SLE11"
  63da94fcc Revert "udev: rules persistent device names for NVMe devices"
  d420489d8 Revert "udev: re-enable creation of by-id scsi links for ATA devices"
  eae935ef8 Revert "udev: add old fashion phy SAS disk enumeration"
  e010132ed automount: don't lstat(2) upon umount request (#6086) (bsc#1040968)
  d6dbfd264 udev: re-add back SAS addr by-path symlinks (bsc#1040153)
  0861598de udev: move compat rules in a dedicated rule file
  59e43084b udev: add old fashion phy SAS disk enumeration
  40e6c18e5 udev: re-enable creation of by-id scsi links for ATA devices
  7026e63a0 udev: rules persistent device names for NVMe devices
  70441d4fb udev add path_compat_id to provide backwards compatibility with SLE11</changelog>
<changelog author="fbui@suse.com" date="1499256000">- Add minimal support for boot.d/* scripts in systemd-sysv-convert (boo#1046750)</changelog>
<changelog author="fbui@suse.com" date="1499774400">- Make sure dracut (if installed) will embed the new compat rule
  The new compat rules (as well as the compat generation number) must
  be embedded in the initramfs so make sure that the installed dracut
  supports it.</changelog>
<changelog author="fbui@suse.com" date="1501070400">- Import commit 506ef1c91d97cfa4c1e321f57dbf71c7fc42d422
  8ea065d44 compat-rules: don't rely on ID_SERIAL when generating 'by-id' symlinks for NVMe devices (bsc#1048679)
  ecc54d349 timesyncd: don't use compiled-in list if FallbackNTP has been configured explicitly
  1142bd715 fstab-generator: fix new NULL dereference. (#6296)
  a2c8f9032 basic/strv: add STRPTR_IN_SET
  3a80fbf4a fstab-generator: handle NFS "bg" mounts correctly. (#6103) (bnc#874665 fate#323464)
  3a09ebb0b Revert "fstab-generator: add support for the nfs mount option bg"
  946e3c60c fstab-generator: add x-systemd.mount-timeout (#4603)</changelog>
<changelog author="fbui@suse.com" date="1504094400">- Import commit 9a04d42dd9e2f9035f79952b2d173a7b3af7fb2f
  7a4935268 compat-rules: drop the boggus 'import everything' rule (bsc#1046268)</changelog>
<changelog author="fbui@suse.com" date="1504094401">- Add 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch (bsc#1048605)
  It's a temporary but urgent fix for a regression discovered in bug
  1048605. The fix is still under discussion with upstream but we need
  to make progress here and limit the number of affected users.
  Consequently this fix reintroduces bsc#1004995 (the bug report has
  been re-opened) but this one is far less critical and a workaround
  was provided.
  The final solution will fix both bugs.</changelog>
<changelog author="fbui@suse.com" date="1504180800">- Import commit 533ab326a0d1826c14a87a765087b926e944c867
  289949a42 device: make sure to remove all device units sharing the same sysfs path (#6679)
  3b81de623 coredumpctl: fix handling of files written to fd
  ef76ac9da udev/path_id: introduce support for NVMe devices (#4169) (bsc#1045987)
  341e240ce core: use an AF_UNIX/SOCK_DGRAM socket for cgroup agent notification (v228) (bsc#1045384 bsc#1047379)</changelog>
<changelog author="fbui@suse.com" date="1505476800">- Add convert-lib-udev-path.sh script (bsc#1050152)
  This script called in %posttrans converts /lib/udev directory into a
  symlink pointing to /usr/lib/udev when upgrading from
  SLE11. Previously this was done (differently) during the %pretrans
  of udev but it was not reliable due to the way the packages are
  installed during an upgrade (see bsc#1050152 comment #7 for the
  details).</changelog>
<changelog author="fbui@suse.com" date="1507723200">- Import commit 0f236d1b908be3d937b74045dc2aa29059d48fb0
  ea86094f1 tmpfiles: remove old ICE and X11 sockets at boot (#6979)
  b44b6d77f tmpfiles: silently ignore any path that passes through autofs (#6506) (bsc#1045472)
  907f8f8e5 backport: chase_symlinks() taken from v234-345-gee905de0d
  61f186829 pam_logind: skip leading /dev/ from PAM_TTY field before passing it on
  080f2c914 shared/machine-pool: fix another mkfs.btrfs checking (bsc#1053595)
  16750fcc5 shutdown: fix incorrect fscanf() result check (#6806)
  0433264c5 shutdown: don't remount,ro network filesystems. (#6588) (bsc#1035386)
  0636a279c Fix typo
  d897b07ed shutdown: don't be fooled when detaching DM devices with BTRFS (boo#1055641)
  18f2b146a util: make get_block_device() available
  71806cacd bash-completion: add support for --now (#5155) (bsc#1053137)</changelog>
<changelog author="fbui@suse.com" date="1508155200">- Remove reference of 'libgudev-1_0-0' from baselibs.conf
  This lib has its own package.</changelog>
<changelog author="fbui@suse.com" date="1509105600">- Add 0001-scsi_id-Fixup-prefix-for-pre-SPC-inquiry-reply.patch (bsc#1039099)
  A PTF has been sent with this fix so it must be present in the next
  update.
  Unfortunately the patch has been submitted to upstream
  https://github.com/systemd/systemd/pull/7190 very lately but we
  can't wait for upstream review since another critical bug can't be
  postponed any longer.
  So add the patch to the list of urgent fix, it will removed once it
  will be accepted by upstream (assuming they will accept it...)</changelog>
<changelog author="fbui@suse.com" date="1509105601">- Import commit 2a701e8493232e8328c36b06f9fa2c96f691b07d
  883477ecf unit: when JobTimeoutSec= is turned off, implicitly turn off JobRunningTimeoutSec= too (bsc#1048605 bsc#1004995)
  261a4ef38 compat-rules: generate compat by-id symlinks with 'nvme' prefix missing (bsc#1063249)
  c53522be3 compat-rules: allow to specify the generation number through the kernel cmdline
  Drop 0001-Revert-core-device-Use-JobRunningTimeoutSec-for-devi.patch
  patch since it's not needed anymore (outdated by "unit: when
  JobTimeoutSec= is turned off, implicitly turn off
  JobRunningTimeoutSec= too")</changelog>
<changelog author="fbui@suse.com" date="1511438400">- Warn the user if /etc/crypttab references nvme devices with broken by-id symlinks
  The broken symlinks have been restored by the previous changes
  (bsc#1063249) but we should warn affected users so they can fix
  their system and we get a chance to drop the relevant compat rule in
  the future.</changelog>
<changelog author="fbui@suse.com" date="1511438401">- Add 80-acpi-container-hotplug.rules (bsc#1040800)
  A "temporary" rule file that is maintained by the kernel team until
  a proper solution is found in the kernel.
  It doesn't belong to udev normally but for convenience purpose we
  welcome this homeless rule.</changelog>

</package>
<package pkgid="20b2c19d175e28144a1fbda7b85871e80420d88138ceaaa26734094d5700657c" name="nut" arch="src">
    <version epoch="0" ver="2.7.4" rel="6.1"/>

<changelog author="sbrabec@suse.cz" date="1320235200">- Patch real source files to get missing devices (bnc#719292#c7).</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1338379200">- Upgrade to version 2.6.3:
  * nut-scanner is now improved and more portable.
  * pkg-config support
  * Support for new devices: Cyber Power Systems with SNMP RMCARD
    (100, 201, 202 and 301); Dynamix 650VA USB; LDLC UPS-1200D;
    Tecnoware UPS ERA LCD 0.65; Powercom BNT-xxxAP (USB ID
    0d9f:0004); Various USB devices using UPSilon 2000 software.
  * bcmxcp_usb now handles disconnection and reconnection.
  * blazer_usb enables again inclusion of buggy IDs.
  * upsd doesn't anymore fail where either IPv4 or IPv6 is
    disabled, and no explicit LISTEN directive has been specified.
  * Avahi support is now automatically enabled, upon detection.
  * jNut (NUT Java interface) adds device discovery support.
  * Many bugfixes, cleanup and improvements.</changelog>
<changelog author="sbrabec@suse.cz" date="1338465600">- Fix random network data crash (bnc#764699, CVE-2012-2944).</changelog>
<changelog author="sbrabec@suse.cz" date="1346760000">- Update to version 2.6.5:
  * Fix regression in upssched.
  * Support for new devices: Eaton ePDU Switched, Online Zinto A,
    REDi Blazer 400VA / 600VA / 800VA, UNITEK Alpha650ipF and
    Alpha650ipE, AEG Power Solutions PROTECT HOME, more APC SNMP
    cards, ATEK Defensor range, all Borri models, all COVER ENERGY
    SA, CyberPower OR700LCDRM1U, PR6000LCDRTXL5U and CP1000PFCLCD,
    Dell UPS Network Management Card, Dynamix 1000VA USB, Eaton
    Management Card Contact (ref 66104), EVER POWERLINE RT / 11 /
    31 and DUO II Pro, GE Digital Energy GT Series 1000-3000 VA,
    Gtec models, all recent HP serial / USB UPS (G2, G3 and R/T
    models) and HP UPS Management Module, Ippon INNOVA RT, KOLFF
    BLACK NOVA, Lexis X-power Tigra 1kVA, Microline C-Lion Innova,
    Online Yunto YQ450, PowerShield Defender 1200VA, PowerWalker
    Online VFI LCD, Line-Interactive VI LCD and Line-Interactive
    VI, Riello Netman Plus 102 SNMP Card, Tripp-Lite OMNISMART500.
  * mge-shut driver has been replaced by a new implementation.
  * Support for integration with VMware ESXI 5.0.
  * IPMI support.
  * snmp-ups: high precision values for APC, more variables.
  * The NUT variables and commands namespace has been fixed and
    completed.
  * Support of ranges of values for writable variables added.
  * Static source code analysis fixes by RedHat using Coverity.
  * Add new "LIST CLIENTS" and "NETVER" commands to NUT network
    protocol.
  * bcmxcp has improved support for battery status, and better
    supports PW9120 units.
  * bestfortress has improved Best Fortress LI675VA support.
  * blazer_ser and blazer_usb now try to automatically estimate high
    and low voltages; support for online Innova UPS (T, RT and 3/1
    T); Best UPS support has been improved.
  * bestups fixes, but will soon be deprecated.
  * newmge-shut has been heavilly improved.
  * oneac 0.80 improves support for all families of Oneac.
  * usbhid-ups: for Eaton devices, ups.start.auto is now
    automatically adjusted for shutdown.{return,stayoff}; Liebert
    firmwares with incorrect exponents have also been addressed.
  * snmp-ups now provides support for UPS shutdown. Composite
    commands are also supported now; Eaton/MGE MIB has been cleaned
    and completed; 3-phases support has been added to Socomec
    Netvision MIB; HP/Compaq MIB has been completed.
  * nut-scanner now also has libupsclient has a weak runtime
    dependency.
  * Provide an Uncomplicated Firewall (UFW) profile.
  * Riello protocols have been officially published in NUT
    protocols library.
  * Duplicate instances of upsd / upsmon are now detected.
  * upslog now comes with logrotate configuration.
  * more devices embed NUT for power protection, now including
    Thecus NAS range.
  * PyNUT.py has been updated to version 1.2.2.
  * Bugfixes, cleanup and improvements.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.
- Fix provides/obsoletes</changelog>
<changelog author="sbrabec@suse.cz" date="1353326400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1359460800">- Turn systemd integration on (nut-systemd-dirs.patch).
- Fix README.SUSE.
- nut-preconfig.patch: Fix UID recommendation.</changelog>
<changelog author="sbrabec@suse.cz" date="1385467200">- Update to version 2.7.1:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  Potentially incompatible changes:
  * First release after the transition from Subversion to Git.
  * The linkman:apcsmart[8] driver has been replaced by a new
    implementation. There is a new parameter, 'ttymode'.  In case
    of issues with this new version, users can revert to
    apcsmart-old.
  * The linkman:nutdrv_qx[8] driver will eventually supersede
    blazer_ser and blazer_usb.  Options are not exactly the same,
    but are documented in the nutdrv_qx man page.
  * Mozilla NSS support has been added.
  * linkman:upsrw[8] now prints out the maximum size of
    variables.
  Other changes:
  * Added a new driver, nutdrv_qx, for Megatec/Qx devices. This
    driver will eventually replace the blazer_ser and blazer_usb
    drivers. In particular, it adds support for Voltronic Power
    devices.
  * Increased USB_TIMEOUT to standards-compliant 5.000 seconds in
    most drivers.  This should reduce the number of timeouts on
    low-speed USB 1.1 devices.
  * Added many devices to the HCL. Of particular note are many
    Tripp Lite USB HID PDC models which were tested against NUT by
    Tripp Lite.
  * Reworked some visual elements of the HCL.
  * Also increased timeouts and added redundant commands to improve
    reliability of mge-utalk driver.
  * Added the apcupsd-ups driver to interoperate with apcupsd
    installations.
  * Added documentation on creating subdrivers for snmp-ups and
    nutdrv_qx.
  * Added new drivers for the Riello UPS product line
    (riello_ser/riello_usb).
  * Many improvements to the BCM/XCP.
  * Added a few variables to the Powercom HID mappings.
  * Updated the apcsmart driver, and renamed the previous driver to
    apcsmart-old.
  * Fixed the battery percentage calculation in the bestfcom
    driver.
  * libnutclient has been added as a C++ alternative to
    libupsclient.
  * Fix shutdown of Eaton HID, using usbhid-ups and mge-shut
  * usbhid-ups: final fix for APC Back UPS ES.
  * nut-scanner: fix crash
  * IPMI support can handle more different versions of FreeIPMI
  * Support power supplies scan over the network nut-scanner can
    now scan for power supplies with IPMI over LAN.  This is
    currently limited to IPMI 1.5 only
  * Improve systemd integration
  * snmp-ups: Fixed a crash on outlet management, and added
    delta_ups MIB support. Also fixed mappings for
    upsBypassVoltage, upsBypassCurrent, and upsBypassPower in
    three-phase IETF MIB.
- Enable FreeIPMI.</changelog>
<changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
<changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
<changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
<changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
<changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post script</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
<changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
<changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
<changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>

</package>
<package pkgid="d8b6674735c473e0aa3119d68469e8f08e804673786ad052e17e8ec2b054a504" name="nut" arch="x86_64">
    <version epoch="0" ver="2.7.4" rel="6.1"/>

<changelog author="sbrabec@suse.cz" date="1320235200">- Patch real source files to get missing devices (bnc#719292#c7).</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1338379200">- Upgrade to version 2.6.3:
  * nut-scanner is now improved and more portable.
  * pkg-config support
  * Support for new devices: Cyber Power Systems with SNMP RMCARD
    (100, 201, 202 and 301); Dynamix 650VA USB; LDLC UPS-1200D;
    Tecnoware UPS ERA LCD 0.65; Powercom BNT-xxxAP (USB ID
    0d9f:0004); Various USB devices using UPSilon 2000 software.
  * bcmxcp_usb now handles disconnection and reconnection.
  * blazer_usb enables again inclusion of buggy IDs.
  * upsd doesn't anymore fail where either IPv4 or IPv6 is
    disabled, and no explicit LISTEN directive has been specified.
  * Avahi support is now automatically enabled, upon detection.
  * jNut (NUT Java interface) adds device discovery support.
  * Many bugfixes, cleanup and improvements.</changelog>
<changelog author="sbrabec@suse.cz" date="1338465600">- Fix random network data crash (bnc#764699, CVE-2012-2944).</changelog>
<changelog author="sbrabec@suse.cz" date="1346760000">- Update to version 2.6.5:
  * Fix regression in upssched.
  * Support for new devices: Eaton ePDU Switched, Online Zinto A,
    REDi Blazer 400VA / 600VA / 800VA, UNITEK Alpha650ipF and
    Alpha650ipE, AEG Power Solutions PROTECT HOME, more APC SNMP
    cards, ATEK Defensor range, all Borri models, all COVER ENERGY
    SA, CyberPower OR700LCDRM1U, PR6000LCDRTXL5U and CP1000PFCLCD,
    Dell UPS Network Management Card, Dynamix 1000VA USB, Eaton
    Management Card Contact (ref 66104), EVER POWERLINE RT / 11 /
    31 and DUO II Pro, GE Digital Energy GT Series 1000-3000 VA,
    Gtec models, all recent HP serial / USB UPS (G2, G3 and R/T
    models) and HP UPS Management Module, Ippon INNOVA RT, KOLFF
    BLACK NOVA, Lexis X-power Tigra 1kVA, Microline C-Lion Innova,
    Online Yunto YQ450, PowerShield Defender 1200VA, PowerWalker
    Online VFI LCD, Line-Interactive VI LCD and Line-Interactive
    VI, Riello Netman Plus 102 SNMP Card, Tripp-Lite OMNISMART500.
  * mge-shut driver has been replaced by a new implementation.
  * Support for integration with VMware ESXI 5.0.
  * IPMI support.
  * snmp-ups: high precision values for APC, more variables.
  * The NUT variables and commands namespace has been fixed and
    completed.
  * Support of ranges of values for writable variables added.
  * Static source code analysis fixes by RedHat using Coverity.
  * Add new "LIST CLIENTS" and "NETVER" commands to NUT network
    protocol.
  * bcmxcp has improved support for battery status, and better
    supports PW9120 units.
  * bestfortress has improved Best Fortress LI675VA support.
  * blazer_ser and blazer_usb now try to automatically estimate high
    and low voltages; support for online Innova UPS (T, RT and 3/1
    T); Best UPS support has been improved.
  * bestups fixes, but will soon be deprecated.
  * newmge-shut has been heavilly improved.
  * oneac 0.80 improves support for all families of Oneac.
  * usbhid-ups: for Eaton devices, ups.start.auto is now
    automatically adjusted for shutdown.{return,stayoff}; Liebert
    firmwares with incorrect exponents have also been addressed.
  * snmp-ups now provides support for UPS shutdown. Composite
    commands are also supported now; Eaton/MGE MIB has been cleaned
    and completed; 3-phases support has been added to Socomec
    Netvision MIB; HP/Compaq MIB has been completed.
  * nut-scanner now also has libupsclient has a weak runtime
    dependency.
  * Provide an Uncomplicated Firewall (UFW) profile.
  * Riello protocols have been officially published in NUT
    protocols library.
  * Duplicate instances of upsd / upsmon are now detected.
  * upslog now comes with logrotate configuration.
  * more devices embed NUT for power protection, now including
    Thecus NAS range.
  * PyNUT.py has been updated to version 1.2.2.
  * Bugfixes, cleanup and improvements.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.
- Fix provides/obsoletes</changelog>
<changelog author="sbrabec@suse.cz" date="1353326400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1359460800">- Turn systemd integration on (nut-systemd-dirs.patch).
- Fix README.SUSE.
- nut-preconfig.patch: Fix UID recommendation.</changelog>
<changelog author="sbrabec@suse.cz" date="1385467200">- Update to version 2.7.1:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  Potentially incompatible changes:
  * First release after the transition from Subversion to Git.
  * The linkman:apcsmart[8] driver has been replaced by a new
    implementation. There is a new parameter, 'ttymode'.  In case
    of issues with this new version, users can revert to
    apcsmart-old.
  * The linkman:nutdrv_qx[8] driver will eventually supersede
    blazer_ser and blazer_usb.  Options are not exactly the same,
    but are documented in the nutdrv_qx man page.
  * Mozilla NSS support has been added.
  * linkman:upsrw[8] now prints out the maximum size of
    variables.
  Other changes:
  * Added a new driver, nutdrv_qx, for Megatec/Qx devices. This
    driver will eventually replace the blazer_ser and blazer_usb
    drivers. In particular, it adds support for Voltronic Power
    devices.
  * Increased USB_TIMEOUT to standards-compliant 5.000 seconds in
    most drivers.  This should reduce the number of timeouts on
    low-speed USB 1.1 devices.
  * Added many devices to the HCL. Of particular note are many
    Tripp Lite USB HID PDC models which were tested against NUT by
    Tripp Lite.
  * Reworked some visual elements of the HCL.
  * Also increased timeouts and added redundant commands to improve
    reliability of mge-utalk driver.
  * Added the apcupsd-ups driver to interoperate with apcupsd
    installations.
  * Added documentation on creating subdrivers for snmp-ups and
    nutdrv_qx.
  * Added new drivers for the Riello UPS product line
    (riello_ser/riello_usb).
  * Many improvements to the BCM/XCP.
  * Added a few variables to the Powercom HID mappings.
  * Updated the apcsmart driver, and renamed the previous driver to
    apcsmart-old.
  * Fixed the battery percentage calculation in the bestfcom
    driver.
  * libnutclient has been added as a C++ alternative to
    libupsclient.
  * Fix shutdown of Eaton HID, using usbhid-ups and mge-shut
  * usbhid-ups: final fix for APC Back UPS ES.
  * nut-scanner: fix crash
  * IPMI support can handle more different versions of FreeIPMI
  * Support power supplies scan over the network nut-scanner can
    now scan for power supplies with IPMI over LAN.  This is
    currently limited to IPMI 1.5 only
  * Improve systemd integration
  * snmp-ups: Fixed a crash on outlet management, and added
    delta_ups MIB support. Also fixed mappings for
    upsBypassVoltage, upsBypassCurrent, and upsBypassPower in
    three-phase IETF MIB.
- Enable FreeIPMI.</changelog>
<changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
<changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
<changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
<changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
<changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post script</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
<changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
<changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
<changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>

</package>
<package pkgid="f64f5e214c56482eb8838ed609fe2c4eccd5291e060b13fd3712b5762e08864b" name="nut-cgi" arch="x86_64">
    <version epoch="0" ver="2.7.4" rel="6.1"/>

<changelog author="sbrabec@suse.cz" date="1320235200">- Patch real source files to get missing devices (bnc#719292#c7).</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1338379200">- Upgrade to version 2.6.3:
  * nut-scanner is now improved and more portable.
  * pkg-config support
  * Support for new devices: Cyber Power Systems with SNMP RMCARD
    (100, 201, 202 and 301); Dynamix 650VA USB; LDLC UPS-1200D;
    Tecnoware UPS ERA LCD 0.65; Powercom BNT-xxxAP (USB ID
    0d9f:0004); Various USB devices using UPSilon 2000 software.
  * bcmxcp_usb now handles disconnection and reconnection.
  * blazer_usb enables again inclusion of buggy IDs.
  * upsd doesn't anymore fail where either IPv4 or IPv6 is
    disabled, and no explicit LISTEN directive has been specified.
  * Avahi support is now automatically enabled, upon detection.
  * jNut (NUT Java interface) adds device discovery support.
  * Many bugfixes, cleanup and improvements.</changelog>
<changelog author="sbrabec@suse.cz" date="1338465600">- Fix random network data crash (bnc#764699, CVE-2012-2944).</changelog>
<changelog author="sbrabec@suse.cz" date="1346760000">- Update to version 2.6.5:
  * Fix regression in upssched.
  * Support for new devices: Eaton ePDU Switched, Online Zinto A,
    REDi Blazer 400VA / 600VA / 800VA, UNITEK Alpha650ipF and
    Alpha650ipE, AEG Power Solutions PROTECT HOME, more APC SNMP
    cards, ATEK Defensor range, all Borri models, all COVER ENERGY
    SA, CyberPower OR700LCDRM1U, PR6000LCDRTXL5U and CP1000PFCLCD,
    Dell UPS Network Management Card, Dynamix 1000VA USB, Eaton
    Management Card Contact (ref 66104), EVER POWERLINE RT / 11 /
    31 and DUO II Pro, GE Digital Energy GT Series 1000-3000 VA,
    Gtec models, all recent HP serial / USB UPS (G2, G3 and R/T
    models) and HP UPS Management Module, Ippon INNOVA RT, KOLFF
    BLACK NOVA, Lexis X-power Tigra 1kVA, Microline C-Lion Innova,
    Online Yunto YQ450, PowerShield Defender 1200VA, PowerWalker
    Online VFI LCD, Line-Interactive VI LCD and Line-Interactive
    VI, Riello Netman Plus 102 SNMP Card, Tripp-Lite OMNISMART500.
  * mge-shut driver has been replaced by a new implementation.
  * Support for integration with VMware ESXI 5.0.
  * IPMI support.
  * snmp-ups: high precision values for APC, more variables.
  * The NUT variables and commands namespace has been fixed and
    completed.
  * Support of ranges of values for writable variables added.
  * Static source code analysis fixes by RedHat using Coverity.
  * Add new "LIST CLIENTS" and "NETVER" commands to NUT network
    protocol.
  * bcmxcp has improved support for battery status, and better
    supports PW9120 units.
  * bestfortress has improved Best Fortress LI675VA support.
  * blazer_ser and blazer_usb now try to automatically estimate high
    and low voltages; support for online Innova UPS (T, RT and 3/1
    T); Best UPS support has been improved.
  * bestups fixes, but will soon be deprecated.
  * newmge-shut has been heavilly improved.
  * oneac 0.80 improves support for all families of Oneac.
  * usbhid-ups: for Eaton devices, ups.start.auto is now
    automatically adjusted for shutdown.{return,stayoff}; Liebert
    firmwares with incorrect exponents have also been addressed.
  * snmp-ups now provides support for UPS shutdown. Composite
    commands are also supported now; Eaton/MGE MIB has been cleaned
    and completed; 3-phases support has been added to Socomec
    Netvision MIB; HP/Compaq MIB has been completed.
  * nut-scanner now also has libupsclient has a weak runtime
    dependency.
  * Provide an Uncomplicated Firewall (UFW) profile.
  * Riello protocols have been officially published in NUT
    protocols library.
  * Duplicate instances of upsd / upsmon are now detected.
  * upslog now comes with logrotate configuration.
  * more devices embed NUT for power protection, now including
    Thecus NAS range.
  * PyNUT.py has been updated to version 1.2.2.
  * Bugfixes, cleanup and improvements.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.
- Fix provides/obsoletes</changelog>
<changelog author="sbrabec@suse.cz" date="1353326400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1359460800">- Turn systemd integration on (nut-systemd-dirs.patch).
- Fix README.SUSE.
- nut-preconfig.patch: Fix UID recommendation.</changelog>
<changelog author="sbrabec@suse.cz" date="1385467200">- Update to version 2.7.1:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  Potentially incompatible changes:
  * First release after the transition from Subversion to Git.
  * The linkman:apcsmart[8] driver has been replaced by a new
    implementation. There is a new parameter, 'ttymode'.  In case
    of issues with this new version, users can revert to
    apcsmart-old.
  * The linkman:nutdrv_qx[8] driver will eventually supersede
    blazer_ser and blazer_usb.  Options are not exactly the same,
    but are documented in the nutdrv_qx man page.
  * Mozilla NSS support has been added.
  * linkman:upsrw[8] now prints out the maximum size of
    variables.
  Other changes:
  * Added a new driver, nutdrv_qx, for Megatec/Qx devices. This
    driver will eventually replace the blazer_ser and blazer_usb
    drivers. In particular, it adds support for Voltronic Power
    devices.
  * Increased USB_TIMEOUT to standards-compliant 5.000 seconds in
    most drivers.  This should reduce the number of timeouts on
    low-speed USB 1.1 devices.
  * Added many devices to the HCL. Of particular note are many
    Tripp Lite USB HID PDC models which were tested against NUT by
    Tripp Lite.
  * Reworked some visual elements of the HCL.
  * Also increased timeouts and added redundant commands to improve
    reliability of mge-utalk driver.
  * Added the apcupsd-ups driver to interoperate with apcupsd
    installations.
  * Added documentation on creating subdrivers for snmp-ups and
    nutdrv_qx.
  * Added new drivers for the Riello UPS product line
    (riello_ser/riello_usb).
  * Many improvements to the BCM/XCP.
  * Added a few variables to the Powercom HID mappings.
  * Updated the apcsmart driver, and renamed the previous driver to
    apcsmart-old.
  * Fixed the battery percentage calculation in the bestfcom
    driver.
  * libnutclient has been added as a C++ alternative to
    libupsclient.
  * Fix shutdown of Eaton HID, using usbhid-ups and mge-shut
  * usbhid-ups: final fix for APC Back UPS ES.
  * nut-scanner: fix crash
  * IPMI support can handle more different versions of FreeIPMI
  * Support power supplies scan over the network nut-scanner can
    now scan for power supplies with IPMI over LAN.  This is
    currently limited to IPMI 1.5 only
  * Improve systemd integration
  * snmp-ups: Fixed a crash on outlet management, and added
    delta_ups MIB support. Also fixed mappings for
    upsBypassVoltage, upsBypassCurrent, and upsBypassPower in
    three-phase IETF MIB.
- Enable FreeIPMI.</changelog>
<changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
<changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
<changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
<changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
<changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post script</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
<changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
<changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
<changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>

</package>
<package pkgid="eec561c14f250bb2f57b53cf6e7cf3db3b9a46801382fe1281fc356564fe43db" name="nut-devel" arch="x86_64">
    <version epoch="0" ver="2.7.4" rel="6.1"/>

<changelog author="sbrabec@suse.cz" date="1320235200">- Patch real source files to get missing devices (bnc#719292#c7).</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1338379200">- Upgrade to version 2.6.3:
  * nut-scanner is now improved and more portable.
  * pkg-config support
  * Support for new devices: Cyber Power Systems with SNMP RMCARD
    (100, 201, 202 and 301); Dynamix 650VA USB; LDLC UPS-1200D;
    Tecnoware UPS ERA LCD 0.65; Powercom BNT-xxxAP (USB ID
    0d9f:0004); Various USB devices using UPSilon 2000 software.
  * bcmxcp_usb now handles disconnection and reconnection.
  * blazer_usb enables again inclusion of buggy IDs.
  * upsd doesn't anymore fail where either IPv4 or IPv6 is
    disabled, and no explicit LISTEN directive has been specified.
  * Avahi support is now automatically enabled, upon detection.
  * jNut (NUT Java interface) adds device discovery support.
  * Many bugfixes, cleanup and improvements.</changelog>
<changelog author="sbrabec@suse.cz" date="1338465600">- Fix random network data crash (bnc#764699, CVE-2012-2944).</changelog>
<changelog author="sbrabec@suse.cz" date="1346760000">- Update to version 2.6.5:
  * Fix regression in upssched.
  * Support for new devices: Eaton ePDU Switched, Online Zinto A,
    REDi Blazer 400VA / 600VA / 800VA, UNITEK Alpha650ipF and
    Alpha650ipE, AEG Power Solutions PROTECT HOME, more APC SNMP
    cards, ATEK Defensor range, all Borri models, all COVER ENERGY
    SA, CyberPower OR700LCDRM1U, PR6000LCDRTXL5U and CP1000PFCLCD,
    Dell UPS Network Management Card, Dynamix 1000VA USB, Eaton
    Management Card Contact (ref 66104), EVER POWERLINE RT / 11 /
    31 and DUO II Pro, GE Digital Energy GT Series 1000-3000 VA,
    Gtec models, all recent HP serial / USB UPS (G2, G3 and R/T
    models) and HP UPS Management Module, Ippon INNOVA RT, KOLFF
    BLACK NOVA, Lexis X-power Tigra 1kVA, Microline C-Lion Innova,
    Online Yunto YQ450, PowerShield Defender 1200VA, PowerWalker
    Online VFI LCD, Line-Interactive VI LCD and Line-Interactive
    VI, Riello Netman Plus 102 SNMP Card, Tripp-Lite OMNISMART500.
  * mge-shut driver has been replaced by a new implementation.
  * Support for integration with VMware ESXI 5.0.
  * IPMI support.
  * snmp-ups: high precision values for APC, more variables.
  * The NUT variables and commands namespace has been fixed and
    completed.
  * Support of ranges of values for writable variables added.
  * Static source code analysis fixes by RedHat using Coverity.
  * Add new "LIST CLIENTS" and "NETVER" commands to NUT network
    protocol.
  * bcmxcp has improved support for battery status, and better
    supports PW9120 units.
  * bestfortress has improved Best Fortress LI675VA support.
  * blazer_ser and blazer_usb now try to automatically estimate high
    and low voltages; support for online Innova UPS (T, RT and 3/1
    T); Best UPS support has been improved.
  * bestups fixes, but will soon be deprecated.
  * newmge-shut has been heavilly improved.
  * oneac 0.80 improves support for all families of Oneac.
  * usbhid-ups: for Eaton devices, ups.start.auto is now
    automatically adjusted for shutdown.{return,stayoff}; Liebert
    firmwares with incorrect exponents have also been addressed.
  * snmp-ups now provides support for UPS shutdown. Composite
    commands are also supported now; Eaton/MGE MIB has been cleaned
    and completed; 3-phases support has been added to Socomec
    Netvision MIB; HP/Compaq MIB has been completed.
  * nut-scanner now also has libupsclient has a weak runtime
    dependency.
  * Provide an Uncomplicated Firewall (UFW) profile.
  * Riello protocols have been officially published in NUT
    protocols library.
  * Duplicate instances of upsd / upsmon are now detected.
  * upslog now comes with logrotate configuration.
  * more devices embed NUT for power protection, now including
    Thecus NAS range.
  * PyNUT.py has been updated to version 1.2.2.
  * Bugfixes, cleanup and improvements.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.
- Fix provides/obsoletes</changelog>
<changelog author="sbrabec@suse.cz" date="1353326400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1359460800">- Turn systemd integration on (nut-systemd-dirs.patch).
- Fix README.SUSE.
- nut-preconfig.patch: Fix UID recommendation.</changelog>
<changelog author="sbrabec@suse.cz" date="1385467200">- Update to version 2.7.1:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  Potentially incompatible changes:
  * First release after the transition from Subversion to Git.
  * The linkman:apcsmart[8] driver has been replaced by a new
    implementation. There is a new parameter, 'ttymode'.  In case
    of issues with this new version, users can revert to
    apcsmart-old.
  * The linkman:nutdrv_qx[8] driver will eventually supersede
    blazer_ser and blazer_usb.  Options are not exactly the same,
    but are documented in the nutdrv_qx man page.
  * Mozilla NSS support has been added.
  * linkman:upsrw[8] now prints out the maximum size of
    variables.
  Other changes:
  * Added a new driver, nutdrv_qx, for Megatec/Qx devices. This
    driver will eventually replace the blazer_ser and blazer_usb
    drivers. In particular, it adds support for Voltronic Power
    devices.
  * Increased USB_TIMEOUT to standards-compliant 5.000 seconds in
    most drivers.  This should reduce the number of timeouts on
    low-speed USB 1.1 devices.
  * Added many devices to the HCL. Of particular note are many
    Tripp Lite USB HID PDC models which were tested against NUT by
    Tripp Lite.
  * Reworked some visual elements of the HCL.
  * Also increased timeouts and added redundant commands to improve
    reliability of mge-utalk driver.
  * Added the apcupsd-ups driver to interoperate with apcupsd
    installations.
  * Added documentation on creating subdrivers for snmp-ups and
    nutdrv_qx.
  * Added new drivers for the Riello UPS product line
    (riello_ser/riello_usb).
  * Many improvements to the BCM/XCP.
  * Added a few variables to the Powercom HID mappings.
  * Updated the apcsmart driver, and renamed the previous driver to
    apcsmart-old.
  * Fixed the battery percentage calculation in the bestfcom
    driver.
  * libnutclient has been added as a C++ alternative to
    libupsclient.
  * Fix shutdown of Eaton HID, using usbhid-ups and mge-shut
  * usbhid-ups: final fix for APC Back UPS ES.
  * nut-scanner: fix crash
  * IPMI support can handle more different versions of FreeIPMI
  * Support power supplies scan over the network nut-scanner can
    now scan for power supplies with IPMI over LAN.  This is
    currently limited to IPMI 1.5 only
  * Improve systemd integration
  * snmp-ups: Fixed a crash on outlet management, and added
    delta_ups MIB support. Also fixed mappings for
    upsBypassVoltage, upsBypassCurrent, and upsBypassPower in
    three-phase IETF MIB.
- Enable FreeIPMI.</changelog>
<changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
<changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
<changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
<changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
<changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post script</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
<changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
<changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
<changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>

</package>
<package pkgid="ed76b59a452d89ebad009d633ee64d14625415ebf82e2fd5d5e2708e840236ab" name="nut-doc-asciidoc" arch="noarch">
    <version epoch="0" ver="2.7.4" rel="6.1"/>

<changelog author="sbrabec@suse.cz" date="1320235200">- Patch real source files to get missing devices (bnc#719292#c7).</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1338379200">- Upgrade to version 2.6.3:
  * nut-scanner is now improved and more portable.
  * pkg-config support
  * Support for new devices: Cyber Power Systems with SNMP RMCARD
    (100, 201, 202 and 301); Dynamix 650VA USB; LDLC UPS-1200D;
    Tecnoware UPS ERA LCD 0.65; Powercom BNT-xxxAP (USB ID
    0d9f:0004); Various USB devices using UPSilon 2000 software.
  * bcmxcp_usb now handles disconnection and reconnection.
  * blazer_usb enables again inclusion of buggy IDs.
  * upsd doesn't anymore fail where either IPv4 or IPv6 is
    disabled, and no explicit LISTEN directive has been specified.
  * Avahi support is now automatically enabled, upon detection.
  * jNut (NUT Java interface) adds device discovery support.
  * Many bugfixes, cleanup and improvements.</changelog>
<changelog author="sbrabec@suse.cz" date="1338465600">- Fix random network data crash (bnc#764699, CVE-2012-2944).</changelog>
<changelog author="sbrabec@suse.cz" date="1346760000">- Update to version 2.6.5:
  * Fix regression in upssched.
  * Support for new devices: Eaton ePDU Switched, Online Zinto A,
    REDi Blazer 400VA / 600VA / 800VA, UNITEK Alpha650ipF and
    Alpha650ipE, AEG Power Solutions PROTECT HOME, more APC SNMP
    cards, ATEK Defensor range, all Borri models, all COVER ENERGY
    SA, CyberPower OR700LCDRM1U, PR6000LCDRTXL5U and CP1000PFCLCD,
    Dell UPS Network Management Card, Dynamix 1000VA USB, Eaton
    Management Card Contact (ref 66104), EVER POWERLINE RT / 11 /
    31 and DUO II Pro, GE Digital Energy GT Series 1000-3000 VA,
    Gtec models, all recent HP serial / USB UPS (G2, G3 and R/T
    models) and HP UPS Management Module, Ippon INNOVA RT, KOLFF
    BLACK NOVA, Lexis X-power Tigra 1kVA, Microline C-Lion Innova,
    Online Yunto YQ450, PowerShield Defender 1200VA, PowerWalker
    Online VFI LCD, Line-Interactive VI LCD and Line-Interactive
    VI, Riello Netman Plus 102 SNMP Card, Tripp-Lite OMNISMART500.
  * mge-shut driver has been replaced by a new implementation.
  * Support for integration with VMware ESXI 5.0.
  * IPMI support.
  * snmp-ups: high precision values for APC, more variables.
  * The NUT variables and commands namespace has been fixed and
    completed.
  * Support of ranges of values for writable variables added.
  * Static source code analysis fixes by RedHat using Coverity.
  * Add new "LIST CLIENTS" and "NETVER" commands to NUT network
    protocol.
  * bcmxcp has improved support for battery status, and better
    supports PW9120 units.
  * bestfortress has improved Best Fortress LI675VA support.
  * blazer_ser and blazer_usb now try to automatically estimate high
    and low voltages; support for online Innova UPS (T, RT and 3/1
    T); Best UPS support has been improved.
  * bestups fixes, but will soon be deprecated.
  * newmge-shut has been heavilly improved.
  * oneac 0.80 improves support for all families of Oneac.
  * usbhid-ups: for Eaton devices, ups.start.auto is now
    automatically adjusted for shutdown.{return,stayoff}; Liebert
    firmwares with incorrect exponents have also been addressed.
  * snmp-ups now provides support for UPS shutdown. Composite
    commands are also supported now; Eaton/MGE MIB has been cleaned
    and completed; 3-phases support has been added to Socomec
    Netvision MIB; HP/Compaq MIB has been completed.
  * nut-scanner now also has libupsclient has a weak runtime
    dependency.
  * Provide an Uncomplicated Firewall (UFW) profile.
  * Riello protocols have been officially published in NUT
    protocols library.
  * Duplicate instances of upsd / upsmon are now detected.
  * upslog now comes with logrotate configuration.
  * more devices embed NUT for power protection, now including
    Thecus NAS range.
  * PyNUT.py has been updated to version 1.2.2.
  * Bugfixes, cleanup and improvements.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.
- Fix provides/obsoletes</changelog>
<changelog author="sbrabec@suse.cz" date="1353326400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1359460800">- Turn systemd integration on (nut-systemd-dirs.patch).
- Fix README.SUSE.
- nut-preconfig.patch: Fix UID recommendation.</changelog>
<changelog author="sbrabec@suse.cz" date="1385467200">- Update to version 2.7.1:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  Potentially incompatible changes:
  * First release after the transition from Subversion to Git.
  * The linkman:apcsmart[8] driver has been replaced by a new
    implementation. There is a new parameter, 'ttymode'.  In case
    of issues with this new version, users can revert to
    apcsmart-old.
  * The linkman:nutdrv_qx[8] driver will eventually supersede
    blazer_ser and blazer_usb.  Options are not exactly the same,
    but are documented in the nutdrv_qx man page.
  * Mozilla NSS support has been added.
  * linkman:upsrw[8] now prints out the maximum size of
    variables.
  Other changes:
  * Added a new driver, nutdrv_qx, for Megatec/Qx devices. This
    driver will eventually replace the blazer_ser and blazer_usb
    drivers. In particular, it adds support for Voltronic Power
    devices.
  * Increased USB_TIMEOUT to standards-compliant 5.000 seconds in
    most drivers.  This should reduce the number of timeouts on
    low-speed USB 1.1 devices.
  * Added many devices to the HCL. Of particular note are many
    Tripp Lite USB HID PDC models which were tested against NUT by
    Tripp Lite.
  * Reworked some visual elements of the HCL.
  * Also increased timeouts and added redundant commands to improve
    reliability of mge-utalk driver.
  * Added the apcupsd-ups driver to interoperate with apcupsd
    installations.
  * Added documentation on creating subdrivers for snmp-ups and
    nutdrv_qx.
  * Added new drivers for the Riello UPS product line
    (riello_ser/riello_usb).
  * Many improvements to the BCM/XCP.
  * Added a few variables to the Powercom HID mappings.
  * Updated the apcsmart driver, and renamed the previous driver to
    apcsmart-old.
  * Fixed the battery percentage calculation in the bestfcom
    driver.
  * libnutclient has been added as a C++ alternative to
    libupsclient.
  * Fix shutdown of Eaton HID, using usbhid-ups and mge-shut
  * usbhid-ups: final fix for APC Back UPS ES.
  * nut-scanner: fix crash
  * IPMI support can handle more different versions of FreeIPMI
  * Support power supplies scan over the network nut-scanner can
    now scan for power supplies with IPMI over LAN.  This is
    currently limited to IPMI 1.5 only
  * Improve systemd integration
  * snmp-ups: Fixed a crash on outlet management, and added
    delta_ups MIB support. Also fixed mappings for
    upsBypassVoltage, upsBypassCurrent, and upsBypassPower in
    three-phase IETF MIB.
- Enable FreeIPMI.</changelog>
<changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
<changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
<changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
<changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
<changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post script</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
<changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
<changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
<changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>

</package>
<package pkgid="91b58561d0e48ed1da917c582971b29468d2fccb051d3036e08ec395e0d682ef" name="nut-doc-images" arch="noarch">
    <version epoch="0" ver="2.7.4" rel="6.1"/>

<changelog author="sbrabec@suse.cz" date="1320235200">- Patch real source files to get missing devices (bnc#719292#c7).</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1338379200">- Upgrade to version 2.6.3:
  * nut-scanner is now improved and more portable.
  * pkg-config support
  * Support for new devices: Cyber Power Systems with SNMP RMCARD
    (100, 201, 202 and 301); Dynamix 650VA USB; LDLC UPS-1200D;
    Tecnoware UPS ERA LCD 0.65; Powercom BNT-xxxAP (USB ID
    0d9f:0004); Various USB devices using UPSilon 2000 software.
  * bcmxcp_usb now handles disconnection and reconnection.
  * blazer_usb enables again inclusion of buggy IDs.
  * upsd doesn't anymore fail where either IPv4 or IPv6 is
    disabled, and no explicit LISTEN directive has been specified.
  * Avahi support is now automatically enabled, upon detection.
  * jNut (NUT Java interface) adds device discovery support.
  * Many bugfixes, cleanup and improvements.</changelog>
<changelog author="sbrabec@suse.cz" date="1338465600">- Fix random network data crash (bnc#764699, CVE-2012-2944).</changelog>
<changelog author="sbrabec@suse.cz" date="1346760000">- Update to version 2.6.5:
  * Fix regression in upssched.
  * Support for new devices: Eaton ePDU Switched, Online Zinto A,
    REDi Blazer 400VA / 600VA / 800VA, UNITEK Alpha650ipF and
    Alpha650ipE, AEG Power Solutions PROTECT HOME, more APC SNMP
    cards, ATEK Defensor range, all Borri models, all COVER ENERGY
    SA, CyberPower OR700LCDRM1U, PR6000LCDRTXL5U and CP1000PFCLCD,
    Dell UPS Network Management Card, Dynamix 1000VA USB, Eaton
    Management Card Contact (ref 66104), EVER POWERLINE RT / 11 /
    31 and DUO II Pro, GE Digital Energy GT Series 1000-3000 VA,
    Gtec models, all recent HP serial / USB UPS (G2, G3 and R/T
    models) and HP UPS Management Module, Ippon INNOVA RT, KOLFF
    BLACK NOVA, Lexis X-power Tigra 1kVA, Microline C-Lion Innova,
    Online Yunto YQ450, PowerShield Defender 1200VA, PowerWalker
    Online VFI LCD, Line-Interactive VI LCD and Line-Interactive
    VI, Riello Netman Plus 102 SNMP Card, Tripp-Lite OMNISMART500.
  * mge-shut driver has been replaced by a new implementation.
  * Support for integration with VMware ESXI 5.0.
  * IPMI support.
  * snmp-ups: high precision values for APC, more variables.
  * The NUT variables and commands namespace has been fixed and
    completed.
  * Support of ranges of values for writable variables added.
  * Static source code analysis fixes by RedHat using Coverity.
  * Add new "LIST CLIENTS" and "NETVER" commands to NUT network
    protocol.
  * bcmxcp has improved support for battery status, and better
    supports PW9120 units.
  * bestfortress has improved Best Fortress LI675VA support.
  * blazer_ser and blazer_usb now try to automatically estimate high
    and low voltages; support for online Innova UPS (T, RT and 3/1
    T); Best UPS support has been improved.
  * bestups fixes, but will soon be deprecated.
  * newmge-shut has been heavilly improved.
  * oneac 0.80 improves support for all families of Oneac.
  * usbhid-ups: for Eaton devices, ups.start.auto is now
    automatically adjusted for shutdown.{return,stayoff}; Liebert
    firmwares with incorrect exponents have also been addressed.
  * snmp-ups now provides support for UPS shutdown. Composite
    commands are also supported now; Eaton/MGE MIB has been cleaned
    and completed; 3-phases support has been added to Socomec
    Netvision MIB; HP/Compaq MIB has been completed.
  * nut-scanner now also has libupsclient has a weak runtime
    dependency.
  * Provide an Uncomplicated Firewall (UFW) profile.
  * Riello protocols have been officially published in NUT
    protocols library.
  * Duplicate instances of upsd / upsmon are now detected.
  * upslog now comes with logrotate configuration.
  * more devices embed NUT for power protection, now including
    Thecus NAS range.
  * PyNUT.py has been updated to version 1.2.2.
  * Bugfixes, cleanup and improvements.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.
- Fix provides/obsoletes</changelog>
<changelog author="sbrabec@suse.cz" date="1353326400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1359460800">- Turn systemd integration on (nut-systemd-dirs.patch).
- Fix README.SUSE.
- nut-preconfig.patch: Fix UID recommendation.</changelog>
<changelog author="sbrabec@suse.cz" date="1385467200">- Update to version 2.7.1:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  Potentially incompatible changes:
  * First release after the transition from Subversion to Git.
  * The linkman:apcsmart[8] driver has been replaced by a new
    implementation. There is a new parameter, 'ttymode'.  In case
    of issues with this new version, users can revert to
    apcsmart-old.
  * The linkman:nutdrv_qx[8] driver will eventually supersede
    blazer_ser and blazer_usb.  Options are not exactly the same,
    but are documented in the nutdrv_qx man page.
  * Mozilla NSS support has been added.
  * linkman:upsrw[8] now prints out the maximum size of
    variables.
  Other changes:
  * Added a new driver, nutdrv_qx, for Megatec/Qx devices. This
    driver will eventually replace the blazer_ser and blazer_usb
    drivers. In particular, it adds support for Voltronic Power
    devices.
  * Increased USB_TIMEOUT to standards-compliant 5.000 seconds in
    most drivers.  This should reduce the number of timeouts on
    low-speed USB 1.1 devices.
  * Added many devices to the HCL. Of particular note are many
    Tripp Lite USB HID PDC models which were tested against NUT by
    Tripp Lite.
  * Reworked some visual elements of the HCL.
  * Also increased timeouts and added redundant commands to improve
    reliability of mge-utalk driver.
  * Added the apcupsd-ups driver to interoperate with apcupsd
    installations.
  * Added documentation on creating subdrivers for snmp-ups and
    nutdrv_qx.
  * Added new drivers for the Riello UPS product line
    (riello_ser/riello_usb).
  * Many improvements to the BCM/XCP.
  * Added a few variables to the Powercom HID mappings.
  * Updated the apcsmart driver, and renamed the previous driver to
    apcsmart-old.
  * Fixed the battery percentage calculation in the bestfcom
    driver.
  * libnutclient has been added as a C++ alternative to
    libupsclient.
  * Fix shutdown of Eaton HID, using usbhid-ups and mge-shut
  * usbhid-ups: final fix for APC Back UPS ES.
  * nut-scanner: fix crash
  * IPMI support can handle more different versions of FreeIPMI
  * Support power supplies scan over the network nut-scanner can
    now scan for power supplies with IPMI over LAN.  This is
    currently limited to IPMI 1.5 only
  * Improve systemd integration
  * snmp-ups: Fixed a crash on outlet management, and added
    delta_ups MIB support. Also fixed mappings for
    upsBypassVoltage, upsBypassCurrent, and upsBypassPower in
    three-phase IETF MIB.
- Enable FreeIPMI.</changelog>
<changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
<changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
<changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
<changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
<changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post script</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
<changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
<changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
<changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>

</package>
<package pkgid="bfdc44ef269d86d2a370c32cad42ff19637d619ae4c37a5eac577162f218e6b3" name="nut-drivers-net" arch="x86_64">
    <version epoch="0" ver="2.7.4" rel="6.1"/>

<changelog author="sbrabec@suse.cz" date="1320235200">- Patch real source files to get missing devices (bnc#719292#c7).</changelog>
<changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1338379200">- Upgrade to version 2.6.3:
  * nut-scanner is now improved and more portable.
  * pkg-config support
  * Support for new devices: Cyber Power Systems with SNMP RMCARD
    (100, 201, 202 and 301); Dynamix 650VA USB; LDLC UPS-1200D;
    Tecnoware UPS ERA LCD 0.65; Powercom BNT-xxxAP (USB ID
    0d9f:0004); Various USB devices using UPSilon 2000 software.
  * bcmxcp_usb now handles disconnection and reconnection.
  * blazer_usb enables again inclusion of buggy IDs.
  * upsd doesn't anymore fail where either IPv4 or IPv6 is
    disabled, and no explicit LISTEN directive has been specified.
  * Avahi support is now automatically enabled, upon detection.
  * jNut (NUT Java interface) adds device discovery support.
  * Many bugfixes, cleanup and improvements.</changelog>
<changelog author="sbrabec@suse.cz" date="1338465600">- Fix random network data crash (bnc#764699, CVE-2012-2944).</changelog>
<changelog author="sbrabec@suse.cz" date="1346760000">- Update to version 2.6.5:
  * Fix regression in upssched.
  * Support for new devices: Eaton ePDU Switched, Online Zinto A,
    REDi Blazer 400VA / 600VA / 800VA, UNITEK Alpha650ipF and
    Alpha650ipE, AEG Power Solutions PROTECT HOME, more APC SNMP
    cards, ATEK Defensor range, all Borri models, all COVER ENERGY
    SA, CyberPower OR700LCDRM1U, PR6000LCDRTXL5U and CP1000PFCLCD,
    Dell UPS Network Management Card, Dynamix 1000VA USB, Eaton
    Management Card Contact (ref 66104), EVER POWERLINE RT / 11 /
    31 and DUO II Pro, GE Digital Energy GT Series 1000-3000 VA,
    Gtec models, all recent HP serial / USB UPS (G2, G3 and R/T
    models) and HP UPS Management Module, Ippon INNOVA RT, KOLFF
    BLACK NOVA, Lexis X-power Tigra 1kVA, Microline C-Lion Innova,
    Online Yunto YQ450, PowerShield Defender 1200VA, PowerWalker
    Online VFI LCD, Line-Interactive VI LCD and Line-Interactive
    VI, Riello Netman Plus 102 SNMP Card, Tripp-Lite OMNISMART500.
  * mge-shut driver has been replaced by a new implementation.
  * Support for integration with VMware ESXI 5.0.
  * IPMI support.
  * snmp-ups: high precision values for APC, more variables.
  * The NUT variables and commands namespace has been fixed and
    completed.
  * Support of ranges of values for writable variables added.
  * Static source code analysis fixes by RedHat using Coverity.
  * Add new "LIST CLIENTS" and "NETVER" commands to NUT network
    protocol.
  * bcmxcp has improved support for battery status, and better
    supports PW9120 units.
  * bestfortress has improved Best Fortress LI675VA support.
  * blazer_ser and blazer_usb now try to automatically estimate high
    and low voltages; support for online Innova UPS (T, RT and 3/1
    T); Best UPS support has been improved.
  * bestups fixes, but will soon be deprecated.
  * newmge-shut has been heavilly improved.
  * oneac 0.80 improves support for all families of Oneac.
  * usbhid-ups: for Eaton devices, ups.start.auto is now
    automatically adjusted for shutdown.{return,stayoff}; Liebert
    firmwares with incorrect exponents have also been addressed.
  * snmp-ups now provides support for UPS shutdown. Composite
    commands are also supported now; Eaton/MGE MIB has been cleaned
    and completed; 3-phases support has been added to Socomec
    Netvision MIB; HP/Compaq MIB has been completed.
  * nut-scanner now also has libupsclient has a weak runtime
    dependency.
  * Provide an Uncomplicated Firewall (UFW) profile.
  * Riello protocols have been officially published in NUT
    protocols library.
  * Duplicate instances of upsd / upsmon are now detected.
  * upslog now comes with logrotate configuration.
  * more devices embed NUT for power protection, now including
    Thecus NAS range.
  * PyNUT.py has been updated to version 1.2.2.
  * Bugfixes, cleanup and improvements.</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.
- Fix provides/obsoletes</changelog>
<changelog author="sbrabec@suse.cz" date="1353326400">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1359460800">- Turn systemd integration on (nut-systemd-dirs.patch).
- Fix README.SUSE.
- nut-preconfig.patch: Fix UID recommendation.</changelog>
<changelog author="sbrabec@suse.cz" date="1385467200">- Update to version 2.7.1:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  Potentially incompatible changes:
  * First release after the transition from Subversion to Git.
  * The linkman:apcsmart[8] driver has been replaced by a new
    implementation. There is a new parameter, 'ttymode'.  In case
    of issues with this new version, users can revert to
    apcsmart-old.
  * The linkman:nutdrv_qx[8] driver will eventually supersede
    blazer_ser and blazer_usb.  Options are not exactly the same,
    but are documented in the nutdrv_qx man page.
  * Mozilla NSS support has been added.
  * linkman:upsrw[8] now prints out the maximum size of
    variables.
  Other changes:
  * Added a new driver, nutdrv_qx, for Megatec/Qx devices. This
    driver will eventually replace the blazer_ser and blazer_usb
    drivers. In particular, it adds support for Voltronic Power
    devices.
  * Increased USB_TIMEOUT to standards-compliant 5.000 seconds in
    most drivers.  This should reduce the number of timeouts on
    low-speed USB 1.1 devices.
  * Added many devices to the HCL. Of particular note are many
    Tripp Lite USB HID PDC models which were tested against NUT by
    Tripp Lite.
  * Reworked some visual elements of the HCL.
  * Also increased timeouts and added redundant commands to improve
    reliability of mge-utalk driver.
  * Added the apcupsd-ups driver to interoperate with apcupsd
    installations.
  * Added documentation on creating subdrivers for snmp-ups and
    nutdrv_qx.
  * Added new drivers for the Riello UPS product line
    (riello_ser/riello_usb).
  * Many improvements to the BCM/XCP.
  * Added a few variables to the Powercom HID mappings.
  * Updated the apcsmart driver, and renamed the previous driver to
    apcsmart-old.
  * Fixed the battery percentage calculation in the bestfcom
    driver.
  * libnutclient has been added as a C++ alternative to
    libupsclient.
  * Fix shutdown of Eaton HID, using usbhid-ups and mge-shut
  * usbhid-ups: final fix for APC Back UPS ES.
  * nut-scanner: fix crash
  * IPMI support can handle more different versions of FreeIPMI
  * Support power supplies scan over the network nut-scanner can
    now scan for power supplies with IPMI over LAN.  This is
    currently limited to IPMI 1.5 only
  * Improve systemd integration
  * snmp-ups: Fixed a crash on outlet management, and added
    delta_ups MIB support. Also fixed mappings for
    upsBypassVoltage, upsBypassCurrent, and upsBypassPower in
    three-phase IETF MIB.
- Enable FreeIPMI.</changelog>
<changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
<changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
<changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
<changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
<changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post script</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
<changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
<changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
<changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
<changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>

</package>
<package pkgid="822a521960009a8f8328dfd8b478b5ff5cc35fc32eed4e5444f9c28b09905559" name="nvme-cli" arch="src">
    <version epoch="0" ver="1.2" rel="7.1"/>

<changelog author="jthumshirn@suse.com" date="1455537600">- Fix display of version number (boo#966740)</changelog>
<changelog author="jthumshirn@suse.com" date="1456920000">- Update to upstream release v0.4</changelog>
<changelog author="jthumshirn@suse.com" date="1458302400">- Update to upstream release v0.5
    The v0.4 breakage should all be resolved now. Tagging release
    v0.5, and back to stability.</changelog>
<changelog author="jthumshirn@suse.com" date="1460548800">- Exclude build on s390x (FATE#319560)</changelog>
<changelog author="jthumshirn@suse.com" date="1464782400">- Update to upstream release v0.7
  + 0001-bash-completion-Remove-shebang-line.patch
  Keith writes:
    Just a few minor updates and documentation fixes. There is also a new
    option for passthrough commands that can be used to help detect data
    over/under run.
    Tagging a stable release so we can consider features that bring in other
    transports and third party extensions.</changelog>
<changelog author="jthumshirn@suse.com" date="1470744000">- Update to upstream release v0.8
  - Remove merged patch 0001-bash-completion-Remove-shebang-line.patch
  * Code re-organized to support new extensions. While these are called
    "plugins", they currently have to be built into the executable. Support
    for dynamically loadable plugins is under consideration.
  * LightNVM is added as a built-in plugin.
  * Intel vendor specific commands and structure decodings are supported
    in a new intel plugin.
  * Support for NVMe-over-Fabrics
  * New output format "json" for a subset of commands that decode returned
    structures.
  * Lots of various documentation and minor code fixes.</changelog>
<changelog author="jthumshirn@suse.com" date="1472644800">- Don't map controller registers in 'list' command (boo#986891)
  + remove-version-from-list.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1473940800">- Update to upstream release v0.9
  - Remove merged remove-version-from-list.patch
  * New extensions, fabrics support, a bug fixes. The 'list' command
    is liberated from its udev dependency, and no longer requires
    CONFIG_IO_STRICT_DEVMEM be disabled.</changelog>
<changelog author="jthumshirn@suse.com" date="1488456000">-  Update to upstream release v1.1 (FATE#322735)
  * This fixes multiple compiler warnings for 32-bit and other environments
    from v1.0, adds more documentation to fabrics, removes the libudev
    dependency entirely from this project, adds a framework for unit testing
    devices, and fixes usage for user defined install paths</changelog>
<changelog author="jthumshirn@suse.com" date="1493035200">- Update to version v1.2 (FATE#322735 ,bsc#1033410):
  * Include endian.h for byte/host order functions
  * nvme-cli: Add nvme hostnqn generation option
  * nvme.spec/debian: Auto generate host nqn as part of install
  * Documentation: Add entry for gen-hostnqn
  * Regenerate Documentation
  * Fix read/write man pages
  * get-features: Don't try to read the data buffer for sel == 3
  * Documentation: fix location of device reset
  * Regen documentation
  * Remove debian/ directory
  * Remove pyc files generated by 'make test'
  * Moving the bash completion files to the standard
  * lightnvm: default to -1 on lun begin and end
  * nvme-cli: fabrics: Fix to pass "host_traddr" to the kernel driver.
  * nvme-cli: id-ctrl: Fix memory leak for JSON.
  * nvme-cli: id-ns: Fix memory leak for JSON.
  * nvme-cli: error-log: Fix memory leak for JSON.
  * nvme-cli: resv-report: Fix memory leak.
  * nvme-cli: smart-log: Fix memory leak for JSON.
  * nvme-cli: fw-log: Fix memory leak for JSON.
  * nvme-cli: json_add_smart_log(): Fix memory leak for JSON.
  * nvme-cli: smart-log: Allow negative values for temp sensors.
  * Don't print unimplemented sensor
  * Build without uuid
  * get-ns-id: Exit when no device provided.
  * nvme-cli: id-ctrl: Add vendor fields in JSON id-ctrl.
  * nvme-cli: nvme.c: Allow plug-ins to access to output formats and helper.
  * nvme-cli: Western Digital/HGST plug-in.
  * nvme-cli: Western Digital/HGST plug-in documentation.
  * &lt;linux/nvme.h&gt;: Correct NVMF enum values to match NVMe-oF rev 1.0
  * fabrics: Handle space-padded TRSVCID and TRADDR fields
  * nvme-cli: bug-fix: use right file name for perror.
  * move show_intel_smart_log to intel-nvme.c
  * remove json_add_smart_log
  * remove nvme_intel_smart_log
  * move struct nvme_additional_smart_log to intel-nvme.c
  * nvme-cli/format: use existing LBAF if none requested
  * nvme-cli: Release v1.2</changelog>
<changelog author="jthumshirn@suse.com" date="1494590400">- Add possibility to change queue depth at connect time (bsc#1037297)
  + 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  + 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1497441600">- Add NVMe over Fabrics specific id-ctrl fields (bsc#1037293)
  + add-missing-nvme_id_crtl-fileds.patch
  + 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  + 0004-nvme-cli-id-ctrl-display-additional-fields.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1497614400">-  Also re-build documentation on each build (bsc#1037297)</changelog>
<changelog author="jthumshirn@suse.com" date="1498478400">- Provide nvme ns-descs subcommand (bsc#1038235)
  + 0005-nvme-cli-add-ns-descs-subcommand.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1498478401">- Create nvme files and directories in /etc/nvme (bsc#1045931 )</changelog>
<changelog author="jthumshirn@suse.com" date="1498824000">- Add hostid option to connect command (bsc#1045293)
  + 0006-fabrics-add-hostid-option-to-connect-command.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1504180800">- Fix hostid parsing (bsc#1049272)
  + 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1504785600">- Generate Spec compliant UUID NQNs (bsc#1057498)
  + 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1511265600">-  Decode KATO feature in nvme get-feature (bsc#1065430)
  + 0010-nvme-cli-Get-Feature-support-for-Extended-Host-Id.patch</changelog>

</package>
<package pkgid="10004e90e75e62fdde7b49fa3f51be1e55bd0aa95e617c66b58ee11b4186fc98" name="nvme-cli" arch="x86_64">
    <version epoch="0" ver="1.2" rel="7.1"/>

<changelog author="jthumshirn@suse.com" date="1455537600">- Fix display of version number (boo#966740)</changelog>
<changelog author="jthumshirn@suse.com" date="1456920000">- Update to upstream release v0.4</changelog>
<changelog author="jthumshirn@suse.com" date="1458302400">- Update to upstream release v0.5
    The v0.4 breakage should all be resolved now. Tagging release
    v0.5, and back to stability.</changelog>
<changelog author="jthumshirn@suse.com" date="1460548800">- Exclude build on s390x (FATE#319560)</changelog>
<changelog author="jthumshirn@suse.com" date="1464782400">- Update to upstream release v0.7
  + 0001-bash-completion-Remove-shebang-line.patch
  Keith writes:
    Just a few minor updates and documentation fixes. There is also a new
    option for passthrough commands that can be used to help detect data
    over/under run.
    Tagging a stable release so we can consider features that bring in other
    transports and third party extensions.</changelog>
<changelog author="jthumshirn@suse.com" date="1470744000">- Update to upstream release v0.8
  - Remove merged patch 0001-bash-completion-Remove-shebang-line.patch
  * Code re-organized to support new extensions. While these are called
    "plugins", they currently have to be built into the executable. Support
    for dynamically loadable plugins is under consideration.
  * LightNVM is added as a built-in plugin.
  * Intel vendor specific commands and structure decodings are supported
    in a new intel plugin.
  * Support for NVMe-over-Fabrics
  * New output format "json" for a subset of commands that decode returned
    structures.
  * Lots of various documentation and minor code fixes.</changelog>
<changelog author="jthumshirn@suse.com" date="1472644800">- Don't map controller registers in 'list' command (boo#986891)
  + remove-version-from-list.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1473940800">- Update to upstream release v0.9
  - Remove merged remove-version-from-list.patch
  * New extensions, fabrics support, a bug fixes. The 'list' command
    is liberated from its udev dependency, and no longer requires
    CONFIG_IO_STRICT_DEVMEM be disabled.</changelog>
<changelog author="jthumshirn@suse.com" date="1488456000">-  Update to upstream release v1.1 (FATE#322735)
  * This fixes multiple compiler warnings for 32-bit and other environments
    from v1.0, adds more documentation to fabrics, removes the libudev
    dependency entirely from this project, adds a framework for unit testing
    devices, and fixes usage for user defined install paths</changelog>
<changelog author="jthumshirn@suse.com" date="1493035200">- Update to version v1.2 (FATE#322735 ,bsc#1033410):
  * Include endian.h for byte/host order functions
  * nvme-cli: Add nvme hostnqn generation option
  * nvme.spec/debian: Auto generate host nqn as part of install
  * Documentation: Add entry for gen-hostnqn
  * Regenerate Documentation
  * Fix read/write man pages
  * get-features: Don't try to read the data buffer for sel == 3
  * Documentation: fix location of device reset
  * Regen documentation
  * Remove debian/ directory
  * Remove pyc files generated by 'make test'
  * Moving the bash completion files to the standard
  * lightnvm: default to -1 on lun begin and end
  * nvme-cli: fabrics: Fix to pass "host_traddr" to the kernel driver.
  * nvme-cli: id-ctrl: Fix memory leak for JSON.
  * nvme-cli: id-ns: Fix memory leak for JSON.
  * nvme-cli: error-log: Fix memory leak for JSON.
  * nvme-cli: resv-report: Fix memory leak.
  * nvme-cli: smart-log: Fix memory leak for JSON.
  * nvme-cli: fw-log: Fix memory leak for JSON.
  * nvme-cli: json_add_smart_log(): Fix memory leak for JSON.
  * nvme-cli: smart-log: Allow negative values for temp sensors.
  * Don't print unimplemented sensor
  * Build without uuid
  * get-ns-id: Exit when no device provided.
  * nvme-cli: id-ctrl: Add vendor fields in JSON id-ctrl.
  * nvme-cli: nvme.c: Allow plug-ins to access to output formats and helper.
  * nvme-cli: Western Digital/HGST plug-in.
  * nvme-cli: Western Digital/HGST plug-in documentation.
  * &lt;linux/nvme.h&gt;: Correct NVMF enum values to match NVMe-oF rev 1.0
  * fabrics: Handle space-padded TRSVCID and TRADDR fields
  * nvme-cli: bug-fix: use right file name for perror.
  * move show_intel_smart_log to intel-nvme.c
  * remove json_add_smart_log
  * remove nvme_intel_smart_log
  * move struct nvme_additional_smart_log to intel-nvme.c
  * nvme-cli/format: use existing LBAF if none requested
  * nvme-cli: Release v1.2</changelog>
<changelog author="jthumshirn@suse.com" date="1494590400">- Add possibility to change queue depth at connect time (bsc#1037297)
  + 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  + 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1497441600">- Add NVMe over Fabrics specific id-ctrl fields (bsc#1037293)
  + add-missing-nvme_id_crtl-fileds.patch
  + 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  + 0004-nvme-cli-id-ctrl-display-additional-fields.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1497614400">-  Also re-build documentation on each build (bsc#1037297)</changelog>
<changelog author="jthumshirn@suse.com" date="1498478400">- Provide nvme ns-descs subcommand (bsc#1038235)
  + 0005-nvme-cli-add-ns-descs-subcommand.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1498478401">- Create nvme files and directories in /etc/nvme (bsc#1045931 )</changelog>
<changelog author="jthumshirn@suse.com" date="1498824000">- Add hostid option to connect command (bsc#1045293)
  + 0006-fabrics-add-hostid-option-to-connect-command.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1504180800">- Fix hostid parsing (bsc#1049272)
  + 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1504785600">- Generate Spec compliant UUID NQNs (bsc#1057498)
  + 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1511265600">-  Decode KATO feature in nvme get-feature (bsc#1065430)
  + 0010-nvme-cli-Get-Feature-support-for-Extended-Host-Id.patch</changelog>

</package>
<package pkgid="8afd26ef18dbd8aedbefb25e4b42acfde78243dcd9730f1d8daa5b4c07cb7371" name="nvptx-tools" arch="src">
    <version epoch="0" ver="1.0" rel="3.1"/>

<changelog author="rguenther@suse.com" date="1485432000">- Initial version.
- Add nvptx-tools.patch to avoid errors when ptxas is not available.</changelog>
<changelog author="rguenther@suse.com" date="1486382400">- Package COPYING3.</changelog>
<changelog author="jengelh@inai.de" date="1486382401">- Update description</changelog>
<changelog author="rguenther@suse.com" date="1504612800">- Update nvptx-tools.patch to check for getopt to avoid providing
  an incompatible declaration.</changelog>

</package>
<package pkgid="ab8d0122c96e5151d49d9427031eb0d50dc712c8af2ac35b63454c4bfb1b59e5" name="nvptx-tools" arch="x86_64">
    <version epoch="0" ver="1.0" rel="3.1"/>

<changelog author="rguenther@suse.com" date="1485432000">- Initial version.
- Add nvptx-tools.patch to avoid errors when ptxas is not available.</changelog>
<changelog author="rguenther@suse.com" date="1486382400">- Package COPYING3.</changelog>
<changelog author="jengelh@inai.de" date="1486382401">- Update description</changelog>
<changelog author="rguenther@suse.com" date="1504612800">- Update nvptx-tools.patch to check for getopt to avoid providing
  an incompatible declaration.</changelog>

</package>
<package pkgid="96b7e99898d8497844614969aa5774fbd38ca1fdd3fe6be2e2a96c64341eaf68" name="obs-service-set_version" arch="noarch">
    <version epoch="0" ver="0.5.8" rel="8.1"/>

<changelog author="jblunck@infradead.org" date="1410436800">- Update to version 0.4.2:
  + Release 0.4.2 - Update Debian changelog</changelog>
<changelog author="adrian@suse.de" date="1437739200">- Update to version 0.5.0:
  + Add Makefile with install target
  + Change debian source format to 'native'
  + Fix tar file detection for PKGBUILD
  + Add Testsuite and README.md
  + - empty dummy commit to test travis hook
  + Disable py26, enable py{33,34} for tests
  + Add basic test for debian changelogs
  + Add travis build status image to README
  + Also do negative test for debian/changelog
  + Move testdata to .json files
  + Move _write_tarfile() to base test class
  + Remove python 2.6 compat import
  + Reuse test data for debian changelog tests
  + Rewrite set_version in python
  + Install devscripts in travis-ci test env
  + Restructure version detection code
  + Allow files in test tarballs
  + Add package type detection for python
  + Add version converter for python packages
  + Run python version converter tests with dpkg
  + Add function to add or replace a %define
  + Fix problem with replacing tags in spec files
  + Add function to replace %{version} in %setup
  + Add custom line support for _write_specfile func
  + Finally use version conversion for python packages
  + Skip some tests if zypper or dpkg are unavailable
  + Use python binary from virtualenv</changelog>
<changelog author="tbechtold@suse.com" date="1437739201">- Require python-packaging</changelog>
<changelog author="adrian@suse.de" date="1437998400">- Recommends python-packaging</changelog>
<changelog author="adrian@suse.de" date="1438084800">- Update to version 0.5.1:
  + Make python-packaging runtime dep optional
  + Fix %setup handling for python spec files</changelog>
<changelog author="adrian@suse.de" date="1439812800">- Update to version 0.5.2:
  + fix it ... it only worked with "disabledrun" mode by luck</changelog>
<changelog author="adrian@suse.de" date="1441281600">- Update to version 0.5.3:
  + Set pkgver and pkgrel for PKGBUILD files (fixes #21)
  + Fix python3 compat</changelog>
<changelog author="tbechtold@suse.com" date="1457006400">- Update to version 0.5.3:
  + Use old version from testing data instead of hardcoding
  + Fix replacement of empty tags
  + Fix empty version checks for debian/changelog
  + fix when switching from .dev to non-dev version</changelog>
<changelog author="tbechtold@suse.com" date="1460116800">- Update to version 0.5.3:
  * Don't add unconverted_version unconditionally</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1461240000">- Update to version 0.5.3:
  * VersionDetector._autodetect: prioritize the directory name over the file name</changelog>
<changelog author="adrian@suse.de" date="1484308800">- Update to version 0.5.4:
  * support obscpio archives
  * do not strip release number in debian, but setting it back</changelog>
<changelog author="adrian@suse.de" date="1488456000">- Update to version 0.5.5:
  * read version from .obsinfo file if available
  * Add support for Collax build recipes</changelog>
<changelog author="adrian@suse.de" date="1493294400">- Update to version 0.5.6:
  * strip \n from version in obsinfo</changelog>
<changelog author="adrian@suse.de" date="1499083200">- try to avoid python-packaging to support non-SUSE distros</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1505822400">- Avoid half-converting Debian native pkgs to non-native pkgs
- Simplify the pip version handling
- travis: Do not use "--use-mirrors" when using pip
- travis: Test python 3.6</changelog>
<changelog author="dmueller@suse.com" date="1507636800">- switch to python3 for less ancient distros</changelog>
<changelog author="adrian@suse.de" date="1509364800">- Update to version 0.5.7:
  * workaround for python3 locale problems in factory
  * add a hint to flake8
  * satisfy flake8
  * skip also sha256sums check for Arch</changelog>
<changelog author="adrian@suse.de" date="1509969600">- Update to version 0.5.7:
  * added gitignore
  * added target 'clean' in Makefile
  * Added new target 'test' to Makefile
  * fix flake8 error 'do not use bare except'
  * Reverting patch for setlocale as it breaks in containers</changelog>
<changelog author="adrian@suse.de" date="1509969601">- add requires to python3, since Leap 15.0 still does not have
  the fileprovides</changelog>
<changelog author="fschreiner@suse.de" date="1512993600">- Update to version 0.5.8:
  * fixes boo#1072359
  * code cleanup and some refactoring
  * cli options --debug and --regex
  * new targets (test/clean) for Makefile
  * initial .gitignore
  * Mention that tests may take some time in README.md
  * Fix pip/zypper tests for python3
  * enforce files to be decoded as UTF-8
  * Don't let version check get beyond path boundary
  * Slightly reorganize README.md file</changelog>

</package>
<package pkgid="4febfab24e1ee232c220e577e0a4619e2d933f245c52593a86896173348680d4" name="obs-service-set_version" arch="src">
    <version epoch="0" ver="0.5.8" rel="8.1"/>

<changelog author="jblunck@infradead.org" date="1410436800">- Update to version 0.4.2:
  + Release 0.4.2 - Update Debian changelog</changelog>
<changelog author="adrian@suse.de" date="1437739200">- Update to version 0.5.0:
  + Add Makefile with install target
  + Change debian source format to 'native'
  + Fix tar file detection for PKGBUILD
  + Add Testsuite and README.md
  + - empty dummy commit to test travis hook
  + Disable py26, enable py{33,34} for tests
  + Add basic test for debian changelogs
  + Add travis build status image to README
  + Also do negative test for debian/changelog
  + Move testdata to .json files
  + Move _write_tarfile() to base test class
  + Remove python 2.6 compat import
  + Reuse test data for debian changelog tests
  + Rewrite set_version in python
  + Install devscripts in travis-ci test env
  + Restructure version detection code
  + Allow files in test tarballs
  + Add package type detection for python
  + Add version converter for python packages
  + Run python version converter tests with dpkg
  + Add function to add or replace a %define
  + Fix problem with replacing tags in spec files
  + Add function to replace %{version} in %setup
  + Add custom line support for _write_specfile func
  + Finally use version conversion for python packages
  + Skip some tests if zypper or dpkg are unavailable
  + Use python binary from virtualenv</changelog>
<changelog author="tbechtold@suse.com" date="1437739201">- Require python-packaging</changelog>
<changelog author="adrian@suse.de" date="1437998400">- Recommends python-packaging</changelog>
<changelog author="adrian@suse.de" date="1438084800">- Update to version 0.5.1:
  + Make python-packaging runtime dep optional
  + Fix %setup handling for python spec files</changelog>
<changelog author="adrian@suse.de" date="1439812800">- Update to version 0.5.2:
  + fix it ... it only worked with "disabledrun" mode by luck</changelog>
<changelog author="adrian@suse.de" date="1441281600">- Update to version 0.5.3:
  + Set pkgver and pkgrel for PKGBUILD files (fixes #21)
  + Fix python3 compat</changelog>
<changelog author="tbechtold@suse.com" date="1457006400">- Update to version 0.5.3:
  + Use old version from testing data instead of hardcoding
  + Fix replacement of empty tags
  + Fix empty version checks for debian/changelog
  + fix when switching from .dev to non-dev version</changelog>
<changelog author="tbechtold@suse.com" date="1460116800">- Update to version 0.5.3:
  * Don't add unconverted_version unconditionally</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1461240000">- Update to version 0.5.3:
  * VersionDetector._autodetect: prioritize the directory name over the file name</changelog>
<changelog author="adrian@suse.de" date="1484308800">- Update to version 0.5.4:
  * support obscpio archives
  * do not strip release number in debian, but setting it back</changelog>
<changelog author="adrian@suse.de" date="1488456000">- Update to version 0.5.5:
  * read version from .obsinfo file if available
  * Add support for Collax build recipes</changelog>
<changelog author="adrian@suse.de" date="1493294400">- Update to version 0.5.6:
  * strip \n from version in obsinfo</changelog>
<changelog author="adrian@suse.de" date="1499083200">- try to avoid python-packaging to support non-SUSE distros</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1505822400">- Avoid half-converting Debian native pkgs to non-native pkgs
- Simplify the pip version handling
- travis: Do not use "--use-mirrors" when using pip
- travis: Test python 3.6</changelog>
<changelog author="dmueller@suse.com" date="1507636800">- switch to python3 for less ancient distros</changelog>
<changelog author="adrian@suse.de" date="1509364800">- Update to version 0.5.7:
  * workaround for python3 locale problems in factory
  * add a hint to flake8
  * satisfy flake8
  * skip also sha256sums check for Arch</changelog>
<changelog author="adrian@suse.de" date="1509969600">- Update to version 0.5.7:
  * added gitignore
  * added target 'clean' in Makefile
  * Added new target 'test' to Makefile
  * fix flake8 error 'do not use bare except'
  * Reverting patch for setlocale as it breaks in containers</changelog>
<changelog author="adrian@suse.de" date="1509969601">- add requires to python3, since Leap 15.0 still does not have
  the fileprovides</changelog>
<changelog author="fschreiner@suse.de" date="1512993600">- Update to version 0.5.8:
  * fixes boo#1072359
  * code cleanup and some refactoring
  * cli options --debug and --regex
  * new targets (test/clean) for Makefile
  * initial .gitignore
  * Mention that tests may take some time in README.md
  * Fix pip/zypper tests for python3
  * enforce files to be decoded as UTF-8
  * Don't let version check get beyond path boundary
  * Slightly reorganize README.md file</changelog>

</package>
<package pkgid="b8d95f4cd526df85a4cec8f99e41c6ffe264236772d1216337efe6384464599e" name="obs-service-source_validator" arch="noarch">
    <version epoch="0" ver="0.7" rel="16.1"/>

<changelog author="lnussel@suse.de" date="1429531200">- Update to version 0.5+git20150420.23830c1:
  + Verify if the packages referenced by baselibs.conf are actually being built.
  + Check for disallowed services before missing files (#16)
  + add support for %autosetup and %autopatch
- use proper versioning in _service file and generate changes entry</changelog>
<changelog author="lnussel@suse.de" date="1431518400">- Update to version 0.5+git20150513.7c2f7ae:
  + fix checking _service file
  + baselibs verification: targettype is a nown keyword - treat it as a 'built package'
  + baselibs validation: pass if we have trouble parsing the .spec file (missing devel packages on the host)</changelog>
<changelog author="lnussel@suse.de" date="1432728000">- Update to version 0.5+git20150527.6e08ec8:
  + baselibs.conf: ignore lines starting with #; comments might be welcome
  + baselibs.conf: 'arch' is also a valid keyword
  + Avoid trashing _service file</changelog>
<changelog author="adrian@suse.de" date="1434024000">- Update to version 0.5+git20150611.b85a5d4:
  + unbreak source validator with packages using source services again
  * Not all _* files are xml
  * Don't complain about service generated files</changelog>
<changelog author="hib@hiberis.nl" date="1435147200">- Add debian.dsc
- Use install target from Makefile
- Update to version 0.5+git20150622.3c3fa65:
  + Add install target to Makefile
  + Debianization</changelog>
<changelog author="fschreiner@suse.de" date="1455796800">- Update to version 0.6+git20160218.73d6618:
  + Attempt to fix &lt;CI_CNT&gt; and &lt;B_CNT&gt; handling in Release in a minimal invasive way.
  + 20-files-present-and-referenced: also look for *.sign files
  + various security and bug fixes (boo#967265)
  + removed bash 4 test syntax</changelog>
<changelog author="fschreiner@suse.de" date="1456142400">- Update to version 0.6+git20160222.62c56d3:
  + turned off warnings to avoid misleading messages
  + fixes boo#967610
  + related to bsc#967265</changelog>
<changelog author="fschreiner@suse.de" date="1464696000">- Update to version 0.6+git20160531.fbfe336:
  * baselibs.conf: targetname is a valid keyword
  * added checker for filenames
  * additional fixes for  boo#967610 and bsc#967265
  * enhanced regex to check
  * better quoting and checks for dot files
  * filter out single/double quotes and grave accent from filenames</changelog>
<changelog author="fschreiner@suse.de" date="1466164800">- Update to version 0.6+git20160617.cfadcb0:
  * 20-files-present: Add patches from debian.series file to sources list.
  * 20-files-present: Add more debian standard files to ignore.
  * 20-files-present: do not use cat where/while not needed</changelog>
<changelog author="adrian@suse.de" date="1467892800">- Update to version 0.6+git20160707.a6ff89d:
  + fix debian.series using patches with patch levels</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1481112000">- Update to version 0.6+git20161207.70e9d99:
  * 20-files-present-and-referenced fix case where rpmbuild emits a warning but the specfile does not list sources or patches (bnc#1013981)</changelog>
<changelog author="adrian@suse.de" date="1484136000">- Update to version 0.6+git20170111.82ea590:
  * accept reproducable CI source builds
  * accept .obsinfo and .obscpio archives
  * accept further modes of services</changelog>
<changelog author="tchvatal@suse.com" date="1500120000">- Update to version 0.6+git20170715.607b861:
  * - support obspcio also in osc case
  * Remove provides and obsoletes from the spec</changelog>
<changelog author="tchvatal@suse.com" date="1500465600">- Update to version 0.6+git20170719.d4384e5:
  * Don't complain about Debian manpages files missing in *.spec
  * Add README.md file
  * Fix service run mode check for localonly
  * Add 80-multibuild_xor_multispec: only multibuild OR multispec is supported
  * extract GPG_OPTIONS variable for multiple runs
  * For signature verification, use trust model "always"</changelog>
<changelog author="mstrigl@suse.com" date="1502366400">- Update to version 0.6+git20170809.6818366:
  * Ignore not referenced appimage.yml file
  * Don't use rpmbuild to extract sources, patches etc. from a spec (bnc#938556 CVE-2017-9274)</changelog>
<changelog author="adrian@suse.de" date="1502452800">- Update to version 0.6+git20170811.369eb25:
  * ignore expand errors with macro scripts</changelog>
<changelog author="tchvatal@suse.com" date="1504094400">- Update to version 0.6+git20170830.0775ae8:
  * Fix typo in egrep _service
  * Refactor helpers/spec_sources into helpers/spec_query
  * Use helpers/spec_query in 20-files-present-and-referenced
  * Do not use rpm --specfile to query the subpackage names
  * Remove unused RPMBUILD variable
  * Do not use a grouping
  * Silence another build warning wrt issue #54</changelog>
<changelog author="ro@suse.de" date="1506081600">- Update to version 0.6+git20170922.230bbc4:
  * deal with nil, flavor defines in output_versions
  * defining flavor in last change was not needed, remove
  * 45-stale-changes: use spec_query instead of output_versions
    using the specfile parser from the build package
    (boo#1059858)</changelog>
<changelog author="jayvdb@gmail.com" date="1507550400">- Update obs-service-source_validator.spec
  * Add explicit dependency on obs-build so that osc
    does not fail on distributions other than openSUSE.</changelog>
<changelog author="adrian@suse.de" date="1511956800">- Update to version 0.7:
  * Do not ignore conditionals of the form "%if ... %{name} ..."
  * Add --keep-name-conditionals option to helpers/spec_query
  * Do not fail in case of ambiguous source tags
  * Use priviate --homedir when calling gpg</changelog>

</package>
<package pkgid="c4f298447db728fbca84adb6e205ff214e0677f86d0d5269da33c8c0fc3aaf13" name="obs-service-source_validator" arch="src">
    <version epoch="0" ver="0.7" rel="16.1"/>

<changelog author="lnussel@suse.de" date="1429531200">- Update to version 0.5+git20150420.23830c1:
  + Verify if the packages referenced by baselibs.conf are actually being built.
  + Check for disallowed services before missing files (#16)
  + add support for %autosetup and %autopatch
- use proper versioning in _service file and generate changes entry</changelog>
<changelog author="lnussel@suse.de" date="1431518400">- Update to version 0.5+git20150513.7c2f7ae:
  + fix checking _service file
  + baselibs verification: targettype is a nown keyword - treat it as a 'built package'
  + baselibs validation: pass if we have trouble parsing the .spec file (missing devel packages on the host)</changelog>
<changelog author="lnussel@suse.de" date="1432728000">- Update to version 0.5+git20150527.6e08ec8:
  + baselibs.conf: ignore lines starting with #; comments might be welcome
  + baselibs.conf: 'arch' is also a valid keyword
  + Avoid trashing _service file</changelog>
<changelog author="adrian@suse.de" date="1434024000">- Update to version 0.5+git20150611.b85a5d4:
  + unbreak source validator with packages using source services again
  * Not all _* files are xml
  * Don't complain about service generated files</changelog>
<changelog author="hib@hiberis.nl" date="1435147200">- Add debian.dsc
- Use install target from Makefile
- Update to version 0.5+git20150622.3c3fa65:
  + Add install target to Makefile
  + Debianization</changelog>
<changelog author="fschreiner@suse.de" date="1455796800">- Update to version 0.6+git20160218.73d6618:
  + Attempt to fix &lt;CI_CNT&gt; and &lt;B_CNT&gt; handling in Release in a minimal invasive way.
  + 20-files-present-and-referenced: also look for *.sign files
  + various security and bug fixes (boo#967265)
  + removed bash 4 test syntax</changelog>
<changelog author="fschreiner@suse.de" date="1456142400">- Update to version 0.6+git20160222.62c56d3:
  + turned off warnings to avoid misleading messages
  + fixes boo#967610
  + related to bsc#967265</changelog>
<changelog author="fschreiner@suse.de" date="1464696000">- Update to version 0.6+git20160531.fbfe336:
  * baselibs.conf: targetname is a valid keyword
  * added checker for filenames
  * additional fixes for  boo#967610 and bsc#967265
  * enhanced regex to check
  * better quoting and checks for dot files
  * filter out single/double quotes and grave accent from filenames</changelog>
<changelog author="fschreiner@suse.de" date="1466164800">- Update to version 0.6+git20160617.cfadcb0:
  * 20-files-present: Add patches from debian.series file to sources list.
  * 20-files-present: Add more debian standard files to ignore.
  * 20-files-present: do not use cat where/while not needed</changelog>
<changelog author="adrian@suse.de" date="1467892800">- Update to version 0.6+git20160707.a6ff89d:
  + fix debian.series using patches with patch levels</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1481112000">- Update to version 0.6+git20161207.70e9d99:
  * 20-files-present-and-referenced fix case where rpmbuild emits a warning but the specfile does not list sources or patches (bnc#1013981)</changelog>
<changelog author="adrian@suse.de" date="1484136000">- Update to version 0.6+git20170111.82ea590:
  * accept reproducable CI source builds
  * accept .obsinfo and .obscpio archives
  * accept further modes of services</changelog>
<changelog author="tchvatal@suse.com" date="1500120000">- Update to version 0.6+git20170715.607b861:
  * - support obspcio also in osc case
  * Remove provides and obsoletes from the spec</changelog>
<changelog author="tchvatal@suse.com" date="1500465600">- Update to version 0.6+git20170719.d4384e5:
  * Don't complain about Debian manpages files missing in *.spec
  * Add README.md file
  * Fix service run mode check for localonly
  * Add 80-multibuild_xor_multispec: only multibuild OR multispec is supported
  * extract GPG_OPTIONS variable for multiple runs
  * For signature verification, use trust model "always"</changelog>
<changelog author="mstrigl@suse.com" date="1502366400">- Update to version 0.6+git20170809.6818366:
  * Ignore not referenced appimage.yml file
  * Don't use rpmbuild to extract sources, patches etc. from a spec (bnc#938556 CVE-2017-9274)</changelog>
<changelog author="adrian@suse.de" date="1502452800">- Update to version 0.6+git20170811.369eb25:
  * ignore expand errors with macro scripts</changelog>
<changelog author="tchvatal@suse.com" date="1504094400">- Update to version 0.6+git20170830.0775ae8:
  * Fix typo in egrep _service
  * Refactor helpers/spec_sources into helpers/spec_query
  * Use helpers/spec_query in 20-files-present-and-referenced
  * Do not use rpm --specfile to query the subpackage names
  * Remove unused RPMBUILD variable
  * Do not use a grouping
  * Silence another build warning wrt issue #54</changelog>
<changelog author="ro@suse.de" date="1506081600">- Update to version 0.6+git20170922.230bbc4:
  * deal with nil, flavor defines in output_versions
  * defining flavor in last change was not needed, remove
  * 45-stale-changes: use spec_query instead of output_versions
    using the specfile parser from the build package
    (boo#1059858)</changelog>
<changelog author="jayvdb@gmail.com" date="1507550400">- Update obs-service-source_validator.spec
  * Add explicit dependency on obs-build so that osc
    does not fail on distributions other than openSUSE.</changelog>
<changelog author="adrian@suse.de" date="1511956800">- Update to version 0.7:
  * Do not ignore conditionals of the form "%if ... %{name} ..."
  * Add --keep-name-conditionals option to helpers/spec_query
  * Do not fail in case of ambiguous source tags
  * Use priviate --homedir when calling gpg</changelog>

</package>
<package pkgid="3be9cf072777617bdec496f96bcaf78e2cd79a8b2cdee4e093cded23fb3705ba" name="oidentd" arch="src">
    <version epoch="0" ver="2.0.8" rel="153.1"/>

<changelog author="lmuelle@suse.de" date="1079524800">- inital SuSE RPM</changelog>
<changelog author="mc@suse.de" date="1096545600">- Add missing PreReq (#46479)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lmuelle@suse.de" date="1156766400">- Update to version 2.0.8.
  + Removed spaces between commas and colons from responses.
  + Pulled in patches for Linux from Debian.
  + Open masquerading options before dropping permissions on linux.</changelog>
<changelog author="lmuelle@suse.de" date="1259064000">- Package the init script with 0755 permissions; (bnc#557358).</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="p.drouand@gmail.com" date="1405684800">- Use systemd instead of sysvinit for openSUSE &gt;= 12.1
- Do not copy the INSTALL file in package documentation; user doesn't
  install from sources
- Get rid of depreciated stuff</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="lmuelle@suse.com" date="1446984000">- Really install the service and socket unit configuration files; (boo#953608).</changelog>
<changelog author="p.drouand@gmail.com" date="1452340800">- Rename oidentd@.service to oidentd.service and hardcode variables;
  (boo#953608)
- Add back support for sysconfig in the service file</changelog>

</package>
<package pkgid="c6eb9df29869a981c5f8f54cf1339cbaa173243437e629c5e587f812a6bcb165" name="oidentd" arch="x86_64">
    <version epoch="0" ver="2.0.8" rel="153.1"/>

<changelog author="lmuelle@suse.de" date="1079524800">- inital SuSE RPM</changelog>
<changelog author="mc@suse.de" date="1096545600">- Add missing PreReq (#46479)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lmuelle@suse.de" date="1156766400">- Update to version 2.0.8.
  + Removed spaces between commas and colons from responses.
  + Pulled in patches for Linux from Debian.
  + Open masquerading options before dropping permissions on linux.</changelog>
<changelog author="lmuelle@suse.de" date="1259064000">- Package the init script with 0755 permissions; (bnc#557358).</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="p.drouand@gmail.com" date="1405684800">- Use systemd instead of sysvinit for openSUSE &gt;= 12.1
- Do not copy the INSTALL file in package documentation; user doesn't
  install from sources
- Get rid of depreciated stuff</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="lmuelle@suse.com" date="1446984000">- Really install the service and socket unit configuration files; (boo#953608).</changelog>
<changelog author="p.drouand@gmail.com" date="1452340800">- Rename oidentd@.service to oidentd.service and hardcode variables;
  (boo#953608)
- Add back support for sysconfig in the service file</changelog>

</package>
<package pkgid="34e2b8215fc87050681fcc7f328ee0726455e8b31d2edf2c7befa082492c5c52" name="open-vm-tools" arch="src">
    <version epoch="0" ver="10.1.10" rel="4.1"/>

<changelog author="mlatimer@suse.com" date="1448971200">- Update to 10.0.5 stable branch
  + [vgauth] fix timestamp check
  + [libresolutionSet.so] Add an error handler to X11 resolutionSet
  + [vmci.ko] Kill tasklet when unloading vmci module
  + [libvmbackup.so] Quiesced snapshots Skip freezing autofs mounts.
  + [vmhgfs.ko] make vmhgfs compatible with Linux kernel 4.2</changelog>
<changelog author="mlatimer@suse.com" date="1450872000">- Compile without gtkmm support for SLES12 based environments
  (which do not provide gtkmm2.4)</changelog>
<changelog author="dimstar@opensuse.org" date="1461153600">- Add open-vm-tools-posixly.patch: defined(linux) is not posix
  compliant and modern compilers no longer accept it. Change to
  defined(__linux__)
  https://github.com/vmware/open-vm-tools/pull/81
- Add open-vm-tools-buildsystem-fixup.patch: since libsigc++ injects
  - std=c++11 into CFLAGS, the various objects in open-vm-tools need
  to be split up a bit in order to not have a mixed C/C++ object
  receiving the same CFLAGS.</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- they renamed open-vm-tools-stable-10.0.5.tar.gz to
  stable-10.0.5.tar.gz -- fix .spec accordingly</changelog>
<changelog author="ken@suse.com" date="1461844800">- Update to 10.0.7 stable branch
  + Added namespace command line utility "vmware-namespace-cmd".</changelog>
<changelog author="afaerber@suse.de" date="1461931200">- Sanitize the filename handling some more. The official GitHub
  filename is open-vm-tools-stable-10.0.7.tar.gz.</changelog>
<changelog author="ken@suse.com" date="1465387200">- Update to 10.0.7-gtk3 stable branch
  + add support for gtk3, needed by the dndcp and resolutionset
    plugins
  + remove files generated by autoreconf
  + a few minor build fixes
- Update fixes copy-n-paste and drag-n-drop regressions (bsc#978424)
- Added new vmblock-fuse.service
- Drop upstream patches included (or not necessary) in 10.0.7-gtk3:
  + open-vm-tools-posixly.patch
  + open-vm-tools-buildsystem-fixup.patch</changelog>
<changelog author="ken@suse.com" date="1466078400">- Added patches for GCC 6 build failure (boo#985110)
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch</changelog>
<changelog author="ken@suse.com" date="1468411200">- Fix vmtoolsd init script to run vmtoolsd in background. (bsc#971031)
  + fix originally done in SLE-11-SP4 code base by tcech@suse.cz</changelog>
<changelog author="jcejka@suse.de" date="1478088000">- Add udev rule to increase VMware virtual disk timeout values
  (bsc#994598)
  [99-vmware-scsi-udev.rules]</changelog>
<changelog author="ken@suse.com" date="1478952000">- Updated to 10.1.0 stable release (boo#1011057)
  + vmware-namespace-cmd command line utility.
  + gtk3 support
  + Common Agent Framework (CAF)
  + guest authentication with xmlsec1
  + FreeBSD support
  + sub-command to push updated network information to the host on demand
  + udev rules for configuring SCSI timeouts in the guest
  + fixes for Ubuntu 16.10
  + Fix for quiesced snapshot failure leaving guest file system
    quiesced (bsc#1006796)
  + Fix for CVE-2015-5191 (bsc#1007600)
- Dropped upstream patches included (or not necessary) in 10.1.0:
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch
  + enable-gcc46+.patch</changelog>
<changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
<changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
<changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
<changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
<changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
<changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
<changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
<changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>

</package>
<package pkgid="91c5c9cbee0bea9b2e328cb05edf9780880d5ece6f626d68f6831a3fa5d73fd9" name="open-vm-tools" arch="x86_64">
    <version epoch="0" ver="10.1.10" rel="4.1"/>

<changelog author="mlatimer@suse.com" date="1448971200">- Update to 10.0.5 stable branch
  + [vgauth] fix timestamp check
  + [libresolutionSet.so] Add an error handler to X11 resolutionSet
  + [vmci.ko] Kill tasklet when unloading vmci module
  + [libvmbackup.so] Quiesced snapshots Skip freezing autofs mounts.
  + [vmhgfs.ko] make vmhgfs compatible with Linux kernel 4.2</changelog>
<changelog author="mlatimer@suse.com" date="1450872000">- Compile without gtkmm support for SLES12 based environments
  (which do not provide gtkmm2.4)</changelog>
<changelog author="dimstar@opensuse.org" date="1461153600">- Add open-vm-tools-posixly.patch: defined(linux) is not posix
  compliant and modern compilers no longer accept it. Change to
  defined(__linux__)
  https://github.com/vmware/open-vm-tools/pull/81
- Add open-vm-tools-buildsystem-fixup.patch: since libsigc++ injects
  - std=c++11 into CFLAGS, the various objects in open-vm-tools need
  to be split up a bit in order to not have a mixed C/C++ object
  receiving the same CFLAGS.</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- they renamed open-vm-tools-stable-10.0.5.tar.gz to
  stable-10.0.5.tar.gz -- fix .spec accordingly</changelog>
<changelog author="ken@suse.com" date="1461844800">- Update to 10.0.7 stable branch
  + Added namespace command line utility "vmware-namespace-cmd".</changelog>
<changelog author="afaerber@suse.de" date="1461931200">- Sanitize the filename handling some more. The official GitHub
  filename is open-vm-tools-stable-10.0.7.tar.gz.</changelog>
<changelog author="ken@suse.com" date="1465387200">- Update to 10.0.7-gtk3 stable branch
  + add support for gtk3, needed by the dndcp and resolutionset
    plugins
  + remove files generated by autoreconf
  + a few minor build fixes
- Update fixes copy-n-paste and drag-n-drop regressions (bsc#978424)
- Added new vmblock-fuse.service
- Drop upstream patches included (or not necessary) in 10.0.7-gtk3:
  + open-vm-tools-posixly.patch
  + open-vm-tools-buildsystem-fixup.patch</changelog>
<changelog author="ken@suse.com" date="1466078400">- Added patches for GCC 6 build failure (boo#985110)
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch</changelog>
<changelog author="ken@suse.com" date="1468411200">- Fix vmtoolsd init script to run vmtoolsd in background. (bsc#971031)
  + fix originally done in SLE-11-SP4 code base by tcech@suse.cz</changelog>
<changelog author="jcejka@suse.de" date="1478088000">- Add udev rule to increase VMware virtual disk timeout values
  (bsc#994598)
  [99-vmware-scsi-udev.rules]</changelog>
<changelog author="ken@suse.com" date="1478952000">- Updated to 10.1.0 stable release (boo#1011057)
  + vmware-namespace-cmd command line utility.
  + gtk3 support
  + Common Agent Framework (CAF)
  + guest authentication with xmlsec1
  + FreeBSD support
  + sub-command to push updated network information to the host on demand
  + udev rules for configuring SCSI timeouts in the guest
  + fixes for Ubuntu 16.10
  + Fix for quiesced snapshot failure leaving guest file system
    quiesced (bsc#1006796)
  + Fix for CVE-2015-5191 (bsc#1007600)
- Dropped upstream patches included (or not necessary) in 10.1.0:
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch
  + enable-gcc46+.patch</changelog>
<changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
<changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
<changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
<changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
<changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
<changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
<changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
<changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>

</package>
<package pkgid="50143b5bc684707c9bb36d14e641e839c1c3b67ae2dc31f7433e3b4734e8f4ae" name="open-vm-tools-desktop" arch="x86_64">
    <version epoch="0" ver="10.1.10" rel="4.1"/>

<changelog author="mlatimer@suse.com" date="1448971200">- Update to 10.0.5 stable branch
  + [vgauth] fix timestamp check
  + [libresolutionSet.so] Add an error handler to X11 resolutionSet
  + [vmci.ko] Kill tasklet when unloading vmci module
  + [libvmbackup.so] Quiesced snapshots Skip freezing autofs mounts.
  + [vmhgfs.ko] make vmhgfs compatible with Linux kernel 4.2</changelog>
<changelog author="mlatimer@suse.com" date="1450872000">- Compile without gtkmm support for SLES12 based environments
  (which do not provide gtkmm2.4)</changelog>
<changelog author="dimstar@opensuse.org" date="1461153600">- Add open-vm-tools-posixly.patch: defined(linux) is not posix
  compliant and modern compilers no longer accept it. Change to
  defined(__linux__)
  https://github.com/vmware/open-vm-tools/pull/81
- Add open-vm-tools-buildsystem-fixup.patch: since libsigc++ injects
  - std=c++11 into CFLAGS, the various objects in open-vm-tools need
  to be split up a bit in order to not have a mixed C/C++ object
  receiving the same CFLAGS.</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- they renamed open-vm-tools-stable-10.0.5.tar.gz to
  stable-10.0.5.tar.gz -- fix .spec accordingly</changelog>
<changelog author="ken@suse.com" date="1461844800">- Update to 10.0.7 stable branch
  + Added namespace command line utility "vmware-namespace-cmd".</changelog>
<changelog author="afaerber@suse.de" date="1461931200">- Sanitize the filename handling some more. The official GitHub
  filename is open-vm-tools-stable-10.0.7.tar.gz.</changelog>
<changelog author="ken@suse.com" date="1465387200">- Update to 10.0.7-gtk3 stable branch
  + add support for gtk3, needed by the dndcp and resolutionset
    plugins
  + remove files generated by autoreconf
  + a few minor build fixes
- Update fixes copy-n-paste and drag-n-drop regressions (bsc#978424)
- Added new vmblock-fuse.service
- Drop upstream patches included (or not necessary) in 10.0.7-gtk3:
  + open-vm-tools-posixly.patch
  + open-vm-tools-buildsystem-fixup.patch</changelog>
<changelog author="ken@suse.com" date="1466078400">- Added patches for GCC 6 build failure (boo#985110)
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch</changelog>
<changelog author="ken@suse.com" date="1468411200">- Fix vmtoolsd init script to run vmtoolsd in background. (bsc#971031)
  + fix originally done in SLE-11-SP4 code base by tcech@suse.cz</changelog>
<changelog author="jcejka@suse.de" date="1478088000">- Add udev rule to increase VMware virtual disk timeout values
  (bsc#994598)
  [99-vmware-scsi-udev.rules]</changelog>
<changelog author="ken@suse.com" date="1478952000">- Updated to 10.1.0 stable release (boo#1011057)
  + vmware-namespace-cmd command line utility.
  + gtk3 support
  + Common Agent Framework (CAF)
  + guest authentication with xmlsec1
  + FreeBSD support
  + sub-command to push updated network information to the host on demand
  + udev rules for configuring SCSI timeouts in the guest
  + fixes for Ubuntu 16.10
  + Fix for quiesced snapshot failure leaving guest file system
    quiesced (bsc#1006796)
  + Fix for CVE-2015-5191 (bsc#1007600)
- Dropped upstream patches included (or not necessary) in 10.1.0:
  + vmw-bitmask-gcc6.patch
  + no-unused-const.patch
  + enable-gcc46+.patch</changelog>
<changelog author="ken@suse.com" date="1480593600">- Remove building KMP modules. No longer needed or wanted for
  current releases. User space tool vmhgfs-fuse has replaced the
  need for vmhgfs kernel module.</changelog>
<changelog author="sparschauer@suse.de" date="1481716800">- Report SLES12-SAP guest OS as SLES12 (bsc#1013496)
  + Report-SLES12-SAP-guest-OS-as-SLES12.patch</changelog>
<changelog author="ken@suse.com" date="1486468800">- Sumbitting update for SLE11SP4, SLE12SP1, SLE12SP2
  see fate#322214 &amp; fate#322218</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
<changelog author="ken@suse.com" date="1489060800">- Updated to 10.1.5 stable release (boo#1027987)
  + Authentication failure is reported as unknown general system error.
  + Unable to backup virtual machines with active Docker containers.</changelog>
<changelog author="ken@suse.com" date="1490616000">- fix build failure caused by upstream glibc change requiring
  explicit include of sys/sysmacros.h
  + glibc-sysmacros.patch</changelog>
<changelog author="ken@suse.com" date="1490961600">- Fix unowned /var/lib/vmware directory. (bsc#1028866)
- Fix package dependency for open-vm-tools on libvmtools0 (bsc#1031968)</changelog>
<changelog author="mlatimer@suse.com" date="1502798400">- Update to 10.1.10 stable release (boo#1051977, bsc#1052129)
  + Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED.
  + Exclude non-directory and non-existing paths during quiescing.
  + Fix timesync state to be uncalibrated when adjustment is large
    (&gt;60ms).
  + Fix an invalid class pointer access when the VSS provider is
    not installed.
  + Add support for the new selection target name "text/rtf" for
    copy/paste.
  + VMCI: reset datagram buffer pointer on dealloc
  + randomly generate tmp directory name
  + Previously Common Agent Framework (CAF) builds were linking against
    specific versions of PCRE and libiconv.  That restriction has been
    removed.
  + Reverts commit 7023998ba5594871a658c5ef1be4dbda6c0158eb to prevent
    intermittent hangs during soft reboots of RHEL 6.8 Linux VM.
  + Includes fix for VMs freezing during snapshots (bsc#1051627)
    (Thaw filesystems if the snapshot commit message to VMX fails.
    Commit b443e6456ffda66c0279032ab932ef271f8e1ae6)
- Drop unnecessary patch:
  + glibc-sysmacros.patch</changelog>
<changelog author="mlatimer@suse.com" date="1503316800">- open-vm-tools fails to correctly set screen resolution under
  Wayland environments (boo#1054800)
  + resolutionKMS-wayland.patch</changelog>

</package>
<package pkgid="271df307fd03261d3d400af3b9650522221f3825d36d786e00eefa2f78b2d131" name="openconnect" arch="src">
    <version epoch="0" ver="7.08" rel="7.1"/>

<changelog author="toddrme2178@gmail.com" date="1312804800">- Changed manuals to man1</changelog>
<changelog author="toddrme2178@gmail.com" date="1314273600">- Simplified man file installation
- Cleaned up spec file formatting</changelog>
<changelog author="toddrme2178@gmail.com" date="1325764800">- Update to version 3.15
  * Fix for reading multiple packets from Solaris tun device.
  * Call bindtextdomain() to ensure that translations are found in install path.
- Update to version 3.14
  * Move executable to $prefix/sbin.
  * Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD &amp; NetBSD.
  * Fix non-portable (void *) arithmetic.
  * Make more messages translatable.
  * Attempt to make NLS support more portable (with fewer dependencies).
- Update to version 3.13
  * Add --cert-expire-warning option.
  * Give visible warning when server dislikes client SSL certificate.
  * Add localisation support.
  * Fix build on Debian systems where dtls1_stop_timer() is not available.
  * Fix libproxy detection.
  * Enable a useful set of compiler warnings by default.
  * Fix various minor compiler warnings.
- Update to version 3.12
  * Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.
  * Fix build failures on GNU Hurd, on systems with ancient OpenSSL, and on Debian.
  * Add --pid-file option.
  * Print SHA1 fingerprint with server certificate details.
- spec file changes
  * Package language files in a lang package
  * Since the binary is in /usr/sbin, keep the manual as man8
  * Package .a file in -devel package and have -devel package provide -devel-static</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Fixes buffer overflow security vulnerability.  See:
  * CVE-2012-3291
  * BNC#767616
- Update to version 3.99
  * Enable native TPM support when built with GnuTLS.
  * Enable PKCS#11 token support when built with GnuTLS.
  * Eliminate all SSL library exposure through libopenconnect.
  * Parse split DNS information, provide $CISCO_SPLIT_DNS
    environment variable to vpnc-script.
  * Attempt to provide new-style MTU information to server (on
    Linux only, unless specified on command line).
  * Allow building against GnuTLS, including DTLS support.
  * Add --with-pkgconfigdir= option to configure for FreeBSD's
    benefit (fd#48743).
- Update to version 3.20
  * Cope with non-keepalive HTTP response on authentication success
  * Fix progress callback with incorrect cbdata which caused KDE
    crash.
- Update to version 3.19
  * Add --config option for reading options from file.
  * Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04.
  * Flush progress logging output promptly after each message.
  * Add symbol versioning for shared library (on sane platforms).
  * Add openconnect_set_cancel_fd() function to allow clean
    cancellation.
  * Fix corruption of URL in openconnect_parse_url() if it
    specifies a port number.
  * Fix inappropriate exit() calls from library code.
  * Library namespace cleanup ? all symbols now have the prefix
    openconnect_ on platforms where symbol versioning works.
  * Fix --non-inter option so it still uses login information from
    command line.
- Update to version 3.18
  * Fix autohate breakage with --disable-nls... hopefully.
  * Fix buffer overflow in banner handling.
- Update to version 3.17
  * Work around time() brokenness on Solaris.
  * Fix interface plumbing on Solaris 10.
  * Provide asprintf() function for (unpatched) Solaris 10.
  * Make vpnc-script mandatory, like it is for vpnc
  * Don't set Legacy IP address on tun device; let vpnc-script do
    it.
  * Detect OpenSSL even without pkg-config.
  * Stop building static library by default.
  * Invoke vpnc-script with "pre-init" reason to load tun module if
    necessary.
- Update to version 3.16
  * Fix build failure on Debian/kFreeBSD and Hurd.
  * Fix memory leak of deflated packets.
  * Fix memory leak of zlib state on CSTP reconnect.
  * Eliminate memcpy() calls on packets from DTLS and tunnel device
  * Use I_LINK instead of I_PLINK on Solaris to plumb interface for
    Legacy IP.
  * Plumb interface for IPv6 on Solaris, instead of expecting
    vpnc-script to do it.
  * Refer to vpnc-script and help web pages in openconnect output.
  * Fix potential crash when processing libproxy results.
  * Be more conservative in detecting libproxy without pkg-config.
- Add optional libproxy-devel buildrequires
- Add new mandatory vpnc buildrequires
- Package new documentation in doc package
- Remove static devel libraries since this is the new upstream
  default</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: LGPL-2.1+
  No LGPL-2.1 "only" licenses found. Fedora also uses LGPL-2.1 "or later"
  as license</changelog>
<changelog author="robert.munteanu@gmail.com" date="1367236800">- Fix bnc#817152
- Update to version 4.09
  * Fix overflow on HTTP request buffers (CVE-2012-6128)
  * Fix connection to servers with round-robin DNS with two-stage
    auth/connect.
  * Impose minimum MTU of 1280 bytes.
  * Fix some harmless issues reported by Coverity.
  * Improve "Attempting to connect..." message to be explicit
    when it's connecting to a proxy.
- Update to version 4.07
  * Fix segmentation fault when invoked with -p argument.
  * Fix handling of write stalls on CSTP (TCP) socket.
- Update to version 4.06
  * Fix default CA location for non-Fedora systems with old GnuTLS.
  * Improve error handing when vpnc-script exits with error.
  * Handle PKCS#11 tokens which won't list keys without login.
- Update to version 4.05
  * Use correct CSD script for Mac OS X.
  * Fix endless loop in PIN cache handling with multiple PKCS#11
    tokens.
  * Fix PKCS#11 URI handling to preserve all attributes.
  * Don't forget key password on GUI reconnect.
  * Fix GnuTLS v3 build on OpenBSD.
- Update to version 4.04
  * Fix GnuTLS password handling for PKCS#8 files.
- Update to version 4.03
  * Fix --no-proxy option.
  * Fix handling of requested vs. received MTU settings.
  * Fix DTLS MTU for GnuTLS 3.0.21 and newer.
  * Support more ciphers for OpenSSL encrypted PEM keys, with
    GnuTLS.
  * Fix GnuTLS compatibilty issue with servers that insist on
    TLSv1.0 or non-AES ciphers (RH#836558).
- Update to version 4.02
  * Fix build failure due to unconditional inclusion of
    &lt;gnutls/dtls.h&gt;.
- Update to version 4.01
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for
    GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs,
    even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.
- Update to version 4.00
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs, even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.</changelog>
<changelog author="rsalevsky@suse.com" date="1392033600">- Update to version 5.03
  * Fix crash on --authenticate due to freeing --cafile option in argv.
- Update to version 5.02
  * Fix XML POST issues with authgroups by falling back to old style login.
  * Fix --cookie-on-stdin with cookies from ocserv.
  * Fix reconnection to wrong host after redirect.
  * Reduce limit of queued packets on DTLS socket, to fix VoIP latency.
  * Fix Solaris build breakage due to missing &lt;string.h&gt; includes.
  * Include path in &lt;group-access&gt; node.
  * Include supporting CA certificates from PKCS#11 tokens (with GnuTLS 3.2.7+).
  * Fix possible heap overflow if MTU is increased on reconnection (CVE-2013-7098).
- Update to version 5.01
  * Attempt to handle &lt;client-cert-request&gt; in aggregate auth mode.
  * Don't include X-Aggregate-Auth: header in fallback mode.
  * Enable AES256 mode for DTLS with GnuTLS (RH#955710).
  * Add --dump-http-traffic option for debugging.
  * Be more permissive in parsing XML forms.
  * Use original URL when falling back to non-XML POST mode.
  * Add --no-xmlpost option to revert to older, compatible behaviour.
  * Close connection before falling back to non-xmlpost mode (RH#964650).
  * Improve error handling when server closes connection (Debian #708928).
- Update to version 5.00
  * Use GnuTLS by default instead of OpenSSL.
  * Avoid using deprecated gnutls_pubkey_verify_data() function.
  * Fix compatibility issues with XML POST authentication.
  * Fix memory leaks on realloc() failure.
  * Fix certificate validation problem caused by hostname canonicalisation.
  * Add RFC6238 TOTP token support using liboath.
  * Replace --stoken option with more generic --token-mode and --token-secret options.
- Update to version 4.99
  * Add --os switch to report a different OS type to the gateway.
  * Support new XML POST format.
  * Add SecurID token support using libstoken.</changelog>
<changelog author="rsalevsky@suse.com" date="1394020800">- Update to Version 5.99
  * Add RFC4226 HOTP token support.
  * Tolerate servers closing connection uncleanly after HTTP/1.0 response
  (Ubuntu #1225276).
  * Add support for IPv6 split tunnel configuration.
  * Add Windows support with MinGW (tested with both IPv6 and Legacy IP with
  latest vpnc-script-win.js)
  * Change library API to support updating the auth form when the authgroup
  is changed (Ubuntu #1229195).
  * Change --os mac to --os mac-intel, to match the identifier used by Cisco
  clients.
  * Add new API functions to support invoking the VPN mainloop directly from
  an application.
  * Add JNI interface and sample Java application.
  * Fix junk in --cookieonly output when CSD is enabled.
  * Enable TOTP, stoken, and JNI support in the Android builds.
  * Add --pfs option to enforce perfect forward secrecy.
  * Enable elliptic curves with GnuTLS 3.2.9+, where there is a workaround for
  certain firewalls that fail with client hellos between 256 and 512 bytes.
  * Add padding when sending password, to avoid leakage of password and
  username length.
  * Add support for DTLS 1.2 and AES-GCM when connecting to ocserv.
  * Add support for server name indication when compiled with GnuTLS 3.2.9+.</changelog>
<changelog author="rsalevsky@suse.com" date="1404907200">- Update to Version 6.00
  * Support SOCKS proxy authentication (password, GSSAPI).
  * Support HTTP proxy authentication (Basic, Digest, NTLM and GSSAPI).
  * Download XML profile in XML POST mode.
  * Fix a couple of bugs involving DTLS rekeying.
  * Fix problems seen when building or connecting without DTLS enabled.
  * Fix tun error handling on Windows hosts.
  * Skip password prompts when using PKCS#8 and PKCS#12 certificates with
  empty passwords.
  * Fix several minor memory leaks and error paths.
  * Update several Android dependencies, and make the download process more
  robust.</changelog>
<changelog author="darin@darins.net" date="1405425600">- Add token support via stoken</changelog>
<changelog author="rsalevsky@suse.com" date="1417694400">- Update to Version 7.00
  * Add support for GnuTLS 3.4 system: keys including Windows certificate store.
  * Add support for HOTP/TOTP keys from Yubikey NEO devices.
  * Add ---no-system-trust option to disable default certificate authorities.
  * Improve libiconv and libintl detection.
  * Stop calling setenv() from library functions.
  * Support utun driver on OS X.
  * Change library API so string ownership is never transferred.
  * Support new NDIS6 TAP-Windows driver shipped with OpenVPN 2.3.4.
  * Support using PSKC (RFC6030) token files for HOTP/TOTP tokens.
  * Support for updating HOTP token storage when token is used.
  * Support for reading OTP token data from a file.
  * Add full character set handling for legacy non-UTF8 systems (including Windows).
  * Fix legacy (i.e. not XML POST) submission of non-ASCII form entries (even in UTF-8 locales).
  * Avoid retrying without XML POST, when we failed to even reach the server.
  * Fix off-by-one in parameter substitution in error messages.
  * Improve reporting when GSSAPI auth requested but not compiled in.
  * Fix parsing of split include routes on Windows.
  * Fix crash on invocation with --token-mode but no --token-secret.</changelog>
<changelog author="rsalevsky@suse.com" date="1418212800">- Update to Version 7.01
  * Try harder to find a PKCS#11 key to match a given certificate.
  * Handle 'Connection: close' from proxies correctly.
  * Warn when MTU is set too low (&lt;1280) to permit IPv6 connectivity.
  * Add support for X-CSTP-DynDNS, to trigger DNS lookup on each reconnec</changelog>
<changelog author="rsalevsky@suse.com" date="1418990400">- Update to Version 7.02
  * Add PKCS#11 support for OpenSSL.
  * Fix handling of select options in openconnect_set_option_value().</changelog>
<changelog author="idonmez@suse.com" date="1421236800">- Update to Version 7.03
  * Clean up handling of incoming packets.
  * Fix issue with two-stage (i.e. NetworkManager) connection to
    servers with trick DNS (rh#1179681).
  * Stop using static variables for received packets.</changelog>
<changelog author="idonmez@suse.com" date="1422273600">- Update to Version 7.04
  * Change default behaviour to enable only stateless compression.
  * Add --compression argument and openconnect_set_compression_mode().
  * Add support for LZS compression
  * Add support for LZ4 compression
- Add liblz4-devel dependency for LZ4 compression support.</changelog>
<changelog author="idonmez@suse.com" date="1426075200">- Update to version 7.0.5
  * Fix alignment issue which broke LZS compression on ARM etc.
  * Support HTTP authentication to servers, not just proxies.
  * Add SHA256/SHA512 support for OATH.
  * Remove liboath dependency.
  * Support DTLS v1.2 and AES-GCM with OpenSSL 1.0.2.
  * Add OpenSSL 1.0.2 to known-broken releases (RT#3703, RT#3711).
  * Fix build with OpenSSL HEAD (OpenSSL 1.1.x).
  * Preliminary support for Juniper SSL VPN.</changelog>
<changelog author="idonmez@suse.com" date="1426593600">- Update to version 7.0.6
  * Fix openconnect.pc breakage after liboath removal.
  * Refactor Juniper Network Connect receive loop.
  * Fix some memory leaks.
  * Add Bosnian translation.</changelog>
<changelog author="fativi@gmail.com" date="1475582400">- Update to version 7.0.7
  * More fixes for OpenSSL 1.1 build.
  * Support Juniper "Post Sign-in Message".
  * Add --protocol option.
  * Fix ChaCha20-Poly1305 cipher suite to reflect final standard.
  * Add ability to disable IPv6 support via library API.
  * Set groups appropriately when using setuid().
  * Automatic DTLS MTU detection.
  * Support SSL client certificate authentication with Juniper servers.
  * Revamp SSL certificate validation for OpenSSL and stop supporting OpenSSL older than 0.9.8.
  * Fix handling of multiple DNS search domains with Network Connect.
  * Fix handling of large configuration packets for Network Connect.
  * Enable SNI when built with OpenSSL (1.0.1g or later).
  * Add --resolve and --local-hostname options to command line.
- juniper-fix-for-upstream-sources.patch included to fix upgraded Juniper servers
  * Submitted to upstream, not yet included in release</changelog>
<changelog author="fativi@gmail.com" date="1475582401">- Upgraded to 7.07, included fix for Juniper vpn</changelog>
<changelog author="i@marguerite.su" date="1481889600">- update to version 7.08 (bsc#1056389)
  * Add SHA256 support for server cert hashes.
  * Enable DHE ciphers for Cisco DTLS.
  * Increase initial oNCP configuration buffer size.
  * Improve support for point-to-point routing on Windows.
  * Check for non-resumed DTLS sessions which may indicate a MiTM attack.
  * Fix compatibility with Pulse Secure 8.2R5.
  * Support DTLS automatic negotiation.
  * Support --key-password for GnuTLS PKCS#11 PIN.
  * Support automatic DTLS MTU detection with OpenSSL.
  * Update OpenSSL to allow TLSv1.2, improve compatibility options.
  * Remove --no-cert-check option. It was being (mis)used.
  * Fix OpenSSL support for PKCS#11 EC keys without public key.
  * Fix polling/retry on "tun" socket when buffers full.
  * Fix AnyConnect server-side MTU setting.
  * Fix ESP replay detection.
  * Add certificate torture test suite.
  * Support PKCS#11 PIN via pin-value= and --key-password for OpenSSL.
  * Fix integer overflow issues with ESP packet replay detection.
  * Add --pass-tos option as in OpenVPN.
  * Support role selection form in Juniper VPN.
  * Support DER-format certificates, add certificate format torture tests.
  * For OpenSSL &gt;= 1.0.2, fix certificate validation when only an
    intermediate CA is specified with the --cafile option.
  * Support Juniper "Pre Sign-in Message".
- dropped juniper-fix-for-upstream-sources.patch, upstreamed</changelog>

</package>
<package pkgid="cd6e9db34619820c4ccc064e9ccbbb27313f80410b5b316abb71481b6e1d6e20" name="openconnect" arch="x86_64">
    <version epoch="0" ver="7.08" rel="7.1"/>

<changelog author="toddrme2178@gmail.com" date="1312804800">- Changed manuals to man1</changelog>
<changelog author="toddrme2178@gmail.com" date="1314273600">- Simplified man file installation
- Cleaned up spec file formatting</changelog>
<changelog author="toddrme2178@gmail.com" date="1325764800">- Update to version 3.15
  * Fix for reading multiple packets from Solaris tun device.
  * Call bindtextdomain() to ensure that translations are found in install path.
- Update to version 3.14
  * Move executable to $prefix/sbin.
  * Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD &amp; NetBSD.
  * Fix non-portable (void *) arithmetic.
  * Make more messages translatable.
  * Attempt to make NLS support more portable (with fewer dependencies).
- Update to version 3.13
  * Add --cert-expire-warning option.
  * Give visible warning when server dislikes client SSL certificate.
  * Add localisation support.
  * Fix build on Debian systems where dtls1_stop_timer() is not available.
  * Fix libproxy detection.
  * Enable a useful set of compiler warnings by default.
  * Fix various minor compiler warnings.
- Update to version 3.12
  * Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.
  * Fix build failures on GNU Hurd, on systems with ancient OpenSSL, and on Debian.
  * Add --pid-file option.
  * Print SHA1 fingerprint with server certificate details.
- spec file changes
  * Package language files in a lang package
  * Since the binary is in /usr/sbin, keep the manual as man8
  * Package .a file in -devel package and have -devel package provide -devel-static</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Fixes buffer overflow security vulnerability.  See:
  * CVE-2012-3291
  * BNC#767616
- Update to version 3.99
  * Enable native TPM support when built with GnuTLS.
  * Enable PKCS#11 token support when built with GnuTLS.
  * Eliminate all SSL library exposure through libopenconnect.
  * Parse split DNS information, provide $CISCO_SPLIT_DNS
    environment variable to vpnc-script.
  * Attempt to provide new-style MTU information to server (on
    Linux only, unless specified on command line).
  * Allow building against GnuTLS, including DTLS support.
  * Add --with-pkgconfigdir= option to configure for FreeBSD's
    benefit (fd#48743).
- Update to version 3.20
  * Cope with non-keepalive HTTP response on authentication success
  * Fix progress callback with incorrect cbdata which caused KDE
    crash.
- Update to version 3.19
  * Add --config option for reading options from file.
  * Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04.
  * Flush progress logging output promptly after each message.
  * Add symbol versioning for shared library (on sane platforms).
  * Add openconnect_set_cancel_fd() function to allow clean
    cancellation.
  * Fix corruption of URL in openconnect_parse_url() if it
    specifies a port number.
  * Fix inappropriate exit() calls from library code.
  * Library namespace cleanup ? all symbols now have the prefix
    openconnect_ on platforms where symbol versioning works.
  * Fix --non-inter option so it still uses login information from
    command line.
- Update to version 3.18
  * Fix autohate breakage with --disable-nls... hopefully.
  * Fix buffer overflow in banner handling.
- Update to version 3.17
  * Work around time() brokenness on Solaris.
  * Fix interface plumbing on Solaris 10.
  * Provide asprintf() function for (unpatched) Solaris 10.
  * Make vpnc-script mandatory, like it is for vpnc
  * Don't set Legacy IP address on tun device; let vpnc-script do
    it.
  * Detect OpenSSL even without pkg-config.
  * Stop building static library by default.
  * Invoke vpnc-script with "pre-init" reason to load tun module if
    necessary.
- Update to version 3.16
  * Fix build failure on Debian/kFreeBSD and Hurd.
  * Fix memory leak of deflated packets.
  * Fix memory leak of zlib state on CSTP reconnect.
  * Eliminate memcpy() calls on packets from DTLS and tunnel device
  * Use I_LINK instead of I_PLINK on Solaris to plumb interface for
    Legacy IP.
  * Plumb interface for IPv6 on Solaris, instead of expecting
    vpnc-script to do it.
  * Refer to vpnc-script and help web pages in openconnect output.
  * Fix potential crash when processing libproxy results.
  * Be more conservative in detecting libproxy without pkg-config.
- Add optional libproxy-devel buildrequires
- Add new mandatory vpnc buildrequires
- Package new documentation in doc package
- Remove static devel libraries since this is the new upstream
  default</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: LGPL-2.1+
  No LGPL-2.1 "only" licenses found. Fedora also uses LGPL-2.1 "or later"
  as license</changelog>
<changelog author="robert.munteanu@gmail.com" date="1367236800">- Fix bnc#817152
- Update to version 4.09
  * Fix overflow on HTTP request buffers (CVE-2012-6128)
  * Fix connection to servers with round-robin DNS with two-stage
    auth/connect.
  * Impose minimum MTU of 1280 bytes.
  * Fix some harmless issues reported by Coverity.
  * Improve "Attempting to connect..." message to be explicit
    when it's connecting to a proxy.
- Update to version 4.07
  * Fix segmentation fault when invoked with -p argument.
  * Fix handling of write stalls on CSTP (TCP) socket.
- Update to version 4.06
  * Fix default CA location for non-Fedora systems with old GnuTLS.
  * Improve error handing when vpnc-script exits with error.
  * Handle PKCS#11 tokens which won't list keys without login.
- Update to version 4.05
  * Use correct CSD script for Mac OS X.
  * Fix endless loop in PIN cache handling with multiple PKCS#11
    tokens.
  * Fix PKCS#11 URI handling to preserve all attributes.
  * Don't forget key password on GUI reconnect.
  * Fix GnuTLS v3 build on OpenBSD.
- Update to version 4.04
  * Fix GnuTLS password handling for PKCS#8 files.
- Update to version 4.03
  * Fix --no-proxy option.
  * Fix handling of requested vs. received MTU settings.
  * Fix DTLS MTU for GnuTLS 3.0.21 and newer.
  * Support more ciphers for OpenSSL encrypted PEM keys, with
    GnuTLS.
  * Fix GnuTLS compatibilty issue with servers that insist on
    TLSv1.0 or non-AES ciphers (RH#836558).
- Update to version 4.02
  * Fix build failure due to unconditional inclusion of
    &lt;gnutls/dtls.h&gt;.
- Update to version 4.01
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for
    GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs,
    even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.
- Update to version 4.00
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs, even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.</changelog>
<changelog author="rsalevsky@suse.com" date="1392033600">- Update to version 5.03
  * Fix crash on --authenticate due to freeing --cafile option in argv.
- Update to version 5.02
  * Fix XML POST issues with authgroups by falling back to old style login.
  * Fix --cookie-on-stdin with cookies from ocserv.
  * Fix reconnection to wrong host after redirect.
  * Reduce limit of queued packets on DTLS socket, to fix VoIP latency.
  * Fix Solaris build breakage due to missing &lt;string.h&gt; includes.
  * Include path in &lt;group-access&gt; node.
  * Include supporting CA certificates from PKCS#11 tokens (with GnuTLS 3.2.7+).
  * Fix possible heap overflow if MTU is increased on reconnection (CVE-2013-7098).
- Update to version 5.01
  * Attempt to handle &lt;client-cert-request&gt; in aggregate auth mode.
  * Don't include X-Aggregate-Auth: header in fallback mode.
  * Enable AES256 mode for DTLS with GnuTLS (RH#955710).
  * Add --dump-http-traffic option for debugging.
  * Be more permissive in parsing XML forms.
  * Use original URL when falling back to non-XML POST mode.
  * Add --no-xmlpost option to revert to older, compatible behaviour.
  * Close connection before falling back to non-xmlpost mode (RH#964650).
  * Improve error handling when server closes connection (Debian #708928).
- Update to version 5.00
  * Use GnuTLS by default instead of OpenSSL.
  * Avoid using deprecated gnutls_pubkey_verify_data() function.
  * Fix compatibility issues with XML POST authentication.
  * Fix memory leaks on realloc() failure.
  * Fix certificate validation problem caused by hostname canonicalisation.
  * Add RFC6238 TOTP token support using liboath.
  * Replace --stoken option with more generic --token-mode and --token-secret options.
- Update to version 4.99
  * Add --os switch to report a different OS type to the gateway.
  * Support new XML POST format.
  * Add SecurID token support using libstoken.</changelog>
<changelog author="rsalevsky@suse.com" date="1394020800">- Update to Version 5.99
  * Add RFC4226 HOTP token support.
  * Tolerate servers closing connection uncleanly after HTTP/1.0 response
  (Ubuntu #1225276).
  * Add support for IPv6 split tunnel configuration.
  * Add Windows support with MinGW (tested with both IPv6 and Legacy IP with
  latest vpnc-script-win.js)
  * Change library API to support updating the auth form when the authgroup
  is changed (Ubuntu #1229195).
  * Change --os mac to --os mac-intel, to match the identifier used by Cisco
  clients.
  * Add new API functions to support invoking the VPN mainloop directly from
  an application.
  * Add JNI interface and sample Java application.
  * Fix junk in --cookieonly output when CSD is enabled.
  * Enable TOTP, stoken, and JNI support in the Android builds.
  * Add --pfs option to enforce perfect forward secrecy.
  * Enable elliptic curves with GnuTLS 3.2.9+, where there is a workaround for
  certain firewalls that fail with client hellos between 256 and 512 bytes.
  * Add padding when sending password, to avoid leakage of password and
  username length.
  * Add support for DTLS 1.2 and AES-GCM when connecting to ocserv.
  * Add support for server name indication when compiled with GnuTLS 3.2.9+.</changelog>
<changelog author="rsalevsky@suse.com" date="1404907200">- Update to Version 6.00
  * Support SOCKS proxy authentication (password, GSSAPI).
  * Support HTTP proxy authentication (Basic, Digest, NTLM and GSSAPI).
  * Download XML profile in XML POST mode.
  * Fix a couple of bugs involving DTLS rekeying.
  * Fix problems seen when building or connecting without DTLS enabled.
  * Fix tun error handling on Windows hosts.
  * Skip password prompts when using PKCS#8 and PKCS#12 certificates with
  empty passwords.
  * Fix several minor memory leaks and error paths.
  * Update several Android dependencies, and make the download process more
  robust.</changelog>
<changelog author="darin@darins.net" date="1405425600">- Add token support via stoken</changelog>
<changelog author="rsalevsky@suse.com" date="1417694400">- Update to Version 7.00
  * Add support for GnuTLS 3.4 system: keys including Windows certificate store.
  * Add support for HOTP/TOTP keys from Yubikey NEO devices.
  * Add ---no-system-trust option to disable default certificate authorities.
  * Improve libiconv and libintl detection.
  * Stop calling setenv() from library functions.
  * Support utun driver on OS X.
  * Change library API so string ownership is never transferred.
  * Support new NDIS6 TAP-Windows driver shipped with OpenVPN 2.3.4.
  * Support using PSKC (RFC6030) token files for HOTP/TOTP tokens.
  * Support for updating HOTP token storage when token is used.
  * Support for reading OTP token data from a file.
  * Add full character set handling for legacy non-UTF8 systems (including Windows).
  * Fix legacy (i.e. not XML POST) submission of non-ASCII form entries (even in UTF-8 locales).
  * Avoid retrying without XML POST, when we failed to even reach the server.
  * Fix off-by-one in parameter substitution in error messages.
  * Improve reporting when GSSAPI auth requested but not compiled in.
  * Fix parsing of split include routes on Windows.
  * Fix crash on invocation with --token-mode but no --token-secret.</changelog>
<changelog author="rsalevsky@suse.com" date="1418212800">- Update to Version 7.01
  * Try harder to find a PKCS#11 key to match a given certificate.
  * Handle 'Connection: close' from proxies correctly.
  * Warn when MTU is set too low (&lt;1280) to permit IPv6 connectivity.
  * Add support for X-CSTP-DynDNS, to trigger DNS lookup on each reconnec</changelog>
<changelog author="rsalevsky@suse.com" date="1418990400">- Update to Version 7.02
  * Add PKCS#11 support for OpenSSL.
  * Fix handling of select options in openconnect_set_option_value().</changelog>
<changelog author="idonmez@suse.com" date="1421236800">- Update to Version 7.03
  * Clean up handling of incoming packets.
  * Fix issue with two-stage (i.e. NetworkManager) connection to
    servers with trick DNS (rh#1179681).
  * Stop using static variables for received packets.</changelog>
<changelog author="idonmez@suse.com" date="1422273600">- Update to Version 7.04
  * Change default behaviour to enable only stateless compression.
  * Add --compression argument and openconnect_set_compression_mode().
  * Add support for LZS compression
  * Add support for LZ4 compression
- Add liblz4-devel dependency for LZ4 compression support.</changelog>
<changelog author="idonmez@suse.com" date="1426075200">- Update to version 7.0.5
  * Fix alignment issue which broke LZS compression on ARM etc.
  * Support HTTP authentication to servers, not just proxies.
  * Add SHA256/SHA512 support for OATH.
  * Remove liboath dependency.
  * Support DTLS v1.2 and AES-GCM with OpenSSL 1.0.2.
  * Add OpenSSL 1.0.2 to known-broken releases (RT#3703, RT#3711).
  * Fix build with OpenSSL HEAD (OpenSSL 1.1.x).
  * Preliminary support for Juniper SSL VPN.</changelog>
<changelog author="idonmez@suse.com" date="1426593600">- Update to version 7.0.6
  * Fix openconnect.pc breakage after liboath removal.
  * Refactor Juniper Network Connect receive loop.
  * Fix some memory leaks.
  * Add Bosnian translation.</changelog>
<changelog author="fativi@gmail.com" date="1475582400">- Update to version 7.0.7
  * More fixes for OpenSSL 1.1 build.
  * Support Juniper "Post Sign-in Message".
  * Add --protocol option.
  * Fix ChaCha20-Poly1305 cipher suite to reflect final standard.
  * Add ability to disable IPv6 support via library API.
  * Set groups appropriately when using setuid().
  * Automatic DTLS MTU detection.
  * Support SSL client certificate authentication with Juniper servers.
  * Revamp SSL certificate validation for OpenSSL and stop supporting OpenSSL older than 0.9.8.
  * Fix handling of multiple DNS search domains with Network Connect.
  * Fix handling of large configuration packets for Network Connect.
  * Enable SNI when built with OpenSSL (1.0.1g or later).
  * Add --resolve and --local-hostname options to command line.
- juniper-fix-for-upstream-sources.patch included to fix upgraded Juniper servers
  * Submitted to upstream, not yet included in release</changelog>
<changelog author="fativi@gmail.com" date="1475582401">- Upgraded to 7.07, included fix for Juniper vpn</changelog>
<changelog author="i@marguerite.su" date="1481889600">- update to version 7.08 (bsc#1056389)
  * Add SHA256 support for server cert hashes.
  * Enable DHE ciphers for Cisco DTLS.
  * Increase initial oNCP configuration buffer size.
  * Improve support for point-to-point routing on Windows.
  * Check for non-resumed DTLS sessions which may indicate a MiTM attack.
  * Fix compatibility with Pulse Secure 8.2R5.
  * Support DTLS automatic negotiation.
  * Support --key-password for GnuTLS PKCS#11 PIN.
  * Support automatic DTLS MTU detection with OpenSSL.
  * Update OpenSSL to allow TLSv1.2, improve compatibility options.
  * Remove --no-cert-check option. It was being (mis)used.
  * Fix OpenSSL support for PKCS#11 EC keys without public key.
  * Fix polling/retry on "tun" socket when buffers full.
  * Fix AnyConnect server-side MTU setting.
  * Fix ESP replay detection.
  * Add certificate torture test suite.
  * Support PKCS#11 PIN via pin-value= and --key-password for OpenSSL.
  * Fix integer overflow issues with ESP packet replay detection.
  * Add --pass-tos option as in OpenVPN.
  * Support role selection form in Juniper VPN.
  * Support DER-format certificates, add certificate format torture tests.
  * For OpenSSL &gt;= 1.0.2, fix certificate validation when only an
    intermediate CA is specified with the --cafile option.
  * Support Juniper "Pre Sign-in Message".
- dropped juniper-fix-for-upstream-sources.patch, upstreamed</changelog>

</package>
<package pkgid="610fcb76d65231304d8f049732875492761be2ad099cb3c78eb68469a7a0c4bc" name="openconnect-devel" arch="x86_64">
    <version epoch="0" ver="7.08" rel="7.1"/>

<changelog author="toddrme2178@gmail.com" date="1312804800">- Changed manuals to man1</changelog>
<changelog author="toddrme2178@gmail.com" date="1314273600">- Simplified man file installation
- Cleaned up spec file formatting</changelog>
<changelog author="toddrme2178@gmail.com" date="1325764800">- Update to version 3.15
  * Fix for reading multiple packets from Solaris tun device.
  * Call bindtextdomain() to ensure that translations are found in install path.
- Update to version 3.14
  * Move executable to $prefix/sbin.
  * Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD &amp; NetBSD.
  * Fix non-portable (void *) arithmetic.
  * Make more messages translatable.
  * Attempt to make NLS support more portable (with fewer dependencies).
- Update to version 3.13
  * Add --cert-expire-warning option.
  * Give visible warning when server dislikes client SSL certificate.
  * Add localisation support.
  * Fix build on Debian systems where dtls1_stop_timer() is not available.
  * Fix libproxy detection.
  * Enable a useful set of compiler warnings by default.
  * Fix various minor compiler warnings.
- Update to version 3.12
  * Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.
  * Fix build failures on GNU Hurd, on systems with ancient OpenSSL, and on Debian.
  * Add --pid-file option.
  * Print SHA1 fingerprint with server certificate details.
- spec file changes
  * Package language files in a lang package
  * Since the binary is in /usr/sbin, keep the manual as man8
  * Package .a file in -devel package and have -devel package provide -devel-static</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Fixes buffer overflow security vulnerability.  See:
  * CVE-2012-3291
  * BNC#767616
- Update to version 3.99
  * Enable native TPM support when built with GnuTLS.
  * Enable PKCS#11 token support when built with GnuTLS.
  * Eliminate all SSL library exposure through libopenconnect.
  * Parse split DNS information, provide $CISCO_SPLIT_DNS
    environment variable to vpnc-script.
  * Attempt to provide new-style MTU information to server (on
    Linux only, unless specified on command line).
  * Allow building against GnuTLS, including DTLS support.
  * Add --with-pkgconfigdir= option to configure for FreeBSD's
    benefit (fd#48743).
- Update to version 3.20
  * Cope with non-keepalive HTTP response on authentication success
  * Fix progress callback with incorrect cbdata which caused KDE
    crash.
- Update to version 3.19
  * Add --config option for reading options from file.
  * Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04.
  * Flush progress logging output promptly after each message.
  * Add symbol versioning for shared library (on sane platforms).
  * Add openconnect_set_cancel_fd() function to allow clean
    cancellation.
  * Fix corruption of URL in openconnect_parse_url() if it
    specifies a port number.
  * Fix inappropriate exit() calls from library code.
  * Library namespace cleanup ? all symbols now have the prefix
    openconnect_ on platforms where symbol versioning works.
  * Fix --non-inter option so it still uses login information from
    command line.
- Update to version 3.18
  * Fix autohate breakage with --disable-nls... hopefully.
  * Fix buffer overflow in banner handling.
- Update to version 3.17
  * Work around time() brokenness on Solaris.
  * Fix interface plumbing on Solaris 10.
  * Provide asprintf() function for (unpatched) Solaris 10.
  * Make vpnc-script mandatory, like it is for vpnc
  * Don't set Legacy IP address on tun device; let vpnc-script do
    it.
  * Detect OpenSSL even without pkg-config.
  * Stop building static library by default.
  * Invoke vpnc-script with "pre-init" reason to load tun module if
    necessary.
- Update to version 3.16
  * Fix build failure on Debian/kFreeBSD and Hurd.
  * Fix memory leak of deflated packets.
  * Fix memory leak of zlib state on CSTP reconnect.
  * Eliminate memcpy() calls on packets from DTLS and tunnel device
  * Use I_LINK instead of I_PLINK on Solaris to plumb interface for
    Legacy IP.
  * Plumb interface for IPv6 on Solaris, instead of expecting
    vpnc-script to do it.
  * Refer to vpnc-script and help web pages in openconnect output.
  * Fix potential crash when processing libproxy results.
  * Be more conservative in detecting libproxy without pkg-config.
- Add optional libproxy-devel buildrequires
- Add new mandatory vpnc buildrequires
- Package new documentation in doc package
- Remove static devel libraries since this is the new upstream
  default</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: LGPL-2.1+
  No LGPL-2.1 "only" licenses found. Fedora also uses LGPL-2.1 "or later"
  as license</changelog>
<changelog author="robert.munteanu@gmail.com" date="1367236800">- Fix bnc#817152
- Update to version 4.09
  * Fix overflow on HTTP request buffers (CVE-2012-6128)
  * Fix connection to servers with round-robin DNS with two-stage
    auth/connect.
  * Impose minimum MTU of 1280 bytes.
  * Fix some harmless issues reported by Coverity.
  * Improve "Attempting to connect..." message to be explicit
    when it's connecting to a proxy.
- Update to version 4.07
  * Fix segmentation fault when invoked with -p argument.
  * Fix handling of write stalls on CSTP (TCP) socket.
- Update to version 4.06
  * Fix default CA location for non-Fedora systems with old GnuTLS.
  * Improve error handing when vpnc-script exits with error.
  * Handle PKCS#11 tokens which won't list keys without login.
- Update to version 4.05
  * Use correct CSD script for Mac OS X.
  * Fix endless loop in PIN cache handling with multiple PKCS#11
    tokens.
  * Fix PKCS#11 URI handling to preserve all attributes.
  * Don't forget key password on GUI reconnect.
  * Fix GnuTLS v3 build on OpenBSD.
- Update to version 4.04
  * Fix GnuTLS password handling for PKCS#8 files.
- Update to version 4.03
  * Fix --no-proxy option.
  * Fix handling of requested vs. received MTU settings.
  * Fix DTLS MTU for GnuTLS 3.0.21 and newer.
  * Support more ciphers for OpenSSL encrypted PEM keys, with
    GnuTLS.
  * Fix GnuTLS compatibilty issue with servers that insist on
    TLSv1.0 or non-AES ciphers (RH#836558).
- Update to version 4.02
  * Fix build failure due to unconditional inclusion of
    &lt;gnutls/dtls.h&gt;.
- Update to version 4.01
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for
    GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs,
    even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.
- Update to version 4.00
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs, even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.</changelog>
<changelog author="rsalevsky@suse.com" date="1392033600">- Update to version 5.03
  * Fix crash on --authenticate due to freeing --cafile option in argv.
- Update to version 5.02
  * Fix XML POST issues with authgroups by falling back to old style login.
  * Fix --cookie-on-stdin with cookies from ocserv.
  * Fix reconnection to wrong host after redirect.
  * Reduce limit of queued packets on DTLS socket, to fix VoIP latency.
  * Fix Solaris build breakage due to missing &lt;string.h&gt; includes.
  * Include path in &lt;group-access&gt; node.
  * Include supporting CA certificates from PKCS#11 tokens (with GnuTLS 3.2.7+).
  * Fix possible heap overflow if MTU is increased on reconnection (CVE-2013-7098).
- Update to version 5.01
  * Attempt to handle &lt;client-cert-request&gt; in aggregate auth mode.
  * Don't include X-Aggregate-Auth: header in fallback mode.
  * Enable AES256 mode for DTLS with GnuTLS (RH#955710).
  * Add --dump-http-traffic option for debugging.
  * Be more permissive in parsing XML forms.
  * Use original URL when falling back to non-XML POST mode.
  * Add --no-xmlpost option to revert to older, compatible behaviour.
  * Close connection before falling back to non-xmlpost mode (RH#964650).
  * Improve error handling when server closes connection (Debian #708928).
- Update to version 5.00
  * Use GnuTLS by default instead of OpenSSL.
  * Avoid using deprecated gnutls_pubkey_verify_data() function.
  * Fix compatibility issues with XML POST authentication.
  * Fix memory leaks on realloc() failure.
  * Fix certificate validation problem caused by hostname canonicalisation.
  * Add RFC6238 TOTP token support using liboath.
  * Replace --stoken option with more generic --token-mode and --token-secret options.
- Update to version 4.99
  * Add --os switch to report a different OS type to the gateway.
  * Support new XML POST format.
  * Add SecurID token support using libstoken.</changelog>
<changelog author="rsalevsky@suse.com" date="1394020800">- Update to Version 5.99
  * Add RFC4226 HOTP token support.
  * Tolerate servers closing connection uncleanly after HTTP/1.0 response
  (Ubuntu #1225276).
  * Add support for IPv6 split tunnel configuration.
  * Add Windows support with MinGW (tested with both IPv6 and Legacy IP with
  latest vpnc-script-win.js)
  * Change library API to support updating the auth form when the authgroup
  is changed (Ubuntu #1229195).
  * Change --os mac to --os mac-intel, to match the identifier used by Cisco
  clients.
  * Add new API functions to support invoking the VPN mainloop directly from
  an application.
  * Add JNI interface and sample Java application.
  * Fix junk in --cookieonly output when CSD is enabled.
  * Enable TOTP, stoken, and JNI support in the Android builds.
  * Add --pfs option to enforce perfect forward secrecy.
  * Enable elliptic curves with GnuTLS 3.2.9+, where there is a workaround for
  certain firewalls that fail with client hellos between 256 and 512 bytes.
  * Add padding when sending password, to avoid leakage of password and
  username length.
  * Add support for DTLS 1.2 and AES-GCM when connecting to ocserv.
  * Add support for server name indication when compiled with GnuTLS 3.2.9+.</changelog>
<changelog author="rsalevsky@suse.com" date="1404907200">- Update to Version 6.00
  * Support SOCKS proxy authentication (password, GSSAPI).
  * Support HTTP proxy authentication (Basic, Digest, NTLM and GSSAPI).
  * Download XML profile in XML POST mode.
  * Fix a couple of bugs involving DTLS rekeying.
  * Fix problems seen when building or connecting without DTLS enabled.
  * Fix tun error handling on Windows hosts.
  * Skip password prompts when using PKCS#8 and PKCS#12 certificates with
  empty passwords.
  * Fix several minor memory leaks and error paths.
  * Update several Android dependencies, and make the download process more
  robust.</changelog>
<changelog author="darin@darins.net" date="1405425600">- Add token support via stoken</changelog>
<changelog author="rsalevsky@suse.com" date="1417694400">- Update to Version 7.00
  * Add support for GnuTLS 3.4 system: keys including Windows certificate store.
  * Add support for HOTP/TOTP keys from Yubikey NEO devices.
  * Add ---no-system-trust option to disable default certificate authorities.
  * Improve libiconv and libintl detection.
  * Stop calling setenv() from library functions.
  * Support utun driver on OS X.
  * Change library API so string ownership is never transferred.
  * Support new NDIS6 TAP-Windows driver shipped with OpenVPN 2.3.4.
  * Support using PSKC (RFC6030) token files for HOTP/TOTP tokens.
  * Support for updating HOTP token storage when token is used.
  * Support for reading OTP token data from a file.
  * Add full character set handling for legacy non-UTF8 systems (including Windows).
  * Fix legacy (i.e. not XML POST) submission of non-ASCII form entries (even in UTF-8 locales).
  * Avoid retrying without XML POST, when we failed to even reach the server.
  * Fix off-by-one in parameter substitution in error messages.
  * Improve reporting when GSSAPI auth requested but not compiled in.
  * Fix parsing of split include routes on Windows.
  * Fix crash on invocation with --token-mode but no --token-secret.</changelog>
<changelog author="rsalevsky@suse.com" date="1418212800">- Update to Version 7.01
  * Try harder to find a PKCS#11 key to match a given certificate.
  * Handle 'Connection: close' from proxies correctly.
  * Warn when MTU is set too low (&lt;1280) to permit IPv6 connectivity.
  * Add support for X-CSTP-DynDNS, to trigger DNS lookup on each reconnec</changelog>
<changelog author="rsalevsky@suse.com" date="1418990400">- Update to Version 7.02
  * Add PKCS#11 support for OpenSSL.
  * Fix handling of select options in openconnect_set_option_value().</changelog>
<changelog author="idonmez@suse.com" date="1421236800">- Update to Version 7.03
  * Clean up handling of incoming packets.
  * Fix issue with two-stage (i.e. NetworkManager) connection to
    servers with trick DNS (rh#1179681).
  * Stop using static variables for received packets.</changelog>
<changelog author="idonmez@suse.com" date="1422273600">- Update to Version 7.04
  * Change default behaviour to enable only stateless compression.
  * Add --compression argument and openconnect_set_compression_mode().
  * Add support for LZS compression
  * Add support for LZ4 compression
- Add liblz4-devel dependency for LZ4 compression support.</changelog>
<changelog author="idonmez@suse.com" date="1426075200">- Update to version 7.0.5
  * Fix alignment issue which broke LZS compression on ARM etc.
  * Support HTTP authentication to servers, not just proxies.
  * Add SHA256/SHA512 support for OATH.
  * Remove liboath dependency.
  * Support DTLS v1.2 and AES-GCM with OpenSSL 1.0.2.
  * Add OpenSSL 1.0.2 to known-broken releases (RT#3703, RT#3711).
  * Fix build with OpenSSL HEAD (OpenSSL 1.1.x).
  * Preliminary support for Juniper SSL VPN.</changelog>
<changelog author="idonmez@suse.com" date="1426593600">- Update to version 7.0.6
  * Fix openconnect.pc breakage after liboath removal.
  * Refactor Juniper Network Connect receive loop.
  * Fix some memory leaks.
  * Add Bosnian translation.</changelog>
<changelog author="fativi@gmail.com" date="1475582400">- Update to version 7.0.7
  * More fixes for OpenSSL 1.1 build.
  * Support Juniper "Post Sign-in Message".
  * Add --protocol option.
  * Fix ChaCha20-Poly1305 cipher suite to reflect final standard.
  * Add ability to disable IPv6 support via library API.
  * Set groups appropriately when using setuid().
  * Automatic DTLS MTU detection.
  * Support SSL client certificate authentication with Juniper servers.
  * Revamp SSL certificate validation for OpenSSL and stop supporting OpenSSL older than 0.9.8.
  * Fix handling of multiple DNS search domains with Network Connect.
  * Fix handling of large configuration packets for Network Connect.
  * Enable SNI when built with OpenSSL (1.0.1g or later).
  * Add --resolve and --local-hostname options to command line.
- juniper-fix-for-upstream-sources.patch included to fix upgraded Juniper servers
  * Submitted to upstream, not yet included in release</changelog>
<changelog author="fativi@gmail.com" date="1475582401">- Upgraded to 7.07, included fix for Juniper vpn</changelog>
<changelog author="i@marguerite.su" date="1481889600">- update to version 7.08 (bsc#1056389)
  * Add SHA256 support for server cert hashes.
  * Enable DHE ciphers for Cisco DTLS.
  * Increase initial oNCP configuration buffer size.
  * Improve support for point-to-point routing on Windows.
  * Check for non-resumed DTLS sessions which may indicate a MiTM attack.
  * Fix compatibility with Pulse Secure 8.2R5.
  * Support DTLS automatic negotiation.
  * Support --key-password for GnuTLS PKCS#11 PIN.
  * Support automatic DTLS MTU detection with OpenSSL.
  * Update OpenSSL to allow TLSv1.2, improve compatibility options.
  * Remove --no-cert-check option. It was being (mis)used.
  * Fix OpenSSL support for PKCS#11 EC keys without public key.
  * Fix polling/retry on "tun" socket when buffers full.
  * Fix AnyConnect server-side MTU setting.
  * Fix ESP replay detection.
  * Add certificate torture test suite.
  * Support PKCS#11 PIN via pin-value= and --key-password for OpenSSL.
  * Fix integer overflow issues with ESP packet replay detection.
  * Add --pass-tos option as in OpenVPN.
  * Support role selection form in Juniper VPN.
  * Support DER-format certificates, add certificate format torture tests.
  * For OpenSSL &gt;= 1.0.2, fix certificate validation when only an
    intermediate CA is specified with the --cafile option.
  * Support Juniper "Pre Sign-in Message".
- dropped juniper-fix-for-upstream-sources.patch, upstreamed</changelog>

</package>
<package pkgid="20d3ee15af0a643ba3e9ecb3c48797d64f918c37e427b27043dd8a6599680d87" name="openconnect-doc" arch="x86_64">
    <version epoch="0" ver="7.08" rel="7.1"/>

<changelog author="toddrme2178@gmail.com" date="1312804800">- Changed manuals to man1</changelog>
<changelog author="toddrme2178@gmail.com" date="1314273600">- Simplified man file installation
- Cleaned up spec file formatting</changelog>
<changelog author="toddrme2178@gmail.com" date="1325764800">- Update to version 3.15
  * Fix for reading multiple packets from Solaris tun device.
  * Call bindtextdomain() to ensure that translations are found in install path.
- Update to version 3.14
  * Move executable to $prefix/sbin.
  * Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD &amp; NetBSD.
  * Fix non-portable (void *) arithmetic.
  * Make more messages translatable.
  * Attempt to make NLS support more portable (with fewer dependencies).
- Update to version 3.13
  * Add --cert-expire-warning option.
  * Give visible warning when server dislikes client SSL certificate.
  * Add localisation support.
  * Fix build on Debian systems where dtls1_stop_timer() is not available.
  * Fix libproxy detection.
  * Enable a useful set of compiler warnings by default.
  * Fix various minor compiler warnings.
- Update to version 3.12
  * Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.
  * Fix build failures on GNU Hurd, on systems with ancient OpenSSL, and on Debian.
  * Add --pid-file option.
  * Print SHA1 fingerprint with server certificate details.
- spec file changes
  * Package language files in a lang package
  * Since the binary is in /usr/sbin, keep the manual as man8
  * Package .a file in -devel package and have -devel package provide -devel-static</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Fixes buffer overflow security vulnerability.  See:
  * CVE-2012-3291
  * BNC#767616
- Update to version 3.99
  * Enable native TPM support when built with GnuTLS.
  * Enable PKCS#11 token support when built with GnuTLS.
  * Eliminate all SSL library exposure through libopenconnect.
  * Parse split DNS information, provide $CISCO_SPLIT_DNS
    environment variable to vpnc-script.
  * Attempt to provide new-style MTU information to server (on
    Linux only, unless specified on command line).
  * Allow building against GnuTLS, including DTLS support.
  * Add --with-pkgconfigdir= option to configure for FreeBSD's
    benefit (fd#48743).
- Update to version 3.20
  * Cope with non-keepalive HTTP response on authentication success
  * Fix progress callback with incorrect cbdata which caused KDE
    crash.
- Update to version 3.19
  * Add --config option for reading options from file.
  * Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04.
  * Flush progress logging output promptly after each message.
  * Add symbol versioning for shared library (on sane platforms).
  * Add openconnect_set_cancel_fd() function to allow clean
    cancellation.
  * Fix corruption of URL in openconnect_parse_url() if it
    specifies a port number.
  * Fix inappropriate exit() calls from library code.
  * Library namespace cleanup ? all symbols now have the prefix
    openconnect_ on platforms where symbol versioning works.
  * Fix --non-inter option so it still uses login information from
    command line.
- Update to version 3.18
  * Fix autohate breakage with --disable-nls... hopefully.
  * Fix buffer overflow in banner handling.
- Update to version 3.17
  * Work around time() brokenness on Solaris.
  * Fix interface plumbing on Solaris 10.
  * Provide asprintf() function for (unpatched) Solaris 10.
  * Make vpnc-script mandatory, like it is for vpnc
  * Don't set Legacy IP address on tun device; let vpnc-script do
    it.
  * Detect OpenSSL even without pkg-config.
  * Stop building static library by default.
  * Invoke vpnc-script with "pre-init" reason to load tun module if
    necessary.
- Update to version 3.16
  * Fix build failure on Debian/kFreeBSD and Hurd.
  * Fix memory leak of deflated packets.
  * Fix memory leak of zlib state on CSTP reconnect.
  * Eliminate memcpy() calls on packets from DTLS and tunnel device
  * Use I_LINK instead of I_PLINK on Solaris to plumb interface for
    Legacy IP.
  * Plumb interface for IPv6 on Solaris, instead of expecting
    vpnc-script to do it.
  * Refer to vpnc-script and help web pages in openconnect output.
  * Fix potential crash when processing libproxy results.
  * Be more conservative in detecting libproxy without pkg-config.
- Add optional libproxy-devel buildrequires
- Add new mandatory vpnc buildrequires
- Package new documentation in doc package
- Remove static devel libraries since this is the new upstream
  default</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: LGPL-2.1+
  No LGPL-2.1 "only" licenses found. Fedora also uses LGPL-2.1 "or later"
  as license</changelog>
<changelog author="robert.munteanu@gmail.com" date="1367236800">- Fix bnc#817152
- Update to version 4.09
  * Fix overflow on HTTP request buffers (CVE-2012-6128)
  * Fix connection to servers with round-robin DNS with two-stage
    auth/connect.
  * Impose minimum MTU of 1280 bytes.
  * Fix some harmless issues reported by Coverity.
  * Improve "Attempting to connect..." message to be explicit
    when it's connecting to a proxy.
- Update to version 4.07
  * Fix segmentation fault when invoked with -p argument.
  * Fix handling of write stalls on CSTP (TCP) socket.
- Update to version 4.06
  * Fix default CA location for non-Fedora systems with old GnuTLS.
  * Improve error handing when vpnc-script exits with error.
  * Handle PKCS#11 tokens which won't list keys without login.
- Update to version 4.05
  * Use correct CSD script for Mac OS X.
  * Fix endless loop in PIN cache handling with multiple PKCS#11
    tokens.
  * Fix PKCS#11 URI handling to preserve all attributes.
  * Don't forget key password on GUI reconnect.
  * Fix GnuTLS v3 build on OpenBSD.
- Update to version 4.04
  * Fix GnuTLS password handling for PKCS#8 files.
- Update to version 4.03
  * Fix --no-proxy option.
  * Fix handling of requested vs. received MTU settings.
  * Fix DTLS MTU for GnuTLS 3.0.21 and newer.
  * Support more ciphers for OpenSSL encrypted PEM keys, with
    GnuTLS.
  * Fix GnuTLS compatibilty issue with servers that insist on
    TLSv1.0 or non-AES ciphers (RH#836558).
- Update to version 4.02
  * Fix build failure due to unconditional inclusion of
    &lt;gnutls/dtls.h&gt;.
- Update to version 4.01
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for
    GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs,
    even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.
- Update to version 4.00
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs, even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.</changelog>
<changelog author="rsalevsky@suse.com" date="1392033600">- Update to version 5.03
  * Fix crash on --authenticate due to freeing --cafile option in argv.
- Update to version 5.02
  * Fix XML POST issues with authgroups by falling back to old style login.
  * Fix --cookie-on-stdin with cookies from ocserv.
  * Fix reconnection to wrong host after redirect.
  * Reduce limit of queued packets on DTLS socket, to fix VoIP latency.
  * Fix Solaris build breakage due to missing &lt;string.h&gt; includes.
  * Include path in &lt;group-access&gt; node.
  * Include supporting CA certificates from PKCS#11 tokens (with GnuTLS 3.2.7+).
  * Fix possible heap overflow if MTU is increased on reconnection (CVE-2013-7098).
- Update to version 5.01
  * Attempt to handle &lt;client-cert-request&gt; in aggregate auth mode.
  * Don't include X-Aggregate-Auth: header in fallback mode.
  * Enable AES256 mode for DTLS with GnuTLS (RH#955710).
  * Add --dump-http-traffic option for debugging.
  * Be more permissive in parsing XML forms.
  * Use original URL when falling back to non-XML POST mode.
  * Add --no-xmlpost option to revert to older, compatible behaviour.
  * Close connection before falling back to non-xmlpost mode (RH#964650).
  * Improve error handling when server closes connection (Debian #708928).
- Update to version 5.00
  * Use GnuTLS by default instead of OpenSSL.
  * Avoid using deprecated gnutls_pubkey_verify_data() function.
  * Fix compatibility issues with XML POST authentication.
  * Fix memory leaks on realloc() failure.
  * Fix certificate validation problem caused by hostname canonicalisation.
  * Add RFC6238 TOTP token support using liboath.
  * Replace --stoken option with more generic --token-mode and --token-secret options.
- Update to version 4.99
  * Add --os switch to report a different OS type to the gateway.
  * Support new XML POST format.
  * Add SecurID token support using libstoken.</changelog>
<changelog author="rsalevsky@suse.com" date="1394020800">- Update to Version 5.99
  * Add RFC4226 HOTP token support.
  * Tolerate servers closing connection uncleanly after HTTP/1.0 response
  (Ubuntu #1225276).
  * Add support for IPv6 split tunnel configuration.
  * Add Windows support with MinGW (tested with both IPv6 and Legacy IP with
  latest vpnc-script-win.js)
  * Change library API to support updating the auth form when the authgroup
  is changed (Ubuntu #1229195).
  * Change --os mac to --os mac-intel, to match the identifier used by Cisco
  clients.
  * Add new API functions to support invoking the VPN mainloop directly from
  an application.
  * Add JNI interface and sample Java application.
  * Fix junk in --cookieonly output when CSD is enabled.
  * Enable TOTP, stoken, and JNI support in the Android builds.
  * Add --pfs option to enforce perfect forward secrecy.
  * Enable elliptic curves with GnuTLS 3.2.9+, where there is a workaround for
  certain firewalls that fail with client hellos between 256 and 512 bytes.
  * Add padding when sending password, to avoid leakage of password and
  username length.
  * Add support for DTLS 1.2 and AES-GCM when connecting to ocserv.
  * Add support for server name indication when compiled with GnuTLS 3.2.9+.</changelog>
<changelog author="rsalevsky@suse.com" date="1404907200">- Update to Version 6.00
  * Support SOCKS proxy authentication (password, GSSAPI).
  * Support HTTP proxy authentication (Basic, Digest, NTLM and GSSAPI).
  * Download XML profile in XML POST mode.
  * Fix a couple of bugs involving DTLS rekeying.
  * Fix problems seen when building or connecting without DTLS enabled.
  * Fix tun error handling on Windows hosts.
  * Skip password prompts when using PKCS#8 and PKCS#12 certificates with
  empty passwords.
  * Fix several minor memory leaks and error paths.
  * Update several Android dependencies, and make the download process more
  robust.</changelog>
<changelog author="darin@darins.net" date="1405425600">- Add token support via stoken</changelog>
<changelog author="rsalevsky@suse.com" date="1417694400">- Update to Version 7.00
  * Add support for GnuTLS 3.4 system: keys including Windows certificate store.
  * Add support for HOTP/TOTP keys from Yubikey NEO devices.
  * Add ---no-system-trust option to disable default certificate authorities.
  * Improve libiconv and libintl detection.
  * Stop calling setenv() from library functions.
  * Support utun driver on OS X.
  * Change library API so string ownership is never transferred.
  * Support new NDIS6 TAP-Windows driver shipped with OpenVPN 2.3.4.
  * Support using PSKC (RFC6030) token files for HOTP/TOTP tokens.
  * Support for updating HOTP token storage when token is used.
  * Support for reading OTP token data from a file.
  * Add full character set handling for legacy non-UTF8 systems (including Windows).
  * Fix legacy (i.e. not XML POST) submission of non-ASCII form entries (even in UTF-8 locales).
  * Avoid retrying without XML POST, when we failed to even reach the server.
  * Fix off-by-one in parameter substitution in error messages.
  * Improve reporting when GSSAPI auth requested but not compiled in.
  * Fix parsing of split include routes on Windows.
  * Fix crash on invocation with --token-mode but no --token-secret.</changelog>
<changelog author="rsalevsky@suse.com" date="1418212800">- Update to Version 7.01
  * Try harder to find a PKCS#11 key to match a given certificate.
  * Handle 'Connection: close' from proxies correctly.
  * Warn when MTU is set too low (&lt;1280) to permit IPv6 connectivity.
  * Add support for X-CSTP-DynDNS, to trigger DNS lookup on each reconnec</changelog>
<changelog author="rsalevsky@suse.com" date="1418990400">- Update to Version 7.02
  * Add PKCS#11 support for OpenSSL.
  * Fix handling of select options in openconnect_set_option_value().</changelog>
<changelog author="idonmez@suse.com" date="1421236800">- Update to Version 7.03
  * Clean up handling of incoming packets.
  * Fix issue with two-stage (i.e. NetworkManager) connection to
    servers with trick DNS (rh#1179681).
  * Stop using static variables for received packets.</changelog>
<changelog author="idonmez@suse.com" date="1422273600">- Update to Version 7.04
  * Change default behaviour to enable only stateless compression.
  * Add --compression argument and openconnect_set_compression_mode().
  * Add support for LZS compression
  * Add support for LZ4 compression
- Add liblz4-devel dependency for LZ4 compression support.</changelog>
<changelog author="idonmez@suse.com" date="1426075200">- Update to version 7.0.5
  * Fix alignment issue which broke LZS compression on ARM etc.
  * Support HTTP authentication to servers, not just proxies.
  * Add SHA256/SHA512 support for OATH.
  * Remove liboath dependency.
  * Support DTLS v1.2 and AES-GCM with OpenSSL 1.0.2.
  * Add OpenSSL 1.0.2 to known-broken releases (RT#3703, RT#3711).
  * Fix build with OpenSSL HEAD (OpenSSL 1.1.x).
  * Preliminary support for Juniper SSL VPN.</changelog>
<changelog author="idonmez@suse.com" date="1426593600">- Update to version 7.0.6
  * Fix openconnect.pc breakage after liboath removal.
  * Refactor Juniper Network Connect receive loop.
  * Fix some memory leaks.
  * Add Bosnian translation.</changelog>
<changelog author="fativi@gmail.com" date="1475582400">- Update to version 7.0.7
  * More fixes for OpenSSL 1.1 build.
  * Support Juniper "Post Sign-in Message".
  * Add --protocol option.
  * Fix ChaCha20-Poly1305 cipher suite to reflect final standard.
  * Add ability to disable IPv6 support via library API.
  * Set groups appropriately when using setuid().
  * Automatic DTLS MTU detection.
  * Support SSL client certificate authentication with Juniper servers.
  * Revamp SSL certificate validation for OpenSSL and stop supporting OpenSSL older than 0.9.8.
  * Fix handling of multiple DNS search domains with Network Connect.
  * Fix handling of large configuration packets for Network Connect.
  * Enable SNI when built with OpenSSL (1.0.1g or later).
  * Add --resolve and --local-hostname options to command line.
- juniper-fix-for-upstream-sources.patch included to fix upgraded Juniper servers
  * Submitted to upstream, not yet included in release</changelog>
<changelog author="fativi@gmail.com" date="1475582401">- Upgraded to 7.07, included fix for Juniper vpn</changelog>
<changelog author="i@marguerite.su" date="1481889600">- update to version 7.08 (bsc#1056389)
  * Add SHA256 support for server cert hashes.
  * Enable DHE ciphers for Cisco DTLS.
  * Increase initial oNCP configuration buffer size.
  * Improve support for point-to-point routing on Windows.
  * Check for non-resumed DTLS sessions which may indicate a MiTM attack.
  * Fix compatibility with Pulse Secure 8.2R5.
  * Support DTLS automatic negotiation.
  * Support --key-password for GnuTLS PKCS#11 PIN.
  * Support automatic DTLS MTU detection with OpenSSL.
  * Update OpenSSL to allow TLSv1.2, improve compatibility options.
  * Remove --no-cert-check option. It was being (mis)used.
  * Fix OpenSSL support for PKCS#11 EC keys without public key.
  * Fix polling/retry on "tun" socket when buffers full.
  * Fix AnyConnect server-side MTU setting.
  * Fix ESP replay detection.
  * Add certificate torture test suite.
  * Support PKCS#11 PIN via pin-value= and --key-password for OpenSSL.
  * Fix integer overflow issues with ESP packet replay detection.
  * Add --pass-tos option as in OpenVPN.
  * Support role selection form in Juniper VPN.
  * Support DER-format certificates, add certificate format torture tests.
  * For OpenSSL &gt;= 1.0.2, fix certificate validation when only an
    intermediate CA is specified with the --cafile option.
  * Support Juniper "Pre Sign-in Message".
- dropped juniper-fix-for-upstream-sources.patch, upstreamed</changelog>

</package>
<package pkgid="3ea71eff2469a5402d351575b93e6d2ffe3256806eddf75bd9ee1a7810764bd6" name="openconnect-lang" arch="noarch">
    <version epoch="0" ver="7.08" rel="7.1"/>

<changelog author="toddrme2178@gmail.com" date="1312804800">- Changed manuals to man1</changelog>
<changelog author="toddrme2178@gmail.com" date="1314273600">- Simplified man file installation
- Cleaned up spec file formatting</changelog>
<changelog author="toddrme2178@gmail.com" date="1325764800">- Update to version 3.15
  * Fix for reading multiple packets from Solaris tun device.
  * Call bindtextdomain() to ensure that translations are found in install path.
- Update to version 3.14
  * Move executable to $prefix/sbin.
  * Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD &amp; NetBSD.
  * Fix non-portable (void *) arithmetic.
  * Make more messages translatable.
  * Attempt to make NLS support more portable (with fewer dependencies).
- Update to version 3.13
  * Add --cert-expire-warning option.
  * Give visible warning when server dislikes client SSL certificate.
  * Add localisation support.
  * Fix build on Debian systems where dtls1_stop_timer() is not available.
  * Fix libproxy detection.
  * Enable a useful set of compiler warnings by default.
  * Fix various minor compiler warnings.
- Update to version 3.12
  * Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.
  * Fix build failures on GNU Hurd, on systems with ancient OpenSSL, and on Debian.
  * Add --pid-file option.
  * Print SHA1 fingerprint with server certificate details.
- spec file changes
  * Package language files in a lang package
  * Since the binary is in /usr/sbin, keep the manual as man8
  * Package .a file in -devel package and have -devel package provide -devel-static</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Fixes buffer overflow security vulnerability.  See:
  * CVE-2012-3291
  * BNC#767616
- Update to version 3.99
  * Enable native TPM support when built with GnuTLS.
  * Enable PKCS#11 token support when built with GnuTLS.
  * Eliminate all SSL library exposure through libopenconnect.
  * Parse split DNS information, provide $CISCO_SPLIT_DNS
    environment variable to vpnc-script.
  * Attempt to provide new-style MTU information to server (on
    Linux only, unless specified on command line).
  * Allow building against GnuTLS, including DTLS support.
  * Add --with-pkgconfigdir= option to configure for FreeBSD's
    benefit (fd#48743).
- Update to version 3.20
  * Cope with non-keepalive HTTP response on authentication success
  * Fix progress callback with incorrect cbdata which caused KDE
    crash.
- Update to version 3.19
  * Add --config option for reading options from file.
  * Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04.
  * Flush progress logging output promptly after each message.
  * Add symbol versioning for shared library (on sane platforms).
  * Add openconnect_set_cancel_fd() function to allow clean
    cancellation.
  * Fix corruption of URL in openconnect_parse_url() if it
    specifies a port number.
  * Fix inappropriate exit() calls from library code.
  * Library namespace cleanup ? all symbols now have the prefix
    openconnect_ on platforms where symbol versioning works.
  * Fix --non-inter option so it still uses login information from
    command line.
- Update to version 3.18
  * Fix autohate breakage with --disable-nls... hopefully.
  * Fix buffer overflow in banner handling.
- Update to version 3.17
  * Work around time() brokenness on Solaris.
  * Fix interface plumbing on Solaris 10.
  * Provide asprintf() function for (unpatched) Solaris 10.
  * Make vpnc-script mandatory, like it is for vpnc
  * Don't set Legacy IP address on tun device; let vpnc-script do
    it.
  * Detect OpenSSL even without pkg-config.
  * Stop building static library by default.
  * Invoke vpnc-script with "pre-init" reason to load tun module if
    necessary.
- Update to version 3.16
  * Fix build failure on Debian/kFreeBSD and Hurd.
  * Fix memory leak of deflated packets.
  * Fix memory leak of zlib state on CSTP reconnect.
  * Eliminate memcpy() calls on packets from DTLS and tunnel device
  * Use I_LINK instead of I_PLINK on Solaris to plumb interface for
    Legacy IP.
  * Plumb interface for IPv6 on Solaris, instead of expecting
    vpnc-script to do it.
  * Refer to vpnc-script and help web pages in openconnect output.
  * Fix potential crash when processing libproxy results.
  * Be more conservative in detecting libproxy without pkg-config.
- Add optional libproxy-devel buildrequires
- Add new mandatory vpnc buildrequires
- Package new documentation in doc package
- Remove static devel libraries since this is the new upstream
  default</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: LGPL-2.1+
  No LGPL-2.1 "only" licenses found. Fedora also uses LGPL-2.1 "or later"
  as license</changelog>
<changelog author="robert.munteanu@gmail.com" date="1367236800">- Fix bnc#817152
- Update to version 4.09
  * Fix overflow on HTTP request buffers (CVE-2012-6128)
  * Fix connection to servers with round-robin DNS with two-stage
    auth/connect.
  * Impose minimum MTU of 1280 bytes.
  * Fix some harmless issues reported by Coverity.
  * Improve "Attempting to connect..." message to be explicit
    when it's connecting to a proxy.
- Update to version 4.07
  * Fix segmentation fault when invoked with -p argument.
  * Fix handling of write stalls on CSTP (TCP) socket.
- Update to version 4.06
  * Fix default CA location for non-Fedora systems with old GnuTLS.
  * Improve error handing when vpnc-script exits with error.
  * Handle PKCS#11 tokens which won't list keys without login.
- Update to version 4.05
  * Use correct CSD script for Mac OS X.
  * Fix endless loop in PIN cache handling with multiple PKCS#11
    tokens.
  * Fix PKCS#11 URI handling to preserve all attributes.
  * Don't forget key password on GUI reconnect.
  * Fix GnuTLS v3 build on OpenBSD.
- Update to version 4.04
  * Fix GnuTLS password handling for PKCS#8 files.
- Update to version 4.03
  * Fix --no-proxy option.
  * Fix handling of requested vs. received MTU settings.
  * Fix DTLS MTU for GnuTLS 3.0.21 and newer.
  * Support more ciphers for OpenSSL encrypted PEM keys, with
    GnuTLS.
  * Fix GnuTLS compatibilty issue with servers that insist on
    TLSv1.0 or non-AES ciphers (RH#836558).
- Update to version 4.02
  * Fix build failure due to unconditional inclusion of
    &lt;gnutls/dtls.h&gt;.
- Update to version 4.01
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for
    GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs,
    even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.
- Update to version 4.00
  * Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS.
  * Fix repeated passphrase retry for OpenSSL.
  * Add keystore support for Android.
  * Support TPM, and also additional checks on PKCS#11 certs, even with GnuTLS 2.12.
  * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.</changelog>
<changelog author="rsalevsky@suse.com" date="1392033600">- Update to version 5.03
  * Fix crash on --authenticate due to freeing --cafile option in argv.
- Update to version 5.02
  * Fix XML POST issues with authgroups by falling back to old style login.
  * Fix --cookie-on-stdin with cookies from ocserv.
  * Fix reconnection to wrong host after redirect.
  * Reduce limit of queued packets on DTLS socket, to fix VoIP latency.
  * Fix Solaris build breakage due to missing &lt;string.h&gt; includes.
  * Include path in &lt;group-access&gt; node.
  * Include supporting CA certificates from PKCS#11 tokens (with GnuTLS 3.2.7+).
  * Fix possible heap overflow if MTU is increased on reconnection (CVE-2013-7098).
- Update to version 5.01
  * Attempt to handle &lt;client-cert-request&gt; in aggregate auth mode.
  * Don't include X-Aggregate-Auth: header in fallback mode.
  * Enable AES256 mode for DTLS with GnuTLS (RH#955710).
  * Add --dump-http-traffic option for debugging.
  * Be more permissive in parsing XML forms.
  * Use original URL when falling back to non-XML POST mode.
  * Add --no-xmlpost option to revert to older, compatible behaviour.
  * Close connection before falling back to non-xmlpost mode (RH#964650).
  * Improve error handling when server closes connection (Debian #708928).
- Update to version 5.00
  * Use GnuTLS by default instead of OpenSSL.
  * Avoid using deprecated gnutls_pubkey_verify_data() function.
  * Fix compatibility issues with XML POST authentication.
  * Fix memory leaks on realloc() failure.
  * Fix certificate validation problem caused by hostname canonicalisation.
  * Add RFC6238 TOTP token support using liboath.
  * Replace --stoken option with more generic --token-mode and --token-secret options.
- Update to version 4.99
  * Add --os switch to report a different OS type to the gateway.
  * Support new XML POST format.
  * Add SecurID token support using libstoken.</changelog>
<changelog author="rsalevsky@suse.com" date="1394020800">- Update to Version 5.99
  * Add RFC4226 HOTP token support.
  * Tolerate servers closing connection uncleanly after HTTP/1.0 response
  (Ubuntu #1225276).
  * Add support for IPv6 split tunnel configuration.
  * Add Windows support with MinGW (tested with both IPv6 and Legacy IP with
  latest vpnc-script-win.js)
  * Change library API to support updating the auth form when the authgroup
  is changed (Ubuntu #1229195).
  * Change --os mac to --os mac-intel, to match the identifier used by Cisco
  clients.
  * Add new API functions to support invoking the VPN mainloop directly from
  an application.
  * Add JNI interface and sample Java application.
  * Fix junk in --cookieonly output when CSD is enabled.
  * Enable TOTP, stoken, and JNI support in the Android builds.
  * Add --pfs option to enforce perfect forward secrecy.
  * Enable elliptic curves with GnuTLS 3.2.9+, where there is a workaround for
  certain firewalls that fail with client hellos between 256 and 512 bytes.
  * Add padding when sending password, to avoid leakage of password and
  username length.
  * Add support for DTLS 1.2 and AES-GCM when connecting to ocserv.
  * Add support for server name indication when compiled with GnuTLS 3.2.9+.</changelog>
<changelog author="rsalevsky@suse.com" date="1404907200">- Update to Version 6.00
  * Support SOCKS proxy authentication (password, GSSAPI).
  * Support HTTP proxy authentication (Basic, Digest, NTLM and GSSAPI).
  * Download XML profile in XML POST mode.
  * Fix a couple of bugs involving DTLS rekeying.
  * Fix problems seen when building or connecting without DTLS enabled.
  * Fix tun error handling on Windows hosts.
  * Skip password prompts when using PKCS#8 and PKCS#12 certificates with
  empty passwords.
  * Fix several minor memory leaks and error paths.
  * Update several Android dependencies, and make the download process more
  robust.</changelog>
<changelog author="darin@darins.net" date="1405425600">- Add token support via stoken</changelog>
<changelog author="rsalevsky@suse.com" date="1417694400">- Update to Version 7.00
  * Add support for GnuTLS 3.4 system: keys including Windows certificate store.
  * Add support for HOTP/TOTP keys from Yubikey NEO devices.
  * Add ---no-system-trust option to disable default certificate authorities.
  * Improve libiconv and libintl detection.
  * Stop calling setenv() from library functions.
  * Support utun driver on OS X.
  * Change library API so string ownership is never transferred.
  * Support new NDIS6 TAP-Windows driver shipped with OpenVPN 2.3.4.
  * Support using PSKC (RFC6030) token files for HOTP/TOTP tokens.
  * Support for updating HOTP token storage when token is used.
  * Support for reading OTP token data from a file.
  * Add full character set handling for legacy non-UTF8 systems (including Windows).
  * Fix legacy (i.e. not XML POST) submission of non-ASCII form entries (even in UTF-8 locales).
  * Avoid retrying without XML POST, when we failed to even reach the server.
  * Fix off-by-one in parameter substitution in error messages.
  * Improve reporting when GSSAPI auth requested but not compiled in.
  * Fix parsing of split include routes on Windows.
  * Fix crash on invocation with --token-mode but no --token-secret.</changelog>
<changelog author="rsalevsky@suse.com" date="1418212800">- Update to Version 7.01
  * Try harder to find a PKCS#11 key to match a given certificate.
  * Handle 'Connection: close' from proxies correctly.
  * Warn when MTU is set too low (&lt;1280) to permit IPv6 connectivity.
  * Add support for X-CSTP-DynDNS, to trigger DNS lookup on each reconnec</changelog>
<changelog author="rsalevsky@suse.com" date="1418990400">- Update to Version 7.02
  * Add PKCS#11 support for OpenSSL.
  * Fix handling of select options in openconnect_set_option_value().</changelog>
<changelog author="idonmez@suse.com" date="1421236800">- Update to Version 7.03
  * Clean up handling of incoming packets.
  * Fix issue with two-stage (i.e. NetworkManager) connection to
    servers with trick DNS (rh#1179681).
  * Stop using static variables for received packets.</changelog>
<changelog author="idonmez@suse.com" date="1422273600">- Update to Version 7.04
  * Change default behaviour to enable only stateless compression.
  * Add --compression argument and openconnect_set_compression_mode().
  * Add support for LZS compression
  * Add support for LZ4 compression
- Add liblz4-devel dependency for LZ4 compression support.</changelog>
<changelog author="idonmez@suse.com" date="1426075200">- Update to version 7.0.5
  * Fix alignment issue which broke LZS compression on ARM etc.
  * Support HTTP authentication to servers, not just proxies.
  * Add SHA256/SHA512 support for OATH.
  * Remove liboath dependency.
  * Support DTLS v1.2 and AES-GCM with OpenSSL 1.0.2.
  * Add OpenSSL 1.0.2 to known-broken releases (RT#3703, RT#3711).
  * Fix build with OpenSSL HEAD (OpenSSL 1.1.x).
  * Preliminary support for Juniper SSL VPN.</changelog>
<changelog author="idonmez@suse.com" date="1426593600">- Update to version 7.0.6
  * Fix openconnect.pc breakage after liboath removal.
  * Refactor Juniper Network Connect receive loop.
  * Fix some memory leaks.
  * Add Bosnian translation.</changelog>
<changelog author="fativi@gmail.com" date="1475582400">- Update to version 7.0.7
  * More fixes for OpenSSL 1.1 build.
  * Support Juniper "Post Sign-in Message".
  * Add --protocol option.
  * Fix ChaCha20-Poly1305 cipher suite to reflect final standard.
  * Add ability to disable IPv6 support via library API.
  * Set groups appropriately when using setuid().
  * Automatic DTLS MTU detection.
  * Support SSL client certificate authentication with Juniper servers.
  * Revamp SSL certificate validation for OpenSSL and stop supporting OpenSSL older than 0.9.8.
  * Fix handling of multiple DNS search domains with Network Connect.
  * Fix handling of large configuration packets for Network Connect.
  * Enable SNI when built with OpenSSL (1.0.1g or later).
  * Add --resolve and --local-hostname options to command line.
- juniper-fix-for-upstream-sources.patch included to fix upgraded Juniper servers
  * Submitted to upstream, not yet included in release</changelog>
<changelog author="fativi@gmail.com" date="1475582401">- Upgraded to 7.07, included fix for Juniper vpn</changelog>
<changelog author="i@marguerite.su" date="1481889600">- update to version 7.08 (bsc#1056389)
  * Add SHA256 support for server cert hashes.
  * Enable DHE ciphers for Cisco DTLS.
  * Increase initial oNCP configuration buffer size.
  * Improve support for point-to-point routing on Windows.
  * Check for non-resumed DTLS sessions which may indicate a MiTM attack.
  * Fix compatibility with Pulse Secure 8.2R5.
  * Support DTLS automatic negotiation.
  * Support --key-password for GnuTLS PKCS#11 PIN.
  * Support automatic DTLS MTU detection with OpenSSL.
  * Update OpenSSL to allow TLSv1.2, improve compatibility options.
  * Remove --no-cert-check option. It was being (mis)used.
  * Fix OpenSSL support for PKCS#11 EC keys without public key.
  * Fix polling/retry on "tun" socket when buffers full.
  * Fix AnyConnect server-side MTU setting.
  * Fix ESP replay detection.
  * Add certificate torture test suite.
  * Support PKCS#11 PIN via pin-value= and --key-password for OpenSSL.
  * Fix integer overflow issues with ESP packet replay detection.
  * Add --pass-tos option as in OpenVPN.
  * Support role selection form in Juniper VPN.
  * Support DER-format certificates, add certificate format torture tests.
  * For OpenSSL &gt;= 1.0.2, fix certificate validation when only an
    intermediate CA is specified with the --cafile option.
  * Support Juniper "Pre Sign-in Message".
- dropped juniper-fix-for-upstream-sources.patch, upstreamed</changelog>

</package>
<package pkgid="71dea816087e00d3308322a9b70bd8dac44d20731ae5c641775daa51ebbc563f" name="openjpeg" arch="src">
    <version epoch="0" ver="1.5.2" rel="10.1"/>

<changelog author="asterios.dramis@gmail.com" date="1318507200">- Initial release (version 1.4).
- Added 5 patches (taken from upstream and Fedora):
  * openjpeg-1.4-OpenJPEGConfig.patch -- Fix OpenJPEGConfig.cmake
  * openjpeg-1.4-cmake_symlink_fix.patch -- Fix cmake create_symlink usage for
    header file
  * fix_no_undefined.patch -- Fix libopenjpeg undefined references
  * fix_soversion.patch -- Fix so version to 1 instead of 1.4
  * install_pkgconfig_file.patch -- Fix cmake to install pkgconfig file(s)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322740800">- Removed the JavaOpenJPEG/ directory from the package source (fix for
  bnc#733009 - openjpg contains Sun proprietary code).</changelog>
<changelog author="cfarrell@suse.com" date="1323172800">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="asterios.dramis@gmail.com" date="1330344000">- Update to version 1.5.0:
  New Features:
  * openjpip:
    + complete client-server architecture for remote browsing of jpeg 2000
    images.
    + see corresponding README for more details.
  API modifications:
  * 'bool' type has been replaced by 'opj_bool' type. 'stdbool.h' is no more
    required.
  Misc:
  * improved cmake and autotools build methods.
  * removed manual makefiles, VS project files and XCode project files.
  * added a 'thirdparty' directory to contain all dependencies.
    + These libraries will be build only if there are not found on the system.
    + Note that libopenjpeg itself does not have any dependency.
  * changed the directory hierarchy of the whole project. See README files for
    details.
  * tests : a complete test suite has been setup.
    + both JPEG 2000 conformance tests and non-regressions tests are
    configured.
    + results are submitted to the OpenJPEG dashboard
    (http://my.cdash.org/index.php?project=OPENJPEG)
    + images are located in 'http://openjpeg.googlecode.com/svn/data' folder.
    + configuration files and utilities are located in 'tests' folder.
  * OPJViewer re-activated (need wxWidgets)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * fix_no_undefined.patch
  * fix_soversion.patch
  * install_pkgconfig_file.patch
- Replaced openjpeg-1.4-OpenJPEGConfig.patch with
  openjpeg-1.5.0-cmake_Config.patch (taken from Fedora)
- Replaced openjpeg-1.4-cmake_symlink_fix.patch with
  openjpeg-1.5.0-cmake_header_symlink.patch (taken from Fedora)
- Added 2 patches (taken from Fedora):
  * openjpeg-1.5.0-cmake_libdir.patch -- Fix installation directories
  * openjpeg-1.5.0-pkgconfig_includedir.patch -- Fix includedir in pkgconfig
    file
- Spec file updates:
  * Added doxygen in BuildRequires: to enable compilation of devel docs.
  * Updated BuildRequires: to include also liblcms2-devel and zlib-devel.
  * Fixed rpmlint warning "file-contains-date-and-time"
- No need to remove the JavaOpenJPEG/ directory from the package source anymore
  (the Sun proprietary code was removed from the package).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1340884800">- Added a patch (heap_corruption_fix.patch) to fix heap corruption when
  processing certain Gray16 TIFF images - (CVE-2009-5030), (bnc#757260).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1342008000">- Added a patch (heap_buffer_overflow_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3358), (bnc#770649).</changelog>
<changelog author="idonmez@suse.com" date="1342526400">- Add baselibs.conf</changelog>
<changelog author="asterios.dramis@gmail.com" date="1347364800">- Added a patch (heap_buffer_overflow_2_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3535), (bnc#777445).</changelog>
<changelog author="sleep_walker@suse.cz" date="1347883200">- fix fedora build</changelog>
<changelog author="asterios.dramis@gmail.com" date="1350302400">- Update to version 1.5.1:
  Security:
  * Fixes: CVE-2012-3535
  * Fixes: CVE-2012-3358
  New Features:
  * Use a new API scheme and solve the SOVERSIONing in OpenJPEG
  * Allow better integration with multi-arch system
  * Compile &amp; Install Java bindings (CMake)
  * Install required addXMLinJP2 (JPIP)
  Misc:
  * Fix linker error by resolving all symbols (eg. missing -lm)
  * Fix some man page typos
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * heap_buffer_overflow_fix.patch
  * heap_buffer_overflow_2_fix.patch
  * heap_corruption_fix.patch
  * openjpeg-1.5.0-cmake_Config.patch
  * openjpeg-1.5.0-cmake_libdir.patch
  * openjpeg-1.5.0-pkgconfig_includedir.patch
- Replaced openjpeg-1.5.0-cmake_header_symlink.patch with a fix inside the spec
  file.
- Removed symlink from %{_includedir}/openjpeg-1.5 to %{_includedir}/openjpeg
  (not needed).
- Added the following patches (taken from Fedora):
  * openjpeg-1.5.1-cmake_libdir.patch
    Fix libopenjpeg.pc symlink
  * openjpeg-1.5.1-soname.patch
    Revert soname bump compared to 1.5.0 release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353326400">- do fdupes only for SUSE distributions</changelog>
<changelog author="vpereira@novell.com" date="1389355200">- Security:
  * Patches openjpeg-1.5.1-cve-2013-6045-1.patch and
    openjpeg-1.5.1-cve-2013-6045-2.patch fix heap overflow
    described in  CVE-2013-6045, bnc#853838.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1392206400">- Added the following security patches (based also on Redhat/Fedora patches):
  * openjpeg-1.5-r2029.patch
    From upstream. Fix issue 155, jp2_read_boxhdr() can trigger random pointer
    memory access
  * openjpeg-1.5-r2032.patch
    From upstream. Fix issue 169, division by zero in j2k_read_siz
  * openjpeg-1.5-r2033.patch
    From upstream. Fix issue 166, missing range check in j2k_read_coc et al
  * CVE-2013-1447.patch
    Fix multiple denial of service flaws, CVE-2013-1447, bnc#853834
  * CVE-2013-6052.patch
    Fix heap OOB reads, information leaks, CVE-2013-6052, bnc#853644
  * CVE-2013-6053.patch
    Fix heap OOB reads, information leaks, CVE-2013-6053, bnc#853644
  * CVE-2013-6887.patch
    Fix multiple denial of service flaws, CVE-2013-6887, bnc#853644
- Removed part of openjpeg-1.5.1-cve-2013-6045-1.patch that is already
  upstream, included in openjpeg-1.5-r2033.patch (slightly modified).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 1.5.2:
  Security:
  * Fixes: CVE-2013-4289 CVE-2013-4290
  * Fixes: CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6054
    CVE-2013-6053 CVE-2013-6887
  New Features:
  * Compile Java with source/target specific java version
  * Do not set SONAME for Java module, fix linking (missing math lib)
  * Support some BMP/RGB8 files
  * Fix compilation on ARM
  Misc:
  * Remove BSD-4 license from getopt copy, since upstream switched to BSD-3
  * Support compilation against system installed getopt
  * Fix Big Endian checking (autotools)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * openjpeg-1.5-r2029.patch
  * openjpeg-1.5-r2032.patch
  * openjpeg-1.5-r2033.patch
  * openjpeg-1.5.1-cve-2013-6045-1.patch
  * openjpeg-1.5.1-cve-2013-6045-2.patch
  * CVE-2013-6052.patch
  * CVE-2013-6053.patch
  * CVE-2013-1447.patch
  * CVE-2013-6887.patch</changelog>
<changelog author="mpluskal@suse.com" date="1425297600">- Use cmake macros for building
- Small spec file cleanups, use pkgconfig style dependencies</changelog>
<changelog author="hpj@suse.com" date="1474459200">- Add openjpeg-bsc999817-cve2016-7445-null-deref.patch
  (bsc#999817, CVE-2016-7445).</changelog>
<changelog author="astieger@suse.com" date="1505908800">- Add patch to fix ffast-math issue bsc#1029609 bsc#1059440:
  * openjpeg-fast-math.patch</changelog>

</package>
<package pkgid="740afc38bc685e8e597b84b0422af41be656656369a64812a90872234b352022" name="openjpeg" arch="x86_64">
    <version epoch="0" ver="1.5.2" rel="10.1"/>

<changelog author="asterios.dramis@gmail.com" date="1318507200">- Initial release (version 1.4).
- Added 5 patches (taken from upstream and Fedora):
  * openjpeg-1.4-OpenJPEGConfig.patch -- Fix OpenJPEGConfig.cmake
  * openjpeg-1.4-cmake_symlink_fix.patch -- Fix cmake create_symlink usage for
    header file
  * fix_no_undefined.patch -- Fix libopenjpeg undefined references
  * fix_soversion.patch -- Fix so version to 1 instead of 1.4
  * install_pkgconfig_file.patch -- Fix cmake to install pkgconfig file(s)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322740800">- Removed the JavaOpenJPEG/ directory from the package source (fix for
  bnc#733009 - openjpg contains Sun proprietary code).</changelog>
<changelog author="cfarrell@suse.com" date="1323172800">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="asterios.dramis@gmail.com" date="1330344000">- Update to version 1.5.0:
  New Features:
  * openjpip:
    + complete client-server architecture for remote browsing of jpeg 2000
    images.
    + see corresponding README for more details.
  API modifications:
  * 'bool' type has been replaced by 'opj_bool' type. 'stdbool.h' is no more
    required.
  Misc:
  * improved cmake and autotools build methods.
  * removed manual makefiles, VS project files and XCode project files.
  * added a 'thirdparty' directory to contain all dependencies.
    + These libraries will be build only if there are not found on the system.
    + Note that libopenjpeg itself does not have any dependency.
  * changed the directory hierarchy of the whole project. See README files for
    details.
  * tests : a complete test suite has been setup.
    + both JPEG 2000 conformance tests and non-regressions tests are
    configured.
    + results are submitted to the OpenJPEG dashboard
    (http://my.cdash.org/index.php?project=OPENJPEG)
    + images are located in 'http://openjpeg.googlecode.com/svn/data' folder.
    + configuration files and utilities are located in 'tests' folder.
  * OPJViewer re-activated (need wxWidgets)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * fix_no_undefined.patch
  * fix_soversion.patch
  * install_pkgconfig_file.patch
- Replaced openjpeg-1.4-OpenJPEGConfig.patch with
  openjpeg-1.5.0-cmake_Config.patch (taken from Fedora)
- Replaced openjpeg-1.4-cmake_symlink_fix.patch with
  openjpeg-1.5.0-cmake_header_symlink.patch (taken from Fedora)
- Added 2 patches (taken from Fedora):
  * openjpeg-1.5.0-cmake_libdir.patch -- Fix installation directories
  * openjpeg-1.5.0-pkgconfig_includedir.patch -- Fix includedir in pkgconfig
    file
- Spec file updates:
  * Added doxygen in BuildRequires: to enable compilation of devel docs.
  * Updated BuildRequires: to include also liblcms2-devel and zlib-devel.
  * Fixed rpmlint warning "file-contains-date-and-time"
- No need to remove the JavaOpenJPEG/ directory from the package source anymore
  (the Sun proprietary code was removed from the package).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1340884800">- Added a patch (heap_corruption_fix.patch) to fix heap corruption when
  processing certain Gray16 TIFF images - (CVE-2009-5030), (bnc#757260).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1342008000">- Added a patch (heap_buffer_overflow_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3358), (bnc#770649).</changelog>
<changelog author="idonmez@suse.com" date="1342526400">- Add baselibs.conf</changelog>
<changelog author="asterios.dramis@gmail.com" date="1347364800">- Added a patch (heap_buffer_overflow_2_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3535), (bnc#777445).</changelog>
<changelog author="sleep_walker@suse.cz" date="1347883200">- fix fedora build</changelog>
<changelog author="asterios.dramis@gmail.com" date="1350302400">- Update to version 1.5.1:
  Security:
  * Fixes: CVE-2012-3535
  * Fixes: CVE-2012-3358
  New Features:
  * Use a new API scheme and solve the SOVERSIONing in OpenJPEG
  * Allow better integration with multi-arch system
  * Compile &amp; Install Java bindings (CMake)
  * Install required addXMLinJP2 (JPIP)
  Misc:
  * Fix linker error by resolving all symbols (eg. missing -lm)
  * Fix some man page typos
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * heap_buffer_overflow_fix.patch
  * heap_buffer_overflow_2_fix.patch
  * heap_corruption_fix.patch
  * openjpeg-1.5.0-cmake_Config.patch
  * openjpeg-1.5.0-cmake_libdir.patch
  * openjpeg-1.5.0-pkgconfig_includedir.patch
- Replaced openjpeg-1.5.0-cmake_header_symlink.patch with a fix inside the spec
  file.
- Removed symlink from %{_includedir}/openjpeg-1.5 to %{_includedir}/openjpeg
  (not needed).
- Added the following patches (taken from Fedora):
  * openjpeg-1.5.1-cmake_libdir.patch
    Fix libopenjpeg.pc symlink
  * openjpeg-1.5.1-soname.patch
    Revert soname bump compared to 1.5.0 release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353326400">- do fdupes only for SUSE distributions</changelog>
<changelog author="vpereira@novell.com" date="1389355200">- Security:
  * Patches openjpeg-1.5.1-cve-2013-6045-1.patch and
    openjpeg-1.5.1-cve-2013-6045-2.patch fix heap overflow
    described in  CVE-2013-6045, bnc#853838.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1392206400">- Added the following security patches (based also on Redhat/Fedora patches):
  * openjpeg-1.5-r2029.patch
    From upstream. Fix issue 155, jp2_read_boxhdr() can trigger random pointer
    memory access
  * openjpeg-1.5-r2032.patch
    From upstream. Fix issue 169, division by zero in j2k_read_siz
  * openjpeg-1.5-r2033.patch
    From upstream. Fix issue 166, missing range check in j2k_read_coc et al
  * CVE-2013-1447.patch
    Fix multiple denial of service flaws, CVE-2013-1447, bnc#853834
  * CVE-2013-6052.patch
    Fix heap OOB reads, information leaks, CVE-2013-6052, bnc#853644
  * CVE-2013-6053.patch
    Fix heap OOB reads, information leaks, CVE-2013-6053, bnc#853644
  * CVE-2013-6887.patch
    Fix multiple denial of service flaws, CVE-2013-6887, bnc#853644
- Removed part of openjpeg-1.5.1-cve-2013-6045-1.patch that is already
  upstream, included in openjpeg-1.5-r2033.patch (slightly modified).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 1.5.2:
  Security:
  * Fixes: CVE-2013-4289 CVE-2013-4290
  * Fixes: CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6054
    CVE-2013-6053 CVE-2013-6887
  New Features:
  * Compile Java with source/target specific java version
  * Do not set SONAME for Java module, fix linking (missing math lib)
  * Support some BMP/RGB8 files
  * Fix compilation on ARM
  Misc:
  * Remove BSD-4 license from getopt copy, since upstream switched to BSD-3
  * Support compilation against system installed getopt
  * Fix Big Endian checking (autotools)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * openjpeg-1.5-r2029.patch
  * openjpeg-1.5-r2032.patch
  * openjpeg-1.5-r2033.patch
  * openjpeg-1.5.1-cve-2013-6045-1.patch
  * openjpeg-1.5.1-cve-2013-6045-2.patch
  * CVE-2013-6052.patch
  * CVE-2013-6053.patch
  * CVE-2013-1447.patch
  * CVE-2013-6887.patch</changelog>
<changelog author="mpluskal@suse.com" date="1425297600">- Use cmake macros for building
- Small spec file cleanups, use pkgconfig style dependencies</changelog>
<changelog author="hpj@suse.com" date="1474459200">- Add openjpeg-bsc999817-cve2016-7445-null-deref.patch
  (bsc#999817, CVE-2016-7445).</changelog>
<changelog author="astieger@suse.com" date="1505908800">- Add patch to fix ffast-math issue bsc#1029609 bsc#1059440:
  * openjpeg-fast-math.patch</changelog>

</package>
<package pkgid="f0b05eee6dbd7b4c1647f674f5f14986b29957362ec4f5b74488d734bace5a38" name="openjpeg-devel" arch="x86_64">
    <version epoch="0" ver="1.5.2" rel="10.1"/>

<changelog author="asterios.dramis@gmail.com" date="1318507200">- Initial release (version 1.4).
- Added 5 patches (taken from upstream and Fedora):
  * openjpeg-1.4-OpenJPEGConfig.patch -- Fix OpenJPEGConfig.cmake
  * openjpeg-1.4-cmake_symlink_fix.patch -- Fix cmake create_symlink usage for
    header file
  * fix_no_undefined.patch -- Fix libopenjpeg undefined references
  * fix_soversion.patch -- Fix so version to 1 instead of 1.4
  * install_pkgconfig_file.patch -- Fix cmake to install pkgconfig file(s)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322740800">- Removed the JavaOpenJPEG/ directory from the package source (fix for
  bnc#733009 - openjpg contains Sun proprietary code).</changelog>
<changelog author="cfarrell@suse.com" date="1323172800">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="asterios.dramis@gmail.com" date="1330344000">- Update to version 1.5.0:
  New Features:
  * openjpip:
    + complete client-server architecture for remote browsing of jpeg 2000
    images.
    + see corresponding README for more details.
  API modifications:
  * 'bool' type has been replaced by 'opj_bool' type. 'stdbool.h' is no more
    required.
  Misc:
  * improved cmake and autotools build methods.
  * removed manual makefiles, VS project files and XCode project files.
  * added a 'thirdparty' directory to contain all dependencies.
    + These libraries will be build only if there are not found on the system.
    + Note that libopenjpeg itself does not have any dependency.
  * changed the directory hierarchy of the whole project. See README files for
    details.
  * tests : a complete test suite has been setup.
    + both JPEG 2000 conformance tests and non-regressions tests are
    configured.
    + results are submitted to the OpenJPEG dashboard
    (http://my.cdash.org/index.php?project=OPENJPEG)
    + images are located in 'http://openjpeg.googlecode.com/svn/data' folder.
    + configuration files and utilities are located in 'tests' folder.
  * OPJViewer re-activated (need wxWidgets)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * fix_no_undefined.patch
  * fix_soversion.patch
  * install_pkgconfig_file.patch
- Replaced openjpeg-1.4-OpenJPEGConfig.patch with
  openjpeg-1.5.0-cmake_Config.patch (taken from Fedora)
- Replaced openjpeg-1.4-cmake_symlink_fix.patch with
  openjpeg-1.5.0-cmake_header_symlink.patch (taken from Fedora)
- Added 2 patches (taken from Fedora):
  * openjpeg-1.5.0-cmake_libdir.patch -- Fix installation directories
  * openjpeg-1.5.0-pkgconfig_includedir.patch -- Fix includedir in pkgconfig
    file
- Spec file updates:
  * Added doxygen in BuildRequires: to enable compilation of devel docs.
  * Updated BuildRequires: to include also liblcms2-devel and zlib-devel.
  * Fixed rpmlint warning "file-contains-date-and-time"
- No need to remove the JavaOpenJPEG/ directory from the package source anymore
  (the Sun proprietary code was removed from the package).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1340884800">- Added a patch (heap_corruption_fix.patch) to fix heap corruption when
  processing certain Gray16 TIFF images - (CVE-2009-5030), (bnc#757260).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1342008000">- Added a patch (heap_buffer_overflow_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3358), (bnc#770649).</changelog>
<changelog author="idonmez@suse.com" date="1342526400">- Add baselibs.conf</changelog>
<changelog author="asterios.dramis@gmail.com" date="1347364800">- Added a patch (heap_buffer_overflow_2_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3535), (bnc#777445).</changelog>
<changelog author="sleep_walker@suse.cz" date="1347883200">- fix fedora build</changelog>
<changelog author="asterios.dramis@gmail.com" date="1350302400">- Update to version 1.5.1:
  Security:
  * Fixes: CVE-2012-3535
  * Fixes: CVE-2012-3358
  New Features:
  * Use a new API scheme and solve the SOVERSIONing in OpenJPEG
  * Allow better integration with multi-arch system
  * Compile &amp; Install Java bindings (CMake)
  * Install required addXMLinJP2 (JPIP)
  Misc:
  * Fix linker error by resolving all symbols (eg. missing -lm)
  * Fix some man page typos
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * heap_buffer_overflow_fix.patch
  * heap_buffer_overflow_2_fix.patch
  * heap_corruption_fix.patch
  * openjpeg-1.5.0-cmake_Config.patch
  * openjpeg-1.5.0-cmake_libdir.patch
  * openjpeg-1.5.0-pkgconfig_includedir.patch
- Replaced openjpeg-1.5.0-cmake_header_symlink.patch with a fix inside the spec
  file.
- Removed symlink from %{_includedir}/openjpeg-1.5 to %{_includedir}/openjpeg
  (not needed).
- Added the following patches (taken from Fedora):
  * openjpeg-1.5.1-cmake_libdir.patch
    Fix libopenjpeg.pc symlink
  * openjpeg-1.5.1-soname.patch
    Revert soname bump compared to 1.5.0 release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353326400">- do fdupes only for SUSE distributions</changelog>
<changelog author="vpereira@novell.com" date="1389355200">- Security:
  * Patches openjpeg-1.5.1-cve-2013-6045-1.patch and
    openjpeg-1.5.1-cve-2013-6045-2.patch fix heap overflow
    described in  CVE-2013-6045, bnc#853838.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1392206400">- Added the following security patches (based also on Redhat/Fedora patches):
  * openjpeg-1.5-r2029.patch
    From upstream. Fix issue 155, jp2_read_boxhdr() can trigger random pointer
    memory access
  * openjpeg-1.5-r2032.patch
    From upstream. Fix issue 169, division by zero in j2k_read_siz
  * openjpeg-1.5-r2033.patch
    From upstream. Fix issue 166, missing range check in j2k_read_coc et al
  * CVE-2013-1447.patch
    Fix multiple denial of service flaws, CVE-2013-1447, bnc#853834
  * CVE-2013-6052.patch
    Fix heap OOB reads, information leaks, CVE-2013-6052, bnc#853644
  * CVE-2013-6053.patch
    Fix heap OOB reads, information leaks, CVE-2013-6053, bnc#853644
  * CVE-2013-6887.patch
    Fix multiple denial of service flaws, CVE-2013-6887, bnc#853644
- Removed part of openjpeg-1.5.1-cve-2013-6045-1.patch that is already
  upstream, included in openjpeg-1.5-r2033.patch (slightly modified).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 1.5.2:
  Security:
  * Fixes: CVE-2013-4289 CVE-2013-4290
  * Fixes: CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6054
    CVE-2013-6053 CVE-2013-6887
  New Features:
  * Compile Java with source/target specific java version
  * Do not set SONAME for Java module, fix linking (missing math lib)
  * Support some BMP/RGB8 files
  * Fix compilation on ARM
  Misc:
  * Remove BSD-4 license from getopt copy, since upstream switched to BSD-3
  * Support compilation against system installed getopt
  * Fix Big Endian checking (autotools)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * openjpeg-1.5-r2029.patch
  * openjpeg-1.5-r2032.patch
  * openjpeg-1.5-r2033.patch
  * openjpeg-1.5.1-cve-2013-6045-1.patch
  * openjpeg-1.5.1-cve-2013-6045-2.patch
  * CVE-2013-6052.patch
  * CVE-2013-6053.patch
  * CVE-2013-1447.patch
  * CVE-2013-6887.patch</changelog>
<changelog author="mpluskal@suse.com" date="1425297600">- Use cmake macros for building
- Small spec file cleanups, use pkgconfig style dependencies</changelog>
<changelog author="hpj@suse.com" date="1474459200">- Add openjpeg-bsc999817-cve2016-7445-null-deref.patch
  (bsc#999817, CVE-2016-7445).</changelog>
<changelog author="astieger@suse.com" date="1505908800">- Add patch to fix ffast-math issue bsc#1029609 bsc#1059440:
  * openjpeg-fast-math.patch</changelog>

</package>
<package pkgid="69e70aa3e0a74d9562f646ed4a0776b275f935c29b5a20d9eb7ae46e001c4ea8" name="openjpeg-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.5.2" rel="10.1"/>

<changelog author="asterios.dramis@gmail.com" date="1318507200">- Initial release (version 1.4).
- Added 5 patches (taken from upstream and Fedora):
  * openjpeg-1.4-OpenJPEGConfig.patch -- Fix OpenJPEGConfig.cmake
  * openjpeg-1.4-cmake_symlink_fix.patch -- Fix cmake create_symlink usage for
    header file
  * fix_no_undefined.patch -- Fix libopenjpeg undefined references
  * fix_soversion.patch -- Fix so version to 1 instead of 1.4
  * install_pkgconfig_file.patch -- Fix cmake to install pkgconfig file(s)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1322740800">- Removed the JavaOpenJPEG/ directory from the package source (fix for
  bnc#733009 - openjpg contains Sun proprietary code).</changelog>
<changelog author="cfarrell@suse.com" date="1323172800">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="asterios.dramis@gmail.com" date="1330344000">- Update to version 1.5.0:
  New Features:
  * openjpip:
    + complete client-server architecture for remote browsing of jpeg 2000
    images.
    + see corresponding README for more details.
  API modifications:
  * 'bool' type has been replaced by 'opj_bool' type. 'stdbool.h' is no more
    required.
  Misc:
  * improved cmake and autotools build methods.
  * removed manual makefiles, VS project files and XCode project files.
  * added a 'thirdparty' directory to contain all dependencies.
    + These libraries will be build only if there are not found on the system.
    + Note that libopenjpeg itself does not have any dependency.
  * changed the directory hierarchy of the whole project. See README files for
    details.
  * tests : a complete test suite has been setup.
    + both JPEG 2000 conformance tests and non-regressions tests are
    configured.
    + results are submitted to the OpenJPEG dashboard
    (http://my.cdash.org/index.php?project=OPENJPEG)
    + images are located in 'http://openjpeg.googlecode.com/svn/data' folder.
    + configuration files and utilities are located in 'tests' folder.
  * OPJViewer re-activated (need wxWidgets)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * fix_no_undefined.patch
  * fix_soversion.patch
  * install_pkgconfig_file.patch
- Replaced openjpeg-1.4-OpenJPEGConfig.patch with
  openjpeg-1.5.0-cmake_Config.patch (taken from Fedora)
- Replaced openjpeg-1.4-cmake_symlink_fix.patch with
  openjpeg-1.5.0-cmake_header_symlink.patch (taken from Fedora)
- Added 2 patches (taken from Fedora):
  * openjpeg-1.5.0-cmake_libdir.patch -- Fix installation directories
  * openjpeg-1.5.0-pkgconfig_includedir.patch -- Fix includedir in pkgconfig
    file
- Spec file updates:
  * Added doxygen in BuildRequires: to enable compilation of devel docs.
  * Updated BuildRequires: to include also liblcms2-devel and zlib-devel.
  * Fixed rpmlint warning "file-contains-date-and-time"
- No need to remove the JavaOpenJPEG/ directory from the package source anymore
  (the Sun proprietary code was removed from the package).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1340884800">- Added a patch (heap_corruption_fix.patch) to fix heap corruption when
  processing certain Gray16 TIFF images - (CVE-2009-5030), (bnc#757260).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1342008000">- Added a patch (heap_buffer_overflow_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3358), (bnc#770649).</changelog>
<changelog author="idonmez@suse.com" date="1342526400">- Add baselibs.conf</changelog>
<changelog author="asterios.dramis@gmail.com" date="1347364800">- Added a patch (heap_buffer_overflow_2_fix.patch) to fix heap-based buffer
  overflow when processing JPEG2000 images - (CVE-2012-3535), (bnc#777445).</changelog>
<changelog author="sleep_walker@suse.cz" date="1347883200">- fix fedora build</changelog>
<changelog author="asterios.dramis@gmail.com" date="1350302400">- Update to version 1.5.1:
  Security:
  * Fixes: CVE-2012-3535
  * Fixes: CVE-2012-3358
  New Features:
  * Use a new API scheme and solve the SOVERSIONing in OpenJPEG
  * Allow better integration with multi-arch system
  * Compile &amp; Install Java bindings (CMake)
  * Install required addXMLinJP2 (JPIP)
  Misc:
  * Fix linker error by resolving all symbols (eg. missing -lm)
  * Fix some man page typos
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * heap_buffer_overflow_fix.patch
  * heap_buffer_overflow_2_fix.patch
  * heap_corruption_fix.patch
  * openjpeg-1.5.0-cmake_Config.patch
  * openjpeg-1.5.0-cmake_libdir.patch
  * openjpeg-1.5.0-pkgconfig_includedir.patch
- Replaced openjpeg-1.5.0-cmake_header_symlink.patch with a fix inside the spec
  file.
- Removed symlink from %{_includedir}/openjpeg-1.5 to %{_includedir}/openjpeg
  (not needed).
- Added the following patches (taken from Fedora):
  * openjpeg-1.5.1-cmake_libdir.patch
    Fix libopenjpeg.pc symlink
  * openjpeg-1.5.1-soname.patch
    Revert soname bump compared to 1.5.0 release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353326400">- do fdupes only for SUSE distributions</changelog>
<changelog author="vpereira@novell.com" date="1389355200">- Security:
  * Patches openjpeg-1.5.1-cve-2013-6045-1.patch and
    openjpeg-1.5.1-cve-2013-6045-2.patch fix heap overflow
    described in  CVE-2013-6045, bnc#853838.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1392206400">- Added the following security patches (based also on Redhat/Fedora patches):
  * openjpeg-1.5-r2029.patch
    From upstream. Fix issue 155, jp2_read_boxhdr() can trigger random pointer
    memory access
  * openjpeg-1.5-r2032.patch
    From upstream. Fix issue 169, division by zero in j2k_read_siz
  * openjpeg-1.5-r2033.patch
    From upstream. Fix issue 166, missing range check in j2k_read_coc et al
  * CVE-2013-1447.patch
    Fix multiple denial of service flaws, CVE-2013-1447, bnc#853834
  * CVE-2013-6052.patch
    Fix heap OOB reads, information leaks, CVE-2013-6052, bnc#853644
  * CVE-2013-6053.patch
    Fix heap OOB reads, information leaks, CVE-2013-6053, bnc#853644
  * CVE-2013-6887.patch
    Fix multiple denial of service flaws, CVE-2013-6887, bnc#853644
- Removed part of openjpeg-1.5.1-cve-2013-6045-1.patch that is already
  upstream, included in openjpeg-1.5-r2033.patch (slightly modified).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 1.5.2:
  Security:
  * Fixes: CVE-2013-4289 CVE-2013-4290
  * Fixes: CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 CVE-2013-6054
    CVE-2013-6053 CVE-2013-6887
  New Features:
  * Compile Java with source/target specific java version
  * Do not set SONAME for Java module, fix linking (missing math lib)
  * Support some BMP/RGB8 files
  * Fix compilation on ARM
  Misc:
  * Remove BSD-4 license from getopt copy, since upstream switched to BSD-3
  * Support compilation against system installed getopt
  * Fix Big Endian checking (autotools)
  * Huge amount of bug fixes. See CHANGES for details.
- Removed the following patches (fixed upstream):
  * openjpeg-1.5-r2029.patch
  * openjpeg-1.5-r2032.patch
  * openjpeg-1.5-r2033.patch
  * openjpeg-1.5.1-cve-2013-6045-1.patch
  * openjpeg-1.5.1-cve-2013-6045-2.patch
  * CVE-2013-6052.patch
  * CVE-2013-6053.patch
  * CVE-2013-1447.patch
  * CVE-2013-6887.patch</changelog>
<changelog author="mpluskal@suse.com" date="1425297600">- Use cmake macros for building
- Small spec file cleanups, use pkgconfig style dependencies</changelog>
<changelog author="hpj@suse.com" date="1474459200">- Add openjpeg-bsc999817-cve2016-7445-null-deref.patch
  (bsc#999817, CVE-2016-7445).</changelog>
<changelog author="astieger@suse.com" date="1505908800">- Add patch to fix ffast-math issue bsc#1029609 bsc#1059440:
  * openjpeg-fast-math.patch</changelog>

</package>
<package pkgid="7be4627203be593fb8a5f747967b97ef5e8431ac9b95d1e56444a2e4197b562e" name="openjpeg2" arch="src">
    <version epoch="0" ver="2.1.0" rel="16.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>

</package>
<package pkgid="62d60b671267accd06f419d738f85b7ca4236f254251da642f0c0de6b7c61ff1" name="openjpeg2" arch="src">
    <version epoch="0" ver="2.1.0" rel="19.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>
<changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10507.patch (CVE-2016-10507, bsc#1056421),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562).</changelog>

</package>
<package pkgid="b35199766f0554ca54a7766be3a42ec879b7e401ee117c1340d45a24905125d1" name="openjpeg2" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="16.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>

</package>
<package pkgid="94cb1306b68e14aec1ac6a080fff4ded7afda3ccdb3cec98c17b20ef32f7a244" name="openjpeg2" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="19.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>
<changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10507.patch (CVE-2016-10507, bsc#1056421),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562).</changelog>

</package>
<package pkgid="5e6636262d532dec5c185bbc18c56eb5aef6ed48032ae72efd8b8868d1b6ec12" name="openjpeg2-devel" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="16.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>

</package>
<package pkgid="7e3bf85b1a0fb515c1ec3560b79284084354038c6fb29b3550806717386e2177" name="openjpeg2-devel" arch="x86_64">
    <version epoch="0" ver="2.1.0" rel="19.1"/>

<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1264334400">* Initial build from SVN</changelog>
<changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1353844800">Update to version 2.0 Final, fixed some major issues :
  * support of Large JPEG2000 Files greater than 2 GBytes
  * support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
  * implements subset of the MCT part 2
  * streaming system
  * improvement of the cmake build system
  * adding a CDash platform to support continuous integration of the different version
  * opaque pointers (opj_stream, opj_codec) have been used to simplify the API
  * the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
  * a lot of code has been simplified/factored in order to lower the memory consumption.
  * j2k.c and jp2.c have been modified to support a simpler extension mechanism
  * prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries</changelog>
<changelog author="behrisch@users.sourceforge.net" date="1368014400">- fixed make install for non suse targets</changelog>
<changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
<changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
<changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
<changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
<changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
<changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
<changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
<changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
<changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
<changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
<changelog author="hpj@suse.com" date="1481803200">- Add patches: openjpeg2-CVE-2016-9572-CVE-2016-9573.patch,
  openjpeg2-CVE-2016-9580-CVE-2016-9581.patch,
  openjpeg2-CVE-2016-7445.patch, openjpeg2-CVE-2016-8332.patch,
  openjpeg2-CVE-2016-9112.patch, openjpeg2-CVE-2016-9113.patch,
  openjpeg2-CVE-2016-9114.patch, openjpeg2-CVE-2016-9115.patch,
  openjpeg2-CVE-2016-9116.patch, openjpeg2-CVE-2016-9117.patch,
  openjpeg2-CVE-2016-9118.patch (bsc#999817, bsc#1002414,
  bsc#1007739, bsc#1007740, bsc#1007741, bsc#1007742, bsc#1007743,
  bsc#1007744, bsc#1007747, bsc#1014543, bsc#1014975).</changelog>
<changelog author="hpj@suse.com" date="1501243200">- Add patch: openjpeg2-CVE-2015-8871.patch (bsc#979907,
  CVE 2015-8871).</changelog>
<changelog author="hpj@suse.com" date="1501675200">- Add patch: openjpeg2-CVE-2016-7163.patch (bsc#997857,
  CVE 2016-7163).</changelog>
<changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10507.patch (CVE-2016-10507, bsc#1056421),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562).</changelog>

</package>
<package pkgid="5800bf955d566c8f563f1473e4bc6e6595415996071ebe6cc984246837fc395a" name="openldap2" arch="src">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="585c9e28c669ae0d36693ec1133b6c7d5cdf9d4fa08b1cb5c15308af316e9829" name="openldap2" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="22819c165ec99f551e5a4ed4f8d96f62d77cf6b3ff56efa73f51ca4af634b8e7" name="openldap2-back-meta" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="4728253f4a020244bf605df8a23ed850df290fa8bd3474d351db84edf4153f25" name="openldap2-back-perl" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="0cfd76d77a817b6118d6435ba453959af7321718974ecf1649d3cf2a5478b464" name="openldap2-back-sock" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="91b2e9cfe1db64da6235b202feff6dfaf1847bbf955136bb0a0315051969642d" name="openldap2-back-sql" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="783294f4e930100d46387bf69919bca9a759bc136a5f0b7313fc6df29c0771fd" name="openldap2-client" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="1fc11140afb44ac65c8dc346144966a79dd828d98c22f44d9d15b080afc022f0" name="openldap2-contrib" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="e493fee3aedf2f2e261b372e01c9644637d2b0dfdfda03c25562c81e671a68a4" name="openldap2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="30e5d05af4c44483b9e7a879b3900b5d48a07ebe303a09bd9ece2cd54efbb5ab" name="openldap2-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="0653e2901c42b6a9cd10731bd1db6af622a423811c0dad24a5088b3c290d478c" name="openldap2-devel-static" arch="x86_64">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="f9e9e973d345828a794821c9142e597187fb34efcf6fe3571b8e5db2cc65559c" name="openldap2-doc" arch="noarch">
    <version epoch="0" ver="2.4.44" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="fa43ea964d87df4599c33e0be7e45c1536b4b8082ad4e9e3b0b1afa8dad30043" name="openldap2-ppolicy-check-password" arch="x86_64">
    <version epoch="0" ver="1.2" rel="18.1"/>

<changelog author="jengelh@inai.de" date="1417003200">- binutils is required for "strings" utility invocation in %pre
  [bnc#904028]
- Remove SLE10 definitions</changelog>
<changelog author="rguenther@suse.com" date="1424347200">- Add 0009-gcc5.patch to pass -P to the preprocessor in configure checks
  for Berkeley DB version</changelog>
<changelog author="hguo@suse.com" date="1437480000">- Upgrade to upstream 2.4.41 release with accumulcated bug fixes and stability improvements.
  * Add patch 0008-In-monitor-backend-do-not-return-Connection0-entries.patch
  * Remove already applied patch 0008-ITS-7723-fix-reference-counting.patch
  * Remove already applied patch 0009-gcc5.patch
  (Implements fate#319301)</changelog>
<changelog author="hguo@suse.com" date="1443700800">- Upgrade to upstream 2.4.42 release with accumulated bug fixes.</changelog>
<changelog author="hguo@suse.com" date="1444392000">- Remove OpenLDAP 2.3 code and patches from build source.
  Compatibility libraries for OpenLDAP 2.3 are built in package:
  compat-libldap-2_3-0
  Removed source files:
    openldap-2.3.37-liblber-length-decoding.dif
    openldap-2.3.37-libldap-ntlm.diff
    openldap-2.3.37-libldap-ssl.dif
    openldap-2.3.37-libldap-sasl-max-buff-size.dif
    openldap-2.3.37-libldap-tls_chkhost-its6239.dif
    openldap-2.3.37-libldap-gethostbyname_r.dif
    openldap-2.3.37-libldap-suid.diff
    openldap-2.3.37.dif
    openldap-2.3.37-libldap-ld_defconn-ldap_free_connection.dif
    openldap-2.3.37-libldap-ldapi_url.dif
    openldap-2.3.37.tgz
    openldap-2.3.37-libldap-utf8-ADcanonical.dif
    README.update
    check-build.sh</changelog>
<changelog author="hguo@suse.com" date="1448884800">- Introduce patch 0009-Fix-ldap-host-lookup-ipv6.patch
  to fix an issue with unresponsive LDAP host lookups in IPv6 environment.
  (bsc#955210)</changelog>
<changelog author="hguo@suse.com" date="1449057600">- Introduce patch 0010-Revert-Revert-ITS-8240-remove-obsolete-assert.patch
  to fix CVE-2015-6908. (bsc#945582)
- Introduce patch 0011-Enforce-minimum-DH-size-of-1024.patch
  to address weak DH size vulnerability (bsc#937766)</changelog>
<changelog author="michael@stroeder.com" date="1449576000">- Upgrade to upstream 2.4.43 release with accumulated bug fixes.
- Still build on SLES12
- Loadable backend and overlay modules are now installed
  into arch-specific path %{_libdir}/openldap
- All backends and overlays as modules for smaller memory footprint
  on memory constrained systems
- Added extra package for back-sock
- Consequent use of %{_rundir} everywhere
- Rely on upstream ./configure script instead of any other
  macro foo
- Dropped linking with libwrap
- Dropped 0004-libldap-use-gethostbyname_r.dif because this
  work-around for nss_ldap is obsolete
- New sub-package openldap2-contrib with selected contrib/ overlays
- Replaced addonschema.tar.gz with separate schema sources
- Updated ldapns.schema from recent slapo-nssov source tree
- Added symbolic link to slapd executable in /usr/sbin/
- Added more complex example configuration file
  /etc/openldap/slapd.conf.example
- Set OPENLDAP_START_LDAPI="yes" in /etc/sysconfig/openldap
- Set OPENLDAP_REGISTER_SLP="no" in /etc/sysconfig/openldap
- Added patch for OpenLDAP ITS#7796 to avoid excessive
  "not index" logging:
  0011-openldap-re24-its7796.patch
- Replaced openldap-rc.tgz with single source files
- Added soft dependency (Recommends) to cyrus-sasl
- Added soft dependency (Recommends) to cyrus-sasl-devel
  to openldap2-devel
- Added patch for OpenLDAP ITS#8336 (assert in liblmdb):
  0012-openldap-re24-its8336.patch
- Remove obsolete patch 0001-build-adjustments.dif</changelog>
<changelog author="hguo@suse.com" date="1453723200">- Relabel patch 0011-Enforce-minimum-DH-size-of-1024.patch
  into 0010-Enforce-minimum-DH-size-of-1024.patch</changelog>
<changelog author="michael@stroeder.com" date="1454760000">- Upgrade to upstream 2.4.44 release with accumulated bug fixes.
- Specify source with FTP URL
- Removed obsolete 0012-openldap-re24-its8336.patch</changelog>
<changelog author="mpluskal@suse.com" date="1454932800">- Use optflags when building</changelog>
<changelog author="hguo@suse.com" date="1454932801">- Remove openldap2-client.spec and openldap2-client.changes
  openldap2.spec now builds client utilities and libraries.
  Thus pre_checkin.sh is removed.
- Move ldap.conf and its manual page from openldap2-client package
  to libldap-2_4-2 package, which is more appropriate.
- Use RPM_OPT_FLAGS in build flags.
- Macros dealing with old/unsupported distributions are removed.
- Remove 0002-slapd.conf.dif and install improved slapd.conf from
  new source file slapd.conf.
- Install slapd.conf.olctemplate to assist in preparing slapd.d
  for OLC.
- Be explicit in sysconfig that by default openldap will use
  static file configuration.
- Add the following schemas in LDIF format:
  * rfc2307bis.ldif
  * ldapns.ldif
  * yast.ldif
- Other minor clean-ups in the spec file.</changelog>
<changelog author="lmuelle@suse.com" date="1455796800">- Remove redundant -n openldap2- package name prefix.</changelog>
<changelog author="hguo@suse.com" date="1455796801">- Build password strength enforcer as an implementation of ppolicy
  password checker, introducing:
  ppolicy-check-password-1.2.tar.gz
  ppolicy-check-password.Makefile
  ppolicy-check-password.conf
  ppolicy-check-password.5
  0200-Fix-incorrect-calculation-of-consecutive-number-of-c.patch
  (Implements fate#319461)</changelog>
<changelog author="jengelh@inai.de" date="1456056000">- Move ldap.conf out of shlib package again, they are not allowed
  there for obvious reasons (conflict with future package).</changelog>
<changelog author="hguo@suse.com" date="1456401600">- Move ldap.conf into libldap-data package, per convention.</changelog>
<changelog author="hguo@suse.com" date="1463486400">- Enable build flag LDAP_USE_NON_BLOCKING_TLS to fix bsc#978408.</changelog>
<changelog author="hguo@suse.com" date="1466078400">- Move schema files into tarball addonschema.tar.gz:
  ldapns.ldif ldapns.schema rfc2307bis.ldif rfc2307bis.schema
  yast.ldif yast.schema
- Package previously missing schema files in LDIF format:
  amavisd-new.ldif dhcp.ldif dlz.ldif dnszone.ldif samba3.ldif
  sudo.ldif suse-mailserver.ldif (bsc#984691)
- Fix a minor issue in schema2ldif script that led to missing
  attribute in the generated LDIF.</changelog>
<changelog author="jengelh@inai.de" date="1466683200">- Test for user/group existence before trying to add them.
  Summary spello update.</changelog>
<changelog author="hguo@suse.com" date="1501675200">- Catch up with patches applied to the package on SLES.
  * Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).
  * Fix CVE-2017-9287: openldap2: Double free vulnerability with patch
  0015-Fix-double-free-of-search-base-with-page-size-0.patch
  (bsc#1041764)
  * Fix an uninitialised variable that causes startup failure with patch
  0016-ITS-8631-Initialize-sal.patch
  (bsc#1037396)
  * Fix a regression in handling of non-blocking connection with
  new patch from Alex Novak (bsc#1031702):
  0017-retain-non-blocking-status-on-socket.patch</changelog>

</package>
<package pkgid="86f881eeb91e2c85a1117837b92eabbdb26e8dab72a6ce59c34221ee0f9d3027" name="openmpi" arch="src">
    <version epoch="0" ver="1.10.6" rel="4.1"/>

<changelog author="pth@suse.de" date="1460635200">- Readd psm support.</changelog>
<changelog author="ro@suse.de" date="1460635201">- build with libpsm2 only on x86_64, the only platform
  where that library builds at the moment</changelog>
<changelog author="astieger@suse.com" date="1467028800">- Open MPI 1.10.3:
  * many upstream bug fixes, improvements, documentation updates</changelog>
<changelog author="pth@suse.de" date="1468411200">- BuildRequire libfabric if building for x86_64.</changelog>
<changelog author="pth@suse.de" date="1468411201">- BuildRequire libfabrics.</changelog>
<changelog author="pth@suse.de" date="1468497600">- Remove --with-devel-headers from configure options on request
  from upstream as it's only meant to be used when developing
  openmpi plugins outside the source tree and has consequences for
  normal users.
- Remove files only meant for developers of openmpi itself from
  the file list.</changelog>
<changelog author="pth@suse.de" date="1468929600">- Update to 1.10.3, last of the 1.10 releases (bsc#988787) :
  * Fix zero-length datatypes.
  * Minor manpage cleanups
  * Implement atomic support in OSHMEM/UCX
  * Fix support of MPI_COMBINER_RESIZED.
  * Fix computation of #cpus when --use-hwthread-cpus is used
  * Add entry points for Allgatherv, iAllgatherv, Reduce, and iReduce
    for the HCOLL library
  * Fix an HCOLL integration bug that could signal completion of request
    while still being worked
  * Fix computation of cores when SMT is enabled.
  * Various USNIC fixes
  * Create a datafile in the per-proc directory in order to make it
    unique per communicator. Thanks to Peter Wind for the report
  * Fix zero-size malloc in one-sided pt-to-pt code.
  * Fix MPI_Get_address when passed MPI_BOTTOM to not return an error.
  * Fix MPI_TYPE_SET_ATTR with NULL value.
  * Fix various Fortran08 binding issues
  * Fix memchecker no-data case.
  * Fix CUDA support under OS-X
  * Fix various OFI/MTL integration issues
  * Add MPI_T man pages
  * Fix one-sided pt-to-pt issue by preventing communication from happening
    before a target enters a fence, even in the no-precede case
  * Fix a bug that disabled Totalview for MPMD use-case
  * Correctly support MPI_UNWEIGHTED in topo-graph-neighbors.
  * Fix singleton operations under SLURM when PMI2 is enabled
  * Do not use MPI_IN_PLACE in neighborhood collectives for non-blocking
    collectives (libnbc).
  * Silence autogen deprecation warnings for newer versions of Perl
  * Do not return MPI_ERR_PENDING from collectives
  * Use type int* for MPI_WIN_DISP_UNIT, MPI_WIN_CREATE_FLAVOR, and MPI_WIN_MODEL.
  * Fix register_datarep stub function in IO/OMPIO.
  * Fix a bus error on MPI_WIN_[POST,START] in the shared memory one-sided component
  * Add several missing MPI_WIN_FLAVOR constants to the Fortran support
  * Enable connecting processes from different subnets using the openib BTL
  * Fix bug in basic/barrier algorithm in OSHMEM
  * Correct process binding for the --map-by node case
  * Include support for subnet-to-subnet routing over InfiniBand networks
  * Fix usnic resource check
  * AUTHORS: Fix an errant reference to Subversion IDs
  * Fix affinity for MPMD jobs running under LSF
  * Fix many Fortran binding bugs
  * Fix `MPI_IN_PLACE`-related bugs
  * Fix PSM/PSM2 support for singleton operations
  * Ensure MPI transports continue to progress during RTE barriers
  * Update HWLOC to 1.9.1 end-of-series
  * Fix a bug in the Java command line parser when the
  - Djava.library.path options was given by the user
  * Update the MTL/OFI provider selection behavior
  * Add support for clock_gettime on Linux.
  * Correctly compute #slots when -host is used for MPMD case
  * Fix a bug in the hcoll collectives due to an uninitialized field
  * Do not set a binding policy when oversubscribing a node
  * Fix hang in intercommunicator operations when oversubscribed
  * Speed up process termination during MPI_Abort
  * Disable backtrace support by default in the PSM/PSM2 libraries to
    prevent unintentional conflicting behavior.
- Exclude help text for opal-timer which isn't built on s390(x)</changelog>
<changelog author="pth@suse.de" date="1469620800">- instead of adding to the list of architectures that don't build
  help-opal-timer-linux.txt include it exclusively for ix86 and x86_64
  (bsc#990790).</changelog>
<changelog author="kmroz@suse.com" date="1472212800">- Guard files not installed when building without
  __malloc_initialize_hook (glibc 2.24). Currently this is only
  the case for Tumbleweed.</changelog>
<changelog author="schwab@suse.de" date="1474545600">- timer:linux is only built on %ix86 x86_64 ia64 ppc ppc64 %sparc</changelog>
<changelog author="pth@suse.de" date="1474632000">- Add a missing Conflicts: for openmpi-compat (bsc#999916 bsc#982458)</changelog>
<changelog author="pth@suse.de" date="1476273600">- Remove the Conflicts as the packages don't conflict anymore.
- Move the plugins (modules) to openmpi-libs (bsc#1003090).</changelog>
<changelog author="pth@suse.de" date="1479816000">- Fix creation of environment module in spec (bsc#1011484).</changelog>
<changelog author="pth@suse.de" date="1480334400">- Remove spurious characters from environment module (bsc#1012380).</changelog>
<changelog author="pth@suse.de" date="1489752000">- Update to 1.10.6 (fate#321475)
  Changes since 1.10.3:
  1.10.6:
  - Fix bug in timer code that caused problems at optimization settings
    greater than 2
  - OSHMEM: make mmap allocator the default instead of sysv or verbs
  - Support MPI_Dims_create with dimension zero
  - Update USNIC support
  - Prevent 64-bit overflow on timer counter
  - Add support for forwarding signals
  - Fix bug that caused truncated messages on large sends over TCP BTL
  - Fix potential infinite loop when printing a stacktrace
  1.10.5:
  - Update UCX APIs
  - Fix bug in darray that caused MPI/IO failures
  - Use a MPI_Get_library_version() like string to tag the debugger DLL.
    Thanks to Alastair McKinstry for the report
  - Fix multi-threaded race condition in coll/libnbc
  - Several fixes to OSHMEM
  - Fix bug in UCX support due to uninitialized field
  - Fix MPI_Ialltoallv with MPI_IN_PLACE and without MPI param check
  - Correctly reset receive request type before init. Thanks Chris Pattison
    for the report and test case.
  - Fix bug in iallgather[v]
  - Fix concurrency issue with MPI_Comm_accept. Thanks to Pieter Noordhuis
    for the patch
  - Fix ompi_coll_base_{gather,scatter}_intra_binomial
  - Fixed an issue with MPI_Type_get_extent returning the wrong extent
    for distributed array datatypes.
  - Re-enable use of rtdtsc instruction as a monotonic clock source if
    the processor has a core-invariant tsc. This is a partial fix for a
    performance regression introduced in Open MPI v1.10.3.
  1.10.4:
  - Fix assembler support for MIPS
  - Improve memory handling for temp buffers in collectives
  - Fix [all]reduce with non-zero lower bound datatypes
    Thanks Hristo Iliev for the report
  - Fix non-standard ddt handling. Thanks Yuki Matsumoto for the report
  - Various libnbc fixes. Thanks Yuki Matsumoto for the report
  - Fix typos in request RMA bindings for Fortran. Thanks to @alazzaro
    and @vondele for the assist
  - Various bug fixes and enhancements to collective support
  - Fix predefined types mapping in hcoll
  - Revive the coll/sync component to resolve unexpected message issues
    during tight loops across collectives
  - Fix typo in wrapper compiler for Fortran static builds</changelog>
<changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Add new file to files section.</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1493121600">- Add openmpi-etc-files.patch to update config files so they
  match files from OpenMPI2</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Unify spec with SLE12
- Use upstream git repo to fetch source tarball</changelog>
<changelog author="jengelh@inai.de" date="1494417600">- Make description more objective</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)</changelog>

</package>
<package pkgid="c4de8656bc71254a4f4c05b8825e0642cd6079a6ad26a047a85a8798a0c03aba" name="openmpi" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="4.1"/>

<changelog author="pth@suse.de" date="1460635200">- Readd psm support.</changelog>
<changelog author="ro@suse.de" date="1460635201">- build with libpsm2 only on x86_64, the only platform
  where that library builds at the moment</changelog>
<changelog author="astieger@suse.com" date="1467028800">- Open MPI 1.10.3:
  * many upstream bug fixes, improvements, documentation updates</changelog>
<changelog author="pth@suse.de" date="1468411200">- BuildRequire libfabric if building for x86_64.</changelog>
<changelog author="pth@suse.de" date="1468411201">- BuildRequire libfabrics.</changelog>
<changelog author="pth@suse.de" date="1468497600">- Remove --with-devel-headers from configure options on request
  from upstream as it's only meant to be used when developing
  openmpi plugins outside the source tree and has consequences for
  normal users.
- Remove files only meant for developers of openmpi itself from
  the file list.</changelog>
<changelog author="pth@suse.de" date="1468929600">- Update to 1.10.3, last of the 1.10 releases (bsc#988787) :
  * Fix zero-length datatypes.
  * Minor manpage cleanups
  * Implement atomic support in OSHMEM/UCX
  * Fix support of MPI_COMBINER_RESIZED.
  * Fix computation of #cpus when --use-hwthread-cpus is used
  * Add entry points for Allgatherv, iAllgatherv, Reduce, and iReduce
    for the HCOLL library
  * Fix an HCOLL integration bug that could signal completion of request
    while still being worked
  * Fix computation of cores when SMT is enabled.
  * Various USNIC fixes
  * Create a datafile in the per-proc directory in order to make it
    unique per communicator. Thanks to Peter Wind for the report
  * Fix zero-size malloc in one-sided pt-to-pt code.
  * Fix MPI_Get_address when passed MPI_BOTTOM to not return an error.
  * Fix MPI_TYPE_SET_ATTR with NULL value.
  * Fix various Fortran08 binding issues
  * Fix memchecker no-data case.
  * Fix CUDA support under OS-X
  * Fix various OFI/MTL integration issues
  * Add MPI_T man pages
  * Fix one-sided pt-to-pt issue by preventing communication from happening
    before a target enters a fence, even in the no-precede case
  * Fix a bug that disabled Totalview for MPMD use-case
  * Correctly support MPI_UNWEIGHTED in topo-graph-neighbors.
  * Fix singleton operations under SLURM when PMI2 is enabled
  * Do not use MPI_IN_PLACE in neighborhood collectives for non-blocking
    collectives (libnbc).
  * Silence autogen deprecation warnings for newer versions of Perl
  * Do not return MPI_ERR_PENDING from collectives
  * Use type int* for MPI_WIN_DISP_UNIT, MPI_WIN_CREATE_FLAVOR, and MPI_WIN_MODEL.
  * Fix register_datarep stub function in IO/OMPIO.
  * Fix a bus error on MPI_WIN_[POST,START] in the shared memory one-sided component
  * Add several missing MPI_WIN_FLAVOR constants to the Fortran support
  * Enable connecting processes from different subnets using the openib BTL
  * Fix bug in basic/barrier algorithm in OSHMEM
  * Correct process binding for the --map-by node case
  * Include support for subnet-to-subnet routing over InfiniBand networks
  * Fix usnic resource check
  * AUTHORS: Fix an errant reference to Subversion IDs
  * Fix affinity for MPMD jobs running under LSF
  * Fix many Fortran binding bugs
  * Fix `MPI_IN_PLACE`-related bugs
  * Fix PSM/PSM2 support for singleton operations
  * Ensure MPI transports continue to progress during RTE barriers
  * Update HWLOC to 1.9.1 end-of-series
  * Fix a bug in the Java command line parser when the
  - Djava.library.path options was given by the user
  * Update the MTL/OFI provider selection behavior
  * Add support for clock_gettime on Linux.
  * Correctly compute #slots when -host is used for MPMD case
  * Fix a bug in the hcoll collectives due to an uninitialized field
  * Do not set a binding policy when oversubscribing a node
  * Fix hang in intercommunicator operations when oversubscribed
  * Speed up process termination during MPI_Abort
  * Disable backtrace support by default in the PSM/PSM2 libraries to
    prevent unintentional conflicting behavior.
- Exclude help text for opal-timer which isn't built on s390(x)</changelog>
<changelog author="pth@suse.de" date="1469620800">- instead of adding to the list of architectures that don't build
  help-opal-timer-linux.txt include it exclusively for ix86 and x86_64
  (bsc#990790).</changelog>
<changelog author="kmroz@suse.com" date="1472212800">- Guard files not installed when building without
  __malloc_initialize_hook (glibc 2.24). Currently this is only
  the case for Tumbleweed.</changelog>
<changelog author="schwab@suse.de" date="1474545600">- timer:linux is only built on %ix86 x86_64 ia64 ppc ppc64 %sparc</changelog>
<changelog author="pth@suse.de" date="1474632000">- Add a missing Conflicts: for openmpi-compat (bsc#999916 bsc#982458)</changelog>
<changelog author="pth@suse.de" date="1476273600">- Remove the Conflicts as the packages don't conflict anymore.
- Move the plugins (modules) to openmpi-libs (bsc#1003090).</changelog>
<changelog author="pth@suse.de" date="1479816000">- Fix creation of environment module in spec (bsc#1011484).</changelog>
<changelog author="pth@suse.de" date="1480334400">- Remove spurious characters from environment module (bsc#1012380).</changelog>
<changelog author="pth@suse.de" date="1489752000">- Update to 1.10.6 (fate#321475)
  Changes since 1.10.3:
  1.10.6:
  - Fix bug in timer code that caused problems at optimization settings
    greater than 2
  - OSHMEM: make mmap allocator the default instead of sysv or verbs
  - Support MPI_Dims_create with dimension zero
  - Update USNIC support
  - Prevent 64-bit overflow on timer counter
  - Add support for forwarding signals
  - Fix bug that caused truncated messages on large sends over TCP BTL
  - Fix potential infinite loop when printing a stacktrace
  1.10.5:
  - Update UCX APIs
  - Fix bug in darray that caused MPI/IO failures
  - Use a MPI_Get_library_version() like string to tag the debugger DLL.
    Thanks to Alastair McKinstry for the report
  - Fix multi-threaded race condition in coll/libnbc
  - Several fixes to OSHMEM
  - Fix bug in UCX support due to uninitialized field
  - Fix MPI_Ialltoallv with MPI_IN_PLACE and without MPI param check
  - Correctly reset receive request type before init. Thanks Chris Pattison
    for the report and test case.
  - Fix bug in iallgather[v]
  - Fix concurrency issue with MPI_Comm_accept. Thanks to Pieter Noordhuis
    for the patch
  - Fix ompi_coll_base_{gather,scatter}_intra_binomial
  - Fixed an issue with MPI_Type_get_extent returning the wrong extent
    for distributed array datatypes.
  - Re-enable use of rtdtsc instruction as a monotonic clock source if
    the processor has a core-invariant tsc. This is a partial fix for a
    performance regression introduced in Open MPI v1.10.3.
  1.10.4:
  - Fix assembler support for MIPS
  - Improve memory handling for temp buffers in collectives
  - Fix [all]reduce with non-zero lower bound datatypes
    Thanks Hristo Iliev for the report
  - Fix non-standard ddt handling. Thanks Yuki Matsumoto for the report
  - Various libnbc fixes. Thanks Yuki Matsumoto for the report
  - Fix typos in request RMA bindings for Fortran. Thanks to @alazzaro
    and @vondele for the assist
  - Various bug fixes and enhancements to collective support
  - Fix predefined types mapping in hcoll
  - Revive the coll/sync component to resolve unexpected message issues
    during tight loops across collectives
  - Fix typo in wrapper compiler for Fortran static builds</changelog>
<changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Add new file to files section.</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1493121600">- Add openmpi-etc-files.patch to update config files so they
  match files from OpenMPI2</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Unify spec with SLE12
- Use upstream git repo to fetch source tarball</changelog>
<changelog author="jengelh@inai.de" date="1494417600">- Make description more objective</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)</changelog>

</package>
<package pkgid="4c96380e41bbe00b2a8efed5c9cacd52740ce01035ad0654d0bb1417d526d1cd" name="openmpi-devel" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="4.1"/>

<changelog author="pth@suse.de" date="1460635200">- Readd psm support.</changelog>
<changelog author="ro@suse.de" date="1460635201">- build with libpsm2 only on x86_64, the only platform
  where that library builds at the moment</changelog>
<changelog author="astieger@suse.com" date="1467028800">- Open MPI 1.10.3:
  * many upstream bug fixes, improvements, documentation updates</changelog>
<changelog author="pth@suse.de" date="1468411200">- BuildRequire libfabric if building for x86_64.</changelog>
<changelog author="pth@suse.de" date="1468411201">- BuildRequire libfabrics.</changelog>
<changelog author="pth@suse.de" date="1468497600">- Remove --with-devel-headers from configure options on request
  from upstream as it's only meant to be used when developing
  openmpi plugins outside the source tree and has consequences for
  normal users.
- Remove files only meant for developers of openmpi itself from
  the file list.</changelog>
<changelog author="pth@suse.de" date="1468929600">- Update to 1.10.3, last of the 1.10 releases (bsc#988787) :
  * Fix zero-length datatypes.
  * Minor manpage cleanups
  * Implement atomic support in OSHMEM/UCX
  * Fix support of MPI_COMBINER_RESIZED.
  * Fix computation of #cpus when --use-hwthread-cpus is used
  * Add entry points for Allgatherv, iAllgatherv, Reduce, and iReduce
    for the HCOLL library
  * Fix an HCOLL integration bug that could signal completion of request
    while still being worked
  * Fix computation of cores when SMT is enabled.
  * Various USNIC fixes
  * Create a datafile in the per-proc directory in order to make it
    unique per communicator. Thanks to Peter Wind for the report
  * Fix zero-size malloc in one-sided pt-to-pt code.
  * Fix MPI_Get_address when passed MPI_BOTTOM to not return an error.
  * Fix MPI_TYPE_SET_ATTR with NULL value.
  * Fix various Fortran08 binding issues
  * Fix memchecker no-data case.
  * Fix CUDA support under OS-X
  * Fix various OFI/MTL integration issues
  * Add MPI_T man pages
  * Fix one-sided pt-to-pt issue by preventing communication from happening
    before a target enters a fence, even in the no-precede case
  * Fix a bug that disabled Totalview for MPMD use-case
  * Correctly support MPI_UNWEIGHTED in topo-graph-neighbors.
  * Fix singleton operations under SLURM when PMI2 is enabled
  * Do not use MPI_IN_PLACE in neighborhood collectives for non-blocking
    collectives (libnbc).
  * Silence autogen deprecation warnings for newer versions of Perl
  * Do not return MPI_ERR_PENDING from collectives
  * Use type int* for MPI_WIN_DISP_UNIT, MPI_WIN_CREATE_FLAVOR, and MPI_WIN_MODEL.
  * Fix register_datarep stub function in IO/OMPIO.
  * Fix a bus error on MPI_WIN_[POST,START] in the shared memory one-sided component
  * Add several missing MPI_WIN_FLAVOR constants to the Fortran support
  * Enable connecting processes from different subnets using the openib BTL
  * Fix bug in basic/barrier algorithm in OSHMEM
  * Correct process binding for the --map-by node case
  * Include support for subnet-to-subnet routing over InfiniBand networks
  * Fix usnic resource check
  * AUTHORS: Fix an errant reference to Subversion IDs
  * Fix affinity for MPMD jobs running under LSF
  * Fix many Fortran binding bugs
  * Fix `MPI_IN_PLACE`-related bugs
  * Fix PSM/PSM2 support for singleton operations
  * Ensure MPI transports continue to progress during RTE barriers
  * Update HWLOC to 1.9.1 end-of-series
  * Fix a bug in the Java command line parser when the
  - Djava.library.path options was given by the user
  * Update the MTL/OFI provider selection behavior
  * Add support for clock_gettime on Linux.
  * Correctly compute #slots when -host is used for MPMD case
  * Fix a bug in the hcoll collectives due to an uninitialized field
  * Do not set a binding policy when oversubscribing a node
  * Fix hang in intercommunicator operations when oversubscribed
  * Speed up process termination during MPI_Abort
  * Disable backtrace support by default in the PSM/PSM2 libraries to
    prevent unintentional conflicting behavior.
- Exclude help text for opal-timer which isn't built on s390(x)</changelog>
<changelog author="pth@suse.de" date="1469620800">- instead of adding to the list of architectures that don't build
  help-opal-timer-linux.txt include it exclusively for ix86 and x86_64
  (bsc#990790).</changelog>
<changelog author="kmroz@suse.com" date="1472212800">- Guard files not installed when building without
  __malloc_initialize_hook (glibc 2.24). Currently this is only
  the case for Tumbleweed.</changelog>
<changelog author="schwab@suse.de" date="1474545600">- timer:linux is only built on %ix86 x86_64 ia64 ppc ppc64 %sparc</changelog>
<changelog author="pth@suse.de" date="1474632000">- Add a missing Conflicts: for openmpi-compat (bsc#999916 bsc#982458)</changelog>
<changelog author="pth@suse.de" date="1476273600">- Remove the Conflicts as the packages don't conflict anymore.
- Move the plugins (modules) to openmpi-libs (bsc#1003090).</changelog>
<changelog author="pth@suse.de" date="1479816000">- Fix creation of environment module in spec (bsc#1011484).</changelog>
<changelog author="pth@suse.de" date="1480334400">- Remove spurious characters from environment module (bsc#1012380).</changelog>
<changelog author="pth@suse.de" date="1489752000">- Update to 1.10.6 (fate#321475)
  Changes since 1.10.3:
  1.10.6:
  - Fix bug in timer code that caused problems at optimization settings
    greater than 2
  - OSHMEM: make mmap allocator the default instead of sysv or verbs
  - Support MPI_Dims_create with dimension zero
  - Update USNIC support
  - Prevent 64-bit overflow on timer counter
  - Add support for forwarding signals
  - Fix bug that caused truncated messages on large sends over TCP BTL
  - Fix potential infinite loop when printing a stacktrace
  1.10.5:
  - Update UCX APIs
  - Fix bug in darray that caused MPI/IO failures
  - Use a MPI_Get_library_version() like string to tag the debugger DLL.
    Thanks to Alastair McKinstry for the report
  - Fix multi-threaded race condition in coll/libnbc
  - Several fixes to OSHMEM
  - Fix bug in UCX support due to uninitialized field
  - Fix MPI_Ialltoallv with MPI_IN_PLACE and without MPI param check
  - Correctly reset receive request type before init. Thanks Chris Pattison
    for the report and test case.
  - Fix bug in iallgather[v]
  - Fix concurrency issue with MPI_Comm_accept. Thanks to Pieter Noordhuis
    for the patch
  - Fix ompi_coll_base_{gather,scatter}_intra_binomial
  - Fixed an issue with MPI_Type_get_extent returning the wrong extent
    for distributed array datatypes.
  - Re-enable use of rtdtsc instruction as a monotonic clock source if
    the processor has a core-invariant tsc. This is a partial fix for a
    performance regression introduced in Open MPI v1.10.3.
  1.10.4:
  - Fix assembler support for MIPS
  - Improve memory handling for temp buffers in collectives
  - Fix [all]reduce with non-zero lower bound datatypes
    Thanks Hristo Iliev for the report
  - Fix non-standard ddt handling. Thanks Yuki Matsumoto for the report
  - Various libnbc fixes. Thanks Yuki Matsumoto for the report
  - Fix typos in request RMA bindings for Fortran. Thanks to @alazzaro
    and @vondele for the assist
  - Various bug fixes and enhancements to collective support
  - Fix predefined types mapping in hcoll
  - Revive the coll/sync component to resolve unexpected message issues
    during tight loops across collectives
  - Fix typo in wrapper compiler for Fortran static builds</changelog>
<changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Add new file to files section.</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1493121600">- Add openmpi-etc-files.patch to update config files so they
  match files from OpenMPI2</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Unify spec with SLE12
- Use upstream git repo to fetch source tarball</changelog>
<changelog author="jengelh@inai.de" date="1494417600">- Make description more objective</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)</changelog>

</package>
<package pkgid="553f3ea649edd090e54e1747cd393df8fd6948c9ac7cbf200e8257a9fea09f30" name="openmpi-devel-static" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="4.1"/>

<changelog author="pth@suse.de" date="1460635200">- Readd psm support.</changelog>
<changelog author="ro@suse.de" date="1460635201">- build with libpsm2 only on x86_64, the only platform
  where that library builds at the moment</changelog>
<changelog author="astieger@suse.com" date="1467028800">- Open MPI 1.10.3:
  * many upstream bug fixes, improvements, documentation updates</changelog>
<changelog author="pth@suse.de" date="1468411200">- BuildRequire libfabric if building for x86_64.</changelog>
<changelog author="pth@suse.de" date="1468411201">- BuildRequire libfabrics.</changelog>
<changelog author="pth@suse.de" date="1468497600">- Remove --with-devel-headers from configure options on request
  from upstream as it's only meant to be used when developing
  openmpi plugins outside the source tree and has consequences for
  normal users.
- Remove files only meant for developers of openmpi itself from
  the file list.</changelog>
<changelog author="pth@suse.de" date="1468929600">- Update to 1.10.3, last of the 1.10 releases (bsc#988787) :
  * Fix zero-length datatypes.
  * Minor manpage cleanups
  * Implement atomic support in OSHMEM/UCX
  * Fix support of MPI_COMBINER_RESIZED.
  * Fix computation of #cpus when --use-hwthread-cpus is used
  * Add entry points for Allgatherv, iAllgatherv, Reduce, and iReduce
    for the HCOLL library
  * Fix an HCOLL integration bug that could signal completion of request
    while still being worked
  * Fix computation of cores when SMT is enabled.
  * Various USNIC fixes
  * Create a datafile in the per-proc directory in order to make it
    unique per communicator. Thanks to Peter Wind for the report
  * Fix zero-size malloc in one-sided pt-to-pt code.
  * Fix MPI_Get_address when passed MPI_BOTTOM to not return an error.
  * Fix MPI_TYPE_SET_ATTR with NULL value.
  * Fix various Fortran08 binding issues
  * Fix memchecker no-data case.
  * Fix CUDA support under OS-X
  * Fix various OFI/MTL integration issues
  * Add MPI_T man pages
  * Fix one-sided pt-to-pt issue by preventing communication from happening
    before a target enters a fence, even in the no-precede case
  * Fix a bug that disabled Totalview for MPMD use-case
  * Correctly support MPI_UNWEIGHTED in topo-graph-neighbors.
  * Fix singleton operations under SLURM when PMI2 is enabled
  * Do not use MPI_IN_PLACE in neighborhood collectives for non-blocking
    collectives (libnbc).
  * Silence autogen deprecation warnings for newer versions of Perl
  * Do not return MPI_ERR_PENDING from collectives
  * Use type int* for MPI_WIN_DISP_UNIT, MPI_WIN_CREATE_FLAVOR, and MPI_WIN_MODEL.
  * Fix register_datarep stub function in IO/OMPIO.
  * Fix a bus error on MPI_WIN_[POST,START] in the shared memory one-sided component
  * Add several missing MPI_WIN_FLAVOR constants to the Fortran support
  * Enable connecting processes from different subnets using the openib BTL
  * Fix bug in basic/barrier algorithm in OSHMEM
  * Correct process binding for the --map-by node case
  * Include support for subnet-to-subnet routing over InfiniBand networks
  * Fix usnic resource check
  * AUTHORS: Fix an errant reference to Subversion IDs
  * Fix affinity for MPMD jobs running under LSF
  * Fix many Fortran binding bugs
  * Fix `MPI_IN_PLACE`-related bugs
  * Fix PSM/PSM2 support for singleton operations
  * Ensure MPI transports continue to progress during RTE barriers
  * Update HWLOC to 1.9.1 end-of-series
  * Fix a bug in the Java command line parser when the
  - Djava.library.path options was given by the user
  * Update the MTL/OFI provider selection behavior
  * Add support for clock_gettime on Linux.
  * Correctly compute #slots when -host is used for MPMD case
  * Fix a bug in the hcoll collectives due to an uninitialized field
  * Do not set a binding policy when oversubscribing a node
  * Fix hang in intercommunicator operations when oversubscribed
  * Speed up process termination during MPI_Abort
  * Disable backtrace support by default in the PSM/PSM2 libraries to
    prevent unintentional conflicting behavior.
- Exclude help text for opal-timer which isn't built on s390(x)</changelog>
<changelog author="pth@suse.de" date="1469620800">- instead of adding to the list of architectures that don't build
  help-opal-timer-linux.txt include it exclusively for ix86 and x86_64
  (bsc#990790).</changelog>
<changelog author="kmroz@suse.com" date="1472212800">- Guard files not installed when building without
  __malloc_initialize_hook (glibc 2.24). Currently this is only
  the case for Tumbleweed.</changelog>
<changelog author="schwab@suse.de" date="1474545600">- timer:linux is only built on %ix86 x86_64 ia64 ppc ppc64 %sparc</changelog>
<changelog author="pth@suse.de" date="1474632000">- Add a missing Conflicts: for openmpi-compat (bsc#999916 bsc#982458)</changelog>
<changelog author="pth@suse.de" date="1476273600">- Remove the Conflicts as the packages don't conflict anymore.
- Move the plugins (modules) to openmpi-libs (bsc#1003090).</changelog>
<changelog author="pth@suse.de" date="1479816000">- Fix creation of environment module in spec (bsc#1011484).</changelog>
<changelog author="pth@suse.de" date="1480334400">- Remove spurious characters from environment module (bsc#1012380).</changelog>
<changelog author="pth@suse.de" date="1489752000">- Update to 1.10.6 (fate#321475)
  Changes since 1.10.3:
  1.10.6:
  - Fix bug in timer code that caused problems at optimization settings
    greater than 2
  - OSHMEM: make mmap allocator the default instead of sysv or verbs
  - Support MPI_Dims_create with dimension zero
  - Update USNIC support
  - Prevent 64-bit overflow on timer counter
  - Add support for forwarding signals
  - Fix bug that caused truncated messages on large sends over TCP BTL
  - Fix potential infinite loop when printing a stacktrace
  1.10.5:
  - Update UCX APIs
  - Fix bug in darray that caused MPI/IO failures
  - Use a MPI_Get_library_version() like string to tag the debugger DLL.
    Thanks to Alastair McKinstry for the report
  - Fix multi-threaded race condition in coll/libnbc
  - Several fixes to OSHMEM
  - Fix bug in UCX support due to uninitialized field
  - Fix MPI_Ialltoallv with MPI_IN_PLACE and without MPI param check
  - Correctly reset receive request type before init. Thanks Chris Pattison
    for the report and test case.
  - Fix bug in iallgather[v]
  - Fix concurrency issue with MPI_Comm_accept. Thanks to Pieter Noordhuis
    for the patch
  - Fix ompi_coll_base_{gather,scatter}_intra_binomial
  - Fixed an issue with MPI_Type_get_extent returning the wrong extent
    for distributed array datatypes.
  - Re-enable use of rtdtsc instruction as a monotonic clock source if
    the processor has a core-invariant tsc. This is a partial fix for a
    performance regression introduced in Open MPI v1.10.3.
  1.10.4:
  - Fix assembler support for MIPS
  - Improve memory handling for temp buffers in collectives
  - Fix [all]reduce with non-zero lower bound datatypes
    Thanks Hristo Iliev for the report
  - Fix non-standard ddt handling. Thanks Yuki Matsumoto for the report
  - Various libnbc fixes. Thanks Yuki Matsumoto for the report
  - Fix typos in request RMA bindings for Fortran. Thanks to @alazzaro
    and @vondele for the assist
  - Various bug fixes and enhancements to collective support
  - Fix predefined types mapping in hcoll
  - Revive the coll/sync component to resolve unexpected message issues
    during tight loops across collectives
  - Fix typo in wrapper compiler for Fortran static builds</changelog>
<changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Add new file to files section.</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1493121600">- Add openmpi-etc-files.patch to update config files so they
  match files from OpenMPI2</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Unify spec with SLE12
- Use upstream git repo to fetch source tarball</changelog>
<changelog author="jengelh@inai.de" date="1494417600">- Make description more objective</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)</changelog>

</package>
<package pkgid="5327c3a021e2e6ac792f40d4c223de1a53747f13087105919d9271ef78c6f63b" name="openmpi-libs" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="4.1"/>

<changelog author="pth@suse.de" date="1460635200">- Readd psm support.</changelog>
<changelog author="ro@suse.de" date="1460635201">- build with libpsm2 only on x86_64, the only platform
  where that library builds at the moment</changelog>
<changelog author="astieger@suse.com" date="1467028800">- Open MPI 1.10.3:
  * many upstream bug fixes, improvements, documentation updates</changelog>
<changelog author="pth@suse.de" date="1468411200">- BuildRequire libfabric if building for x86_64.</changelog>
<changelog author="pth@suse.de" date="1468411201">- BuildRequire libfabrics.</changelog>
<changelog author="pth@suse.de" date="1468497600">- Remove --with-devel-headers from configure options on request
  from upstream as it's only meant to be used when developing
  openmpi plugins outside the source tree and has consequences for
  normal users.
- Remove files only meant for developers of openmpi itself from
  the file list.</changelog>
<changelog author="pth@suse.de" date="1468929600">- Update to 1.10.3, last of the 1.10 releases (bsc#988787) :
  * Fix zero-length datatypes.
  * Minor manpage cleanups
  * Implement atomic support in OSHMEM/UCX
  * Fix support of MPI_COMBINER_RESIZED.
  * Fix computation of #cpus when --use-hwthread-cpus is used
  * Add entry points for Allgatherv, iAllgatherv, Reduce, and iReduce
    for the HCOLL library
  * Fix an HCOLL integration bug that could signal completion of request
    while still being worked
  * Fix computation of cores when SMT is enabled.
  * Various USNIC fixes
  * Create a datafile in the per-proc directory in order to make it
    unique per communicator. Thanks to Peter Wind for the report
  * Fix zero-size malloc in one-sided pt-to-pt code.
  * Fix MPI_Get_address when passed MPI_BOTTOM to not return an error.
  * Fix MPI_TYPE_SET_ATTR with NULL value.
  * Fix various Fortran08 binding issues
  * Fix memchecker no-data case.
  * Fix CUDA support under OS-X
  * Fix various OFI/MTL integration issues
  * Add MPI_T man pages
  * Fix one-sided pt-to-pt issue by preventing communication from happening
    before a target enters a fence, even in the no-precede case
  * Fix a bug that disabled Totalview for MPMD use-case
  * Correctly support MPI_UNWEIGHTED in topo-graph-neighbors.
  * Fix singleton operations under SLURM when PMI2 is enabled
  * Do not use MPI_IN_PLACE in neighborhood collectives for non-blocking
    collectives (libnbc).
  * Silence autogen deprecation warnings for newer versions of Perl
  * Do not return MPI_ERR_PENDING from collectives
  * Use type int* for MPI_WIN_DISP_UNIT, MPI_WIN_CREATE_FLAVOR, and MPI_WIN_MODEL.
  * Fix register_datarep stub function in IO/OMPIO.
  * Fix a bus error on MPI_WIN_[POST,START] in the shared memory one-sided component
  * Add several missing MPI_WIN_FLAVOR constants to the Fortran support
  * Enable connecting processes from different subnets using the openib BTL
  * Fix bug in basic/barrier algorithm in OSHMEM
  * Correct process binding for the --map-by node case
  * Include support for subnet-to-subnet routing over InfiniBand networks
  * Fix usnic resource check
  * AUTHORS: Fix an errant reference to Subversion IDs
  * Fix affinity for MPMD jobs running under LSF
  * Fix many Fortran binding bugs
  * Fix `MPI_IN_PLACE`-related bugs
  * Fix PSM/PSM2 support for singleton operations
  * Ensure MPI transports continue to progress during RTE barriers
  * Update HWLOC to 1.9.1 end-of-series
  * Fix a bug in the Java command line parser when the
  - Djava.library.path options was given by the user
  * Update the MTL/OFI provider selection behavior
  * Add support for clock_gettime on Linux.
  * Correctly compute #slots when -host is used for MPMD case
  * Fix a bug in the hcoll collectives due to an uninitialized field
  * Do not set a binding policy when oversubscribing a node
  * Fix hang in intercommunicator operations when oversubscribed
  * Speed up process termination during MPI_Abort
  * Disable backtrace support by default in the PSM/PSM2 libraries to
    prevent unintentional conflicting behavior.
- Exclude help text for opal-timer which isn't built on s390(x)</changelog>
<changelog author="pth@suse.de" date="1469620800">- instead of adding to the list of architectures that don't build
  help-opal-timer-linux.txt include it exclusively for ix86 and x86_64
  (bsc#990790).</changelog>
<changelog author="kmroz@suse.com" date="1472212800">- Guard files not installed when building without
  __malloc_initialize_hook (glibc 2.24). Currently this is only
  the case for Tumbleweed.</changelog>
<changelog author="schwab@suse.de" date="1474545600">- timer:linux is only built on %ix86 x86_64 ia64 ppc ppc64 %sparc</changelog>
<changelog author="pth@suse.de" date="1474632000">- Add a missing Conflicts: for openmpi-compat (bsc#999916 bsc#982458)</changelog>
<changelog author="pth@suse.de" date="1476273600">- Remove the Conflicts as the packages don't conflict anymore.
- Move the plugins (modules) to openmpi-libs (bsc#1003090).</changelog>
<changelog author="pth@suse.de" date="1479816000">- Fix creation of environment module in spec (bsc#1011484).</changelog>
<changelog author="pth@suse.de" date="1480334400">- Remove spurious characters from environment module (bsc#1012380).</changelog>
<changelog author="pth@suse.de" date="1489752000">- Update to 1.10.6 (fate#321475)
  Changes since 1.10.3:
  1.10.6:
  - Fix bug in timer code that caused problems at optimization settings
    greater than 2
  - OSHMEM: make mmap allocator the default instead of sysv or verbs
  - Support MPI_Dims_create with dimension zero
  - Update USNIC support
  - Prevent 64-bit overflow on timer counter
  - Add support for forwarding signals
  - Fix bug that caused truncated messages on large sends over TCP BTL
  - Fix potential infinite loop when printing a stacktrace
  1.10.5:
  - Update UCX APIs
  - Fix bug in darray that caused MPI/IO failures
  - Use a MPI_Get_library_version() like string to tag the debugger DLL.
    Thanks to Alastair McKinstry for the report
  - Fix multi-threaded race condition in coll/libnbc
  - Several fixes to OSHMEM
  - Fix bug in UCX support due to uninitialized field
  - Fix MPI_Ialltoallv with MPI_IN_PLACE and without MPI param check
  - Correctly reset receive request type before init. Thanks Chris Pattison
    for the report and test case.
  - Fix bug in iallgather[v]
  - Fix concurrency issue with MPI_Comm_accept. Thanks to Pieter Noordhuis
    for the patch
  - Fix ompi_coll_base_{gather,scatter}_intra_binomial
  - Fixed an issue with MPI_Type_get_extent returning the wrong extent
    for distributed array datatypes.
  - Re-enable use of rtdtsc instruction as a monotonic clock source if
    the processor has a core-invariant tsc. This is a partial fix for a
    performance regression introduced in Open MPI v1.10.3.
  1.10.4:
  - Fix assembler support for MIPS
  - Improve memory handling for temp buffers in collectives
  - Fix [all]reduce with non-zero lower bound datatypes
    Thanks Hristo Iliev for the report
  - Fix non-standard ddt handling. Thanks Yuki Matsumoto for the report
  - Various libnbc fixes. Thanks Yuki Matsumoto for the report
  - Fix typos in request RMA bindings for Fortran. Thanks to @alazzaro
    and @vondele for the assist
  - Various bug fixes and enhancements to collective support
  - Fix predefined types mapping in hcoll
  - Revive the coll/sync component to resolve unexpected message issues
    during tight loops across collectives
  - Fix typo in wrapper compiler for Fortran static builds</changelog>
<changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Add new file to files section.</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1493121600">- Add openmpi-etc-files.patch to update config files so they
  match files from OpenMPI2</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Unify spec with SLE12
- Use upstream git repo to fetch source tarball</changelog>
<changelog author="jengelh@inai.de" date="1494417600">- Make description more objective</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)</changelog>

</package>
<package pkgid="89ae0344472b160f0d4570395737fa3879ad0a3ea3bfaab210957ce19e04cc99" name="openmpi-libs-32bit" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="4.1"/>

<changelog author="pth@suse.de" date="1460635200">- Readd psm support.</changelog>
<changelog author="ro@suse.de" date="1460635201">- build with libpsm2 only on x86_64, the only platform
  where that library builds at the moment</changelog>
<changelog author="astieger@suse.com" date="1467028800">- Open MPI 1.10.3:
  * many upstream bug fixes, improvements, documentation updates</changelog>
<changelog author="pth@suse.de" date="1468411200">- BuildRequire libfabric if building for x86_64.</changelog>
<changelog author="pth@suse.de" date="1468411201">- BuildRequire libfabrics.</changelog>
<changelog author="pth@suse.de" date="1468497600">- Remove --with-devel-headers from configure options on request
  from upstream as it's only meant to be used when developing
  openmpi plugins outside the source tree and has consequences for
  normal users.
- Remove files only meant for developers of openmpi itself from
  the file list.</changelog>
<changelog author="pth@suse.de" date="1468929600">- Update to 1.10.3, last of the 1.10 releases (bsc#988787) :
  * Fix zero-length datatypes.
  * Minor manpage cleanups
  * Implement atomic support in OSHMEM/UCX
  * Fix support of MPI_COMBINER_RESIZED.
  * Fix computation of #cpus when --use-hwthread-cpus is used
  * Add entry points for Allgatherv, iAllgatherv, Reduce, and iReduce
    for the HCOLL library
  * Fix an HCOLL integration bug that could signal completion of request
    while still being worked
  * Fix computation of cores when SMT is enabled.
  * Various USNIC fixes
  * Create a datafile in the per-proc directory in order to make it
    unique per communicator. Thanks to Peter Wind for the report
  * Fix zero-size malloc in one-sided pt-to-pt code.
  * Fix MPI_Get_address when passed MPI_BOTTOM to not return an error.
  * Fix MPI_TYPE_SET_ATTR with NULL value.
  * Fix various Fortran08 binding issues
  * Fix memchecker no-data case.
  * Fix CUDA support under OS-X
  * Fix various OFI/MTL integration issues
  * Add MPI_T man pages
  * Fix one-sided pt-to-pt issue by preventing communication from happening
    before a target enters a fence, even in the no-precede case
  * Fix a bug that disabled Totalview for MPMD use-case
  * Correctly support MPI_UNWEIGHTED in topo-graph-neighbors.
  * Fix singleton operations under SLURM when PMI2 is enabled
  * Do not use MPI_IN_PLACE in neighborhood collectives for non-blocking
    collectives (libnbc).
  * Silence autogen deprecation warnings for newer versions of Perl
  * Do not return MPI_ERR_PENDING from collectives
  * Use type int* for MPI_WIN_DISP_UNIT, MPI_WIN_CREATE_FLAVOR, and MPI_WIN_MODEL.
  * Fix register_datarep stub function in IO/OMPIO.
  * Fix a bus error on MPI_WIN_[POST,START] in the shared memory one-sided component
  * Add several missing MPI_WIN_FLAVOR constants to the Fortran support
  * Enable connecting processes from different subnets using the openib BTL
  * Fix bug in basic/barrier algorithm in OSHMEM
  * Correct process binding for the --map-by node case
  * Include support for subnet-to-subnet routing over InfiniBand networks
  * Fix usnic resource check
  * AUTHORS: Fix an errant reference to Subversion IDs
  * Fix affinity for MPMD jobs running under LSF
  * Fix many Fortran binding bugs
  * Fix `MPI_IN_PLACE`-related bugs
  * Fix PSM/PSM2 support for singleton operations
  * Ensure MPI transports continue to progress during RTE barriers
  * Update HWLOC to 1.9.1 end-of-series
  * Fix a bug in the Java command line parser when the
  - Djava.library.path options was given by the user
  * Update the MTL/OFI provider selection behavior
  * Add support for clock_gettime on Linux.
  * Correctly compute #slots when -host is used for MPMD case
  * Fix a bug in the hcoll collectives due to an uninitialized field
  * Do not set a binding policy when oversubscribing a node
  * Fix hang in intercommunicator operations when oversubscribed
  * Speed up process termination during MPI_Abort
  * Disable backtrace support by default in the PSM/PSM2 libraries to
    prevent unintentional conflicting behavior.
- Exclude help text for opal-timer which isn't built on s390(x)</changelog>
<changelog author="pth@suse.de" date="1469620800">- instead of adding to the list of architectures that don't build
  help-opal-timer-linux.txt include it exclusively for ix86 and x86_64
  (bsc#990790).</changelog>
<changelog author="kmroz@suse.com" date="1472212800">- Guard files not installed when building without
  __malloc_initialize_hook (glibc 2.24). Currently this is only
  the case for Tumbleweed.</changelog>
<changelog author="schwab@suse.de" date="1474545600">- timer:linux is only built on %ix86 x86_64 ia64 ppc ppc64 %sparc</changelog>
<changelog author="pth@suse.de" date="1474632000">- Add a missing Conflicts: for openmpi-compat (bsc#999916 bsc#982458)</changelog>
<changelog author="pth@suse.de" date="1476273600">- Remove the Conflicts as the packages don't conflict anymore.
- Move the plugins (modules) to openmpi-libs (bsc#1003090).</changelog>
<changelog author="pth@suse.de" date="1479816000">- Fix creation of environment module in spec (bsc#1011484).</changelog>
<changelog author="pth@suse.de" date="1480334400">- Remove spurious characters from environment module (bsc#1012380).</changelog>
<changelog author="pth@suse.de" date="1489752000">- Update to 1.10.6 (fate#321475)
  Changes since 1.10.3:
  1.10.6:
  - Fix bug in timer code that caused problems at optimization settings
    greater than 2
  - OSHMEM: make mmap allocator the default instead of sysv or verbs
  - Support MPI_Dims_create with dimension zero
  - Update USNIC support
  - Prevent 64-bit overflow on timer counter
  - Add support for forwarding signals
  - Fix bug that caused truncated messages on large sends over TCP BTL
  - Fix potential infinite loop when printing a stacktrace
  1.10.5:
  - Update UCX APIs
  - Fix bug in darray that caused MPI/IO failures
  - Use a MPI_Get_library_version() like string to tag the debugger DLL.
    Thanks to Alastair McKinstry for the report
  - Fix multi-threaded race condition in coll/libnbc
  - Several fixes to OSHMEM
  - Fix bug in UCX support due to uninitialized field
  - Fix MPI_Ialltoallv with MPI_IN_PLACE and without MPI param check
  - Correctly reset receive request type before init. Thanks Chris Pattison
    for the report and test case.
  - Fix bug in iallgather[v]
  - Fix concurrency issue with MPI_Comm_accept. Thanks to Pieter Noordhuis
    for the patch
  - Fix ompi_coll_base_{gather,scatter}_intra_binomial
  - Fixed an issue with MPI_Type_get_extent returning the wrong extent
    for distributed array datatypes.
  - Re-enable use of rtdtsc instruction as a monotonic clock source if
    the processor has a core-invariant tsc. This is a partial fix for a
    performance regression introduced in Open MPI v1.10.3.
  1.10.4:
  - Fix assembler support for MIPS
  - Improve memory handling for temp buffers in collectives
  - Fix [all]reduce with non-zero lower bound datatypes
    Thanks Hristo Iliev for the report
  - Fix non-standard ddt handling. Thanks Yuki Matsumoto for the report
  - Various libnbc fixes. Thanks Yuki Matsumoto for the report
  - Fix typos in request RMA bindings for Fortran. Thanks to @alazzaro
    and @vondele for the assist
  - Various bug fixes and enhancements to collective support
  - Fix predefined types mapping in hcoll
  - Revive the coll/sync component to resolve unexpected message issues
    during tight loops across collectives
  - Fix typo in wrapper compiler for Fortran static builds</changelog>
<changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Add new file to files section.</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1493121600">- Add openmpi-etc-files.patch to update config files so they
  match files from OpenMPI2</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Unify spec with SLE12
- Use upstream git repo to fetch source tarball</changelog>
<changelog author="jengelh@inai.de" date="1494417600">- Make description more objective</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)</changelog>

</package>
<package pkgid="cb0058560b2f4b624275c7664edf0f97456d464d240ba6fa3db2ab2a86dac4a5" name="openmpi-testsuite" arch="src">
    <version epoch="0" ver="1.10.6" rel="4.1"/>

<changelog author="pth@suse.de" date="1460635200">- Readd psm support.</changelog>
<changelog author="ro@suse.de" date="1460635201">- build with libpsm2 only on x86_64, the only platform
  where that library builds at the moment</changelog>
<changelog author="astieger@suse.com" date="1467028800">- Open MPI 1.10.3:
  * many upstream bug fixes, improvements, documentation updates</changelog>
<changelog author="pth@suse.de" date="1468411200">- BuildRequire libfabric if building for x86_64.</changelog>
<changelog author="pth@suse.de" date="1468411201">- BuildRequire libfabrics.</changelog>
<changelog author="pth@suse.de" date="1468497600">- Remove --with-devel-headers from configure options on request
  from upstream as it's only meant to be used when developing
  openmpi plugins outside the source tree and has consequences for
  normal users.
- Remove files only meant for developers of openmpi itself from
  the file list.</changelog>
<changelog author="pth@suse.de" date="1468929600">- Update to 1.10.3, last of the 1.10 releases (bsc#988787) :
  * Fix zero-length datatypes.
  * Minor manpage cleanups
  * Implement atomic support in OSHMEM/UCX
  * Fix support of MPI_COMBINER_RESIZED.
  * Fix computation of #cpus when --use-hwthread-cpus is used
  * Add entry points for Allgatherv, iAllgatherv, Reduce, and iReduce
    for the HCOLL library
  * Fix an HCOLL integration bug that could signal completion of request
    while still being worked
  * Fix computation of cores when SMT is enabled.
  * Various USNIC fixes
  * Create a datafile in the per-proc directory in order to make it
    unique per communicator. Thanks to Peter Wind for the report
  * Fix zero-size malloc in one-sided pt-to-pt code.
  * Fix MPI_Get_address when passed MPI_BOTTOM to not return an error.
  * Fix MPI_TYPE_SET_ATTR with NULL value.
  * Fix various Fortran08 binding issues
  * Fix memchecker no-data case.
  * Fix CUDA support under OS-X
  * Fix various OFI/MTL integration issues
  * Add MPI_T man pages
  * Fix one-sided pt-to-pt issue by preventing communication from happening
    before a target enters a fence, even in the no-precede case
  * Fix a bug that disabled Totalview for MPMD use-case
  * Correctly support MPI_UNWEIGHTED in topo-graph-neighbors.
  * Fix singleton operations under SLURM when PMI2 is enabled
  * Do not use MPI_IN_PLACE in neighborhood collectives for non-blocking
    collectives (libnbc).
  * Silence autogen deprecation warnings for newer versions of Perl
  * Do not return MPI_ERR_PENDING from collectives
  * Use type int* for MPI_WIN_DISP_UNIT, MPI_WIN_CREATE_FLAVOR, and MPI_WIN_MODEL.
  * Fix register_datarep stub function in IO/OMPIO.
  * Fix a bus error on MPI_WIN_[POST,START] in the shared memory one-sided component
  * Add several missing MPI_WIN_FLAVOR constants to the Fortran support
  * Enable connecting processes from different subnets using the openib BTL
  * Fix bug in basic/barrier algorithm in OSHMEM
  * Correct process binding for the --map-by node case
  * Include support for subnet-to-subnet routing over InfiniBand networks
  * Fix usnic resource check
  * AUTHORS: Fix an errant reference to Subversion IDs
  * Fix affinity for MPMD jobs running under LSF
  * Fix many Fortran binding bugs
  * Fix `MPI_IN_PLACE`-related bugs
  * Fix PSM/PSM2 support for singleton operations
  * Ensure MPI transports continue to progress during RTE barriers
  * Update HWLOC to 1.9.1 end-of-series
  * Fix a bug in the Java command line parser when the
  - Djava.library.path options was given by the user
  * Update the MTL/OFI provider selection behavior
  * Add support for clock_gettime on Linux.
  * Correctly compute #slots when -host is used for MPMD case
  * Fix a bug in the hcoll collectives due to an uninitialized field
  * Do not set a binding policy when oversubscribing a node
  * Fix hang in intercommunicator operations when oversubscribed
  * Speed up process termination during MPI_Abort
  * Disable backtrace support by default in the PSM/PSM2 libraries to
    prevent unintentional conflicting behavior.
- Exclude help text for opal-timer which isn't built on s390(x)</changelog>
<changelog author="pth@suse.de" date="1469620800">- instead of adding to the list of architectures that don't build
  help-opal-timer-linux.txt include it exclusively for ix86 and x86_64
  (bsc#990790).</changelog>
<changelog author="kmroz@suse.com" date="1472212800">- Guard files not installed when building without
  __malloc_initialize_hook (glibc 2.24). Currently this is only
  the case for Tumbleweed.</changelog>
<changelog author="schwab@suse.de" date="1474545600">- timer:linux is only built on %ix86 x86_64 ia64 ppc ppc64 %sparc</changelog>
<changelog author="pth@suse.de" date="1474632000">- Add a missing Conflicts: for openmpi-compat (bsc#999916 bsc#982458)</changelog>
<changelog author="pth@suse.de" date="1476273600">- Remove the Conflicts as the packages don't conflict anymore.
- Move the plugins (modules) to openmpi-libs (bsc#1003090).</changelog>
<changelog author="pth@suse.de" date="1479816000">- Fix creation of environment module in spec (bsc#1011484).</changelog>
<changelog author="pth@suse.de" date="1480334400">- Remove spurious characters from environment module (bsc#1012380).</changelog>
<changelog author="pth@suse.de" date="1489752000">- Update to 1.10.6 (fate#321475)
  Changes since 1.10.3:
  1.10.6:
  - Fix bug in timer code that caused problems at optimization settings
    greater than 2
  - OSHMEM: make mmap allocator the default instead of sysv or verbs
  - Support MPI_Dims_create with dimension zero
  - Update USNIC support
  - Prevent 64-bit overflow on timer counter
  - Add support for forwarding signals
  - Fix bug that caused truncated messages on large sends over TCP BTL
  - Fix potential infinite loop when printing a stacktrace
  1.10.5:
  - Update UCX APIs
  - Fix bug in darray that caused MPI/IO failures
  - Use a MPI_Get_library_version() like string to tag the debugger DLL.
    Thanks to Alastair McKinstry for the report
  - Fix multi-threaded race condition in coll/libnbc
  - Several fixes to OSHMEM
  - Fix bug in UCX support due to uninitialized field
  - Fix MPI_Ialltoallv with MPI_IN_PLACE and without MPI param check
  - Correctly reset receive request type before init. Thanks Chris Pattison
    for the report and test case.
  - Fix bug in iallgather[v]
  - Fix concurrency issue with MPI_Comm_accept. Thanks to Pieter Noordhuis
    for the patch
  - Fix ompi_coll_base_{gather,scatter}_intra_binomial
  - Fixed an issue with MPI_Type_get_extent returning the wrong extent
    for distributed array datatypes.
  - Re-enable use of rtdtsc instruction as a monotonic clock source if
    the processor has a core-invariant tsc. This is a partial fix for a
    performance regression introduced in Open MPI v1.10.3.
  1.10.4:
  - Fix assembler support for MIPS
  - Improve memory handling for temp buffers in collectives
  - Fix [all]reduce with non-zero lower bound datatypes
    Thanks Hristo Iliev for the report
  - Fix non-standard ddt handling. Thanks Yuki Matsumoto for the report
  - Various libnbc fixes. Thanks Yuki Matsumoto for the report
  - Fix typos in request RMA bindings for Fortran. Thanks to @alazzaro
    and @vondele for the assist
  - Various bug fixes and enhancements to collective support
  - Fix predefined types mapping in hcoll
  - Revive the coll/sync component to resolve unexpected message issues
    during tight loops across collectives
  - Fix typo in wrapper compiler for Fortran static builds</changelog>
<changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Add new file to files section.</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1493121600">- Add openmpi-etc-files.patch to update config files so they
  match files from OpenMPI2</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Unify spec with SLE12
- Use upstream git repo to fetch source tarball</changelog>
<changelog author="jengelh@inai.de" date="1494417600">- Make description more objective</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)</changelog>

</package>
<package pkgid="61a862e8289935a20074ac95ce6ed614368bcb36c11a9cb9a81c6dace88d942b" name="openmpi-testsuite" arch="x86_64">
    <version epoch="0" ver="1.10.6" rel="4.1"/>

<changelog author="pth@suse.de" date="1460635200">- Readd psm support.</changelog>
<changelog author="ro@suse.de" date="1460635201">- build with libpsm2 only on x86_64, the only platform
  where that library builds at the moment</changelog>
<changelog author="astieger@suse.com" date="1467028800">- Open MPI 1.10.3:
  * many upstream bug fixes, improvements, documentation updates</changelog>
<changelog author="pth@suse.de" date="1468411200">- BuildRequire libfabric if building for x86_64.</changelog>
<changelog author="pth@suse.de" date="1468411201">- BuildRequire libfabrics.</changelog>
<changelog author="pth@suse.de" date="1468497600">- Remove --with-devel-headers from configure options on request
  from upstream as it's only meant to be used when developing
  openmpi plugins outside the source tree and has consequences for
  normal users.
- Remove files only meant for developers of openmpi itself from
  the file list.</changelog>
<changelog author="pth@suse.de" date="1468929600">- Update to 1.10.3, last of the 1.10 releases (bsc#988787) :
  * Fix zero-length datatypes.
  * Minor manpage cleanups
  * Implement atomic support in OSHMEM/UCX
  * Fix support of MPI_COMBINER_RESIZED.
  * Fix computation of #cpus when --use-hwthread-cpus is used
  * Add entry points for Allgatherv, iAllgatherv, Reduce, and iReduce
    for the HCOLL library
  * Fix an HCOLL integration bug that could signal completion of request
    while still being worked
  * Fix computation of cores when SMT is enabled.
  * Various USNIC fixes
  * Create a datafile in the per-proc directory in order to make it
    unique per communicator. Thanks to Peter Wind for the report
  * Fix zero-size malloc in one-sided pt-to-pt code.
  * Fix MPI_Get_address when passed MPI_BOTTOM to not return an error.
  * Fix MPI_TYPE_SET_ATTR with NULL value.
  * Fix various Fortran08 binding issues
  * Fix memchecker no-data case.
  * Fix CUDA support under OS-X
  * Fix various OFI/MTL integration issues
  * Add MPI_T man pages
  * Fix one-sided pt-to-pt issue by preventing communication from happening
    before a target enters a fence, even in the no-precede case
  * Fix a bug that disabled Totalview for MPMD use-case
  * Correctly support MPI_UNWEIGHTED in topo-graph-neighbors.
  * Fix singleton operations under SLURM when PMI2 is enabled
  * Do not use MPI_IN_PLACE in neighborhood collectives for non-blocking
    collectives (libnbc).
  * Silence autogen deprecation warnings for newer versions of Perl
  * Do not return MPI_ERR_PENDING from collectives
  * Use type int* for MPI_WIN_DISP_UNIT, MPI_WIN_CREATE_FLAVOR, and MPI_WIN_MODEL.
  * Fix register_datarep stub function in IO/OMPIO.
  * Fix a bus error on MPI_WIN_[POST,START] in the shared memory one-sided component
  * Add several missing MPI_WIN_FLAVOR constants to the Fortran support
  * Enable connecting processes from different subnets using the openib BTL
  * Fix bug in basic/barrier algorithm in OSHMEM
  * Correct process binding for the --map-by node case
  * Include support for subnet-to-subnet routing over InfiniBand networks
  * Fix usnic resource check
  * AUTHORS: Fix an errant reference to Subversion IDs
  * Fix affinity for MPMD jobs running under LSF
  * Fix many Fortran binding bugs
  * Fix `MPI_IN_PLACE`-related bugs
  * Fix PSM/PSM2 support for singleton operations
  * Ensure MPI transports continue to progress during RTE barriers
  * Update HWLOC to 1.9.1 end-of-series
  * Fix a bug in the Java command line parser when the
  - Djava.library.path options was given by the user
  * Update the MTL/OFI provider selection behavior
  * Add support for clock_gettime on Linux.
  * Correctly compute #slots when -host is used for MPMD case
  * Fix a bug in the hcoll collectives due to an uninitialized field
  * Do not set a binding policy when oversubscribing a node
  * Fix hang in intercommunicator operations when oversubscribed
  * Speed up process termination during MPI_Abort
  * Disable backtrace support by default in the PSM/PSM2 libraries to
    prevent unintentional conflicting behavior.
- Exclude help text for opal-timer which isn't built on s390(x)</changelog>
<changelog author="pth@suse.de" date="1469620800">- instead of adding to the list of architectures that don't build
  help-opal-timer-linux.txt include it exclusively for ix86 and x86_64
  (bsc#990790).</changelog>
<changelog author="kmroz@suse.com" date="1472212800">- Guard files not installed when building without
  __malloc_initialize_hook (glibc 2.24). Currently this is only
  the case for Tumbleweed.</changelog>
<changelog author="schwab@suse.de" date="1474545600">- timer:linux is only built on %ix86 x86_64 ia64 ppc ppc64 %sparc</changelog>
<changelog author="pth@suse.de" date="1474632000">- Add a missing Conflicts: for openmpi-compat (bsc#999916 bsc#982458)</changelog>
<changelog author="pth@suse.de" date="1476273600">- Remove the Conflicts as the packages don't conflict anymore.
- Move the plugins (modules) to openmpi-libs (bsc#1003090).</changelog>
<changelog author="pth@suse.de" date="1479816000">- Fix creation of environment module in spec (bsc#1011484).</changelog>
<changelog author="pth@suse.de" date="1480334400">- Remove spurious characters from environment module (bsc#1012380).</changelog>
<changelog author="pth@suse.de" date="1489752000">- Update to 1.10.6 (fate#321475)
  Changes since 1.10.3:
  1.10.6:
  - Fix bug in timer code that caused problems at optimization settings
    greater than 2
  - OSHMEM: make mmap allocator the default instead of sysv or verbs
  - Support MPI_Dims_create with dimension zero
  - Update USNIC support
  - Prevent 64-bit overflow on timer counter
  - Add support for forwarding signals
  - Fix bug that caused truncated messages on large sends over TCP BTL
  - Fix potential infinite loop when printing a stacktrace
  1.10.5:
  - Update UCX APIs
  - Fix bug in darray that caused MPI/IO failures
  - Use a MPI_Get_library_version() like string to tag the debugger DLL.
    Thanks to Alastair McKinstry for the report
  - Fix multi-threaded race condition in coll/libnbc
  - Several fixes to OSHMEM
  - Fix bug in UCX support due to uninitialized field
  - Fix MPI_Ialltoallv with MPI_IN_PLACE and without MPI param check
  - Correctly reset receive request type before init. Thanks Chris Pattison
    for the report and test case.
  - Fix bug in iallgather[v]
  - Fix concurrency issue with MPI_Comm_accept. Thanks to Pieter Noordhuis
    for the patch
  - Fix ompi_coll_base_{gather,scatter}_intra_binomial
  - Fixed an issue with MPI_Type_get_extent returning the wrong extent
    for distributed array datatypes.
  - Re-enable use of rtdtsc instruction as a monotonic clock source if
    the processor has a core-invariant tsc. This is a partial fix for a
    performance regression introduced in Open MPI v1.10.3.
  1.10.4:
  - Fix assembler support for MIPS
  - Improve memory handling for temp buffers in collectives
  - Fix [all]reduce with non-zero lower bound datatypes
    Thanks Hristo Iliev for the report
  - Fix non-standard ddt handling. Thanks Yuki Matsumoto for the report
  - Various libnbc fixes. Thanks Yuki Matsumoto for the report
  - Fix typos in request RMA bindings for Fortran. Thanks to @alazzaro
    and @vondele for the assist
  - Various bug fixes and enhancements to collective support
  - Fix predefined types mapping in hcoll
  - Revive the coll/sync component to resolve unexpected message issues
    during tight loops across collectives
  - Fix typo in wrapper compiler for Fortran static builds</changelog>
<changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Add new file to files section.</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1493121600">- Add openmpi-etc-files.patch to update config files so they
  match files from OpenMPI2</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1494331200">- Unify spec with SLE12
- Use upstream git repo to fetch source tarball</changelog>
<changelog author="jengelh@inai.de" date="1494417600">- Make description more objective</changelog>
<changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Remove --enable-mpi-thread-multiple configure option as it
  silently disabled Infiniband support. (bsc#1058811, boo#1058750)</changelog>

</package>
<package pkgid="a082fab9e65cc27f9894a3c21791f166f746dc4b958933d21698d093e685caa5" name="opensaml" arch="src">
    <version epoch="0" ver="2.5.5" rel="6.1"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add opensaml-2.5.5-doxygen_timestamp.patch to remove timestamps
  in a documentation generated by Doxygen and avoid RPMLINT warnings
  (file-contains-date-and-time).</changelog>
<changelog author="kstreitova@suse.com" date="1438084800">- use spec-cleaner again
- fix Source address
- remove unused conditionals</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add opensaml-2.5.5-CVE-2017-16853.patch to fix a critical security
  issue when the DynamicMetadataProvider class in
  saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C
  in OpenSAML before 2.6.1 fails to properly configure itself with
  the MetadataFilter plugins and does not perform critical security
  checks [bsc#1068685] [CVE-2017-16853]</changelog>

</package>
<package pkgid="d70b64c81c036d8d604c4c11f4d03984b378e65ea5b7eabf57c69112e0789f6f" name="opensaml-bin" arch="x86_64">
    <version epoch="0" ver="2.5.5" rel="6.1"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add opensaml-2.5.5-doxygen_timestamp.patch to remove timestamps
  in a documentation generated by Doxygen and avoid RPMLINT warnings
  (file-contains-date-and-time).</changelog>
<changelog author="kstreitova@suse.com" date="1438084800">- use spec-cleaner again
- fix Source address
- remove unused conditionals</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add opensaml-2.5.5-CVE-2017-16853.patch to fix a critical security
  issue when the DynamicMetadataProvider class in
  saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C
  in OpenSAML before 2.6.1 fails to properly configure itself with
  the MetadataFilter plugins and does not perform critical security
  checks [bsc#1068685] [CVE-2017-16853]</changelog>

</package>
<package pkgid="035073b08956072766baefba79d56d4d5547307b52a4cdef4cd239c8c3f58322" name="opensaml-schemas" arch="x86_64">
    <version epoch="0" ver="2.5.5" rel="6.1"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add opensaml-2.5.5-doxygen_timestamp.patch to remove timestamps
  in a documentation generated by Doxygen and avoid RPMLINT warnings
  (file-contains-date-and-time).</changelog>
<changelog author="kstreitova@suse.com" date="1438084800">- use spec-cleaner again
- fix Source address
- remove unused conditionals</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add opensaml-2.5.5-CVE-2017-16853.patch to fix a critical security
  issue when the DynamicMetadataProvider class in
  saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C
  in OpenSAML before 2.6.1 fails to properly configure itself with
  the MetadataFilter plugins and does not perform critical security
  checks [bsc#1068685] [CVE-2017-16853]</changelog>

</package>
<package pkgid="90eb3905ce72bf4c3474b3f51d1c92d3d5beadb749770762a663df4a92c2b4a3" name="openssh" arch="src">
    <version epoch="0" ver="7.2p2" rel="15.1"/>

<changelog author="pcerny@suse.com" date="1431604800">- use %restart_on_update in the trigger script</changelog>
<changelog author="pcerny@suse.com" date="1438344000">- Maintenance update
  * better timeouting of X11 forwards (CVE-2015-5352/bsc#936695)
    [-X11_forwarding_timeout] and hardening of ssh-agent(1)
    locking (bsc#936695) [-agent_locking_hardening]
  * removing and disabling short DH parameters (bsc#932483)
    [-disable_DH_under_1536b, -remove_moduli_under_1536b]
  * disable accdess to procfs from sftp (bsc#903649)
    [-sftp_procfs_restrictions]
  * Allow each keyboard authentication method to be used only
    once per login (CVE-2015-5600/bsc#938746)
    [-use_each_kbd_method_just_once]
  * Don't resend username to PAM, it can be misused for privilege
    escalation (CVE-2015-6563/bsc#943010)
    [-pam_privsep_dont_resend_username]
  * Prevent possible use-after-free in PAM authentication monitor
    (CVE-2015-6564/bsc#943006)
    [-pam_privsep_auth_uaf]</changelog>
<changelog author="jsegitz@novell.com" date="1452686400">- CVE-2016-0777, bsc#961642, CVE-2016-0778, bsc#961645
  Added CVE-2016-077-7_8.patch to disable the roaming code to prevent
  information leak and buffer overflow</changelog>
<changelog author="pcerny@suse.com" date="1457438400">- fix minor problems (bsc#945493)
- fix postun script of main package (bsc#945484)
- fix crashes when /proc is not available (bsc#947458)
- rename and comment the roaming patch
  (CVE-2016-077-7_8 to -disable_roaming)</changelog>
<changelog author="pcerny@suse.com" date="1460030400">- Correctly parse GSSAPI KEX algorithms (bsc#961368)
- Sanitise input for xauth(1) (bsc#970632, CVE-2016-3115)
  [-sanitise_xauth_input]
- prevent X11 SECURITY circumvention when forwarding X11
  connections (bsc#962313, CVE-2016-1908)
  [-untrusted_X_forwarding]
- more verbose FIPS mode/CC related documentation in README.FIPS
  (bsc#965576, bsc#960414)
- fix PRNG re-seeding (bsc#960414, bsc#729190)
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [-disable_DH_under_1536b -&gt; -disable_short_DH_parameters]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [-ignore_PAM_with_UseLogin]</changelog>
<changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2 (FATE#319675)
  upstream package without any SUSE patches
  Distilled upstream log:
- OpenSSH 6.7
  Potentially-incompatible changes:
  * sshd(8): The default set of ciphers and MACs has been
    altered to remove unsafe algorithms. In particular, CBC
    ciphers and arcfour* are disabled by default.
    The full set of algorithms remains available if configured
    explicitly via the Ciphers and MACs sshd_config options.
  * sshd(8): Support for tcpwrappers/libwrap has been removed.
  * OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of
    connections using the curve25519-sha256@libssh.org KEX
    exchange method to fail when connecting with something that
    implements the specification correctly. OpenSSH 6.7 disables
    this KEX method when speaking to one of the affected
    versions.
  New Features:
  * ssh(1), sshd(8): Add support for Unix domain socket
    forwarding. A remote TCP port may be forwarded to a local
    Unix domain socket and vice versa or both ends may be a Unix
    domain socket.
  * ssh(1), ssh-keygen(1): Add support for SSHFP DNS records for
    ED25519 key types.
  * sftp(1): Allow resumption of interrupted uploads.
  * ssh(1): When rekeying, skip file/DNS lookups of the hostkey
    if it is the same as the one sent during initial key exchange
  * sshd(8): Allow explicit ::1 and 127.0.0.1 forwarding bind
    addresses when GatewayPorts=no; allows client to choose
    address family
  * sshd(8): Add a sshd_config PermitUserRC option to control
    whether ~/.ssh/rc is executed, mirroring the no-user-rc
    authorized_keys option
  * ssh(1): Add a %C escape sequence for LocalCommand and
    ControlPath that expands to a unique identifer based on a
    hash of the tuple of (local host, remote user, hostname,
    port). Helps avoid exceeding miserly pathname limits for Unix
    domain sockets in multiplexing control paths
  * sshd(8): Make the "Too many authentication failures" message
    include the user, source address, port and protocol in a
    format similar to the authentication success / failure
    messages
  Bugfixes:
  * sshd(8): Fix remote forwarding with the same listen port but
    different listen address.
  * ssh(1): Fix inverted test that caused PKCS#11 keys that were
    explicitly listed in ssh_config or on the commandline not to
    be preferred.
  * ssh-keygen(1): Fix bug in KRL generation: multiple
    consecutive revoked certificate serial number ranges could be
    serialised to an invalid format. Readers of a broken KRL
    caused by this bug will fail closed, so no
    should-have-been-revoked key will be accepted.
  * ssh(1): Reflect stdio-forward ("ssh -W host:port ...")
    failures in exit status. Previously we were always returning 0
  * ssh(1), ssh-keygen(1): Make Ed25519 keys' title fit properly
    in the randomart border
  * ssh-agent(1): Only cleanup agent socket in the main agent
    process and not in any subprocesses it may have started (e.g.
    forked askpass). Fixes agent sockets being zapped when
    askpass processes fatal()
  * ssh-add(1): Make stdout line-buffered; saves partial output
    getting lost when ssh-add fatal()s part-way through (e.g.
    when listing keys from an agent that supports key types that
    ssh-add doesn't)
  * ssh-keygen(1): When hashing or removing hosts, don't choke on
    @revoked markers and don't remove @cert-authority markers
  * ssh(1): Don't fatal when hostname canonicalisation fails and
    a ProxyCommand is in use; continue and allow the ProxyCommand
    to connect anyway (e.g. to a host with a name outside the DNS
    behind a bastion)
  * scp(1): When copying local-&gt;remote fails during read, don't
    send uninitialised heap to the remote end.
  * sftp(1): Fix fatal "el_insertstr failed" errors when
    tab-completing filenames with  a single quote char somewhere
    in the string
  * ssh-keyscan(1): Scan for Ed25519 keys by default.
  * ssh(1): When using VerifyHostKeyDNS with a DNSSEC resolver,
    down-convert any certificate keys to plain keys and attempt
    SSHFP resolution.  Prevents a server from skipping SSHFP
    lookup and forcing a new-hostkey dialog by offering only
    certificate keys.
- OpenSSH 6.8
  Potentially-incompatible changes:
  * sshd(8): UseDNS now defaults to 'no'. Configurations that
    match against the client host name (via sshd_config or
    authorized_keys) may need to re-enable it or convert to
    matching against addresses.
  New Features:
  * Add FingerprintHash option to ssh(1) and sshd(8), and
    equivalent command-line flags to the other tools to control
    algorithm used for key fingerprints. The default changes from
    MD5 to SHA256 and format from hex to base64.
    Fingerprints now have the hash algorithm prepended. An
    example of the new format:
    SHA256:mVPwvezndPv/ARoIadVY98vAC0g+P/5633yTC4d/wXE Please
    note that visual host keys will also be different.
  * ssh(1), sshd(8): Experimental host key rotation support. Add
    a protocol extension for a server to inform a client of all
    its available host keys after authentication has completed.
    The client may record the keys in known_hosts, allowing it to
    upgrade to better host key algorithms and a server to
    gracefully rotate its keys.
    The client side of this is controlled by a UpdateHostkeys
    config option (default off).
  * ssh(1): Add a ssh_config HostbasedKeyType option to control
    which host public key types are tried during host-based
    authentication.
  * ssh(1), sshd(8): fix connection-killing host key mismatch
    errors when sshd offers multiple ECDSA keys of different
    lengths.
  * ssh(1): when host name canonicalisation is enabled, try to
    parse host names as addresses before looking them up for
    canonicalisation. fixes bz#2074 and avoiding needless DNS
    lookups in some cases.
  * ssh-keygen(1), sshd(8): Key Revocation Lists (KRLs) no longer
    require OpenSSH to be compiled with OpenSSL support.
  * ssh(1), ssh-keysign(8): Make ed25519 keys work for host based
    authentication.
  * sshd(8): SSH protocol v.1 workaround for the Meyer, et al,
    Bleichenbacher Side Channel Attack. Fake up a bignum key
    before RSA decryption.
  * sshd(8): Remember which public keys have been used for
    authentication and refuse to accept previously-used keys.
    This allows AuthenticationMethods=publickey,publickey to
    require that users authenticate using two _different_ public
    keys.
  * sshd(8): add sshd_config HostbasedAcceptedKeyTypes and
    PubkeyAcceptedKeyTypes options to allow sshd to control what
    public key types will be accepted. Currently defaults to all.
  * sshd(8): Don't count partial authentication success as a
    failure against MaxAuthTries.
  * ssh(1): Add RevokedHostKeys option for the client to allow
    text-file or KRL-based revocation of host keys.
  * ssh-keygen(1), sshd(8): Permit KRLs that revoke certificates
    by serial number or key ID without scoping to a particular
    CA.
  * ssh(1): Add a "Match canonical" criteria that allows
    ssh_config Match blocks to trigger only in the second config
    pass.
  * ssh(1): Add a -G option to ssh that causes it to parse its
    configuration and dump the result to stdout, similar to
    "sshd -T".
  * ssh(1): Allow Match criteria to be negated.
    E.g. "Match !host".
  * The regression test suite has been extended to cover more
    OpenSSH features. The unit tests have been expanded and now
    cover key exchange.
  Bugfixes:
  * ssh-keyscan(1): ssh-keyscan has been made much more robust
    again servers that hang or violate the SSH protocol.
  * ssh(1), ssh-keygen(1): Fix regression: Key path names were
    being lost as comment fields.
  * ssh(1): Allow ssh_config Port options set in the second
    config parse phase to be applied (they were being ignored).
  * ssh(1): Tweak config re-parsing with host canonicalisation - make
    the second pass through the config files always run when host name
    canonicalisation is enabled (and not whenever the host name
    changes)
  * ssh(1): Fix passing of wildcard forward bind addresses when
    connection multiplexing is in use
  * ssh-keygen(1): Fix broken private key conversion from
    non-OpenSSH formats.
  * ssh-keygen(1): Fix KRL generation bug when multiple CAs are
    in use.
  * Various fixes to manual pages
- OpenSSH 6.9
  Security:
  * ssh(1): when forwarding X11 connections with
    ForwardX11Trusted=no, connections made after
    ForwardX11Timeout expired could be permitted and no longer
    subject to XSECURITY restrictions because of an ineffective
    timeout check in ssh(1) coupled with "fail open" behaviour in
    the X11 server when clients attempted connections with
    expired credentials. This problem was reported by Jann Horn.
  * ssh-agent(1): fix weakness of agent locking (ssh-add -x) to
    password guessing by implementing an increasing failure
    delay, storing a salted hash of the password rather than the
    password itself and using a timing-safe comparison function
    for verifying unlock attempts. This problem was reported by
    Ryan Castellucci.
  New Features:
  * ssh(1), sshd(8): promote chacha20-poly1305@openssh.com to be
    the default cipher
  * sshd(8): support admin-specified arguments to
    AuthorizedKeysCommand
  * sshd(8): add AuthorizedPrincipalsCommand that allows
    retrieving authorized principals information from a
    subprocess rather than a file.
  * ssh(1), ssh-add(1): support PKCS#11 devices with external PIN
    entry devices
  * sshd(8): allow GSSAPI host credential check to be relaxed for
    multihomed hosts via GSSAPIStrictAcceptorCheck option
  * ssh-keygen(1): support "ssh-keygen -lF hostname" to search
    known_hosts and print key hashes rather than full keys.
  * ssh-agent(1): add -D flag to leave ssh-agent in foreground
    without enabling debug mode
  Bugfixes:
  * ssh(1), sshd(8): deprecate legacy
    SSH2_MSG_KEX_DH_GEX_REQUEST_OLD message and do not try to use
    it against some 3rd-party SSH implementations that use it
    (older PuTTY, WinSCP).
  * Many fixes for problems caused by compile-time deactivation
    of SSH1 support (including bz#2369)
  * ssh(1), sshd(8): cap DH-GEX group size at 4Kbits for Cisco
    implementations as some would fail when attempting to use
    group sizes &gt;4K
  * ssh(1): fix out-of-bound read in EscapeChar configuration
    option parsing
  * sshd(8): fix application of PermitTunnel, LoginGraceTime,
    AuthenticationMethods and StreamLocalBindMask options in
    Match blocks
  * ssh(1), sshd(8): improve disconnection message on TCP reset;
    bz#2257
  * ssh(1): remove failed remote forwards established by
    muliplexing from the list of active forwards
  * sshd(8): make parsing of authorized_keys "environment="
    options independent of PermitUserEnv being enabled
  * sshd(8): fix post-auth crash with permitopen=none
  * ssh(1), ssh-add(1), ssh-keygen(1): allow new-format private
    keys to be encrypted with AEAD ciphers
  * ssh(1): allow ListenAddress, Port and AddressFamily
    configuration options to appear in any order
  * sshd(8): check for and reject missing arguments for
    VersionAddendum and ForceCommand
  * ssh(1), sshd(8): don't treat unknown certificate extensions
    as fatal
  * ssh-keygen(1): make stdout and stderr output consistent
  * ssh(1): mention missing DISPLAY environment in debug log when
    X11 forwarding requested
  * sshd(8): correctly record login when UseLogin is set
  * sshd(8): Add some missing options to sshd -T output and fix
    output of VersionAddendum and HostCertificate. bz#2346
  * Document and improve consistency of options that accept a
    "none" argument" TrustedUserCAKeys, RevokedKeys (bz#2382),
    AuthorizedPrincipalsFile (bz#2288)
  * ssh(1): include remote username in debug output
  * sshd(8): avoid compatibility problem with some versions of
    Tera Term, which would crash when they received the hostkeys
    notification message (hostkeys-00@openssh.com)
  * sshd(8): mention ssh-keygen -E as useful when comparing
    legacy MD5 host key fingerprints
  * ssh(1): clarify pseudo-terminal request behaviour and use
    make manual language consistent
  * ssh(1): document that the TERM environment variable is not
    subject to SendEnv and AcceptEnv
- OpenSSH 7.0:
  This focuses primarily on deprecating weak, legacy and/or
  unsafe cryptography.
  Security:
  * sshd(8): OpenSSH 6.8 and 6.9 incorrectly set TTYs to be
    world- writable. Local attackers may be able to write
    arbitrary messages to logged-in users, including terminal
    escape sequences.  Reported by Nikolay Edigaryev.
  * sshd(8): Portable OpenSSH only: Fixed a privilege separation
    weakness related to PAM support. Attackers who could
    successfully compromise the pre-authentication process for
    remote code execution and who had valid credentials on the
    host could impersonate other users.  Reported by Moritz
    Jodeit.
  * sshd(8): Portable OpenSSH only: Fixed a use-after-free bug
    related to PAM support that was reachable by attackers who
    could compromise the pre-authentication process for remote
    code execution. Also reported by Moritz Jodeit.
  * sshd(8): fix circumvention of MaxAuthTries using keyboard-
    interactive authentication. By specifying a long, repeating
    keyboard-interactive "devices" string, an attacker could
    request the same authentication method be tried thousands of
    times in a single pass. The LoginGraceTime timeout in sshd(8)
    and any authentication failure delays implemented by the
    authentication mechanism itself were still applied. Found by
    Kingcope.
  Potentially-incompatible Changes:
  * Support for the legacy SSH version 1 protocol is disabled by
    default at compile time.
  * Support for the 1024-bit diffie-hellman-group1-sha1 key
    exchange is disabled by default at run-time. It may be
    re-enabled using the instructions in README.legacy or
    http://www.openssh.com/legacy.html
  * Support for ssh-dss, ssh-dss-cert-* host and user keys is
    disabled by default at run-time. These may be re-enabled
    using the instructions at http://www.openssh.com/legacy.html
  * Support for the legacy v00 cert format has been removed.
  * The default for the sshd_config(5) PermitRootLogin option has
    changed from "yes" to "prohibit-password".
  * PermitRootLogin=without-password/prohibit-password now bans
    all interactive authentication methods, allowing only
    public-key, hostbased and GSSAPI authentication (previously
    it permitted keyboard-interactive and password-less
    authentication if those were enabled).
  New Features:
  * ssh_config(5): add PubkeyAcceptedKeyTypes option to control
    which public key types are available for user authentication.
  * sshd_config(5): add HostKeyAlgorithms option to control which
    public key types are offered for host authentications.
  * ssh(1), sshd(8): extend Ciphers, MACs, KexAlgorithms,
    HostKeyAlgorithms, PubkeyAcceptedKeyTypes and
    HostbasedKeyTypes options to allow appending to the default
    set of algorithms instead of replacing it. Options may now be
    prefixed with a '+' to append to the default, e.g.
    "HostKeyAlgorithms=+ssh-dss".
  * sshd_config(5): PermitRootLogin now accepts an argument of
    'prohibit-password' as a less-ambiguous synonym of 'without-
    password'.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for Cisco and
    more PuTTY versions.
  * Fix some omissions and errors in the PROTOCOL and
    PROTOCOL.mux documentation relating to Unix domain socket
    forwarding
  * ssh(1): Improve the ssh(1) manual page to include a better
    description of Unix domain socket forwarding
  * ssh(1), ssh-agent(1): skip uninitialised PKCS#11 slots,
    fixing failures to load keys when they are present.
  * ssh(1), ssh-agent(1): do not ignore PKCS#11 hosted keys that
    wth empty CKA_ID
  * sshd(8): clarify documentation for UseDNS option
- OpenSSH 7.1:
  Security:
  * sshd(8): OpenSSH 7.0 contained a logic error in
    PermitRootLogin= prohibit-password/without-password that
    could, depending on compile-time configuration, permit
    password authentication to root while preventing other forms
    of authentication. This problem was reported by Mantas
    Mikulenas.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for FuTTY
  * ssh(1), sshd(8): refine compatability workarounds for WinSCP
  * Fix a number of memory faults (double-free, free of
    uninitialised memory, etc) in ssh(1) and ssh-keygen(1).
    Reported by Mateusz Kocielski.
- OpenSSH 7.1p2:
  * SECURITY: ssh(1): The OpenSSH client code between 5.4 and 7.1
    contains experimential support for resuming SSH-connections
    (roaming).
    The matching server code has never been shipped, but the
    client code was enabled by default and could be tricked by a
    malicious server into leaking client memory to the server,
    including private client user keys.
    The authentication of the server host key prevents
    exploitation by a man-in-the-middle, so this information leak
    is restricted to connections to malicious or compromised
    servers.
    MITIGATION: For OpenSSH &gt;= 5.4 the vulnerable code in the
    client can be completely disabled by adding 'UseRoaming no'
    to the gobal ssh_config(5) file, or to user configuration in
    ~/.ssh/config, or by passing -oUseRoaming=no on the command
    line.
    PATCH: See below for a patch to disable this feature
    (Disabling Roaming in the Source Code).
    This problem was reported by the Qualys Security Advisory
    team.
  * SECURITY: Eliminate the fallback from untrusted
    X11-forwarding to trusted forwarding for cases when the X
    server disables the SECURITY extension. Reported by Thomas
    Hoger.
  * SECURITY: Fix an out of-bound read access in the packet
    handling code. Reported by Ben Hawkes.
  * PROTOCOL: Correctly interpret the 'first_kex_follows' option
    during the intial key exchange. Reported by Matt Johnston.
  * Further use of explicit_bzero has been added in various
    buffer handling code paths to guard against compilers
    aggressively doing dead-store removal.
  Potentially-incompatible changes:
  * This release disables a number of legacy cryptographic
    algorithms by default in ssh:
    + Several ciphers blowfish-cbc, cast128-cbc, all arcfour
    variants and the rijndael-cbc aliases for AES.
    + MD5-based and truncated HMAC algorithms.
- OpenSSH 7.2:
  Security:
  * ssh(1), sshd(8): remove unfinished and unused roaming code
    (was already forcibly disabled in OpenSSH 7.1p2).
  * ssh(1): eliminate fallback from untrusted X11 forwarding to
    trusted forwarding when the X server disables the SECURITY
    extension.
  * ssh(1), sshd(8): increase the minimum modulus size supported
    for diffie-hellman-group-exchange to 2048 bits.
  * sshd(8): pre-auth sandboxing is now enabled by default
    (previous releases enabled it for new installations via
    sshd_config).
  New Features:
  * all: add support for RSA signatures using SHA-256/512 hash
    algorithms based on draft-rsa-dsa-sha2-256-03.txt and
    draft-ssh-ext-info-04.txt.
  * ssh(1): Add an AddKeysToAgent client option which can be set
    to 'yes', 'no', 'ask', or 'confirm', and defaults to 'no'.
    When enabled, a private key that is used during
    authentication will be added to ssh-agent if it is running
    (with confirmation enabled if set to 'confirm').
  * sshd(8): add a new authorized_keys option "restrict" that
    includes all current and future key restrictions
    (no-*-forwarding, etc.).  Also add permissive versions of the
    existing restrictions, e.g.  "no-pty" -&gt; "pty". This
    simplifies the task of setting up restricted keys and ensures
    they are maximally-restricted, regardless of any permissions
    we might implement in the future.
  * ssh(1): add ssh_config CertificateFile option to explicitly
    list certificates. bz#2436
  * ssh-keygen(1): allow ssh-keygen to change the key comment for
    all supported formats.
  * ssh-keygen(1): allow fingerprinting from standard input, e.g.
    "ssh-keygen -lf -"
  * ssh-keygen(1): allow fingerprinting multiple public keys in a
    file, e.g. "ssh-keygen -lf ~/.ssh/authorized_keys" bz#1319
  * sshd(8): support "none" as an argument for sshd_config
    Foreground and ChrootDirectory. Useful inside Match blocks to
    override a global default. bz#2486
  * ssh-keygen(1): support multiple certificates (one per line)
    and reading from standard input (using "-f -") for
    "ssh-keygen -L"
  * ssh-keyscan(1): add "ssh-keyscan -c ..." flag to allow
    fetching certificates instead of plain keys.
  * ssh(1): better handle anchored FQDNs (e.g. 'cvs.openbsd.org')
    in hostname canonicalisation - treat them as already
    canonical and remove the trailing '.' before matching
    ssh_config.
  Bugfixes:
  * sftp(1): existing destination directories should not
    terminate recursive uploads (regression in openssh 6.8)
  * ssh(1), sshd(8): correctly send back SSH2_MSG_UNIMPLEMENTED
    replies to unexpected messages during key exchange.
  * ssh(1): refuse attempts to set ConnectionAttempts=0, which
    does not make sense and would cause ssh to print an
    uninitialised stack variable.
  * ssh(1): fix errors when attempting to connect to scoped IPv6
    addresses with hostname canonicalisation enabled.
  * sshd_config(5): list a couple more options usable in Match
    blocks.
  * sshd(8): fix "PubkeyAcceptedKeyTypes +..." inside a Match
    block.
  * ssh(1): expand tilde characters in filenames passed to -i
    options before checking whether or not the identity file
    exists. Avoids confusion for cases where shell doesn't expand
    (e.g. "-i ~/file" vs. "-i~/file").
  * ssh(1): do not prepend "exec" to the shell command run by
    "Match exec" in a config file, which could cause some
    commands to fail in certain environments.
  * ssh-keyscan(1): fix output for multiple hosts/addrs on one
    line when host hashing or a non standard port is in use
  * sshd(8): skip "Could not chdir to home directory" message
    when ChrootDirectory is active.
  * ssh(1): include PubkeyAcceptedKeyTypes in ssh -G config dump.
  * sshd(8): avoid changing TunnelForwarding device flags if they
    are already what is needed; makes it possible to use tun/tap
    networking as non-root user if device permissions and
    interface flags are pre-established
  * ssh(1), sshd(8): RekeyLimits could be exceeded by one packet.
  * ssh(1): fix multiplexing master failure to notice client
    exit.
  * ssh(1), ssh-agent(1): avoid fatal() for PKCS11 tokens that
    present empty key IDs.
  * sshd(8): avoid printf of NULL argument.
  * ssh(1), sshd(8): allow RekeyLimits larger than 4GB.
  * ssh-keygen(1): sshd(8): fix several bugs in (unused) KRL
    signature support.
  * ssh(1), sshd(8): fix connections with peers that use the key
    exchange guess feature of the protocol.
  * sshd(8): include remote port number in log messages.
  * ssh(1): don't try to load SSHv1 private key when compiled
    without SSHv1 support.
  * ssh-agent(1), ssh(1): fix incorrect error messages during key
    loading and signing errors.
  * ssh-keygen(1): don't leave empty temporary files when
    performing known_hosts file edits when known_hosts doesn't
    exist.
  * sshd(8): correct packet format for tcpip-forward replies for
    requests that don't allocate a port
  * ssh(1), sshd(8): fix possible hang on closed output.
  * ssh(1): expand %i in ControlPath to UID.
  * ssh(1), sshd(8): fix return type of openssh_RSA_verify.
  * ssh(1), sshd(8): fix some option parsing memory leaks.
  * ssh(1): add a some debug output before DNS resolution; it's a
    place where ssh could previously silently stall in cases of
    unresponsive DNS servers.
  * ssh(1): remove spurious newline in visual hostkey.
  * ssh(1): fix printing (ssh -G ...) of HostKeyAlgorithms=+...
  * ssh(1): fix expansion of HostkeyAlgorithms=+...
  Documentation:
  * ssh_config(5), sshd_config(5): update default algorithm lists
    to match current reality.
  * ssh(1): mention -Q key-plain and -Q key-cert query options.
  * sshd_config(8): more clearly describe what
    AuthorizedKeysFile=none does.
  * ssh_config(5): better document ExitOnForwardFailure.
  * sshd(5): mention internal DH-GEX fallback groups in manual.
  * sshd_config(5): better description for MaxSessions option.
  Portability:
  * sshd(8): fix multiple authentication using S/Key.
- OpenSSH 7.2p2:
  Security:
  * sshd(8): sanitise X11 authentication credentials to avoid
    xauth command injection when X11Forwarding is enabled.
- (removing patches from previous version:
  openssh-6.6p1-X11-forwarding.patch
  openssh-6.6p1-X_forward_with_disabled_ipv6.patch
  openssh-6.6p1-audit1-remove_duplicit_audit.patch
  openssh-6.6p1-audit2-better_audit_of_user_actions.patch
  openssh-6.6p1-audit3-key_auth_usage-fips.patch
  openssh-6.6p1-audit3-key_auth_usage.patch
  openssh-6.6p1-audit4-kex_results-fips.patch
  openssh-6.6p1-audit4-kex_results.patch
  openssh-6.6p1-audit5-session_key_destruction.patch
  openssh-6.6p1-audit6-server_key_destruction.patch
  openssh-6.6p1-audit7-libaudit_compat.patch
  openssh-6.6p1-audit8-libaudit_dns_timeouts.patch
  openssh-6.6p1-blocksigalrm.patch
  openssh-6.6p1-curve25519-6.6.1p1.patch
  openssh-6.6p1-default-protocol.patch
  openssh-6.6p1-disable-openssl-abi-check.patch
  openssh-6.6p1-disable_roaming.patch
  openssh-6.6p1-eal3.patch
  openssh-6.6p1-fingerprint_hash.patch
  openssh-6.6p1-fips-checks.patch
  openssh-6.6p1-fips.patch
  openssh-6.6p1-gssapi_key_exchange.patch
  openssh-6.6p1-gssapimitm.patch
  openssh-6.6p1-host_ident.patch
  openssh-6.6p1-key-converter.patch
  openssh-6.6p1-lastlog.patch
  openssh-6.6p1-ldap.patch
  openssh-6.6p1-login_options.patch
  openssh-6.6p1-no_fork-no_pid_file.patch
  openssh-6.6p1-pam-check-locks.patch
  openssh-6.6p1-pam-fix2.patch
  openssh-6.6p1-pam-fix3.patch
  openssh-6.6p1-pts.patch
  openssh-6.6p1-saveargv-fix.patch
  openssh-6.6p1-seccomp_getuid.patch
  openssh-6.6p1-seccomp_stat.patch
  openssh-6.6p1-seed-prng.patch
  openssh-6.6p1-send_locale.patch
  openssh-6.6p1-sftp_force_permissions.patch
  openssh-6.6p1-sftp_homechroot.patch
  openssh-6.6p1-xauth.patch
  openssh-6.6p1-xauthlocalhostname.patch)</changelog>
<changelog author="pcerny@suse.com" date="1464609600">- enable trusted X11 forwarding by default
  [openssh-7.2p2-X11_trusted_forwarding.patch]
- set UID for lastlog properly
  [openssh-7.2p2-lastlog.patch]
- enable use of PAM by default
  [openssh-7.2p2-enable_PAM_by_default.patch]
- copy command line arguments properly
  [openssh-7.2p2-saveargv-fix.patch]
- do not use pthreads in PAM code
  [openssh-7.2p2-dont_use_pthreads_in_PAM.patch]
- fix paths in documentation
  [openssh-7.2p2-eal3.patch]
- prevent race consitions triggered by SIGALRM
  [openssh-7.2p2-blocksigalrm.patch]
- do send and accept locale environment variables by default
  [openssh-7.2p2-send_locale.patch]
- handle hostnames changes during X forwarding
  [openssh-7.2p2-hostname_changes_when_forwarding_X.patch]
- try to remove xauth cookies on exit
  [openssh-7.2p2-remove_xauth_cookies_on_exit.patch]
- properly format pts names for ?tmp? log files
  [openssh-7.2p2-pts_names_formatting.patch]
- check locked accounts when using PAM
  [openssh-7.2p2-pam_check_locks.patch]
- chenge default PermitRootLogin to 'yes' to prevent unwanted
  surprises on updates from older versions.
  See README.SUSE for details
  [openssh-7.2p2-allow_root_password_login.patch]
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [openssh-7.2p2-disable_short_DH_parameters.patch]
- Add getuid() and stat() syscalls to the seccomp filter
  (bsc#912436)
  [openssh-7.2p2-seccomp_getuid.patch,
  openssh-7.2p2-seccomp_stat.patch]</changelog>
<changelog author="pcerny@suse.com" date="1465300800">- enable support for SSHv1 protocol and discourage its usage
  (bsc#983307)
- enable DSA by default for backward compatibility and discourage
  its usage (bsc#983784)</changelog>
<changelog author="pcerny@suse.com" date="1474027200">- FIPS compatibility (no selfchecks, only crypto restrictions)
  [openssh-7.2p2-fips.patch]
- PRNG re-seeding
  [openssh-7.2p2-seed-prng.patch]
- preliminary version of GSSAPI KEX
  [openssh-7.2p2-gssapi_key_exchange.patch]</changelog>
<changelog author="pcerny@suse.com" date="1475150400">- remaining patches that were still missing
  since the update to 7.2p2 (FATE#319675):
- allow X forwarding over IPv4 when IPv6 sockets is not available
  [openssh-7.2p2-X_forward_with_disabled_ipv6.patch]
- do not write PID file when not daemonizing
  [openssh-7.2p2-no_fork-no_pid_file.patch]
- use correct options when invoking login
  [openssh-7.2p2-login_options.patch]
- helper application for retrieving users' public keys from
  an LDAP server
  [openssh-7.2p2-ldap.patch]
- allow forcing permissions over sftp
  [openssh-7.2p2-sftp_force_permissions.patch]
- do not perform run-time checks for OpenSSL API/ABI change
  [openssh-7.2p2-disable_openssl_abi_check.patch]
- suggest commands for cleaning known hosts file
  [openssh-7.2p2-host_ident.patch]
- sftp home chroot patch
  [openssh-7.2p2-sftp_homechroot.patch]
- ssh sessions auditing
  [openssh-7.2p2-audit.patch]
- enable seccomp sandbox on additional architectures
  [openssh-7.2p2-additional_seccomp_archs.patch]
- fix forwarding with IPv6 addresses in DISPLAY (bnc#847710)
  [openssh-7.2p2-IPv6_X_forwarding.patch]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [openssh-7.2p2-ignore_PAM_with_UseLogin.patch]
- limit accepted password length (prevents possible DoS)
  (bsc#992533, CVE-2016-6515)
  [openssh-7.2p2-limit_password_length.patch]
- Prevent user enumeration through the timing of password
  processing (bsc#989363, CVE-2016-6210)
  [openssh-7.2p2-prevent_timing_user_enumeration.patch]
- Add auditing for PRNG re-seeding
  [openssh-7.2p2-audit_seed_prng.patch]</changelog>
<changelog author="pcerny@suse.com" date="1476360000">- enable geteuid{,32} syscalls on mainframes, since it may be
  called from libica/ibmica on machines with hardware crypto
  accelerator (bsc#1004258)
  [openssh-7.2p2-seccomp_geteuid.patch]
- fix regression of (bsc#823710)
  [openssh-7.2p2-audit_fixes.patch]
- add slogin (removed upstreams)
  [openssh-7.2p2-keep_slogin.patch]</changelog>
<changelog author="pcerny@suse.com" date="1478606400">- prevent resource depletion during key exchange
  (bsc#1005480, CVE-2016-8858)
  [openssh-7.2p2-kex_resource_depletion.patch]
- fix suggested command for removing conflicting server keys from
  the known_hosts file (bsc#1006221)</changelog>
<changelog author="pcerny@suse.com" date="1483617600">- Properly verify CIDR masks in configuration
  (bsc#1005893)
  [openssh-7.2p2-verify_CIDR_address_ranges.patch]
- Remove pre-auth compression support from the server to prevent
  possible cryptographic attacks.
  (CVE-2016-10012, bsc#1016370)
  [openssh-7.2p2-disable_preauth_compression.patch]
- limit directories for loading PKCS11 modules
  (CVE-2016-10009, bsc#1016366)
  [openssh-7.2p2-restrict_pkcs11-modules.patch]
- Prevent possible leaks of host private keys to low-privilege
  process handling authentication
  (CVE-2016-10011, bsc#1016369)
  [openssh-7.2p2-prevent_private_key_leakage.patch]
- Do not allow unix socket forwarding when running without
  privilege separation
  (CVE-2016-10010, bsc#1016368)
  [openssh-7.2p2-secure_unix_sockets_forwarding.patch]</changelog>
<changelog author="pcerny@suse.com" date="1485259200">- Adding missing pieces for user matching (bsc#1021626)</changelog>
<changelog author="pcerny@suse.com" date="1492776000">- enable case-insensitive hostname matching (bsc#1017099)
  [openssh-7.2p2-ssh_case_insensitive_host_matching.patch]
- re-add CAVS tests
  [openssh-7.2p2-cavstest-ctr.patch]
  [openssh-7.2p2-cavstest-kdf.patch]</changelog>
<changelog author="pcerny@suse.com" date="1494849600">- Fix preauth seccomp separation on mainframes (bsc#1016709)
  [openssh-7.2p2-s390_hw_crypto_syscalls.patch]
  [openssh-7.2p2-s390_OpenSSL-ibmpkcs11_syscalls.patch]</changelog>
<changelog author="pcerny@suse.com" date="1496232000">- sshd.service: Set TasksMax=infinity, as there should be
  no limit on the amount of tasks sshd can run.</changelog>
<changelog author="pcerny@suse.com" date="1498651200">- new switch for printing diagnostic messages in sftp client's
  batch mode (bsc#1023275)
  [openssh-7.2p2-sftp_print_diagnostic_messages.patch]
- Better fix for core dumps from auditing code when trying to bind
  to an unavailable port (bsc#1024251)</changelog>
<changelog author="pcerny@suse.com" date="1506427200">- Test configuration before running daemon to rpevent looping
  resulting in service shutdown (bsc#1048367)</changelog>
<changelog author="pcerny@suse.com" date="1511352000">- FIPS startup selfchecks (bsc#1068310)
  [openssh-7.2p2-fips_checks.patch]
- Silent complaints about unsupported key exchange methods
  (bsc#1006166)
  [openssh-7.2p2-fips_fixes.patch]
- Stricter checking of operations in read-only mode in sftp server
  (CVE-2017-15906, bsc#1065000)
  [openssh-7.2p2-stricter_readonly_sftp.patch]
- Refine handling of sockets for X11 forwarding to remove
  reintroduced CVE-2008-1483 (bsc#1069509)</changelog>

</package>
<package pkgid="8e9ef381646559eee884c8ccb5517eca13c8a976b2db6062ae746dd2ed2b2297" name="openssh" arch="x86_64">
    <version epoch="0" ver="7.2p2" rel="15.1"/>

<changelog author="pcerny@suse.com" date="1431604800">- use %restart_on_update in the trigger script</changelog>
<changelog author="pcerny@suse.com" date="1438344000">- Maintenance update
  * better timeouting of X11 forwards (CVE-2015-5352/bsc#936695)
    [-X11_forwarding_timeout] and hardening of ssh-agent(1)
    locking (bsc#936695) [-agent_locking_hardening]
  * removing and disabling short DH parameters (bsc#932483)
    [-disable_DH_under_1536b, -remove_moduli_under_1536b]
  * disable accdess to procfs from sftp (bsc#903649)
    [-sftp_procfs_restrictions]
  * Allow each keyboard authentication method to be used only
    once per login (CVE-2015-5600/bsc#938746)
    [-use_each_kbd_method_just_once]
  * Don't resend username to PAM, it can be misused for privilege
    escalation (CVE-2015-6563/bsc#943010)
    [-pam_privsep_dont_resend_username]
  * Prevent possible use-after-free in PAM authentication monitor
    (CVE-2015-6564/bsc#943006)
    [-pam_privsep_auth_uaf]</changelog>
<changelog author="jsegitz@novell.com" date="1452686400">- CVE-2016-0777, bsc#961642, CVE-2016-0778, bsc#961645
  Added CVE-2016-077-7_8.patch to disable the roaming code to prevent
  information leak and buffer overflow</changelog>
<changelog author="pcerny@suse.com" date="1457438400">- fix minor problems (bsc#945493)
- fix postun script of main package (bsc#945484)
- fix crashes when /proc is not available (bsc#947458)
- rename and comment the roaming patch
  (CVE-2016-077-7_8 to -disable_roaming)</changelog>
<changelog author="pcerny@suse.com" date="1460030400">- Correctly parse GSSAPI KEX algorithms (bsc#961368)
- Sanitise input for xauth(1) (bsc#970632, CVE-2016-3115)
  [-sanitise_xauth_input]
- prevent X11 SECURITY circumvention when forwarding X11
  connections (bsc#962313, CVE-2016-1908)
  [-untrusted_X_forwarding]
- more verbose FIPS mode/CC related documentation in README.FIPS
  (bsc#965576, bsc#960414)
- fix PRNG re-seeding (bsc#960414, bsc#729190)
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [-disable_DH_under_1536b -&gt; -disable_short_DH_parameters]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [-ignore_PAM_with_UseLogin]</changelog>
<changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2 (FATE#319675)
  upstream package without any SUSE patches
  Distilled upstream log:
- OpenSSH 6.7
  Potentially-incompatible changes:
  * sshd(8): The default set of ciphers and MACs has been
    altered to remove unsafe algorithms. In particular, CBC
    ciphers and arcfour* are disabled by default.
    The full set of algorithms remains available if configured
    explicitly via the Ciphers and MACs sshd_config options.
  * sshd(8): Support for tcpwrappers/libwrap has been removed.
  * OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of
    connections using the curve25519-sha256@libssh.org KEX
    exchange method to fail when connecting with something that
    implements the specification correctly. OpenSSH 6.7 disables
    this KEX method when speaking to one of the affected
    versions.
  New Features:
  * ssh(1), sshd(8): Add support for Unix domain socket
    forwarding. A remote TCP port may be forwarded to a local
    Unix domain socket and vice versa or both ends may be a Unix
    domain socket.
  * ssh(1), ssh-keygen(1): Add support for SSHFP DNS records for
    ED25519 key types.
  * sftp(1): Allow resumption of interrupted uploads.
  * ssh(1): When rekeying, skip file/DNS lookups of the hostkey
    if it is the same as the one sent during initial key exchange
  * sshd(8): Allow explicit ::1 and 127.0.0.1 forwarding bind
    addresses when GatewayPorts=no; allows client to choose
    address family
  * sshd(8): Add a sshd_config PermitUserRC option to control
    whether ~/.ssh/rc is executed, mirroring the no-user-rc
    authorized_keys option
  * ssh(1): Add a %C escape sequence for LocalCommand and
    ControlPath that expands to a unique identifer based on a
    hash of the tuple of (local host, remote user, hostname,
    port). Helps avoid exceeding miserly pathname limits for Unix
    domain sockets in multiplexing control paths
  * sshd(8): Make the "Too many authentication failures" message
    include the user, source address, port and protocol in a
    format similar to the authentication success / failure
    messages
  Bugfixes:
  * sshd(8): Fix remote forwarding with the same listen port but
    different listen address.
  * ssh(1): Fix inverted test that caused PKCS#11 keys that were
    explicitly listed in ssh_config or on the commandline not to
    be preferred.
  * ssh-keygen(1): Fix bug in KRL generation: multiple
    consecutive revoked certificate serial number ranges could be
    serialised to an invalid format. Readers of a broken KRL
    caused by this bug will fail closed, so no
    should-have-been-revoked key will be accepted.
  * ssh(1): Reflect stdio-forward ("ssh -W host:port ...")
    failures in exit status. Previously we were always returning 0
  * ssh(1), ssh-keygen(1): Make Ed25519 keys' title fit properly
    in the randomart border
  * ssh-agent(1): Only cleanup agent socket in the main agent
    process and not in any subprocesses it may have started (e.g.
    forked askpass). Fixes agent sockets being zapped when
    askpass processes fatal()
  * ssh-add(1): Make stdout line-buffered; saves partial output
    getting lost when ssh-add fatal()s part-way through (e.g.
    when listing keys from an agent that supports key types that
    ssh-add doesn't)
  * ssh-keygen(1): When hashing or removing hosts, don't choke on
    @revoked markers and don't remove @cert-authority markers
  * ssh(1): Don't fatal when hostname canonicalisation fails and
    a ProxyCommand is in use; continue and allow the ProxyCommand
    to connect anyway (e.g. to a host with a name outside the DNS
    behind a bastion)
  * scp(1): When copying local-&gt;remote fails during read, don't
    send uninitialised heap to the remote end.
  * sftp(1): Fix fatal "el_insertstr failed" errors when
    tab-completing filenames with  a single quote char somewhere
    in the string
  * ssh-keyscan(1): Scan for Ed25519 keys by default.
  * ssh(1): When using VerifyHostKeyDNS with a DNSSEC resolver,
    down-convert any certificate keys to plain keys and attempt
    SSHFP resolution.  Prevents a server from skipping SSHFP
    lookup and forcing a new-hostkey dialog by offering only
    certificate keys.
- OpenSSH 6.8
  Potentially-incompatible changes:
  * sshd(8): UseDNS now defaults to 'no'. Configurations that
    match against the client host name (via sshd_config or
    authorized_keys) may need to re-enable it or convert to
    matching against addresses.
  New Features:
  * Add FingerprintHash option to ssh(1) and sshd(8), and
    equivalent command-line flags to the other tools to control
    algorithm used for key fingerprints. The default changes from
    MD5 to SHA256 and format from hex to base64.
    Fingerprints now have the hash algorithm prepended. An
    example of the new format:
    SHA256:mVPwvezndPv/ARoIadVY98vAC0g+P/5633yTC4d/wXE Please
    note that visual host keys will also be different.
  * ssh(1), sshd(8): Experimental host key rotation support. Add
    a protocol extension for a server to inform a client of all
    its available host keys after authentication has completed.
    The client may record the keys in known_hosts, allowing it to
    upgrade to better host key algorithms and a server to
    gracefully rotate its keys.
    The client side of this is controlled by a UpdateHostkeys
    config option (default off).
  * ssh(1): Add a ssh_config HostbasedKeyType option to control
    which host public key types are tried during host-based
    authentication.
  * ssh(1), sshd(8): fix connection-killing host key mismatch
    errors when sshd offers multiple ECDSA keys of different
    lengths.
  * ssh(1): when host name canonicalisation is enabled, try to
    parse host names as addresses before looking them up for
    canonicalisation. fixes bz#2074 and avoiding needless DNS
    lookups in some cases.
  * ssh-keygen(1), sshd(8): Key Revocation Lists (KRLs) no longer
    require OpenSSH to be compiled with OpenSSL support.
  * ssh(1), ssh-keysign(8): Make ed25519 keys work for host based
    authentication.
  * sshd(8): SSH protocol v.1 workaround for the Meyer, et al,
    Bleichenbacher Side Channel Attack. Fake up a bignum key
    before RSA decryption.
  * sshd(8): Remember which public keys have been used for
    authentication and refuse to accept previously-used keys.
    This allows AuthenticationMethods=publickey,publickey to
    require that users authenticate using two _different_ public
    keys.
  * sshd(8): add sshd_config HostbasedAcceptedKeyTypes and
    PubkeyAcceptedKeyTypes options to allow sshd to control what
    public key types will be accepted. Currently defaults to all.
  * sshd(8): Don't count partial authentication success as a
    failure against MaxAuthTries.
  * ssh(1): Add RevokedHostKeys option for the client to allow
    text-file or KRL-based revocation of host keys.
  * ssh-keygen(1), sshd(8): Permit KRLs that revoke certificates
    by serial number or key ID without scoping to a particular
    CA.
  * ssh(1): Add a "Match canonical" criteria that allows
    ssh_config Match blocks to trigger only in the second config
    pass.
  * ssh(1): Add a -G option to ssh that causes it to parse its
    configuration and dump the result to stdout, similar to
    "sshd -T".
  * ssh(1): Allow Match criteria to be negated.
    E.g. "Match !host".
  * The regression test suite has been extended to cover more
    OpenSSH features. The unit tests have been expanded and now
    cover key exchange.
  Bugfixes:
  * ssh-keyscan(1): ssh-keyscan has been made much more robust
    again servers that hang or violate the SSH protocol.
  * ssh(1), ssh-keygen(1): Fix regression: Key path names were
    being lost as comment fields.
  * ssh(1): Allow ssh_config Port options set in the second
    config parse phase to be applied (they were being ignored).
  * ssh(1): Tweak config re-parsing with host canonicalisation - make
    the second pass through the config files always run when host name
    canonicalisation is enabled (and not whenever the host name
    changes)
  * ssh(1): Fix passing of wildcard forward bind addresses when
    connection multiplexing is in use
  * ssh-keygen(1): Fix broken private key conversion from
    non-OpenSSH formats.
  * ssh-keygen(1): Fix KRL generation bug when multiple CAs are
    in use.
  * Various fixes to manual pages
- OpenSSH 6.9
  Security:
  * ssh(1): when forwarding X11 connections with
    ForwardX11Trusted=no, connections made after
    ForwardX11Timeout expired could be permitted and no longer
    subject to XSECURITY restrictions because of an ineffective
    timeout check in ssh(1) coupled with "fail open" behaviour in
    the X11 server when clients attempted connections with
    expired credentials. This problem was reported by Jann Horn.
  * ssh-agent(1): fix weakness of agent locking (ssh-add -x) to
    password guessing by implementing an increasing failure
    delay, storing a salted hash of the password rather than the
    password itself and using a timing-safe comparison function
    for verifying unlock attempts. This problem was reported by
    Ryan Castellucci.
  New Features:
  * ssh(1), sshd(8): promote chacha20-poly1305@openssh.com to be
    the default cipher
  * sshd(8): support admin-specified arguments to
    AuthorizedKeysCommand
  * sshd(8): add AuthorizedPrincipalsCommand that allows
    retrieving authorized principals information from a
    subprocess rather than a file.
  * ssh(1), ssh-add(1): support PKCS#11 devices with external PIN
    entry devices
  * sshd(8): allow GSSAPI host credential check to be relaxed for
    multihomed hosts via GSSAPIStrictAcceptorCheck option
  * ssh-keygen(1): support "ssh-keygen -lF hostname" to search
    known_hosts and print key hashes rather than full keys.
  * ssh-agent(1): add -D flag to leave ssh-agent in foreground
    without enabling debug mode
  Bugfixes:
  * ssh(1), sshd(8): deprecate legacy
    SSH2_MSG_KEX_DH_GEX_REQUEST_OLD message and do not try to use
    it against some 3rd-party SSH implementations that use it
    (older PuTTY, WinSCP).
  * Many fixes for problems caused by compile-time deactivation
    of SSH1 support (including bz#2369)
  * ssh(1), sshd(8): cap DH-GEX group size at 4Kbits for Cisco
    implementations as some would fail when attempting to use
    group sizes &gt;4K
  * ssh(1): fix out-of-bound read in EscapeChar configuration
    option parsing
  * sshd(8): fix application of PermitTunnel, LoginGraceTime,
    AuthenticationMethods and StreamLocalBindMask options in
    Match blocks
  * ssh(1), sshd(8): improve disconnection message on TCP reset;
    bz#2257
  * ssh(1): remove failed remote forwards established by
    muliplexing from the list of active forwards
  * sshd(8): make parsing of authorized_keys "environment="
    options independent of PermitUserEnv being enabled
  * sshd(8): fix post-auth crash with permitopen=none
  * ssh(1), ssh-add(1), ssh-keygen(1): allow new-format private
    keys to be encrypted with AEAD ciphers
  * ssh(1): allow ListenAddress, Port and AddressFamily
    configuration options to appear in any order
  * sshd(8): check for and reject missing arguments for
    VersionAddendum and ForceCommand
  * ssh(1), sshd(8): don't treat unknown certificate extensions
    as fatal
  * ssh-keygen(1): make stdout and stderr output consistent
  * ssh(1): mention missing DISPLAY environment in debug log when
    X11 forwarding requested
  * sshd(8): correctly record login when UseLogin is set
  * sshd(8): Add some missing options to sshd -T output and fix
    output of VersionAddendum and HostCertificate. bz#2346
  * Document and improve consistency of options that accept a
    "none" argument" TrustedUserCAKeys, RevokedKeys (bz#2382),
    AuthorizedPrincipalsFile (bz#2288)
  * ssh(1): include remote username in debug output
  * sshd(8): avoid compatibility problem with some versions of
    Tera Term, which would crash when they received the hostkeys
    notification message (hostkeys-00@openssh.com)
  * sshd(8): mention ssh-keygen -E as useful when comparing
    legacy MD5 host key fingerprints
  * ssh(1): clarify pseudo-terminal request behaviour and use
    make manual language consistent
  * ssh(1): document that the TERM environment variable is not
    subject to SendEnv and AcceptEnv
- OpenSSH 7.0:
  This focuses primarily on deprecating weak, legacy and/or
  unsafe cryptography.
  Security:
  * sshd(8): OpenSSH 6.8 and 6.9 incorrectly set TTYs to be
    world- writable. Local attackers may be able to write
    arbitrary messages to logged-in users, including terminal
    escape sequences.  Reported by Nikolay Edigaryev.
  * sshd(8): Portable OpenSSH only: Fixed a privilege separation
    weakness related to PAM support. Attackers who could
    successfully compromise the pre-authentication process for
    remote code execution and who had valid credentials on the
    host could impersonate other users.  Reported by Moritz
    Jodeit.
  * sshd(8): Portable OpenSSH only: Fixed a use-after-free bug
    related to PAM support that was reachable by attackers who
    could compromise the pre-authentication process for remote
    code execution. Also reported by Moritz Jodeit.
  * sshd(8): fix circumvention of MaxAuthTries using keyboard-
    interactive authentication. By specifying a long, repeating
    keyboard-interactive "devices" string, an attacker could
    request the same authentication method be tried thousands of
    times in a single pass. The LoginGraceTime timeout in sshd(8)
    and any authentication failure delays implemented by the
    authentication mechanism itself were still applied. Found by
    Kingcope.
  Potentially-incompatible Changes:
  * Support for the legacy SSH version 1 protocol is disabled by
    default at compile time.
  * Support for the 1024-bit diffie-hellman-group1-sha1 key
    exchange is disabled by default at run-time. It may be
    re-enabled using the instructions in README.legacy or
    http://www.openssh.com/legacy.html
  * Support for ssh-dss, ssh-dss-cert-* host and user keys is
    disabled by default at run-time. These may be re-enabled
    using the instructions at http://www.openssh.com/legacy.html
  * Support for the legacy v00 cert format has been removed.
  * The default for the sshd_config(5) PermitRootLogin option has
    changed from "yes" to "prohibit-password".
  * PermitRootLogin=without-password/prohibit-password now bans
    all interactive authentication methods, allowing only
    public-key, hostbased and GSSAPI authentication (previously
    it permitted keyboard-interactive and password-less
    authentication if those were enabled).
  New Features:
  * ssh_config(5): add PubkeyAcceptedKeyTypes option to control
    which public key types are available for user authentication.
  * sshd_config(5): add HostKeyAlgorithms option to control which
    public key types are offered for host authentications.
  * ssh(1), sshd(8): extend Ciphers, MACs, KexAlgorithms,
    HostKeyAlgorithms, PubkeyAcceptedKeyTypes and
    HostbasedKeyTypes options to allow appending to the default
    set of algorithms instead of replacing it. Options may now be
    prefixed with a '+' to append to the default, e.g.
    "HostKeyAlgorithms=+ssh-dss".
  * sshd_config(5): PermitRootLogin now accepts an argument of
    'prohibit-password' as a less-ambiguous synonym of 'without-
    password'.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for Cisco and
    more PuTTY versions.
  * Fix some omissions and errors in the PROTOCOL and
    PROTOCOL.mux documentation relating to Unix domain socket
    forwarding
  * ssh(1): Improve the ssh(1) manual page to include a better
    description of Unix domain socket forwarding
  * ssh(1), ssh-agent(1): skip uninitialised PKCS#11 slots,
    fixing failures to load keys when they are present.
  * ssh(1), ssh-agent(1): do not ignore PKCS#11 hosted keys that
    wth empty CKA_ID
  * sshd(8): clarify documentation for UseDNS option
- OpenSSH 7.1:
  Security:
  * sshd(8): OpenSSH 7.0 contained a logic error in
    PermitRootLogin= prohibit-password/without-password that
    could, depending on compile-time configuration, permit
    password authentication to root while preventing other forms
    of authentication. This problem was reported by Mantas
    Mikulenas.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for FuTTY
  * ssh(1), sshd(8): refine compatability workarounds for WinSCP
  * Fix a number of memory faults (double-free, free of
    uninitialised memory, etc) in ssh(1) and ssh-keygen(1).
    Reported by Mateusz Kocielski.
- OpenSSH 7.1p2:
  * SECURITY: ssh(1): The OpenSSH client code between 5.4 and 7.1
    contains experimential support for resuming SSH-connections
    (roaming).
    The matching server code has never been shipped, but the
    client code was enabled by default and could be tricked by a
    malicious server into leaking client memory to the server,
    including private client user keys.
    The authentication of the server host key prevents
    exploitation by a man-in-the-middle, so this information leak
    is restricted to connections to malicious or compromised
    servers.
    MITIGATION: For OpenSSH &gt;= 5.4 the vulnerable code in the
    client can be completely disabled by adding 'UseRoaming no'
    to the gobal ssh_config(5) file, or to user configuration in
    ~/.ssh/config, or by passing -oUseRoaming=no on the command
    line.
    PATCH: See below for a patch to disable this feature
    (Disabling Roaming in the Source Code).
    This problem was reported by the Qualys Security Advisory
    team.
  * SECURITY: Eliminate the fallback from untrusted
    X11-forwarding to trusted forwarding for cases when the X
    server disables the SECURITY extension. Reported by Thomas
    Hoger.
  * SECURITY: Fix an out of-bound read access in the packet
    handling code. Reported by Ben Hawkes.
  * PROTOCOL: Correctly interpret the 'first_kex_follows' option
    during the intial key exchange. Reported by Matt Johnston.
  * Further use of explicit_bzero has been added in various
    buffer handling code paths to guard against compilers
    aggressively doing dead-store removal.
  Potentially-incompatible changes:
  * This release disables a number of legacy cryptographic
    algorithms by default in ssh:
    + Several ciphers blowfish-cbc, cast128-cbc, all arcfour
    variants and the rijndael-cbc aliases for AES.
    + MD5-based and truncated HMAC algorithms.
- OpenSSH 7.2:
  Security:
  * ssh(1), sshd(8): remove unfinished and unused roaming code
    (was already forcibly disabled in OpenSSH 7.1p2).
  * ssh(1): eliminate fallback from untrusted X11 forwarding to
    trusted forwarding when the X server disables the SECURITY
    extension.
  * ssh(1), sshd(8): increase the minimum modulus size supported
    for diffie-hellman-group-exchange to 2048 bits.
  * sshd(8): pre-auth sandboxing is now enabled by default
    (previous releases enabled it for new installations via
    sshd_config).
  New Features:
  * all: add support for RSA signatures using SHA-256/512 hash
    algorithms based on draft-rsa-dsa-sha2-256-03.txt and
    draft-ssh-ext-info-04.txt.
  * ssh(1): Add an AddKeysToAgent client option which can be set
    to 'yes', 'no', 'ask', or 'confirm', and defaults to 'no'.
    When enabled, a private key that is used during
    authentication will be added to ssh-agent if it is running
    (with confirmation enabled if set to 'confirm').
  * sshd(8): add a new authorized_keys option "restrict" that
    includes all current and future key restrictions
    (no-*-forwarding, etc.).  Also add permissive versions of the
    existing restrictions, e.g.  "no-pty" -&gt; "pty". This
    simplifies the task of setting up restricted keys and ensures
    they are maximally-restricted, regardless of any permissions
    we might implement in the future.
  * ssh(1): add ssh_config CertificateFile option to explicitly
    list certificates. bz#2436
  * ssh-keygen(1): allow ssh-keygen to change the key comment for
    all supported formats.
  * ssh-keygen(1): allow fingerprinting from standard input, e.g.
    "ssh-keygen -lf -"
  * ssh-keygen(1): allow fingerprinting multiple public keys in a
    file, e.g. "ssh-keygen -lf ~/.ssh/authorized_keys" bz#1319
  * sshd(8): support "none" as an argument for sshd_config
    Foreground and ChrootDirectory. Useful inside Match blocks to
    override a global default. bz#2486
  * ssh-keygen(1): support multiple certificates (one per line)
    and reading from standard input (using "-f -") for
    "ssh-keygen -L"
  * ssh-keyscan(1): add "ssh-keyscan -c ..." flag to allow
    fetching certificates instead of plain keys.
  * ssh(1): better handle anchored FQDNs (e.g. 'cvs.openbsd.org')
    in hostname canonicalisation - treat them as already
    canonical and remove the trailing '.' before matching
    ssh_config.
  Bugfixes:
  * sftp(1): existing destination directories should not
    terminate recursive uploads (regression in openssh 6.8)
  * ssh(1), sshd(8): correctly send back SSH2_MSG_UNIMPLEMENTED
    replies to unexpected messages during key exchange.
  * ssh(1): refuse attempts to set ConnectionAttempts=0, which
    does not make sense and would cause ssh to print an
    uninitialised stack variable.
  * ssh(1): fix errors when attempting to connect to scoped IPv6
    addresses with hostname canonicalisation enabled.
  * sshd_config(5): list a couple more options usable in Match
    blocks.
  * sshd(8): fix "PubkeyAcceptedKeyTypes +..." inside a Match
    block.
  * ssh(1): expand tilde characters in filenames passed to -i
    options before checking whether or not the identity file
    exists. Avoids confusion for cases where shell doesn't expand
    (e.g. "-i ~/file" vs. "-i~/file").
  * ssh(1): do not prepend "exec" to the shell command run by
    "Match exec" in a config file, which could cause some
    commands to fail in certain environments.
  * ssh-keyscan(1): fix output for multiple hosts/addrs on one
    line when host hashing or a non standard port is in use
  * sshd(8): skip "Could not chdir to home directory" message
    when ChrootDirectory is active.
  * ssh(1): include PubkeyAcceptedKeyTypes in ssh -G config dump.
  * sshd(8): avoid changing TunnelForwarding device flags if they
    are already what is needed; makes it possible to use tun/tap
    networking as non-root user if device permissions and
    interface flags are pre-established
  * ssh(1), sshd(8): RekeyLimits could be exceeded by one packet.
  * ssh(1): fix multiplexing master failure to notice client
    exit.
  * ssh(1), ssh-agent(1): avoid fatal() for PKCS11 tokens that
    present empty key IDs.
  * sshd(8): avoid printf of NULL argument.
  * ssh(1), sshd(8): allow RekeyLimits larger than 4GB.
  * ssh-keygen(1): sshd(8): fix several bugs in (unused) KRL
    signature support.
  * ssh(1), sshd(8): fix connections with peers that use the key
    exchange guess feature of the protocol.
  * sshd(8): include remote port number in log messages.
  * ssh(1): don't try to load SSHv1 private key when compiled
    without SSHv1 support.
  * ssh-agent(1), ssh(1): fix incorrect error messages during key
    loading and signing errors.
  * ssh-keygen(1): don't leave empty temporary files when
    performing known_hosts file edits when known_hosts doesn't
    exist.
  * sshd(8): correct packet format for tcpip-forward replies for
    requests that don't allocate a port
  * ssh(1), sshd(8): fix possible hang on closed output.
  * ssh(1): expand %i in ControlPath to UID.
  * ssh(1), sshd(8): fix return type of openssh_RSA_verify.
  * ssh(1), sshd(8): fix some option parsing memory leaks.
  * ssh(1): add a some debug output before DNS resolution; it's a
    place where ssh could previously silently stall in cases of
    unresponsive DNS servers.
  * ssh(1): remove spurious newline in visual hostkey.
  * ssh(1): fix printing (ssh -G ...) of HostKeyAlgorithms=+...
  * ssh(1): fix expansion of HostkeyAlgorithms=+...
  Documentation:
  * ssh_config(5), sshd_config(5): update default algorithm lists
    to match current reality.
  * ssh(1): mention -Q key-plain and -Q key-cert query options.
  * sshd_config(8): more clearly describe what
    AuthorizedKeysFile=none does.
  * ssh_config(5): better document ExitOnForwardFailure.
  * sshd(5): mention internal DH-GEX fallback groups in manual.
  * sshd_config(5): better description for MaxSessions option.
  Portability:
  * sshd(8): fix multiple authentication using S/Key.
- OpenSSH 7.2p2:
  Security:
  * sshd(8): sanitise X11 authentication credentials to avoid
    xauth command injection when X11Forwarding is enabled.
- (removing patches from previous version:
  openssh-6.6p1-X11-forwarding.patch
  openssh-6.6p1-X_forward_with_disabled_ipv6.patch
  openssh-6.6p1-audit1-remove_duplicit_audit.patch
  openssh-6.6p1-audit2-better_audit_of_user_actions.patch
  openssh-6.6p1-audit3-key_auth_usage-fips.patch
  openssh-6.6p1-audit3-key_auth_usage.patch
  openssh-6.6p1-audit4-kex_results-fips.patch
  openssh-6.6p1-audit4-kex_results.patch
  openssh-6.6p1-audit5-session_key_destruction.patch
  openssh-6.6p1-audit6-server_key_destruction.patch
  openssh-6.6p1-audit7-libaudit_compat.patch
  openssh-6.6p1-audit8-libaudit_dns_timeouts.patch
  openssh-6.6p1-blocksigalrm.patch
  openssh-6.6p1-curve25519-6.6.1p1.patch
  openssh-6.6p1-default-protocol.patch
  openssh-6.6p1-disable-openssl-abi-check.patch
  openssh-6.6p1-disable_roaming.patch
  openssh-6.6p1-eal3.patch
  openssh-6.6p1-fingerprint_hash.patch
  openssh-6.6p1-fips-checks.patch
  openssh-6.6p1-fips.patch
  openssh-6.6p1-gssapi_key_exchange.patch
  openssh-6.6p1-gssapimitm.patch
  openssh-6.6p1-host_ident.patch
  openssh-6.6p1-key-converter.patch
  openssh-6.6p1-lastlog.patch
  openssh-6.6p1-ldap.patch
  openssh-6.6p1-login_options.patch
  openssh-6.6p1-no_fork-no_pid_file.patch
  openssh-6.6p1-pam-check-locks.patch
  openssh-6.6p1-pam-fix2.patch
  openssh-6.6p1-pam-fix3.patch
  openssh-6.6p1-pts.patch
  openssh-6.6p1-saveargv-fix.patch
  openssh-6.6p1-seccomp_getuid.patch
  openssh-6.6p1-seccomp_stat.patch
  openssh-6.6p1-seed-prng.patch
  openssh-6.6p1-send_locale.patch
  openssh-6.6p1-sftp_force_permissions.patch
  openssh-6.6p1-sftp_homechroot.patch
  openssh-6.6p1-xauth.patch
  openssh-6.6p1-xauthlocalhostname.patch)</changelog>
<changelog author="pcerny@suse.com" date="1464609600">- enable trusted X11 forwarding by default
  [openssh-7.2p2-X11_trusted_forwarding.patch]
- set UID for lastlog properly
  [openssh-7.2p2-lastlog.patch]
- enable use of PAM by default
  [openssh-7.2p2-enable_PAM_by_default.patch]
- copy command line arguments properly
  [openssh-7.2p2-saveargv-fix.patch]
- do not use pthreads in PAM code
  [openssh-7.2p2-dont_use_pthreads_in_PAM.patch]
- fix paths in documentation
  [openssh-7.2p2-eal3.patch]
- prevent race consitions triggered by SIGALRM
  [openssh-7.2p2-blocksigalrm.patch]
- do send and accept locale environment variables by default
  [openssh-7.2p2-send_locale.patch]
- handle hostnames changes during X forwarding
  [openssh-7.2p2-hostname_changes_when_forwarding_X.patch]
- try to remove xauth cookies on exit
  [openssh-7.2p2-remove_xauth_cookies_on_exit.patch]
- properly format pts names for ?tmp? log files
  [openssh-7.2p2-pts_names_formatting.patch]
- check locked accounts when using PAM
  [openssh-7.2p2-pam_check_locks.patch]
- chenge default PermitRootLogin to 'yes' to prevent unwanted
  surprises on updates from older versions.
  See README.SUSE for details
  [openssh-7.2p2-allow_root_password_login.patch]
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [openssh-7.2p2-disable_short_DH_parameters.patch]
- Add getuid() and stat() syscalls to the seccomp filter
  (bsc#912436)
  [openssh-7.2p2-seccomp_getuid.patch,
  openssh-7.2p2-seccomp_stat.patch]</changelog>
<changelog author="pcerny@suse.com" date="1465300800">- enable support for SSHv1 protocol and discourage its usage
  (bsc#983307)
- enable DSA by default for backward compatibility and discourage
  its usage (bsc#983784)</changelog>
<changelog author="pcerny@suse.com" date="1474027200">- FIPS compatibility (no selfchecks, only crypto restrictions)
  [openssh-7.2p2-fips.patch]
- PRNG re-seeding
  [openssh-7.2p2-seed-prng.patch]
- preliminary version of GSSAPI KEX
  [openssh-7.2p2-gssapi_key_exchange.patch]</changelog>
<changelog author="pcerny@suse.com" date="1475150400">- remaining patches that were still missing
  since the update to 7.2p2 (FATE#319675):
- allow X forwarding over IPv4 when IPv6 sockets is not available
  [openssh-7.2p2-X_forward_with_disabled_ipv6.patch]
- do not write PID file when not daemonizing
  [openssh-7.2p2-no_fork-no_pid_file.patch]
- use correct options when invoking login
  [openssh-7.2p2-login_options.patch]
- helper application for retrieving users' public keys from
  an LDAP server
  [openssh-7.2p2-ldap.patch]
- allow forcing permissions over sftp
  [openssh-7.2p2-sftp_force_permissions.patch]
- do not perform run-time checks for OpenSSL API/ABI change
  [openssh-7.2p2-disable_openssl_abi_check.patch]
- suggest commands for cleaning known hosts file
  [openssh-7.2p2-host_ident.patch]
- sftp home chroot patch
  [openssh-7.2p2-sftp_homechroot.patch]
- ssh sessions auditing
  [openssh-7.2p2-audit.patch]
- enable seccomp sandbox on additional architectures
  [openssh-7.2p2-additional_seccomp_archs.patch]
- fix forwarding with IPv6 addresses in DISPLAY (bnc#847710)
  [openssh-7.2p2-IPv6_X_forwarding.patch]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [openssh-7.2p2-ignore_PAM_with_UseLogin.patch]
- limit accepted password length (prevents possible DoS)
  (bsc#992533, CVE-2016-6515)
  [openssh-7.2p2-limit_password_length.patch]
- Prevent user enumeration through the timing of password
  processing (bsc#989363, CVE-2016-6210)
  [openssh-7.2p2-prevent_timing_user_enumeration.patch]
- Add auditing for PRNG re-seeding
  [openssh-7.2p2-audit_seed_prng.patch]</changelog>
<changelog author="pcerny@suse.com" date="1476360000">- enable geteuid{,32} syscalls on mainframes, since it may be
  called from libica/ibmica on machines with hardware crypto
  accelerator (bsc#1004258)
  [openssh-7.2p2-seccomp_geteuid.patch]
- fix regression of (bsc#823710)
  [openssh-7.2p2-audit_fixes.patch]
- add slogin (removed upstreams)
  [openssh-7.2p2-keep_slogin.patch]</changelog>
<changelog author="pcerny@suse.com" date="1478606400">- prevent resource depletion during key exchange
  (bsc#1005480, CVE-2016-8858)
  [openssh-7.2p2-kex_resource_depletion.patch]
- fix suggested command for removing conflicting server keys from
  the known_hosts file (bsc#1006221)</changelog>
<changelog author="pcerny@suse.com" date="1483617600">- Properly verify CIDR masks in configuration
  (bsc#1005893)
  [openssh-7.2p2-verify_CIDR_address_ranges.patch]
- Remove pre-auth compression support from the server to prevent
  possible cryptographic attacks.
  (CVE-2016-10012, bsc#1016370)
  [openssh-7.2p2-disable_preauth_compression.patch]
- limit directories for loading PKCS11 modules
  (CVE-2016-10009, bsc#1016366)
  [openssh-7.2p2-restrict_pkcs11-modules.patch]
- Prevent possible leaks of host private keys to low-privilege
  process handling authentication
  (CVE-2016-10011, bsc#1016369)
  [openssh-7.2p2-prevent_private_key_leakage.patch]
- Do not allow unix socket forwarding when running without
  privilege separation
  (CVE-2016-10010, bsc#1016368)
  [openssh-7.2p2-secure_unix_sockets_forwarding.patch]</changelog>
<changelog author="pcerny@suse.com" date="1485259200">- Adding missing pieces for user matching (bsc#1021626)</changelog>
<changelog author="pcerny@suse.com" date="1492776000">- enable case-insensitive hostname matching (bsc#1017099)
  [openssh-7.2p2-ssh_case_insensitive_host_matching.patch]
- re-add CAVS tests
  [openssh-7.2p2-cavstest-ctr.patch]
  [openssh-7.2p2-cavstest-kdf.patch]</changelog>
<changelog author="pcerny@suse.com" date="1494849600">- Fix preauth seccomp separation on mainframes (bsc#1016709)
  [openssh-7.2p2-s390_hw_crypto_syscalls.patch]
  [openssh-7.2p2-s390_OpenSSL-ibmpkcs11_syscalls.patch]</changelog>
<changelog author="pcerny@suse.com" date="1496232000">- sshd.service: Set TasksMax=infinity, as there should be
  no limit on the amount of tasks sshd can run.</changelog>
<changelog author="pcerny@suse.com" date="1498651200">- new switch for printing diagnostic messages in sftp client's
  batch mode (bsc#1023275)
  [openssh-7.2p2-sftp_print_diagnostic_messages.patch]
- Better fix for core dumps from auditing code when trying to bind
  to an unavailable port (bsc#1024251)</changelog>
<changelog author="pcerny@suse.com" date="1506427200">- Test configuration before running daemon to rpevent looping
  resulting in service shutdown (bsc#1048367)</changelog>
<changelog author="pcerny@suse.com" date="1511352000">- FIPS startup selfchecks (bsc#1068310)
  [openssh-7.2p2-fips_checks.patch]
- Silent complaints about unsupported key exchange methods
  (bsc#1006166)
  [openssh-7.2p2-fips_fixes.patch]
- Stricter checking of operations in read-only mode in sftp server
  (CVE-2017-15906, bsc#1065000)
  [openssh-7.2p2-stricter_readonly_sftp.patch]
- Refine handling of sockets for X11 forwarding to remove
  reintroduced CVE-2008-1483 (bsc#1069509)</changelog>

</package>
<package pkgid="68d4c7e7e536d4d006d651cb099f2c60da2dbd67df0606852f2c0703fb1441fc" name="openssh-askpass-gnome" arch="src">
    <version epoch="0" ver="7.2p2" rel="15.1"/>

<changelog author="anicka@suse.cz" date="1207742400">- update to 5.0p1</changelog>
<changelog author="anicka@suse.cz" date="1235390400">- update to 5.2p1</changelog>
<changelog author="anicka@suse.cz" date="1269604800">- update to 5.4p1
- remove -pam-fix4.diff (in upstream now)</changelog>
<changelog author="anicka@suse.cz" date="1282651200">- update to 5.6p1</changelog>
<changelog author="sbrabec@suse.cz" date="1294833600">- Removed relics of no more implemented opensc support.</changelog>
<changelog author="lchiquitto@novell.com" date="1295870400">- Update to 5.7p1</changelog>
<changelog author="lchiquitto@novell.com" date="1296820800">- Update to 5.8p1</changelog>
<changelog author="pcerny@suse.com" date="1319025600">- Update to 5.9p1</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="aj@suse.de" date="1332936000">- Add build require on autoconf and automake.</changelog>
<changelog author="meissner@suse.com" date="1338292800">- use correct tarball url
- update to 6.0p1.</changelog>
<changelog author="coolo@suse.com" date="1340798400">- the gnome askpass does not require the x11 askpass - especially not
  in the version of openssh (it's at 1.X)</changelog>
<changelog author="meissner@suse.com" date="1352808000">- Updated to 6.1p1, a bugfix release
  Features:
  * sshd(8): This release turns on pre-auth sandboxing sshd by default for
  new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config.
  * ssh-keygen(1): Add options to specify starting line number and number of
  lines to process when screening moduli candidates, allowing processing
  of different parts of a candidate moduli file in parallel
  * sshd(8): The Match directive now supports matching on the local (listen)
  address and port upon which the incoming connection was received via
  LocalAddress and LocalPort clauses.
  * sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv
  and {Allow,Deny}{Users,Groups}
  * Add support for RFC6594 SSHFP DNS records for ECDSA key types. bz#1978
  * ssh-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8
  * sshd(8): Allow the sshd_config PermitOpen directive to accept "none" as
  an argument to refuse all port-forwarding requests.
  * sshd(8): Support "none" as an argument for AuthorizedPrincipalsFile
  * ssh-keyscan(1): Look for ECDSA keys by default. bz#1971
  * sshd(8): Add "VersionAddendum" to sshd_config to allow server operators
  to append some arbitrary text to the server SSH protocol banner.
  Bugfixes:
  * ssh(1)/sshd(8): Don't spin in accept() in situations of file
  descriptor exhaustion. Instead back off for a while.
  * ssh(1)/sshd(8): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs as
  they were removed from the specification. bz#2023,
  * sshd(8): Handle long comments in config files better. bz#2025
  * ssh(1): Delay setting tty_flag so RequestTTY options are correctly
  picked up. bz#1995
  * sshd(8): Fix handling of /etc/nologin incorrectly being applied to root
  on platforms that use login_cap.
  Portable OpenSSH:
  * sshd(8): Allow sshd pre-auth sandboxing to fall-back to the rlimit
  sandbox from the Linux SECCOMP filter sandbox when the latter is
  not available in the kernel.
  * ssh(1): Fix NULL dereference when built with LDNS and using DNSSEC to
  retrieve a CNAME SSHFP record.
  * Fix cross-compilation problems related to pkg-config. bz#1996</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
<changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
<changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
<changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
<changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
<changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
<changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>

</package>
<package pkgid="03cc5a2e3d82bebb3ec1eee8fb902fcc0131e299c1edfde184025b77e6814249" name="openssh-askpass-gnome" arch="x86_64">
    <version epoch="0" ver="7.2p2" rel="15.1"/>

<changelog author="anicka@suse.cz" date="1269604800">- update to 5.4p1
- remove -pam-fix4.diff (in upstream now)</changelog>
<changelog author="anicka@suse.cz" date="1282651200">- update to 5.6p1</changelog>
<changelog author="sbrabec@suse.cz" date="1294833600">- Removed relics of no more implemented opensc support.</changelog>
<changelog author="lchiquitto@novell.com" date="1295870400">- Update to 5.7p1</changelog>
<changelog author="lchiquitto@novell.com" date="1296820800">- Update to 5.8p1</changelog>
<changelog author="pcerny@suse.com" date="1319025600">- Update to 5.9p1</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="aj@suse.de" date="1332936000">- Add build require on autoconf and automake.</changelog>
<changelog author="meissner@suse.com" date="1338292800">- use correct tarball url
- update to 6.0p1.</changelog>
<changelog author="coolo@suse.com" date="1340798400">- the gnome askpass does not require the x11 askpass - especially not
  in the version of openssh (it's at 1.X)</changelog>
<changelog author="meissner@suse.com" date="1352808000">- Updated to 6.1p1, a bugfix release
  Features:
  * sshd(8): This release turns on pre-auth sandboxing sshd by default for
  new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config.
  * ssh-keygen(1): Add options to specify starting line number and number of
  lines to process when screening moduli candidates, allowing processing
  of different parts of a candidate moduli file in parallel
  * sshd(8): The Match directive now supports matching on the local (listen)
  address and port upon which the incoming connection was received via
  LocalAddress and LocalPort clauses.
  * sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv
  and {Allow,Deny}{Users,Groups}
  * Add support for RFC6594 SSHFP DNS records for ECDSA key types. bz#1978
  * ssh-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8
  * sshd(8): Allow the sshd_config PermitOpen directive to accept "none" as
  an argument to refuse all port-forwarding requests.
  * sshd(8): Support "none" as an argument for AuthorizedPrincipalsFile
  * ssh-keyscan(1): Look for ECDSA keys by default. bz#1971
  * sshd(8): Add "VersionAddendum" to sshd_config to allow server operators
  to append some arbitrary text to the server SSH protocol banner.
  Bugfixes:
  * ssh(1)/sshd(8): Don't spin in accept() in situations of file
  descriptor exhaustion. Instead back off for a while.
  * ssh(1)/sshd(8): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs as
  they were removed from the specification. bz#2023,
  * sshd(8): Handle long comments in config files better. bz#2025
  * ssh(1): Delay setting tty_flag so RequestTTY options are correctly
  picked up. bz#1995
  * sshd(8): Fix handling of /etc/nologin incorrectly being applied to root
  on platforms that use login_cap.
  Portable OpenSSH:
  * sshd(8): Allow sshd pre-auth sandboxing to fall-back to the rlimit
  sandbox from the Linux SECCOMP filter sandbox when the latter is
  not available in the kernel.
  * ssh(1): Fix NULL dereference when built with LDNS and using DNSSEC to
  retrieve a CNAME SSHFP record.
  * Fix cross-compilation problems related to pkg-config. bz#1996</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375531200">- Update for 6.2p2</changelog>
<changelog author="pcerny@suse.com" date="1379592000">- spec file cleanup (don't pointelssly build whole OpenSSH)</changelog>
<changelog author="pcerny@suse.com" date="1390564800">- Update of the underlying OpenSSH to 6.4p1</changelog>
<changelog author="pcerny@suse.com" date="1392206400">- Update of the underlying OpenSSH to 6.5p1</changelog>
<changelog author="pcerny@suse.com" date="1397217600">- Update of the underlying OpenSSH to 6.6p1</changelog>
<changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
<changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>

</package>
<package pkgid="35cc7520f2581514713fa54cdbd9225a8f022669e926fdc69e2360157bd3b621" name="openssh-cavs" arch="x86_64">
    <version epoch="0" ver="7.2p2" rel="15.1"/>

<changelog author="pcerny@suse.com" date="1431604800">- use %restart_on_update in the trigger script</changelog>
<changelog author="pcerny@suse.com" date="1438344000">- Maintenance update
  * better timeouting of X11 forwards (CVE-2015-5352/bsc#936695)
    [-X11_forwarding_timeout] and hardening of ssh-agent(1)
    locking (bsc#936695) [-agent_locking_hardening]
  * removing and disabling short DH parameters (bsc#932483)
    [-disable_DH_under_1536b, -remove_moduli_under_1536b]
  * disable accdess to procfs from sftp (bsc#903649)
    [-sftp_procfs_restrictions]
  * Allow each keyboard authentication method to be used only
    once per login (CVE-2015-5600/bsc#938746)
    [-use_each_kbd_method_just_once]
  * Don't resend username to PAM, it can be misused for privilege
    escalation (CVE-2015-6563/bsc#943010)
    [-pam_privsep_dont_resend_username]
  * Prevent possible use-after-free in PAM authentication monitor
    (CVE-2015-6564/bsc#943006)
    [-pam_privsep_auth_uaf]</changelog>
<changelog author="jsegitz@novell.com" date="1452686400">- CVE-2016-0777, bsc#961642, CVE-2016-0778, bsc#961645
  Added CVE-2016-077-7_8.patch to disable the roaming code to prevent
  information leak and buffer overflow</changelog>
<changelog author="pcerny@suse.com" date="1457438400">- fix minor problems (bsc#945493)
- fix postun script of main package (bsc#945484)
- fix crashes when /proc is not available (bsc#947458)
- rename and comment the roaming patch
  (CVE-2016-077-7_8 to -disable_roaming)</changelog>
<changelog author="pcerny@suse.com" date="1460030400">- Correctly parse GSSAPI KEX algorithms (bsc#961368)
- Sanitise input for xauth(1) (bsc#970632, CVE-2016-3115)
  [-sanitise_xauth_input]
- prevent X11 SECURITY circumvention when forwarding X11
  connections (bsc#962313, CVE-2016-1908)
  [-untrusted_X_forwarding]
- more verbose FIPS mode/CC related documentation in README.FIPS
  (bsc#965576, bsc#960414)
- fix PRNG re-seeding (bsc#960414, bsc#729190)
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [-disable_DH_under_1536b -&gt; -disable_short_DH_parameters]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [-ignore_PAM_with_UseLogin]</changelog>
<changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2 (FATE#319675)
  upstream package without any SUSE patches
  Distilled upstream log:
- OpenSSH 6.7
  Potentially-incompatible changes:
  * sshd(8): The default set of ciphers and MACs has been
    altered to remove unsafe algorithms. In particular, CBC
    ciphers and arcfour* are disabled by default.
    The full set of algorithms remains available if configured
    explicitly via the Ciphers and MACs sshd_config options.
  * sshd(8): Support for tcpwrappers/libwrap has been removed.
  * OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of
    connections using the curve25519-sha256@libssh.org KEX
    exchange method to fail when connecting with something that
    implements the specification correctly. OpenSSH 6.7 disables
    this KEX method when speaking to one of the affected
    versions.
  New Features:
  * ssh(1), sshd(8): Add support for Unix domain socket
    forwarding. A remote TCP port may be forwarded to a local
    Unix domain socket and vice versa or both ends may be a Unix
    domain socket.
  * ssh(1), ssh-keygen(1): Add support for SSHFP DNS records for
    ED25519 key types.
  * sftp(1): Allow resumption of interrupted uploads.
  * ssh(1): When rekeying, skip file/DNS lookups of the hostkey
    if it is the same as the one sent during initial key exchange
  * sshd(8): Allow explicit ::1 and 127.0.0.1 forwarding bind
    addresses when GatewayPorts=no; allows client to choose
    address family
  * sshd(8): Add a sshd_config PermitUserRC option to control
    whether ~/.ssh/rc is executed, mirroring the no-user-rc
    authorized_keys option
  * ssh(1): Add a %C escape sequence for LocalCommand and
    ControlPath that expands to a unique identifer based on a
    hash of the tuple of (local host, remote user, hostname,
    port). Helps avoid exceeding miserly pathname limits for Unix
    domain sockets in multiplexing control paths
  * sshd(8): Make the "Too many authentication failures" message
    include the user, source address, port and protocol in a
    format similar to the authentication success / failure
    messages
  Bugfixes:
  * sshd(8): Fix remote forwarding with the same listen port but
    different listen address.
  * ssh(1): Fix inverted test that caused PKCS#11 keys that were
    explicitly listed in ssh_config or on the commandline not to
    be preferred.
  * ssh-keygen(1): Fix bug in KRL generation: multiple
    consecutive revoked certificate serial number ranges could be
    serialised to an invalid format. Readers of a broken KRL
    caused by this bug will fail closed, so no
    should-have-been-revoked key will be accepted.
  * ssh(1): Reflect stdio-forward ("ssh -W host:port ...")
    failures in exit status. Previously we were always returning 0
  * ssh(1), ssh-keygen(1): Make Ed25519 keys' title fit properly
    in the randomart border
  * ssh-agent(1): Only cleanup agent socket in the main agent
    process and not in any subprocesses it may have started (e.g.
    forked askpass). Fixes agent sockets being zapped when
    askpass processes fatal()
  * ssh-add(1): Make stdout line-buffered; saves partial output
    getting lost when ssh-add fatal()s part-way through (e.g.
    when listing keys from an agent that supports key types that
    ssh-add doesn't)
  * ssh-keygen(1): When hashing or removing hosts, don't choke on
    @revoked markers and don't remove @cert-authority markers
  * ssh(1): Don't fatal when hostname canonicalisation fails and
    a ProxyCommand is in use; continue and allow the ProxyCommand
    to connect anyway (e.g. to a host with a name outside the DNS
    behind a bastion)
  * scp(1): When copying local-&gt;remote fails during read, don't
    send uninitialised heap to the remote end.
  * sftp(1): Fix fatal "el_insertstr failed" errors when
    tab-completing filenames with  a single quote char somewhere
    in the string
  * ssh-keyscan(1): Scan for Ed25519 keys by default.
  * ssh(1): When using VerifyHostKeyDNS with a DNSSEC resolver,
    down-convert any certificate keys to plain keys and attempt
    SSHFP resolution.  Prevents a server from skipping SSHFP
    lookup and forcing a new-hostkey dialog by offering only
    certificate keys.
- OpenSSH 6.8
  Potentially-incompatible changes:
  * sshd(8): UseDNS now defaults to 'no'. Configurations that
    match against the client host name (via sshd_config or
    authorized_keys) may need to re-enable it or convert to
    matching against addresses.
  New Features:
  * Add FingerprintHash option to ssh(1) and sshd(8), and
    equivalent command-line flags to the other tools to control
    algorithm used for key fingerprints. The default changes from
    MD5 to SHA256 and format from hex to base64.
    Fingerprints now have the hash algorithm prepended. An
    example of the new format:
    SHA256:mVPwvezndPv/ARoIadVY98vAC0g+P/5633yTC4d/wXE Please
    note that visual host keys will also be different.
  * ssh(1), sshd(8): Experimental host key rotation support. Add
    a protocol extension for a server to inform a client of all
    its available host keys after authentication has completed.
    The client may record the keys in known_hosts, allowing it to
    upgrade to better host key algorithms and a server to
    gracefully rotate its keys.
    The client side of this is controlled by a UpdateHostkeys
    config option (default off).
  * ssh(1): Add a ssh_config HostbasedKeyType option to control
    which host public key types are tried during host-based
    authentication.
  * ssh(1), sshd(8): fix connection-killing host key mismatch
    errors when sshd offers multiple ECDSA keys of different
    lengths.
  * ssh(1): when host name canonicalisation is enabled, try to
    parse host names as addresses before looking them up for
    canonicalisation. fixes bz#2074 and avoiding needless DNS
    lookups in some cases.
  * ssh-keygen(1), sshd(8): Key Revocation Lists (KRLs) no longer
    require OpenSSH to be compiled with OpenSSL support.
  * ssh(1), ssh-keysign(8): Make ed25519 keys work for host based
    authentication.
  * sshd(8): SSH protocol v.1 workaround for the Meyer, et al,
    Bleichenbacher Side Channel Attack. Fake up a bignum key
    before RSA decryption.
  * sshd(8): Remember which public keys have been used for
    authentication and refuse to accept previously-used keys.
    This allows AuthenticationMethods=publickey,publickey to
    require that users authenticate using two _different_ public
    keys.
  * sshd(8): add sshd_config HostbasedAcceptedKeyTypes and
    PubkeyAcceptedKeyTypes options to allow sshd to control what
    public key types will be accepted. Currently defaults to all.
  * sshd(8): Don't count partial authentication success as a
    failure against MaxAuthTries.
  * ssh(1): Add RevokedHostKeys option for the client to allow
    text-file or KRL-based revocation of host keys.
  * ssh-keygen(1), sshd(8): Permit KRLs that revoke certificates
    by serial number or key ID without scoping to a particular
    CA.
  * ssh(1): Add a "Match canonical" criteria that allows
    ssh_config Match blocks to trigger only in the second config
    pass.
  * ssh(1): Add a -G option to ssh that causes it to parse its
    configuration and dump the result to stdout, similar to
    "sshd -T".
  * ssh(1): Allow Match criteria to be negated.
    E.g. "Match !host".
  * The regression test suite has been extended to cover more
    OpenSSH features. The unit tests have been expanded and now
    cover key exchange.
  Bugfixes:
  * ssh-keyscan(1): ssh-keyscan has been made much more robust
    again servers that hang or violate the SSH protocol.
  * ssh(1), ssh-keygen(1): Fix regression: Key path names were
    being lost as comment fields.
  * ssh(1): Allow ssh_config Port options set in the second
    config parse phase to be applied (they were being ignored).
  * ssh(1): Tweak config re-parsing with host canonicalisation - make
    the second pass through the config files always run when host name
    canonicalisation is enabled (and not whenever the host name
    changes)
  * ssh(1): Fix passing of wildcard forward bind addresses when
    connection multiplexing is in use
  * ssh-keygen(1): Fix broken private key conversion from
    non-OpenSSH formats.
  * ssh-keygen(1): Fix KRL generation bug when multiple CAs are
    in use.
  * Various fixes to manual pages
- OpenSSH 6.9
  Security:
  * ssh(1): when forwarding X11 connections with
    ForwardX11Trusted=no, connections made after
    ForwardX11Timeout expired could be permitted and no longer
    subject to XSECURITY restrictions because of an ineffective
    timeout check in ssh(1) coupled with "fail open" behaviour in
    the X11 server when clients attempted connections with
    expired credentials. This problem was reported by Jann Horn.
  * ssh-agent(1): fix weakness of agent locking (ssh-add -x) to
    password guessing by implementing an increasing failure
    delay, storing a salted hash of the password rather than the
    password itself and using a timing-safe comparison function
    for verifying unlock attempts. This problem was reported by
    Ryan Castellucci.
  New Features:
  * ssh(1), sshd(8): promote chacha20-poly1305@openssh.com to be
    the default cipher
  * sshd(8): support admin-specified arguments to
    AuthorizedKeysCommand
  * sshd(8): add AuthorizedPrincipalsCommand that allows
    retrieving authorized principals information from a
    subprocess rather than a file.
  * ssh(1), ssh-add(1): support PKCS#11 devices with external PIN
    entry devices
  * sshd(8): allow GSSAPI host credential check to be relaxed for
    multihomed hosts via GSSAPIStrictAcceptorCheck option
  * ssh-keygen(1): support "ssh-keygen -lF hostname" to search
    known_hosts and print key hashes rather than full keys.
  * ssh-agent(1): add -D flag to leave ssh-agent in foreground
    without enabling debug mode
  Bugfixes:
  * ssh(1), sshd(8): deprecate legacy
    SSH2_MSG_KEX_DH_GEX_REQUEST_OLD message and do not try to use
    it against some 3rd-party SSH implementations that use it
    (older PuTTY, WinSCP).
  * Many fixes for problems caused by compile-time deactivation
    of SSH1 support (including bz#2369)
  * ssh(1), sshd(8): cap DH-GEX group size at 4Kbits for Cisco
    implementations as some would fail when attempting to use
    group sizes &gt;4K
  * ssh(1): fix out-of-bound read in EscapeChar configuration
    option parsing
  * sshd(8): fix application of PermitTunnel, LoginGraceTime,
    AuthenticationMethods and StreamLocalBindMask options in
    Match blocks
  * ssh(1), sshd(8): improve disconnection message on TCP reset;
    bz#2257
  * ssh(1): remove failed remote forwards established by
    muliplexing from the list of active forwards
  * sshd(8): make parsing of authorized_keys "environment="
    options independent of PermitUserEnv being enabled
  * sshd(8): fix post-auth crash with permitopen=none
  * ssh(1), ssh-add(1), ssh-keygen(1): allow new-format private
    keys to be encrypted with AEAD ciphers
  * ssh(1): allow ListenAddress, Port and AddressFamily
    configuration options to appear in any order
  * sshd(8): check for and reject missing arguments for
    VersionAddendum and ForceCommand
  * ssh(1), sshd(8): don't treat unknown certificate extensions
    as fatal
  * ssh-keygen(1): make stdout and stderr output consistent
  * ssh(1): mention missing DISPLAY environment in debug log when
    X11 forwarding requested
  * sshd(8): correctly record login when UseLogin is set
  * sshd(8): Add some missing options to sshd -T output and fix
    output of VersionAddendum and HostCertificate. bz#2346
  * Document and improve consistency of options that accept a
    "none" argument" TrustedUserCAKeys, RevokedKeys (bz#2382),
    AuthorizedPrincipalsFile (bz#2288)
  * ssh(1): include remote username in debug output
  * sshd(8): avoid compatibility problem with some versions of
    Tera Term, which would crash when they received the hostkeys
    notification message (hostkeys-00@openssh.com)
  * sshd(8): mention ssh-keygen -E as useful when comparing
    legacy MD5 host key fingerprints
  * ssh(1): clarify pseudo-terminal request behaviour and use
    make manual language consistent
  * ssh(1): document that the TERM environment variable is not
    subject to SendEnv and AcceptEnv
- OpenSSH 7.0:
  This focuses primarily on deprecating weak, legacy and/or
  unsafe cryptography.
  Security:
  * sshd(8): OpenSSH 6.8 and 6.9 incorrectly set TTYs to be
    world- writable. Local attackers may be able to write
    arbitrary messages to logged-in users, including terminal
    escape sequences.  Reported by Nikolay Edigaryev.
  * sshd(8): Portable OpenSSH only: Fixed a privilege separation
    weakness related to PAM support. Attackers who could
    successfully compromise the pre-authentication process for
    remote code execution and who had valid credentials on the
    host could impersonate other users.  Reported by Moritz
    Jodeit.
  * sshd(8): Portable OpenSSH only: Fixed a use-after-free bug
    related to PAM support that was reachable by attackers who
    could compromise the pre-authentication process for remote
    code execution. Also reported by Moritz Jodeit.
  * sshd(8): fix circumvention of MaxAuthTries using keyboard-
    interactive authentication. By specifying a long, repeating
    keyboard-interactive "devices" string, an attacker could
    request the same authentication method be tried thousands of
    times in a single pass. The LoginGraceTime timeout in sshd(8)
    and any authentication failure delays implemented by the
    authentication mechanism itself were still applied. Found by
    Kingcope.
  Potentially-incompatible Changes:
  * Support for the legacy SSH version 1 protocol is disabled by
    default at compile time.
  * Support for the 1024-bit diffie-hellman-group1-sha1 key
    exchange is disabled by default at run-time. It may be
    re-enabled using the instructions in README.legacy or
    http://www.openssh.com/legacy.html
  * Support for ssh-dss, ssh-dss-cert-* host and user keys is
    disabled by default at run-time. These may be re-enabled
    using the instructions at http://www.openssh.com/legacy.html
  * Support for the legacy v00 cert format has been removed.
  * The default for the sshd_config(5) PermitRootLogin option has
    changed from "yes" to "prohibit-password".
  * PermitRootLogin=without-password/prohibit-password now bans
    all interactive authentication methods, allowing only
    public-key, hostbased and GSSAPI authentication (previously
    it permitted keyboard-interactive and password-less
    authentication if those were enabled).
  New Features:
  * ssh_config(5): add PubkeyAcceptedKeyTypes option to control
    which public key types are available for user authentication.
  * sshd_config(5): add HostKeyAlgorithms option to control which
    public key types are offered for host authentications.
  * ssh(1), sshd(8): extend Ciphers, MACs, KexAlgorithms,
    HostKeyAlgorithms, PubkeyAcceptedKeyTypes and
    HostbasedKeyTypes options to allow appending to the default
    set of algorithms instead of replacing it. Options may now be
    prefixed with a '+' to append to the default, e.g.
    "HostKeyAlgorithms=+ssh-dss".
  * sshd_config(5): PermitRootLogin now accepts an argument of
    'prohibit-password' as a less-ambiguous synonym of 'without-
    password'.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for Cisco and
    more PuTTY versions.
  * Fix some omissions and errors in the PROTOCOL and
    PROTOCOL.mux documentation relating to Unix domain socket
    forwarding
  * ssh(1): Improve the ssh(1) manual page to include a better
    description of Unix domain socket forwarding
  * ssh(1), ssh-agent(1): skip uninitialised PKCS#11 slots,
    fixing failures to load keys when they are present.
  * ssh(1), ssh-agent(1): do not ignore PKCS#11 hosted keys that
    wth empty CKA_ID
  * sshd(8): clarify documentation for UseDNS option
- OpenSSH 7.1:
  Security:
  * sshd(8): OpenSSH 7.0 contained a logic error in
    PermitRootLogin= prohibit-password/without-password that
    could, depending on compile-time configuration, permit
    password authentication to root while preventing other forms
    of authentication. This problem was reported by Mantas
    Mikulenas.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for FuTTY
  * ssh(1), sshd(8): refine compatability workarounds for WinSCP
  * Fix a number of memory faults (double-free, free of
    uninitialised memory, etc) in ssh(1) and ssh-keygen(1).
    Reported by Mateusz Kocielski.
- OpenSSH 7.1p2:
  * SECURITY: ssh(1): The OpenSSH client code between 5.4 and 7.1
    contains experimential support for resuming SSH-connections
    (roaming).
    The matching server code has never been shipped, but the
    client code was enabled by default and could be tricked by a
    malicious server into leaking client memory to the server,
    including private client user keys.
    The authentication of the server host key prevents
    exploitation by a man-in-the-middle, so this information leak
    is restricted to connections to malicious or compromised
    servers.
    MITIGATION: For OpenSSH &gt;= 5.4 the vulnerable code in the
    client can be completely disabled by adding 'UseRoaming no'
    to the gobal ssh_config(5) file, or to user configuration in
    ~/.ssh/config, or by passing -oUseRoaming=no on the command
    line.
    PATCH: See below for a patch to disable this feature
    (Disabling Roaming in the Source Code).
    This problem was reported by the Qualys Security Advisory
    team.
  * SECURITY: Eliminate the fallback from untrusted
    X11-forwarding to trusted forwarding for cases when the X
    server disables the SECURITY extension. Reported by Thomas
    Hoger.
  * SECURITY: Fix an out of-bound read access in the packet
    handling code. Reported by Ben Hawkes.
  * PROTOCOL: Correctly interpret the 'first_kex_follows' option
    during the intial key exchange. Reported by Matt Johnston.
  * Further use of explicit_bzero has been added in various
    buffer handling code paths to guard against compilers
    aggressively doing dead-store removal.
  Potentially-incompatible changes:
  * This release disables a number of legacy cryptographic
    algorithms by default in ssh:
    + Several ciphers blowfish-cbc, cast128-cbc, all arcfour
    variants and the rijndael-cbc aliases for AES.
    + MD5-based and truncated HMAC algorithms.
- OpenSSH 7.2:
  Security:
  * ssh(1), sshd(8): remove unfinished and unused roaming code
    (was already forcibly disabled in OpenSSH 7.1p2).
  * ssh(1): eliminate fallback from untrusted X11 forwarding to
    trusted forwarding when the X server disables the SECURITY
    extension.
  * ssh(1), sshd(8): increase the minimum modulus size supported
    for diffie-hellman-group-exchange to 2048 bits.
  * sshd(8): pre-auth sandboxing is now enabled by default
    (previous releases enabled it for new installations via
    sshd_config).
  New Features:
  * all: add support for RSA signatures using SHA-256/512 hash
    algorithms based on draft-rsa-dsa-sha2-256-03.txt and
    draft-ssh-ext-info-04.txt.
  * ssh(1): Add an AddKeysToAgent client option which can be set
    to 'yes', 'no', 'ask', or 'confirm', and defaults to 'no'.
    When enabled, a private key that is used during
    authentication will be added to ssh-agent if it is running
    (with confirmation enabled if set to 'confirm').
  * sshd(8): add a new authorized_keys option "restrict" that
    includes all current and future key restrictions
    (no-*-forwarding, etc.).  Also add permissive versions of the
    existing restrictions, e.g.  "no-pty" -&gt; "pty". This
    simplifies the task of setting up restricted keys and ensures
    they are maximally-restricted, regardless of any permissions
    we might implement in the future.
  * ssh(1): add ssh_config CertificateFile option to explicitly
    list certificates. bz#2436
  * ssh-keygen(1): allow ssh-keygen to change the key comment for
    all supported formats.
  * ssh-keygen(1): allow fingerprinting from standard input, e.g.
    "ssh-keygen -lf -"
  * ssh-keygen(1): allow fingerprinting multiple public keys in a
    file, e.g. "ssh-keygen -lf ~/.ssh/authorized_keys" bz#1319
  * sshd(8): support "none" as an argument for sshd_config
    Foreground and ChrootDirectory. Useful inside Match blocks to
    override a global default. bz#2486
  * ssh-keygen(1): support multiple certificates (one per line)
    and reading from standard input (using "-f -") for
    "ssh-keygen -L"
  * ssh-keyscan(1): add "ssh-keyscan -c ..." flag to allow
    fetching certificates instead of plain keys.
  * ssh(1): better handle anchored FQDNs (e.g. 'cvs.openbsd.org')
    in hostname canonicalisation - treat them as already
    canonical and remove the trailing '.' before matching
    ssh_config.
  Bugfixes:
  * sftp(1): existing destination directories should not
    terminate recursive uploads (regression in openssh 6.8)
  * ssh(1), sshd(8): correctly send back SSH2_MSG_UNIMPLEMENTED
    replies to unexpected messages during key exchange.
  * ssh(1): refuse attempts to set ConnectionAttempts=0, which
    does not make sense and would cause ssh to print an
    uninitialised stack variable.
  * ssh(1): fix errors when attempting to connect to scoped IPv6
    addresses with hostname canonicalisation enabled.
  * sshd_config(5): list a couple more options usable in Match
    blocks.
  * sshd(8): fix "PubkeyAcceptedKeyTypes +..." inside a Match
    block.
  * ssh(1): expand tilde characters in filenames passed to -i
    options before checking whether or not the identity file
    exists. Avoids confusion for cases where shell doesn't expand
    (e.g. "-i ~/file" vs. "-i~/file").
  * ssh(1): do not prepend "exec" to the shell command run by
    "Match exec" in a config file, which could cause some
    commands to fail in certain environments.
  * ssh-keyscan(1): fix output for multiple hosts/addrs on one
    line when host hashing or a non standard port is in use
  * sshd(8): skip "Could not chdir to home directory" message
    when ChrootDirectory is active.
  * ssh(1): include PubkeyAcceptedKeyTypes in ssh -G config dump.
  * sshd(8): avoid changing TunnelForwarding device flags if they
    are already what is needed; makes it possible to use tun/tap
    networking as non-root user if device permissions and
    interface flags are pre-established
  * ssh(1), sshd(8): RekeyLimits could be exceeded by one packet.
  * ssh(1): fix multiplexing master failure to notice client
    exit.
  * ssh(1), ssh-agent(1): avoid fatal() for PKCS11 tokens that
    present empty key IDs.
  * sshd(8): avoid printf of NULL argument.
  * ssh(1), sshd(8): allow RekeyLimits larger than 4GB.
  * ssh-keygen(1): sshd(8): fix several bugs in (unused) KRL
    signature support.
  * ssh(1), sshd(8): fix connections with peers that use the key
    exchange guess feature of the protocol.
  * sshd(8): include remote port number in log messages.
  * ssh(1): don't try to load SSHv1 private key when compiled
    without SSHv1 support.
  * ssh-agent(1), ssh(1): fix incorrect error messages during key
    loading and signing errors.
  * ssh-keygen(1): don't leave empty temporary files when
    performing known_hosts file edits when known_hosts doesn't
    exist.
  * sshd(8): correct packet format for tcpip-forward replies for
    requests that don't allocate a port
  * ssh(1), sshd(8): fix possible hang on closed output.
  * ssh(1): expand %i in ControlPath to UID.
  * ssh(1), sshd(8): fix return type of openssh_RSA_verify.
  * ssh(1), sshd(8): fix some option parsing memory leaks.
  * ssh(1): add a some debug output before DNS resolution; it's a
    place where ssh could previously silently stall in cases of
    unresponsive DNS servers.
  * ssh(1): remove spurious newline in visual hostkey.
  * ssh(1): fix printing (ssh -G ...) of HostKeyAlgorithms=+...
  * ssh(1): fix expansion of HostkeyAlgorithms=+...
  Documentation:
  * ssh_config(5), sshd_config(5): update default algorithm lists
    to match current reality.
  * ssh(1): mention -Q key-plain and -Q key-cert query options.
  * sshd_config(8): more clearly describe what
    AuthorizedKeysFile=none does.
  * ssh_config(5): better document ExitOnForwardFailure.
  * sshd(5): mention internal DH-GEX fallback groups in manual.
  * sshd_config(5): better description for MaxSessions option.
  Portability:
  * sshd(8): fix multiple authentication using S/Key.
- OpenSSH 7.2p2:
  Security:
  * sshd(8): sanitise X11 authentication credentials to avoid
    xauth command injection when X11Forwarding is enabled.
- (removing patches from previous version:
  openssh-6.6p1-X11-forwarding.patch
  openssh-6.6p1-X_forward_with_disabled_ipv6.patch
  openssh-6.6p1-audit1-remove_duplicit_audit.patch
  openssh-6.6p1-audit2-better_audit_of_user_actions.patch
  openssh-6.6p1-audit3-key_auth_usage-fips.patch
  openssh-6.6p1-audit3-key_auth_usage.patch
  openssh-6.6p1-audit4-kex_results-fips.patch
  openssh-6.6p1-audit4-kex_results.patch
  openssh-6.6p1-audit5-session_key_destruction.patch
  openssh-6.6p1-audit6-server_key_destruction.patch
  openssh-6.6p1-audit7-libaudit_compat.patch
  openssh-6.6p1-audit8-libaudit_dns_timeouts.patch
  openssh-6.6p1-blocksigalrm.patch
  openssh-6.6p1-curve25519-6.6.1p1.patch
  openssh-6.6p1-default-protocol.patch
  openssh-6.6p1-disable-openssl-abi-check.patch
  openssh-6.6p1-disable_roaming.patch
  openssh-6.6p1-eal3.patch
  openssh-6.6p1-fingerprint_hash.patch
  openssh-6.6p1-fips-checks.patch
  openssh-6.6p1-fips.patch
  openssh-6.6p1-gssapi_key_exchange.patch
  openssh-6.6p1-gssapimitm.patch
  openssh-6.6p1-host_ident.patch
  openssh-6.6p1-key-converter.patch
  openssh-6.6p1-lastlog.patch
  openssh-6.6p1-ldap.patch
  openssh-6.6p1-login_options.patch
  openssh-6.6p1-no_fork-no_pid_file.patch
  openssh-6.6p1-pam-check-locks.patch
  openssh-6.6p1-pam-fix2.patch
  openssh-6.6p1-pam-fix3.patch
  openssh-6.6p1-pts.patch
  openssh-6.6p1-saveargv-fix.patch
  openssh-6.6p1-seccomp_getuid.patch
  openssh-6.6p1-seccomp_stat.patch
  openssh-6.6p1-seed-prng.patch
  openssh-6.6p1-send_locale.patch
  openssh-6.6p1-sftp_force_permissions.patch
  openssh-6.6p1-sftp_homechroot.patch
  openssh-6.6p1-xauth.patch
  openssh-6.6p1-xauthlocalhostname.patch)</changelog>
<changelog author="pcerny@suse.com" date="1464609600">- enable trusted X11 forwarding by default
  [openssh-7.2p2-X11_trusted_forwarding.patch]
- set UID for lastlog properly
  [openssh-7.2p2-lastlog.patch]
- enable use of PAM by default
  [openssh-7.2p2-enable_PAM_by_default.patch]
- copy command line arguments properly
  [openssh-7.2p2-saveargv-fix.patch]
- do not use pthreads in PAM code
  [openssh-7.2p2-dont_use_pthreads_in_PAM.patch]
- fix paths in documentation
  [openssh-7.2p2-eal3.patch]
- prevent race consitions triggered by SIGALRM
  [openssh-7.2p2-blocksigalrm.patch]
- do send and accept locale environment variables by default
  [openssh-7.2p2-send_locale.patch]
- handle hostnames changes during X forwarding
  [openssh-7.2p2-hostname_changes_when_forwarding_X.patch]
- try to remove xauth cookies on exit
  [openssh-7.2p2-remove_xauth_cookies_on_exit.patch]
- properly format pts names for ?tmp? log files
  [openssh-7.2p2-pts_names_formatting.patch]
- check locked accounts when using PAM
  [openssh-7.2p2-pam_check_locks.patch]
- chenge default PermitRootLogin to 'yes' to prevent unwanted
  surprises on updates from older versions.
  See README.SUSE for details
  [openssh-7.2p2-allow_root_password_login.patch]
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [openssh-7.2p2-disable_short_DH_parameters.patch]
- Add getuid() and stat() syscalls to the seccomp filter
  (bsc#912436)
  [openssh-7.2p2-seccomp_getuid.patch,
  openssh-7.2p2-seccomp_stat.patch]</changelog>
<changelog author="pcerny@suse.com" date="1465300800">- enable support for SSHv1 protocol and discourage its usage
  (bsc#983307)
- enable DSA by default for backward compatibility and discourage
  its usage (bsc#983784)</changelog>
<changelog author="pcerny@suse.com" date="1474027200">- FIPS compatibility (no selfchecks, only crypto restrictions)
  [openssh-7.2p2-fips.patch]
- PRNG re-seeding
  [openssh-7.2p2-seed-prng.patch]
- preliminary version of GSSAPI KEX
  [openssh-7.2p2-gssapi_key_exchange.patch]</changelog>
<changelog author="pcerny@suse.com" date="1475150400">- remaining patches that were still missing
  since the update to 7.2p2 (FATE#319675):
- allow X forwarding over IPv4 when IPv6 sockets is not available
  [openssh-7.2p2-X_forward_with_disabled_ipv6.patch]
- do not write PID file when not daemonizing
  [openssh-7.2p2-no_fork-no_pid_file.patch]
- use correct options when invoking login
  [openssh-7.2p2-login_options.patch]
- helper application for retrieving users' public keys from
  an LDAP server
  [openssh-7.2p2-ldap.patch]
- allow forcing permissions over sftp
  [openssh-7.2p2-sftp_force_permissions.patch]
- do not perform run-time checks for OpenSSL API/ABI change
  [openssh-7.2p2-disable_openssl_abi_check.patch]
- suggest commands for cleaning known hosts file
  [openssh-7.2p2-host_ident.patch]
- sftp home chroot patch
  [openssh-7.2p2-sftp_homechroot.patch]
- ssh sessions auditing
  [openssh-7.2p2-audit.patch]
- enable seccomp sandbox on additional architectures
  [openssh-7.2p2-additional_seccomp_archs.patch]
- fix forwarding with IPv6 addresses in DISPLAY (bnc#847710)
  [openssh-7.2p2-IPv6_X_forwarding.patch]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [openssh-7.2p2-ignore_PAM_with_UseLogin.patch]
- limit accepted password length (prevents possible DoS)
  (bsc#992533, CVE-2016-6515)
  [openssh-7.2p2-limit_password_length.patch]
- Prevent user enumeration through the timing of password
  processing (bsc#989363, CVE-2016-6210)
  [openssh-7.2p2-prevent_timing_user_enumeration.patch]
- Add auditing for PRNG re-seeding
  [openssh-7.2p2-audit_seed_prng.patch]</changelog>
<changelog author="pcerny@suse.com" date="1476360000">- enable geteuid{,32} syscalls on mainframes, since it may be
  called from libica/ibmica on machines with hardware crypto
  accelerator (bsc#1004258)
  [openssh-7.2p2-seccomp_geteuid.patch]
- fix regression of (bsc#823710)
  [openssh-7.2p2-audit_fixes.patch]
- add slogin (removed upstreams)
  [openssh-7.2p2-keep_slogin.patch]</changelog>
<changelog author="pcerny@suse.com" date="1478606400">- prevent resource depletion during key exchange
  (bsc#1005480, CVE-2016-8858)
  [openssh-7.2p2-kex_resource_depletion.patch]
- fix suggested command for removing conflicting server keys from
  the known_hosts file (bsc#1006221)</changelog>
<changelog author="pcerny@suse.com" date="1483617600">- Properly verify CIDR masks in configuration
  (bsc#1005893)
  [openssh-7.2p2-verify_CIDR_address_ranges.patch]
- Remove pre-auth compression support from the server to prevent
  possible cryptographic attacks.
  (CVE-2016-10012, bsc#1016370)
  [openssh-7.2p2-disable_preauth_compression.patch]
- limit directories for loading PKCS11 modules
  (CVE-2016-10009, bsc#1016366)
  [openssh-7.2p2-restrict_pkcs11-modules.patch]
- Prevent possible leaks of host private keys to low-privilege
  process handling authentication
  (CVE-2016-10011, bsc#1016369)
  [openssh-7.2p2-prevent_private_key_leakage.patch]
- Do not allow unix socket forwarding when running without
  privilege separation
  (CVE-2016-10010, bsc#1016368)
  [openssh-7.2p2-secure_unix_sockets_forwarding.patch]</changelog>
<changelog author="pcerny@suse.com" date="1485259200">- Adding missing pieces for user matching (bsc#1021626)</changelog>
<changelog author="pcerny@suse.com" date="1492776000">- enable case-insensitive hostname matching (bsc#1017099)
  [openssh-7.2p2-ssh_case_insensitive_host_matching.patch]
- re-add CAVS tests
  [openssh-7.2p2-cavstest-ctr.patch]
  [openssh-7.2p2-cavstest-kdf.patch]</changelog>
<changelog author="pcerny@suse.com" date="1494849600">- Fix preauth seccomp separation on mainframes (bsc#1016709)
  [openssh-7.2p2-s390_hw_crypto_syscalls.patch]
  [openssh-7.2p2-s390_OpenSSL-ibmpkcs11_syscalls.patch]</changelog>
<changelog author="pcerny@suse.com" date="1496232000">- sshd.service: Set TasksMax=infinity, as there should be
  no limit on the amount of tasks sshd can run.</changelog>
<changelog author="pcerny@suse.com" date="1498651200">- new switch for printing diagnostic messages in sftp client's
  batch mode (bsc#1023275)
  [openssh-7.2p2-sftp_print_diagnostic_messages.patch]
- Better fix for core dumps from auditing code when trying to bind
  to an unavailable port (bsc#1024251)</changelog>
<changelog author="pcerny@suse.com" date="1506427200">- Test configuration before running daemon to rpevent looping
  resulting in service shutdown (bsc#1048367)</changelog>
<changelog author="pcerny@suse.com" date="1511352000">- FIPS startup selfchecks (bsc#1068310)
  [openssh-7.2p2-fips_checks.patch]
- Silent complaints about unsupported key exchange methods
  (bsc#1006166)
  [openssh-7.2p2-fips_fixes.patch]
- Stricter checking of operations in read-only mode in sftp server
  (CVE-2017-15906, bsc#1065000)
  [openssh-7.2p2-stricter_readonly_sftp.patch]
- Refine handling of sockets for X11 forwarding to remove
  reintroduced CVE-2008-1483 (bsc#1069509)</changelog>

</package>
<package pkgid="18b19067f3a4581e0beb1603fa0a7ab284508e6b00e2a23d5d8b77d6050fb324" name="openssh-fips" arch="x86_64">
    <version epoch="0" ver="7.2p2" rel="15.1"/>

<changelog author="pcerny@suse.com" date="1431604800">- use %restart_on_update in the trigger script</changelog>
<changelog author="pcerny@suse.com" date="1438344000">- Maintenance update
  * better timeouting of X11 forwards (CVE-2015-5352/bsc#936695)
    [-X11_forwarding_timeout] and hardening of ssh-agent(1)
    locking (bsc#936695) [-agent_locking_hardening]
  * removing and disabling short DH parameters (bsc#932483)
    [-disable_DH_under_1536b, -remove_moduli_under_1536b]
  * disable accdess to procfs from sftp (bsc#903649)
    [-sftp_procfs_restrictions]
  * Allow each keyboard authentication method to be used only
    once per login (CVE-2015-5600/bsc#938746)
    [-use_each_kbd_method_just_once]
  * Don't resend username to PAM, it can be misused for privilege
    escalation (CVE-2015-6563/bsc#943010)
    [-pam_privsep_dont_resend_username]
  * Prevent possible use-after-free in PAM authentication monitor
    (CVE-2015-6564/bsc#943006)
    [-pam_privsep_auth_uaf]</changelog>
<changelog author="jsegitz@novell.com" date="1452686400">- CVE-2016-0777, bsc#961642, CVE-2016-0778, bsc#961645
  Added CVE-2016-077-7_8.patch to disable the roaming code to prevent
  information leak and buffer overflow</changelog>
<changelog author="pcerny@suse.com" date="1457438400">- fix minor problems (bsc#945493)
- fix postun script of main package (bsc#945484)
- fix crashes when /proc is not available (bsc#947458)
- rename and comment the roaming patch
  (CVE-2016-077-7_8 to -disable_roaming)</changelog>
<changelog author="pcerny@suse.com" date="1460030400">- Correctly parse GSSAPI KEX algorithms (bsc#961368)
- Sanitise input for xauth(1) (bsc#970632, CVE-2016-3115)
  [-sanitise_xauth_input]
- prevent X11 SECURITY circumvention when forwarding X11
  connections (bsc#962313, CVE-2016-1908)
  [-untrusted_X_forwarding]
- more verbose FIPS mode/CC related documentation in README.FIPS
  (bsc#965576, bsc#960414)
- fix PRNG re-seeding (bsc#960414, bsc#729190)
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [-disable_DH_under_1536b -&gt; -disable_short_DH_parameters]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [-ignore_PAM_with_UseLogin]</changelog>
<changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2 (FATE#319675)
  upstream package without any SUSE patches
  Distilled upstream log:
- OpenSSH 6.7
  Potentially-incompatible changes:
  * sshd(8): The default set of ciphers and MACs has been
    altered to remove unsafe algorithms. In particular, CBC
    ciphers and arcfour* are disabled by default.
    The full set of algorithms remains available if configured
    explicitly via the Ciphers and MACs sshd_config options.
  * sshd(8): Support for tcpwrappers/libwrap has been removed.
  * OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of
    connections using the curve25519-sha256@libssh.org KEX
    exchange method to fail when connecting with something that
    implements the specification correctly. OpenSSH 6.7 disables
    this KEX method when speaking to one of the affected
    versions.
  New Features:
  * ssh(1), sshd(8): Add support for Unix domain socket
    forwarding. A remote TCP port may be forwarded to a local
    Unix domain socket and vice versa or both ends may be a Unix
    domain socket.
  * ssh(1), ssh-keygen(1): Add support for SSHFP DNS records for
    ED25519 key types.
  * sftp(1): Allow resumption of interrupted uploads.
  * ssh(1): When rekeying, skip file/DNS lookups of the hostkey
    if it is the same as the one sent during initial key exchange
  * sshd(8): Allow explicit ::1 and 127.0.0.1 forwarding bind
    addresses when GatewayPorts=no; allows client to choose
    address family
  * sshd(8): Add a sshd_config PermitUserRC option to control
    whether ~/.ssh/rc is executed, mirroring the no-user-rc
    authorized_keys option
  * ssh(1): Add a %C escape sequence for LocalCommand and
    ControlPath that expands to a unique identifer based on a
    hash of the tuple of (local host, remote user, hostname,
    port). Helps avoid exceeding miserly pathname limits for Unix
    domain sockets in multiplexing control paths
  * sshd(8): Make the "Too many authentication failures" message
    include the user, source address, port and protocol in a
    format similar to the authentication success / failure
    messages
  Bugfixes:
  * sshd(8): Fix remote forwarding with the same listen port but
    different listen address.
  * ssh(1): Fix inverted test that caused PKCS#11 keys that were
    explicitly listed in ssh_config or on the commandline not to
    be preferred.
  * ssh-keygen(1): Fix bug in KRL generation: multiple
    consecutive revoked certificate serial number ranges could be
    serialised to an invalid format. Readers of a broken KRL
    caused by this bug will fail closed, so no
    should-have-been-revoked key will be accepted.
  * ssh(1): Reflect stdio-forward ("ssh -W host:port ...")
    failures in exit status. Previously we were always returning 0
  * ssh(1), ssh-keygen(1): Make Ed25519 keys' title fit properly
    in the randomart border
  * ssh-agent(1): Only cleanup agent socket in the main agent
    process and not in any subprocesses it may have started (e.g.
    forked askpass). Fixes agent sockets being zapped when
    askpass processes fatal()
  * ssh-add(1): Make stdout line-buffered; saves partial output
    getting lost when ssh-add fatal()s part-way through (e.g.
    when listing keys from an agent that supports key types that
    ssh-add doesn't)
  * ssh-keygen(1): When hashing or removing hosts, don't choke on
    @revoked markers and don't remove @cert-authority markers
  * ssh(1): Don't fatal when hostname canonicalisation fails and
    a ProxyCommand is in use; continue and allow the ProxyCommand
    to connect anyway (e.g. to a host with a name outside the DNS
    behind a bastion)
  * scp(1): When copying local-&gt;remote fails during read, don't
    send uninitialised heap to the remote end.
  * sftp(1): Fix fatal "el_insertstr failed" errors when
    tab-completing filenames with  a single quote char somewhere
    in the string
  * ssh-keyscan(1): Scan for Ed25519 keys by default.
  * ssh(1): When using VerifyHostKeyDNS with a DNSSEC resolver,
    down-convert any certificate keys to plain keys and attempt
    SSHFP resolution.  Prevents a server from skipping SSHFP
    lookup and forcing a new-hostkey dialog by offering only
    certificate keys.
- OpenSSH 6.8
  Potentially-incompatible changes:
  * sshd(8): UseDNS now defaults to 'no'. Configurations that
    match against the client host name (via sshd_config or
    authorized_keys) may need to re-enable it or convert to
    matching against addresses.
  New Features:
  * Add FingerprintHash option to ssh(1) and sshd(8), and
    equivalent command-line flags to the other tools to control
    algorithm used for key fingerprints. The default changes from
    MD5 to SHA256 and format from hex to base64.
    Fingerprints now have the hash algorithm prepended. An
    example of the new format:
    SHA256:mVPwvezndPv/ARoIadVY98vAC0g+P/5633yTC4d/wXE Please
    note that visual host keys will also be different.
  * ssh(1), sshd(8): Experimental host key rotation support. Add
    a protocol extension for a server to inform a client of all
    its available host keys after authentication has completed.
    The client may record the keys in known_hosts, allowing it to
    upgrade to better host key algorithms and a server to
    gracefully rotate its keys.
    The client side of this is controlled by a UpdateHostkeys
    config option (default off).
  * ssh(1): Add a ssh_config HostbasedKeyType option to control
    which host public key types are tried during host-based
    authentication.
  * ssh(1), sshd(8): fix connection-killing host key mismatch
    errors when sshd offers multiple ECDSA keys of different
    lengths.
  * ssh(1): when host name canonicalisation is enabled, try to
    parse host names as addresses before looking them up for
    canonicalisation. fixes bz#2074 and avoiding needless DNS
    lookups in some cases.
  * ssh-keygen(1), sshd(8): Key Revocation Lists (KRLs) no longer
    require OpenSSH to be compiled with OpenSSL support.
  * ssh(1), ssh-keysign(8): Make ed25519 keys work for host based
    authentication.
  * sshd(8): SSH protocol v.1 workaround for the Meyer, et al,
    Bleichenbacher Side Channel Attack. Fake up a bignum key
    before RSA decryption.
  * sshd(8): Remember which public keys have been used for
    authentication and refuse to accept previously-used keys.
    This allows AuthenticationMethods=publickey,publickey to
    require that users authenticate using two _different_ public
    keys.
  * sshd(8): add sshd_config HostbasedAcceptedKeyTypes and
    PubkeyAcceptedKeyTypes options to allow sshd to control what
    public key types will be accepted. Currently defaults to all.
  * sshd(8): Don't count partial authentication success as a
    failure against MaxAuthTries.
  * ssh(1): Add RevokedHostKeys option for the client to allow
    text-file or KRL-based revocation of host keys.
  * ssh-keygen(1), sshd(8): Permit KRLs that revoke certificates
    by serial number or key ID without scoping to a particular
    CA.
  * ssh(1): Add a "Match canonical" criteria that allows
    ssh_config Match blocks to trigger only in the second config
    pass.
  * ssh(1): Add a -G option to ssh that causes it to parse its
    configuration and dump the result to stdout, similar to
    "sshd -T".
  * ssh(1): Allow Match criteria to be negated.
    E.g. "Match !host".
  * The regression test suite has been extended to cover more
    OpenSSH features. The unit tests have been expanded and now
    cover key exchange.
  Bugfixes:
  * ssh-keyscan(1): ssh-keyscan has been made much more robust
    again servers that hang or violate the SSH protocol.
  * ssh(1), ssh-keygen(1): Fix regression: Key path names were
    being lost as comment fields.
  * ssh(1): Allow ssh_config Port options set in the second
    config parse phase to be applied (they were being ignored).
  * ssh(1): Tweak config re-parsing with host canonicalisation - make
    the second pass through the config files always run when host name
    canonicalisation is enabled (and not whenever the host name
    changes)
  * ssh(1): Fix passing of wildcard forward bind addresses when
    connection multiplexing is in use
  * ssh-keygen(1): Fix broken private key conversion from
    non-OpenSSH formats.
  * ssh-keygen(1): Fix KRL generation bug when multiple CAs are
    in use.
  * Various fixes to manual pages
- OpenSSH 6.9
  Security:
  * ssh(1): when forwarding X11 connections with
    ForwardX11Trusted=no, connections made after
    ForwardX11Timeout expired could be permitted and no longer
    subject to XSECURITY restrictions because of an ineffective
    timeout check in ssh(1) coupled with "fail open" behaviour in
    the X11 server when clients attempted connections with
    expired credentials. This problem was reported by Jann Horn.
  * ssh-agent(1): fix weakness of agent locking (ssh-add -x) to
    password guessing by implementing an increasing failure
    delay, storing a salted hash of the password rather than the
    password itself and using a timing-safe comparison function
    for verifying unlock attempts. This problem was reported by
    Ryan Castellucci.
  New Features:
  * ssh(1), sshd(8): promote chacha20-poly1305@openssh.com to be
    the default cipher
  * sshd(8): support admin-specified arguments to
    AuthorizedKeysCommand
  * sshd(8): add AuthorizedPrincipalsCommand that allows
    retrieving authorized principals information from a
    subprocess rather than a file.
  * ssh(1), ssh-add(1): support PKCS#11 devices with external PIN
    entry devices
  * sshd(8): allow GSSAPI host credential check to be relaxed for
    multihomed hosts via GSSAPIStrictAcceptorCheck option
  * ssh-keygen(1): support "ssh-keygen -lF hostname" to search
    known_hosts and print key hashes rather than full keys.
  * ssh-agent(1): add -D flag to leave ssh-agent in foreground
    without enabling debug mode
  Bugfixes:
  * ssh(1), sshd(8): deprecate legacy
    SSH2_MSG_KEX_DH_GEX_REQUEST_OLD message and do not try to use
    it against some 3rd-party SSH implementations that use it
    (older PuTTY, WinSCP).
  * Many fixes for problems caused by compile-time deactivation
    of SSH1 support (including bz#2369)
  * ssh(1), sshd(8): cap DH-GEX group size at 4Kbits for Cisco
    implementations as some would fail when attempting to use
    group sizes &gt;4K
  * ssh(1): fix out-of-bound read in EscapeChar configuration
    option parsing
  * sshd(8): fix application of PermitTunnel, LoginGraceTime,
    AuthenticationMethods and StreamLocalBindMask options in
    Match blocks
  * ssh(1), sshd(8): improve disconnection message on TCP reset;
    bz#2257
  * ssh(1): remove failed remote forwards established by
    muliplexing from the list of active forwards
  * sshd(8): make parsing of authorized_keys "environment="
    options independent of PermitUserEnv being enabled
  * sshd(8): fix post-auth crash with permitopen=none
  * ssh(1), ssh-add(1), ssh-keygen(1): allow new-format private
    keys to be encrypted with AEAD ciphers
  * ssh(1): allow ListenAddress, Port and AddressFamily
    configuration options to appear in any order
  * sshd(8): check for and reject missing arguments for
    VersionAddendum and ForceCommand
  * ssh(1), sshd(8): don't treat unknown certificate extensions
    as fatal
  * ssh-keygen(1): make stdout and stderr output consistent
  * ssh(1): mention missing DISPLAY environment in debug log when
    X11 forwarding requested
  * sshd(8): correctly record login when UseLogin is set
  * sshd(8): Add some missing options to sshd -T output and fix
    output of VersionAddendum and HostCertificate. bz#2346
  * Document and improve consistency of options that accept a
    "none" argument" TrustedUserCAKeys, RevokedKeys (bz#2382),
    AuthorizedPrincipalsFile (bz#2288)
  * ssh(1): include remote username in debug output
  * sshd(8): avoid compatibility problem with some versions of
    Tera Term, which would crash when they received the hostkeys
    notification message (hostkeys-00@openssh.com)
  * sshd(8): mention ssh-keygen -E as useful when comparing
    legacy MD5 host key fingerprints
  * ssh(1): clarify pseudo-terminal request behaviour and use
    make manual language consistent
  * ssh(1): document that the TERM environment variable is not
    subject to SendEnv and AcceptEnv
- OpenSSH 7.0:
  This focuses primarily on deprecating weak, legacy and/or
  unsafe cryptography.
  Security:
  * sshd(8): OpenSSH 6.8 and 6.9 incorrectly set TTYs to be
    world- writable. Local attackers may be able to write
    arbitrary messages to logged-in users, including terminal
    escape sequences.  Reported by Nikolay Edigaryev.
  * sshd(8): Portable OpenSSH only: Fixed a privilege separation
    weakness related to PAM support. Attackers who could
    successfully compromise the pre-authentication process for
    remote code execution and who had valid credentials on the
    host could impersonate other users.  Reported by Moritz
    Jodeit.
  * sshd(8): Portable OpenSSH only: Fixed a use-after-free bug
    related to PAM support that was reachable by attackers who
    could compromise the pre-authentication process for remote
    code execution. Also reported by Moritz Jodeit.
  * sshd(8): fix circumvention of MaxAuthTries using keyboard-
    interactive authentication. By specifying a long, repeating
    keyboard-interactive "devices" string, an attacker could
    request the same authentication method be tried thousands of
    times in a single pass. The LoginGraceTime timeout in sshd(8)
    and any authentication failure delays implemented by the
    authentication mechanism itself were still applied. Found by
    Kingcope.
  Potentially-incompatible Changes:
  * Support for the legacy SSH version 1 protocol is disabled by
    default at compile time.
  * Support for the 1024-bit diffie-hellman-group1-sha1 key
    exchange is disabled by default at run-time. It may be
    re-enabled using the instructions in README.legacy or
    http://www.openssh.com/legacy.html
  * Support for ssh-dss, ssh-dss-cert-* host and user keys is
    disabled by default at run-time. These may be re-enabled
    using the instructions at http://www.openssh.com/legacy.html
  * Support for the legacy v00 cert format has been removed.
  * The default for the sshd_config(5) PermitRootLogin option has
    changed from "yes" to "prohibit-password".
  * PermitRootLogin=without-password/prohibit-password now bans
    all interactive authentication methods, allowing only
    public-key, hostbased and GSSAPI authentication (previously
    it permitted keyboard-interactive and password-less
    authentication if those were enabled).
  New Features:
  * ssh_config(5): add PubkeyAcceptedKeyTypes option to control
    which public key types are available for user authentication.
  * sshd_config(5): add HostKeyAlgorithms option to control which
    public key types are offered for host authentications.
  * ssh(1), sshd(8): extend Ciphers, MACs, KexAlgorithms,
    HostKeyAlgorithms, PubkeyAcceptedKeyTypes and
    HostbasedKeyTypes options to allow appending to the default
    set of algorithms instead of replacing it. Options may now be
    prefixed with a '+' to append to the default, e.g.
    "HostKeyAlgorithms=+ssh-dss".
  * sshd_config(5): PermitRootLogin now accepts an argument of
    'prohibit-password' as a less-ambiguous synonym of 'without-
    password'.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for Cisco and
    more PuTTY versions.
  * Fix some omissions and errors in the PROTOCOL and
    PROTOCOL.mux documentation relating to Unix domain socket
    forwarding
  * ssh(1): Improve the ssh(1) manual page to include a better
    description of Unix domain socket forwarding
  * ssh(1), ssh-agent(1): skip uninitialised PKCS#11 slots,
    fixing failures to load keys when they are present.
  * ssh(1), ssh-agent(1): do not ignore PKCS#11 hosted keys that
    wth empty CKA_ID
  * sshd(8): clarify documentation for UseDNS option
- OpenSSH 7.1:
  Security:
  * sshd(8): OpenSSH 7.0 contained a logic error in
    PermitRootLogin= prohibit-password/without-password that
    could, depending on compile-time configuration, permit
    password authentication to root while preventing other forms
    of authentication. This problem was reported by Mantas
    Mikulenas.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for FuTTY
  * ssh(1), sshd(8): refine compatability workarounds for WinSCP
  * Fix a number of memory faults (double-free, free of
    uninitialised memory, etc) in ssh(1) and ssh-keygen(1).
    Reported by Mateusz Kocielski.
- OpenSSH 7.1p2:
  * SECURITY: ssh(1): The OpenSSH client code between 5.4 and 7.1
    contains experimential support for resuming SSH-connections
    (roaming).
    The matching server code has never been shipped, but the
    client code was enabled by default and could be tricked by a
    malicious server into leaking client memory to the server,
    including private client user keys.
    The authentication of the server host key prevents
    exploitation by a man-in-the-middle, so this information leak
    is restricted to connections to malicious or compromised
    servers.
    MITIGATION: For OpenSSH &gt;= 5.4 the vulnerable code in the
    client can be completely disabled by adding 'UseRoaming no'
    to the gobal ssh_config(5) file, or to user configuration in
    ~/.ssh/config, or by passing -oUseRoaming=no on the command
    line.
    PATCH: See below for a patch to disable this feature
    (Disabling Roaming in the Source Code).
    This problem was reported by the Qualys Security Advisory
    team.
  * SECURITY: Eliminate the fallback from untrusted
    X11-forwarding to trusted forwarding for cases when the X
    server disables the SECURITY extension. Reported by Thomas
    Hoger.
  * SECURITY: Fix an out of-bound read access in the packet
    handling code. Reported by Ben Hawkes.
  * PROTOCOL: Correctly interpret the 'first_kex_follows' option
    during the intial key exchange. Reported by Matt Johnston.
  * Further use of explicit_bzero has been added in various
    buffer handling code paths to guard against compilers
    aggressively doing dead-store removal.
  Potentially-incompatible changes:
  * This release disables a number of legacy cryptographic
    algorithms by default in ssh:
    + Several ciphers blowfish-cbc, cast128-cbc, all arcfour
    variants and the rijndael-cbc aliases for AES.
    + MD5-based and truncated HMAC algorithms.
- OpenSSH 7.2:
  Security:
  * ssh(1), sshd(8): remove unfinished and unused roaming code
    (was already forcibly disabled in OpenSSH 7.1p2).
  * ssh(1): eliminate fallback from untrusted X11 forwarding to
    trusted forwarding when the X server disables the SECURITY
    extension.
  * ssh(1), sshd(8): increase the minimum modulus size supported
    for diffie-hellman-group-exchange to 2048 bits.
  * sshd(8): pre-auth sandboxing is now enabled by default
    (previous releases enabled it for new installations via
    sshd_config).
  New Features:
  * all: add support for RSA signatures using SHA-256/512 hash
    algorithms based on draft-rsa-dsa-sha2-256-03.txt and
    draft-ssh-ext-info-04.txt.
  * ssh(1): Add an AddKeysToAgent client option which can be set
    to 'yes', 'no', 'ask', or 'confirm', and defaults to 'no'.
    When enabled, a private key that is used during
    authentication will be added to ssh-agent if it is running
    (with confirmation enabled if set to 'confirm').
  * sshd(8): add a new authorized_keys option "restrict" that
    includes all current and future key restrictions
    (no-*-forwarding, etc.).  Also add permissive versions of the
    existing restrictions, e.g.  "no-pty" -&gt; "pty". This
    simplifies the task of setting up restricted keys and ensures
    they are maximally-restricted, regardless of any permissions
    we might implement in the future.
  * ssh(1): add ssh_config CertificateFile option to explicitly
    list certificates. bz#2436
  * ssh-keygen(1): allow ssh-keygen to change the key comment for
    all supported formats.
  * ssh-keygen(1): allow fingerprinting from standard input, e.g.
    "ssh-keygen -lf -"
  * ssh-keygen(1): allow fingerprinting multiple public keys in a
    file, e.g. "ssh-keygen -lf ~/.ssh/authorized_keys" bz#1319
  * sshd(8): support "none" as an argument for sshd_config
    Foreground and ChrootDirectory. Useful inside Match blocks to
    override a global default. bz#2486
  * ssh-keygen(1): support multiple certificates (one per line)
    and reading from standard input (using "-f -") for
    "ssh-keygen -L"
  * ssh-keyscan(1): add "ssh-keyscan -c ..." flag to allow
    fetching certificates instead of plain keys.
  * ssh(1): better handle anchored FQDNs (e.g. 'cvs.openbsd.org')
    in hostname canonicalisation - treat them as already
    canonical and remove the trailing '.' before matching
    ssh_config.
  Bugfixes:
  * sftp(1): existing destination directories should not
    terminate recursive uploads (regression in openssh 6.8)
  * ssh(1), sshd(8): correctly send back SSH2_MSG_UNIMPLEMENTED
    replies to unexpected messages during key exchange.
  * ssh(1): refuse attempts to set ConnectionAttempts=0, which
    does not make sense and would cause ssh to print an
    uninitialised stack variable.
  * ssh(1): fix errors when attempting to connect to scoped IPv6
    addresses with hostname canonicalisation enabled.
  * sshd_config(5): list a couple more options usable in Match
    blocks.
  * sshd(8): fix "PubkeyAcceptedKeyTypes +..." inside a Match
    block.
  * ssh(1): expand tilde characters in filenames passed to -i
    options before checking whether or not the identity file
    exists. Avoids confusion for cases where shell doesn't expand
    (e.g. "-i ~/file" vs. "-i~/file").
  * ssh(1): do not prepend "exec" to the shell command run by
    "Match exec" in a config file, which could cause some
    commands to fail in certain environments.
  * ssh-keyscan(1): fix output for multiple hosts/addrs on one
    line when host hashing or a non standard port is in use
  * sshd(8): skip "Could not chdir to home directory" message
    when ChrootDirectory is active.
  * ssh(1): include PubkeyAcceptedKeyTypes in ssh -G config dump.
  * sshd(8): avoid changing TunnelForwarding device flags if they
    are already what is needed; makes it possible to use tun/tap
    networking as non-root user if device permissions and
    interface flags are pre-established
  * ssh(1), sshd(8): RekeyLimits could be exceeded by one packet.
  * ssh(1): fix multiplexing master failure to notice client
    exit.
  * ssh(1), ssh-agent(1): avoid fatal() for PKCS11 tokens that
    present empty key IDs.
  * sshd(8): avoid printf of NULL argument.
  * ssh(1), sshd(8): allow RekeyLimits larger than 4GB.
  * ssh-keygen(1): sshd(8): fix several bugs in (unused) KRL
    signature support.
  * ssh(1), sshd(8): fix connections with peers that use the key
    exchange guess feature of the protocol.
  * sshd(8): include remote port number in log messages.
  * ssh(1): don't try to load SSHv1 private key when compiled
    without SSHv1 support.
  * ssh-agent(1), ssh(1): fix incorrect error messages during key
    loading and signing errors.
  * ssh-keygen(1): don't leave empty temporary files when
    performing known_hosts file edits when known_hosts doesn't
    exist.
  * sshd(8): correct packet format for tcpip-forward replies for
    requests that don't allocate a port
  * ssh(1), sshd(8): fix possible hang on closed output.
  * ssh(1): expand %i in ControlPath to UID.
  * ssh(1), sshd(8): fix return type of openssh_RSA_verify.
  * ssh(1), sshd(8): fix some option parsing memory leaks.
  * ssh(1): add a some debug output before DNS resolution; it's a
    place where ssh could previously silently stall in cases of
    unresponsive DNS servers.
  * ssh(1): remove spurious newline in visual hostkey.
  * ssh(1): fix printing (ssh -G ...) of HostKeyAlgorithms=+...
  * ssh(1): fix expansion of HostkeyAlgorithms=+...
  Documentation:
  * ssh_config(5), sshd_config(5): update default algorithm lists
    to match current reality.
  * ssh(1): mention -Q key-plain and -Q key-cert query options.
  * sshd_config(8): more clearly describe what
    AuthorizedKeysFile=none does.
  * ssh_config(5): better document ExitOnForwardFailure.
  * sshd(5): mention internal DH-GEX fallback groups in manual.
  * sshd_config(5): better description for MaxSessions option.
  Portability:
  * sshd(8): fix multiple authentication using S/Key.
- OpenSSH 7.2p2:
  Security:
  * sshd(8): sanitise X11 authentication credentials to avoid
    xauth command injection when X11Forwarding is enabled.
- (removing patches from previous version:
  openssh-6.6p1-X11-forwarding.patch
  openssh-6.6p1-X_forward_with_disabled_ipv6.patch
  openssh-6.6p1-audit1-remove_duplicit_audit.patch
  openssh-6.6p1-audit2-better_audit_of_user_actions.patch
  openssh-6.6p1-audit3-key_auth_usage-fips.patch
  openssh-6.6p1-audit3-key_auth_usage.patch
  openssh-6.6p1-audit4-kex_results-fips.patch
  openssh-6.6p1-audit4-kex_results.patch
  openssh-6.6p1-audit5-session_key_destruction.patch
  openssh-6.6p1-audit6-server_key_destruction.patch
  openssh-6.6p1-audit7-libaudit_compat.patch
  openssh-6.6p1-audit8-libaudit_dns_timeouts.patch
  openssh-6.6p1-blocksigalrm.patch
  openssh-6.6p1-curve25519-6.6.1p1.patch
  openssh-6.6p1-default-protocol.patch
  openssh-6.6p1-disable-openssl-abi-check.patch
  openssh-6.6p1-disable_roaming.patch
  openssh-6.6p1-eal3.patch
  openssh-6.6p1-fingerprint_hash.patch
  openssh-6.6p1-fips-checks.patch
  openssh-6.6p1-fips.patch
  openssh-6.6p1-gssapi_key_exchange.patch
  openssh-6.6p1-gssapimitm.patch
  openssh-6.6p1-host_ident.patch
  openssh-6.6p1-key-converter.patch
  openssh-6.6p1-lastlog.patch
  openssh-6.6p1-ldap.patch
  openssh-6.6p1-login_options.patch
  openssh-6.6p1-no_fork-no_pid_file.patch
  openssh-6.6p1-pam-check-locks.patch
  openssh-6.6p1-pam-fix2.patch
  openssh-6.6p1-pam-fix3.patch
  openssh-6.6p1-pts.patch
  openssh-6.6p1-saveargv-fix.patch
  openssh-6.6p1-seccomp_getuid.patch
  openssh-6.6p1-seccomp_stat.patch
  openssh-6.6p1-seed-prng.patch
  openssh-6.6p1-send_locale.patch
  openssh-6.6p1-sftp_force_permissions.patch
  openssh-6.6p1-sftp_homechroot.patch
  openssh-6.6p1-xauth.patch
  openssh-6.6p1-xauthlocalhostname.patch)</changelog>
<changelog author="pcerny@suse.com" date="1464609600">- enable trusted X11 forwarding by default
  [openssh-7.2p2-X11_trusted_forwarding.patch]
- set UID for lastlog properly
  [openssh-7.2p2-lastlog.patch]
- enable use of PAM by default
  [openssh-7.2p2-enable_PAM_by_default.patch]
- copy command line arguments properly
  [openssh-7.2p2-saveargv-fix.patch]
- do not use pthreads in PAM code
  [openssh-7.2p2-dont_use_pthreads_in_PAM.patch]
- fix paths in documentation
  [openssh-7.2p2-eal3.patch]
- prevent race consitions triggered by SIGALRM
  [openssh-7.2p2-blocksigalrm.patch]
- do send and accept locale environment variables by default
  [openssh-7.2p2-send_locale.patch]
- handle hostnames changes during X forwarding
  [openssh-7.2p2-hostname_changes_when_forwarding_X.patch]
- try to remove xauth cookies on exit
  [openssh-7.2p2-remove_xauth_cookies_on_exit.patch]
- properly format pts names for ?tmp? log files
  [openssh-7.2p2-pts_names_formatting.patch]
- check locked accounts when using PAM
  [openssh-7.2p2-pam_check_locks.patch]
- chenge default PermitRootLogin to 'yes' to prevent unwanted
  surprises on updates from older versions.
  See README.SUSE for details
  [openssh-7.2p2-allow_root_password_login.patch]
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [openssh-7.2p2-disable_short_DH_parameters.patch]
- Add getuid() and stat() syscalls to the seccomp filter
  (bsc#912436)
  [openssh-7.2p2-seccomp_getuid.patch,
  openssh-7.2p2-seccomp_stat.patch]</changelog>
<changelog author="pcerny@suse.com" date="1465300800">- enable support for SSHv1 protocol and discourage its usage
  (bsc#983307)
- enable DSA by default for backward compatibility and discourage
  its usage (bsc#983784)</changelog>
<changelog author="pcerny@suse.com" date="1474027200">- FIPS compatibility (no selfchecks, only crypto restrictions)
  [openssh-7.2p2-fips.patch]
- PRNG re-seeding
  [openssh-7.2p2-seed-prng.patch]
- preliminary version of GSSAPI KEX
  [openssh-7.2p2-gssapi_key_exchange.patch]</changelog>
<changelog author="pcerny@suse.com" date="1475150400">- remaining patches that were still missing
  since the update to 7.2p2 (FATE#319675):
- allow X forwarding over IPv4 when IPv6 sockets is not available
  [openssh-7.2p2-X_forward_with_disabled_ipv6.patch]
- do not write PID file when not daemonizing
  [openssh-7.2p2-no_fork-no_pid_file.patch]
- use correct options when invoking login
  [openssh-7.2p2-login_options.patch]
- helper application for retrieving users' public keys from
  an LDAP server
  [openssh-7.2p2-ldap.patch]
- allow forcing permissions over sftp
  [openssh-7.2p2-sftp_force_permissions.patch]
- do not perform run-time checks for OpenSSL API/ABI change
  [openssh-7.2p2-disable_openssl_abi_check.patch]
- suggest commands for cleaning known hosts file
  [openssh-7.2p2-host_ident.patch]
- sftp home chroot patch
  [openssh-7.2p2-sftp_homechroot.patch]
- ssh sessions auditing
  [openssh-7.2p2-audit.patch]
- enable seccomp sandbox on additional architectures
  [openssh-7.2p2-additional_seccomp_archs.patch]
- fix forwarding with IPv6 addresses in DISPLAY (bnc#847710)
  [openssh-7.2p2-IPv6_X_forwarding.patch]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [openssh-7.2p2-ignore_PAM_with_UseLogin.patch]
- limit accepted password length (prevents possible DoS)
  (bsc#992533, CVE-2016-6515)
  [openssh-7.2p2-limit_password_length.patch]
- Prevent user enumeration through the timing of password
  processing (bsc#989363, CVE-2016-6210)
  [openssh-7.2p2-prevent_timing_user_enumeration.patch]
- Add auditing for PRNG re-seeding
  [openssh-7.2p2-audit_seed_prng.patch]</changelog>
<changelog author="pcerny@suse.com" date="1476360000">- enable geteuid{,32} syscalls on mainframes, since it may be
  called from libica/ibmica on machines with hardware crypto
  accelerator (bsc#1004258)
  [openssh-7.2p2-seccomp_geteuid.patch]
- fix regression of (bsc#823710)
  [openssh-7.2p2-audit_fixes.patch]
- add slogin (removed upstreams)
  [openssh-7.2p2-keep_slogin.patch]</changelog>
<changelog author="pcerny@suse.com" date="1478606400">- prevent resource depletion during key exchange
  (bsc#1005480, CVE-2016-8858)
  [openssh-7.2p2-kex_resource_depletion.patch]
- fix suggested command for removing conflicting server keys from
  the known_hosts file (bsc#1006221)</changelog>
<changelog author="pcerny@suse.com" date="1483617600">- Properly verify CIDR masks in configuration
  (bsc#1005893)
  [openssh-7.2p2-verify_CIDR_address_ranges.patch]
- Remove pre-auth compression support from the server to prevent
  possible cryptographic attacks.
  (CVE-2016-10012, bsc#1016370)
  [openssh-7.2p2-disable_preauth_compression.patch]
- limit directories for loading PKCS11 modules
  (CVE-2016-10009, bsc#1016366)
  [openssh-7.2p2-restrict_pkcs11-modules.patch]
- Prevent possible leaks of host private keys to low-privilege
  process handling authentication
  (CVE-2016-10011, bsc#1016369)
  [openssh-7.2p2-prevent_private_key_leakage.patch]
- Do not allow unix socket forwarding when running without
  privilege separation
  (CVE-2016-10010, bsc#1016368)
  [openssh-7.2p2-secure_unix_sockets_forwarding.patch]</changelog>
<changelog author="pcerny@suse.com" date="1485259200">- Adding missing pieces for user matching (bsc#1021626)</changelog>
<changelog author="pcerny@suse.com" date="1492776000">- enable case-insensitive hostname matching (bsc#1017099)
  [openssh-7.2p2-ssh_case_insensitive_host_matching.patch]
- re-add CAVS tests
  [openssh-7.2p2-cavstest-ctr.patch]
  [openssh-7.2p2-cavstest-kdf.patch]</changelog>
<changelog author="pcerny@suse.com" date="1494849600">- Fix preauth seccomp separation on mainframes (bsc#1016709)
  [openssh-7.2p2-s390_hw_crypto_syscalls.patch]
  [openssh-7.2p2-s390_OpenSSL-ibmpkcs11_syscalls.patch]</changelog>
<changelog author="pcerny@suse.com" date="1496232000">- sshd.service: Set TasksMax=infinity, as there should be
  no limit on the amount of tasks sshd can run.</changelog>
<changelog author="pcerny@suse.com" date="1498651200">- new switch for printing diagnostic messages in sftp client's
  batch mode (bsc#1023275)
  [openssh-7.2p2-sftp_print_diagnostic_messages.patch]
- Better fix for core dumps from auditing code when trying to bind
  to an unavailable port (bsc#1024251)</changelog>
<changelog author="pcerny@suse.com" date="1506427200">- Test configuration before running daemon to rpevent looping
  resulting in service shutdown (bsc#1048367)</changelog>
<changelog author="pcerny@suse.com" date="1511352000">- FIPS startup selfchecks (bsc#1068310)
  [openssh-7.2p2-fips_checks.patch]
- Silent complaints about unsupported key exchange methods
  (bsc#1006166)
  [openssh-7.2p2-fips_fixes.patch]
- Stricter checking of operations in read-only mode in sftp server
  (CVE-2017-15906, bsc#1065000)
  [openssh-7.2p2-stricter_readonly_sftp.patch]
- Refine handling of sockets for X11 forwarding to remove
  reintroduced CVE-2008-1483 (bsc#1069509)</changelog>

</package>
<package pkgid="eb44bd06040a2dd54a541331fcb532a052038739d277f81ccd25091c008aaaf0" name="openssh-helpers" arch="x86_64">
    <version epoch="0" ver="7.2p2" rel="15.1"/>

<changelog author="pcerny@suse.com" date="1431604800">- use %restart_on_update in the trigger script</changelog>
<changelog author="pcerny@suse.com" date="1438344000">- Maintenance update
  * better timeouting of X11 forwards (CVE-2015-5352/bsc#936695)
    [-X11_forwarding_timeout] and hardening of ssh-agent(1)
    locking (bsc#936695) [-agent_locking_hardening]
  * removing and disabling short DH parameters (bsc#932483)
    [-disable_DH_under_1536b, -remove_moduli_under_1536b]
  * disable accdess to procfs from sftp (bsc#903649)
    [-sftp_procfs_restrictions]
  * Allow each keyboard authentication method to be used only
    once per login (CVE-2015-5600/bsc#938746)
    [-use_each_kbd_method_just_once]
  * Don't resend username to PAM, it can be misused for privilege
    escalation (CVE-2015-6563/bsc#943010)
    [-pam_privsep_dont_resend_username]
  * Prevent possible use-after-free in PAM authentication monitor
    (CVE-2015-6564/bsc#943006)
    [-pam_privsep_auth_uaf]</changelog>
<changelog author="jsegitz@novell.com" date="1452686400">- CVE-2016-0777, bsc#961642, CVE-2016-0778, bsc#961645
  Added CVE-2016-077-7_8.patch to disable the roaming code to prevent
  information leak and buffer overflow</changelog>
<changelog author="pcerny@suse.com" date="1457438400">- fix minor problems (bsc#945493)
- fix postun script of main package (bsc#945484)
- fix crashes when /proc is not available (bsc#947458)
- rename and comment the roaming patch
  (CVE-2016-077-7_8 to -disable_roaming)</changelog>
<changelog author="pcerny@suse.com" date="1460030400">- Correctly parse GSSAPI KEX algorithms (bsc#961368)
- Sanitise input for xauth(1) (bsc#970632, CVE-2016-3115)
  [-sanitise_xauth_input]
- prevent X11 SECURITY circumvention when forwarding X11
  connections (bsc#962313, CVE-2016-1908)
  [-untrusted_X_forwarding]
- more verbose FIPS mode/CC related documentation in README.FIPS
  (bsc#965576, bsc#960414)
- fix PRNG re-seeding (bsc#960414, bsc#729190)
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [-disable_DH_under_1536b -&gt; -disable_short_DH_parameters]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [-ignore_PAM_with_UseLogin]</changelog>
<changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2 (FATE#319675)
  upstream package without any SUSE patches
  Distilled upstream log:
- OpenSSH 6.7
  Potentially-incompatible changes:
  * sshd(8): The default set of ciphers and MACs has been
    altered to remove unsafe algorithms. In particular, CBC
    ciphers and arcfour* are disabled by default.
    The full set of algorithms remains available if configured
    explicitly via the Ciphers and MACs sshd_config options.
  * sshd(8): Support for tcpwrappers/libwrap has been removed.
  * OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of
    connections using the curve25519-sha256@libssh.org KEX
    exchange method to fail when connecting with something that
    implements the specification correctly. OpenSSH 6.7 disables
    this KEX method when speaking to one of the affected
    versions.
  New Features:
  * ssh(1), sshd(8): Add support for Unix domain socket
    forwarding. A remote TCP port may be forwarded to a local
    Unix domain socket and vice versa or both ends may be a Unix
    domain socket.
  * ssh(1), ssh-keygen(1): Add support for SSHFP DNS records for
    ED25519 key types.
  * sftp(1): Allow resumption of interrupted uploads.
  * ssh(1): When rekeying, skip file/DNS lookups of the hostkey
    if it is the same as the one sent during initial key exchange
  * sshd(8): Allow explicit ::1 and 127.0.0.1 forwarding bind
    addresses when GatewayPorts=no; allows client to choose
    address family
  * sshd(8): Add a sshd_config PermitUserRC option to control
    whether ~/.ssh/rc is executed, mirroring the no-user-rc
    authorized_keys option
  * ssh(1): Add a %C escape sequence for LocalCommand and
    ControlPath that expands to a unique identifer based on a
    hash of the tuple of (local host, remote user, hostname,
    port). Helps avoid exceeding miserly pathname limits for Unix
    domain sockets in multiplexing control paths
  * sshd(8): Make the "Too many authentication failures" message
    include the user, source address, port and protocol in a
    format similar to the authentication success / failure
    messages
  Bugfixes:
  * sshd(8): Fix remote forwarding with the same listen port but
    different listen address.
  * ssh(1): Fix inverted test that caused PKCS#11 keys that were
    explicitly listed in ssh_config or on the commandline not to
    be preferred.
  * ssh-keygen(1): Fix bug in KRL generation: multiple
    consecutive revoked certificate serial number ranges could be
    serialised to an invalid format. Readers of a broken KRL
    caused by this bug will fail closed, so no
    should-have-been-revoked key will be accepted.
  * ssh(1): Reflect stdio-forward ("ssh -W host:port ...")
    failures in exit status. Previously we were always returning 0
  * ssh(1), ssh-keygen(1): Make Ed25519 keys' title fit properly
    in the randomart border
  * ssh-agent(1): Only cleanup agent socket in the main agent
    process and not in any subprocesses it may have started (e.g.
    forked askpass). Fixes agent sockets being zapped when
    askpass processes fatal()
  * ssh-add(1): Make stdout line-buffered; saves partial output
    getting lost when ssh-add fatal()s part-way through (e.g.
    when listing keys from an agent that supports key types that
    ssh-add doesn't)
  * ssh-keygen(1): When hashing or removing hosts, don't choke on
    @revoked markers and don't remove @cert-authority markers
  * ssh(1): Don't fatal when hostname canonicalisation fails and
    a ProxyCommand is in use; continue and allow the ProxyCommand
    to connect anyway (e.g. to a host with a name outside the DNS
    behind a bastion)
  * scp(1): When copying local-&gt;remote fails during read, don't
    send uninitialised heap to the remote end.
  * sftp(1): Fix fatal "el_insertstr failed" errors when
    tab-completing filenames with  a single quote char somewhere
    in the string
  * ssh-keyscan(1): Scan for Ed25519 keys by default.
  * ssh(1): When using VerifyHostKeyDNS with a DNSSEC resolver,
    down-convert any certificate keys to plain keys and attempt
    SSHFP resolution.  Prevents a server from skipping SSHFP
    lookup and forcing a new-hostkey dialog by offering only
    certificate keys.
- OpenSSH 6.8
  Potentially-incompatible changes:
  * sshd(8): UseDNS now defaults to 'no'. Configurations that
    match against the client host name (via sshd_config or
    authorized_keys) may need to re-enable it or convert to
    matching against addresses.
  New Features:
  * Add FingerprintHash option to ssh(1) and sshd(8), and
    equivalent command-line flags to the other tools to control
    algorithm used for key fingerprints. The default changes from
    MD5 to SHA256 and format from hex to base64.
    Fingerprints now have the hash algorithm prepended. An
    example of the new format:
    SHA256:mVPwvezndPv/ARoIadVY98vAC0g+P/5633yTC4d/wXE Please
    note that visual host keys will also be different.
  * ssh(1), sshd(8): Experimental host key rotation support. Add
    a protocol extension for a server to inform a client of all
    its available host keys after authentication has completed.
    The client may record the keys in known_hosts, allowing it to
    upgrade to better host key algorithms and a server to
    gracefully rotate its keys.
    The client side of this is controlled by a UpdateHostkeys
    config option (default off).
  * ssh(1): Add a ssh_config HostbasedKeyType option to control
    which host public key types are tried during host-based
    authentication.
  * ssh(1), sshd(8): fix connection-killing host key mismatch
    errors when sshd offers multiple ECDSA keys of different
    lengths.
  * ssh(1): when host name canonicalisation is enabled, try to
    parse host names as addresses before looking them up for
    canonicalisation. fixes bz#2074 and avoiding needless DNS
    lookups in some cases.
  * ssh-keygen(1), sshd(8): Key Revocation Lists (KRLs) no longer
    require OpenSSH to be compiled with OpenSSL support.
  * ssh(1), ssh-keysign(8): Make ed25519 keys work for host based
    authentication.
  * sshd(8): SSH protocol v.1 workaround for the Meyer, et al,
    Bleichenbacher Side Channel Attack. Fake up a bignum key
    before RSA decryption.
  * sshd(8): Remember which public keys have been used for
    authentication and refuse to accept previously-used keys.
    This allows AuthenticationMethods=publickey,publickey to
    require that users authenticate using two _different_ public
    keys.
  * sshd(8): add sshd_config HostbasedAcceptedKeyTypes and
    PubkeyAcceptedKeyTypes options to allow sshd to control what
    public key types will be accepted. Currently defaults to all.
  * sshd(8): Don't count partial authentication success as a
    failure against MaxAuthTries.
  * ssh(1): Add RevokedHostKeys option for the client to allow
    text-file or KRL-based revocation of host keys.
  * ssh-keygen(1), sshd(8): Permit KRLs that revoke certificates
    by serial number or key ID without scoping to a particular
    CA.
  * ssh(1): Add a "Match canonical" criteria that allows
    ssh_config Match blocks to trigger only in the second config
    pass.
  * ssh(1): Add a -G option to ssh that causes it to parse its
    configuration and dump the result to stdout, similar to
    "sshd -T".
  * ssh(1): Allow Match criteria to be negated.
    E.g. "Match !host".
  * The regression test suite has been extended to cover more
    OpenSSH features. The unit tests have been expanded and now
    cover key exchange.
  Bugfixes:
  * ssh-keyscan(1): ssh-keyscan has been made much more robust
    again servers that hang or violate the SSH protocol.
  * ssh(1), ssh-keygen(1): Fix regression: Key path names were
    being lost as comment fields.
  * ssh(1): Allow ssh_config Port options set in the second
    config parse phase to be applied (they were being ignored).
  * ssh(1): Tweak config re-parsing with host canonicalisation - make
    the second pass through the config files always run when host name
    canonicalisation is enabled (and not whenever the host name
    changes)
  * ssh(1): Fix passing of wildcard forward bind addresses when
    connection multiplexing is in use
  * ssh-keygen(1): Fix broken private key conversion from
    non-OpenSSH formats.
  * ssh-keygen(1): Fix KRL generation bug when multiple CAs are
    in use.
  * Various fixes to manual pages
- OpenSSH 6.9
  Security:
  * ssh(1): when forwarding X11 connections with
    ForwardX11Trusted=no, connections made after
    ForwardX11Timeout expired could be permitted and no longer
    subject to XSECURITY restrictions because of an ineffective
    timeout check in ssh(1) coupled with "fail open" behaviour in
    the X11 server when clients attempted connections with
    expired credentials. This problem was reported by Jann Horn.
  * ssh-agent(1): fix weakness of agent locking (ssh-add -x) to
    password guessing by implementing an increasing failure
    delay, storing a salted hash of the password rather than the
    password itself and using a timing-safe comparison function
    for verifying unlock attempts. This problem was reported by
    Ryan Castellucci.
  New Features:
  * ssh(1), sshd(8): promote chacha20-poly1305@openssh.com to be
    the default cipher
  * sshd(8): support admin-specified arguments to
    AuthorizedKeysCommand
  * sshd(8): add AuthorizedPrincipalsCommand that allows
    retrieving authorized principals information from a
    subprocess rather than a file.
  * ssh(1), ssh-add(1): support PKCS#11 devices with external PIN
    entry devices
  * sshd(8): allow GSSAPI host credential check to be relaxed for
    multihomed hosts via GSSAPIStrictAcceptorCheck option
  * ssh-keygen(1): support "ssh-keygen -lF hostname" to search
    known_hosts and print key hashes rather than full keys.
  * ssh-agent(1): add -D flag to leave ssh-agent in foreground
    without enabling debug mode
  Bugfixes:
  * ssh(1), sshd(8): deprecate legacy
    SSH2_MSG_KEX_DH_GEX_REQUEST_OLD message and do not try to use
    it against some 3rd-party SSH implementations that use it
    (older PuTTY, WinSCP).
  * Many fixes for problems caused by compile-time deactivation
    of SSH1 support (including bz#2369)
  * ssh(1), sshd(8): cap DH-GEX group size at 4Kbits for Cisco
    implementations as some would fail when attempting to use
    group sizes &gt;4K
  * ssh(1): fix out-of-bound read in EscapeChar configuration
    option parsing
  * sshd(8): fix application of PermitTunnel, LoginGraceTime,
    AuthenticationMethods and StreamLocalBindMask options in
    Match blocks
  * ssh(1), sshd(8): improve disconnection message on TCP reset;
    bz#2257
  * ssh(1): remove failed remote forwards established by
    muliplexing from the list of active forwards
  * sshd(8): make parsing of authorized_keys "environment="
    options independent of PermitUserEnv being enabled
  * sshd(8): fix post-auth crash with permitopen=none
  * ssh(1), ssh-add(1), ssh-keygen(1): allow new-format private
    keys to be encrypted with AEAD ciphers
  * ssh(1): allow ListenAddress, Port and AddressFamily
    configuration options to appear in any order
  * sshd(8): check for and reject missing arguments for
    VersionAddendum and ForceCommand
  * ssh(1), sshd(8): don't treat unknown certificate extensions
    as fatal
  * ssh-keygen(1): make stdout and stderr output consistent
  * ssh(1): mention missing DISPLAY environment in debug log when
    X11 forwarding requested
  * sshd(8): correctly record login when UseLogin is set
  * sshd(8): Add some missing options to sshd -T output and fix
    output of VersionAddendum and HostCertificate. bz#2346
  * Document and improve consistency of options that accept a
    "none" argument" TrustedUserCAKeys, RevokedKeys (bz#2382),
    AuthorizedPrincipalsFile (bz#2288)
  * ssh(1): include remote username in debug output
  * sshd(8): avoid compatibility problem with some versions of
    Tera Term, which would crash when they received the hostkeys
    notification message (hostkeys-00@openssh.com)
  * sshd(8): mention ssh-keygen -E as useful when comparing
    legacy MD5 host key fingerprints
  * ssh(1): clarify pseudo-terminal request behaviour and use
    make manual language consistent
  * ssh(1): document that the TERM environment variable is not
    subject to SendEnv and AcceptEnv
- OpenSSH 7.0:
  This focuses primarily on deprecating weak, legacy and/or
  unsafe cryptography.
  Security:
  * sshd(8): OpenSSH 6.8 and 6.9 incorrectly set TTYs to be
    world- writable. Local attackers may be able to write
    arbitrary messages to logged-in users, including terminal
    escape sequences.  Reported by Nikolay Edigaryev.
  * sshd(8): Portable OpenSSH only: Fixed a privilege separation
    weakness related to PAM support. Attackers who could
    successfully compromise the pre-authentication process for
    remote code execution and who had valid credentials on the
    host could impersonate other users.  Reported by Moritz
    Jodeit.
  * sshd(8): Portable OpenSSH only: Fixed a use-after-free bug
    related to PAM support that was reachable by attackers who
    could compromise the pre-authentication process for remote
    code execution. Also reported by Moritz Jodeit.
  * sshd(8): fix circumvention of MaxAuthTries using keyboard-
    interactive authentication. By specifying a long, repeating
    keyboard-interactive "devices" string, an attacker could
    request the same authentication method be tried thousands of
    times in a single pass. The LoginGraceTime timeout in sshd(8)
    and any authentication failure delays implemented by the
    authentication mechanism itself were still applied. Found by
    Kingcope.
  Potentially-incompatible Changes:
  * Support for the legacy SSH version 1 protocol is disabled by
    default at compile time.
  * Support for the 1024-bit diffie-hellman-group1-sha1 key
    exchange is disabled by default at run-time. It may be
    re-enabled using the instructions in README.legacy or
    http://www.openssh.com/legacy.html
  * Support for ssh-dss, ssh-dss-cert-* host and user keys is
    disabled by default at run-time. These may be re-enabled
    using the instructions at http://www.openssh.com/legacy.html
  * Support for the legacy v00 cert format has been removed.
  * The default for the sshd_config(5) PermitRootLogin option has
    changed from "yes" to "prohibit-password".
  * PermitRootLogin=without-password/prohibit-password now bans
    all interactive authentication methods, allowing only
    public-key, hostbased and GSSAPI authentication (previously
    it permitted keyboard-interactive and password-less
    authentication if those were enabled).
  New Features:
  * ssh_config(5): add PubkeyAcceptedKeyTypes option to control
    which public key types are available for user authentication.
  * sshd_config(5): add HostKeyAlgorithms option to control which
    public key types are offered for host authentications.
  * ssh(1), sshd(8): extend Ciphers, MACs, KexAlgorithms,
    HostKeyAlgorithms, PubkeyAcceptedKeyTypes and
    HostbasedKeyTypes options to allow appending to the default
    set of algorithms instead of replacing it. Options may now be
    prefixed with a '+' to append to the default, e.g.
    "HostKeyAlgorithms=+ssh-dss".
  * sshd_config(5): PermitRootLogin now accepts an argument of
    'prohibit-password' as a less-ambiguous synonym of 'without-
    password'.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for Cisco and
    more PuTTY versions.
  * Fix some omissions and errors in the PROTOCOL and
    PROTOCOL.mux documentation relating to Unix domain socket
    forwarding
  * ssh(1): Improve the ssh(1) manual page to include a better
    description of Unix domain socket forwarding
  * ssh(1), ssh-agent(1): skip uninitialised PKCS#11 slots,
    fixing failures to load keys when they are present.
  * ssh(1), ssh-agent(1): do not ignore PKCS#11 hosted keys that
    wth empty CKA_ID
  * sshd(8): clarify documentation for UseDNS option
- OpenSSH 7.1:
  Security:
  * sshd(8): OpenSSH 7.0 contained a logic error in
    PermitRootLogin= prohibit-password/without-password that
    could, depending on compile-time configuration, permit
    password authentication to root while preventing other forms
    of authentication. This problem was reported by Mantas
    Mikulenas.
  Bugfixes:
  * ssh(1), sshd(8): add compatability workarounds for FuTTY
  * ssh(1), sshd(8): refine compatability workarounds for WinSCP
  * Fix a number of memory faults (double-free, free of
    uninitialised memory, etc) in ssh(1) and ssh-keygen(1).
    Reported by Mateusz Kocielski.
- OpenSSH 7.1p2:
  * SECURITY: ssh(1): The OpenSSH client code between 5.4 and 7.1
    contains experimential support for resuming SSH-connections
    (roaming).
    The matching server code has never been shipped, but the
    client code was enabled by default and could be tricked by a
    malicious server into leaking client memory to the server,
    including private client user keys.
    The authentication of the server host key prevents
    exploitation by a man-in-the-middle, so this information leak
    is restricted to connections to malicious or compromised
    servers.
    MITIGATION: For OpenSSH &gt;= 5.4 the vulnerable code in the
    client can be completely disabled by adding 'UseRoaming no'
    to the gobal ssh_config(5) file, or to user configuration in
    ~/.ssh/config, or by passing -oUseRoaming=no on the command
    line.
    PATCH: See below for a patch to disable this feature
    (Disabling Roaming in the Source Code).
    This problem was reported by the Qualys Security Advisory
    team.
  * SECURITY: Eliminate the fallback from untrusted
    X11-forwarding to trusted forwarding for cases when the X
    server disables the SECURITY extension. Reported by Thomas
    Hoger.
  * SECURITY: Fix an out of-bound read access in the packet
    handling code. Reported by Ben Hawkes.
  * PROTOCOL: Correctly interpret the 'first_kex_follows' option
    during the intial key exchange. Reported by Matt Johnston.
  * Further use of explicit_bzero has been added in various
    buffer handling code paths to guard against compilers
    aggressively doing dead-store removal.
  Potentially-incompatible changes:
  * This release disables a number of legacy cryptographic
    algorithms by default in ssh:
    + Several ciphers blowfish-cbc, cast128-cbc, all arcfour
    variants and the rijndael-cbc aliases for AES.
    + MD5-based and truncated HMAC algorithms.
- OpenSSH 7.2:
  Security:
  * ssh(1), sshd(8): remove unfinished and unused roaming code
    (was already forcibly disabled in OpenSSH 7.1p2).
  * ssh(1): eliminate fallback from untrusted X11 forwarding to
    trusted forwarding when the X server disables the SECURITY
    extension.
  * ssh(1), sshd(8): increase the minimum modulus size supported
    for diffie-hellman-group-exchange to 2048 bits.
  * sshd(8): pre-auth sandboxing is now enabled by default
    (previous releases enabled it for new installations via
    sshd_config).
  New Features:
  * all: add support for RSA signatures using SHA-256/512 hash
    algorithms based on draft-rsa-dsa-sha2-256-03.txt and
    draft-ssh-ext-info-04.txt.
  * ssh(1): Add an AddKeysToAgent client option which can be set
    to 'yes', 'no', 'ask', or 'confirm', and defaults to 'no'.
    When enabled, a private key that is used during
    authentication will be added to ssh-agent if it is running
    (with confirmation enabled if set to 'confirm').
  * sshd(8): add a new authorized_keys option "restrict" that
    includes all current and future key restrictions
    (no-*-forwarding, etc.).  Also add permissive versions of the
    existing restrictions, e.g.  "no-pty" -&gt; "pty". This
    simplifies the task of setting up restricted keys and ensures
    they are maximally-restricted, regardless of any permissions
    we might implement in the future.
  * ssh(1): add ssh_config CertificateFile option to explicitly
    list certificates. bz#2436
  * ssh-keygen(1): allow ssh-keygen to change the key comment for
    all supported formats.
  * ssh-keygen(1): allow fingerprinting from standard input, e.g.
    "ssh-keygen -lf -"
  * ssh-keygen(1): allow fingerprinting multiple public keys in a
    file, e.g. "ssh-keygen -lf ~/.ssh/authorized_keys" bz#1319
  * sshd(8): support "none" as an argument for sshd_config
    Foreground and ChrootDirectory. Useful inside Match blocks to
    override a global default. bz#2486
  * ssh-keygen(1): support multiple certificates (one per line)
    and reading from standard input (using "-f -") for
    "ssh-keygen -L"
  * ssh-keyscan(1): add "ssh-keyscan -c ..." flag to allow
    fetching certificates instead of plain keys.
  * ssh(1): better handle anchored FQDNs (e.g. 'cvs.openbsd.org')
    in hostname canonicalisation - treat them as already
    canonical and remove the trailing '.' before matching
    ssh_config.
  Bugfixes:
  * sftp(1): existing destination directories should not
    terminate recursive uploads (regression in openssh 6.8)
  * ssh(1), sshd(8): correctly send back SSH2_MSG_UNIMPLEMENTED
    replies to unexpected messages during key exchange.
  * ssh(1): refuse attempts to set ConnectionAttempts=0, which
    does not make sense and would cause ssh to print an
    uninitialised stack variable.
  * ssh(1): fix errors when attempting to connect to scoped IPv6
    addresses with hostname canonicalisation enabled.
  * sshd_config(5): list a couple more options usable in Match
    blocks.
  * sshd(8): fix "PubkeyAcceptedKeyTypes +..." inside a Match
    block.
  * ssh(1): expand tilde characters in filenames passed to -i
    options before checking whether or not the identity file
    exists. Avoids confusion for cases where shell doesn't expand
    (e.g. "-i ~/file" vs. "-i~/file").
  * ssh(1): do not prepend "exec" to the shell command run by
    "Match exec" in a config file, which could cause some
    commands to fail in certain environments.
  * ssh-keyscan(1): fix output for multiple hosts/addrs on one
    line when host hashing or a non standard port is in use
  * sshd(8): skip "Could not chdir to home directory" message
    when ChrootDirectory is active.
  * ssh(1): include PubkeyAcceptedKeyTypes in ssh -G config dump.
  * sshd(8): avoid changing TunnelForwarding device flags if they
    are already what is needed; makes it possible to use tun/tap
    networking as non-root user if device permissions and
    interface flags are pre-established
  * ssh(1), sshd(8): RekeyLimits could be exceeded by one packet.
  * ssh(1): fix multiplexing master failure to notice client
    exit.
  * ssh(1), ssh-agent(1): avoid fatal() for PKCS11 tokens that
    present empty key IDs.
  * sshd(8): avoid printf of NULL argument.
  * ssh(1), sshd(8): allow RekeyLimits larger than 4GB.
  * ssh-keygen(1): sshd(8): fix several bugs in (unused) KRL
    signature support.
  * ssh(1), sshd(8): fix connections with peers that use the key
    exchange guess feature of the protocol.
  * sshd(8): include remote port number in log messages.
  * ssh(1): don't try to load SSHv1 private key when compiled
    without SSHv1 support.
  * ssh-agent(1), ssh(1): fix incorrect error messages during key
    loading and signing errors.
  * ssh-keygen(1): don't leave empty temporary files when
    performing known_hosts file edits when known_hosts doesn't
    exist.
  * sshd(8): correct packet format for tcpip-forward replies for
    requests that don't allocate a port
  * ssh(1), sshd(8): fix possible hang on closed output.
  * ssh(1): expand %i in ControlPath to UID.
  * ssh(1), sshd(8): fix return type of openssh_RSA_verify.
  * ssh(1), sshd(8): fix some option parsing memory leaks.
  * ssh(1): add a some debug output before DNS resolution; it's a
    place where ssh could previously silently stall in cases of
    unresponsive DNS servers.
  * ssh(1): remove spurious newline in visual hostkey.
  * ssh(1): fix printing (ssh -G ...) of HostKeyAlgorithms=+...
  * ssh(1): fix expansion of HostkeyAlgorithms=+...
  Documentation:
  * ssh_config(5), sshd_config(5): update default algorithm lists
    to match current reality.
  * ssh(1): mention -Q key-plain and -Q key-cert query options.
  * sshd_config(8): more clearly describe what
    AuthorizedKeysFile=none does.
  * ssh_config(5): better document ExitOnForwardFailure.
  * sshd(5): mention internal DH-GEX fallback groups in manual.
  * sshd_config(5): better description for MaxSessions option.
  Portability:
  * sshd(8): fix multiple authentication using S/Key.
- OpenSSH 7.2p2:
  Security:
  * sshd(8): sanitise X11 authentication credentials to avoid
    xauth command injection when X11Forwarding is enabled.
- (removing patches from previous version:
  openssh-6.6p1-X11-forwarding.patch
  openssh-6.6p1-X_forward_with_disabled_ipv6.patch
  openssh-6.6p1-audit1-remove_duplicit_audit.patch
  openssh-6.6p1-audit2-better_audit_of_user_actions.patch
  openssh-6.6p1-audit3-key_auth_usage-fips.patch
  openssh-6.6p1-audit3-key_auth_usage.patch
  openssh-6.6p1-audit4-kex_results-fips.patch
  openssh-6.6p1-audit4-kex_results.patch
  openssh-6.6p1-audit5-session_key_destruction.patch
  openssh-6.6p1-audit6-server_key_destruction.patch
  openssh-6.6p1-audit7-libaudit_compat.patch
  openssh-6.6p1-audit8-libaudit_dns_timeouts.patch
  openssh-6.6p1-blocksigalrm.patch
  openssh-6.6p1-curve25519-6.6.1p1.patch
  openssh-6.6p1-default-protocol.patch
  openssh-6.6p1-disable-openssl-abi-check.patch
  openssh-6.6p1-disable_roaming.patch
  openssh-6.6p1-eal3.patch
  openssh-6.6p1-fingerprint_hash.patch
  openssh-6.6p1-fips-checks.patch
  openssh-6.6p1-fips.patch
  openssh-6.6p1-gssapi_key_exchange.patch
  openssh-6.6p1-gssapimitm.patch
  openssh-6.6p1-host_ident.patch
  openssh-6.6p1-key-converter.patch
  openssh-6.6p1-lastlog.patch
  openssh-6.6p1-ldap.patch
  openssh-6.6p1-login_options.patch
  openssh-6.6p1-no_fork-no_pid_file.patch
  openssh-6.6p1-pam-check-locks.patch
  openssh-6.6p1-pam-fix2.patch
  openssh-6.6p1-pam-fix3.patch
  openssh-6.6p1-pts.patch
  openssh-6.6p1-saveargv-fix.patch
  openssh-6.6p1-seccomp_getuid.patch
  openssh-6.6p1-seccomp_stat.patch
  openssh-6.6p1-seed-prng.patch
  openssh-6.6p1-send_locale.patch
  openssh-6.6p1-sftp_force_permissions.patch
  openssh-6.6p1-sftp_homechroot.patch
  openssh-6.6p1-xauth.patch
  openssh-6.6p1-xauthlocalhostname.patch)</changelog>
<changelog author="pcerny@suse.com" date="1464609600">- enable trusted X11 forwarding by default
  [openssh-7.2p2-X11_trusted_forwarding.patch]
- set UID for lastlog properly
  [openssh-7.2p2-lastlog.patch]
- enable use of PAM by default
  [openssh-7.2p2-enable_PAM_by_default.patch]
- copy command line arguments properly
  [openssh-7.2p2-saveargv-fix.patch]
- do not use pthreads in PAM code
  [openssh-7.2p2-dont_use_pthreads_in_PAM.patch]
- fix paths in documentation
  [openssh-7.2p2-eal3.patch]
- prevent race consitions triggered by SIGALRM
  [openssh-7.2p2-blocksigalrm.patch]
- do send and accept locale environment variables by default
  [openssh-7.2p2-send_locale.patch]
- handle hostnames changes during X forwarding
  [openssh-7.2p2-hostname_changes_when_forwarding_X.patch]
- try to remove xauth cookies on exit
  [openssh-7.2p2-remove_xauth_cookies_on_exit.patch]
- properly format pts names for ?tmp? log files
  [openssh-7.2p2-pts_names_formatting.patch]
- check locked accounts when using PAM
  [openssh-7.2p2-pam_check_locks.patch]
- chenge default PermitRootLogin to 'yes' to prevent unwanted
  surprises on updates from older versions.
  See README.SUSE for details
  [openssh-7.2p2-allow_root_password_login.patch]
- Disable DH parameters under 2048 bits by default and allow
  lowering the limit back to the RFC 4419 specified minimum
  through an option (bsc#932483, bsc#948902)
  [openssh-7.2p2-disable_short_DH_parameters.patch]
- Add getuid() and stat() syscalls to the seccomp filter
  (bsc#912436)
  [openssh-7.2p2-seccomp_getuid.patch,
  openssh-7.2p2-seccomp_stat.patch]</changelog>
<changelog author="pcerny@suse.com" date="1465300800">- enable support for SSHv1 protocol and discourage its usage
  (bsc#983307)
- enable DSA by default for backward compatibility and discourage
  its usage (bsc#983784)</changelog>
<changelog author="pcerny@suse.com" date="1474027200">- FIPS compatibility (no selfchecks, only crypto restrictions)
  [openssh-7.2p2-fips.patch]
- PRNG re-seeding
  [openssh-7.2p2-seed-prng.patch]
- preliminary version of GSSAPI KEX
  [openssh-7.2p2-gssapi_key_exchange.patch]</changelog>
<changelog author="pcerny@suse.com" date="1475150400">- remaining patches that were still missing
  since the update to 7.2p2 (FATE#319675):
- allow X forwarding over IPv4 when IPv6 sockets is not available
  [openssh-7.2p2-X_forward_with_disabled_ipv6.patch]
- do not write PID file when not daemonizing
  [openssh-7.2p2-no_fork-no_pid_file.patch]
- use correct options when invoking login
  [openssh-7.2p2-login_options.patch]
- helper application for retrieving users' public keys from
  an LDAP server
  [openssh-7.2p2-ldap.patch]
- allow forcing permissions over sftp
  [openssh-7.2p2-sftp_force_permissions.patch]
- do not perform run-time checks for OpenSSL API/ABI change
  [openssh-7.2p2-disable_openssl_abi_check.patch]
- suggest commands for cleaning known hosts file
  [openssh-7.2p2-host_ident.patch]
- sftp home chroot patch
  [openssh-7.2p2-sftp_homechroot.patch]
- ssh sessions auditing
  [openssh-7.2p2-audit.patch]
- enable seccomp sandbox on additional architectures
  [openssh-7.2p2-additional_seccomp_archs.patch]
- fix forwarding with IPv6 addresses in DISPLAY (bnc#847710)
  [openssh-7.2p2-IPv6_X_forwarding.patch]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [openssh-7.2p2-ignore_PAM_with_UseLogin.patch]
- limit accepted password length (prevents possible DoS)
  (bsc#992533, CVE-2016-6515)
  [openssh-7.2p2-limit_password_length.patch]
- Prevent user enumeration through the timing of password
  processing (bsc#989363, CVE-2016-6210)
  [openssh-7.2p2-prevent_timing_user_enumeration.patch]
- Add auditing for PRNG re-seeding
  [openssh-7.2p2-audit_seed_prng.patch]</changelog>
<changelog author="pcerny@suse.com" date="1476360000">- enable geteuid{,32} syscalls on mainframes, since it may be
  called from libica/ibmica on machines with hardware crypto
  accelerator (bsc#1004258)
  [openssh-7.2p2-seccomp_geteuid.patch]
- fix regression of (bsc#823710)
  [openssh-7.2p2-audit_fixes.patch]
- add slogin (removed upstreams)
  [openssh-7.2p2-keep_slogin.patch]</changelog>
<changelog author="pcerny@suse.com" date="1478606400">- prevent resource depletion during key exchange
  (bsc#1005480, CVE-2016-8858)
  [openssh-7.2p2-kex_resource_depletion.patch]
- fix suggested command for removing conflicting server keys from
  the known_hosts file (bsc#1006221)</changelog>
<changelog author="pcerny@suse.com" date="1483617600">- Properly verify CIDR masks in configuration
  (bsc#1005893)
  [openssh-7.2p2-verify_CIDR_address_ranges.patch]
- Remove pre-auth compression support from the server to prevent
  possible cryptographic attacks.
  (CVE-2016-10012, bsc#1016370)
  [openssh-7.2p2-disable_preauth_compression.patch]
- limit directories for loading PKCS11 modules
  (CVE-2016-10009, bsc#1016366)
  [openssh-7.2p2-restrict_pkcs11-modules.patch]
- Prevent possible leaks of host private keys to low-privilege
  process handling authentication
  (CVE-2016-10011, bsc#1016369)
  [openssh-7.2p2-prevent_private_key_leakage.patch]
- Do not allow unix socket forwarding when running without
  privilege separation
  (CVE-2016-10010, bsc#1016368)
  [openssh-7.2p2-secure_unix_sockets_forwarding.patch]</changelog>
<changelog author="pcerny@suse.com" date="1485259200">- Adding missing pieces for user matching (bsc#1021626)</changelog>
<changelog author="pcerny@suse.com" date="1492776000">- enable case-insensitive hostname matching (bsc#1017099)
  [openssh-7.2p2-ssh_case_insensitive_host_matching.patch]
- re-add CAVS tests
  [openssh-7.2p2-cavstest-ctr.patch]
  [openssh-7.2p2-cavstest-kdf.patch]</changelog>
<changelog author="pcerny@suse.com" date="1494849600">- Fix preauth seccomp separation on mainframes (bsc#1016709)
  [openssh-7.2p2-s390_hw_crypto_syscalls.patch]
  [openssh-7.2p2-s390_OpenSSL-ibmpkcs11_syscalls.patch]</changelog>
<changelog author="pcerny@suse.com" date="1496232000">- sshd.service: Set TasksMax=infinity, as there should be
  no limit on the amount of tasks sshd can run.</changelog>
<changelog author="pcerny@suse.com" date="1498651200">- new switch for printing diagnostic messages in sftp client's
  batch mode (bsc#1023275)
  [openssh-7.2p2-sftp_print_diagnostic_messages.patch]
- Better fix for core dumps from auditing code when trying to bind
  to an unavailable port (bsc#1024251)</changelog>
<changelog author="pcerny@suse.com" date="1506427200">- Test configuration before running daemon to rpevent looping
  resulting in service shutdown (bsc#1048367)</changelog>
<changelog author="pcerny@suse.com" date="1511352000">- FIPS startup selfchecks (bsc#1068310)
  [openssh-7.2p2-fips_checks.patch]
- Silent complaints about unsupported key exchange methods
  (bsc#1006166)
  [openssh-7.2p2-fips_fixes.patch]
- Stricter checking of operations in read-only mode in sftp server
  (CVE-2017-15906, bsc#1065000)
  [openssh-7.2p2-stricter_readonly_sftp.patch]
- Refine handling of sockets for X11 forwarding to remove
  reintroduced CVE-2008-1483 (bsc#1069509)</changelog>

</package>
<package pkgid="4dd51d745f53f1fecc833590596176f8d64c17b911874af51d536929bc034fa2" name="openssl" arch="src">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="5d4da6021ba7dc88fc5708e757fed9128569f20a9506d93d98849a748ac0092a" name="openssl" arch="src">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="2dc598665e4dee4ddabdbb2f9b1b8c02f03af2a27ecc39b248367cb60ee89a27" name="openssl" arch="src">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="6237cfbe71bec69829fc1cdc39fd3223d03d1751b07b6f8494f24b5da6f94033" name="openssl" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="64a954ea6e99f6d602770ac33b4425326d092ad80ec706a2228cea878b75be81" name="openssl" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="12b5b94ca119a4b679aa8da7ce9d3606a230ab7c03352f993fa209f709c5ef2f" name="openssl" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="e83750e9b87650b08046a75e447c310dad9ef416d94751d68712aa7663f1675c" name="openssl-cavs" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="7e1e86a2d4d4004ce7f0a5cc4c2b58bffe2f74025dca966309bd3ee3bee66473" name="openssl-cavs" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="f6dda54aec555e2d7d3bd2872537ef913999b7b72ca6ce1b57d2f3fc1af784a3" name="openssl-cavs" arch="x86_64">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="f9a6af7faf472028841ea4d89bba33265cf55b4ac981374123d9ae1828162809" name="openssl-doc" arch="noarch">
    <version epoch="0" ver="1.0.2j" rel="10.1"/>

<changelog author="vcizek@suse.com" date="1470312000">- fix problems with locking in FIPS mode (bsc#992120)
  * duplicates: bsc#991877, bsc#991193, bsc#990392, bsc#990428
    and bsc#990207
  * bring back openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1472126400">- security update
  * CVE-2016-2177: Avoid some undefined pointer arithmetic (bsc#982575)
  * CVE-2016-2178: Fix DSA, preserve BN_FLG_CONSTTIME (bsc#983249)
  * CVE-2016-2179: remote denial of service via DTLS Finished Message (bsc#994844)
  * CVE-2016-2180: OOB read in TS_OBJ_print_bio() (bsc#990419)
  * CVE-2016-2181: Fix DTLS replay protection (bsc#994749)
  * CVE-2016-2182: Check for errors in BN_bn2dec() (bsc#993819)
  * CVE-2016-2183: Birthday attacks on 64-bit block ciphers aka triple-des
    (SWEET32) (bsc#995359)
  * CVE-2016-6302: Sanity check ticket length. (bsc#995324)
  * CVE-2016-6303: Avoid overflow in MDC2_Update (bsc#995377)
- added patches:
  * openssl-CVE-2016-2177.patch
  * openssl-CVE-2016-2178-2.patch
  * openssl-CVE-2016-2178.patch
  * openssl-CVE-2016-2179-2.patch
  * openssl-CVE-2016-2179.patch
  * openssl-CVE-2016-2180.patch
  * openssl-CVE-2016-2181-2.patch
  * openssl-CVE-2016-2181-3.patch
  * openssl-CVE-2016-2181.patch
  * openssl-CVE-2016-2182-2.patch
  * openssl-CVE-2016-2182.patch
  * openssl-CVE-2016-2183-SWEET32.patch
  * openssl-CVE-2016-6302.patch
  * openssl-CVE-2016-6303.patch</changelog>
<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>

</package>
<package pkgid="65104ddd49f5c8950705cb1c35281f13b2c7d19f4cabcd30659b016e8753b0ca" name="openssl-doc" arch="noarch">
    <version epoch="0" ver="1.0.2j" rel="13.1"/>

<changelog author="vcizek@suse.com" date="1472558400">- Fix a regression caused by openssl-CVE-2016-2182-2.patch (bsc#995959)
  * add openssl-CVE-2016-2182-3.patch</changelog>
<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>

</package>
<package pkgid="e9568d94f7e6a9d282c299ea233dd51f531644c870b7b9ad8d7331839e1aa3f7" name="openssl-doc" arch="noarch">
    <version epoch="0" ver="1.0.2j" rel="16.1"/>

<changelog author="vcizek@suse.com" date="1474632000">- OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
  Severity: High
  * OCSP Status Request extension unbounded memory growth
    (CVE-2016-6304) (bsc#999666)
  Severity: Low
  * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  * Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  * DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  * OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  * DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  * Birthday attack against 64-bit block ciphers (SWEET32)
    (CVE-2016-2183) (bsc#995359)
  * Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  * OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  * Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
- update to openssl-1.0.2i
  * drop patches:
    openssl-1.0.2a-new-fips-reqs.patch
    openssl-1.0.2e-fips.patch
    openssl-CVE-2016-2177.patch
    openssl-CVE-2016-2178-2.patch
    openssl-CVE-2016-2178.patch
    openssl-CVE-2016-2179-2.patch
    openssl-CVE-2016-2179.patch
    openssl-CVE-2016-2180.patch
    openssl-CVE-2016-2181-2.patch
    openssl-CVE-2016-2181-3.patch
    openssl-CVE-2016-2181.patch
    openssl-CVE-2016-2182-2.patch
    openssl-CVE-2016-2182.patch
    openssl-CVE-2016-2183-SWEET32.patch
    openssl-CVE-2016-6302.patch
    openssl-CVE-2016-6303.patch
  * add patches:
    openssl-1.0.2i-fips.patch
    openssl-1.0.2i-new-fips-reqs.patch
  * refresh patches:
    0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
    0001-libcrypto-Hide-library-private-symbols.patch</changelog>
<changelog author="vcizek@suse.com" date="1474977600">- update to 1.0.2j
- OpenSSL Security Advisory [26 Sep 2016]
  Severity: Moderate
  * Missing CRL sanity check (CVE-2016-7052) (bsc#1001148)
  * A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
    but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
    CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.</changelog>
<changelog author="vcizek@suse.com" date="1474977601">- resume reading from /dev/urandom when interrupted by a signal
  (bsc#995075)
  * add openssl-randfile_fread_interrupt.patch
- fix crash in print_notice (bsc#998190)
  * add openssl-print_notice-NULL_crash.patch</changelog>
<changelog author="vcizek@suse.com" date="1475841600">- temporarily revert upstream commit fd7ca7465b67336b8950a505b6d2adee867a78f7
  because it breaks libcamgm (bsc#1002585)
  * 0001-Make-openssl-req-x509-more-equivalent-to-openssl-req.patch</changelog>
<changelog author="vcizek@suse.com" date="1485432000">- OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)
  * Truncated packet could crash via OOB read (CVE-2017-3731) (bsc#1022085)
  * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
    (bsc#1022086)
  * Montgomery multiplication may produce incorrect results (CVE-2016-7055)
    (bsc#1009528)
- degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
- fix crash in openssl speed (bsc#1000677)
- added patches:
  * openssl-CVE-2016-7055.patch
  * openssl-CVE-2017-3731.patch
  * openssl-CVE-2017-3732.patch
  * openssl-fix_crash_in_openssl_speed.patch
  * openssl-degrade_3DES_to_MEDIUM_in_SSL2.patch
- fix X509_CERT_FILE path (bsc#1022271)
  * updated openssl-1.0.1e-truststore.diff
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch</changelog>
<changelog author="vcizek@suse.com" date="1487332800">- Fix a bug in openssl-fips-xts_nonidentical_key_parts.patch
  (bsc#1019637#c11)</changelog>
<changelog author="vcizek@suse.com" date="1489665600">- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
<changelog author="vcizek@suse.com" date="1489752000">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702400">- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
<changelog author="vcizek@suse.com" date="1490702401">- Fix x86 extended feature detection (bsc#1029523)
  * add openssl-x86_extended_feature_detection.patch</changelog>
<changelog author="vcizek@suse.com" date="1491566400">- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1493899200">- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal</changelog>
<changelog author="vcizek@suse.com" date="1493899201">- Use getrandom syscall instead of reading from /dev/urandom to get
  at least 128 bits of entropy to comply with FIPS 140.2 IG 7.14
  * merge openssl-urandom-reseeding.patch into new
    openssl-fips_entropy_reseeding.patch (bsc#1027079)</changelog>
<changelog author="vcizek@suse.com" date="1494331200">- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1497873600">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1497960000">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch</changelog>
<changelog author="vcizek@suse.com" date="1500292800">- use blocking getrandom syscall only from fips_drbg_bytes() to avoid
  stalls on low entropy (bsc#1044175)
- refresh patches:
  * openssl-fips_entropy_reseeding.patch
  * openssl-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
<changelog author="vcizek@suse.com" date="1509710400">- OpenSSL Security Advisory [02 Nov 2017]
  * CVE-2017-3736 (bsc#1066242)
  - bn_sqrx8x_internal carry bug on x86_64
  * add openssl-CVE-2017-3736.patch
- OpenSSL Security Advisory [28 Aug 2017]
  * CVE-2017-3735 (bsc#1056058)
  - Malformed X.509 IPAdressFamily could cause OOB read()
  * add openssl-CVE-2017-3735.patch
- fix crash in DES (bsc#1065363)
  * add openssl-fix_crash_in_DES.patch</changelog>
<changelog author="vcizek@suse.com" date="1512734400">- OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- added patches:
  * openssl-CVE-2017-3737.patch
  * openssl-CVE-2017-3738.patch</changelog>

</package>
<package pkgid="8129e84bb5256338c2f31027b492f587e8cbe69999de25e6e34faee82a9265f3" name="openvpn" arch="src">
    <version epoch="0" ver="2.3.8" rel="14.1"/>

<changelog author="aj@suse.com" date="1364299200">- Remove _unitdir definition, it is provided by systemd.
- Install service file without x permissions</changelog>
<changelog author="mt@suse.de" date="1366718400">- Fixed to enable systemd support in configure
- Fixed openvpn-tmpfile.conf to use GID root, there is no openvpn group.
- Added openvpn.target file allowing to handle all instances at once.
- Fixed to install the service template correctly as openvpn@.service.
  Use "systemctl enable openvpn@foo.service" to enable instance using
  /etc/openvpn/foo.conf.
- Disabled systemd variant of restart on update rpm macro, adopted other
  macros to use openvpn.target to e.g. stop all instances on uninstall.</changelog>
<changelog author="mt@suse.de" date="1367841600">- Try to migrate openvpn.service autostart to openvpn@&lt;CONF&gt;.service
  instance enablement.</changelog>
<changelog author="mrdocs@opensuse.org" date="1370347200">- Update to 2.3.2
  +Fixes since 2.3.0
- Remove dead code path and putenv functionality
- Remove unused function xor
- Move static prototype definition from header into c file
- Remove unused function no_tap_ifconfig
- fix build with automake 1.13(.1)
- Fix corner case in NTLM authentication (trac #172)
- Update README.IPv6 to match what is in 2.3.0
- Repair "tcp server queue overflow" brokenness, more &lt;stdbool.h&gt; fallout.
- Permit pool size of /64.../112 for ifconfig-ipv6-pool
- Add MIN() compatibility macro
- Fix directly connected routes for "topology subnet" on Solaris.
- close more file descriptors on exec
- Ignore UTF-8 byte order mark
- reintroduce --no-name-remapping option
- make --tls-remote compatible with pre 2.3 configs
- add new option for X.509 name verification
- add man page patch for missing options
- Fix parameter listing in non-debug builds at verb 4
- (updated) [PATCH] Warn when using verb levels &gt;=7 without debug
- Enable TCP_NODELAY configuration on FreeBSD.
- Updated README
- Cleaned up and updated INSTALL
- PolarSSL-1.2 support
- Improve PolarSSL key_state_read_{cipher, plain}text messages
- Improve verify_callback messages
- Config compatibility patch. Added translate_cipher_name.
- Switch to IANA names for TLS ciphers.
- Fixed autoconf script to properly detect missing pkcs11 with polarssl.
- Use constant time memcmp when comparing HMACs in openvpn_decrypt.</changelog>
<changelog author="lmuelle@suse.com" date="1377604800">- Add a section about how to control all or a named configuration with the
  help of systemctl to the README.SUSE file.</changelog>
<changelog author="mt@suse.de" date="1383220800">- Fixed invalid mode in exec bit removal call from doc files</changelog>
<changelog author="mt@suse.de" date="1387281600">- Readded rcopenvpn helper script under systemd (bnc#848070)</changelog>
<changelog author="meissner@suse.com" date="1389268800">- openvpn-fips140-2.3.2.patch: Allow usage of SHA1 instead of MD5 in
  some internal checking routines. This allows operation in FIPS 140-2
  mode.</changelog>
<changelog author="mt@suse.de" date="1389700800">- Updated README.SUSE, documented also the rcopenvpn compatibility
  wrapper script (bnc#848070).</changelog>
<changelog author="mt@suse.de" date="1417435200">- Applied upstream patch fixing a denial-of-service vulnerability
  where an authenticated client could stop the server by triggering
  a server-side ASSERT (bnc#907764,CVE-2014-8104),
  [+ 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch]</changelog>
<changelog author="mt@suse.de" date="1435838400">- Fixed to use correct sha digest data length and in fips mode,
  use aes instead of the disallowed blowfish crypto (boo#914166).
- Fixed to mention actual plugin/doc dirs in openvpn(8) man page.
- Fixed to build with large file support on 32 bit systems.
- Fixed to use _rundir instead _localstatedir/run when defined
- Depend on systemd-devel for the daemon check functionality,
  removed obsolete --with-lzo-headers configure option.
- Applied backport patch to permit TLS 1.1/1.2 version negotiation
  instead to stick at TLS 1.0 (bsc#928802)</changelog>
<changelog author="idonmez@suse.com" date="1438776000">- Update to version 2.3.8
  * Report missing endtags of inline files as warnings
  * Fix commit e473b7c if an inline file happens to have a
    line break exactly at buffer limit
  * Produce a meaningful error message if --daemon gets in the way of
    asking for passwords.
  * Document --daemon changes and consequences (--askpass, --auth-nocache)
  * Del ipv6 addr on close of linux tun interface
  * Fix --askpass not allowing for password input via stdin
  * Write pid file immediately after daemonizing
  * Fix regression: query password before becoming daemon
  * Fix using management interface to get passwords
  * Fix overflow check in openvpn_decrypt()
- Update to version 2.3.7
  * down-root plugin: Replaced system() calls with execve()
  * sockets: Remove the limitation of --tcp-nodelay to be server-only
  * pkcs11: Load p11-kit-proxy.so module by default
  * New approach to handle peer-id related changes to link-mtu
  * Fix incorrect use of get_ipv6_addr() for iroute options
  * Print helpful error message on --mktun/--rmtun if not available
  * Explain effect of --topology subnet on --ifconfig
  * Add note about file permissions and --crl-verify to manpage
  * Repair --dev null breakage caused by db950be85d37
  * Correct note about DNS randomization in openvpn.8
  * Disallow usage of --server-poll-timeout in --secret key mode
  * Slightly enhance documentation about --cipher
  * On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo()
  * Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo()
  * Fix --redirect-private in --dev tap mode
  * Updated manpage for --rport and --lport
  * Properly escape dashes on the man-page
  * Improve documentation in --script-security section of the man-page
  * Really fix '--cipher none' regression
  * Set tls-version-max to 1.1 if cryptoapicert is used
  * Account for peer-id in frame size calculation
  * Disable SSL compression
  * Fix frame size calculation for non-CBC modes.
  * Allow for CN/username of 64 characters (fixes off-by-one)
  * Re-enable TLS version negotiation by default
  * Remove size limit for files inlined in config
  * Improve --tls-cipher and --show-tls man page description
  * Re-read auth-user-pass file on (re)connect if required
  * Clarify --capath option in manpage
  * Call daemon() before initializing crypto library</changelog>
<changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
<changelog author="mt@suse.com" date="1440072000">- Update to most recent openvpn package in version 2.3.8 (fate#319011)
  which obsoletes our security fix backports and provides many fixes.
  [- 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch,
  - openvpn-use-newertls.patch, + revert-daemonize.patch]
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
<changelog author="ndas@suse.de" date="1455105600">- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
<changelog author="ndas@suse.de" date="1492689600">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]</changelog>
<changelog author="ndas@suse.de" date="1492776000">- Use FIPS approved cipher for our sample configuration file(bsc#988522).
  [+0002-openvpn-fips140-AES-cipher-in-config-template.patch]</changelog>
<changelog author="ndas@suse.de" date="1495195200">- Show which ciphers should no longer be used in openvpn --show-ciphers
  bsc#995374(CVE-2016-6329)
  [+0006-Discourage-using-64-bit-block-ciphers.patch]
- Apply fixes for bsc#1038713, bsc#1038709, CVE-2017-7478, bsc#1038711, CVE-2017-7479
  [+ 0003-cleanup-merge-packet_id_alloc_outgoing-into-packet_i.patch,
  + 0004-Drop-packets-instead-of-assert-out-if-packet-id-roll.patch,
  + 0005-Don-t-assert-out-on-receiving-too-large-control-pack.patch]</changelog>
<changelog author="psimons@suse.com" date="1497960000">- 0001-Fix-remote-triggerable-memory-leaks-CVE-2017-7521.patch:
  Several OpenSSL-specific certificate-parsing code paths did not
  always clear all allocated memory. Since a client can cause a few
  bytes of memory to be leaked for each connection attempt, a
  client can cause a server to run out of memory and thereby kill
  the server. That makes this a (quite inefficient) DoS attack.
  [bsc#1044947, CVE-2017-7521]
- 0002-Restrict-x509-alt-username-extension-types.patch: The code
  never supported all --x509-alt-username extension types. Make
  this explicit by only allowing subjectAltName and issuerAltName
  (for which the current code does work). Using unsupported
  extension fields would most likely cause OpenVPN to crash as soon
  as a client connects. This does not have a real-world security
  impact, as such a configuration would not be possible to use in
  practice. [bsc#1044947]
- 0003-Fix-potential-double-free-in-x509-alt-username-CVE-2.patch:
  We didn't check the return value of ASN1_STRING_to_UTF8() in
  extract_x509_extension(). Ignoring such a failure could result in
  buf being free'd twice. An error in ASN1_STRING_to_UTF8() can be
  caused remotely if the peer can make the local process run out of
  memory. [bsc#1044947, CVE-2017-7521]
- 0004-Prevent-two-kinds-of-stack-buffer-OOB-reads-and-a-cr.patch:
  If clients use a HTTP proxy with NTLM authentication, a
  man-in-the-middle attacker between the client and the proxy can
  cause the client to crash or disclose at most 96 bytes of stack
  memory. The disclosed stack memory is likely to contain the proxy
  password. If the proxy password is not reused, this is unlikely
  to compromise the security of the OpenVPN tunnel itself. Clients
  who do not use the --http-proxy option with ntlm2 authentication
  are not affected. [bsc#1044947, CVE-2017-7520]
- 0005-Fix-remotely-triggerable-ASSERT-on-malformed-IPv6-pa.patch:
  Correct sanity checks on IPv6 packet length in mss_fixup_ipv6(),
  and change the ASSERT() check in mss_fixup_dowork() into a simple
  "return" (= the TCP header will simply not be inspected further).
  This can be used to remotely shutdown an openvpn server or
  client, if IPv6 and --mssfix are enabled and the IPv6 networks
  used inside the VPN are known. [bsc#1044947, CVE-2017-7508]</changelog>
<changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0012-Fix-bounds-check-in-read_key.patch]</changelog>

</package>
<package pkgid="271268eb074aa7199d88c957958c37a85f1aa03b3e28620aa09d2500673ae450" name="openvpn" arch="x86_64">
    <version epoch="0" ver="2.3.8" rel="14.1"/>

<changelog author="aj@suse.com" date="1364299200">- Remove _unitdir definition, it is provided by systemd.
- Install service file without x permissions</changelog>
<changelog author="mt@suse.de" date="1366718400">- Fixed to enable systemd support in configure
- Fixed openvpn-tmpfile.conf to use GID root, there is no openvpn group.
- Added openvpn.target file allowing to handle all instances at once.
- Fixed to install the service template correctly as openvpn@.service.
  Use "systemctl enable openvpn@foo.service" to enable instance using
  /etc/openvpn/foo.conf.
- Disabled systemd variant of restart on update rpm macro, adopted other
  macros to use openvpn.target to e.g. stop all instances on uninstall.</changelog>
<changelog author="mt@suse.de" date="1367841600">- Try to migrate openvpn.service autostart to openvpn@&lt;CONF&gt;.service
  instance enablement.</changelog>
<changelog author="mrdocs@opensuse.org" date="1370347200">- Update to 2.3.2
  +Fixes since 2.3.0
- Remove dead code path and putenv functionality
- Remove unused function xor
- Move static prototype definition from header into c file
- Remove unused function no_tap_ifconfig
- fix build with automake 1.13(.1)
- Fix corner case in NTLM authentication (trac #172)
- Update README.IPv6 to match what is in 2.3.0
- Repair "tcp server queue overflow" brokenness, more &lt;stdbool.h&gt; fallout.
- Permit pool size of /64.../112 for ifconfig-ipv6-pool
- Add MIN() compatibility macro
- Fix directly connected routes for "topology subnet" on Solaris.
- close more file descriptors on exec
- Ignore UTF-8 byte order mark
- reintroduce --no-name-remapping option
- make --tls-remote compatible with pre 2.3 configs
- add new option for X.509 name verification
- add man page patch for missing options
- Fix parameter listing in non-debug builds at verb 4
- (updated) [PATCH] Warn when using verb levels &gt;=7 without debug
- Enable TCP_NODELAY configuration on FreeBSD.
- Updated README
- Cleaned up and updated INSTALL
- PolarSSL-1.2 support
- Improve PolarSSL key_state_read_{cipher, plain}text messages
- Improve verify_callback messages
- Config compatibility patch. Added translate_cipher_name.
- Switch to IANA names for TLS ciphers.
- Fixed autoconf script to properly detect missing pkcs11 with polarssl.
- Use constant time memcmp when comparing HMACs in openvpn_decrypt.</changelog>
<changelog author="lmuelle@suse.com" date="1377604800">- Add a section about how to control all or a named configuration with the
  help of systemctl to the README.SUSE file.</changelog>
<changelog author="mt@suse.de" date="1383220800">- Fixed invalid mode in exec bit removal call from doc files</changelog>
<changelog author="mt@suse.de" date="1387281600">- Readded rcopenvpn helper script under systemd (bnc#848070)</changelog>
<changelog author="meissner@suse.com" date="1389268800">- openvpn-fips140-2.3.2.patch: Allow usage of SHA1 instead of MD5 in
  some internal checking routines. This allows operation in FIPS 140-2
  mode.</changelog>
<changelog author="mt@suse.de" date="1389700800">- Updated README.SUSE, documented also the rcopenvpn compatibility
  wrapper script (bnc#848070).</changelog>
<changelog author="mt@suse.de" date="1417435200">- Applied upstream patch fixing a denial-of-service vulnerability
  where an authenticated client could stop the server by triggering
  a server-side ASSERT (bnc#907764,CVE-2014-8104),
  [+ 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch]</changelog>
<changelog author="mt@suse.de" date="1435838400">- Fixed to use correct sha digest data length and in fips mode,
  use aes instead of the disallowed blowfish crypto (boo#914166).
- Fixed to mention actual plugin/doc dirs in openvpn(8) man page.
- Fixed to build with large file support on 32 bit systems.
- Fixed to use _rundir instead _localstatedir/run when defined
- Depend on systemd-devel for the daemon check functionality,
  removed obsolete --with-lzo-headers configure option.
- Applied backport patch to permit TLS 1.1/1.2 version negotiation
  instead to stick at TLS 1.0 (bsc#928802)</changelog>
<changelog author="idonmez@suse.com" date="1438776000">- Update to version 2.3.8
  * Report missing endtags of inline files as warnings
  * Fix commit e473b7c if an inline file happens to have a
    line break exactly at buffer limit
  * Produce a meaningful error message if --daemon gets in the way of
    asking for passwords.
  * Document --daemon changes and consequences (--askpass, --auth-nocache)
  * Del ipv6 addr on close of linux tun interface
  * Fix --askpass not allowing for password input via stdin
  * Write pid file immediately after daemonizing
  * Fix regression: query password before becoming daemon
  * Fix using management interface to get passwords
  * Fix overflow check in openvpn_decrypt()
- Update to version 2.3.7
  * down-root plugin: Replaced system() calls with execve()
  * sockets: Remove the limitation of --tcp-nodelay to be server-only
  * pkcs11: Load p11-kit-proxy.so module by default
  * New approach to handle peer-id related changes to link-mtu
  * Fix incorrect use of get_ipv6_addr() for iroute options
  * Print helpful error message on --mktun/--rmtun if not available
  * Explain effect of --topology subnet on --ifconfig
  * Add note about file permissions and --crl-verify to manpage
  * Repair --dev null breakage caused by db950be85d37
  * Correct note about DNS randomization in openvpn.8
  * Disallow usage of --server-poll-timeout in --secret key mode
  * Slightly enhance documentation about --cipher
  * On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo()
  * Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo()
  * Fix --redirect-private in --dev tap mode
  * Updated manpage for --rport and --lport
  * Properly escape dashes on the man-page
  * Improve documentation in --script-security section of the man-page
  * Really fix '--cipher none' regression
  * Set tls-version-max to 1.1 if cryptoapicert is used
  * Account for peer-id in frame size calculation
  * Disable SSL compression
  * Fix frame size calculation for non-CBC modes.
  * Allow for CN/username of 64 characters (fixes off-by-one)
  * Re-enable TLS version negotiation by default
  * Remove size limit for files inlined in config
  * Improve --tls-cipher and --show-tls man page description
  * Re-read auth-user-pass file on (re)connect if required
  * Clarify --capath option in manpage
  * Call daemon() before initializing crypto library</changelog>
<changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
<changelog author="mt@suse.com" date="1440072000">- Update to most recent openvpn package in version 2.3.8 (fate#319011)
  which obsoletes our security fix backports and provides many fixes.
  [- 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch,
  - openvpn-use-newertls.patch, + revert-daemonize.patch]
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
<changelog author="ndas@suse.de" date="1455105600">- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
<changelog author="ndas@suse.de" date="1492689600">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]</changelog>
<changelog author="ndas@suse.de" date="1492776000">- Use FIPS approved cipher for our sample configuration file(bsc#988522).
  [+0002-openvpn-fips140-AES-cipher-in-config-template.patch]</changelog>
<changelog author="ndas@suse.de" date="1495195200">- Show which ciphers should no longer be used in openvpn --show-ciphers
  bsc#995374(CVE-2016-6329)
  [+0006-Discourage-using-64-bit-block-ciphers.patch]
- Apply fixes for bsc#1038713, bsc#1038709, CVE-2017-7478, bsc#1038711, CVE-2017-7479
  [+ 0003-cleanup-merge-packet_id_alloc_outgoing-into-packet_i.patch,
  + 0004-Drop-packets-instead-of-assert-out-if-packet-id-roll.patch,
  + 0005-Don-t-assert-out-on-receiving-too-large-control-pack.patch]</changelog>
<changelog author="psimons@suse.com" date="1497960000">- 0001-Fix-remote-triggerable-memory-leaks-CVE-2017-7521.patch:
  Several OpenSSL-specific certificate-parsing code paths did not
  always clear all allocated memory. Since a client can cause a few
  bytes of memory to be leaked for each connection attempt, a
  client can cause a server to run out of memory and thereby kill
  the server. That makes this a (quite inefficient) DoS attack.
  [bsc#1044947, CVE-2017-7521]
- 0002-Restrict-x509-alt-username-extension-types.patch: The code
  never supported all --x509-alt-username extension types. Make
  this explicit by only allowing subjectAltName and issuerAltName
  (for which the current code does work). Using unsupported
  extension fields would most likely cause OpenVPN to crash as soon
  as a client connects. This does not have a real-world security
  impact, as such a configuration would not be possible to use in
  practice. [bsc#1044947]
- 0003-Fix-potential-double-free-in-x509-alt-username-CVE-2.patch:
  We didn't check the return value of ASN1_STRING_to_UTF8() in
  extract_x509_extension(). Ignoring such a failure could result in
  buf being free'd twice. An error in ASN1_STRING_to_UTF8() can be
  caused remotely if the peer can make the local process run out of
  memory. [bsc#1044947, CVE-2017-7521]
- 0004-Prevent-two-kinds-of-stack-buffer-OOB-reads-and-a-cr.patch:
  If clients use a HTTP proxy with NTLM authentication, a
  man-in-the-middle attacker between the client and the proxy can
  cause the client to crash or disclose at most 96 bytes of stack
  memory. The disclosed stack memory is likely to contain the proxy
  password. If the proxy password is not reused, this is unlikely
  to compromise the security of the OpenVPN tunnel itself. Clients
  who do not use the --http-proxy option with ntlm2 authentication
  are not affected. [bsc#1044947, CVE-2017-7520]
- 0005-Fix-remotely-triggerable-ASSERT-on-malformed-IPv6-pa.patch:
  Correct sanity checks on IPv6 packet length in mss_fixup_ipv6(),
  and change the ASSERT() check in mss_fixup_dowork() into a simple
  "return" (= the TCP header will simply not be inspected further).
  This can be used to remotely shutdown an openvpn server or
  client, if IPv6 and --mssfix are enabled and the IPv6 networks
  used inside the VPN are known. [bsc#1044947, CVE-2017-7508]</changelog>
<changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0012-Fix-bounds-check-in-read_key.patch]</changelog>

</package>
<package pkgid="72e6a867aa3f3ed457faf7c5553f0e496ac3c67034cfe5bbbb09a79dbc7d8d50" name="openvpn-auth-pam-plugin" arch="x86_64">
    <version epoch="0" ver="2.3.8" rel="14.1"/>

<changelog author="aj@suse.com" date="1364299200">- Remove _unitdir definition, it is provided by systemd.
- Install service file without x permissions</changelog>
<changelog author="mt@suse.de" date="1366718400">- Fixed to enable systemd support in configure
- Fixed openvpn-tmpfile.conf to use GID root, there is no openvpn group.
- Added openvpn.target file allowing to handle all instances at once.
- Fixed to install the service template correctly as openvpn@.service.
  Use "systemctl enable openvpn@foo.service" to enable instance using
  /etc/openvpn/foo.conf.
- Disabled systemd variant of restart on update rpm macro, adopted other
  macros to use openvpn.target to e.g. stop all instances on uninstall.</changelog>
<changelog author="mt@suse.de" date="1367841600">- Try to migrate openvpn.service autostart to openvpn@&lt;CONF&gt;.service
  instance enablement.</changelog>
<changelog author="mrdocs@opensuse.org" date="1370347200">- Update to 2.3.2
  +Fixes since 2.3.0
- Remove dead code path and putenv functionality
- Remove unused function xor
- Move static prototype definition from header into c file
- Remove unused function no_tap_ifconfig
- fix build with automake 1.13(.1)
- Fix corner case in NTLM authentication (trac #172)
- Update README.IPv6 to match what is in 2.3.0
- Repair "tcp server queue overflow" brokenness, more &lt;stdbool.h&gt; fallout.
- Permit pool size of /64.../112 for ifconfig-ipv6-pool
- Add MIN() compatibility macro
- Fix directly connected routes for "topology subnet" on Solaris.
- close more file descriptors on exec
- Ignore UTF-8 byte order mark
- reintroduce --no-name-remapping option
- make --tls-remote compatible with pre 2.3 configs
- add new option for X.509 name verification
- add man page patch for missing options
- Fix parameter listing in non-debug builds at verb 4
- (updated) [PATCH] Warn when using verb levels &gt;=7 without debug
- Enable TCP_NODELAY configuration on FreeBSD.
- Updated README
- Cleaned up and updated INSTALL
- PolarSSL-1.2 support
- Improve PolarSSL key_state_read_{cipher, plain}text messages
- Improve verify_callback messages
- Config compatibility patch. Added translate_cipher_name.
- Switch to IANA names for TLS ciphers.
- Fixed autoconf script to properly detect missing pkcs11 with polarssl.
- Use constant time memcmp when comparing HMACs in openvpn_decrypt.</changelog>
<changelog author="lmuelle@suse.com" date="1377604800">- Add a section about how to control all or a named configuration with the
  help of systemctl to the README.SUSE file.</changelog>
<changelog author="mt@suse.de" date="1383220800">- Fixed invalid mode in exec bit removal call from doc files</changelog>
<changelog author="mt@suse.de" date="1387281600">- Readded rcopenvpn helper script under systemd (bnc#848070)</changelog>
<changelog author="meissner@suse.com" date="1389268800">- openvpn-fips140-2.3.2.patch: Allow usage of SHA1 instead of MD5 in
  some internal checking routines. This allows operation in FIPS 140-2
  mode.</changelog>
<changelog author="mt@suse.de" date="1389700800">- Updated README.SUSE, documented also the rcopenvpn compatibility
  wrapper script (bnc#848070).</changelog>
<changelog author="mt@suse.de" date="1417435200">- Applied upstream patch fixing a denial-of-service vulnerability
  where an authenticated client could stop the server by triggering
  a server-side ASSERT (bnc#907764,CVE-2014-8104),
  [+ 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch]</changelog>
<changelog author="mt@suse.de" date="1435838400">- Fixed to use correct sha digest data length and in fips mode,
  use aes instead of the disallowed blowfish crypto (boo#914166).
- Fixed to mention actual plugin/doc dirs in openvpn(8) man page.
- Fixed to build with large file support on 32 bit systems.
- Fixed to use _rundir instead _localstatedir/run when defined
- Depend on systemd-devel for the daemon check functionality,
  removed obsolete --with-lzo-headers configure option.
- Applied backport patch to permit TLS 1.1/1.2 version negotiation
  instead to stick at TLS 1.0 (bsc#928802)</changelog>
<changelog author="idonmez@suse.com" date="1438776000">- Update to version 2.3.8
  * Report missing endtags of inline files as warnings
  * Fix commit e473b7c if an inline file happens to have a
    line break exactly at buffer limit
  * Produce a meaningful error message if --daemon gets in the way of
    asking for passwords.
  * Document --daemon changes and consequences (--askpass, --auth-nocache)
  * Del ipv6 addr on close of linux tun interface
  * Fix --askpass not allowing for password input via stdin
  * Write pid file immediately after daemonizing
  * Fix regression: query password before becoming daemon
  * Fix using management interface to get passwords
  * Fix overflow check in openvpn_decrypt()
- Update to version 2.3.7
  * down-root plugin: Replaced system() calls with execve()
  * sockets: Remove the limitation of --tcp-nodelay to be server-only
  * pkcs11: Load p11-kit-proxy.so module by default
  * New approach to handle peer-id related changes to link-mtu
  * Fix incorrect use of get_ipv6_addr() for iroute options
  * Print helpful error message on --mktun/--rmtun if not available
  * Explain effect of --topology subnet on --ifconfig
  * Add note about file permissions and --crl-verify to manpage
  * Repair --dev null breakage caused by db950be85d37
  * Correct note about DNS randomization in openvpn.8
  * Disallow usage of --server-poll-timeout in --secret key mode
  * Slightly enhance documentation about --cipher
  * On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo()
  * Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo()
  * Fix --redirect-private in --dev tap mode
  * Updated manpage for --rport and --lport
  * Properly escape dashes on the man-page
  * Improve documentation in --script-security section of the man-page
  * Really fix '--cipher none' regression
  * Set tls-version-max to 1.1 if cryptoapicert is used
  * Account for peer-id in frame size calculation
  * Disable SSL compression
  * Fix frame size calculation for non-CBC modes.
  * Allow for CN/username of 64 characters (fixes off-by-one)
  * Re-enable TLS version negotiation by default
  * Remove size limit for files inlined in config
  * Improve --tls-cipher and --show-tls man page description
  * Re-read auth-user-pass file on (re)connect if required
  * Clarify --capath option in manpage
  * Call daemon() before initializing crypto library</changelog>
<changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
<changelog author="mt@suse.com" date="1440072000">- Update to most recent openvpn package in version 2.3.8 (fate#319011)
  which obsoletes our security fix backports and provides many fixes.
  [- 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch,
  - openvpn-use-newertls.patch, + revert-daemonize.patch]
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
<changelog author="ndas@suse.de" date="1455105600">- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
<changelog author="ndas@suse.de" date="1492689600">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]</changelog>
<changelog author="ndas@suse.de" date="1492776000">- Use FIPS approved cipher for our sample configuration file(bsc#988522).
  [+0002-openvpn-fips140-AES-cipher-in-config-template.patch]</changelog>
<changelog author="ndas@suse.de" date="1495195200">- Show which ciphers should no longer be used in openvpn --show-ciphers
  bsc#995374(CVE-2016-6329)
  [+0006-Discourage-using-64-bit-block-ciphers.patch]
- Apply fixes for bsc#1038713, bsc#1038709, CVE-2017-7478, bsc#1038711, CVE-2017-7479
  [+ 0003-cleanup-merge-packet_id_alloc_outgoing-into-packet_i.patch,
  + 0004-Drop-packets-instead-of-assert-out-if-packet-id-roll.patch,
  + 0005-Don-t-assert-out-on-receiving-too-large-control-pack.patch]</changelog>
<changelog author="psimons@suse.com" date="1497960000">- 0001-Fix-remote-triggerable-memory-leaks-CVE-2017-7521.patch:
  Several OpenSSL-specific certificate-parsing code paths did not
  always clear all allocated memory. Since a client can cause a few
  bytes of memory to be leaked for each connection attempt, a
  client can cause a server to run out of memory and thereby kill
  the server. That makes this a (quite inefficient) DoS attack.
  [bsc#1044947, CVE-2017-7521]
- 0002-Restrict-x509-alt-username-extension-types.patch: The code
  never supported all --x509-alt-username extension types. Make
  this explicit by only allowing subjectAltName and issuerAltName
  (for which the current code does work). Using unsupported
  extension fields would most likely cause OpenVPN to crash as soon
  as a client connects. This does not have a real-world security
  impact, as such a configuration would not be possible to use in
  practice. [bsc#1044947]
- 0003-Fix-potential-double-free-in-x509-alt-username-CVE-2.patch:
  We didn't check the return value of ASN1_STRING_to_UTF8() in
  extract_x509_extension(). Ignoring such a failure could result in
  buf being free'd twice. An error in ASN1_STRING_to_UTF8() can be
  caused remotely if the peer can make the local process run out of
  memory. [bsc#1044947, CVE-2017-7521]
- 0004-Prevent-two-kinds-of-stack-buffer-OOB-reads-and-a-cr.patch:
  If clients use a HTTP proxy with NTLM authentication, a
  man-in-the-middle attacker between the client and the proxy can
  cause the client to crash or disclose at most 96 bytes of stack
  memory. The disclosed stack memory is likely to contain the proxy
  password. If the proxy password is not reused, this is unlikely
  to compromise the security of the OpenVPN tunnel itself. Clients
  who do not use the --http-proxy option with ntlm2 authentication
  are not affected. [bsc#1044947, CVE-2017-7520]
- 0005-Fix-remotely-triggerable-ASSERT-on-malformed-IPv6-pa.patch:
  Correct sanity checks on IPv6 packet length in mss_fixup_ipv6(),
  and change the ASSERT() check in mss_fixup_dowork() into a simple
  "return" (= the TCP header will simply not be inspected further).
  This can be used to remotely shutdown an openvpn server or
  client, if IPv6 and --mssfix are enabled and the IPv6 networks
  used inside the VPN are known. [bsc#1044947, CVE-2017-7508]</changelog>
<changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0012-Fix-bounds-check-in-read_key.patch]</changelog>

</package>
<package pkgid="8ec65cb7f23449f2225b08b4f47e15b963706499637861ddf521d0152d485ba3" name="openvpn-devel" arch="x86_64">
    <version epoch="0" ver="2.3.8" rel="14.1"/>

<changelog author="aj@suse.com" date="1364299200">- Remove _unitdir definition, it is provided by systemd.
- Install service file without x permissions</changelog>
<changelog author="mt@suse.de" date="1366718400">- Fixed to enable systemd support in configure
- Fixed openvpn-tmpfile.conf to use GID root, there is no openvpn group.
- Added openvpn.target file allowing to handle all instances at once.
- Fixed to install the service template correctly as openvpn@.service.
  Use "systemctl enable openvpn@foo.service" to enable instance using
  /etc/openvpn/foo.conf.
- Disabled systemd variant of restart on update rpm macro, adopted other
  macros to use openvpn.target to e.g. stop all instances on uninstall.</changelog>
<changelog author="mt@suse.de" date="1367841600">- Try to migrate openvpn.service autostart to openvpn@&lt;CONF&gt;.service
  instance enablement.</changelog>
<changelog author="mrdocs@opensuse.org" date="1370347200">- Update to 2.3.2
  +Fixes since 2.3.0
- Remove dead code path and putenv functionality
- Remove unused function xor
- Move static prototype definition from header into c file
- Remove unused function no_tap_ifconfig
- fix build with automake 1.13(.1)
- Fix corner case in NTLM authentication (trac #172)
- Update README.IPv6 to match what is in 2.3.0
- Repair "tcp server queue overflow" brokenness, more &lt;stdbool.h&gt; fallout.
- Permit pool size of /64.../112 for ifconfig-ipv6-pool
- Add MIN() compatibility macro
- Fix directly connected routes for "topology subnet" on Solaris.
- close more file descriptors on exec
- Ignore UTF-8 byte order mark
- reintroduce --no-name-remapping option
- make --tls-remote compatible with pre 2.3 configs
- add new option for X.509 name verification
- add man page patch for missing options
- Fix parameter listing in non-debug builds at verb 4
- (updated) [PATCH] Warn when using verb levels &gt;=7 without debug
- Enable TCP_NODELAY configuration on FreeBSD.
- Updated README
- Cleaned up and updated INSTALL
- PolarSSL-1.2 support
- Improve PolarSSL key_state_read_{cipher, plain}text messages
- Improve verify_callback messages
- Config compatibility patch. Added translate_cipher_name.
- Switch to IANA names for TLS ciphers.
- Fixed autoconf script to properly detect missing pkcs11 with polarssl.
- Use constant time memcmp when comparing HMACs in openvpn_decrypt.</changelog>
<changelog author="lmuelle@suse.com" date="1377604800">- Add a section about how to control all or a named configuration with the
  help of systemctl to the README.SUSE file.</changelog>
<changelog author="mt@suse.de" date="1383220800">- Fixed invalid mode in exec bit removal call from doc files</changelog>
<changelog author="mt@suse.de" date="1387281600">- Readded rcopenvpn helper script under systemd (bnc#848070)</changelog>
<changelog author="meissner@suse.com" date="1389268800">- openvpn-fips140-2.3.2.patch: Allow usage of SHA1 instead of MD5 in
  some internal checking routines. This allows operation in FIPS 140-2
  mode.</changelog>
<changelog author="mt@suse.de" date="1389700800">- Updated README.SUSE, documented also the rcopenvpn compatibility
  wrapper script (bnc#848070).</changelog>
<changelog author="mt@suse.de" date="1417435200">- Applied upstream patch fixing a denial-of-service vulnerability
  where an authenticated client could stop the server by triggering
  a server-side ASSERT (bnc#907764,CVE-2014-8104),
  [+ 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch]</changelog>
<changelog author="mt@suse.de" date="1435838400">- Fixed to use correct sha digest data length and in fips mode,
  use aes instead of the disallowed blowfish crypto (boo#914166).
- Fixed to mention actual plugin/doc dirs in openvpn(8) man page.
- Fixed to build with large file support on 32 bit systems.
- Fixed to use _rundir instead _localstatedir/run when defined
- Depend on systemd-devel for the daemon check functionality,
  removed obsolete --with-lzo-headers configure option.
- Applied backport patch to permit TLS 1.1/1.2 version negotiation
  instead to stick at TLS 1.0 (bsc#928802)</changelog>
<changelog author="idonmez@suse.com" date="1438776000">- Update to version 2.3.8
  * Report missing endtags of inline files as warnings
  * Fix commit e473b7c if an inline file happens to have a
    line break exactly at buffer limit
  * Produce a meaningful error message if --daemon gets in the way of
    asking for passwords.
  * Document --daemon changes and consequences (--askpass, --auth-nocache)
  * Del ipv6 addr on close of linux tun interface
  * Fix --askpass not allowing for password input via stdin
  * Write pid file immediately after daemonizing
  * Fix regression: query password before becoming daemon
  * Fix using management interface to get passwords
  * Fix overflow check in openvpn_decrypt()
- Update to version 2.3.7
  * down-root plugin: Replaced system() calls with execve()
  * sockets: Remove the limitation of --tcp-nodelay to be server-only
  * pkcs11: Load p11-kit-proxy.so module by default
  * New approach to handle peer-id related changes to link-mtu
  * Fix incorrect use of get_ipv6_addr() for iroute options
  * Print helpful error message on --mktun/--rmtun if not available
  * Explain effect of --topology subnet on --ifconfig
  * Add note about file permissions and --crl-verify to manpage
  * Repair --dev null breakage caused by db950be85d37
  * Correct note about DNS randomization in openvpn.8
  * Disallow usage of --server-poll-timeout in --secret key mode
  * Slightly enhance documentation about --cipher
  * On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo()
  * Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo()
  * Fix --redirect-private in --dev tap mode
  * Updated manpage for --rport and --lport
  * Properly escape dashes on the man-page
  * Improve documentation in --script-security section of the man-page
  * Really fix '--cipher none' regression
  * Set tls-version-max to 1.1 if cryptoapicert is used
  * Account for peer-id in frame size calculation
  * Disable SSL compression
  * Fix frame size calculation for non-CBC modes.
  * Allow for CN/username of 64 characters (fixes off-by-one)
  * Re-enable TLS version negotiation by default
  * Remove size limit for files inlined in config
  * Improve --tls-cipher and --show-tls man page description
  * Re-read auth-user-pass file on (re)connect if required
  * Clarify --capath option in manpage
  * Call daemon() before initializing crypto library</changelog>
<changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
<changelog author="mt@suse.com" date="1440072000">- Update to most recent openvpn package in version 2.3.8 (fate#319011)
  which obsoletes our security fix backports and provides many fixes.
  [- 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch,
  - openvpn-use-newertls.patch, + revert-daemonize.patch]
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
<changelog author="ndas@suse.de" date="1455105600">- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
<changelog author="ndas@suse.de" date="1492689600">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]</changelog>
<changelog author="ndas@suse.de" date="1492776000">- Use FIPS approved cipher for our sample configuration file(bsc#988522).
  [+0002-openvpn-fips140-AES-cipher-in-config-template.patch]</changelog>
<changelog author="ndas@suse.de" date="1495195200">- Show which ciphers should no longer be used in openvpn --show-ciphers
  bsc#995374(CVE-2016-6329)
  [+0006-Discourage-using-64-bit-block-ciphers.patch]
- Apply fixes for bsc#1038713, bsc#1038709, CVE-2017-7478, bsc#1038711, CVE-2017-7479
  [+ 0003-cleanup-merge-packet_id_alloc_outgoing-into-packet_i.patch,
  + 0004-Drop-packets-instead-of-assert-out-if-packet-id-roll.patch,
  + 0005-Don-t-assert-out-on-receiving-too-large-control-pack.patch]</changelog>
<changelog author="psimons@suse.com" date="1497960000">- 0001-Fix-remote-triggerable-memory-leaks-CVE-2017-7521.patch:
  Several OpenSSL-specific certificate-parsing code paths did not
  always clear all allocated memory. Since a client can cause a few
  bytes of memory to be leaked for each connection attempt, a
  client can cause a server to run out of memory and thereby kill
  the server. That makes this a (quite inefficient) DoS attack.
  [bsc#1044947, CVE-2017-7521]
- 0002-Restrict-x509-alt-username-extension-types.patch: The code
  never supported all --x509-alt-username extension types. Make
  this explicit by only allowing subjectAltName and issuerAltName
  (for which the current code does work). Using unsupported
  extension fields would most likely cause OpenVPN to crash as soon
  as a client connects. This does not have a real-world security
  impact, as such a configuration would not be possible to use in
  practice. [bsc#1044947]
- 0003-Fix-potential-double-free-in-x509-alt-username-CVE-2.patch:
  We didn't check the return value of ASN1_STRING_to_UTF8() in
  extract_x509_extension(). Ignoring such a failure could result in
  buf being free'd twice. An error in ASN1_STRING_to_UTF8() can be
  caused remotely if the peer can make the local process run out of
  memory. [bsc#1044947, CVE-2017-7521]
- 0004-Prevent-two-kinds-of-stack-buffer-OOB-reads-and-a-cr.patch:
  If clients use a HTTP proxy with NTLM authentication, a
  man-in-the-middle attacker between the client and the proxy can
  cause the client to crash or disclose at most 96 bytes of stack
  memory. The disclosed stack memory is likely to contain the proxy
  password. If the proxy password is not reused, this is unlikely
  to compromise the security of the OpenVPN tunnel itself. Clients
  who do not use the --http-proxy option with ntlm2 authentication
  are not affected. [bsc#1044947, CVE-2017-7520]
- 0005-Fix-remotely-triggerable-ASSERT-on-malformed-IPv6-pa.patch:
  Correct sanity checks on IPv6 packet length in mss_fixup_ipv6(),
  and change the ASSERT() check in mss_fixup_dowork() into a simple
  "return" (= the TCP header will simply not be inspected further).
  This can be used to remotely shutdown an openvpn server or
  client, if IPv6 and --mssfix are enabled and the IPv6 networks
  used inside the VPN are known. [bsc#1044947, CVE-2017-7508]</changelog>
<changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0012-Fix-bounds-check-in-read_key.patch]</changelog>

</package>
<package pkgid="83e3eb930262eb263ab27c0578475fc01436b6d2647412a29f305d3b86f66760" name="openvpn-down-root-plugin" arch="x86_64">
    <version epoch="0" ver="2.3.8" rel="14.1"/>

<changelog author="aj@suse.com" date="1364299200">- Remove _unitdir definition, it is provided by systemd.
- Install service file without x permissions</changelog>
<changelog author="mt@suse.de" date="1366718400">- Fixed to enable systemd support in configure
- Fixed openvpn-tmpfile.conf to use GID root, there is no openvpn group.
- Added openvpn.target file allowing to handle all instances at once.
- Fixed to install the service template correctly as openvpn@.service.
  Use "systemctl enable openvpn@foo.service" to enable instance using
  /etc/openvpn/foo.conf.
- Disabled systemd variant of restart on update rpm macro, adopted other
  macros to use openvpn.target to e.g. stop all instances on uninstall.</changelog>
<changelog author="mt@suse.de" date="1367841600">- Try to migrate openvpn.service autostart to openvpn@&lt;CONF&gt;.service
  instance enablement.</changelog>
<changelog author="mrdocs@opensuse.org" date="1370347200">- Update to 2.3.2
  +Fixes since 2.3.0
- Remove dead code path and putenv functionality
- Remove unused function xor
- Move static prototype definition from header into c file
- Remove unused function no_tap_ifconfig
- fix build with automake 1.13(.1)
- Fix corner case in NTLM authentication (trac #172)
- Update README.IPv6 to match what is in 2.3.0
- Repair "tcp server queue overflow" brokenness, more &lt;stdbool.h&gt; fallout.
- Permit pool size of /64.../112 for ifconfig-ipv6-pool
- Add MIN() compatibility macro
- Fix directly connected routes for "topology subnet" on Solaris.
- close more file descriptors on exec
- Ignore UTF-8 byte order mark
- reintroduce --no-name-remapping option
- make --tls-remote compatible with pre 2.3 configs
- add new option for X.509 name verification
- add man page patch for missing options
- Fix parameter listing in non-debug builds at verb 4
- (updated) [PATCH] Warn when using verb levels &gt;=7 without debug
- Enable TCP_NODELAY configuration on FreeBSD.
- Updated README
- Cleaned up and updated INSTALL
- PolarSSL-1.2 support
- Improve PolarSSL key_state_read_{cipher, plain}text messages
- Improve verify_callback messages
- Config compatibility patch. Added translate_cipher_name.
- Switch to IANA names for TLS ciphers.
- Fixed autoconf script to properly detect missing pkcs11 with polarssl.
- Use constant time memcmp when comparing HMACs in openvpn_decrypt.</changelog>
<changelog author="lmuelle@suse.com" date="1377604800">- Add a section about how to control all or a named configuration with the
  help of systemctl to the README.SUSE file.</changelog>
<changelog author="mt@suse.de" date="1383220800">- Fixed invalid mode in exec bit removal call from doc files</changelog>
<changelog author="mt@suse.de" date="1387281600">- Readded rcopenvpn helper script under systemd (bnc#848070)</changelog>
<changelog author="meissner@suse.com" date="1389268800">- openvpn-fips140-2.3.2.patch: Allow usage of SHA1 instead of MD5 in
  some internal checking routines. This allows operation in FIPS 140-2
  mode.</changelog>
<changelog author="mt@suse.de" date="1389700800">- Updated README.SUSE, documented also the rcopenvpn compatibility
  wrapper script (bnc#848070).</changelog>
<changelog author="mt@suse.de" date="1417435200">- Applied upstream patch fixing a denial-of-service vulnerability
  where an authenticated client could stop the server by triggering
  a server-side ASSERT (bnc#907764,CVE-2014-8104),
  [+ 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch]</changelog>
<changelog author="mt@suse.de" date="1435838400">- Fixed to use correct sha digest data length and in fips mode,
  use aes instead of the disallowed blowfish crypto (boo#914166).
- Fixed to mention actual plugin/doc dirs in openvpn(8) man page.
- Fixed to build with large file support on 32 bit systems.
- Fixed to use _rundir instead _localstatedir/run when defined
- Depend on systemd-devel for the daemon check functionality,
  removed obsolete --with-lzo-headers configure option.
- Applied backport patch to permit TLS 1.1/1.2 version negotiation
  instead to stick at TLS 1.0 (bsc#928802)</changelog>
<changelog author="idonmez@suse.com" date="1438776000">- Update to version 2.3.8
  * Report missing endtags of inline files as warnings
  * Fix commit e473b7c if an inline file happens to have a
    line break exactly at buffer limit
  * Produce a meaningful error message if --daemon gets in the way of
    asking for passwords.
  * Document --daemon changes and consequences (--askpass, --auth-nocache)
  * Del ipv6 addr on close of linux tun interface
  * Fix --askpass not allowing for password input via stdin
  * Write pid file immediately after daemonizing
  * Fix regression: query password before becoming daemon
  * Fix using management interface to get passwords
  * Fix overflow check in openvpn_decrypt()
- Update to version 2.3.7
  * down-root plugin: Replaced system() calls with execve()
  * sockets: Remove the limitation of --tcp-nodelay to be server-only
  * pkcs11: Load p11-kit-proxy.so module by default
  * New approach to handle peer-id related changes to link-mtu
  * Fix incorrect use of get_ipv6_addr() for iroute options
  * Print helpful error message on --mktun/--rmtun if not available
  * Explain effect of --topology subnet on --ifconfig
  * Add note about file permissions and --crl-verify to manpage
  * Repair --dev null breakage caused by db950be85d37
  * Correct note about DNS randomization in openvpn.8
  * Disallow usage of --server-poll-timeout in --secret key mode
  * Slightly enhance documentation about --cipher
  * On signal reception, return EAI_SYSTEM from openvpn_getaddrinfo()
  * Use EAI_AGAIN instead of EAI_SYSTEM for openvpn_getaddrinfo()
  * Fix --redirect-private in --dev tap mode
  * Updated manpage for --rport and --lport
  * Properly escape dashes on the man-page
  * Improve documentation in --script-security section of the man-page
  * Really fix '--cipher none' regression
  * Set tls-version-max to 1.1 if cryptoapicert is used
  * Account for peer-id in frame size calculation
  * Disable SSL compression
  * Fix frame size calculation for non-CBC modes.
  * Allow for CN/username of 64 characters (fixes off-by-one)
  * Re-enable TLS version negotiation by default
  * Remove size limit for files inlined in config
  * Improve --tls-cipher and --show-tls man page description
  * Re-read auth-user-pass file on (re)connect if required
  * Clarify --capath option in manpage
  * Call daemon() before initializing crypto library</changelog>
<changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
<changelog author="mt@suse.com" date="1440072000">- Update to most recent openvpn package in version 2.3.8 (fate#319011)
  which obsoletes our security fix backports and provides many fixes.
  [- 0007-Drop-too-short-control-channel-packets.CVE-2014-8104.patch,
  - openvpn-use-newertls.patch, + revert-daemonize.patch]
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
<changelog author="ndas@suse.de" date="1455105600">- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
<changelog author="ndas@suse.de" date="1492689600">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]</changelog>
<changelog author="ndas@suse.de" date="1492776000">- Use FIPS approved cipher for our sample configuration file(bsc#988522).
  [+0002-openvpn-fips140-AES-cipher-in-config-template.patch]</changelog>
<changelog author="ndas@suse.de" date="1495195200">- Show which ciphers should no longer be used in openvpn --show-ciphers
  bsc#995374(CVE-2016-6329)
  [+0006-Discourage-using-64-bit-block-ciphers.patch]
- Apply fixes for bsc#1038713, bsc#1038709, CVE-2017-7478, bsc#1038711, CVE-2017-7479
  [+ 0003-cleanup-merge-packet_id_alloc_outgoing-into-packet_i.patch,
  + 0004-Drop-packets-instead-of-assert-out-if-packet-id-roll.patch,
  + 0005-Don-t-assert-out-on-receiving-too-large-control-pack.patch]</changelog>
<changelog author="psimons@suse.com" date="1497960000">- 0001-Fix-remote-triggerable-memory-leaks-CVE-2017-7521.patch:
  Several OpenSSL-specific certificate-parsing code paths did not
  always clear all allocated memory. Since a client can cause a few
  bytes of memory to be leaked for each connection attempt, a
  client can cause a server to run out of memory and thereby kill
  the server. That makes this a (quite inefficient) DoS attack.
  [bsc#1044947, CVE-2017-7521]
- 0002-Restrict-x509-alt-username-extension-types.patch: The code
  never supported all --x509-alt-username extension types. Make
  this explicit by only allowing subjectAltName and issuerAltName
  (for which the current code does work). Using unsupported
  extension fields would most likely cause OpenVPN to crash as soon
  as a client connects. This does not have a real-world security
  impact, as such a configuration would not be possible to use in
  practice. [bsc#1044947]
- 0003-Fix-potential-double-free-in-x509-alt-username-CVE-2.patch:
  We didn't check the return value of ASN1_STRING_to_UTF8() in
  extract_x509_extension(). Ignoring such a failure could result in
  buf being free'd twice. An error in ASN1_STRING_to_UTF8() can be
  caused remotely if the peer can make the local process run out of
  memory. [bsc#1044947, CVE-2017-7521]
- 0004-Prevent-two-kinds-of-stack-buffer-OOB-reads-and-a-cr.patch:
  If clients use a HTTP proxy with NTLM authentication, a
  man-in-the-middle attacker between the client and the proxy can
  cause the client to crash or disclose at most 96 bytes of stack
  memory. The disclosed stack memory is likely to contain the proxy
  password. If the proxy password is not reused, this is unlikely
  to compromise the security of the OpenVPN tunnel itself. Clients
  who do not use the --http-proxy option with ntlm2 authentication
  are not affected. [bsc#1044947, CVE-2017-7520]
- 0005-Fix-remotely-triggerable-ASSERT-on-malformed-IPv6-pa.patch:
  Correct sanity checks on IPv6 packet length in mss_fixup_ipv6(),
  and change the ASSERT() check in mss_fixup_dowork() into a simple
  "return" (= the TCP header will simply not be inspected further).
  This can be used to remotely shutdown an openvpn server or
  client, if IPv6 and --mssfix are enabled and the IPv6 networks
  used inside the VPN are known. [bsc#1044947, CVE-2017-7508]</changelog>
<changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0012-Fix-bounds-check-in-read_key.patch]</changelog>

</package>
<package pkgid="c764b6dc8f7dbf6ee3f64b2d570a72239724ca551b2b265bf2c12bd8e31feb5c" name="openvswitch" arch="src">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="dab6ee913e688b45d0da64f831f70055cb2be0ac6b5b77f1443854186dfccb33" name="openvswitch" arch="src">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="6f81c898d7b9b1f4219fdfb952c8a580c0372e9c672e943bbf359f9379e92284" name="openvswitch" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="9aac7e54d23626993515f7b48328ce1f035c204365de23e41f37099f23a12e0b" name="openvswitch" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="415025c67136ca75bb29173542d609e14ed00f5eee6c52b57d99511e3656a26c" name="openvswitch-devel" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="3e7f6b6a0e799e5b5951f2761f5ab5d2c81e42b8b15f6424096e26b9c4070a52" name="openvswitch-devel" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="9be67999e910cd36cf48bbf54322142d5e248ff85e45535bb4119a13a07560dd" name="openvswitch-ovn-central" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="295898067ff47d3dba4221c13426a2feed6886bcfee763e6cf52d0bfed2251df" name="openvswitch-ovn-central" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="d6a39cc7dcd9d01ec80369f95a253ac4ae268ad08b6e787090962619cf2a6758" name="openvswitch-ovn-common" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="98982ba0949f2ffd13f4ad5709ee552c66bccd101ce6d8981baf8104fbb251d2" name="openvswitch-ovn-common" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="b0eaa1b36ac529b03d84102d4e19dce79e14a17b17e5c73e2ad635046f4ef623" name="openvswitch-ovn-docker" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="f5197a819306a305bd0c1cc32dd59987f51b9480e9a50b2a4b3b8f7142742a27" name="openvswitch-ovn-docker" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="1fe712414fd0775f1ef89a3e3d7b08c6118a5deb6ba79d311f5dc755bbb922d0" name="openvswitch-ovn-host" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="cb161b9a9ada07169590c1fa406502c8dcb298e26308cb631cb5616988d40b6e" name="openvswitch-ovn-host" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="4a1d857f30f59ed7b2c4ef0d4f9889a263c46ee86b5b14092d5ccdb1a5ac3e69" name="openvswitch-ovn-vtep" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="c423cace4a1dacd7d9764418f829483e916b1258610be6294d18db1f59b456e0" name="openvswitch-ovn-vtep" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="bd5e2828a57376daa1a76f5e85d7a5f13df927b87173091485ae9bfd742c1d61" name="openvswitch-pki" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="e666cffb941e0148bbf4b9f6a0823a5519e556af1a4c6e6afa30c37245659f58" name="openvswitch-pki" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="b6b9536d61c0c9da27ece49304be18c927da2cf5b092cabc54e92b80b811d710" name="openvswitch-test" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="0141d6f53c84bc76d4b7e976e51dd916454bd974b5fac83f1a58f7fa81fdd872" name="openvswitch-test" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="425390b54a3bbbeb2b78f8396df01c2626c709242dc6be512b0353da7c33d632" name="openvswitch-vtep" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="6c3b0bd12b04d034c11d68e18727f92c82b1dae8789a94607b5b66647fb309ac" name="openvswitch-vtep" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="9270a9d0e5c020410b5d69ccc214b858e851241fc242fe67ed812f5863a0f5f4" name="optipng" arch="src">
    <version epoch="0" ver="0.7.5" rel="14.1"/>

<changelog author="pgajdos@suse.cz" date="1214308800">- updated to version 0.6:
  * Implemented grayscale(alpha)-to-palette reductions.
  * Improved conversion of bKGD info during RGB-to-palette reductions.
  * Fixed conversion of bKGD and tRNS during 16-to-8-bit reductions.
  * Added support for compressed BMP (incl. PNG-compressed BMP)
  * Improved the speed of reading raw PNM files.
  * Recognized PNG digital signatures (dSIG) and disabled optimization
    in their presence, to preserve their integrity.
  * Allowed the user to enforce the optimization of dSIG'ed files.
  * Recognized APNG animation files and disabled reductions to preserve
    their integrity.
  * Added the -snip option, to allow the user to "snip" one image out of
    a multi-image file, such as animated GIF, multi-page TIFF, or APNG.
  * Improved recovery of PNG files with incomplete IDAT.
  * Fixed a crash triggered by the use of -log on some platforms.
  * Fixed behavior of -out and -dir when the input is already optimized.
  * Provided more detailed image information at the start of processing.
  * Provided a more detailed summary at the end of processing, under the
    presence of the -v option and/or the occurence of exceptional events.
- added optipng-0.6.0.1.diff from upstream (building with system libs)</changelog>
<changelog author="pgajdos@suse.cz" date="1217505600">- updated to version 0.6.1:
  * Upgraded cexcept to version 2.0.1.
  + Added a configure script, to be used instead of unix-secure.mak.
  ! Fixed a build issue that occured when using libpng from the system.
  ! Fixed processing when image reduction yields an output larger than
  the original.
  ! Fixed behavior of -preserve.
  - Removed displaying of partial progress when abandoning IDATs under
  the -v option.  The percentages displayed were not very accurate.</changelog>
<changelog author="pgajdos@suse.cz" date="1228219200">- fixes [bnc#447453] - optipng bmp buffer overflow
  CVE-2008-5101.patch</changelog>
<changelog author="pgajdos@suse.cz" date="1231848000">- update to 0.6.2
  * fixes CVE-2008-5101, patch removed`</changelog>
<changelog author="pgajdos@suse.cz" date="1235476800">- fixed security bug: memory reallocation vulnerability [bnc#479067]
  * reallocation-security.diff</changelog>
<changelog author="meissner@suse.de" date="1236168000">- build with RPM_OPT_FLAGS</changelog>
<changelog author="pgajdos@suse.cz" date="1242734400">- updated to 0.6.3
  * fixes memory reallocation vulnerability (patch removed)
  * fixes use-after-free vulnerability [bnc#505103]</changelog>
<changelog author="pgajdos@suse.cz" date="1270555200">- build with libpng 1.4</changelog>
<changelog author="pgajdos@suse.cz" date="1282564800">- updated to 0.6.4:
  + Added the option -nx.
  * Clarified the behavior of -nz and the relation between
  - nz and -o0.
  + Added a filesystem check (resolving normalized paths,
    symlinks, etc.) to better detect when the output overwrites
    the input.</changelog>
<changelog author="pgajdos@suse.cz" date="1299153600">- updated to 0.6.5:
  * Fixed processing of PNG files with chunks of size 0.
  * Fixed a display error in the TIFF import.
  * Improved checking of the arguments of -f, -zc, -zm and -zs.
  * Removed quirks from the rangeset option argument syntax.</changelog>
<changelog author="pgajdos@suse.com" date="1330689600">- updated to 0.7:
  + Added the popularly-requested option -strip.
  + Added the option -backup, as an alias of -keep.
  + Added the option -silent, as an alias of -quiet.
  - Deprecated the option -log.
  * Changed the activity display output from STDOUT to STDERR.
  + Allowed the option -preserve to save high-resolution timestamps
  on Unix, if the POSIX-1.2008 API is available.  This feature was
  previously available on Windows only.
  ! Fixed a minor precision error in the display of file size percents.
  ! Fixed a memory leak that occurred when reading broken GIF images.
  ! Fixed various build issues.
    (Thanks to Sebastian Pipping and Ville Skytta for the fixes.)
  * Resolved all remaining compatibility issues with libpng-1.5.
    (Thanks in part to Adam Ciarcinski for the contribution.)</changelog>
<changelog author="pgajdos@suse.com" date="1344340800">- updated to 0.7.1:
  !! Fixed a regression in the reduction of palette-encoded grayscale
    images.  This regression was introduced in version 0.7.
    (Thanks to Adam Ciarcinski for the fix.)</changelog>
<changelog author="pgajdos@suse.com" date="1348488000">- updated to 0.7.3:
  * fixed 'OptiPNG Palette Reduction Use-After-Free Vulnerability'
    [bnc#780874]</changelog>
<changelog author="pgajdos@suse.com" date="1353412800">- updated to 0.7.4:
  !! Fixed the previous fix, which failed to fix the option -fix.
  (Thanks to Gynvael Coldwind and Mateusz Jurczyk for the report.)</changelog>
<changelog author="pgajdos@suse.com" date="1360929600">- build also agains libpng16
  * libpng16.patch</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- updated to 0.7.5:
  ! Fixed various build issues with libpng-1.5 and libpng-1.6.
  * Allowed the handling of huge image files  (&gt; millions of pixels
    per row or column) to be independent of the libpng version.
  + Allowed the option -preserve to save the file ownership (UID/GID)
    on Unix.  (Thanks to Otto Kekäläinen for the suggestion.)
- removed libpng16.patch</changelog>
<changelog author="mpluskal@suse.com" date="1430136000">- Cleanup spec file with spec-clener
- Update dependencies
- Enable checks</changelog>
<changelog author="pgajdos@suse.com" date="1459857600">- security update: CVE-2016-2191 [bsc#973992]
  + optipng-CVE-2016-2191.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-1000229 [bsc#1068720]
    + optipng-CVE-2017-1000229.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-16938 [bsc#1069774]
    + optipng-CVE-2017-16938.patch</changelog>

</package>
<package pkgid="08829a97c4a05d2207f51131a6427d3791e2678db632b9536c153de5c37e228a" name="optipng" arch="x86_64">
    <version epoch="0" ver="0.7.5" rel="14.1"/>

<changelog author="meissner@suse.de" date="1236168000">- build with RPM_OPT_FLAGS</changelog>
<changelog author="pgajdos@suse.cz" date="1242734400">- updated to 0.6.3
  * fixes memory reallocation vulnerability (patch removed)
  * fixes use-after-free vulnerability [bnc#505103]</changelog>
<changelog author="pgajdos@suse.cz" date="1270555200">- build with libpng 1.4</changelog>
<changelog author="pgajdos@suse.cz" date="1282564800">- updated to 0.6.4:
  + Added the option -nx.
  * Clarified the behavior of -nz and the relation between
  - nz and -o0.
  + Added a filesystem check (resolving normalized paths,
    symlinks, etc.) to better detect when the output overwrites
    the input.</changelog>
<changelog author="pgajdos@suse.cz" date="1299153600">- updated to 0.6.5:
  * Fixed processing of PNG files with chunks of size 0.
  * Fixed a display error in the TIFF import.
  * Improved checking of the arguments of -f, -zc, -zm and -zs.
  * Removed quirks from the rangeset option argument syntax.</changelog>
<changelog author="pgajdos@suse.com" date="1330689600">- updated to 0.7:
  + Added the popularly-requested option -strip.
  + Added the option -backup, as an alias of -keep.
  + Added the option -silent, as an alias of -quiet.
  - Deprecated the option -log.
  * Changed the activity display output from STDOUT to STDERR.
  + Allowed the option -preserve to save high-resolution timestamps
  on Unix, if the POSIX-1.2008 API is available.  This feature was
  previously available on Windows only.
  ! Fixed a minor precision error in the display of file size percents.
  ! Fixed a memory leak that occurred when reading broken GIF images.
  ! Fixed various build issues.
    (Thanks to Sebastian Pipping and Ville Skytta for the fixes.)
  * Resolved all remaining compatibility issues with libpng-1.5.
    (Thanks in part to Adam Ciarcinski for the contribution.)</changelog>
<changelog author="pgajdos@suse.com" date="1344340800">- updated to 0.7.1:
  !! Fixed a regression in the reduction of palette-encoded grayscale
    images.  This regression was introduced in version 0.7.
    (Thanks to Adam Ciarcinski for the fix.)</changelog>
<changelog author="pgajdos@suse.com" date="1348488000">- updated to 0.7.3:
  * fixed 'OptiPNG Palette Reduction Use-After-Free Vulnerability'
    [bnc#780874]</changelog>
<changelog author="pgajdos@suse.com" date="1353412800">- updated to 0.7.4:
  !! Fixed the previous fix, which failed to fix the option -fix.
  (Thanks to Gynvael Coldwind and Mateusz Jurczyk for the report.)</changelog>
<changelog author="pgajdos@suse.com" date="1360929600">- build also agains libpng16
  * libpng16.patch</changelog>
<changelog author="pgajdos@suse.com" date="1396267200">- updated to 0.7.5:
  ! Fixed various build issues with libpng-1.5 and libpng-1.6.
  * Allowed the handling of huge image files  (&gt; millions of pixels
    per row or column) to be independent of the libpng version.
  + Allowed the option -preserve to save the file ownership (UID/GID)
    on Unix.  (Thanks to Otto Kekäläinen for the suggestion.)
- removed libpng16.patch</changelog>
<changelog author="mpluskal@suse.com" date="1430136000">- Cleanup spec file with spec-clener
- Update dependencies
- Enable checks</changelog>
<changelog author="pgajdos@suse.com" date="1459857600">- security update: CVE-2016-2191 [bsc#973992]
  + optipng-CVE-2016-2191.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-1000229 [bsc#1068720]
    + optipng-CVE-2017-1000229.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-16938 [bsc#1069774]
    + optipng-CVE-2017-16938.patch</changelog>

</package>
<package pkgid="269a4331573a0a6c1f30e957c75cdba59e280cbd750319468a88b0f6137f184f" name="osc" arch="noarch">
    <version epoch="0" ver="0.162.0" rel="10.1"/>

<changelog author="adrian@suse.de" date="1457092800">- 0.153.0
  - "my sr" is using the server side request collection to get right results
  - maintenance request offers to supersede old, but still open requests
  - add build --vm-telnet option for getting debug shell in KVM builds
  - add buildhistory --limit option
  OBS 2.7 only:
  - add "addchannels" and "enablechannel" commands
  - support new package instances on branching when using -N parameter
  - add --linkrev option to branch command
  - add --add-repository-block option to branch command
  - add --add-repository-rebuild option to branch command
  - add service merge command
  - add service wait command</changelog>
<changelog author="olaf@aepfle.de" date="1459512000">- Recommend powerpc32 to avoid 'osc build' failures</changelog>
<changelog author="adrian@suse.de" date="1460376000">- 0.154.0
  - support for new obs_scm services (OBS 2.7 needed)
  - show errors on branch failures again</changelog>
<changelog author="suse-tux@gmx.de" date="1465560000">- make a noarch package if suse_version &gt;= 1120 (since 1120 python
  noarch packages are supported)</changelog>
<changelog author="adrian@suse.de" date="1469793600">- 0.155.0
  - osc service runall: runs all service local, independend of the mode
    This allows to create local files even when disabled or
    just created at buildtime
  - support snapcraft.yaml build descriptions
  - "osc add" of a directory offers to create an archive for uploading it
  - support usage or preinstall images in local builds
  - revision control options for "meta prj"
  - bugfixes and documentation updates</changelog>
<changelog author="adrian@suse.de" date="1473940800">- 0.155.1
  - fixed "osc add" of new package container</changelog>
<changelog author="brownn@brocade.com" date="1477483200">- Install bash completion in the debian package</changelog>
<changelog author="marco.strigl@suse.com" date="1482148800">- 0.156.0
  - highlight scheduled jobs with dispatch problems (due to constraints)
  - allow to specify a log message in lock command
  - Add '--wipe' option to osc chroot for deleting buildroots
  - Add '--vm-memory' option to osc build
  - add --multibuild to results command for showing all packages
    of a multibuild config
  - add --multibuild-package option to results command for showing
    only one package of the multibuild config</changelog>
<changelog author="marco.strigl@suse.com" date="1488974400">- 0.157
  - add unpublish command (requires OBS 2.8)
  - add blame command (requires OBS 2.9)
  - results: show multibuild results by default
  - getbinaries: make .AppImage files executable
  - support operation in checked out package for cat/less/blame
  - add comment command
  - improved build recipe selection
  - added multibuild (-M) to commands:
    buildlog, remotebuildlog, buildinfo, build, buildhistory, jobhistory,
    rebuild, restartbuild/abortbuild, wipebinaries, getbinaries
  - add checkconstraints command
  - add workerinfo command</changelog>
<changelog author="marco.strigl@suse.com" date="1488974401">- 0.157.1
  - fix local build of kiwi images using obsrepositories://</changelog>
<changelog author="marco.strigl@suse.com" date="1490097600">- 0.157.2
  - add compat code for older apis that do not support multibuild
  - fix ssl.connection instantiation in case of old M2Crypto
  - highly experimental support for appimage
  - fix local service run for non-existent (server-side) package</changelog>
<changelog author="marco.strigl@suse.com" date="1494331200">- 0.158.0
  - cat/less/blame command: default to expand to stay in sync with checkout
  - add support for highly experimental native appimage.yml support
  - show package status when repository configuration is broken
  - add '--blame' option to osc meta command
  - try to autodetect local package when running 'osc build'
  - comment requests in interactive mode
  - fix github issue #236 (--no-cleanup not working)
  - fix wipebinaries to prevent wiping of complete repository
  - add '--build-opt' to osc build command
  - fix requests codebase to fit old obs versions</changelog>
<changelog author="adrian@suse.de" date="1500379200">- 0.159.0
  - "osc buildhistory": show build duration
  - Support builds using native Docker build descriptions
  - Support usage of pre-build containers for Docker and KIWI builds
  - "osc build -M ..": fixed behaviour of falvoured builds
  - added switch to show only issues in rdiff
  - show build duration in build history
  - allow to cat/less files from deleted packages (using -D option)
  - Allow to override man-page date</changelog>
<changelog author="adrian@suse.de" date="1500552000">- add Recommends: obs-service-obs_scm</changelog>
<changelog author="jberry@suse.com" date="1501156800">- Provide non-deprecated plugin directory and macro for plugins.</changelog>
<changelog author="adrian@suse.de" date="1506081600">- 0.160
  - support fissile build type
  - Container support for the package cache
  - Remove all untracked files during "osc clean"
  - Support the commit of a deleted, but non-existent package
  - triggerreason --multibuild-package option
  - improved status display
  - improved request listing filters</changelog>
<changelog author="marco.strigl@suse.com" date="1507118400">- add Recommends: ca-certificates to enable TLS verification
  without manually installing them. [bnc#1061500]</changelog>
<changelog author="marco.strigl@suse.com" date="1509019200">- 0.161
  - show lintlogs in interactive request review mode
  - fix potential shell injections
  - allow multiple --repo and --arch options in prjresults
  - cleanup babysitter.by
  - supersede existing requests if --yes is passed to osc sr
  - prepend request summary to diff in interactive mode
  - show issues(bugs) in interactive diff mode</changelog>
<changelog author="marco.strigl@suse.com" date="1509019201">- 0.161.1
  - Fix python 2.6 SyntaxError (multiple context expressions)</changelog>
<changelog author="adrian@suse.de" date="1511870400">- 0.162.0
  - Additional file content check with SHA256 when using OBS 2.9
  - support deb format with control.tar.xz</changelog>

</package>
<package pkgid="cbff3193f9bd955d7282e7804376dcb6c63dd8009f95da4d4649200c082b6e29" name="osc" arch="src">
    <version epoch="0" ver="0.162.0" rel="10.1"/>

<changelog author="adrian@suse.de" date="1457092800">- 0.153.0
  - "my sr" is using the server side request collection to get right results
  - maintenance request offers to supersede old, but still open requests
  - add build --vm-telnet option for getting debug shell in KVM builds
  - add buildhistory --limit option
  OBS 2.7 only:
  - add "addchannels" and "enablechannel" commands
  - support new package instances on branching when using -N parameter
  - add --linkrev option to branch command
  - add --add-repository-block option to branch command
  - add --add-repository-rebuild option to branch command
  - add service merge command
  - add service wait command</changelog>
<changelog author="olaf@aepfle.de" date="1459512000">- Recommend powerpc32 to avoid 'osc build' failures</changelog>
<changelog author="adrian@suse.de" date="1460376000">- 0.154.0
  - support for new obs_scm services (OBS 2.7 needed)
  - show errors on branch failures again</changelog>
<changelog author="suse-tux@gmx.de" date="1465560000">- make a noarch package if suse_version &gt;= 1120 (since 1120 python
  noarch packages are supported)</changelog>
<changelog author="adrian@suse.de" date="1469793600">- 0.155.0
  - osc service runall: runs all service local, independend of the mode
    This allows to create local files even when disabled or
    just created at buildtime
  - support snapcraft.yaml build descriptions
  - "osc add" of a directory offers to create an archive for uploading it
  - support usage or preinstall images in local builds
  - revision control options for "meta prj"
  - bugfixes and documentation updates</changelog>
<changelog author="adrian@suse.de" date="1473940800">- 0.155.1
  - fixed "osc add" of new package container</changelog>
<changelog author="brownn@brocade.com" date="1477483200">- Install bash completion in the debian package</changelog>
<changelog author="marco.strigl@suse.com" date="1482148800">- 0.156.0
  - highlight scheduled jobs with dispatch problems (due to constraints)
  - allow to specify a log message in lock command
  - Add '--wipe' option to osc chroot for deleting buildroots
  - Add '--vm-memory' option to osc build
  - add --multibuild to results command for showing all packages
    of a multibuild config
  - add --multibuild-package option to results command for showing
    only one package of the multibuild config</changelog>
<changelog author="marco.strigl@suse.com" date="1488974400">- 0.157
  - add unpublish command (requires OBS 2.8)
  - add blame command (requires OBS 2.9)
  - results: show multibuild results by default
  - getbinaries: make .AppImage files executable
  - support operation in checked out package for cat/less/blame
  - add comment command
  - improved build recipe selection
  - added multibuild (-M) to commands:
    buildlog, remotebuildlog, buildinfo, build, buildhistory, jobhistory,
    rebuild, restartbuild/abortbuild, wipebinaries, getbinaries
  - add checkconstraints command
  - add workerinfo command</changelog>
<changelog author="marco.strigl@suse.com" date="1488974401">- 0.157.1
  - fix local build of kiwi images using obsrepositories://</changelog>
<changelog author="marco.strigl@suse.com" date="1490097600">- 0.157.2
  - add compat code for older apis that do not support multibuild
  - fix ssl.connection instantiation in case of old M2Crypto
  - highly experimental support for appimage
  - fix local service run for non-existent (server-side) package</changelog>
<changelog author="marco.strigl@suse.com" date="1494331200">- 0.158.0
  - cat/less/blame command: default to expand to stay in sync with checkout
  - add support for highly experimental native appimage.yml support
  - show package status when repository configuration is broken
  - add '--blame' option to osc meta command
  - try to autodetect local package when running 'osc build'
  - comment requests in interactive mode
  - fix github issue #236 (--no-cleanup not working)
  - fix wipebinaries to prevent wiping of complete repository
  - add '--build-opt' to osc build command
  - fix requests codebase to fit old obs versions</changelog>
<changelog author="adrian@suse.de" date="1500379200">- 0.159.0
  - "osc buildhistory": show build duration
  - Support builds using native Docker build descriptions
  - Support usage of pre-build containers for Docker and KIWI builds
  - "osc build -M ..": fixed behaviour of falvoured builds
  - added switch to show only issues in rdiff
  - show build duration in build history
  - allow to cat/less files from deleted packages (using -D option)
  - Allow to override man-page date</changelog>
<changelog author="adrian@suse.de" date="1500552000">- add Recommends: obs-service-obs_scm</changelog>
<changelog author="jberry@suse.com" date="1501156800">- Provide non-deprecated plugin directory and macro for plugins.</changelog>
<changelog author="adrian@suse.de" date="1506081600">- 0.160
  - support fissile build type
  - Container support for the package cache
  - Remove all untracked files during "osc clean"
  - Support the commit of a deleted, but non-existent package
  - triggerreason --multibuild-package option
  - improved status display
  - improved request listing filters</changelog>
<changelog author="marco.strigl@suse.com" date="1507118400">- add Recommends: ca-certificates to enable TLS verification
  without manually installing them. [bnc#1061500]</changelog>
<changelog author="marco.strigl@suse.com" date="1509019200">- 0.161
  - show lintlogs in interactive request review mode
  - fix potential shell injections
  - allow multiple --repo and --arch options in prjresults
  - cleanup babysitter.by
  - supersede existing requests if --yes is passed to osc sr
  - prepend request summary to diff in interactive mode
  - show issues(bugs) in interactive diff mode</changelog>
<changelog author="marco.strigl@suse.com" date="1509019201">- 0.161.1
  - Fix python 2.6 SyntaxError (multiple context expressions)</changelog>
<changelog author="adrian@suse.de" date="1511870400">- 0.162.0
  - Additional file content check with SHA256 when using OBS 2.9
  - support deb format with control.tar.xz</changelog>

</package>
<package pkgid="5d046d300d085f44d16e83fa21f6ea4cc8e7badf4b3b63713f7b348722b56481" name="otrs" arch="noarch">
    <version epoch="0" ver="3.3.18" rel="9.1"/>

<changelog author="alexandre@exatati.com.br" date="1378382400">- Update to 3.2.10:
  * Bug#9617 - Event-based notifications are not sent for process-tickets.
  * Bug#9666 - Installing an invalid package cause an server error on
    package manager.
  * Bug#8408 - No separator used in CSV files if UserCSVSeparator enabled
    and not set.
  * Bug#9635 - article_search not updated on ticket merges.
  * Bug#9629 - ORA-936 error in AgentTicketSearch with some search clauses.
  * Bug#9631 - BuildSelection() Selected does not work if value contains
    strings that are HTML-escaped.
  * Bug#9630 - Dynamic Fields of type Date can record wrong date when
    TimeZoneSettings are used.
  * Bug#9316 - Under nginx CustomerInformationCenter search returns Bad
    Gateway.
  * Bug#9610 - When email does not specify charset, content is not
    displayed in IE10.
  * Bug#9622 - Actions in Small ticket overview don't work when cookies
    are turned off.
  * Bug#9541 - Package manager cannot use https proxy.
  * Fixed bug pull#[83](https://github.com/OTRS/otrs/pull/83) - Pagination
    next page link, thanks to Renée Bäcker.
  * Bug#9594 - No auro-reply sent with multiple From addresses in
    AgentTicketPhone on PostgreSQL and Oracle.
  * Bug#3434 - Validity of search time frame not checked by OTRS.
  * Bug#5475 - Incorrectly limited ticket list queries in queue view.
  * Bug#8667 - No error Message when tryiing to Merge Ticket with itself.
  * Bug#6985 - SMTPTLS backend requires username and password.
  * Bug#3434 - Validity of search time frame not checked by OTRS.
  * Bug#9598 - Typo in vacation message for German locale.
  * Bug#9595 - Incomplete page reload handling in merge and bounce.
  * Bug#5307 - Tickets can be raised against an invalid Customer Company.
  * Bug#9596 - On merge and bounce screens is confusing when fill or
    not 'To', 'Subject' and 'Body' fields.
  * Bug#9514 - Bulk action (send email) uses senders address instead of
    customer id.
  * Bug#9595 - Incomplete page reload handling in merge and bounce.
  * Bug#9570 - AgentTicketSearch with exclamation mark emits invalid SQL
  * Bug#3007 - CheckMXRecord and CheckEmailAddresses have no effect on
    AgentTicketBounce.
  * Bug#9512 - Database error for invalid date in AgentTicketSearch.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#8428 - Bad usability of multiple sender/recipient feature.
  * Bug#9556 - Bounce and merge require notification recipient, subject
    and body even if no notification is sent.
  * Bug#9584 - No server side validation of To/Subject/Body in merge
    mask.
  * Bug#9578 - DynamicField sorting does not work on TicketSearch
    results in Customer Interface.
  * Bug#9579 - SOAP Serializer used in Kernel/GenericInterface/Transport/HTTP/SOAP.pm
    does not correctly set namespace.
  * Bug#9577 - Engine translate date to dado from english to pt_BR.
  * Bug#7359 - Setting pending states via generic agent does not set
    pending time.
  * Bug#5920 - Search restriction for dates is not displayed in
    customer interface.
  * Bug#8380 - Middle name not displayed in AdminCustomerUser.
  * Bug#9576 - GI TicketSearch Date and Date/Time dynamic fields are
    ignored.
  * Changed Dynamic Field SearchFieldParameterBuild() API, LayoutObject
    is now optional.
  * Bug#9573 - Date and DateTime dynamic fields not considered in
    GenericAgent Jobs.</changelog>
<changelog author="chris@computersalat.de" date="1379505600">- update OTRS::ITSM to 3.2.9
  * Bug#9637 - ITSM Overview shows error if agent has no permission to any
    config item class.
  * Bug#9621 - GeneralCatalog does not allow the number zero (0) as value
    for a GeneralCatatalog ClassItem.
  * Rollback changes for bug#9613. Due to a last minute problem with the
    mentioned bug fix we had to revert and release a new version of OTRS ITSM!
- rebase otrs-perm patch
  * fix spec (better fix cause than symptom)
    remove exclude %{otrs_root}/%{name}/Kernel/System/Package.pm.orig</changelog>
<changelog author="alexandre@exatati.com.br" date="1383739200">- Update to 3.2.12:
  * Updated French translation, thanks to Olivier Sallou!
  * Bug#9910 - Startup warnings/errors with Perl 5.18.1.
  * Bug#9753 - META HTTP-EQUIV="Refresh" tag not stripped from HTML
    email.
  * Bug#9897 - process ticket 'fading away' -&gt; Process is invalid.
  * Bug#9749 - Using spell checker in rich text Editor strips HTML
    formatting.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#9883 - Stats Overview is slow due Caching bug (object cache does
    not work).
  * Bug#9839 - Inline images not showing up when cookies are disabled.
  * Moved process import functionality in the backend module
    Kernel/System/ProcessManagement/DB/Process.pm.
  * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard.
  * Bug#9814 - Tickets without articles not shown correcly in medium view.
  * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values
    of toolbar widgets are ignored.
  * Bug#9391 - Incorrect permissions on .procmailrc.
  * Bug#9796 - Misaligned Headers on Simple Stats.
- Aditional changes from 3.2.11:
  * Bug#9542 ? Uninitialized value in AgentTicketForward.
  * Bug#9765 ? Dynamic Field values are completely removed if one entry
    contains a dash.
  * Bug#9764 ? ACL, Queue will ignored with customerID.
  * Bug#9762 ? Queue View ? S / M / L views ? not saved after logout.
  * Bug#9580 ? Time fields in TicketGetResponse Ticket element do not
    comply with xsd:DateTime format.
  * Bug#9748 ? ProcessManagement: Duplicate articles in a process-ticket
    (TransitionAction).
  * Bug#9759 ? Installer Error DB ? max key length is 767 bytes.
  * Bug#9747 ? Only first selected process displays the RichText editor.
  * Bug#9688 ? ORA-01839 error occurs at DynamicField in TicketSearch.
  * Bug#9751 ? TimeUnits are not accepted with a value of 0.
  * Bug#9739 ? Customer interface not working with MySQL 5.6.
  * Bug#8489 ? setting Tickets per page resets AgentTicketQueue.
  * Bug#9732 ? German translation file de.pm incomplete.
  * Bug#9728 ? Bulk action (send email) ignores reply-to address from
    unknown customers.
  * Bug#9661 ? Useless code in DynamicField backend.
  * Bug#9701 ? Ticket overview Queue Sort Filter is missing.
  * Bug#8173 ? Dashboard Widget ?Online? does not save state.
  * Bug#9188 ? AgentTicketEmail always loads a signature, even if no
    queue is selected.
  * Bug#9672 ? Undecrypted HTML part displayed when viewing a
    multipart/alternative PGP encrypted HTML mail.</changelog>
<changelog author="chris@computersalat.de" date="1386763200">- update to 3.2.13
  * Bug#9327 ? Filter breaks ?Select all? functionality.
  * Bug#9999 ? Timestamps in HistoricalValueGet return milliseconds on SQL
    Server.
  * Bug#10027 ? Added old ticket information to ticket_history.
  * Bug#7337 ? AJAX Error on new Phone Ticket on IIS when using JSON::XS.
  * Bug#8991 ? Back-action does not work when search result returned just 1
    ticket.
  * Bug#9937 ? Activity-Dialogs in wrong order.
  * Bug#9954 ? PGP Crypted and Signed emails could be wrongly parsed.
  * Bug#9639 ? TextArea validation message not translated.
  * Bug#9944 ? Search Template issue.
  * Bug#9938 ? ActivityDialog doesn?t show queues with move_into permissions.
  * Bug#9940 ? Fedora misses dependency on Sys::Syslog.
  * Removed Patch/Workaround for CPAN MIME::Parser v5.503
    (introduced in OTRS 3.2.2) replaced with another solution, as it was
    causing problems with PGP.
  * Bug#9916 ? Error when updating CustomerUser Login on ForeignDB.
  * Bug#9841 ? Tabbing changes radio button of owner change selection.
  * Bug#9867 ? Validation errors are not shown correctly when replying to a
    ticket in Customer Interface.
  * Bug#9914 ? Spellchecker ignores double wrong words.</changelog>
<changelog author="chris@computersalat.de" date="1393416000">- fix for bnc#866476 (CVE-2014-1695)
- update to 3.2.15
  (fix for OSA-2014-03, CVE-2014-1695)
  * Improved HTML filter.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer
    ID instead Agent ID.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as
    a customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work
    when authenticated as a customer.
- 3.2.14
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Fixed bug#9959 - &amp; breaks ExpandCustomerName.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose.
  * Added functionality to disable access to tickets of other customers with
    the same customer company in customer interface.
  * Fixed bug#9650 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.</changelog>
<changelog author="chris@computersalat.de" date="1394107200">- update to 3.3.5
  * Improved HTML filter.
  * Followup fix for bug#10116 - Random ordering of columns in "Small" ticket
    lists.
  * Re-implemented Process Management ProcessImport().
  * Fixed bug#10258 - yellow color for UnreadArticles.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Updated Polish translation, thanks to Wojciech Myrda.
  * Fixed bug#6323 - Graph/Chart generation selects slice/background color
    identical to text color.
  * Added feature to download report data shown in dashboard stats as CSV and
    PDF.
  * Fixed bug#10248 - OTRS Portal - Overview of registered systems.
  * Added browser check for IE10 in compatibility mode.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for
    dynamic fields.
  * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB.
  * Fixed bug#7818 - Menu simplification is not working for item "responsible".
  * Added new option "bin/otrs.LoaderCache.pl -o generate" to generate the
    loader cache for all frontend modules. This can be useful in cluster setups.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#10201 - Wrong column sort order in ticketoverview widget.
  * Fixed bug#10195 - Folluw up notification shows old prio after prio change.
  * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating
    new ticket from customer creation.
  * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI.
  * Follow-up fix for bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10220 - Invalid Statistics not displayed in overview.
  * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl
    not set.
  * Fixed bug#10177 - Missing sources in tarball.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#7440 - Ticket overviews don't show column headers for priority and
    unread articles in small mode.
  * Added process management canvas label spacer to avoid overlapping transition
    labels.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working.
  * Fixed bug#10163 - subject shows only 30 characters.
  * Fixed bug#10193 - Expired cookie bug in customer interface..
  * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order.
  * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket.
  * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen
    results in an error no matter what data was filled in.
  * Fixed bug#10209 - When opening tree selection dialog, the search field
    should get the focus.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#10130 - Events Ticket Calendar not working.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID
    instead Agent ID.
  * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a
    customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when
    authenticated as a customer.
  * Fixed bug#10176 - available columns selection in search result view is not
    scrollable.
  * Fixed bug#10120 - Management Dashboard: page reload erases stat graph
    settings.
  * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with
    all lines concatenated to one
  * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl.
  * Fixed bug#10178 - Stat Permissions.
  * Fixed bug#10188 - Inconsistency in graphical ACL editor.
  * Fixed bug#10155 - backup.pl doesn't compress database dump on non-MySQL.
  * Fixed bug#10106 - Sending Articles with ArticleSend() ignores ReplyTo.
  - 3.3.4 2014-01-28
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10153 - Error shown in SysConfig when Setting PendingDiffTime to
    30 Days.
  * Fixed bug#10161 - Edit Stats - 500 internal Server Error.
  * Fixed bug#10167 - Non-deterministic hash key construction in Stats.pm.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#10048 - RPM upgrade breaks permissions on config files.
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Updated traditional Chinese translation.
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Fixed bug#10145 - %A is not correctly substituted in Language::Time().
  * Fixed bug#10079 - Cannot operate OTRS on IE7 because of JavaScript error.
  * Fixed bug#10113 - Management dashboard setting doesn't show up when agent
    only has RO on stats.
  * Fixed bug#10088 - Error messages on recieving mailer daemons.
  * Fixed bug#10011 - Management Dashboard: X-Axis element labels may overlap.
  * Fixed bug#10012 - Management Dashboard: strings not translatable.
  * Fixed bug#10140 - Unable to search using before/after in Date Dynamic Fields.
  * Fixed bug#10008 - Customer user is automatically added to Cc at response for
    email-internal in AgentTicketCompose.
  * Added Hebrew translation file, thanks to Amir Elion!
  * Fixed bug#9978 - Activity Dialog for Customer shows "No Process configured!".
  * Fixed bug#10134 - Missing information on icon actions for SMIME certificates
    and keys.
  * Fixed bug#10116 - Random ordering of columns in "Small" ticket lists.
  * Fixed bug#10094 - Former FAO OTRSACLExtensions not available in the ACL
    Editor.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose
  * Fixed bug#10080 - Bad group check in otrs-scheduler-linux.
  * Fixed bug#10097 - $Param{NextState} is always undef in AgentTicketCompose.
  * Updated Russian translation, thanks to Yuriy Kolesnikov.
  * Fixed bug#10074 - Error if no queue matched in DashboardEventsTicketCalendar.
  * Fixed bug#965 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Added functionality to disable access to tickets of other customers with the
    same customer company in customer interface.
  * Fixed bug#9702 - Wrong article type with external ticketnumber recognition
    i.c.w. follow-up reject option.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10078 - Installer: error log after creating mysql database.
  * Fixed bug#10056 - Installer fails when special characters in database user's
    password.
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Updated Swedish translation, thanks to Andreas Berger.
  * Fixed bug#10075 - Stats widgets permission group is hardcoded to "stats"
  * Updated Russian translation, thanks to Andrey N. Burdin.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.
  * Fixed bug#10058 - Owner and Responsible are mandatory if enabled.
  * Fixed bug#7792 - Ticket-Action "Change Queue" is hardcoded and should be
    called "Queue" only.
  * Fixed bug#9109 - Printing ticket does not show the full subject line.
  * Fixed bug#10064 - Translated fields loose sorting in Activity Dialog admin
    screen.
  * Fixed bug#10066 - Required field isn't marked in AgentTicketCustomer.
  * Fixed bug#10059 - Service selection unavailable if customer selection is
    possible.
  * Fixed bug#10062 - Text label indent for locale RU - AgentÒicketViewCompose
  * Fixed bug#10044 - PendingDiffTime removes 2013 (current year) when reaching
    end of the year.
  * Fixed bug#10049 - Transition names in path edit screen ordered by ID instead
    of name.
  * Fixed bug#10055 - Queue-Treeview not working correctly.
  * Fixed bug#10061 - ArticleType dropdown in graphical ActivityDialog mask
    loads with empty value
  * Fixed bug#10060 - Field names are not translated in graphical process editor.
- for further changes please see:
  * https://github.com/OTRS/otrs/blob/rel-3_3_5/CHANGES.md
- rebase patches
  * httpd_config, removed obsolete stuff, added new
  * perm</changelog>
<changelog author="chris@computersalat.de" date="1396526400">- fix for bnc#871758 (CVE-2014-2553)
- update to 3.3.6
  fix for OSA-2014-04 (CVE-2014-2553)
  fix for OSA-2014-05 (CVE-2014-2554)
  * Updated French translation, thanks to Guillaume Houdmon.
  * Extended the OTRS system registration to optionally also send the
    support assessment data along with the system registration data.
    Support assessment data is improved and extended and can be
    accessed in the new Service Center module of the admin area.
  * Fixed bug#10405 - When using the search feature of the tree
    selection overlay, one is not able to expand subtrees of matching
    entries.
  * Fixed bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10400 - AgentTicketProccess will not use error messages
    of dynamic field drivers.
  * Fixed bug#10397 - DynamicField configuration in SysConfig
    'DefaultOverviewColumns' causes JS error.
  * Fixed bug#9592 - Ticket history overflows for dynamic field.
  * Fixed bug#10368 - Ticket title isn't shown.
  * Updated Japanese translation, thanks to Toshihiro Takehara..
  * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
  * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
    AgentTicketSearch view.
  * Fixed bug#10384 - out-of-office information not displayed in
    Ticket Zoom.
  * Fixed bug#10379 - ACL Not Working.
  * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
    AgentTicketActionCommon.
  * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
    RichText Editor.
  * Improved handling of cachekeys in Stats.pm to prevent cacheing
    problems in the dashboard stats.
  * Fixed bug#10334 - Deleting the attachment deletes the recepients
    too.
  * Fixed bug#10374 - OTRS does not protect against clickjacking.
  * Fixed bug#10364 - Inline images displayed as attachment in SMIME
    and PGP signed messages.
  * Fixed bug#10251 - SMIME signing fail on mails with attachements.
  * Fixed bug#10277 - Statistics per agent also shows invalid agents.
  * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
    empty values.
  * Fixed bug#10365 - Custom State types not working with
    "otrs.PendingJobs.pl" any more.
  * Fixed bug#10349 - System Email notification external not
    highlighted correctly.
  * Fixed bug#10361 - Incorrect handling of special characters in
    DynamicFields.
  * Fixed bug#10324 - Customer user field still marked as empty even
    after providing data.
  * Fixed bug#10019 - Tickets via "In line action bar" cannot be moved.
  * Fixed bug#10283 - MouseOver on the Transitions does not show
    transition actions.
  * Fixed bug#10241 - ACL-Editor Bug..
  * Fixed bug#10338 - Empty Content-ID causes strange result -&gt;
    HTML-tags are "corrupted".
  * Fixed bug#9951 - Line breaks at the end of salutation templates
    are not saved.
  * Fixed bug#10275 - Problem with encoding in attachment.
  * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
    garbage in the database.
  * Fixed bug#10336 - Problem with symlinked theme directories.
  * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
    DynamicField changed.
  * Fixed bug#10264 - Description (espacially article description) in
    processes are shown on improper place.
  * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
  * Fixed bug#10240 - Restricting process list by ACLs is only working
    with UserID.
  * Fixed bug#10299 - "Ouf of Office" shows inactive agents.
  * Fixed bug#10321 - Applying Filters to tickets in Status View or
    Queue View will log out session..
  * Fixed bug#9600 - When a ticket is deleted by generic agent job,
    No such TicketID error.
  * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
  * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Fixed bug#10300 - Special character in customer id cuts off string.
  * Fixed bug#10309 - mails with an empty return-path header must not
    trigger auto responses in OTRS.
  * Fixed bug#10245 - Use of uninitialized value $Param{"Value2"} in
    string.
  * Fixed bug#10182 - Customer email suddenly treated by OTRS as
    'email-internal'.
  * Fixed bug#10285 - No use Ticket::Hook in CustomerTicketZoom.
  * Fixed bug#9787 - Queue field doesn't appear in ProcessMgmt.
  * Fixed bug#10222 - Customer search during ticket creation - OTRS
    shows details also if no customer match the search.
  * Fixed bug#10259 - GenericInterface: mapping key can't map from / to 0.
- rebased perm patch
- update httpd_conf patch</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update to 3.3.7
  * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines.
  * Updated Japanese translation, thanks to Toshihiro Takehara.
  * Updated Swedish translation, thanks to Peter Krantz.
  * Added CPAN module Archive::Tar.
  * Split otrs.checksum.pl functionality it is only able to work in compare mode.
  * Extended package object to be able to generate an MD5Sum of all files within
    a package.
  * Extended email send capabilities to include custom X-Headers.
  * Extended the OTRS services to be able to create a support bundle file.
  * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom.
  * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB.
  * Fixed bug#10458 - Can't use system registration with some OTRS-IDs.
  * Fixed bug#10470 - Need FormID! error when embedding image when creating a
    Process Ticket.
  * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany.
  * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via
    cron jobs.
  * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171.
  * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search
    term was selected.
  * Fixed bug#10428 - Event Notification ArticleSend Loop.
  * Fixed bug#10441 - Eventbased notification - infinite loop.
  * Fixed bug#10462 - Translation of static statistic widgets (Dashboard).
  * Added OTRS Scheduler Watchdog mode.
  * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads
    page for temporary links.
  * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface
    displayed even though no process is available..
  * Fixed bug#8253 - Missing hover texts for actions in German translation
    of AgentTicketZoom.
  * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard).
  * Fixed bug#10395 - E-mail header parsing bug.
  * Fixed bug#10394 - rfc822 attachments name creating bug and validation
    enhancement.
  * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL.
  * Fixed bug#10402 - Transition or Transition Action popup a login page.
  * Fixed bug#10446 - otrs.PostMasterMailbox.pl Unknown encoding
    '3DISO-8859-2?=' at /usr/local/otrs/Kernel/System/Encode.pm line 367.
  * Fixed bug#8207 - Wrong encoding in graphs.
  * Fixed bug#10416 - Customer selection is not translated.
  * Fixed bug#9098 - The system still consider the customer_ids, even after
    field is empty on table customer_user.
  * Fixed bug#10202 - Process Modules, Dynamic Fields, and ACLs with AJAX update.
  * Fixed bug#10432 - ACLs not working correctly in CustomerTicketZoom
    (Message Followup).
  * Fixed bug#10436 - Error message in syslog about ACL then there is no ACL
    defined.
  * Fixed bug#10438 - Strange sorting of columns in Ticket Dashboard widgets.
  * Fixed bug#10425 - Customer Information in AgentTicketZoom.
  * Followup for bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10406 - Ticket Templates Type "Create" will be not translated.
  * Fixed bug#10378 - SessionID created with generic interface wont work using
    it as Agent.
  * Fixed bug#10399 - Columns Settings lost after search.
  * Fixed bug#10431 - Fallback configuration for scheduler log is wrong.
  * Fixed bug#10426 - Scheduler RegistrationUpdate task dies with PostgreSQL DB.
  * Fixed bug#10362 - .procmailrc is reset with wrong permissions on
    otrs.SetPermisssion.pl execution.
  * Fixed bug#10350 - Events Ticket Calender: In case
    TicketCalendarStartTime=TicketCalendarEndTime, displayed ticket event time
    frame always 2 hours.
  * Fixed bug#9970 - Existing sequences on oracle databases produces errors.
  * Enhanced DiskSpacePatitions SupportDataCollector plugin to deal correctly
    with multiple partitions with the same name.
  * Followup for bug#10130 - Events Ticket Calendar not working.
- update OTRS::ITSM to 3.3.7
  * Bug# 10146 ? ConfigItem search for Integer shows all CIs in results.
  * Bug# 10487 ? ACL Editor did not include Decision and ITSM field action.</changelog>
<changelog author="jamesp@vicidial.com" date="1404129600">- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4
  * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the configuration file had to be modified to look for
    this static module and load pre-2.4 directives if found on
    Apache 2.4. It should be forward compatible if the mod_access
    compat.c module become dynamic in the future and is not loaded.</changelog>
<changelog author="chris@computersalat.de" date="1406635200">- update to 3.3.8
  * Bug#10524 ? Internal Dynamic Fields in Activity Dialog.
  * Bug#10562 ? Inconsistent displaying of ?CustomerID? value.
  * Bug#10508 ? (Agent|Customer)TicketProcess javascript errors when
    uploading attachments/having server errors.
  * Bug#10521 ? OutputFilterText AutoLink CVE.
  * Bug#10430 ? backup.pl doesn?t work with PostgreSQL unix sockets.
  * Bug#5012 ? Merging a watched ticket into another should ?transfer?
    the Watch status to the final ticket, thanks to Michiel Beijen!
  * Bug#10544 ? Upgrade to OTRS 3.3.7 breaks connection to external
    customer user tables.
  * Bug#10535 ? ACLListGet() produces DB warning message.
  * Bug#10163 ? Subject shows only 30 characters.
  * Bug#10519 ? Opening and closing popups in ProcessManagement leads
    to performance issues.
  * Bug#10513 ? Some SupportData Plugin Identifiers ends with ::.
  * Bug#8494 ? Possibility to split quotes in rich text editor.
  * Bug#10491 ? CIC not always accessible via TicketZoom.
  * Bug#10427 ? Bulk action locks tickets ? cancel keeps them locked.
- update OTRS::ITSM to 3.3.8
  * Bug# 10558 ? Slow CI search for classes with a large MaxCount on
    a value and sub values.
  * Bug# 10570 ? Deleting ITSM Change search templates does not work.</changelog>
<changelog author="alexandre@exatati.com.br" date="1412078400">- Update to 3.3.9:
  https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md
  * Bug#10697 - Column name in CSV report of stats is lowercase.
  * Bug#10652 - Process tickets without any articles create empty
    lines in AgentTicketSearch CSV result file.
  * Bug#10607 - SQL Box can change the database.
  * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via
    BulkAction.
  * Bug#10699 - Cannot add new customer (company).
  * Bug#10497 - CustomerUser secondary database access opens multitude
    of database connections.
  * Bug#9756 - Owner will be set after QueueMove screen AND undo.
  * Bug#10606 - Dynamic fields in dashboard overview are empty.
  * Updated Danish translation, thanks to Lars Jørgensen.
  * Bug#10670 - It is possible to start the scheduler more than once.
  * Bug#10515 - Problem with column filter sorting
  * Bug#10598 - Field tags not parsed properly in auto response subject.
  * Bug#10658 - Issue with multiple customer company backends.
  * Bug#10622 - eMail address only with uppercases - wrong display.
  * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets
    as affected.
  * Bug#10601 - ExternalTicketNumberRecognition produces errors in log
    file.
  * Bug#9851 - Unlocking a ticket in the small view results in
    AgentTicketZoom.
  * Bug#10612 - Wrong Time in DashboardField "Changed", thanks to S7.
  * Bug#10595 - Standard Replies are false sorted in Ticket Zoom
    select box.
  * Bug#10534 - Wildcard hacking the customer information center,
    thanks to S7.
  * Bug#10597 - Process list description column doesn't support line
    breaks, thanks to S7.
  * Bug#10586 - In Customer Portal no attachments are shown.
  * Bug#6601 - Changing search options changes order of fields, thanks
    to S7.
  * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition
    doesn't work.
  * Bug#10559 - "Previous Owner" don't use the FirstnameLastnameOrder
    configuration.
  * Bug#10532 - PostMasterMailbox.pl hangs parsing mails.
  * Bug#10578 - Service selection in GA Ticket Action allows multi
    select.
- update OTRS::ITSM to 3.3.9
  * Bug#10330 ? ITSM Impact field displayed with Key instead of Value.</changelog>
<changelog author="chris@computersalat.de" date="1412078401">- fix changelog
  * update 3.3.9 with 3.3.9 data
  * add missing update info for OTRS::ITSM
- update itsm-3.3.9 Source</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post script</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- One more fix after fix bashisms in previous commit</changelog>
<changelog author="chris@computersalat.de" date="1419854400">- fix for boo#910988 (CVE-2014-9324)
- update to 3.3.11
  fix for OSA-2014-06 (CVE-2014-9324)
  * Updated translations, thanks to all translators.
  * Bug#10904 ? Upon entering CIC, search only returns hits during
    the first search.
  * Bug#10944 ? Multiple selection in Tree Selection also affects
    filtered elements.
  * Follow-up fix for Bug#6284 ? Problem with unicode characters
    when using FastCGI.
  * Bug#10830 ? Textarea Limitation in Generic Agent.
  * Bug#10920 ? ProcessManagement: Deleting Activities from canvas
    does not update process layout.
  * Bug#10801 ? Editor is extremely slow with large articles.
  * Enhanced Permission Checks in GenericInterface Ticket Connector.
  * Bug#10634 ? ProcessManagement: Can not use an arbitrary email
    address as a CustomerUser.
  * Bug#10839 ? ACL cannot set possible TicketType in
    AgentTicketPhone and AgentTicketEmail.
  * Bug#10776 ? Medium and Large view don?t indicate active
    filters.
  * Bug#10808 ? Set of pending time is not working at all in
    Frontend::Agent::Ticket::ViewNote.
  * Bug#10892 ? TicketActionsPerTicket open multiple popups at
    TicketOverview.
  * Bug#10857 ? JS added too often in AgentTicketOverviewSmall.
  * Bug#10639 ? Set of pending time/state not working properly
    (process management).
  * Bug#10893 ? Missing log name partitions in Service Center.
  * Bug#10879 ? GenericInterfae: TicketSearch operation does not
    take escalation parameters.
  * Bug#10812 ? SOAP Response is always in version SOAP 1.2.
  * Bug#10083 ? SMIME and Email address detection is case sensitive
    (for the right part)..
  * Bug#10826 ? German ? Translation Problem.
  * Bug#10678 ? Dates off by one on area diagram in dashboard widget.
  * Bug#7369 ? LinkQoute fails for some characters in hash or
    parameter.
  * Bug#8404 ? Wrong sorting of responses dropdown in TicketZoom.
  * Bug#8781 ? 508 Compliance: In Ticket Overviews the title
    attribute of large view link is incorrect.
  * Bug#10669 ? Maxlength validation of textarea dynamic fields does
    not work correctly in IE.
  * Bug#10471 ? Missing translations for tooltips of
    TicketOverviewSmall columns.
  * Bug#10850 ? Double-quoted special characters in title of dynamic
    field sidebar output in TicketZoom.
  * Bug#10805 ? Open tickets in 3 days show right function but wrong
    number.
  * Bug#10845 ? No date search if TimeInputFormat is Input.
  * Bug#10706 ? dashboard settings are lost by different user login.
  * Bug#10577 ? Service Center does not show MOD_PERL version on
    Ubuntu 14.04.
  * Bug#10679 ? Texts in notification tags loose their empty lines
    and spaces.</changelog>
<changelog author="aj@ajaissle.de" date="1445688000">- Update to 3.3.15
  * HTML emails not properly displayed (parts missing).
  * Fixed a nasty JSON::XS crash on some platforms.
  * Updated CPAN module Proc::Daemon to version 0.21.
  * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT).
  * auto reply with DynamicFields from webservice.
  * Added option to package manager list action, to show deployment info of installed packages.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
- Changes 3.3.14
  * Package installation/uninstallation leads to endless loop.
  * Lang parameter not correctly validated.
  * Search for multiple ticket numbers with GenericInterface.
- Changes 3.3.13
  * Updated translation files.
  * Refresh bug on process client interface using ie8
  * Adding email recipients via addressbook does not update customer information.
  * Wrong column encoding in Kernel::System::Notification::NotificationGet().
  * Generic Agent ticket actions can't be unselect.
  * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
  * Download button for dashboard stats visible even if no permissions for AgentStats exist..
  * Invalid utf-8 parameters not filtered sufficciently.
  * DynamicField Filter in AgentDashboard accepts only one value.
  * Can't select customer and/or public interface in AdminACL.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys.
  * Added possibility to turn of SSL certificate validation.
  * SLA can not be set over Free Fields Dialog.
  * Not possible to change customer.
  * Error from GenericInterface using SOAP and TicketGet operation.
  * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm.
  * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20.
- Changes 3.3.12
  * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker.
  * Adressbook search does not permit to add contacts via click.
  * Wrong sortation of Ticket Overview settings.
  * Missing translations in Dashboard and TicketOverview settings.
  * Internal Server Error, instead of warning.
  * Dashlet: Filter Attributes with more then one CustomerID doesn't work.
  * SQL error with "0 oracle" for article body in Ticket Search.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig).
  * ProcessManagement: TransitionAction delete does not check if is used.
  * GPG option 0xlong breaks decryption of emails.
  * ORA-03113 Error after scheduler start.
  * /etc/init.d/otrs running httpd is not detected on CentOS 7.
  * Unable to change password in customer interface.
  * Dynamic Field shown information in customer interface is not consistent with agent interface.
  * Error: No Process configured! - Agent interface.
  * Error while splitting ticket.
  * ActivityDialogEntityID not working in ACLs from Process screens reducing States.
- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch
- Added itsm-update.sh, a script to update the itsm source we use
- Updated sources
  * otrs.README.de
  * otrs.README.en
  * UPGRADING.SuSE -&gt; UPGRADING.SUSE
  * ZZZAuto.pm</changelog>
<changelog author="chris@computersalat.de" date="1477828800">- fix itsm package
  * version is 3.3.14
- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch
- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch</changelog>
<changelog author="chris@computersalat.de" date="1478088000">- fix for boo#1008017
  * execution of JavaScript in OTRS context by opening malicious attachment
- Update to 3.3.16
  * Improved sandboxing of displayed attachments.
    see OSA-2016-02 (CVE-2016-9139)
  * Added package verification information to otrs.PackageManager.pl,
    use bin/otrs.PackageManager.pl -a list -e (to show package verification
    information) or bin/otrs.PackageManager.pl -a list -e -c
    (to show package verification information deleting the cache before).
  * Bug#11959 ? 500 Can?t connect to www.otrs.com/product.xml:443.
  * Bug#11870 ? Missing quoting in Layout::AgentQueueListOption().
  * Bug#11802 ? Customer user can get access to all ticket data.
- fix ZZZAuto.pm
  * do not replace existing file (manually merge needed for ITSM)</changelog>
<changelog author="chris@computersalat.de" date="1496836800">- fix for boo#1043086
  * Incorrect Access Control in OTRS
- Update to 3.3.17 2017-06-06
  * Improved SecureMode detection in Installer.
    see OSA-2017-03 (CVE-2017-9324)
  * Bug#12753 - Function "SystemDataGroupGet" has problems with empty
    values in oracle.
  * Bug#9941 - Articles with multi-byte characters that claim to be
    UTF-8 will not display in the browser.
  * Bug#7961 - customer search should not return results for internal
    articles.
    see OSA-2017-02
  * Bug#12391 - Base64 encoded image does not display in article.
  * Bug#12461 - Chrome can not display attached PDF files since 5.0.14.</changelog>
<changelog author="chris@computersalat.de" date="1506168000">- fix for boo#1059691 (CVE-2017-14635)
  * Code Injection / Privilege Escalation OTRS
- Update to 3.3.18
  * Improved validation in statistic import and export.
    see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
  * Updated CPAN module URI to version 1.72.</changelog>

</package>
<package pkgid="13b466de3e6d4ff4f96d6ddca1d817f2b8d3f5f41c22ea08ca97767235b09eab" name="otrs" arch="noarch">
    <version epoch="0" ver="3.3.20" rel="14.1"/>

<changelog author="alexandre@exatati.com.br" date="1383739200">- Update to 3.2.12:
  * Updated French translation, thanks to Olivier Sallou!
  * Bug#9910 - Startup warnings/errors with Perl 5.18.1.
  * Bug#9753 - META HTTP-EQUIV="Refresh" tag not stripped from HTML
    email.
  * Bug#9897 - process ticket 'fading away' -&gt; Process is invalid.
  * Bug#9749 - Using spell checker in rich text Editor strips HTML
    formatting.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#9883 - Stats Overview is slow due Caching bug (object cache does
    not work).
  * Bug#9839 - Inline images not showing up when cookies are disabled.
  * Moved process import functionality in the backend module
    Kernel/System/ProcessManagement/DB/Process.pm.
  * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard.
  * Bug#9814 - Tickets without articles not shown correcly in medium view.
  * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values
    of toolbar widgets are ignored.
  * Bug#9391 - Incorrect permissions on .procmailrc.
  * Bug#9796 - Misaligned Headers on Simple Stats.
- Aditional changes from 3.2.11:
  * Bug#9542 ? Uninitialized value in AgentTicketForward.
  * Bug#9765 ? Dynamic Field values are completely removed if one entry
    contains a dash.
  * Bug#9764 ? ACL, Queue will ignored with customerID.
  * Bug#9762 ? Queue View ? S / M / L views ? not saved after logout.
  * Bug#9580 ? Time fields in TicketGetResponse Ticket element do not
    comply with xsd:DateTime format.
  * Bug#9748 ? ProcessManagement: Duplicate articles in a process-ticket
    (TransitionAction).
  * Bug#9759 ? Installer Error DB ? max key length is 767 bytes.
  * Bug#9747 ? Only first selected process displays the RichText editor.
  * Bug#9688 ? ORA-01839 error occurs at DynamicField in TicketSearch.
  * Bug#9751 ? TimeUnits are not accepted with a value of 0.
  * Bug#9739 ? Customer interface not working with MySQL 5.6.
  * Bug#8489 ? setting Tickets per page resets AgentTicketQueue.
  * Bug#9732 ? German translation file de.pm incomplete.
  * Bug#9728 ? Bulk action (send email) ignores reply-to address from
    unknown customers.
  * Bug#9661 ? Useless code in DynamicField backend.
  * Bug#9701 ? Ticket overview Queue Sort Filter is missing.
  * Bug#8173 ? Dashboard Widget ?Online? does not save state.
  * Bug#9188 ? AgentTicketEmail always loads a signature, even if no
    queue is selected.
  * Bug#9672 ? Undecrypted HTML part displayed when viewing a
    multipart/alternative PGP encrypted HTML mail.</changelog>
<changelog author="chris@computersalat.de" date="1386763200">- update to 3.2.13
  * Bug#9327 ? Filter breaks ?Select all? functionality.
  * Bug#9999 ? Timestamps in HistoricalValueGet return milliseconds on SQL
    Server.
  * Bug#10027 ? Added old ticket information to ticket_history.
  * Bug#7337 ? AJAX Error on new Phone Ticket on IIS when using JSON::XS.
  * Bug#8991 ? Back-action does not work when search result returned just 1
    ticket.
  * Bug#9937 ? Activity-Dialogs in wrong order.
  * Bug#9954 ? PGP Crypted and Signed emails could be wrongly parsed.
  * Bug#9639 ? TextArea validation message not translated.
  * Bug#9944 ? Search Template issue.
  * Bug#9938 ? ActivityDialog doesn?t show queues with move_into permissions.
  * Bug#9940 ? Fedora misses dependency on Sys::Syslog.
  * Removed Patch/Workaround for CPAN MIME::Parser v5.503
    (introduced in OTRS 3.2.2) replaced with another solution, as it was
    causing problems with PGP.
  * Bug#9916 ? Error when updating CustomerUser Login on ForeignDB.
  * Bug#9841 ? Tabbing changes radio button of owner change selection.
  * Bug#9867 ? Validation errors are not shown correctly when replying to a
    ticket in Customer Interface.
  * Bug#9914 ? Spellchecker ignores double wrong words.</changelog>
<changelog author="chris@computersalat.de" date="1393416000">- fix for bnc#866476 (CVE-2014-1695)
- update to 3.2.15
  (fix for OSA-2014-03, CVE-2014-1695)
  * Improved HTML filter.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer
    ID instead Agent ID.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as
    a customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work
    when authenticated as a customer.
- 3.2.14
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Fixed bug#9959 - &amp; breaks ExpandCustomerName.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose.
  * Added functionality to disable access to tickets of other customers with
    the same customer company in customer interface.
  * Fixed bug#9650 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.</changelog>
<changelog author="chris@computersalat.de" date="1394107200">- update to 3.3.5
  * Improved HTML filter.
  * Followup fix for bug#10116 - Random ordering of columns in "Small" ticket
    lists.
  * Re-implemented Process Management ProcessImport().
  * Fixed bug#10258 - yellow color for UnreadArticles.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Updated Polish translation, thanks to Wojciech Myrda.
  * Fixed bug#6323 - Graph/Chart generation selects slice/background color
    identical to text color.
  * Added feature to download report data shown in dashboard stats as CSV and
    PDF.
  * Fixed bug#10248 - OTRS Portal - Overview of registered systems.
  * Added browser check for IE10 in compatibility mode.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for
    dynamic fields.
  * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB.
  * Fixed bug#7818 - Menu simplification is not working for item "responsible".
  * Added new option "bin/otrs.LoaderCache.pl -o generate" to generate the
    loader cache for all frontend modules. This can be useful in cluster setups.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#10201 - Wrong column sort order in ticketoverview widget.
  * Fixed bug#10195 - Folluw up notification shows old prio after prio change.
  * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating
    new ticket from customer creation.
  * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI.
  * Follow-up fix for bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10220 - Invalid Statistics not displayed in overview.
  * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl
    not set.
  * Fixed bug#10177 - Missing sources in tarball.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#7440 - Ticket overviews don't show column headers for priority and
    unread articles in small mode.
  * Added process management canvas label spacer to avoid overlapping transition
    labels.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working.
  * Fixed bug#10163 - subject shows only 30 characters.
  * Fixed bug#10193 - Expired cookie bug in customer interface..
  * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order.
  * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket.
  * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen
    results in an error no matter what data was filled in.
  * Fixed bug#10209 - When opening tree selection dialog, the search field
    should get the focus.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#10130 - Events Ticket Calendar not working.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID
    instead Agent ID.
  * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a
    customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when
    authenticated as a customer.
  * Fixed bug#10176 - available columns selection in search result view is not
    scrollable.
  * Fixed bug#10120 - Management Dashboard: page reload erases stat graph
    settings.
  * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with
    all lines concatenated to one
  * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl.
  * Fixed bug#10178 - Stat Permissions.
  * Fixed bug#10188 - Inconsistency in graphical ACL editor.
  * Fixed bug#10155 - backup.pl doesn't compress database dump on non-MySQL.
  * Fixed bug#10106 - Sending Articles with ArticleSend() ignores ReplyTo.
  - 3.3.4 2014-01-28
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10153 - Error shown in SysConfig when Setting PendingDiffTime to
    30 Days.
  * Fixed bug#10161 - Edit Stats - 500 internal Server Error.
  * Fixed bug#10167 - Non-deterministic hash key construction in Stats.pm.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#10048 - RPM upgrade breaks permissions on config files.
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Updated traditional Chinese translation.
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Fixed bug#10145 - %A is not correctly substituted in Language::Time().
  * Fixed bug#10079 - Cannot operate OTRS on IE7 because of JavaScript error.
  * Fixed bug#10113 - Management dashboard setting doesn't show up when agent
    only has RO on stats.
  * Fixed bug#10088 - Error messages on recieving mailer daemons.
  * Fixed bug#10011 - Management Dashboard: X-Axis element labels may overlap.
  * Fixed bug#10012 - Management Dashboard: strings not translatable.
  * Fixed bug#10140 - Unable to search using before/after in Date Dynamic Fields.
  * Fixed bug#10008 - Customer user is automatically added to Cc at response for
    email-internal in AgentTicketCompose.
  * Added Hebrew translation file, thanks to Amir Elion!
  * Fixed bug#9978 - Activity Dialog for Customer shows "No Process configured!".
  * Fixed bug#10134 - Missing information on icon actions for SMIME certificates
    and keys.
  * Fixed bug#10116 - Random ordering of columns in "Small" ticket lists.
  * Fixed bug#10094 - Former FAO OTRSACLExtensions not available in the ACL
    Editor.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose
  * Fixed bug#10080 - Bad group check in otrs-scheduler-linux.
  * Fixed bug#10097 - $Param{NextState} is always undef in AgentTicketCompose.
  * Updated Russian translation, thanks to Yuriy Kolesnikov.
  * Fixed bug#10074 - Error if no queue matched in DashboardEventsTicketCalendar.
  * Fixed bug#965 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Added functionality to disable access to tickets of other customers with the
    same customer company in customer interface.
  * Fixed bug#9702 - Wrong article type with external ticketnumber recognition
    i.c.w. follow-up reject option.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10078 - Installer: error log after creating mysql database.
  * Fixed bug#10056 - Installer fails when special characters in database user's
    password.
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Updated Swedish translation, thanks to Andreas Berger.
  * Fixed bug#10075 - Stats widgets permission group is hardcoded to "stats"
  * Updated Russian translation, thanks to Andrey N. Burdin.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.
  * Fixed bug#10058 - Owner and Responsible are mandatory if enabled.
  * Fixed bug#7792 - Ticket-Action "Change Queue" is hardcoded and should be
    called "Queue" only.
  * Fixed bug#9109 - Printing ticket does not show the full subject line.
  * Fixed bug#10064 - Translated fields loose sorting in Activity Dialog admin
    screen.
  * Fixed bug#10066 - Required field isn't marked in AgentTicketCustomer.
  * Fixed bug#10059 - Service selection unavailable if customer selection is
    possible.
  * Fixed bug#10062 - Text label indent for locale RU - AgentÒicketViewCompose
  * Fixed bug#10044 - PendingDiffTime removes 2013 (current year) when reaching
    end of the year.
  * Fixed bug#10049 - Transition names in path edit screen ordered by ID instead
    of name.
  * Fixed bug#10055 - Queue-Treeview not working correctly.
  * Fixed bug#10061 - ArticleType dropdown in graphical ActivityDialog mask
    loads with empty value
  * Fixed bug#10060 - Field names are not translated in graphical process editor.
- for further changes please see:
  * https://github.com/OTRS/otrs/blob/rel-3_3_5/CHANGES.md
- rebase patches
  * httpd_config, removed obsolete stuff, added new
  * perm</changelog>
<changelog author="chris@computersalat.de" date="1396526400">- fix for bnc#871758 (CVE-2014-2553)
- update to 3.3.6
  fix for OSA-2014-04 (CVE-2014-2553)
  fix for OSA-2014-05 (CVE-2014-2554)
  * Updated French translation, thanks to Guillaume Houdmon.
  * Extended the OTRS system registration to optionally also send the
    support assessment data along with the system registration data.
    Support assessment data is improved and extended and can be
    accessed in the new Service Center module of the admin area.
  * Fixed bug#10405 - When using the search feature of the tree
    selection overlay, one is not able to expand subtrees of matching
    entries.
  * Fixed bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10400 - AgentTicketProccess will not use error messages
    of dynamic field drivers.
  * Fixed bug#10397 - DynamicField configuration in SysConfig
    'DefaultOverviewColumns' causes JS error.
  * Fixed bug#9592 - Ticket history overflows for dynamic field.
  * Fixed bug#10368 - Ticket title isn't shown.
  * Updated Japanese translation, thanks to Toshihiro Takehara..
  * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
  * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
    AgentTicketSearch view.
  * Fixed bug#10384 - out-of-office information not displayed in
    Ticket Zoom.
  * Fixed bug#10379 - ACL Not Working.
  * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
    AgentTicketActionCommon.
  * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
    RichText Editor.
  * Improved handling of cachekeys in Stats.pm to prevent cacheing
    problems in the dashboard stats.
  * Fixed bug#10334 - Deleting the attachment deletes the recepients
    too.
  * Fixed bug#10374 - OTRS does not protect against clickjacking.
  * Fixed bug#10364 - Inline images displayed as attachment in SMIME
    and PGP signed messages.
  * Fixed bug#10251 - SMIME signing fail on mails with attachements.
  * Fixed bug#10277 - Statistics per agent also shows invalid agents.
  * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
    empty values.
  * Fixed bug#10365 - Custom State types not working with
    "otrs.PendingJobs.pl" any more.
  * Fixed bug#10349 - System Email notification external not
    highlighted correctly.
  * Fixed bug#10361 - Incorrect handling of special characters in
    DynamicFields.
  * Fixed bug#10324 - Customer user field still marked as empty even
    after providing data.
  * Fixed bug#10019 - Tickets via "In line action bar" cannot be moved.
  * Fixed bug#10283 - MouseOver on the Transitions does not show
    transition actions.
  * Fixed bug#10241 - ACL-Editor Bug..
  * Fixed bug#10338 - Empty Content-ID causes strange result -&gt;
    HTML-tags are "corrupted".
  * Fixed bug#9951 - Line breaks at the end of salutation templates
    are not saved.
  * Fixed bug#10275 - Problem with encoding in attachment.
  * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
    garbage in the database.
  * Fixed bug#10336 - Problem with symlinked theme directories.
  * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
    DynamicField changed.
  * Fixed bug#10264 - Description (espacially article description) in
    processes are shown on improper place.
  * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
  * Fixed bug#10240 - Restricting process list by ACLs is only working
    with UserID.
  * Fixed bug#10299 - "Ouf of Office" shows inactive agents.
  * Fixed bug#10321 - Applying Filters to tickets in Status View or
    Queue View will log out session..
  * Fixed bug#9600 - When a ticket is deleted by generic agent job,
    No such TicketID error.
  * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
  * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Fixed bug#10300 - Special character in customer id cuts off string.
  * Fixed bug#10309 - mails with an empty return-path header must not
    trigger auto responses in OTRS.
  * Fixed bug#10245 - Use of uninitialized value $Param{"Value2"} in
    string.
  * Fixed bug#10182 - Customer email suddenly treated by OTRS as
    'email-internal'.
  * Fixed bug#10285 - No use Ticket::Hook in CustomerTicketZoom.
  * Fixed bug#9787 - Queue field doesn't appear in ProcessMgmt.
  * Fixed bug#10222 - Customer search during ticket creation - OTRS
    shows details also if no customer match the search.
  * Fixed bug#10259 - GenericInterface: mapping key can't map from / to 0.
- rebased perm patch
- update httpd_conf patch</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update to 3.3.7
  * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines.
  * Updated Japanese translation, thanks to Toshihiro Takehara.
  * Updated Swedish translation, thanks to Peter Krantz.
  * Added CPAN module Archive::Tar.
  * Split otrs.checksum.pl functionality it is only able to work in compare mode.
  * Extended package object to be able to generate an MD5Sum of all files within
    a package.
  * Extended email send capabilities to include custom X-Headers.
  * Extended the OTRS services to be able to create a support bundle file.
  * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom.
  * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB.
  * Fixed bug#10458 - Can't use system registration with some OTRS-IDs.
  * Fixed bug#10470 - Need FormID! error when embedding image when creating a
    Process Ticket.
  * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany.
  * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via
    cron jobs.
  * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171.
  * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search
    term was selected.
  * Fixed bug#10428 - Event Notification ArticleSend Loop.
  * Fixed bug#10441 - Eventbased notification - infinite loop.
  * Fixed bug#10462 - Translation of static statistic widgets (Dashboard).
  * Added OTRS Scheduler Watchdog mode.
  * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads
    page for temporary links.
  * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface
    displayed even though no process is available..
  * Fixed bug#8253 - Missing hover texts for actions in German translation
    of AgentTicketZoom.
  * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard).
  * Fixed bug#10395 - E-mail header parsing bug.
  * Fixed bug#10394 - rfc822 attachments name creating bug and validation
    enhancement.
  * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL.
  * Fixed bug#10402 - Transition or Transition Action popup a login page.
  * Fixed bug#10446 - otrs.PostMasterMailbox.pl Unknown encoding
    '3DISO-8859-2?=' at /usr/local/otrs/Kernel/System/Encode.pm line 367.
  * Fixed bug#8207 - Wrong encoding in graphs.
  * Fixed bug#10416 - Customer selection is not translated.
  * Fixed bug#9098 - The system still consider the customer_ids, even after
    field is empty on table customer_user.
  * Fixed bug#10202 - Process Modules, Dynamic Fields, and ACLs with AJAX update.
  * Fixed bug#10432 - ACLs not working correctly in CustomerTicketZoom
    (Message Followup).
  * Fixed bug#10436 - Error message in syslog about ACL then there is no ACL
    defined.
  * Fixed bug#10438 - Strange sorting of columns in Ticket Dashboard widgets.
  * Fixed bug#10425 - Customer Information in AgentTicketZoom.
  * Followup for bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10406 - Ticket Templates Type "Create" will be not translated.
  * Fixed bug#10378 - SessionID created with generic interface wont work using
    it as Agent.
  * Fixed bug#10399 - Columns Settings lost after search.
  * Fixed bug#10431 - Fallback configuration for scheduler log is wrong.
  * Fixed bug#10426 - Scheduler RegistrationUpdate task dies with PostgreSQL DB.
  * Fixed bug#10362 - .procmailrc is reset with wrong permissions on
    otrs.SetPermisssion.pl execution.
  * Fixed bug#10350 - Events Ticket Calender: In case
    TicketCalendarStartTime=TicketCalendarEndTime, displayed ticket event time
    frame always 2 hours.
  * Fixed bug#9970 - Existing sequences on oracle databases produces errors.
  * Enhanced DiskSpacePatitions SupportDataCollector plugin to deal correctly
    with multiple partitions with the same name.
  * Followup for bug#10130 - Events Ticket Calendar not working.
- update OTRS::ITSM to 3.3.7
  * Bug# 10146 ? ConfigItem search for Integer shows all CIs in results.
  * Bug# 10487 ? ACL Editor did not include Decision and ITSM field action.</changelog>
<changelog author="jamesp@vicidial.com" date="1404129600">- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4
  * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the configuration file had to be modified to look for
    this static module and load pre-2.4 directives if found on
    Apache 2.4. It should be forward compatible if the mod_access
    compat.c module become dynamic in the future and is not loaded.</changelog>
<changelog author="chris@computersalat.de" date="1406635200">- update to 3.3.8
  * Bug#10524 ? Internal Dynamic Fields in Activity Dialog.
  * Bug#10562 ? Inconsistent displaying of ?CustomerID? value.
  * Bug#10508 ? (Agent|Customer)TicketProcess javascript errors when
    uploading attachments/having server errors.
  * Bug#10521 ? OutputFilterText AutoLink CVE.
  * Bug#10430 ? backup.pl doesn?t work with PostgreSQL unix sockets.
  * Bug#5012 ? Merging a watched ticket into another should ?transfer?
    the Watch status to the final ticket, thanks to Michiel Beijen!
  * Bug#10544 ? Upgrade to OTRS 3.3.7 breaks connection to external
    customer user tables.
  * Bug#10535 ? ACLListGet() produces DB warning message.
  * Bug#10163 ? Subject shows only 30 characters.
  * Bug#10519 ? Opening and closing popups in ProcessManagement leads
    to performance issues.
  * Bug#10513 ? Some SupportData Plugin Identifiers ends with ::.
  * Bug#8494 ? Possibility to split quotes in rich text editor.
  * Bug#10491 ? CIC not always accessible via TicketZoom.
  * Bug#10427 ? Bulk action locks tickets ? cancel keeps them locked.
- update OTRS::ITSM to 3.3.8
  * Bug# 10558 ? Slow CI search for classes with a large MaxCount on
    a value and sub values.
  * Bug# 10570 ? Deleting ITSM Change search templates does not work.</changelog>
<changelog author="alexandre@exatati.com.br" date="1412078400">- Update to 3.3.9:
  https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md
  * Bug#10697 - Column name in CSV report of stats is lowercase.
  * Bug#10652 - Process tickets without any articles create empty
    lines in AgentTicketSearch CSV result file.
  * Bug#10607 - SQL Box can change the database.
  * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via
    BulkAction.
  * Bug#10699 - Cannot add new customer (company).
  * Bug#10497 - CustomerUser secondary database access opens multitude
    of database connections.
  * Bug#9756 - Owner will be set after QueueMove screen AND undo.
  * Bug#10606 - Dynamic fields in dashboard overview are empty.
  * Updated Danish translation, thanks to Lars Jørgensen.
  * Bug#10670 - It is possible to start the scheduler more than once.
  * Bug#10515 - Problem with column filter sorting
  * Bug#10598 - Field tags not parsed properly in auto response subject.
  * Bug#10658 - Issue with multiple customer company backends.
  * Bug#10622 - eMail address only with uppercases - wrong display.
  * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets
    as affected.
  * Bug#10601 - ExternalTicketNumberRecognition produces errors in log
    file.
  * Bug#9851 - Unlocking a ticket in the small view results in
    AgentTicketZoom.
  * Bug#10612 - Wrong Time in DashboardField "Changed", thanks to S7.
  * Bug#10595 - Standard Replies are false sorted in Ticket Zoom
    select box.
  * Bug#10534 - Wildcard hacking the customer information center,
    thanks to S7.
  * Bug#10597 - Process list description column doesn't support line
    breaks, thanks to S7.
  * Bug#10586 - In Customer Portal no attachments are shown.
  * Bug#6601 - Changing search options changes order of fields, thanks
    to S7.
  * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition
    doesn't work.
  * Bug#10559 - "Previous Owner" don't use the FirstnameLastnameOrder
    configuration.
  * Bug#10532 - PostMasterMailbox.pl hangs parsing mails.
  * Bug#10578 - Service selection in GA Ticket Action allows multi
    select.
- update OTRS::ITSM to 3.3.9
  * Bug#10330 ? ITSM Impact field displayed with Key instead of Value.</changelog>
<changelog author="chris@computersalat.de" date="1412078401">- fix changelog
  * update 3.3.9 with 3.3.9 data
  * add missing update info for OTRS::ITSM
- update itsm-3.3.9 Source</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post script</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- One more fix after fix bashisms in previous commit</changelog>
<changelog author="chris@computersalat.de" date="1419854400">- fix for boo#910988 (CVE-2014-9324)
- update to 3.3.11
  fix for OSA-2014-06 (CVE-2014-9324)
  * Updated translations, thanks to all translators.
  * Bug#10904 ? Upon entering CIC, search only returns hits during
    the first search.
  * Bug#10944 ? Multiple selection in Tree Selection also affects
    filtered elements.
  * Follow-up fix for Bug#6284 ? Problem with unicode characters
    when using FastCGI.
  * Bug#10830 ? Textarea Limitation in Generic Agent.
  * Bug#10920 ? ProcessManagement: Deleting Activities from canvas
    does not update process layout.
  * Bug#10801 ? Editor is extremely slow with large articles.
  * Enhanced Permission Checks in GenericInterface Ticket Connector.
  * Bug#10634 ? ProcessManagement: Can not use an arbitrary email
    address as a CustomerUser.
  * Bug#10839 ? ACL cannot set possible TicketType in
    AgentTicketPhone and AgentTicketEmail.
  * Bug#10776 ? Medium and Large view don?t indicate active
    filters.
  * Bug#10808 ? Set of pending time is not working at all in
    Frontend::Agent::Ticket::ViewNote.
  * Bug#10892 ? TicketActionsPerTicket open multiple popups at
    TicketOverview.
  * Bug#10857 ? JS added too often in AgentTicketOverviewSmall.
  * Bug#10639 ? Set of pending time/state not working properly
    (process management).
  * Bug#10893 ? Missing log name partitions in Service Center.
  * Bug#10879 ? GenericInterfae: TicketSearch operation does not
    take escalation parameters.
  * Bug#10812 ? SOAP Response is always in version SOAP 1.2.
  * Bug#10083 ? SMIME and Email address detection is case sensitive
    (for the right part)..
  * Bug#10826 ? German ? Translation Problem.
  * Bug#10678 ? Dates off by one on area diagram in dashboard widget.
  * Bug#7369 ? LinkQoute fails for some characters in hash or
    parameter.
  * Bug#8404 ? Wrong sorting of responses dropdown in TicketZoom.
  * Bug#8781 ? 508 Compliance: In Ticket Overviews the title
    attribute of large view link is incorrect.
  * Bug#10669 ? Maxlength validation of textarea dynamic fields does
    not work correctly in IE.
  * Bug#10471 ? Missing translations for tooltips of
    TicketOverviewSmall columns.
  * Bug#10850 ? Double-quoted special characters in title of dynamic
    field sidebar output in TicketZoom.
  * Bug#10805 ? Open tickets in 3 days show right function but wrong
    number.
  * Bug#10845 ? No date search if TimeInputFormat is Input.
  * Bug#10706 ? dashboard settings are lost by different user login.
  * Bug#10577 ? Service Center does not show MOD_PERL version on
    Ubuntu 14.04.
  * Bug#10679 ? Texts in notification tags loose their empty lines
    and spaces.</changelog>
<changelog author="aj@ajaissle.de" date="1445688000">- Update to 3.3.15
  * HTML emails not properly displayed (parts missing).
  * Fixed a nasty JSON::XS crash on some platforms.
  * Updated CPAN module Proc::Daemon to version 0.21.
  * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT).
  * auto reply with DynamicFields from webservice.
  * Added option to package manager list action, to show deployment info of installed packages.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
- Changes 3.3.14
  * Package installation/uninstallation leads to endless loop.
  * Lang parameter not correctly validated.
  * Search for multiple ticket numbers with GenericInterface.
- Changes 3.3.13
  * Updated translation files.
  * Refresh bug on process client interface using ie8
  * Adding email recipients via addressbook does not update customer information.
  * Wrong column encoding in Kernel::System::Notification::NotificationGet().
  * Generic Agent ticket actions can't be unselect.
  * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
  * Download button for dashboard stats visible even if no permissions for AgentStats exist..
  * Invalid utf-8 parameters not filtered sufficciently.
  * DynamicField Filter in AgentDashboard accepts only one value.
  * Can't select customer and/or public interface in AdminACL.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys.
  * Added possibility to turn of SSL certificate validation.
  * SLA can not be set over Free Fields Dialog.
  * Not possible to change customer.
  * Error from GenericInterface using SOAP and TicketGet operation.
  * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm.
  * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20.
- Changes 3.3.12
  * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker.
  * Adressbook search does not permit to add contacts via click.
  * Wrong sortation of Ticket Overview settings.
  * Missing translations in Dashboard and TicketOverview settings.
  * Internal Server Error, instead of warning.
  * Dashlet: Filter Attributes with more then one CustomerID doesn't work.
  * SQL error with "0 oracle" for article body in Ticket Search.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig).
  * ProcessManagement: TransitionAction delete does not check if is used.
  * GPG option 0xlong breaks decryption of emails.
  * ORA-03113 Error after scheduler start.
  * /etc/init.d/otrs running httpd is not detected on CentOS 7.
  * Unable to change password in customer interface.
  * Dynamic Field shown information in customer interface is not consistent with agent interface.
  * Error: No Process configured! - Agent interface.
  * Error while splitting ticket.
  * ActivityDialogEntityID not working in ACLs from Process screens reducing States.
- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch
- Added itsm-update.sh, a script to update the itsm source we use
- Updated sources
  * otrs.README.de
  * otrs.README.en
  * UPGRADING.SuSE -&gt; UPGRADING.SUSE
  * ZZZAuto.pm</changelog>
<changelog author="chris@computersalat.de" date="1477828800">- fix itsm package
  * version is 3.3.14
- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch
- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch</changelog>
<changelog author="chris@computersalat.de" date="1478088000">- fix for boo#1008017
  * execution of JavaScript in OTRS context by opening malicious attachment
- Update to 3.3.16
  * Improved sandboxing of displayed attachments.
    see OSA-2016-02 (CVE-2016-9139)
  * Added package verification information to otrs.PackageManager.pl,
    use bin/otrs.PackageManager.pl -a list -e (to show package verification
    information) or bin/otrs.PackageManager.pl -a list -e -c
    (to show package verification information deleting the cache before).
  * Bug#11959 ? 500 Can?t connect to www.otrs.com/product.xml:443.
  * Bug#11870 ? Missing quoting in Layout::AgentQueueListOption().
  * Bug#11802 ? Customer user can get access to all ticket data.
- fix ZZZAuto.pm
  * do not replace existing file (manually merge needed for ITSM)</changelog>
<changelog author="chris@computersalat.de" date="1496836800">- fix for boo#1043086
  * Incorrect Access Control in OTRS
- Update to 3.3.17 2017-06-06
  * Improved SecureMode detection in Installer.
    see OSA-2017-03 (CVE-2017-9324)
  * Bug#12753 - Function "SystemDataGroupGet" has problems with empty
    values in oracle.
  * Bug#9941 - Articles with multi-byte characters that claim to be
    UTF-8 will not display in the browser.
  * Bug#7961 - customer search should not return results for internal
    articles.
    see OSA-2017-02
  * Bug#12391 - Base64 encoded image does not display in article.
  * Bug#12461 - Chrome can not display attached PDF files since 5.0.14.</changelog>
<changelog author="chris@computersalat.de" date="1506168000">- fix for boo#1059691 (CVE-2017-14635)
  * Code Injection / Privilege Escalation OTRS
- Update to 3.3.18
  * Improved validation in statistic import and export.
    see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
  * Updated CPAN module URI to version 1.72.</changelog>
<changelog author="chris@computersalat.de" date="1510920000">- fix for boo#1068677 (CVE-2017-15864, OSA-2017-06)
  * vulnerabilities discovered in the OTRS framework:
    An attacker who is logged into OTRS as an agent can request special
    URLs from OTRS which can lead to the disclosure of any configuration
    information, including database credentials.
- Update to 3.3.19
  * Not needed mandatory stats object module function in 'ObjectModuleCheck'.</changelog>
<changelog author="chris@computersalat.de" date="1511352000">- fix for boo#1069391 (CVE-2017-16664, OSA-2017-07)
  * vulnerabilities discovered in the OTRS framework:
    An attacker who is logged into OTRS as an agent can request special
    URLs from OTRS which can lead to the execution of shell commands
    with the permissions of the web server user.
- Update to 3.3.20
  * Improved handling of spell checker.
  OTRS 3.3 is now EOL, officially supported versions are OTRS &gt;= 4
  Please consider updating to a newer OTRS version.</changelog>

</package>
<package pkgid="870c88da47e6b610ec77ec6d3e035db06e1522cd994de09a5b59d6e99a94b814" name="otrs" arch="src">
    <version epoch="0" ver="3.3.18" rel="9.1"/>

<changelog author="alexandre@exatati.com.br" date="1378382400">- Update to 3.2.10:
  * Bug#9617 - Event-based notifications are not sent for process-tickets.
  * Bug#9666 - Installing an invalid package cause an server error on
    package manager.
  * Bug#8408 - No separator used in CSV files if UserCSVSeparator enabled
    and not set.
  * Bug#9635 - article_search not updated on ticket merges.
  * Bug#9629 - ORA-936 error in AgentTicketSearch with some search clauses.
  * Bug#9631 - BuildSelection() Selected does not work if value contains
    strings that are HTML-escaped.
  * Bug#9630 - Dynamic Fields of type Date can record wrong date when
    TimeZoneSettings are used.
  * Bug#9316 - Under nginx CustomerInformationCenter search returns Bad
    Gateway.
  * Bug#9610 - When email does not specify charset, content is not
    displayed in IE10.
  * Bug#9622 - Actions in Small ticket overview don't work when cookies
    are turned off.
  * Bug#9541 - Package manager cannot use https proxy.
  * Fixed bug pull#[83](https://github.com/OTRS/otrs/pull/83) - Pagination
    next page link, thanks to Renée Bäcker.
  * Bug#9594 - No auro-reply sent with multiple From addresses in
    AgentTicketPhone on PostgreSQL and Oracle.
  * Bug#3434 - Validity of search time frame not checked by OTRS.
  * Bug#5475 - Incorrectly limited ticket list queries in queue view.
  * Bug#8667 - No error Message when tryiing to Merge Ticket with itself.
  * Bug#6985 - SMTPTLS backend requires username and password.
  * Bug#3434 - Validity of search time frame not checked by OTRS.
  * Bug#9598 - Typo in vacation message for German locale.
  * Bug#9595 - Incomplete page reload handling in merge and bounce.
  * Bug#5307 - Tickets can be raised against an invalid Customer Company.
  * Bug#9596 - On merge and bounce screens is confusing when fill or
    not 'To', 'Subject' and 'Body' fields.
  * Bug#9514 - Bulk action (send email) uses senders address instead of
    customer id.
  * Bug#9595 - Incomplete page reload handling in merge and bounce.
  * Bug#9570 - AgentTicketSearch with exclamation mark emits invalid SQL
  * Bug#3007 - CheckMXRecord and CheckEmailAddresses have no effect on
    AgentTicketBounce.
  * Bug#9512 - Database error for invalid date in AgentTicketSearch.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#8428 - Bad usability of multiple sender/recipient feature.
  * Bug#9556 - Bounce and merge require notification recipient, subject
    and body even if no notification is sent.
  * Bug#9584 - No server side validation of To/Subject/Body in merge
    mask.
  * Bug#9578 - DynamicField sorting does not work on TicketSearch
    results in Customer Interface.
  * Bug#9579 - SOAP Serializer used in Kernel/GenericInterface/Transport/HTTP/SOAP.pm
    does not correctly set namespace.
  * Bug#9577 - Engine translate date to dado from english to pt_BR.
  * Bug#7359 - Setting pending states via generic agent does not set
    pending time.
  * Bug#5920 - Search restriction for dates is not displayed in
    customer interface.
  * Bug#8380 - Middle name not displayed in AdminCustomerUser.
  * Bug#9576 - GI TicketSearch Date and Date/Time dynamic fields are
    ignored.
  * Changed Dynamic Field SearchFieldParameterBuild() API, LayoutObject
    is now optional.
  * Bug#9573 - Date and DateTime dynamic fields not considered in
    GenericAgent Jobs.</changelog>
<changelog author="chris@computersalat.de" date="1379505600">- update OTRS::ITSM to 3.2.9
  * Bug#9637 - ITSM Overview shows error if agent has no permission to any
    config item class.
  * Bug#9621 - GeneralCatalog does not allow the number zero (0) as value
    for a GeneralCatatalog ClassItem.
  * Rollback changes for bug#9613. Due to a last minute problem with the
    mentioned bug fix we had to revert and release a new version of OTRS ITSM!
- rebase otrs-perm patch
  * fix spec (better fix cause than symptom)
    remove exclude %{otrs_root}/%{name}/Kernel/System/Package.pm.orig</changelog>
<changelog author="alexandre@exatati.com.br" date="1383739200">- Update to 3.2.12:
  * Updated French translation, thanks to Olivier Sallou!
  * Bug#9910 - Startup warnings/errors with Perl 5.18.1.
  * Bug#9753 - META HTTP-EQUIV="Refresh" tag not stripped from HTML
    email.
  * Bug#9897 - process ticket 'fading away' -&gt; Process is invalid.
  * Bug#9749 - Using spell checker in rich text Editor strips HTML
    formatting.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#9883 - Stats Overview is slow due Caching bug (object cache does
    not work).
  * Bug#9839 - Inline images not showing up when cookies are disabled.
  * Moved process import functionality in the backend module
    Kernel/System/ProcessManagement/DB/Process.pm.
  * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard.
  * Bug#9814 - Tickets without articles not shown correcly in medium view.
  * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values
    of toolbar widgets are ignored.
  * Bug#9391 - Incorrect permissions on .procmailrc.
  * Bug#9796 - Misaligned Headers on Simple Stats.
- Aditional changes from 3.2.11:
  * Bug#9542 ? Uninitialized value in AgentTicketForward.
  * Bug#9765 ? Dynamic Field values are completely removed if one entry
    contains a dash.
  * Bug#9764 ? ACL, Queue will ignored with customerID.
  * Bug#9762 ? Queue View ? S / M / L views ? not saved after logout.
  * Bug#9580 ? Time fields in TicketGetResponse Ticket element do not
    comply with xsd:DateTime format.
  * Bug#9748 ? ProcessManagement: Duplicate articles in a process-ticket
    (TransitionAction).
  * Bug#9759 ? Installer Error DB ? max key length is 767 bytes.
  * Bug#9747 ? Only first selected process displays the RichText editor.
  * Bug#9688 ? ORA-01839 error occurs at DynamicField in TicketSearch.
  * Bug#9751 ? TimeUnits are not accepted with a value of 0.
  * Bug#9739 ? Customer interface not working with MySQL 5.6.
  * Bug#8489 ? setting Tickets per page resets AgentTicketQueue.
  * Bug#9732 ? German translation file de.pm incomplete.
  * Bug#9728 ? Bulk action (send email) ignores reply-to address from
    unknown customers.
  * Bug#9661 ? Useless code in DynamicField backend.
  * Bug#9701 ? Ticket overview Queue Sort Filter is missing.
  * Bug#8173 ? Dashboard Widget ?Online? does not save state.
  * Bug#9188 ? AgentTicketEmail always loads a signature, even if no
    queue is selected.
  * Bug#9672 ? Undecrypted HTML part displayed when viewing a
    multipart/alternative PGP encrypted HTML mail.</changelog>
<changelog author="chris@computersalat.de" date="1386763200">- update to 3.2.13
  * Bug#9327 ? Filter breaks ?Select all? functionality.
  * Bug#9999 ? Timestamps in HistoricalValueGet return milliseconds on SQL
    Server.
  * Bug#10027 ? Added old ticket information to ticket_history.
  * Bug#7337 ? AJAX Error on new Phone Ticket on IIS when using JSON::XS.
  * Bug#8991 ? Back-action does not work when search result returned just 1
    ticket.
  * Bug#9937 ? Activity-Dialogs in wrong order.
  * Bug#9954 ? PGP Crypted and Signed emails could be wrongly parsed.
  * Bug#9639 ? TextArea validation message not translated.
  * Bug#9944 ? Search Template issue.
  * Bug#9938 ? ActivityDialog doesn?t show queues with move_into permissions.
  * Bug#9940 ? Fedora misses dependency on Sys::Syslog.
  * Removed Patch/Workaround for CPAN MIME::Parser v5.503
    (introduced in OTRS 3.2.2) replaced with another solution, as it was
    causing problems with PGP.
  * Bug#9916 ? Error when updating CustomerUser Login on ForeignDB.
  * Bug#9841 ? Tabbing changes radio button of owner change selection.
  * Bug#9867 ? Validation errors are not shown correctly when replying to a
    ticket in Customer Interface.
  * Bug#9914 ? Spellchecker ignores double wrong words.</changelog>
<changelog author="chris@computersalat.de" date="1393416000">- fix for bnc#866476 (CVE-2014-1695)
- update to 3.2.15
  (fix for OSA-2014-03, CVE-2014-1695)
  * Improved HTML filter.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer
    ID instead Agent ID.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as
    a customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work
    when authenticated as a customer.
- 3.2.14
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Fixed bug#9959 - &amp; breaks ExpandCustomerName.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose.
  * Added functionality to disable access to tickets of other customers with
    the same customer company in customer interface.
  * Fixed bug#9650 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.</changelog>
<changelog author="chris@computersalat.de" date="1394107200">- update to 3.3.5
  * Improved HTML filter.
  * Followup fix for bug#10116 - Random ordering of columns in "Small" ticket
    lists.
  * Re-implemented Process Management ProcessImport().
  * Fixed bug#10258 - yellow color for UnreadArticles.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Updated Polish translation, thanks to Wojciech Myrda.
  * Fixed bug#6323 - Graph/Chart generation selects slice/background color
    identical to text color.
  * Added feature to download report data shown in dashboard stats as CSV and
    PDF.
  * Fixed bug#10248 - OTRS Portal - Overview of registered systems.
  * Added browser check for IE10 in compatibility mode.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for
    dynamic fields.
  * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB.
  * Fixed bug#7818 - Menu simplification is not working for item "responsible".
  * Added new option "bin/otrs.LoaderCache.pl -o generate" to generate the
    loader cache for all frontend modules. This can be useful in cluster setups.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#10201 - Wrong column sort order in ticketoverview widget.
  * Fixed bug#10195 - Folluw up notification shows old prio after prio change.
  * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating
    new ticket from customer creation.
  * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI.
  * Follow-up fix for bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10220 - Invalid Statistics not displayed in overview.
  * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl
    not set.
  * Fixed bug#10177 - Missing sources in tarball.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#7440 - Ticket overviews don't show column headers for priority and
    unread articles in small mode.
  * Added process management canvas label spacer to avoid overlapping transition
    labels.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working.
  * Fixed bug#10163 - subject shows only 30 characters.
  * Fixed bug#10193 - Expired cookie bug in customer interface..
  * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order.
  * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket.
  * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen
    results in an error no matter what data was filled in.
  * Fixed bug#10209 - When opening tree selection dialog, the search field
    should get the focus.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#10130 - Events Ticket Calendar not working.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID
    instead Agent ID.
  * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a
    customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when
    authenticated as a customer.
  * Fixed bug#10176 - available columns selection in search result view is not
    scrollable.
  * Fixed bug#10120 - Management Dashboard: page reload erases stat graph
    settings.
  * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with
    all lines concatenated to one
  * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl.
  * Fixed bug#10178 - Stat Permissions.
  * Fixed bug#10188 - Inconsistency in graphical ACL editor.
  * Fixed bug#10155 - backup.pl doesn't compress database dump on non-MySQL.
  * Fixed bug#10106 - Sending Articles with ArticleSend() ignores ReplyTo.
  - 3.3.4 2014-01-28
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10153 - Error shown in SysConfig when Setting PendingDiffTime to
    30 Days.
  * Fixed bug#10161 - Edit Stats - 500 internal Server Error.
  * Fixed bug#10167 - Non-deterministic hash key construction in Stats.pm.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#10048 - RPM upgrade breaks permissions on config files.
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Updated traditional Chinese translation.
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Fixed bug#10145 - %A is not correctly substituted in Language::Time().
  * Fixed bug#10079 - Cannot operate OTRS on IE7 because of JavaScript error.
  * Fixed bug#10113 - Management dashboard setting doesn't show up when agent
    only has RO on stats.
  * Fixed bug#10088 - Error messages on recieving mailer daemons.
  * Fixed bug#10011 - Management Dashboard: X-Axis element labels may overlap.
  * Fixed bug#10012 - Management Dashboard: strings not translatable.
  * Fixed bug#10140 - Unable to search using before/after in Date Dynamic Fields.
  * Fixed bug#10008 - Customer user is automatically added to Cc at response for
    email-internal in AgentTicketCompose.
  * Added Hebrew translation file, thanks to Amir Elion!
  * Fixed bug#9978 - Activity Dialog for Customer shows "No Process configured!".
  * Fixed bug#10134 - Missing information on icon actions for SMIME certificates
    and keys.
  * Fixed bug#10116 - Random ordering of columns in "Small" ticket lists.
  * Fixed bug#10094 - Former FAO OTRSACLExtensions not available in the ACL
    Editor.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose
  * Fixed bug#10080 - Bad group check in otrs-scheduler-linux.
  * Fixed bug#10097 - $Param{NextState} is always undef in AgentTicketCompose.
  * Updated Russian translation, thanks to Yuriy Kolesnikov.
  * Fixed bug#10074 - Error if no queue matched in DashboardEventsTicketCalendar.
  * Fixed bug#965 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Added functionality to disable access to tickets of other customers with the
    same customer company in customer interface.
  * Fixed bug#9702 - Wrong article type with external ticketnumber recognition
    i.c.w. follow-up reject option.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10078 - Installer: error log after creating mysql database.
  * Fixed bug#10056 - Installer fails when special characters in database user's
    password.
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Updated Swedish translation, thanks to Andreas Berger.
  * Fixed bug#10075 - Stats widgets permission group is hardcoded to "stats"
  * Updated Russian translation, thanks to Andrey N. Burdin.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.
  * Fixed bug#10058 - Owner and Responsible are mandatory if enabled.
  * Fixed bug#7792 - Ticket-Action "Change Queue" is hardcoded and should be
    called "Queue" only.
  * Fixed bug#9109 - Printing ticket does not show the full subject line.
  * Fixed bug#10064 - Translated fields loose sorting in Activity Dialog admin
    screen.
  * Fixed bug#10066 - Required field isn't marked in AgentTicketCustomer.
  * Fixed bug#10059 - Service selection unavailable if customer selection is
    possible.
  * Fixed bug#10062 - Text label indent for locale RU - AgentÒicketViewCompose
  * Fixed bug#10044 - PendingDiffTime removes 2013 (current year) when reaching
    end of the year.
  * Fixed bug#10049 - Transition names in path edit screen ordered by ID instead
    of name.
  * Fixed bug#10055 - Queue-Treeview not working correctly.
  * Fixed bug#10061 - ArticleType dropdown in graphical ActivityDialog mask
    loads with empty value
  * Fixed bug#10060 - Field names are not translated in graphical process editor.
- for further changes please see:
  * https://github.com/OTRS/otrs/blob/rel-3_3_5/CHANGES.md
- rebase patches
  * httpd_config, removed obsolete stuff, added new
  * perm</changelog>
<changelog author="chris@computersalat.de" date="1396526400">- fix for bnc#871758 (CVE-2014-2553)
- update to 3.3.6
  fix for OSA-2014-04 (CVE-2014-2553)
  fix for OSA-2014-05 (CVE-2014-2554)
  * Updated French translation, thanks to Guillaume Houdmon.
  * Extended the OTRS system registration to optionally also send the
    support assessment data along with the system registration data.
    Support assessment data is improved and extended and can be
    accessed in the new Service Center module of the admin area.
  * Fixed bug#10405 - When using the search feature of the tree
    selection overlay, one is not able to expand subtrees of matching
    entries.
  * Fixed bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10400 - AgentTicketProccess will not use error messages
    of dynamic field drivers.
  * Fixed bug#10397 - DynamicField configuration in SysConfig
    'DefaultOverviewColumns' causes JS error.
  * Fixed bug#9592 - Ticket history overflows for dynamic field.
  * Fixed bug#10368 - Ticket title isn't shown.
  * Updated Japanese translation, thanks to Toshihiro Takehara..
  * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
  * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
    AgentTicketSearch view.
  * Fixed bug#10384 - out-of-office information not displayed in
    Ticket Zoom.
  * Fixed bug#10379 - ACL Not Working.
  * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
    AgentTicketActionCommon.
  * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
    RichText Editor.
  * Improved handling of cachekeys in Stats.pm to prevent cacheing
    problems in the dashboard stats.
  * Fixed bug#10334 - Deleting the attachment deletes the recepients
    too.
  * Fixed bug#10374 - OTRS does not protect against clickjacking.
  * Fixed bug#10364 - Inline images displayed as attachment in SMIME
    and PGP signed messages.
  * Fixed bug#10251 - SMIME signing fail on mails with attachements.
  * Fixed bug#10277 - Statistics per agent also shows invalid agents.
  * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
    empty values.
  * Fixed bug#10365 - Custom State types not working with
    "otrs.PendingJobs.pl" any more.
  * Fixed bug#10349 - System Email notification external not
    highlighted correctly.
  * Fixed bug#10361 - Incorrect handling of special characters in
    DynamicFields.
  * Fixed bug#10324 - Customer user field still marked as empty even
    after providing data.
  * Fixed bug#10019 - Tickets via "In line action bar" cannot be moved.
  * Fixed bug#10283 - MouseOver on the Transitions does not show
    transition actions.
  * Fixed bug#10241 - ACL-Editor Bug..
  * Fixed bug#10338 - Empty Content-ID causes strange result -&gt;
    HTML-tags are "corrupted".
  * Fixed bug#9951 - Line breaks at the end of salutation templates
    are not saved.
  * Fixed bug#10275 - Problem with encoding in attachment.
  * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
    garbage in the database.
  * Fixed bug#10336 - Problem with symlinked theme directories.
  * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
    DynamicField changed.
  * Fixed bug#10264 - Description (espacially article description) in
    processes are shown on improper place.
  * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
  * Fixed bug#10240 - Restricting process list by ACLs is only working
    with UserID.
  * Fixed bug#10299 - "Ouf of Office" shows inactive agents.
  * Fixed bug#10321 - Applying Filters to tickets in Status View or
    Queue View will log out session..
  * Fixed bug#9600 - When a ticket is deleted by generic agent job,
    No such TicketID error.
  * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
  * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Fixed bug#10300 - Special character in customer id cuts off string.
  * Fixed bug#10309 - mails with an empty return-path header must not
    trigger auto responses in OTRS.
  * Fixed bug#10245 - Use of uninitialized value $Param{"Value2"} in
    string.
  * Fixed bug#10182 - Customer email suddenly treated by OTRS as
    'email-internal'.
  * Fixed bug#10285 - No use Ticket::Hook in CustomerTicketZoom.
  * Fixed bug#9787 - Queue field doesn't appear in ProcessMgmt.
  * Fixed bug#10222 - Customer search during ticket creation - OTRS
    shows details also if no customer match the search.
  * Fixed bug#10259 - GenericInterface: mapping key can't map from / to 0.
- rebased perm patch
- update httpd_conf patch</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update to 3.3.7
  * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines.
  * Updated Japanese translation, thanks to Toshihiro Takehara.
  * Updated Swedish translation, thanks to Peter Krantz.
  * Added CPAN module Archive::Tar.
  * Split otrs.checksum.pl functionality it is only able to work in compare mode.
  * Extended package object to be able to generate an MD5Sum of all files within
    a package.
  * Extended email send capabilities to include custom X-Headers.
  * Extended the OTRS services to be able to create a support bundle file.
  * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom.
  * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB.
  * Fixed bug#10458 - Can't use system registration with some OTRS-IDs.
  * Fixed bug#10470 - Need FormID! error when embedding image when creating a
    Process Ticket.
  * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany.
  * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via
    cron jobs.
  * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171.
  * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search
    term was selected.
  * Fixed bug#10428 - Event Notification ArticleSend Loop.
  * Fixed bug#10441 - Eventbased notification - infinite loop.
  * Fixed bug#10462 - Translation of static statistic widgets (Dashboard).
  * Added OTRS Scheduler Watchdog mode.
  * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads
    page for temporary links.
  * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface
    displayed even though no process is available..
  * Fixed bug#8253 - Missing hover texts for actions in German translation
    of AgentTicketZoom.
  * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard).
  * Fixed bug#10395 - E-mail header parsing bug.
  * Fixed bug#10394 - rfc822 attachments name creating bug and validation
    enhancement.
  * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL.
  * Fixed bug#10402 - Transition or Transition Action popup a login page.
  * Fixed bug#10446 - otrs.PostMasterMailbox.pl Unknown encoding
    '3DISO-8859-2?=' at /usr/local/otrs/Kernel/System/Encode.pm line 367.
  * Fixed bug#8207 - Wrong encoding in graphs.
  * Fixed bug#10416 - Customer selection is not translated.
  * Fixed bug#9098 - The system still consider the customer_ids, even after
    field is empty on table customer_user.
  * Fixed bug#10202 - Process Modules, Dynamic Fields, and ACLs with AJAX update.
  * Fixed bug#10432 - ACLs not working correctly in CustomerTicketZoom
    (Message Followup).
  * Fixed bug#10436 - Error message in syslog about ACL then there is no ACL
    defined.
  * Fixed bug#10438 - Strange sorting of columns in Ticket Dashboard widgets.
  * Fixed bug#10425 - Customer Information in AgentTicketZoom.
  * Followup for bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10406 - Ticket Templates Type "Create" will be not translated.
  * Fixed bug#10378 - SessionID created with generic interface wont work using
    it as Agent.
  * Fixed bug#10399 - Columns Settings lost after search.
  * Fixed bug#10431 - Fallback configuration for scheduler log is wrong.
  * Fixed bug#10426 - Scheduler RegistrationUpdate task dies with PostgreSQL DB.
  * Fixed bug#10362 - .procmailrc is reset with wrong permissions on
    otrs.SetPermisssion.pl execution.
  * Fixed bug#10350 - Events Ticket Calender: In case
    TicketCalendarStartTime=TicketCalendarEndTime, displayed ticket event time
    frame always 2 hours.
  * Fixed bug#9970 - Existing sequences on oracle databases produces errors.
  * Enhanced DiskSpacePatitions SupportDataCollector plugin to deal correctly
    with multiple partitions with the same name.
  * Followup for bug#10130 - Events Ticket Calendar not working.
- update OTRS::ITSM to 3.3.7
  * Bug# 10146 ? ConfigItem search for Integer shows all CIs in results.
  * Bug# 10487 ? ACL Editor did not include Decision and ITSM field action.</changelog>
<changelog author="jamesp@vicidial.com" date="1404129600">- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4
  * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the configuration file had to be modified to look for
    this static module and load pre-2.4 directives if found on
    Apache 2.4. It should be forward compatible if the mod_access
    compat.c module become dynamic in the future and is not loaded.</changelog>
<changelog author="chris@computersalat.de" date="1406635200">- update to 3.3.8
  * Bug#10524 ? Internal Dynamic Fields in Activity Dialog.
  * Bug#10562 ? Inconsistent displaying of ?CustomerID? value.
  * Bug#10508 ? (Agent|Customer)TicketProcess javascript errors when
    uploading attachments/having server errors.
  * Bug#10521 ? OutputFilterText AutoLink CVE.
  * Bug#10430 ? backup.pl doesn?t work with PostgreSQL unix sockets.
  * Bug#5012 ? Merging a watched ticket into another should ?transfer?
    the Watch status to the final ticket, thanks to Michiel Beijen!
  * Bug#10544 ? Upgrade to OTRS 3.3.7 breaks connection to external
    customer user tables.
  * Bug#10535 ? ACLListGet() produces DB warning message.
  * Bug#10163 ? Subject shows only 30 characters.
  * Bug#10519 ? Opening and closing popups in ProcessManagement leads
    to performance issues.
  * Bug#10513 ? Some SupportData Plugin Identifiers ends with ::.
  * Bug#8494 ? Possibility to split quotes in rich text editor.
  * Bug#10491 ? CIC not always accessible via TicketZoom.
  * Bug#10427 ? Bulk action locks tickets ? cancel keeps them locked.
- update OTRS::ITSM to 3.3.8
  * Bug# 10558 ? Slow CI search for classes with a large MaxCount on
    a value and sub values.
  * Bug# 10570 ? Deleting ITSM Change search templates does not work.</changelog>
<changelog author="alexandre@exatati.com.br" date="1412078400">- Update to 3.3.9:
  https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md
  * Bug#10697 - Column name in CSV report of stats is lowercase.
  * Bug#10652 - Process tickets without any articles create empty
    lines in AgentTicketSearch CSV result file.
  * Bug#10607 - SQL Box can change the database.
  * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via
    BulkAction.
  * Bug#10699 - Cannot add new customer (company).
  * Bug#10497 - CustomerUser secondary database access opens multitude
    of database connections.
  * Bug#9756 - Owner will be set after QueueMove screen AND undo.
  * Bug#10606 - Dynamic fields in dashboard overview are empty.
  * Updated Danish translation, thanks to Lars Jørgensen.
  * Bug#10670 - It is possible to start the scheduler more than once.
  * Bug#10515 - Problem with column filter sorting
  * Bug#10598 - Field tags not parsed properly in auto response subject.
  * Bug#10658 - Issue with multiple customer company backends.
  * Bug#10622 - eMail address only with uppercases - wrong display.
  * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets
    as affected.
  * Bug#10601 - ExternalTicketNumberRecognition produces errors in log
    file.
  * Bug#9851 - Unlocking a ticket in the small view results in
    AgentTicketZoom.
  * Bug#10612 - Wrong Time in DashboardField "Changed", thanks to S7.
  * Bug#10595 - Standard Replies are false sorted in Ticket Zoom
    select box.
  * Bug#10534 - Wildcard hacking the customer information center,
    thanks to S7.
  * Bug#10597 - Process list description column doesn't support line
    breaks, thanks to S7.
  * Bug#10586 - In Customer Portal no attachments are shown.
  * Bug#6601 - Changing search options changes order of fields, thanks
    to S7.
  * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition
    doesn't work.
  * Bug#10559 - "Previous Owner" don't use the FirstnameLastnameOrder
    configuration.
  * Bug#10532 - PostMasterMailbox.pl hangs parsing mails.
  * Bug#10578 - Service selection in GA Ticket Action allows multi
    select.
- update OTRS::ITSM to 3.3.9
  * Bug#10330 ? ITSM Impact field displayed with Key instead of Value.</changelog>
<changelog author="chris@computersalat.de" date="1412078401">- fix changelog
  * update 3.3.9 with 3.3.9 data
  * add missing update info for OTRS::ITSM
- update itsm-3.3.9 Source</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post script</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- One more fix after fix bashisms in previous commit</changelog>
<changelog author="chris@computersalat.de" date="1419854400">- fix for boo#910988 (CVE-2014-9324)
- update to 3.3.11
  fix for OSA-2014-06 (CVE-2014-9324)
  * Updated translations, thanks to all translators.
  * Bug#10904 ? Upon entering CIC, search only returns hits during
    the first search.
  * Bug#10944 ? Multiple selection in Tree Selection also affects
    filtered elements.
  * Follow-up fix for Bug#6284 ? Problem with unicode characters
    when using FastCGI.
  * Bug#10830 ? Textarea Limitation in Generic Agent.
  * Bug#10920 ? ProcessManagement: Deleting Activities from canvas
    does not update process layout.
  * Bug#10801 ? Editor is extremely slow with large articles.
  * Enhanced Permission Checks in GenericInterface Ticket Connector.
  * Bug#10634 ? ProcessManagement: Can not use an arbitrary email
    address as a CustomerUser.
  * Bug#10839 ? ACL cannot set possible TicketType in
    AgentTicketPhone and AgentTicketEmail.
  * Bug#10776 ? Medium and Large view don?t indicate active
    filters.
  * Bug#10808 ? Set of pending time is not working at all in
    Frontend::Agent::Ticket::ViewNote.
  * Bug#10892 ? TicketActionsPerTicket open multiple popups at
    TicketOverview.
  * Bug#10857 ? JS added too often in AgentTicketOverviewSmall.
  * Bug#10639 ? Set of pending time/state not working properly
    (process management).
  * Bug#10893 ? Missing log name partitions in Service Center.
  * Bug#10879 ? GenericInterfae: TicketSearch operation does not
    take escalation parameters.
  * Bug#10812 ? SOAP Response is always in version SOAP 1.2.
  * Bug#10083 ? SMIME and Email address detection is case sensitive
    (for the right part)..
  * Bug#10826 ? German ? Translation Problem.
  * Bug#10678 ? Dates off by one on area diagram in dashboard widget.
  * Bug#7369 ? LinkQoute fails for some characters in hash or
    parameter.
  * Bug#8404 ? Wrong sorting of responses dropdown in TicketZoom.
  * Bug#8781 ? 508 Compliance: In Ticket Overviews the title
    attribute of large view link is incorrect.
  * Bug#10669 ? Maxlength validation of textarea dynamic fields does
    not work correctly in IE.
  * Bug#10471 ? Missing translations for tooltips of
    TicketOverviewSmall columns.
  * Bug#10850 ? Double-quoted special characters in title of dynamic
    field sidebar output in TicketZoom.
  * Bug#10805 ? Open tickets in 3 days show right function but wrong
    number.
  * Bug#10845 ? No date search if TimeInputFormat is Input.
  * Bug#10706 ? dashboard settings are lost by different user login.
  * Bug#10577 ? Service Center does not show MOD_PERL version on
    Ubuntu 14.04.
  * Bug#10679 ? Texts in notification tags loose their empty lines
    and spaces.</changelog>
<changelog author="aj@ajaissle.de" date="1445688000">- Update to 3.3.15
  * HTML emails not properly displayed (parts missing).
  * Fixed a nasty JSON::XS crash on some platforms.
  * Updated CPAN module Proc::Daemon to version 0.21.
  * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT).
  * auto reply with DynamicFields from webservice.
  * Added option to package manager list action, to show deployment info of installed packages.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
- Changes 3.3.14
  * Package installation/uninstallation leads to endless loop.
  * Lang parameter not correctly validated.
  * Search for multiple ticket numbers with GenericInterface.
- Changes 3.3.13
  * Updated translation files.
  * Refresh bug on process client interface using ie8
  * Adding email recipients via addressbook does not update customer information.
  * Wrong column encoding in Kernel::System::Notification::NotificationGet().
  * Generic Agent ticket actions can't be unselect.
  * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
  * Download button for dashboard stats visible even if no permissions for AgentStats exist..
  * Invalid utf-8 parameters not filtered sufficciently.
  * DynamicField Filter in AgentDashboard accepts only one value.
  * Can't select customer and/or public interface in AdminACL.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys.
  * Added possibility to turn of SSL certificate validation.
  * SLA can not be set over Free Fields Dialog.
  * Not possible to change customer.
  * Error from GenericInterface using SOAP and TicketGet operation.
  * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm.
  * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20.
- Changes 3.3.12
  * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker.
  * Adressbook search does not permit to add contacts via click.
  * Wrong sortation of Ticket Overview settings.
  * Missing translations in Dashboard and TicketOverview settings.
  * Internal Server Error, instead of warning.
  * Dashlet: Filter Attributes with more then one CustomerID doesn't work.
  * SQL error with "0 oracle" for article body in Ticket Search.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig).
  * ProcessManagement: TransitionAction delete does not check if is used.
  * GPG option 0xlong breaks decryption of emails.
  * ORA-03113 Error after scheduler start.
  * /etc/init.d/otrs running httpd is not detected on CentOS 7.
  * Unable to change password in customer interface.
  * Dynamic Field shown information in customer interface is not consistent with agent interface.
  * Error: No Process configured! - Agent interface.
  * Error while splitting ticket.
  * ActivityDialogEntityID not working in ACLs from Process screens reducing States.
- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch
- Added itsm-update.sh, a script to update the itsm source we use
- Updated sources
  * otrs.README.de
  * otrs.README.en
  * UPGRADING.SuSE -&gt; UPGRADING.SUSE
  * ZZZAuto.pm</changelog>
<changelog author="chris@computersalat.de" date="1477828800">- fix itsm package
  * version is 3.3.14
- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch
- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch</changelog>
<changelog author="chris@computersalat.de" date="1478088000">- fix for boo#1008017
  * execution of JavaScript in OTRS context by opening malicious attachment
- Update to 3.3.16
  * Improved sandboxing of displayed attachments.
    see OSA-2016-02 (CVE-2016-9139)
  * Added package verification information to otrs.PackageManager.pl,
    use bin/otrs.PackageManager.pl -a list -e (to show package verification
    information) or bin/otrs.PackageManager.pl -a list -e -c
    (to show package verification information deleting the cache before).
  * Bug#11959 ? 500 Can?t connect to www.otrs.com/product.xml:443.
  * Bug#11870 ? Missing quoting in Layout::AgentQueueListOption().
  * Bug#11802 ? Customer user can get access to all ticket data.
- fix ZZZAuto.pm
  * do not replace existing file (manually merge needed for ITSM)</changelog>
<changelog author="chris@computersalat.de" date="1496836800">- fix for boo#1043086
  * Incorrect Access Control in OTRS
- Update to 3.3.17 2017-06-06
  * Improved SecureMode detection in Installer.
    see OSA-2017-03 (CVE-2017-9324)
  * Bug#12753 - Function "SystemDataGroupGet" has problems with empty
    values in oracle.
  * Bug#9941 - Articles with multi-byte characters that claim to be
    UTF-8 will not display in the browser.
  * Bug#7961 - customer search should not return results for internal
    articles.
    see OSA-2017-02
  * Bug#12391 - Base64 encoded image does not display in article.
  * Bug#12461 - Chrome can not display attached PDF files since 5.0.14.</changelog>
<changelog author="chris@computersalat.de" date="1506168000">- fix for boo#1059691 (CVE-2017-14635)
  * Code Injection / Privilege Escalation OTRS
- Update to 3.3.18
  * Improved validation in statistic import and export.
    see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
  * Updated CPAN module URI to version 1.72.</changelog>

</package>
<package pkgid="8328a6e7a9b247db83eba2a89ea0208c945daf54854e3cb6b4f9132383be2a4b" name="otrs" arch="src">
    <version epoch="0" ver="3.3.20" rel="14.1"/>

<changelog author="alexandre@exatati.com.br" date="1383739200">- Update to 3.2.12:
  * Updated French translation, thanks to Olivier Sallou!
  * Bug#9910 - Startup warnings/errors with Perl 5.18.1.
  * Bug#9753 - META HTTP-EQUIV="Refresh" tag not stripped from HTML
    email.
  * Bug#9897 - process ticket 'fading away' -&gt; Process is invalid.
  * Bug#9749 - Using spell checker in rich text Editor strips HTML
    formatting.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#9883 - Stats Overview is slow due Caching bug (object cache does
    not work).
  * Bug#9839 - Inline images not showing up when cookies are disabled.
  * Moved process import functionality in the backend module
    Kernel/System/ProcessManagement/DB/Process.pm.
  * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard.
  * Bug#9814 - Tickets without articles not shown correcly in medium view.
  * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values
    of toolbar widgets are ignored.
  * Bug#9391 - Incorrect permissions on .procmailrc.
  * Bug#9796 - Misaligned Headers on Simple Stats.
- Aditional changes from 3.2.11:
  * Bug#9542 ? Uninitialized value in AgentTicketForward.
  * Bug#9765 ? Dynamic Field values are completely removed if one entry
    contains a dash.
  * Bug#9764 ? ACL, Queue will ignored with customerID.
  * Bug#9762 ? Queue View ? S / M / L views ? not saved after logout.
  * Bug#9580 ? Time fields in TicketGetResponse Ticket element do not
    comply with xsd:DateTime format.
  * Bug#9748 ? ProcessManagement: Duplicate articles in a process-ticket
    (TransitionAction).
  * Bug#9759 ? Installer Error DB ? max key length is 767 bytes.
  * Bug#9747 ? Only first selected process displays the RichText editor.
  * Bug#9688 ? ORA-01839 error occurs at DynamicField in TicketSearch.
  * Bug#9751 ? TimeUnits are not accepted with a value of 0.
  * Bug#9739 ? Customer interface not working with MySQL 5.6.
  * Bug#8489 ? setting Tickets per page resets AgentTicketQueue.
  * Bug#9732 ? German translation file de.pm incomplete.
  * Bug#9728 ? Bulk action (send email) ignores reply-to address from
    unknown customers.
  * Bug#9661 ? Useless code in DynamicField backend.
  * Bug#9701 ? Ticket overview Queue Sort Filter is missing.
  * Bug#8173 ? Dashboard Widget ?Online? does not save state.
  * Bug#9188 ? AgentTicketEmail always loads a signature, even if no
    queue is selected.
  * Bug#9672 ? Undecrypted HTML part displayed when viewing a
    multipart/alternative PGP encrypted HTML mail.</changelog>
<changelog author="chris@computersalat.de" date="1386763200">- update to 3.2.13
  * Bug#9327 ? Filter breaks ?Select all? functionality.
  * Bug#9999 ? Timestamps in HistoricalValueGet return milliseconds on SQL
    Server.
  * Bug#10027 ? Added old ticket information to ticket_history.
  * Bug#7337 ? AJAX Error on new Phone Ticket on IIS when using JSON::XS.
  * Bug#8991 ? Back-action does not work when search result returned just 1
    ticket.
  * Bug#9937 ? Activity-Dialogs in wrong order.
  * Bug#9954 ? PGP Crypted and Signed emails could be wrongly parsed.
  * Bug#9639 ? TextArea validation message not translated.
  * Bug#9944 ? Search Template issue.
  * Bug#9938 ? ActivityDialog doesn?t show queues with move_into permissions.
  * Bug#9940 ? Fedora misses dependency on Sys::Syslog.
  * Removed Patch/Workaround for CPAN MIME::Parser v5.503
    (introduced in OTRS 3.2.2) replaced with another solution, as it was
    causing problems with PGP.
  * Bug#9916 ? Error when updating CustomerUser Login on ForeignDB.
  * Bug#9841 ? Tabbing changes radio button of owner change selection.
  * Bug#9867 ? Validation errors are not shown correctly when replying to a
    ticket in Customer Interface.
  * Bug#9914 ? Spellchecker ignores double wrong words.</changelog>
<changelog author="chris@computersalat.de" date="1393416000">- fix for bnc#866476 (CVE-2014-1695)
- update to 3.2.15
  (fix for OSA-2014-03, CVE-2014-1695)
  * Improved HTML filter.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer
    ID instead Agent ID.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as
    a customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work
    when authenticated as a customer.
- 3.2.14
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Fixed bug#9959 - &amp; breaks ExpandCustomerName.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose.
  * Added functionality to disable access to tickets of other customers with
    the same customer company in customer interface.
  * Fixed bug#9650 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.</changelog>
<changelog author="chris@computersalat.de" date="1394107200">- update to 3.3.5
  * Improved HTML filter.
  * Followup fix for bug#10116 - Random ordering of columns in "Small" ticket
    lists.
  * Re-implemented Process Management ProcessImport().
  * Fixed bug#10258 - yellow color for UnreadArticles.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Updated Polish translation, thanks to Wojciech Myrda.
  * Fixed bug#6323 - Graph/Chart generation selects slice/background color
    identical to text color.
  * Added feature to download report data shown in dashboard stats as CSV and
    PDF.
  * Fixed bug#10248 - OTRS Portal - Overview of registered systems.
  * Added browser check for IE10 in compatibility mode.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for
    dynamic fields.
  * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB.
  * Fixed bug#7818 - Menu simplification is not working for item "responsible".
  * Added new option "bin/otrs.LoaderCache.pl -o generate" to generate the
    loader cache for all frontend modules. This can be useful in cluster setups.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#10201 - Wrong column sort order in ticketoverview widget.
  * Fixed bug#10195 - Folluw up notification shows old prio after prio change.
  * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating
    new ticket from customer creation.
  * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI.
  * Follow-up fix for bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10220 - Invalid Statistics not displayed in overview.
  * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl
    not set.
  * Fixed bug#10177 - Missing sources in tarball.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#7440 - Ticket overviews don't show column headers for priority and
    unread articles in small mode.
  * Added process management canvas label spacer to avoid overlapping transition
    labels.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working.
  * Fixed bug#10163 - subject shows only 30 characters.
  * Fixed bug#10193 - Expired cookie bug in customer interface..
  * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order.
  * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket.
  * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen
    results in an error no matter what data was filled in.
  * Fixed bug#10209 - When opening tree selection dialog, the search field
    should get the focus.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#10130 - Events Ticket Calendar not working.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID
    instead Agent ID.
  * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a
    customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when
    authenticated as a customer.
  * Fixed bug#10176 - available columns selection in search result view is not
    scrollable.
  * Fixed bug#10120 - Management Dashboard: page reload erases stat graph
    settings.
  * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with
    all lines concatenated to one
  * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl.
  * Fixed bug#10178 - Stat Permissions.
  * Fixed bug#10188 - Inconsistency in graphical ACL editor.
  * Fixed bug#10155 - backup.pl doesn't compress database dump on non-MySQL.
  * Fixed bug#10106 - Sending Articles with ArticleSend() ignores ReplyTo.
  - 3.3.4 2014-01-28
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10153 - Error shown in SysConfig when Setting PendingDiffTime to
    30 Days.
  * Fixed bug#10161 - Edit Stats - 500 internal Server Error.
  * Fixed bug#10167 - Non-deterministic hash key construction in Stats.pm.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#10048 - RPM upgrade breaks permissions on config files.
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Updated traditional Chinese translation.
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Fixed bug#10145 - %A is not correctly substituted in Language::Time().
  * Fixed bug#10079 - Cannot operate OTRS on IE7 because of JavaScript error.
  * Fixed bug#10113 - Management dashboard setting doesn't show up when agent
    only has RO on stats.
  * Fixed bug#10088 - Error messages on recieving mailer daemons.
  * Fixed bug#10011 - Management Dashboard: X-Axis element labels may overlap.
  * Fixed bug#10012 - Management Dashboard: strings not translatable.
  * Fixed bug#10140 - Unable to search using before/after in Date Dynamic Fields.
  * Fixed bug#10008 - Customer user is automatically added to Cc at response for
    email-internal in AgentTicketCompose.
  * Added Hebrew translation file, thanks to Amir Elion!
  * Fixed bug#9978 - Activity Dialog for Customer shows "No Process configured!".
  * Fixed bug#10134 - Missing information on icon actions for SMIME certificates
    and keys.
  * Fixed bug#10116 - Random ordering of columns in "Small" ticket lists.
  * Fixed bug#10094 - Former FAO OTRSACLExtensions not available in the ACL
    Editor.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose
  * Fixed bug#10080 - Bad group check in otrs-scheduler-linux.
  * Fixed bug#10097 - $Param{NextState} is always undef in AgentTicketCompose.
  * Updated Russian translation, thanks to Yuriy Kolesnikov.
  * Fixed bug#10074 - Error if no queue matched in DashboardEventsTicketCalendar.
  * Fixed bug#965 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Added functionality to disable access to tickets of other customers with the
    same customer company in customer interface.
  * Fixed bug#9702 - Wrong article type with external ticketnumber recognition
    i.c.w. follow-up reject option.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10078 - Installer: error log after creating mysql database.
  * Fixed bug#10056 - Installer fails when special characters in database user's
    password.
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Updated Swedish translation, thanks to Andreas Berger.
  * Fixed bug#10075 - Stats widgets permission group is hardcoded to "stats"
  * Updated Russian translation, thanks to Andrey N. Burdin.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.
  * Fixed bug#10058 - Owner and Responsible are mandatory if enabled.
  * Fixed bug#7792 - Ticket-Action "Change Queue" is hardcoded and should be
    called "Queue" only.
  * Fixed bug#9109 - Printing ticket does not show the full subject line.
  * Fixed bug#10064 - Translated fields loose sorting in Activity Dialog admin
    screen.
  * Fixed bug#10066 - Required field isn't marked in AgentTicketCustomer.
  * Fixed bug#10059 - Service selection unavailable if customer selection is
    possible.
  * Fixed bug#10062 - Text label indent for locale RU - AgentÒicketViewCompose
  * Fixed bug#10044 - PendingDiffTime removes 2013 (current year) when reaching
    end of the year.
  * Fixed bug#10049 - Transition names in path edit screen ordered by ID instead
    of name.
  * Fixed bug#10055 - Queue-Treeview not working correctly.
  * Fixed bug#10061 - ArticleType dropdown in graphical ActivityDialog mask
    loads with empty value
  * Fixed bug#10060 - Field names are not translated in graphical process editor.
- for further changes please see:
  * https://github.com/OTRS/otrs/blob/rel-3_3_5/CHANGES.md
- rebase patches
  * httpd_config, removed obsolete stuff, added new
  * perm</changelog>
<changelog author="chris@computersalat.de" date="1396526400">- fix for bnc#871758 (CVE-2014-2553)
- update to 3.3.6
  fix for OSA-2014-04 (CVE-2014-2553)
  fix for OSA-2014-05 (CVE-2014-2554)
  * Updated French translation, thanks to Guillaume Houdmon.
  * Extended the OTRS system registration to optionally also send the
    support assessment data along with the system registration data.
    Support assessment data is improved and extended and can be
    accessed in the new Service Center module of the admin area.
  * Fixed bug#10405 - When using the search feature of the tree
    selection overlay, one is not able to expand subtrees of matching
    entries.
  * Fixed bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10400 - AgentTicketProccess will not use error messages
    of dynamic field drivers.
  * Fixed bug#10397 - DynamicField configuration in SysConfig
    'DefaultOverviewColumns' causes JS error.
  * Fixed bug#9592 - Ticket history overflows for dynamic field.
  * Fixed bug#10368 - Ticket title isn't shown.
  * Updated Japanese translation, thanks to Toshihiro Takehara..
  * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
  * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
    AgentTicketSearch view.
  * Fixed bug#10384 - out-of-office information not displayed in
    Ticket Zoom.
  * Fixed bug#10379 - ACL Not Working.
  * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
    AgentTicketActionCommon.
  * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
    RichText Editor.
  * Improved handling of cachekeys in Stats.pm to prevent cacheing
    problems in the dashboard stats.
  * Fixed bug#10334 - Deleting the attachment deletes the recepients
    too.
  * Fixed bug#10374 - OTRS does not protect against clickjacking.
  * Fixed bug#10364 - Inline images displayed as attachment in SMIME
    and PGP signed messages.
  * Fixed bug#10251 - SMIME signing fail on mails with attachements.
  * Fixed bug#10277 - Statistics per agent also shows invalid agents.
  * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
    empty values.
  * Fixed bug#10365 - Custom State types not working with
    "otrs.PendingJobs.pl" any more.
  * Fixed bug#10349 - System Email notification external not
    highlighted correctly.
  * Fixed bug#10361 - Incorrect handling of special characters in
    DynamicFields.
  * Fixed bug#10324 - Customer user field still marked as empty even
    after providing data.
  * Fixed bug#10019 - Tickets via "In line action bar" cannot be moved.
  * Fixed bug#10283 - MouseOver on the Transitions does not show
    transition actions.
  * Fixed bug#10241 - ACL-Editor Bug..
  * Fixed bug#10338 - Empty Content-ID causes strange result -&gt;
    HTML-tags are "corrupted".
  * Fixed bug#9951 - Line breaks at the end of salutation templates
    are not saved.
  * Fixed bug#10275 - Problem with encoding in attachment.
  * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
    garbage in the database.
  * Fixed bug#10336 - Problem with symlinked theme directories.
  * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
    DynamicField changed.
  * Fixed bug#10264 - Description (espacially article description) in
    processes are shown on improper place.
  * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
  * Fixed bug#10240 - Restricting process list by ACLs is only working
    with UserID.
  * Fixed bug#10299 - "Ouf of Office" shows inactive agents.
  * Fixed bug#10321 - Applying Filters to tickets in Status View or
    Queue View will log out session..
  * Fixed bug#9600 - When a ticket is deleted by generic agent job,
    No such TicketID error.
  * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
  * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Fixed bug#10300 - Special character in customer id cuts off string.
  * Fixed bug#10309 - mails with an empty return-path header must not
    trigger auto responses in OTRS.
  * Fixed bug#10245 - Use of uninitialized value $Param{"Value2"} in
    string.
  * Fixed bug#10182 - Customer email suddenly treated by OTRS as
    'email-internal'.
  * Fixed bug#10285 - No use Ticket::Hook in CustomerTicketZoom.
  * Fixed bug#9787 - Queue field doesn't appear in ProcessMgmt.
  * Fixed bug#10222 - Customer search during ticket creation - OTRS
    shows details also if no customer match the search.
  * Fixed bug#10259 - GenericInterface: mapping key can't map from / to 0.
- rebased perm patch
- update httpd_conf patch</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update to 3.3.7
  * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines.
  * Updated Japanese translation, thanks to Toshihiro Takehara.
  * Updated Swedish translation, thanks to Peter Krantz.
  * Added CPAN module Archive::Tar.
  * Split otrs.checksum.pl functionality it is only able to work in compare mode.
  * Extended package object to be able to generate an MD5Sum of all files within
    a package.
  * Extended email send capabilities to include custom X-Headers.
  * Extended the OTRS services to be able to create a support bundle file.
  * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom.
  * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB.
  * Fixed bug#10458 - Can't use system registration with some OTRS-IDs.
  * Fixed bug#10470 - Need FormID! error when embedding image when creating a
    Process Ticket.
  * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany.
  * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via
    cron jobs.
  * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171.
  * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search
    term was selected.
  * Fixed bug#10428 - Event Notification ArticleSend Loop.
  * Fixed bug#10441 - Eventbased notification - infinite loop.
  * Fixed bug#10462 - Translation of static statistic widgets (Dashboard).
  * Added OTRS Scheduler Watchdog mode.
  * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads
    page for temporary links.
  * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface
    displayed even though no process is available..
  * Fixed bug#8253 - Missing hover texts for actions in German translation
    of AgentTicketZoom.
  * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard).
  * Fixed bug#10395 - E-mail header parsing bug.
  * Fixed bug#10394 - rfc822 attachments name creating bug and validation
    enhancement.
  * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL.
  * Fixed bug#10402 - Transition or Transition Action popup a login page.
  * Fixed bug#10446 - otrs.PostMasterMailbox.pl Unknown encoding
    '3DISO-8859-2?=' at /usr/local/otrs/Kernel/System/Encode.pm line 367.
  * Fixed bug#8207 - Wrong encoding in graphs.
  * Fixed bug#10416 - Customer selection is not translated.
  * Fixed bug#9098 - The system still consider the customer_ids, even after
    field is empty on table customer_user.
  * Fixed bug#10202 - Process Modules, Dynamic Fields, and ACLs with AJAX update.
  * Fixed bug#10432 - ACLs not working correctly in CustomerTicketZoom
    (Message Followup).
  * Fixed bug#10436 - Error message in syslog about ACL then there is no ACL
    defined.
  * Fixed bug#10438 - Strange sorting of columns in Ticket Dashboard widgets.
  * Fixed bug#10425 - Customer Information in AgentTicketZoom.
  * Followup for bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10406 - Ticket Templates Type "Create" will be not translated.
  * Fixed bug#10378 - SessionID created with generic interface wont work using
    it as Agent.
  * Fixed bug#10399 - Columns Settings lost after search.
  * Fixed bug#10431 - Fallback configuration for scheduler log is wrong.
  * Fixed bug#10426 - Scheduler RegistrationUpdate task dies with PostgreSQL DB.
  * Fixed bug#10362 - .procmailrc is reset with wrong permissions on
    otrs.SetPermisssion.pl execution.
  * Fixed bug#10350 - Events Ticket Calender: In case
    TicketCalendarStartTime=TicketCalendarEndTime, displayed ticket event time
    frame always 2 hours.
  * Fixed bug#9970 - Existing sequences on oracle databases produces errors.
  * Enhanced DiskSpacePatitions SupportDataCollector plugin to deal correctly
    with multiple partitions with the same name.
  * Followup for bug#10130 - Events Ticket Calendar not working.
- update OTRS::ITSM to 3.3.7
  * Bug# 10146 ? ConfigItem search for Integer shows all CIs in results.
  * Bug# 10487 ? ACL Editor did not include Decision and ITSM field action.</changelog>
<changelog author="jamesp@vicidial.com" date="1404129600">- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4
  * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the configuration file had to be modified to look for
    this static module and load pre-2.4 directives if found on
    Apache 2.4. It should be forward compatible if the mod_access
    compat.c module become dynamic in the future and is not loaded.</changelog>
<changelog author="chris@computersalat.de" date="1406635200">- update to 3.3.8
  * Bug#10524 ? Internal Dynamic Fields in Activity Dialog.
  * Bug#10562 ? Inconsistent displaying of ?CustomerID? value.
  * Bug#10508 ? (Agent|Customer)TicketProcess javascript errors when
    uploading attachments/having server errors.
  * Bug#10521 ? OutputFilterText AutoLink CVE.
  * Bug#10430 ? backup.pl doesn?t work with PostgreSQL unix sockets.
  * Bug#5012 ? Merging a watched ticket into another should ?transfer?
    the Watch status to the final ticket, thanks to Michiel Beijen!
  * Bug#10544 ? Upgrade to OTRS 3.3.7 breaks connection to external
    customer user tables.
  * Bug#10535 ? ACLListGet() produces DB warning message.
  * Bug#10163 ? Subject shows only 30 characters.
  * Bug#10519 ? Opening and closing popups in ProcessManagement leads
    to performance issues.
  * Bug#10513 ? Some SupportData Plugin Identifiers ends with ::.
  * Bug#8494 ? Possibility to split quotes in rich text editor.
  * Bug#10491 ? CIC not always accessible via TicketZoom.
  * Bug#10427 ? Bulk action locks tickets ? cancel keeps them locked.
- update OTRS::ITSM to 3.3.8
  * Bug# 10558 ? Slow CI search for classes with a large MaxCount on
    a value and sub values.
  * Bug# 10570 ? Deleting ITSM Change search templates does not work.</changelog>
<changelog author="alexandre@exatati.com.br" date="1412078400">- Update to 3.3.9:
  https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md
  * Bug#10697 - Column name in CSV report of stats is lowercase.
  * Bug#10652 - Process tickets without any articles create empty
    lines in AgentTicketSearch CSV result file.
  * Bug#10607 - SQL Box can change the database.
  * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via
    BulkAction.
  * Bug#10699 - Cannot add new customer (company).
  * Bug#10497 - CustomerUser secondary database access opens multitude
    of database connections.
  * Bug#9756 - Owner will be set after QueueMove screen AND undo.
  * Bug#10606 - Dynamic fields in dashboard overview are empty.
  * Updated Danish translation, thanks to Lars Jørgensen.
  * Bug#10670 - It is possible to start the scheduler more than once.
  * Bug#10515 - Problem with column filter sorting
  * Bug#10598 - Field tags not parsed properly in auto response subject.
  * Bug#10658 - Issue with multiple customer company backends.
  * Bug#10622 - eMail address only with uppercases - wrong display.
  * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets
    as affected.
  * Bug#10601 - ExternalTicketNumberRecognition produces errors in log
    file.
  * Bug#9851 - Unlocking a ticket in the small view results in
    AgentTicketZoom.
  * Bug#10612 - Wrong Time in DashboardField "Changed", thanks to S7.
  * Bug#10595 - Standard Replies are false sorted in Ticket Zoom
    select box.
  * Bug#10534 - Wildcard hacking the customer information center,
    thanks to S7.
  * Bug#10597 - Process list description column doesn't support line
    breaks, thanks to S7.
  * Bug#10586 - In Customer Portal no attachments are shown.
  * Bug#6601 - Changing search options changes order of fields, thanks
    to S7.
  * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition
    doesn't work.
  * Bug#10559 - "Previous Owner" don't use the FirstnameLastnameOrder
    configuration.
  * Bug#10532 - PostMasterMailbox.pl hangs parsing mails.
  * Bug#10578 - Service selection in GA Ticket Action allows multi
    select.
- update OTRS::ITSM to 3.3.9
  * Bug#10330 ? ITSM Impact field displayed with Key instead of Value.</changelog>
<changelog author="chris@computersalat.de" date="1412078401">- fix changelog
  * update 3.3.9 with 3.3.9 data
  * add missing update info for OTRS::ITSM
- update itsm-3.3.9 Source</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post script</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- One more fix after fix bashisms in previous commit</changelog>
<changelog author="chris@computersalat.de" date="1419854400">- fix for boo#910988 (CVE-2014-9324)
- update to 3.3.11
  fix for OSA-2014-06 (CVE-2014-9324)
  * Updated translations, thanks to all translators.
  * Bug#10904 ? Upon entering CIC, search only returns hits during
    the first search.
  * Bug#10944 ? Multiple selection in Tree Selection also affects
    filtered elements.
  * Follow-up fix for Bug#6284 ? Problem with unicode characters
    when using FastCGI.
  * Bug#10830 ? Textarea Limitation in Generic Agent.
  * Bug#10920 ? ProcessManagement: Deleting Activities from canvas
    does not update process layout.
  * Bug#10801 ? Editor is extremely slow with large articles.
  * Enhanced Permission Checks in GenericInterface Ticket Connector.
  * Bug#10634 ? ProcessManagement: Can not use an arbitrary email
    address as a CustomerUser.
  * Bug#10839 ? ACL cannot set possible TicketType in
    AgentTicketPhone and AgentTicketEmail.
  * Bug#10776 ? Medium and Large view don?t indicate active
    filters.
  * Bug#10808 ? Set of pending time is not working at all in
    Frontend::Agent::Ticket::ViewNote.
  * Bug#10892 ? TicketActionsPerTicket open multiple popups at
    TicketOverview.
  * Bug#10857 ? JS added too often in AgentTicketOverviewSmall.
  * Bug#10639 ? Set of pending time/state not working properly
    (process management).
  * Bug#10893 ? Missing log name partitions in Service Center.
  * Bug#10879 ? GenericInterfae: TicketSearch operation does not
    take escalation parameters.
  * Bug#10812 ? SOAP Response is always in version SOAP 1.2.
  * Bug#10083 ? SMIME and Email address detection is case sensitive
    (for the right part)..
  * Bug#10826 ? German ? Translation Problem.
  * Bug#10678 ? Dates off by one on area diagram in dashboard widget.
  * Bug#7369 ? LinkQoute fails for some characters in hash or
    parameter.
  * Bug#8404 ? Wrong sorting of responses dropdown in TicketZoom.
  * Bug#8781 ? 508 Compliance: In Ticket Overviews the title
    attribute of large view link is incorrect.
  * Bug#10669 ? Maxlength validation of textarea dynamic fields does
    not work correctly in IE.
  * Bug#10471 ? Missing translations for tooltips of
    TicketOverviewSmall columns.
  * Bug#10850 ? Double-quoted special characters in title of dynamic
    field sidebar output in TicketZoom.
  * Bug#10805 ? Open tickets in 3 days show right function but wrong
    number.
  * Bug#10845 ? No date search if TimeInputFormat is Input.
  * Bug#10706 ? dashboard settings are lost by different user login.
  * Bug#10577 ? Service Center does not show MOD_PERL version on
    Ubuntu 14.04.
  * Bug#10679 ? Texts in notification tags loose their empty lines
    and spaces.</changelog>
<changelog author="aj@ajaissle.de" date="1445688000">- Update to 3.3.15
  * HTML emails not properly displayed (parts missing).
  * Fixed a nasty JSON::XS crash on some platforms.
  * Updated CPAN module Proc::Daemon to version 0.21.
  * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT).
  * auto reply with DynamicFields from webservice.
  * Added option to package manager list action, to show deployment info of installed packages.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
- Changes 3.3.14
  * Package installation/uninstallation leads to endless loop.
  * Lang parameter not correctly validated.
  * Search for multiple ticket numbers with GenericInterface.
- Changes 3.3.13
  * Updated translation files.
  * Refresh bug on process client interface using ie8
  * Adding email recipients via addressbook does not update customer information.
  * Wrong column encoding in Kernel::System::Notification::NotificationGet().
  * Generic Agent ticket actions can't be unselect.
  * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
  * Download button for dashboard stats visible even if no permissions for AgentStats exist..
  * Invalid utf-8 parameters not filtered sufficciently.
  * DynamicField Filter in AgentDashboard accepts only one value.
  * Can't select customer and/or public interface in AdminACL.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys.
  * Added possibility to turn of SSL certificate validation.
  * SLA can not be set over Free Fields Dialog.
  * Not possible to change customer.
  * Error from GenericInterface using SOAP and TicketGet operation.
  * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm.
  * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20.
- Changes 3.3.12
  * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker.
  * Adressbook search does not permit to add contacts via click.
  * Wrong sortation of Ticket Overview settings.
  * Missing translations in Dashboard and TicketOverview settings.
  * Internal Server Error, instead of warning.
  * Dashlet: Filter Attributes with more then one CustomerID doesn't work.
  * SQL error with "0 oracle" for article body in Ticket Search.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig).
  * ProcessManagement: TransitionAction delete does not check if is used.
  * GPG option 0xlong breaks decryption of emails.
  * ORA-03113 Error after scheduler start.
  * /etc/init.d/otrs running httpd is not detected on CentOS 7.
  * Unable to change password in customer interface.
  * Dynamic Field shown information in customer interface is not consistent with agent interface.
  * Error: No Process configured! - Agent interface.
  * Error while splitting ticket.
  * ActivityDialogEntityID not working in ACLs from Process screens reducing States.
- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch
- Added itsm-update.sh, a script to update the itsm source we use
- Updated sources
  * otrs.README.de
  * otrs.README.en
  * UPGRADING.SuSE -&gt; UPGRADING.SUSE
  * ZZZAuto.pm</changelog>
<changelog author="chris@computersalat.de" date="1477828800">- fix itsm package
  * version is 3.3.14
- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch
- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch</changelog>
<changelog author="chris@computersalat.de" date="1478088000">- fix for boo#1008017
  * execution of JavaScript in OTRS context by opening malicious attachment
- Update to 3.3.16
  * Improved sandboxing of displayed attachments.
    see OSA-2016-02 (CVE-2016-9139)
  * Added package verification information to otrs.PackageManager.pl,
    use bin/otrs.PackageManager.pl -a list -e (to show package verification
    information) or bin/otrs.PackageManager.pl -a list -e -c
    (to show package verification information deleting the cache before).
  * Bug#11959 ? 500 Can?t connect to www.otrs.com/product.xml:443.
  * Bug#11870 ? Missing quoting in Layout::AgentQueueListOption().
  * Bug#11802 ? Customer user can get access to all ticket data.
- fix ZZZAuto.pm
  * do not replace existing file (manually merge needed for ITSM)</changelog>
<changelog author="chris@computersalat.de" date="1496836800">- fix for boo#1043086
  * Incorrect Access Control in OTRS
- Update to 3.3.17 2017-06-06
  * Improved SecureMode detection in Installer.
    see OSA-2017-03 (CVE-2017-9324)
  * Bug#12753 - Function "SystemDataGroupGet" has problems with empty
    values in oracle.
  * Bug#9941 - Articles with multi-byte characters that claim to be
    UTF-8 will not display in the browser.
  * Bug#7961 - customer search should not return results for internal
    articles.
    see OSA-2017-02
  * Bug#12391 - Base64 encoded image does not display in article.
  * Bug#12461 - Chrome can not display attached PDF files since 5.0.14.</changelog>
<changelog author="chris@computersalat.de" date="1506168000">- fix for boo#1059691 (CVE-2017-14635)
  * Code Injection / Privilege Escalation OTRS
- Update to 3.3.18
  * Improved validation in statistic import and export.
    see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
  * Updated CPAN module URI to version 1.72.</changelog>
<changelog author="chris@computersalat.de" date="1510920000">- fix for boo#1068677 (CVE-2017-15864, OSA-2017-06)
  * vulnerabilities discovered in the OTRS framework:
    An attacker who is logged into OTRS as an agent can request special
    URLs from OTRS which can lead to the disclosure of any configuration
    information, including database credentials.
- Update to 3.3.19
  * Not needed mandatory stats object module function in 'ObjectModuleCheck'.</changelog>
<changelog author="chris@computersalat.de" date="1511352000">- fix for boo#1069391 (CVE-2017-16664, OSA-2017-07)
  * vulnerabilities discovered in the OTRS framework:
    An attacker who is logged into OTRS as an agent can request special
    URLs from OTRS which can lead to the execution of shell commands
    with the permissions of the web server user.
- Update to 3.3.20
  * Improved handling of spell checker.
  OTRS 3.3 is now EOL, officially supported versions are OTRS &gt;= 4
  Please consider updating to a newer OTRS version.</changelog>

</package>
<package pkgid="0f1ee4a0123face59348d862c9cdeab75c838aa62b5b16b392efe1470a529667" name="otrs-doc" arch="noarch">
    <version epoch="0" ver="3.3.18" rel="9.1"/>

<changelog author="alexandre@exatati.com.br" date="1378382400">- Update to 3.2.10:
  * Bug#9617 - Event-based notifications are not sent for process-tickets.
  * Bug#9666 - Installing an invalid package cause an server error on
    package manager.
  * Bug#8408 - No separator used in CSV files if UserCSVSeparator enabled
    and not set.
  * Bug#9635 - article_search not updated on ticket merges.
  * Bug#9629 - ORA-936 error in AgentTicketSearch with some search clauses.
  * Bug#9631 - BuildSelection() Selected does not work if value contains
    strings that are HTML-escaped.
  * Bug#9630 - Dynamic Fields of type Date can record wrong date when
    TimeZoneSettings are used.
  * Bug#9316 - Under nginx CustomerInformationCenter search returns Bad
    Gateway.
  * Bug#9610 - When email does not specify charset, content is not
    displayed in IE10.
  * Bug#9622 - Actions in Small ticket overview don't work when cookies
    are turned off.
  * Bug#9541 - Package manager cannot use https proxy.
  * Fixed bug pull#[83](https://github.com/OTRS/otrs/pull/83) - Pagination
    next page link, thanks to Renée Bäcker.
  * Bug#9594 - No auro-reply sent with multiple From addresses in
    AgentTicketPhone on PostgreSQL and Oracle.
  * Bug#3434 - Validity of search time frame not checked by OTRS.
  * Bug#5475 - Incorrectly limited ticket list queries in queue view.
  * Bug#8667 - No error Message when tryiing to Merge Ticket with itself.
  * Bug#6985 - SMTPTLS backend requires username and password.
  * Bug#3434 - Validity of search time frame not checked by OTRS.
  * Bug#9598 - Typo in vacation message for German locale.
  * Bug#9595 - Incomplete page reload handling in merge and bounce.
  * Bug#5307 - Tickets can be raised against an invalid Customer Company.
  * Bug#9596 - On merge and bounce screens is confusing when fill or
    not 'To', 'Subject' and 'Body' fields.
  * Bug#9514 - Bulk action (send email) uses senders address instead of
    customer id.
  * Bug#9595 - Incomplete page reload handling in merge and bounce.
  * Bug#9570 - AgentTicketSearch with exclamation mark emits invalid SQL
  * Bug#3007 - CheckMXRecord and CheckEmailAddresses have no effect on
    AgentTicketBounce.
  * Bug#9512 - Database error for invalid date in AgentTicketSearch.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#8428 - Bad usability of multiple sender/recipient feature.
  * Bug#9556 - Bounce and merge require notification recipient, subject
    and body even if no notification is sent.
  * Bug#9584 - No server side validation of To/Subject/Body in merge
    mask.
  * Bug#9578 - DynamicField sorting does not work on TicketSearch
    results in Customer Interface.
  * Bug#9579 - SOAP Serializer used in Kernel/GenericInterface/Transport/HTTP/SOAP.pm
    does not correctly set namespace.
  * Bug#9577 - Engine translate date to dado from english to pt_BR.
  * Bug#7359 - Setting pending states via generic agent does not set
    pending time.
  * Bug#5920 - Search restriction for dates is not displayed in
    customer interface.
  * Bug#8380 - Middle name not displayed in AdminCustomerUser.
  * Bug#9576 - GI TicketSearch Date and Date/Time dynamic fields are
    ignored.
  * Changed Dynamic Field SearchFieldParameterBuild() API, LayoutObject
    is now optional.
  * Bug#9573 - Date and DateTime dynamic fields not considered in
    GenericAgent Jobs.</changelog>
<changelog author="chris@computersalat.de" date="1379505600">- update OTRS::ITSM to 3.2.9
  * Bug#9637 - ITSM Overview shows error if agent has no permission to any
    config item class.
  * Bug#9621 - GeneralCatalog does not allow the number zero (0) as value
    for a GeneralCatatalog ClassItem.
  * Rollback changes for bug#9613. Due to a last minute problem with the
    mentioned bug fix we had to revert and release a new version of OTRS ITSM!
- rebase otrs-perm patch
  * fix spec (better fix cause than symptom)
    remove exclude %{otrs_root}/%{name}/Kernel/System/Package.pm.orig</changelog>
<changelog author="alexandre@exatati.com.br" date="1383739200">- Update to 3.2.12:
  * Updated French translation, thanks to Olivier Sallou!
  * Bug#9910 - Startup warnings/errors with Perl 5.18.1.
  * Bug#9753 - META HTTP-EQUIV="Refresh" tag not stripped from HTML
    email.
  * Bug#9897 - process ticket 'fading away' -&gt; Process is invalid.
  * Bug#9749 - Using spell checker in rich text Editor strips HTML
    formatting.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#9883 - Stats Overview is slow due Caching bug (object cache does
    not work).
  * Bug#9839 - Inline images not showing up when cookies are disabled.
  * Moved process import functionality in the backend module
    Kernel/System/ProcessManagement/DB/Process.pm.
  * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard.
  * Bug#9814 - Tickets without articles not shown correcly in medium view.
  * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values
    of toolbar widgets are ignored.
  * Bug#9391 - Incorrect permissions on .procmailrc.
  * Bug#9796 - Misaligned Headers on Simple Stats.
- Aditional changes from 3.2.11:
  * Bug#9542 ? Uninitialized value in AgentTicketForward.
  * Bug#9765 ? Dynamic Field values are completely removed if one entry
    contains a dash.
  * Bug#9764 ? ACL, Queue will ignored with customerID.
  * Bug#9762 ? Queue View ? S / M / L views ? not saved after logout.
  * Bug#9580 ? Time fields in TicketGetResponse Ticket element do not
    comply with xsd:DateTime format.
  * Bug#9748 ? ProcessManagement: Duplicate articles in a process-ticket
    (TransitionAction).
  * Bug#9759 ? Installer Error DB ? max key length is 767 bytes.
  * Bug#9747 ? Only first selected process displays the RichText editor.
  * Bug#9688 ? ORA-01839 error occurs at DynamicField in TicketSearch.
  * Bug#9751 ? TimeUnits are not accepted with a value of 0.
  * Bug#9739 ? Customer interface not working with MySQL 5.6.
  * Bug#8489 ? setting Tickets per page resets AgentTicketQueue.
  * Bug#9732 ? German translation file de.pm incomplete.
  * Bug#9728 ? Bulk action (send email) ignores reply-to address from
    unknown customers.
  * Bug#9661 ? Useless code in DynamicField backend.
  * Bug#9701 ? Ticket overview Queue Sort Filter is missing.
  * Bug#8173 ? Dashboard Widget ?Online? does not save state.
  * Bug#9188 ? AgentTicketEmail always loads a signature, even if no
    queue is selected.
  * Bug#9672 ? Undecrypted HTML part displayed when viewing a
    multipart/alternative PGP encrypted HTML mail.</changelog>
<changelog author="chris@computersalat.de" date="1386763200">- update to 3.2.13
  * Bug#9327 ? Filter breaks ?Select all? functionality.
  * Bug#9999 ? Timestamps in HistoricalValueGet return milliseconds on SQL
    Server.
  * Bug#10027 ? Added old ticket information to ticket_history.
  * Bug#7337 ? AJAX Error on new Phone Ticket on IIS when using JSON::XS.
  * Bug#8991 ? Back-action does not work when search result returned just 1
    ticket.
  * Bug#9937 ? Activity-Dialogs in wrong order.
  * Bug#9954 ? PGP Crypted and Signed emails could be wrongly parsed.
  * Bug#9639 ? TextArea validation message not translated.
  * Bug#9944 ? Search Template issue.
  * Bug#9938 ? ActivityDialog doesn?t show queues with move_into permissions.
  * Bug#9940 ? Fedora misses dependency on Sys::Syslog.
  * Removed Patch/Workaround for CPAN MIME::Parser v5.503
    (introduced in OTRS 3.2.2) replaced with another solution, as it was
    causing problems with PGP.
  * Bug#9916 ? Error when updating CustomerUser Login on ForeignDB.
  * Bug#9841 ? Tabbing changes radio button of owner change selection.
  * Bug#9867 ? Validation errors are not shown correctly when replying to a
    ticket in Customer Interface.
  * Bug#9914 ? Spellchecker ignores double wrong words.</changelog>
<changelog author="chris@computersalat.de" date="1393416000">- fix for bnc#866476 (CVE-2014-1695)
- update to 3.2.15
  (fix for OSA-2014-03, CVE-2014-1695)
  * Improved HTML filter.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer
    ID instead Agent ID.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as
    a customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work
    when authenticated as a customer.
- 3.2.14
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Fixed bug#9959 - &amp; breaks ExpandCustomerName.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose.
  * Added functionality to disable access to tickets of other customers with
    the same customer company in customer interface.
  * Fixed bug#9650 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.</changelog>
<changelog author="chris@computersalat.de" date="1394107200">- update to 3.3.5
  * Improved HTML filter.
  * Followup fix for bug#10116 - Random ordering of columns in "Small" ticket
    lists.
  * Re-implemented Process Management ProcessImport().
  * Fixed bug#10258 - yellow color for UnreadArticles.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Updated Polish translation, thanks to Wojciech Myrda.
  * Fixed bug#6323 - Graph/Chart generation selects slice/background color
    identical to text color.
  * Added feature to download report data shown in dashboard stats as CSV and
    PDF.
  * Fixed bug#10248 - OTRS Portal - Overview of registered systems.
  * Added browser check for IE10 in compatibility mode.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for
    dynamic fields.
  * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB.
  * Fixed bug#7818 - Menu simplification is not working for item "responsible".
  * Added new option "bin/otrs.LoaderCache.pl -o generate" to generate the
    loader cache for all frontend modules. This can be useful in cluster setups.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#10201 - Wrong column sort order in ticketoverview widget.
  * Fixed bug#10195 - Folluw up notification shows old prio after prio change.
  * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating
    new ticket from customer creation.
  * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI.
  * Follow-up fix for bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10220 - Invalid Statistics not displayed in overview.
  * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl
    not set.
  * Fixed bug#10177 - Missing sources in tarball.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#7440 - Ticket overviews don't show column headers for priority and
    unread articles in small mode.
  * Added process management canvas label spacer to avoid overlapping transition
    labels.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working.
  * Fixed bug#10163 - subject shows only 30 characters.
  * Fixed bug#10193 - Expired cookie bug in customer interface..
  * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order.
  * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket.
  * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen
    results in an error no matter what data was filled in.
  * Fixed bug#10209 - When opening tree selection dialog, the search field
    should get the focus.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#10130 - Events Ticket Calendar not working.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID
    instead Agent ID.
  * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a
    customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when
    authenticated as a customer.
  * Fixed bug#10176 - available columns selection in search result view is not
    scrollable.
  * Fixed bug#10120 - Management Dashboard: page reload erases stat graph
    settings.
  * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with
    all lines concatenated to one
  * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl.
  * Fixed bug#10178 - Stat Permissions.
  * Fixed bug#10188 - Inconsistency in graphical ACL editor.
  * Fixed bug#10155 - backup.pl doesn't compress database dump on non-MySQL.
  * Fixed bug#10106 - Sending Articles with ArticleSend() ignores ReplyTo.
  - 3.3.4 2014-01-28
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10153 - Error shown in SysConfig when Setting PendingDiffTime to
    30 Days.
  * Fixed bug#10161 - Edit Stats - 500 internal Server Error.
  * Fixed bug#10167 - Non-deterministic hash key construction in Stats.pm.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#10048 - RPM upgrade breaks permissions on config files.
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Updated traditional Chinese translation.
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Fixed bug#10145 - %A is not correctly substituted in Language::Time().
  * Fixed bug#10079 - Cannot operate OTRS on IE7 because of JavaScript error.
  * Fixed bug#10113 - Management dashboard setting doesn't show up when agent
    only has RO on stats.
  * Fixed bug#10088 - Error messages on recieving mailer daemons.
  * Fixed bug#10011 - Management Dashboard: X-Axis element labels may overlap.
  * Fixed bug#10012 - Management Dashboard: strings not translatable.
  * Fixed bug#10140 - Unable to search using before/after in Date Dynamic Fields.
  * Fixed bug#10008 - Customer user is automatically added to Cc at response for
    email-internal in AgentTicketCompose.
  * Added Hebrew translation file, thanks to Amir Elion!
  * Fixed bug#9978 - Activity Dialog for Customer shows "No Process configured!".
  * Fixed bug#10134 - Missing information on icon actions for SMIME certificates
    and keys.
  * Fixed bug#10116 - Random ordering of columns in "Small" ticket lists.
  * Fixed bug#10094 - Former FAO OTRSACLExtensions not available in the ACL
    Editor.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose
  * Fixed bug#10080 - Bad group check in otrs-scheduler-linux.
  * Fixed bug#10097 - $Param{NextState} is always undef in AgentTicketCompose.
  * Updated Russian translation, thanks to Yuriy Kolesnikov.
  * Fixed bug#10074 - Error if no queue matched in DashboardEventsTicketCalendar.
  * Fixed bug#965 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Added functionality to disable access to tickets of other customers with the
    same customer company in customer interface.
  * Fixed bug#9702 - Wrong article type with external ticketnumber recognition
    i.c.w. follow-up reject option.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10078 - Installer: error log after creating mysql database.
  * Fixed bug#10056 - Installer fails when special characters in database user's
    password.
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Updated Swedish translation, thanks to Andreas Berger.
  * Fixed bug#10075 - Stats widgets permission group is hardcoded to "stats"
  * Updated Russian translation, thanks to Andrey N. Burdin.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.
  * Fixed bug#10058 - Owner and Responsible are mandatory if enabled.
  * Fixed bug#7792 - Ticket-Action "Change Queue" is hardcoded and should be
    called "Queue" only.
  * Fixed bug#9109 - Printing ticket does not show the full subject line.
  * Fixed bug#10064 - Translated fields loose sorting in Activity Dialog admin
    screen.
  * Fixed bug#10066 - Required field isn't marked in AgentTicketCustomer.
  * Fixed bug#10059 - Service selection unavailable if customer selection is
    possible.
  * Fixed bug#10062 - Text label indent for locale RU - AgentÒicketViewCompose
  * Fixed bug#10044 - PendingDiffTime removes 2013 (current year) when reaching
    end of the year.
  * Fixed bug#10049 - Transition names in path edit screen ordered by ID instead
    of name.
  * Fixed bug#10055 - Queue-Treeview not working correctly.
  * Fixed bug#10061 - ArticleType dropdown in graphical ActivityDialog mask
    loads with empty value
  * Fixed bug#10060 - Field names are not translated in graphical process editor.
- for further changes please see:
  * https://github.com/OTRS/otrs/blob/rel-3_3_5/CHANGES.md
- rebase patches
  * httpd_config, removed obsolete stuff, added new
  * perm</changelog>
<changelog author="chris@computersalat.de" date="1396526400">- fix for bnc#871758 (CVE-2014-2553)
- update to 3.3.6
  fix for OSA-2014-04 (CVE-2014-2553)
  fix for OSA-2014-05 (CVE-2014-2554)
  * Updated French translation, thanks to Guillaume Houdmon.
  * Extended the OTRS system registration to optionally also send the
    support assessment data along with the system registration data.
    Support assessment data is improved and extended and can be
    accessed in the new Service Center module of the admin area.
  * Fixed bug#10405 - When using the search feature of the tree
    selection overlay, one is not able to expand subtrees of matching
    entries.
  * Fixed bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10400 - AgentTicketProccess will not use error messages
    of dynamic field drivers.
  * Fixed bug#10397 - DynamicField configuration in SysConfig
    'DefaultOverviewColumns' causes JS error.
  * Fixed bug#9592 - Ticket history overflows for dynamic field.
  * Fixed bug#10368 - Ticket title isn't shown.
  * Updated Japanese translation, thanks to Toshihiro Takehara..
  * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
  * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
    AgentTicketSearch view.
  * Fixed bug#10384 - out-of-office information not displayed in
    Ticket Zoom.
  * Fixed bug#10379 - ACL Not Working.
  * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
    AgentTicketActionCommon.
  * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
    RichText Editor.
  * Improved handling of cachekeys in Stats.pm to prevent cacheing
    problems in the dashboard stats.
  * Fixed bug#10334 - Deleting the attachment deletes the recepients
    too.
  * Fixed bug#10374 - OTRS does not protect against clickjacking.
  * Fixed bug#10364 - Inline images displayed as attachment in SMIME
    and PGP signed messages.
  * Fixed bug#10251 - SMIME signing fail on mails with attachements.
  * Fixed bug#10277 - Statistics per agent also shows invalid agents.
  * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
    empty values.
  * Fixed bug#10365 - Custom State types not working with
    "otrs.PendingJobs.pl" any more.
  * Fixed bug#10349 - System Email notification external not
    highlighted correctly.
  * Fixed bug#10361 - Incorrect handling of special characters in
    DynamicFields.
  * Fixed bug#10324 - Customer user field still marked as empty even
    after providing data.
  * Fixed bug#10019 - Tickets via "In line action bar" cannot be moved.
  * Fixed bug#10283 - MouseOver on the Transitions does not show
    transition actions.
  * Fixed bug#10241 - ACL-Editor Bug..
  * Fixed bug#10338 - Empty Content-ID causes strange result -&gt;
    HTML-tags are "corrupted".
  * Fixed bug#9951 - Line breaks at the end of salutation templates
    are not saved.
  * Fixed bug#10275 - Problem with encoding in attachment.
  * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
    garbage in the database.
  * Fixed bug#10336 - Problem with symlinked theme directories.
  * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
    DynamicField changed.
  * Fixed bug#10264 - Description (espacially article description) in
    processes are shown on improper place.
  * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
  * Fixed bug#10240 - Restricting process list by ACLs is only working
    with UserID.
  * Fixed bug#10299 - "Ouf of Office" shows inactive agents.
  * Fixed bug#10321 - Applying Filters to tickets in Status View or
    Queue View will log out session..
  * Fixed bug#9600 - When a ticket is deleted by generic agent job,
    No such TicketID error.
  * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
  * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Fixed bug#10300 - Special character in customer id cuts off string.
  * Fixed bug#10309 - mails with an empty return-path header must not
    trigger auto responses in OTRS.
  * Fixed bug#10245 - Use of uninitialized value $Param{"Value2"} in
    string.
  * Fixed bug#10182 - Customer email suddenly treated by OTRS as
    'email-internal'.
  * Fixed bug#10285 - No use Ticket::Hook in CustomerTicketZoom.
  * Fixed bug#9787 - Queue field doesn't appear in ProcessMgmt.
  * Fixed bug#10222 - Customer search during ticket creation - OTRS
    shows details also if no customer match the search.
  * Fixed bug#10259 - GenericInterface: mapping key can't map from / to 0.
- rebased perm patch
- update httpd_conf patch</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update to 3.3.7
  * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines.
  * Updated Japanese translation, thanks to Toshihiro Takehara.
  * Updated Swedish translation, thanks to Peter Krantz.
  * Added CPAN module Archive::Tar.
  * Split otrs.checksum.pl functionality it is only able to work in compare mode.
  * Extended package object to be able to generate an MD5Sum of all files within
    a package.
  * Extended email send capabilities to include custom X-Headers.
  * Extended the OTRS services to be able to create a support bundle file.
  * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom.
  * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB.
  * Fixed bug#10458 - Can't use system registration with some OTRS-IDs.
  * Fixed bug#10470 - Need FormID! error when embedding image when creating a
    Process Ticket.
  * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany.
  * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via
    cron jobs.
  * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171.
  * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search
    term was selected.
  * Fixed bug#10428 - Event Notification ArticleSend Loop.
  * Fixed bug#10441 - Eventbased notification - infinite loop.
  * Fixed bug#10462 - Translation of static statistic widgets (Dashboard).
  * Added OTRS Scheduler Watchdog mode.
  * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads
    page for temporary links.
  * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface
    displayed even though no process is available..
  * Fixed bug#8253 - Missing hover texts for actions in German translation
    of AgentTicketZoom.
  * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard).
  * Fixed bug#10395 - E-mail header parsing bug.
  * Fixed bug#10394 - rfc822 attachments name creating bug and validation
    enhancement.
  * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL.
  * Fixed bug#10402 - Transition or Transition Action popup a login page.
  * Fixed bug#10446 - otrs.PostMasterMailbox.pl Unknown encoding
    '3DISO-8859-2?=' at /usr/local/otrs/Kernel/System/Encode.pm line 367.
  * Fixed bug#8207 - Wrong encoding in graphs.
  * Fixed bug#10416 - Customer selection is not translated.
  * Fixed bug#9098 - The system still consider the customer_ids, even after
    field is empty on table customer_user.
  * Fixed bug#10202 - Process Modules, Dynamic Fields, and ACLs with AJAX update.
  * Fixed bug#10432 - ACLs not working correctly in CustomerTicketZoom
    (Message Followup).
  * Fixed bug#10436 - Error message in syslog about ACL then there is no ACL
    defined.
  * Fixed bug#10438 - Strange sorting of columns in Ticket Dashboard widgets.
  * Fixed bug#10425 - Customer Information in AgentTicketZoom.
  * Followup for bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10406 - Ticket Templates Type "Create" will be not translated.
  * Fixed bug#10378 - SessionID created with generic interface wont work using
    it as Agent.
  * Fixed bug#10399 - Columns Settings lost after search.
  * Fixed bug#10431 - Fallback configuration for scheduler log is wrong.
  * Fixed bug#10426 - Scheduler RegistrationUpdate task dies with PostgreSQL DB.
  * Fixed bug#10362 - .procmailrc is reset with wrong permissions on
    otrs.SetPermisssion.pl execution.
  * Fixed bug#10350 - Events Ticket Calender: In case
    TicketCalendarStartTime=TicketCalendarEndTime, displayed ticket event time
    frame always 2 hours.
  * Fixed bug#9970 - Existing sequences on oracle databases produces errors.
  * Enhanced DiskSpacePatitions SupportDataCollector plugin to deal correctly
    with multiple partitions with the same name.
  * Followup for bug#10130 - Events Ticket Calendar not working.
- update OTRS::ITSM to 3.3.7
  * Bug# 10146 ? ConfigItem search for Integer shows all CIs in results.
  * Bug# 10487 ? ACL Editor did not include Decision and ITSM field action.</changelog>
<changelog author="jamesp@vicidial.com" date="1404129600">- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4
  * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the configuration file had to be modified to look for
    this static module and load pre-2.4 directives if found on
    Apache 2.4. It should be forward compatible if the mod_access
    compat.c module become dynamic in the future and is not loaded.</changelog>
<changelog author="chris@computersalat.de" date="1406635200">- update to 3.3.8
  * Bug#10524 ? Internal Dynamic Fields in Activity Dialog.
  * Bug#10562 ? Inconsistent displaying of ?CustomerID? value.
  * Bug#10508 ? (Agent|Customer)TicketProcess javascript errors when
    uploading attachments/having server errors.
  * Bug#10521 ? OutputFilterText AutoLink CVE.
  * Bug#10430 ? backup.pl doesn?t work with PostgreSQL unix sockets.
  * Bug#5012 ? Merging a watched ticket into another should ?transfer?
    the Watch status to the final ticket, thanks to Michiel Beijen!
  * Bug#10544 ? Upgrade to OTRS 3.3.7 breaks connection to external
    customer user tables.
  * Bug#10535 ? ACLListGet() produces DB warning message.
  * Bug#10163 ? Subject shows only 30 characters.
  * Bug#10519 ? Opening and closing popups in ProcessManagement leads
    to performance issues.
  * Bug#10513 ? Some SupportData Plugin Identifiers ends with ::.
  * Bug#8494 ? Possibility to split quotes in rich text editor.
  * Bug#10491 ? CIC not always accessible via TicketZoom.
  * Bug#10427 ? Bulk action locks tickets ? cancel keeps them locked.
- update OTRS::ITSM to 3.3.8
  * Bug# 10558 ? Slow CI search for classes with a large MaxCount on
    a value and sub values.
  * Bug# 10570 ? Deleting ITSM Change search templates does not work.</changelog>
<changelog author="alexandre@exatati.com.br" date="1412078400">- Update to 3.3.9:
  https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md
  * Bug#10697 - Column name in CSV report of stats is lowercase.
  * Bug#10652 - Process tickets without any articles create empty
    lines in AgentTicketSearch CSV result file.
  * Bug#10607 - SQL Box can change the database.
  * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via
    BulkAction.
  * Bug#10699 - Cannot add new customer (company).
  * Bug#10497 - CustomerUser secondary database access opens multitude
    of database connections.
  * Bug#9756 - Owner will be set after QueueMove screen AND undo.
  * Bug#10606 - Dynamic fields in dashboard overview are empty.
  * Updated Danish translation, thanks to Lars Jørgensen.
  * Bug#10670 - It is possible to start the scheduler more than once.
  * Bug#10515 - Problem with column filter sorting
  * Bug#10598 - Field tags not parsed properly in auto response subject.
  * Bug#10658 - Issue with multiple customer company backends.
  * Bug#10622 - eMail address only with uppercases - wrong display.
  * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets
    as affected.
  * Bug#10601 - ExternalTicketNumberRecognition produces errors in log
    file.
  * Bug#9851 - Unlocking a ticket in the small view results in
    AgentTicketZoom.
  * Bug#10612 - Wrong Time in DashboardField "Changed", thanks to S7.
  * Bug#10595 - Standard Replies are false sorted in Ticket Zoom
    select box.
  * Bug#10534 - Wildcard hacking the customer information center,
    thanks to S7.
  * Bug#10597 - Process list description column doesn't support line
    breaks, thanks to S7.
  * Bug#10586 - In Customer Portal no attachments are shown.
  * Bug#6601 - Changing search options changes order of fields, thanks
    to S7.
  * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition
    doesn't work.
  * Bug#10559 - "Previous Owner" don't use the FirstnameLastnameOrder
    configuration.
  * Bug#10532 - PostMasterMailbox.pl hangs parsing mails.
  * Bug#10578 - Service selection in GA Ticket Action allows multi
    select.
- update OTRS::ITSM to 3.3.9
  * Bug#10330 ? ITSM Impact field displayed with Key instead of Value.</changelog>
<changelog author="chris@computersalat.de" date="1412078401">- fix changelog
  * update 3.3.9 with 3.3.9 data
  * add missing update info for OTRS::ITSM
- update itsm-3.3.9 Source</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post script</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- One more fix after fix bashisms in previous commit</changelog>
<changelog author="chris@computersalat.de" date="1419854400">- fix for boo#910988 (CVE-2014-9324)
- update to 3.3.11
  fix for OSA-2014-06 (CVE-2014-9324)
  * Updated translations, thanks to all translators.
  * Bug#10904 ? Upon entering CIC, search only returns hits during
    the first search.
  * Bug#10944 ? Multiple selection in Tree Selection also affects
    filtered elements.
  * Follow-up fix for Bug#6284 ? Problem with unicode characters
    when using FastCGI.
  * Bug#10830 ? Textarea Limitation in Generic Agent.
  * Bug#10920 ? ProcessManagement: Deleting Activities from canvas
    does not update process layout.
  * Bug#10801 ? Editor is extremely slow with large articles.
  * Enhanced Permission Checks in GenericInterface Ticket Connector.
  * Bug#10634 ? ProcessManagement: Can not use an arbitrary email
    address as a CustomerUser.
  * Bug#10839 ? ACL cannot set possible TicketType in
    AgentTicketPhone and AgentTicketEmail.
  * Bug#10776 ? Medium and Large view don?t indicate active
    filters.
  * Bug#10808 ? Set of pending time is not working at all in
    Frontend::Agent::Ticket::ViewNote.
  * Bug#10892 ? TicketActionsPerTicket open multiple popups at
    TicketOverview.
  * Bug#10857 ? JS added too often in AgentTicketOverviewSmall.
  * Bug#10639 ? Set of pending time/state not working properly
    (process management).
  * Bug#10893 ? Missing log name partitions in Service Center.
  * Bug#10879 ? GenericInterfae: TicketSearch operation does not
    take escalation parameters.
  * Bug#10812 ? SOAP Response is always in version SOAP 1.2.
  * Bug#10083 ? SMIME and Email address detection is case sensitive
    (for the right part)..
  * Bug#10826 ? German ? Translation Problem.
  * Bug#10678 ? Dates off by one on area diagram in dashboard widget.
  * Bug#7369 ? LinkQoute fails for some characters in hash or
    parameter.
  * Bug#8404 ? Wrong sorting of responses dropdown in TicketZoom.
  * Bug#8781 ? 508 Compliance: In Ticket Overviews the title
    attribute of large view link is incorrect.
  * Bug#10669 ? Maxlength validation of textarea dynamic fields does
    not work correctly in IE.
  * Bug#10471 ? Missing translations for tooltips of
    TicketOverviewSmall columns.
  * Bug#10850 ? Double-quoted special characters in title of dynamic
    field sidebar output in TicketZoom.
  * Bug#10805 ? Open tickets in 3 days show right function but wrong
    number.
  * Bug#10845 ? No date search if TimeInputFormat is Input.
  * Bug#10706 ? dashboard settings are lost by different user login.
  * Bug#10577 ? Service Center does not show MOD_PERL version on
    Ubuntu 14.04.
  * Bug#10679 ? Texts in notification tags loose their empty lines
    and spaces.</changelog>
<changelog author="aj@ajaissle.de" date="1445688000">- Update to 3.3.15
  * HTML emails not properly displayed (parts missing).
  * Fixed a nasty JSON::XS crash on some platforms.
  * Updated CPAN module Proc::Daemon to version 0.21.
  * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT).
  * auto reply with DynamicFields from webservice.
  * Added option to package manager list action, to show deployment info of installed packages.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
- Changes 3.3.14
  * Package installation/uninstallation leads to endless loop.
  * Lang parameter not correctly validated.
  * Search for multiple ticket numbers with GenericInterface.
- Changes 3.3.13
  * Updated translation files.
  * Refresh bug on process client interface using ie8
  * Adding email recipients via addressbook does not update customer information.
  * Wrong column encoding in Kernel::System::Notification::NotificationGet().
  * Generic Agent ticket actions can't be unselect.
  * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
  * Download button for dashboard stats visible even if no permissions for AgentStats exist..
  * Invalid utf-8 parameters not filtered sufficciently.
  * DynamicField Filter in AgentDashboard accepts only one value.
  * Can't select customer and/or public interface in AdminACL.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys.
  * Added possibility to turn of SSL certificate validation.
  * SLA can not be set over Free Fields Dialog.
  * Not possible to change customer.
  * Error from GenericInterface using SOAP and TicketGet operation.
  * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm.
  * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20.
- Changes 3.3.12
  * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker.
  * Adressbook search does not permit to add contacts via click.
  * Wrong sortation of Ticket Overview settings.
  * Missing translations in Dashboard and TicketOverview settings.
  * Internal Server Error, instead of warning.
  * Dashlet: Filter Attributes with more then one CustomerID doesn't work.
  * SQL error with "0 oracle" for article body in Ticket Search.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig).
  * ProcessManagement: TransitionAction delete does not check if is used.
  * GPG option 0xlong breaks decryption of emails.
  * ORA-03113 Error after scheduler start.
  * /etc/init.d/otrs running httpd is not detected on CentOS 7.
  * Unable to change password in customer interface.
  * Dynamic Field shown information in customer interface is not consistent with agent interface.
  * Error: No Process configured! - Agent interface.
  * Error while splitting ticket.
  * ActivityDialogEntityID not working in ACLs from Process screens reducing States.
- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch
- Added itsm-update.sh, a script to update the itsm source we use
- Updated sources
  * otrs.README.de
  * otrs.README.en
  * UPGRADING.SuSE -&gt; UPGRADING.SUSE
  * ZZZAuto.pm</changelog>
<changelog author="chris@computersalat.de" date="1477828800">- fix itsm package
  * version is 3.3.14
- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch
- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch</changelog>
<changelog author="chris@computersalat.de" date="1478088000">- fix for boo#1008017
  * execution of JavaScript in OTRS context by opening malicious attachment
- Update to 3.3.16
  * Improved sandboxing of displayed attachments.
    see OSA-2016-02 (CVE-2016-9139)
  * Added package verification information to otrs.PackageManager.pl,
    use bin/otrs.PackageManager.pl -a list -e (to show package verification
    information) or bin/otrs.PackageManager.pl -a list -e -c
    (to show package verification information deleting the cache before).
  * Bug#11959 ? 500 Can?t connect to www.otrs.com/product.xml:443.
  * Bug#11870 ? Missing quoting in Layout::AgentQueueListOption().
  * Bug#11802 ? Customer user can get access to all ticket data.
- fix ZZZAuto.pm
  * do not replace existing file (manually merge needed for ITSM)</changelog>
<changelog author="chris@computersalat.de" date="1496836800">- fix for boo#1043086
  * Incorrect Access Control in OTRS
- Update to 3.3.17 2017-06-06
  * Improved SecureMode detection in Installer.
    see OSA-2017-03 (CVE-2017-9324)
  * Bug#12753 - Function "SystemDataGroupGet" has problems with empty
    values in oracle.
  * Bug#9941 - Articles with multi-byte characters that claim to be
    UTF-8 will not display in the browser.
  * Bug#7961 - customer search should not return results for internal
    articles.
    see OSA-2017-02
  * Bug#12391 - Base64 encoded image does not display in article.
  * Bug#12461 - Chrome can not display attached PDF files since 5.0.14.</changelog>
<changelog author="chris@computersalat.de" date="1506168000">- fix for boo#1059691 (CVE-2017-14635)
  * Code Injection / Privilege Escalation OTRS
- Update to 3.3.18
  * Improved validation in statistic import and export.
    see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
  * Updated CPAN module URI to version 1.72.</changelog>

</package>
<package pkgid="1149dcd3f19d533089c08742d3a1444b02afbcb82ad7a664557129ef60e6bffe" name="otrs-doc" arch="noarch">
    <version epoch="0" ver="3.3.20" rel="14.1"/>

<changelog author="alexandre@exatati.com.br" date="1383739200">- Update to 3.2.12:
  * Updated French translation, thanks to Olivier Sallou!
  * Bug#9910 - Startup warnings/errors with Perl 5.18.1.
  * Bug#9753 - META HTTP-EQUIV="Refresh" tag not stripped from HTML
    email.
  * Bug#9897 - process ticket 'fading away' -&gt; Process is invalid.
  * Bug#9749 - Using spell checker in rich text Editor strips HTML
    formatting.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#9883 - Stats Overview is slow due Caching bug (object cache does
    not work).
  * Bug#9839 - Inline images not showing up when cookies are disabled.
  * Moved process import functionality in the backend module
    Kernel/System/ProcessManagement/DB/Process.pm.
  * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard.
  * Bug#9814 - Tickets without articles not shown correcly in medium view.
  * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values
    of toolbar widgets are ignored.
  * Bug#9391 - Incorrect permissions on .procmailrc.
  * Bug#9796 - Misaligned Headers on Simple Stats.
- Aditional changes from 3.2.11:
  * Bug#9542 ? Uninitialized value in AgentTicketForward.
  * Bug#9765 ? Dynamic Field values are completely removed if one entry
    contains a dash.
  * Bug#9764 ? ACL, Queue will ignored with customerID.
  * Bug#9762 ? Queue View ? S / M / L views ? not saved after logout.
  * Bug#9580 ? Time fields in TicketGetResponse Ticket element do not
    comply with xsd:DateTime format.
  * Bug#9748 ? ProcessManagement: Duplicate articles in a process-ticket
    (TransitionAction).
  * Bug#9759 ? Installer Error DB ? max key length is 767 bytes.
  * Bug#9747 ? Only first selected process displays the RichText editor.
  * Bug#9688 ? ORA-01839 error occurs at DynamicField in TicketSearch.
  * Bug#9751 ? TimeUnits are not accepted with a value of 0.
  * Bug#9739 ? Customer interface not working with MySQL 5.6.
  * Bug#8489 ? setting Tickets per page resets AgentTicketQueue.
  * Bug#9732 ? German translation file de.pm incomplete.
  * Bug#9728 ? Bulk action (send email) ignores reply-to address from
    unknown customers.
  * Bug#9661 ? Useless code in DynamicField backend.
  * Bug#9701 ? Ticket overview Queue Sort Filter is missing.
  * Bug#8173 ? Dashboard Widget ?Online? does not save state.
  * Bug#9188 ? AgentTicketEmail always loads a signature, even if no
    queue is selected.
  * Bug#9672 ? Undecrypted HTML part displayed when viewing a
    multipart/alternative PGP encrypted HTML mail.</changelog>
<changelog author="chris@computersalat.de" date="1386763200">- update to 3.2.13
  * Bug#9327 ? Filter breaks ?Select all? functionality.
  * Bug#9999 ? Timestamps in HistoricalValueGet return milliseconds on SQL
    Server.
  * Bug#10027 ? Added old ticket information to ticket_history.
  * Bug#7337 ? AJAX Error on new Phone Ticket on IIS when using JSON::XS.
  * Bug#8991 ? Back-action does not work when search result returned just 1
    ticket.
  * Bug#9937 ? Activity-Dialogs in wrong order.
  * Bug#9954 ? PGP Crypted and Signed emails could be wrongly parsed.
  * Bug#9639 ? TextArea validation message not translated.
  * Bug#9944 ? Search Template issue.
  * Bug#9938 ? ActivityDialog doesn?t show queues with move_into permissions.
  * Bug#9940 ? Fedora misses dependency on Sys::Syslog.
  * Removed Patch/Workaround for CPAN MIME::Parser v5.503
    (introduced in OTRS 3.2.2) replaced with another solution, as it was
    causing problems with PGP.
  * Bug#9916 ? Error when updating CustomerUser Login on ForeignDB.
  * Bug#9841 ? Tabbing changes radio button of owner change selection.
  * Bug#9867 ? Validation errors are not shown correctly when replying to a
    ticket in Customer Interface.
  * Bug#9914 ? Spellchecker ignores double wrong words.</changelog>
<changelog author="chris@computersalat.de" date="1393416000">- fix for bnc#866476 (CVE-2014-1695)
- update to 3.2.15
  (fix for OSA-2014-03, CVE-2014-1695)
  * Improved HTML filter.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer
    ID instead Agent ID.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as
    a customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work
    when authenticated as a customer.
- 3.2.14
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Fixed bug#9959 - &amp; breaks ExpandCustomerName.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose.
  * Added functionality to disable access to tickets of other customers with
    the same customer company in customer interface.
  * Fixed bug#9650 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.</changelog>
<changelog author="chris@computersalat.de" date="1394107200">- update to 3.3.5
  * Improved HTML filter.
  * Followup fix for bug#10116 - Random ordering of columns in "Small" ticket
    lists.
  * Re-implemented Process Management ProcessImport().
  * Fixed bug#10258 - yellow color for UnreadArticles.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Updated Polish translation, thanks to Wojciech Myrda.
  * Fixed bug#6323 - Graph/Chart generation selects slice/background color
    identical to text color.
  * Added feature to download report data shown in dashboard stats as CSV and
    PDF.
  * Fixed bug#10248 - OTRS Portal - Overview of registered systems.
  * Added browser check for IE10 in compatibility mode.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for
    dynamic fields.
  * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB.
  * Fixed bug#7818 - Menu simplification is not working for item "responsible".
  * Added new option "bin/otrs.LoaderCache.pl -o generate" to generate the
    loader cache for all frontend modules. This can be useful in cluster setups.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#10201 - Wrong column sort order in ticketoverview widget.
  * Fixed bug#10195 - Folluw up notification shows old prio after prio change.
  * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating
    new ticket from customer creation.
  * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI.
  * Follow-up fix for bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10220 - Invalid Statistics not displayed in overview.
  * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl
    not set.
  * Fixed bug#10177 - Missing sources in tarball.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#7440 - Ticket overviews don't show column headers for priority and
    unread articles in small mode.
  * Added process management canvas label spacer to avoid overlapping transition
    labels.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working.
  * Fixed bug#10163 - subject shows only 30 characters.
  * Fixed bug#10193 - Expired cookie bug in customer interface..
  * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order.
  * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket.
  * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen
    results in an error no matter what data was filled in.
  * Fixed bug#10209 - When opening tree selection dialog, the search field
    should get the focus.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#10130 - Events Ticket Calendar not working.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID
    instead Agent ID.
  * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a
    customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when
    authenticated as a customer.
  * Fixed bug#10176 - available columns selection in search result view is not
    scrollable.
  * Fixed bug#10120 - Management Dashboard: page reload erases stat graph
    settings.
  * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with
    all lines concatenated to one
  * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl.
  * Fixed bug#10178 - Stat Permissions.
  * Fixed bug#10188 - Inconsistency in graphical ACL editor.
  * Fixed bug#10155 - backup.pl doesn't compress database dump on non-MySQL.
  * Fixed bug#10106 - Sending Articles with ArticleSend() ignores ReplyTo.
  - 3.3.4 2014-01-28
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10153 - Error shown in SysConfig when Setting PendingDiffTime to
    30 Days.
  * Fixed bug#10161 - Edit Stats - 500 internal Server Error.
  * Fixed bug#10167 - Non-deterministic hash key construction in Stats.pm.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#10048 - RPM upgrade breaks permissions on config files.
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Updated traditional Chinese translation.
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Fixed bug#10145 - %A is not correctly substituted in Language::Time().
  * Fixed bug#10079 - Cannot operate OTRS on IE7 because of JavaScript error.
  * Fixed bug#10113 - Management dashboard setting doesn't show up when agent
    only has RO on stats.
  * Fixed bug#10088 - Error messages on recieving mailer daemons.
  * Fixed bug#10011 - Management Dashboard: X-Axis element labels may overlap.
  * Fixed bug#10012 - Management Dashboard: strings not translatable.
  * Fixed bug#10140 - Unable to search using before/after in Date Dynamic Fields.
  * Fixed bug#10008 - Customer user is automatically added to Cc at response for
    email-internal in AgentTicketCompose.
  * Added Hebrew translation file, thanks to Amir Elion!
  * Fixed bug#9978 - Activity Dialog for Customer shows "No Process configured!".
  * Fixed bug#10134 - Missing information on icon actions for SMIME certificates
    and keys.
  * Fixed bug#10116 - Random ordering of columns in "Small" ticket lists.
  * Fixed bug#10094 - Former FAO OTRSACLExtensions not available in the ACL
    Editor.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose
  * Fixed bug#10080 - Bad group check in otrs-scheduler-linux.
  * Fixed bug#10097 - $Param{NextState} is always undef in AgentTicketCompose.
  * Updated Russian translation, thanks to Yuriy Kolesnikov.
  * Fixed bug#10074 - Error if no queue matched in DashboardEventsTicketCalendar.
  * Fixed bug#965 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Added functionality to disable access to tickets of other customers with the
    same customer company in customer interface.
  * Fixed bug#9702 - Wrong article type with external ticketnumber recognition
    i.c.w. follow-up reject option.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10078 - Installer: error log after creating mysql database.
  * Fixed bug#10056 - Installer fails when special characters in database user's
    password.
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Updated Swedish translation, thanks to Andreas Berger.
  * Fixed bug#10075 - Stats widgets permission group is hardcoded to "stats"
  * Updated Russian translation, thanks to Andrey N. Burdin.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.
  * Fixed bug#10058 - Owner and Responsible are mandatory if enabled.
  * Fixed bug#7792 - Ticket-Action "Change Queue" is hardcoded and should be
    called "Queue" only.
  * Fixed bug#9109 - Printing ticket does not show the full subject line.
  * Fixed bug#10064 - Translated fields loose sorting in Activity Dialog admin
    screen.
  * Fixed bug#10066 - Required field isn't marked in AgentTicketCustomer.
  * Fixed bug#10059 - Service selection unavailable if customer selection is
    possible.
  * Fixed bug#10062 - Text label indent for locale RU - AgentÒicketViewCompose
  * Fixed bug#10044 - PendingDiffTime removes 2013 (current year) when reaching
    end of the year.
  * Fixed bug#10049 - Transition names in path edit screen ordered by ID instead
    of name.
  * Fixed bug#10055 - Queue-Treeview not working correctly.
  * Fixed bug#10061 - ArticleType dropdown in graphical ActivityDialog mask
    loads with empty value
  * Fixed bug#10060 - Field names are not translated in graphical process editor.
- for further changes please see:
  * https://github.com/OTRS/otrs/blob/rel-3_3_5/CHANGES.md
- rebase patches
  * httpd_config, removed obsolete stuff, added new
  * perm</changelog>
<changelog author="chris@computersalat.de" date="1396526400">- fix for bnc#871758 (CVE-2014-2553)
- update to 3.3.6
  fix for OSA-2014-04 (CVE-2014-2553)
  fix for OSA-2014-05 (CVE-2014-2554)
  * Updated French translation, thanks to Guillaume Houdmon.
  * Extended the OTRS system registration to optionally also send the
    support assessment data along with the system registration data.
    Support assessment data is improved and extended and can be
    accessed in the new Service Center module of the admin area.
  * Fixed bug#10405 - When using the search feature of the tree
    selection overlay, one is not able to expand subtrees of matching
    entries.
  * Fixed bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10400 - AgentTicketProccess will not use error messages
    of dynamic field drivers.
  * Fixed bug#10397 - DynamicField configuration in SysConfig
    'DefaultOverviewColumns' causes JS error.
  * Fixed bug#9592 - Ticket history overflows for dynamic field.
  * Fixed bug#10368 - Ticket title isn't shown.
  * Updated Japanese translation, thanks to Toshihiro Takehara..
  * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
  * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
    AgentTicketSearch view.
  * Fixed bug#10384 - out-of-office information not displayed in
    Ticket Zoom.
  * Fixed bug#10379 - ACL Not Working.
  * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
    AgentTicketActionCommon.
  * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
    RichText Editor.
  * Improved handling of cachekeys in Stats.pm to prevent cacheing
    problems in the dashboard stats.
  * Fixed bug#10334 - Deleting the attachment deletes the recepients
    too.
  * Fixed bug#10374 - OTRS does not protect against clickjacking.
  * Fixed bug#10364 - Inline images displayed as attachment in SMIME
    and PGP signed messages.
  * Fixed bug#10251 - SMIME signing fail on mails with attachements.
  * Fixed bug#10277 - Statistics per agent also shows invalid agents.
  * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
    empty values.
  * Fixed bug#10365 - Custom State types not working with
    "otrs.PendingJobs.pl" any more.
  * Fixed bug#10349 - System Email notification external not
    highlighted correctly.
  * Fixed bug#10361 - Incorrect handling of special characters in
    DynamicFields.
  * Fixed bug#10324 - Customer user field still marked as empty even
    after providing data.
  * Fixed bug#10019 - Tickets via "In line action bar" cannot be moved.
  * Fixed bug#10283 - MouseOver on the Transitions does not show
    transition actions.
  * Fixed bug#10241 - ACL-Editor Bug..
  * Fixed bug#10338 - Empty Content-ID causes strange result -&gt;
    HTML-tags are "corrupted".
  * Fixed bug#9951 - Line breaks at the end of salutation templates
    are not saved.
  * Fixed bug#10275 - Problem with encoding in attachment.
  * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
    garbage in the database.
  * Fixed bug#10336 - Problem with symlinked theme directories.
  * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
    DynamicField changed.
  * Fixed bug#10264 - Description (espacially article description) in
    processes are shown on improper place.
  * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
  * Fixed bug#10240 - Restricting process list by ACLs is only working
    with UserID.
  * Fixed bug#10299 - "Ouf of Office" shows inactive agents.
  * Fixed bug#10321 - Applying Filters to tickets in Status View or
    Queue View will log out session..
  * Fixed bug#9600 - When a ticket is deleted by generic agent job,
    No such TicketID error.
  * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
  * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Fixed bug#10300 - Special character in customer id cuts off string.
  * Fixed bug#10309 - mails with an empty return-path header must not
    trigger auto responses in OTRS.
  * Fixed bug#10245 - Use of uninitialized value $Param{"Value2"} in
    string.
  * Fixed bug#10182 - Customer email suddenly treated by OTRS as
    'email-internal'.
  * Fixed bug#10285 - No use Ticket::Hook in CustomerTicketZoom.
  * Fixed bug#9787 - Queue field doesn't appear in ProcessMgmt.
  * Fixed bug#10222 - Customer search during ticket creation - OTRS
    shows details also if no customer match the search.
  * Fixed bug#10259 - GenericInterface: mapping key can't map from / to 0.
- rebased perm patch
- update httpd_conf patch</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update to 3.3.7
  * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines.
  * Updated Japanese translation, thanks to Toshihiro Takehara.
  * Updated Swedish translation, thanks to Peter Krantz.
  * Added CPAN module Archive::Tar.
  * Split otrs.checksum.pl functionality it is only able to work in compare mode.
  * Extended package object to be able to generate an MD5Sum of all files within
    a package.
  * Extended email send capabilities to include custom X-Headers.
  * Extended the OTRS services to be able to create a support bundle file.
  * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom.
  * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB.
  * Fixed bug#10458 - Can't use system registration with some OTRS-IDs.
  * Fixed bug#10470 - Need FormID! error when embedding image when creating a
    Process Ticket.
  * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany.
  * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via
    cron jobs.
  * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171.
  * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search
    term was selected.
  * Fixed bug#10428 - Event Notification ArticleSend Loop.
  * Fixed bug#10441 - Eventbased notification - infinite loop.
  * Fixed bug#10462 - Translation of static statistic widgets (Dashboard).
  * Added OTRS Scheduler Watchdog mode.
  * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads
    page for temporary links.
  * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface
    displayed even though no process is available..
  * Fixed bug#8253 - Missing hover texts for actions in German translation
    of AgentTicketZoom.
  * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard).
  * Fixed bug#10395 - E-mail header parsing bug.
  * Fixed bug#10394 - rfc822 attachments name creating bug and validation
    enhancement.
  * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL.
  * Fixed bug#10402 - Transition or Transition Action popup a login page.
  * Fixed bug#10446 - otrs.PostMasterMailbox.pl Unknown encoding
    '3DISO-8859-2?=' at /usr/local/otrs/Kernel/System/Encode.pm line 367.
  * Fixed bug#8207 - Wrong encoding in graphs.
  * Fixed bug#10416 - Customer selection is not translated.
  * Fixed bug#9098 - The system still consider the customer_ids, even after
    field is empty on table customer_user.
  * Fixed bug#10202 - Process Modules, Dynamic Fields, and ACLs with AJAX update.
  * Fixed bug#10432 - ACLs not working correctly in CustomerTicketZoom
    (Message Followup).
  * Fixed bug#10436 - Error message in syslog about ACL then there is no ACL
    defined.
  * Fixed bug#10438 - Strange sorting of columns in Ticket Dashboard widgets.
  * Fixed bug#10425 - Customer Information in AgentTicketZoom.
  * Followup for bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10406 - Ticket Templates Type "Create" will be not translated.
  * Fixed bug#10378 - SessionID created with generic interface wont work using
    it as Agent.
  * Fixed bug#10399 - Columns Settings lost after search.
  * Fixed bug#10431 - Fallback configuration for scheduler log is wrong.
  * Fixed bug#10426 - Scheduler RegistrationUpdate task dies with PostgreSQL DB.
  * Fixed bug#10362 - .procmailrc is reset with wrong permissions on
    otrs.SetPermisssion.pl execution.
  * Fixed bug#10350 - Events Ticket Calender: In case
    TicketCalendarStartTime=TicketCalendarEndTime, displayed ticket event time
    frame always 2 hours.
  * Fixed bug#9970 - Existing sequences on oracle databases produces errors.
  * Enhanced DiskSpacePatitions SupportDataCollector plugin to deal correctly
    with multiple partitions with the same name.
  * Followup for bug#10130 - Events Ticket Calendar not working.
- update OTRS::ITSM to 3.3.7
  * Bug# 10146 ? ConfigItem search for Integer shows all CIs in results.
  * Bug# 10487 ? ACL Editor did not include Decision and ITSM field action.</changelog>
<changelog author="jamesp@vicidial.com" date="1404129600">- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4
  * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the configuration file had to be modified to look for
    this static module and load pre-2.4 directives if found on
    Apache 2.4. It should be forward compatible if the mod_access
    compat.c module become dynamic in the future and is not loaded.</changelog>
<changelog author="chris@computersalat.de" date="1406635200">- update to 3.3.8
  * Bug#10524 ? Internal Dynamic Fields in Activity Dialog.
  * Bug#10562 ? Inconsistent displaying of ?CustomerID? value.
  * Bug#10508 ? (Agent|Customer)TicketProcess javascript errors when
    uploading attachments/having server errors.
  * Bug#10521 ? OutputFilterText AutoLink CVE.
  * Bug#10430 ? backup.pl doesn?t work with PostgreSQL unix sockets.
  * Bug#5012 ? Merging a watched ticket into another should ?transfer?
    the Watch status to the final ticket, thanks to Michiel Beijen!
  * Bug#10544 ? Upgrade to OTRS 3.3.7 breaks connection to external
    customer user tables.
  * Bug#10535 ? ACLListGet() produces DB warning message.
  * Bug#10163 ? Subject shows only 30 characters.
  * Bug#10519 ? Opening and closing popups in ProcessManagement leads
    to performance issues.
  * Bug#10513 ? Some SupportData Plugin Identifiers ends with ::.
  * Bug#8494 ? Possibility to split quotes in rich text editor.
  * Bug#10491 ? CIC not always accessible via TicketZoom.
  * Bug#10427 ? Bulk action locks tickets ? cancel keeps them locked.
- update OTRS::ITSM to 3.3.8
  * Bug# 10558 ? Slow CI search for classes with a large MaxCount on
    a value and sub values.
  * Bug# 10570 ? Deleting ITSM Change search templates does not work.</changelog>
<changelog author="alexandre@exatati.com.br" date="1412078400">- Update to 3.3.9:
  https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md
  * Bug#10697 - Column name in CSV report of stats is lowercase.
  * Bug#10652 - Process tickets without any articles create empty
    lines in AgentTicketSearch CSV result file.
  * Bug#10607 - SQL Box can change the database.
  * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via
    BulkAction.
  * Bug#10699 - Cannot add new customer (company).
  * Bug#10497 - CustomerUser secondary database access opens multitude
    of database connections.
  * Bug#9756 - Owner will be set after QueueMove screen AND undo.
  * Bug#10606 - Dynamic fields in dashboard overview are empty.
  * Updated Danish translation, thanks to Lars Jørgensen.
  * Bug#10670 - It is possible to start the scheduler more than once.
  * Bug#10515 - Problem with column filter sorting
  * Bug#10598 - Field tags not parsed properly in auto response subject.
  * Bug#10658 - Issue with multiple customer company backends.
  * Bug#10622 - eMail address only with uppercases - wrong display.
  * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets
    as affected.
  * Bug#10601 - ExternalTicketNumberRecognition produces errors in log
    file.
  * Bug#9851 - Unlocking a ticket in the small view results in
    AgentTicketZoom.
  * Bug#10612 - Wrong Time in DashboardField "Changed", thanks to S7.
  * Bug#10595 - Standard Replies are false sorted in Ticket Zoom
    select box.
  * Bug#10534 - Wildcard hacking the customer information center,
    thanks to S7.
  * Bug#10597 - Process list description column doesn't support line
    breaks, thanks to S7.
  * Bug#10586 - In Customer Portal no attachments are shown.
  * Bug#6601 - Changing search options changes order of fields, thanks
    to S7.
  * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition
    doesn't work.
  * Bug#10559 - "Previous Owner" don't use the FirstnameLastnameOrder
    configuration.
  * Bug#10532 - PostMasterMailbox.pl hangs parsing mails.
  * Bug#10578 - Service selection in GA Ticket Action allows multi
    select.
- update OTRS::ITSM to 3.3.9
  * Bug#10330 ? ITSM Impact field displayed with Key instead of Value.</changelog>
<changelog author="chris@computersalat.de" date="1412078401">- fix changelog
  * update 3.3.9 with 3.3.9 data
  * add missing update info for OTRS::ITSM
- update itsm-3.3.9 Source</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post script</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- One more fix after fix bashisms in previous commit</changelog>
<changelog author="chris@computersalat.de" date="1419854400">- fix for boo#910988 (CVE-2014-9324)
- update to 3.3.11
  fix for OSA-2014-06 (CVE-2014-9324)
  * Updated translations, thanks to all translators.
  * Bug#10904 ? Upon entering CIC, search only returns hits during
    the first search.
  * Bug#10944 ? Multiple selection in Tree Selection also affects
    filtered elements.
  * Follow-up fix for Bug#6284 ? Problem with unicode characters
    when using FastCGI.
  * Bug#10830 ? Textarea Limitation in Generic Agent.
  * Bug#10920 ? ProcessManagement: Deleting Activities from canvas
    does not update process layout.
  * Bug#10801 ? Editor is extremely slow with large articles.
  * Enhanced Permission Checks in GenericInterface Ticket Connector.
  * Bug#10634 ? ProcessManagement: Can not use an arbitrary email
    address as a CustomerUser.
  * Bug#10839 ? ACL cannot set possible TicketType in
    AgentTicketPhone and AgentTicketEmail.
  * Bug#10776 ? Medium and Large view don?t indicate active
    filters.
  * Bug#10808 ? Set of pending time is not working at all in
    Frontend::Agent::Ticket::ViewNote.
  * Bug#10892 ? TicketActionsPerTicket open multiple popups at
    TicketOverview.
  * Bug#10857 ? JS added too often in AgentTicketOverviewSmall.
  * Bug#10639 ? Set of pending time/state not working properly
    (process management).
  * Bug#10893 ? Missing log name partitions in Service Center.
  * Bug#10879 ? GenericInterfae: TicketSearch operation does not
    take escalation parameters.
  * Bug#10812 ? SOAP Response is always in version SOAP 1.2.
  * Bug#10083 ? SMIME and Email address detection is case sensitive
    (for the right part)..
  * Bug#10826 ? German ? Translation Problem.
  * Bug#10678 ? Dates off by one on area diagram in dashboard widget.
  * Bug#7369 ? LinkQoute fails for some characters in hash or
    parameter.
  * Bug#8404 ? Wrong sorting of responses dropdown in TicketZoom.
  * Bug#8781 ? 508 Compliance: In Ticket Overviews the title
    attribute of large view link is incorrect.
  * Bug#10669 ? Maxlength validation of textarea dynamic fields does
    not work correctly in IE.
  * Bug#10471 ? Missing translations for tooltips of
    TicketOverviewSmall columns.
  * Bug#10850 ? Double-quoted special characters in title of dynamic
    field sidebar output in TicketZoom.
  * Bug#10805 ? Open tickets in 3 days show right function but wrong
    number.
  * Bug#10845 ? No date search if TimeInputFormat is Input.
  * Bug#10706 ? dashboard settings are lost by different user login.
  * Bug#10577 ? Service Center does not show MOD_PERL version on
    Ubuntu 14.04.
  * Bug#10679 ? Texts in notification tags loose their empty lines
    and spaces.</changelog>
<changelog author="aj@ajaissle.de" date="1445688000">- Update to 3.3.15
  * HTML emails not properly displayed (parts missing).
  * Fixed a nasty JSON::XS crash on some platforms.
  * Updated CPAN module Proc::Daemon to version 0.21.
  * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT).
  * auto reply with DynamicFields from webservice.
  * Added option to package manager list action, to show deployment info of installed packages.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
- Changes 3.3.14
  * Package installation/uninstallation leads to endless loop.
  * Lang parameter not correctly validated.
  * Search for multiple ticket numbers with GenericInterface.
- Changes 3.3.13
  * Updated translation files.
  * Refresh bug on process client interface using ie8
  * Adding email recipients via addressbook does not update customer information.
  * Wrong column encoding in Kernel::System::Notification::NotificationGet().
  * Generic Agent ticket actions can't be unselect.
  * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
  * Download button for dashboard stats visible even if no permissions for AgentStats exist..
  * Invalid utf-8 parameters not filtered sufficciently.
  * DynamicField Filter in AgentDashboard accepts only one value.
  * Can't select customer and/or public interface in AdminACL.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys.
  * Added possibility to turn of SSL certificate validation.
  * SLA can not be set over Free Fields Dialog.
  * Not possible to change customer.
  * Error from GenericInterface using SOAP and TicketGet operation.
  * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm.
  * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20.
- Changes 3.3.12
  * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker.
  * Adressbook search does not permit to add contacts via click.
  * Wrong sortation of Ticket Overview settings.
  * Missing translations in Dashboard and TicketOverview settings.
  * Internal Server Error, instead of warning.
  * Dashlet: Filter Attributes with more then one CustomerID doesn't work.
  * SQL error with "0 oracle" for article body in Ticket Search.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig).
  * ProcessManagement: TransitionAction delete does not check if is used.
  * GPG option 0xlong breaks decryption of emails.
  * ORA-03113 Error after scheduler start.
  * /etc/init.d/otrs running httpd is not detected on CentOS 7.
  * Unable to change password in customer interface.
  * Dynamic Field shown information in customer interface is not consistent with agent interface.
  * Error: No Process configured! - Agent interface.
  * Error while splitting ticket.
  * ActivityDialogEntityID not working in ACLs from Process screens reducing States.
- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch
- Added itsm-update.sh, a script to update the itsm source we use
- Updated sources
  * otrs.README.de
  * otrs.README.en
  * UPGRADING.SuSE -&gt; UPGRADING.SUSE
  * ZZZAuto.pm</changelog>
<changelog author="chris@computersalat.de" date="1477828800">- fix itsm package
  * version is 3.3.14
- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch
- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch</changelog>
<changelog author="chris@computersalat.de" date="1478088000">- fix for boo#1008017
  * execution of JavaScript in OTRS context by opening malicious attachment
- Update to 3.3.16
  * Improved sandboxing of displayed attachments.
    see OSA-2016-02 (CVE-2016-9139)
  * Added package verification information to otrs.PackageManager.pl,
    use bin/otrs.PackageManager.pl -a list -e (to show package verification
    information) or bin/otrs.PackageManager.pl -a list -e -c
    (to show package verification information deleting the cache before).
  * Bug#11959 ? 500 Can?t connect to www.otrs.com/product.xml:443.
  * Bug#11870 ? Missing quoting in Layout::AgentQueueListOption().
  * Bug#11802 ? Customer user can get access to all ticket data.
- fix ZZZAuto.pm
  * do not replace existing file (manually merge needed for ITSM)</changelog>
<changelog author="chris@computersalat.de" date="1496836800">- fix for boo#1043086
  * Incorrect Access Control in OTRS
- Update to 3.3.17 2017-06-06
  * Improved SecureMode detection in Installer.
    see OSA-2017-03 (CVE-2017-9324)
  * Bug#12753 - Function "SystemDataGroupGet" has problems with empty
    values in oracle.
  * Bug#9941 - Articles with multi-byte characters that claim to be
    UTF-8 will not display in the browser.
  * Bug#7961 - customer search should not return results for internal
    articles.
    see OSA-2017-02
  * Bug#12391 - Base64 encoded image does not display in article.
  * Bug#12461 - Chrome can not display attached PDF files since 5.0.14.</changelog>
<changelog author="chris@computersalat.de" date="1506168000">- fix for boo#1059691 (CVE-2017-14635)
  * Code Injection / Privilege Escalation OTRS
- Update to 3.3.18
  * Improved validation in statistic import and export.
    see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
  * Updated CPAN module URI to version 1.72.</changelog>
<changelog author="chris@computersalat.de" date="1510920000">- fix for boo#1068677 (CVE-2017-15864, OSA-2017-06)
  * vulnerabilities discovered in the OTRS framework:
    An attacker who is logged into OTRS as an agent can request special
    URLs from OTRS which can lead to the disclosure of any configuration
    information, including database credentials.
- Update to 3.3.19
  * Not needed mandatory stats object module function in 'ObjectModuleCheck'.</changelog>
<changelog author="chris@computersalat.de" date="1511352000">- fix for boo#1069391 (CVE-2017-16664, OSA-2017-07)
  * vulnerabilities discovered in the OTRS framework:
    An attacker who is logged into OTRS as an agent can request special
    URLs from OTRS which can lead to the execution of shell commands
    with the permissions of the web server user.
- Update to 3.3.20
  * Improved handling of spell checker.
  OTRS 3.3 is now EOL, officially supported versions are OTRS &gt;= 4
  Please consider updating to a newer OTRS version.</changelog>

</package>
<package pkgid="b78cae458084f62cb8b94f6f7ee95659f1dfec7144a6f79dab57259f3868848c" name="otrs-itsm" arch="noarch">
    <version epoch="0" ver="3.3.14" rel="14.1"/>

<changelog author="alexandre@exatati.com.br" date="1383739200">- Update to 3.2.12:
  * Updated French translation, thanks to Olivier Sallou!
  * Bug#9910 - Startup warnings/errors with Perl 5.18.1.
  * Bug#9753 - META HTTP-EQUIV="Refresh" tag not stripped from HTML
    email.
  * Bug#9897 - process ticket 'fading away' -&gt; Process is invalid.
  * Bug#9749 - Using spell checker in rich text Editor strips HTML
    formatting.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#9883 - Stats Overview is slow due Caching bug (object cache does
    not work).
  * Bug#9839 - Inline images not showing up when cookies are disabled.
  * Moved process import functionality in the backend module
    Kernel/System/ProcessManagement/DB/Process.pm.
  * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard.
  * Bug#9814 - Tickets without articles not shown correcly in medium view.
  * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values
    of toolbar widgets are ignored.
  * Bug#9391 - Incorrect permissions on .procmailrc.
  * Bug#9796 - Misaligned Headers on Simple Stats.
- Aditional changes from 3.2.11:
  * Bug#9542 ? Uninitialized value in AgentTicketForward.
  * Bug#9765 ? Dynamic Field values are completely removed if one entry
    contains a dash.
  * Bug#9764 ? ACL, Queue will ignored with customerID.
  * Bug#9762 ? Queue View ? S / M / L views ? not saved after logout.
  * Bug#9580 ? Time fields in TicketGetResponse Ticket element do not
    comply with xsd:DateTime format.
  * Bug#9748 ? ProcessManagement: Duplicate articles in a process-ticket
    (TransitionAction).
  * Bug#9759 ? Installer Error DB ? max key length is 767 bytes.
  * Bug#9747 ? Only first selected process displays the RichText editor.
  * Bug#9688 ? ORA-01839 error occurs at DynamicField in TicketSearch.
  * Bug#9751 ? TimeUnits are not accepted with a value of 0.
  * Bug#9739 ? Customer interface not working with MySQL 5.6.
  * Bug#8489 ? setting Tickets per page resets AgentTicketQueue.
  * Bug#9732 ? German translation file de.pm incomplete.
  * Bug#9728 ? Bulk action (send email) ignores reply-to address from
    unknown customers.
  * Bug#9661 ? Useless code in DynamicField backend.
  * Bug#9701 ? Ticket overview Queue Sort Filter is missing.
  * Bug#8173 ? Dashboard Widget ?Online? does not save state.
  * Bug#9188 ? AgentTicketEmail always loads a signature, even if no
    queue is selected.
  * Bug#9672 ? Undecrypted HTML part displayed when viewing a
    multipart/alternative PGP encrypted HTML mail.</changelog>
<changelog author="chris@computersalat.de" date="1386763200">- update to 3.2.13
  * Bug#9327 ? Filter breaks ?Select all? functionality.
  * Bug#9999 ? Timestamps in HistoricalValueGet return milliseconds on SQL
    Server.
  * Bug#10027 ? Added old ticket information to ticket_history.
  * Bug#7337 ? AJAX Error on new Phone Ticket on IIS when using JSON::XS.
  * Bug#8991 ? Back-action does not work when search result returned just 1
    ticket.
  * Bug#9937 ? Activity-Dialogs in wrong order.
  * Bug#9954 ? PGP Crypted and Signed emails could be wrongly parsed.
  * Bug#9639 ? TextArea validation message not translated.
  * Bug#9944 ? Search Template issue.
  * Bug#9938 ? ActivityDialog doesn?t show queues with move_into permissions.
  * Bug#9940 ? Fedora misses dependency on Sys::Syslog.
  * Removed Patch/Workaround for CPAN MIME::Parser v5.503
    (introduced in OTRS 3.2.2) replaced with another solution, as it was
    causing problems with PGP.
  * Bug#9916 ? Error when updating CustomerUser Login on ForeignDB.
  * Bug#9841 ? Tabbing changes radio button of owner change selection.
  * Bug#9867 ? Validation errors are not shown correctly when replying to a
    ticket in Customer Interface.
  * Bug#9914 ? Spellchecker ignores double wrong words.</changelog>
<changelog author="chris@computersalat.de" date="1393416000">- fix for bnc#866476 (CVE-2014-1695)
- update to 3.2.15
  (fix for OSA-2014-03, CVE-2014-1695)
  * Improved HTML filter.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer
    ID instead Agent ID.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as
    a customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work
    when authenticated as a customer.
- 3.2.14
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Fixed bug#9959 - &amp; breaks ExpandCustomerName.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose.
  * Added functionality to disable access to tickets of other customers with
    the same customer company in customer interface.
  * Fixed bug#9650 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.</changelog>
<changelog author="chris@computersalat.de" date="1394107200">- update to 3.3.5
  * Improved HTML filter.
  * Followup fix for bug#10116 - Random ordering of columns in "Small" ticket
    lists.
  * Re-implemented Process Management ProcessImport().
  * Fixed bug#10258 - yellow color for UnreadArticles.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Updated Polish translation, thanks to Wojciech Myrda.
  * Fixed bug#6323 - Graph/Chart generation selects slice/background color
    identical to text color.
  * Added feature to download report data shown in dashboard stats as CSV and
    PDF.
  * Fixed bug#10248 - OTRS Portal - Overview of registered systems.
  * Added browser check for IE10 in compatibility mode.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for
    dynamic fields.
  * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB.
  * Fixed bug#7818 - Menu simplification is not working for item "responsible".
  * Added new option "bin/otrs.LoaderCache.pl -o generate" to generate the
    loader cache for all frontend modules. This can be useful in cluster setups.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#10201 - Wrong column sort order in ticketoverview widget.
  * Fixed bug#10195 - Folluw up notification shows old prio after prio change.
  * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating
    new ticket from customer creation.
  * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI.
  * Follow-up fix for bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10220 - Invalid Statistics not displayed in overview.
  * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl
    not set.
  * Fixed bug#10177 - Missing sources in tarball.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#7440 - Ticket overviews don't show column headers for priority and
    unread articles in small mode.
  * Added process management canvas label spacer to avoid overlapping transition
    labels.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working.
  * Fixed bug#10163 - subject shows only 30 characters.
  * Fixed bug#10193 - Expired cookie bug in customer interface..
  * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order.
  * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket.
  * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen
    results in an error no matter what data was filled in.
  * Fixed bug#10209 - When opening tree selection dialog, the search field
    should get the focus.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#10130 - Events Ticket Calendar not working.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID
    instead Agent ID.
  * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a
    customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when
    authenticated as a customer.
  * Fixed bug#10176 - available columns selection in search result view is not
    scrollable.
  * Fixed bug#10120 - Management Dashboard: page reload erases stat graph
    settings.
  * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with
    all lines concatenated to one
  * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl.
  * Fixed bug#10178 - Stat Permissions.
  * Fixed bug#10188 - Inconsistency in graphical ACL editor.
  * Fixed bug#10155 - backup.pl doesn't compress database dump on non-MySQL.
  * Fixed bug#10106 - Sending Articles with ArticleSend() ignores ReplyTo.
  - 3.3.4 2014-01-28
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10153 - Error shown in SysConfig when Setting PendingDiffTime to
    30 Days.
  * Fixed bug#10161 - Edit Stats - 500 internal Server Error.
  * Fixed bug#10167 - Non-deterministic hash key construction in Stats.pm.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#10048 - RPM upgrade breaks permissions on config files.
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Updated traditional Chinese translation.
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Fixed bug#10145 - %A is not correctly substituted in Language::Time().
  * Fixed bug#10079 - Cannot operate OTRS on IE7 because of JavaScript error.
  * Fixed bug#10113 - Management dashboard setting doesn't show up when agent
    only has RO on stats.
  * Fixed bug#10088 - Error messages on recieving mailer daemons.
  * Fixed bug#10011 - Management Dashboard: X-Axis element labels may overlap.
  * Fixed bug#10012 - Management Dashboard: strings not translatable.
  * Fixed bug#10140 - Unable to search using before/after in Date Dynamic Fields.
  * Fixed bug#10008 - Customer user is automatically added to Cc at response for
    email-internal in AgentTicketCompose.
  * Added Hebrew translation file, thanks to Amir Elion!
  * Fixed bug#9978 - Activity Dialog for Customer shows "No Process configured!".
  * Fixed bug#10134 - Missing information on icon actions for SMIME certificates
    and keys.
  * Fixed bug#10116 - Random ordering of columns in "Small" ticket lists.
  * Fixed bug#10094 - Former FAO OTRSACLExtensions not available in the ACL
    Editor.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose
  * Fixed bug#10080 - Bad group check in otrs-scheduler-linux.
  * Fixed bug#10097 - $Param{NextState} is always undef in AgentTicketCompose.
  * Updated Russian translation, thanks to Yuriy Kolesnikov.
  * Fixed bug#10074 - Error if no queue matched in DashboardEventsTicketCalendar.
  * Fixed bug#965 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Added functionality to disable access to tickets of other customers with the
    same customer company in customer interface.
  * Fixed bug#9702 - Wrong article type with external ticketnumber recognition
    i.c.w. follow-up reject option.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10078 - Installer: error log after creating mysql database.
  * Fixed bug#10056 - Installer fails when special characters in database user's
    password.
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Updated Swedish translation, thanks to Andreas Berger.
  * Fixed bug#10075 - Stats widgets permission group is hardcoded to "stats"
  * Updated Russian translation, thanks to Andrey N. Burdin.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.
  * Fixed bug#10058 - Owner and Responsible are mandatory if enabled.
  * Fixed bug#7792 - Ticket-Action "Change Queue" is hardcoded and should be
    called "Queue" only.
  * Fixed bug#9109 - Printing ticket does not show the full subject line.
  * Fixed bug#10064 - Translated fields loose sorting in Activity Dialog admin
    screen.
  * Fixed bug#10066 - Required field isn't marked in AgentTicketCustomer.
  * Fixed bug#10059 - Service selection unavailable if customer selection is
    possible.
  * Fixed bug#10062 - Text label indent for locale RU - AgentÒicketViewCompose
  * Fixed bug#10044 - PendingDiffTime removes 2013 (current year) when reaching
    end of the year.
  * Fixed bug#10049 - Transition names in path edit screen ordered by ID instead
    of name.
  * Fixed bug#10055 - Queue-Treeview not working correctly.
  * Fixed bug#10061 - ArticleType dropdown in graphical ActivityDialog mask
    loads with empty value
  * Fixed bug#10060 - Field names are not translated in graphical process editor.
- for further changes please see:
  * https://github.com/OTRS/otrs/blob/rel-3_3_5/CHANGES.md
- rebase patches
  * httpd_config, removed obsolete stuff, added new
  * perm</changelog>
<changelog author="chris@computersalat.de" date="1396526400">- fix for bnc#871758 (CVE-2014-2553)
- update to 3.3.6
  fix for OSA-2014-04 (CVE-2014-2553)
  fix for OSA-2014-05 (CVE-2014-2554)
  * Updated French translation, thanks to Guillaume Houdmon.
  * Extended the OTRS system registration to optionally also send the
    support assessment data along with the system registration data.
    Support assessment data is improved and extended and can be
    accessed in the new Service Center module of the admin area.
  * Fixed bug#10405 - When using the search feature of the tree
    selection overlay, one is not able to expand subtrees of matching
    entries.
  * Fixed bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10400 - AgentTicketProccess will not use error messages
    of dynamic field drivers.
  * Fixed bug#10397 - DynamicField configuration in SysConfig
    'DefaultOverviewColumns' causes JS error.
  * Fixed bug#9592 - Ticket history overflows for dynamic field.
  * Fixed bug#10368 - Ticket title isn't shown.
  * Updated Japanese translation, thanks to Toshihiro Takehara..
  * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
  * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
    AgentTicketSearch view.
  * Fixed bug#10384 - out-of-office information not displayed in
    Ticket Zoom.
  * Fixed bug#10379 - ACL Not Working.
  * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
    AgentTicketActionCommon.
  * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
    RichText Editor.
  * Improved handling of cachekeys in Stats.pm to prevent cacheing
    problems in the dashboard stats.
  * Fixed bug#10334 - Deleting the attachment deletes the recepients
    too.
  * Fixed bug#10374 - OTRS does not protect against clickjacking.
  * Fixed bug#10364 - Inline images displayed as attachment in SMIME
    and PGP signed messages.
  * Fixed bug#10251 - SMIME signing fail on mails with attachements.
  * Fixed bug#10277 - Statistics per agent also shows invalid agents.
  * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
    empty values.
  * Fixed bug#10365 - Custom State types not working with
    "otrs.PendingJobs.pl" any more.
  * Fixed bug#10349 - System Email notification external not
    highlighted correctly.
  * Fixed bug#10361 - Incorrect handling of special characters in
    DynamicFields.
  * Fixed bug#10324 - Customer user field still marked as empty even
    after providing data.
  * Fixed bug#10019 - Tickets via "In line action bar" cannot be moved.
  * Fixed bug#10283 - MouseOver on the Transitions does not show
    transition actions.
  * Fixed bug#10241 - ACL-Editor Bug..
  * Fixed bug#10338 - Empty Content-ID causes strange result -&gt;
    HTML-tags are "corrupted".
  * Fixed bug#9951 - Line breaks at the end of salutation templates
    are not saved.
  * Fixed bug#10275 - Problem with encoding in attachment.
  * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
    garbage in the database.
  * Fixed bug#10336 - Problem with symlinked theme directories.
  * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
    DynamicField changed.
  * Fixed bug#10264 - Description (espacially article description) in
    processes are shown on improper place.
  * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
  * Fixed bug#10240 - Restricting process list by ACLs is only working
    with UserID.
  * Fixed bug#10299 - "Ouf of Office" shows inactive agents.
  * Fixed bug#10321 - Applying Filters to tickets in Status View or
    Queue View will log out session..
  * Fixed bug#9600 - When a ticket is deleted by generic agent job,
    No such TicketID error.
  * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
  * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Fixed bug#10300 - Special character in customer id cuts off string.
  * Fixed bug#10309 - mails with an empty return-path header must not
    trigger auto responses in OTRS.
  * Fixed bug#10245 - Use of uninitialized value $Param{"Value2"} in
    string.
  * Fixed bug#10182 - Customer email suddenly treated by OTRS as
    'email-internal'.
  * Fixed bug#10285 - No use Ticket::Hook in CustomerTicketZoom.
  * Fixed bug#9787 - Queue field doesn't appear in ProcessMgmt.
  * Fixed bug#10222 - Customer search during ticket creation - OTRS
    shows details also if no customer match the search.
  * Fixed bug#10259 - GenericInterface: mapping key can't map from / to 0.
- rebased perm patch
- update httpd_conf patch</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update to 3.3.7
  * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines.
  * Updated Japanese translation, thanks to Toshihiro Takehara.
  * Updated Swedish translation, thanks to Peter Krantz.
  * Added CPAN module Archive::Tar.
  * Split otrs.checksum.pl functionality it is only able to work in compare mode.
  * Extended package object to be able to generate an MD5Sum of all files within
    a package.
  * Extended email send capabilities to include custom X-Headers.
  * Extended the OTRS services to be able to create a support bundle file.
  * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom.
  * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB.
  * Fixed bug#10458 - Can't use system registration with some OTRS-IDs.
  * Fixed bug#10470 - Need FormID! error when embedding image when creating a
    Process Ticket.
  * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany.
  * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via
    cron jobs.
  * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171.
  * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search
    term was selected.
  * Fixed bug#10428 - Event Notification ArticleSend Loop.
  * Fixed bug#10441 - Eventbased notification - infinite loop.
  * Fixed bug#10462 - Translation of static statistic widgets (Dashboard).
  * Added OTRS Scheduler Watchdog mode.
  * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads
    page for temporary links.
  * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface
    displayed even though no process is available..
  * Fixed bug#8253 - Missing hover texts for actions in German translation
    of AgentTicketZoom.
  * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard).
  * Fixed bug#10395 - E-mail header parsing bug.
  * Fixed bug#10394 - rfc822 attachments name creating bug and validation
    enhancement.
  * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL.
  * Fixed bug#10402 - Transition or Transition Action popup a login page.
  * Fixed bug#10446 - otrs.PostMasterMailbox.pl Unknown encoding
    '3DISO-8859-2?=' at /usr/local/otrs/Kernel/System/Encode.pm line 367.
  * Fixed bug#8207 - Wrong encoding in graphs.
  * Fixed bug#10416 - Customer selection is not translated.
  * Fixed bug#9098 - The system still consider the customer_ids, even after
    field is empty on table customer_user.
  * Fixed bug#10202 - Process Modules, Dynamic Fields, and ACLs with AJAX update.
  * Fixed bug#10432 - ACLs not working correctly in CustomerTicketZoom
    (Message Followup).
  * Fixed bug#10436 - Error message in syslog about ACL then there is no ACL
    defined.
  * Fixed bug#10438 - Strange sorting of columns in Ticket Dashboard widgets.
  * Fixed bug#10425 - Customer Information in AgentTicketZoom.
  * Followup for bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10406 - Ticket Templates Type "Create" will be not translated.
  * Fixed bug#10378 - SessionID created with generic interface wont work using
    it as Agent.
  * Fixed bug#10399 - Columns Settings lost after search.
  * Fixed bug#10431 - Fallback configuration for scheduler log is wrong.
  * Fixed bug#10426 - Scheduler RegistrationUpdate task dies with PostgreSQL DB.
  * Fixed bug#10362 - .procmailrc is reset with wrong permissions on
    otrs.SetPermisssion.pl execution.
  * Fixed bug#10350 - Events Ticket Calender: In case
    TicketCalendarStartTime=TicketCalendarEndTime, displayed ticket event time
    frame always 2 hours.
  * Fixed bug#9970 - Existing sequences on oracle databases produces errors.
  * Enhanced DiskSpacePatitions SupportDataCollector plugin to deal correctly
    with multiple partitions with the same name.
  * Followup for bug#10130 - Events Ticket Calendar not working.
- update OTRS::ITSM to 3.3.7
  * Bug# 10146 ? ConfigItem search for Integer shows all CIs in results.
  * Bug# 10487 ? ACL Editor did not include Decision and ITSM field action.</changelog>
<changelog author="jamesp@vicidial.com" date="1404129600">- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4
  * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the configuration file had to be modified to look for
    this static module and load pre-2.4 directives if found on
    Apache 2.4. It should be forward compatible if the mod_access
    compat.c module become dynamic in the future and is not loaded.</changelog>
<changelog author="chris@computersalat.de" date="1406635200">- update to 3.3.8
  * Bug#10524 ? Internal Dynamic Fields in Activity Dialog.
  * Bug#10562 ? Inconsistent displaying of ?CustomerID? value.
  * Bug#10508 ? (Agent|Customer)TicketProcess javascript errors when
    uploading attachments/having server errors.
  * Bug#10521 ? OutputFilterText AutoLink CVE.
  * Bug#10430 ? backup.pl doesn?t work with PostgreSQL unix sockets.
  * Bug#5012 ? Merging a watched ticket into another should ?transfer?
    the Watch status to the final ticket, thanks to Michiel Beijen!
  * Bug#10544 ? Upgrade to OTRS 3.3.7 breaks connection to external
    customer user tables.
  * Bug#10535 ? ACLListGet() produces DB warning message.
  * Bug#10163 ? Subject shows only 30 characters.
  * Bug#10519 ? Opening and closing popups in ProcessManagement leads
    to performance issues.
  * Bug#10513 ? Some SupportData Plugin Identifiers ends with ::.
  * Bug#8494 ? Possibility to split quotes in rich text editor.
  * Bug#10491 ? CIC not always accessible via TicketZoom.
  * Bug#10427 ? Bulk action locks tickets ? cancel keeps them locked.
- update OTRS::ITSM to 3.3.8
  * Bug# 10558 ? Slow CI search for classes with a large MaxCount on
    a value and sub values.
  * Bug# 10570 ? Deleting ITSM Change search templates does not work.</changelog>
<changelog author="alexandre@exatati.com.br" date="1412078400">- Update to 3.3.9:
  https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md
  * Bug#10697 - Column name in CSV report of stats is lowercase.
  * Bug#10652 - Process tickets without any articles create empty
    lines in AgentTicketSearch CSV result file.
  * Bug#10607 - SQL Box can change the database.
  * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via
    BulkAction.
  * Bug#10699 - Cannot add new customer (company).
  * Bug#10497 - CustomerUser secondary database access opens multitude
    of database connections.
  * Bug#9756 - Owner will be set after QueueMove screen AND undo.
  * Bug#10606 - Dynamic fields in dashboard overview are empty.
  * Updated Danish translation, thanks to Lars Jørgensen.
  * Bug#10670 - It is possible to start the scheduler more than once.
  * Bug#10515 - Problem with column filter sorting
  * Bug#10598 - Field tags not parsed properly in auto response subject.
  * Bug#10658 - Issue with multiple customer company backends.
  * Bug#10622 - eMail address only with uppercases - wrong display.
  * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets
    as affected.
  * Bug#10601 - ExternalTicketNumberRecognition produces errors in log
    file.
  * Bug#9851 - Unlocking a ticket in the small view results in
    AgentTicketZoom.
  * Bug#10612 - Wrong Time in DashboardField "Changed", thanks to S7.
  * Bug#10595 - Standard Replies are false sorted in Ticket Zoom
    select box.
  * Bug#10534 - Wildcard hacking the customer information center,
    thanks to S7.
  * Bug#10597 - Process list description column doesn't support line
    breaks, thanks to S7.
  * Bug#10586 - In Customer Portal no attachments are shown.
  * Bug#6601 - Changing search options changes order of fields, thanks
    to S7.
  * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition
    doesn't work.
  * Bug#10559 - "Previous Owner" don't use the FirstnameLastnameOrder
    configuration.
  * Bug#10532 - PostMasterMailbox.pl hangs parsing mails.
  * Bug#10578 - Service selection in GA Ticket Action allows multi
    select.
- update OTRS::ITSM to 3.3.9
  * Bug#10330 ? ITSM Impact field displayed with Key instead of Value.</changelog>
<changelog author="chris@computersalat.de" date="1412078401">- fix changelog
  * update 3.3.9 with 3.3.9 data
  * add missing update info for OTRS::ITSM
- update itsm-3.3.9 Source</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post script</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- One more fix after fix bashisms in previous commit</changelog>
<changelog author="chris@computersalat.de" date="1419854400">- fix for boo#910988 (CVE-2014-9324)
- update to 3.3.11
  fix for OSA-2014-06 (CVE-2014-9324)
  * Updated translations, thanks to all translators.
  * Bug#10904 ? Upon entering CIC, search only returns hits during
    the first search.
  * Bug#10944 ? Multiple selection in Tree Selection also affects
    filtered elements.
  * Follow-up fix for Bug#6284 ? Problem with unicode characters
    when using FastCGI.
  * Bug#10830 ? Textarea Limitation in Generic Agent.
  * Bug#10920 ? ProcessManagement: Deleting Activities from canvas
    does not update process layout.
  * Bug#10801 ? Editor is extremely slow with large articles.
  * Enhanced Permission Checks in GenericInterface Ticket Connector.
  * Bug#10634 ? ProcessManagement: Can not use an arbitrary email
    address as a CustomerUser.
  * Bug#10839 ? ACL cannot set possible TicketType in
    AgentTicketPhone and AgentTicketEmail.
  * Bug#10776 ? Medium and Large view don?t indicate active
    filters.
  * Bug#10808 ? Set of pending time is not working at all in
    Frontend::Agent::Ticket::ViewNote.
  * Bug#10892 ? TicketActionsPerTicket open multiple popups at
    TicketOverview.
  * Bug#10857 ? JS added too often in AgentTicketOverviewSmall.
  * Bug#10639 ? Set of pending time/state not working properly
    (process management).
  * Bug#10893 ? Missing log name partitions in Service Center.
  * Bug#10879 ? GenericInterfae: TicketSearch operation does not
    take escalation parameters.
  * Bug#10812 ? SOAP Response is always in version SOAP 1.2.
  * Bug#10083 ? SMIME and Email address detection is case sensitive
    (for the right part)..
  * Bug#10826 ? German ? Translation Problem.
  * Bug#10678 ? Dates off by one on area diagram in dashboard widget.
  * Bug#7369 ? LinkQoute fails for some characters in hash or
    parameter.
  * Bug#8404 ? Wrong sorting of responses dropdown in TicketZoom.
  * Bug#8781 ? 508 Compliance: In Ticket Overviews the title
    attribute of large view link is incorrect.
  * Bug#10669 ? Maxlength validation of textarea dynamic fields does
    not work correctly in IE.
  * Bug#10471 ? Missing translations for tooltips of
    TicketOverviewSmall columns.
  * Bug#10850 ? Double-quoted special characters in title of dynamic
    field sidebar output in TicketZoom.
  * Bug#10805 ? Open tickets in 3 days show right function but wrong
    number.
  * Bug#10845 ? No date search if TimeInputFormat is Input.
  * Bug#10706 ? dashboard settings are lost by different user login.
  * Bug#10577 ? Service Center does not show MOD_PERL version on
    Ubuntu 14.04.
  * Bug#10679 ? Texts in notification tags loose their empty lines
    and spaces.</changelog>
<changelog author="aj@ajaissle.de" date="1445688000">- Update to 3.3.15
  * HTML emails not properly displayed (parts missing).
  * Fixed a nasty JSON::XS crash on some platforms.
  * Updated CPAN module Proc::Daemon to version 0.21.
  * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT).
  * auto reply with DynamicFields from webservice.
  * Added option to package manager list action, to show deployment info of installed packages.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
- Changes 3.3.14
  * Package installation/uninstallation leads to endless loop.
  * Lang parameter not correctly validated.
  * Search for multiple ticket numbers with GenericInterface.
- Changes 3.3.13
  * Updated translation files.
  * Refresh bug on process client interface using ie8
  * Adding email recipients via addressbook does not update customer information.
  * Wrong column encoding in Kernel::System::Notification::NotificationGet().
  * Generic Agent ticket actions can't be unselect.
  * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
  * Download button for dashboard stats visible even if no permissions for AgentStats exist..
  * Invalid utf-8 parameters not filtered sufficciently.
  * DynamicField Filter in AgentDashboard accepts only one value.
  * Can't select customer and/or public interface in AdminACL.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys.
  * Added possibility to turn of SSL certificate validation.
  * SLA can not be set over Free Fields Dialog.
  * Not possible to change customer.
  * Error from GenericInterface using SOAP and TicketGet operation.
  * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm.
  * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20.
- Changes 3.3.12
  * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker.
  * Adressbook search does not permit to add contacts via click.
  * Wrong sortation of Ticket Overview settings.
  * Missing translations in Dashboard and TicketOverview settings.
  * Internal Server Error, instead of warning.
  * Dashlet: Filter Attributes with more then one CustomerID doesn't work.
  * SQL error with "0 oracle" for article body in Ticket Search.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig).
  * ProcessManagement: TransitionAction delete does not check if is used.
  * GPG option 0xlong breaks decryption of emails.
  * ORA-03113 Error after scheduler start.
  * /etc/init.d/otrs running httpd is not detected on CentOS 7.
  * Unable to change password in customer interface.
  * Dynamic Field shown information in customer interface is not consistent with agent interface.
  * Error: No Process configured! - Agent interface.
  * Error while splitting ticket.
  * ActivityDialogEntityID not working in ACLs from Process screens reducing States.
- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch
- Added itsm-update.sh, a script to update the itsm source we use
- Updated sources
  * otrs.README.de
  * otrs.README.en
  * UPGRADING.SuSE -&gt; UPGRADING.SUSE
  * ZZZAuto.pm</changelog>
<changelog author="chris@computersalat.de" date="1477828800">- fix itsm package
  * version is 3.3.14
- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch
- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch</changelog>
<changelog author="chris@computersalat.de" date="1478088000">- fix for boo#1008017
  * execution of JavaScript in OTRS context by opening malicious attachment
- Update to 3.3.16
  * Improved sandboxing of displayed attachments.
    see OSA-2016-02 (CVE-2016-9139)
  * Added package verification information to otrs.PackageManager.pl,
    use bin/otrs.PackageManager.pl -a list -e (to show package verification
    information) or bin/otrs.PackageManager.pl -a list -e -c
    (to show package verification information deleting the cache before).
  * Bug#11959 ? 500 Can?t connect to www.otrs.com/product.xml:443.
  * Bug#11870 ? Missing quoting in Layout::AgentQueueListOption().
  * Bug#11802 ? Customer user can get access to all ticket data.
- fix ZZZAuto.pm
  * do not replace existing file (manually merge needed for ITSM)</changelog>
<changelog author="chris@computersalat.de" date="1496836800">- fix for boo#1043086
  * Incorrect Access Control in OTRS
- Update to 3.3.17 2017-06-06
  * Improved SecureMode detection in Installer.
    see OSA-2017-03 (CVE-2017-9324)
  * Bug#12753 - Function "SystemDataGroupGet" has problems with empty
    values in oracle.
  * Bug#9941 - Articles with multi-byte characters that claim to be
    UTF-8 will not display in the browser.
  * Bug#7961 - customer search should not return results for internal
    articles.
    see OSA-2017-02
  * Bug#12391 - Base64 encoded image does not display in article.
  * Bug#12461 - Chrome can not display attached PDF files since 5.0.14.</changelog>
<changelog author="chris@computersalat.de" date="1506168000">- fix for boo#1059691 (CVE-2017-14635)
  * Code Injection / Privilege Escalation OTRS
- Update to 3.3.18
  * Improved validation in statistic import and export.
    see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
  * Updated CPAN module URI to version 1.72.</changelog>
<changelog author="chris@computersalat.de" date="1510920000">- fix for boo#1068677 (CVE-2017-15864, OSA-2017-06)
  * vulnerabilities discovered in the OTRS framework:
    An attacker who is logged into OTRS as an agent can request special
    URLs from OTRS which can lead to the disclosure of any configuration
    information, including database credentials.
- Update to 3.3.19
  * Not needed mandatory stats object module function in 'ObjectModuleCheck'.</changelog>
<changelog author="chris@computersalat.de" date="1511352000">- fix for boo#1069391 (CVE-2017-16664, OSA-2017-07)
  * vulnerabilities discovered in the OTRS framework:
    An attacker who is logged into OTRS as an agent can request special
    URLs from OTRS which can lead to the execution of shell commands
    with the permissions of the web server user.
- Update to 3.3.20
  * Improved handling of spell checker.
  OTRS 3.3 is now EOL, officially supported versions are OTRS &gt;= 4
  Please consider updating to a newer OTRS version.</changelog>

</package>
<package pkgid="e95d630c1c4a0d07332ecc1e85b16088acf5697217de17b331cae0348d8610f6" name="otrs-itsm" arch="noarch">
    <version epoch="0" ver="3.3.14" rel="9.1"/>

<changelog author="alexandre@exatati.com.br" date="1378382400">- Update to 3.2.10:
  * Bug#9617 - Event-based notifications are not sent for process-tickets.
  * Bug#9666 - Installing an invalid package cause an server error on
    package manager.
  * Bug#8408 - No separator used in CSV files if UserCSVSeparator enabled
    and not set.
  * Bug#9635 - article_search not updated on ticket merges.
  * Bug#9629 - ORA-936 error in AgentTicketSearch with some search clauses.
  * Bug#9631 - BuildSelection() Selected does not work if value contains
    strings that are HTML-escaped.
  * Bug#9630 - Dynamic Fields of type Date can record wrong date when
    TimeZoneSettings are used.
  * Bug#9316 - Under nginx CustomerInformationCenter search returns Bad
    Gateway.
  * Bug#9610 - When email does not specify charset, content is not
    displayed in IE10.
  * Bug#9622 - Actions in Small ticket overview don't work when cookies
    are turned off.
  * Bug#9541 - Package manager cannot use https proxy.
  * Fixed bug pull#[83](https://github.com/OTRS/otrs/pull/83) - Pagination
    next page link, thanks to Renée Bäcker.
  * Bug#9594 - No auro-reply sent with multiple From addresses in
    AgentTicketPhone on PostgreSQL and Oracle.
  * Bug#3434 - Validity of search time frame not checked by OTRS.
  * Bug#5475 - Incorrectly limited ticket list queries in queue view.
  * Bug#8667 - No error Message when tryiing to Merge Ticket with itself.
  * Bug#6985 - SMTPTLS backend requires username and password.
  * Bug#3434 - Validity of search time frame not checked by OTRS.
  * Bug#9598 - Typo in vacation message for German locale.
  * Bug#9595 - Incomplete page reload handling in merge and bounce.
  * Bug#5307 - Tickets can be raised against an invalid Customer Company.
  * Bug#9596 - On merge and bounce screens is confusing when fill or
    not 'To', 'Subject' and 'Body' fields.
  * Bug#9514 - Bulk action (send email) uses senders address instead of
    customer id.
  * Bug#9595 - Incomplete page reload handling in merge and bounce.
  * Bug#9570 - AgentTicketSearch with exclamation mark emits invalid SQL
  * Bug#3007 - CheckMXRecord and CheckEmailAddresses have no effect on
    AgentTicketBounce.
  * Bug#9512 - Database error for invalid date in AgentTicketSearch.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#8428 - Bad usability of multiple sender/recipient feature.
  * Bug#9556 - Bounce and merge require notification recipient, subject
    and body even if no notification is sent.
  * Bug#9584 - No server side validation of To/Subject/Body in merge
    mask.
  * Bug#9578 - DynamicField sorting does not work on TicketSearch
    results in Customer Interface.
  * Bug#9579 - SOAP Serializer used in Kernel/GenericInterface/Transport/HTTP/SOAP.pm
    does not correctly set namespace.
  * Bug#9577 - Engine translate date to dado from english to pt_BR.
  * Bug#7359 - Setting pending states via generic agent does not set
    pending time.
  * Bug#5920 - Search restriction for dates is not displayed in
    customer interface.
  * Bug#8380 - Middle name not displayed in AdminCustomerUser.
  * Bug#9576 - GI TicketSearch Date and Date/Time dynamic fields are
    ignored.
  * Changed Dynamic Field SearchFieldParameterBuild() API, LayoutObject
    is now optional.
  * Bug#9573 - Date and DateTime dynamic fields not considered in
    GenericAgent Jobs.</changelog>
<changelog author="chris@computersalat.de" date="1379505600">- update OTRS::ITSM to 3.2.9
  * Bug#9637 - ITSM Overview shows error if agent has no permission to any
    config item class.
  * Bug#9621 - GeneralCatalog does not allow the number zero (0) as value
    for a GeneralCatatalog ClassItem.
  * Rollback changes for bug#9613. Due to a last minute problem with the
    mentioned bug fix we had to revert and release a new version of OTRS ITSM!
- rebase otrs-perm patch
  * fix spec (better fix cause than symptom)
    remove exclude %{otrs_root}/%{name}/Kernel/System/Package.pm.orig</changelog>
<changelog author="alexandre@exatati.com.br" date="1383739200">- Update to 3.2.12:
  * Updated French translation, thanks to Olivier Sallou!
  * Bug#9910 - Startup warnings/errors with Perl 5.18.1.
  * Bug#9753 - META HTTP-EQUIV="Refresh" tag not stripped from HTML
    email.
  * Bug#9897 - process ticket 'fading away' -&gt; Process is invalid.
  * Bug#9749 - Using spell checker in rich text Editor strips HTML
    formatting.
  * Bug#4465 - Spell checker ispell ignores some characters such German
    umlauts.
  * Bug#9883 - Stats Overview is slow due Caching bug (object cache does
    not work).
  * Bug#9839 - Inline images not showing up when cookies are disabled.
  * Moved process import functionality in the backend module
    Kernel/System/ProcessManagement/DB/Process.pm.
  * Bug#9669 - Accessibility: ticket submenu not expandable with the keyboard.
  * Bug#9814 - Tickets without articles not shown correcly in medium view.
  * Bug#9812 - Sysconfig descriptions for tooltips and placeholder values
    of toolbar widgets are ignored.
  * Bug#9391 - Incorrect permissions on .procmailrc.
  * Bug#9796 - Misaligned Headers on Simple Stats.
- Aditional changes from 3.2.11:
  * Bug#9542 ? Uninitialized value in AgentTicketForward.
  * Bug#9765 ? Dynamic Field values are completely removed if one entry
    contains a dash.
  * Bug#9764 ? ACL, Queue will ignored with customerID.
  * Bug#9762 ? Queue View ? S / M / L views ? not saved after logout.
  * Bug#9580 ? Time fields in TicketGetResponse Ticket element do not
    comply with xsd:DateTime format.
  * Bug#9748 ? ProcessManagement: Duplicate articles in a process-ticket
    (TransitionAction).
  * Bug#9759 ? Installer Error DB ? max key length is 767 bytes.
  * Bug#9747 ? Only first selected process displays the RichText editor.
  * Bug#9688 ? ORA-01839 error occurs at DynamicField in TicketSearch.
  * Bug#9751 ? TimeUnits are not accepted with a value of 0.
  * Bug#9739 ? Customer interface not working with MySQL 5.6.
  * Bug#8489 ? setting Tickets per page resets AgentTicketQueue.
  * Bug#9732 ? German translation file de.pm incomplete.
  * Bug#9728 ? Bulk action (send email) ignores reply-to address from
    unknown customers.
  * Bug#9661 ? Useless code in DynamicField backend.
  * Bug#9701 ? Ticket overview Queue Sort Filter is missing.
  * Bug#8173 ? Dashboard Widget ?Online? does not save state.
  * Bug#9188 ? AgentTicketEmail always loads a signature, even if no
    queue is selected.
  * Bug#9672 ? Undecrypted HTML part displayed when viewing a
    multipart/alternative PGP encrypted HTML mail.</changelog>
<changelog author="chris@computersalat.de" date="1386763200">- update to 3.2.13
  * Bug#9327 ? Filter breaks ?Select all? functionality.
  * Bug#9999 ? Timestamps in HistoricalValueGet return milliseconds on SQL
    Server.
  * Bug#10027 ? Added old ticket information to ticket_history.
  * Bug#7337 ? AJAX Error on new Phone Ticket on IIS when using JSON::XS.
  * Bug#8991 ? Back-action does not work when search result returned just 1
    ticket.
  * Bug#9937 ? Activity-Dialogs in wrong order.
  * Bug#9954 ? PGP Crypted and Signed emails could be wrongly parsed.
  * Bug#9639 ? TextArea validation message not translated.
  * Bug#9944 ? Search Template issue.
  * Bug#9938 ? ActivityDialog doesn?t show queues with move_into permissions.
  * Bug#9940 ? Fedora misses dependency on Sys::Syslog.
  * Removed Patch/Workaround for CPAN MIME::Parser v5.503
    (introduced in OTRS 3.2.2) replaced with another solution, as it was
    causing problems with PGP.
  * Bug#9916 ? Error when updating CustomerUser Login on ForeignDB.
  * Bug#9841 ? Tabbing changes radio button of owner change selection.
  * Bug#9867 ? Validation errors are not shown correctly when replying to a
    ticket in Customer Interface.
  * Bug#9914 ? Spellchecker ignores double wrong words.</changelog>
<changelog author="chris@computersalat.de" date="1393416000">- fix for bnc#866476 (CVE-2014-1695)
- update to 3.2.15
  (fix for OSA-2014-03, CVE-2014-1695)
  * Improved HTML filter.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer
    ID instead Agent ID.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as
    a customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work
    when authenticated as a customer.
- 3.2.14
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Fixed bug#9959 - &amp; breaks ExpandCustomerName.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose.
  * Added functionality to disable access to tickets of other customers with
    the same customer company in customer interface.
  * Fixed bug#9650 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.</changelog>
<changelog author="chris@computersalat.de" date="1394107200">- update to 3.3.5
  * Improved HTML filter.
  * Followup fix for bug#10116 - Random ordering of columns in "Small" ticket
    lists.
  * Re-implemented Process Management ProcessImport().
  * Fixed bug#10258 - yellow color for UnreadArticles.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Updated Polish translation, thanks to Wojciech Myrda.
  * Fixed bug#6323 - Graph/Chart generation selects slice/background color
    identical to text color.
  * Added feature to download report data shown in dashboard stats as CSV and
    PDF.
  * Fixed bug#10248 - OTRS Portal - Overview of registered systems.
  * Added browser check for IE10 in compatibility mode.
  * Followup for bug#9011 - New value after value mapping can't be 0.
  * Fixed bug#9673 - CustomerTicketMessage does not show loading icon for
    dynamic fields.
  * Fixed bug#10249 - Restore.pl bugs on Postgresql restore failed on DB.
  * Fixed bug#7818 - Menu simplification is not working for item "responsible".
  * Added new option "bin/otrs.LoaderCache.pl -o generate" to generate the
    loader cache for all frontend modules. This can be useful in cluster setups.
  * Fixed bug#10214 - Value "0" for DynamicsFields prevents TicketCreation.
  * Fixed bug#10201 - Wrong column sort order in ticketoverview widget.
  * Fixed bug#10195 - Folluw up notification shows old prio after prio change.
  * Fixed bug#9303 - Body of new e-mail/phone ticket not inserting when creating
    new ticket from customer creation.
  * Fixed bug#10194 - CustomerTicketMessage parsing feild Dest in URI.
  * Follow-up fix for bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10220 - Invalid Statistics not displayed in overview.
  * Fixed bug#10218 - Header X-UA-Compatible in HeaderSmall.tt/HeaderSmall.dtl
    not set.
  * Fixed bug#10177 - Missing sources in tarball.
  * Fixed bug#9616 - Too long activities and transitions are not displayed
    correctly.
  * Fixed bug#7440 - Ticket overviews don't show column headers for priority and
    unread articles in small mode.
  * Added process management canvas label spacer to avoid overlapping transition
    labels.
  * Fixed bug#10212 - My tickets &amp; Company tickets in 3.3.4.
  * Fixed bug#10211 - Dashbord: Widget DefaultColumns is not working.
  * Fixed bug#10163 - subject shows only 30 characters.
  * Fixed bug#10193 - Expired cookie bug in customer interface..
  * Fixed bug#8729 - Oracle ignores NLS_DATE_FORMAT set in environment.
  * Fixed bug#10207 - DynamicField Search-Function in CustomerFrontend is not
    working.
  * Fixed bug#9868 - Queues in popup box are not sorted by alphabetical order.
  * Fixed bug#9678 - Locked tickets don't unlock when customer closes ticket.
  * Fixed bug#8656 - Clicking the cancel button in the Add Web services screen
    results in an error no matter what data was filled in.
  * Fixed bug#10209 - When opening tree selection dialog, the search field
    should get the focus.
  * Fixed bug#10205 - GenericInterface: Mandatory TimeUnits can't be 0.
  * Fixed bug#10196 - Ticket merge action does not notify the owner of the
    existing ticket.
  * Fixed bug#10130 - Events Ticket Calendar not working.
  * Fixed bug#9692 - On PhoneOutbound articles, the FROM field shows Customer ID
    instead Agent ID.
  * Fixed bug#10147 - Cache may remain incorrectly in SearchProfile.
  * Fixed bug#10189 - ProcessManagement: Use article subject if no ticket title
    is set.
  * Fixed bug#9654 - TicketUpdate operation doesn't work when authenticated as a
    customer.
  * Fixed bug#10137 - Generic interface TicketCreate operation doesn't work when
    authenticated as a customer.
  * Fixed bug#10176 - available columns selection in search result view is not
    scrollable.
  * Fixed bug#10120 - Management Dashboard: page reload erases stat graph
    settings.
  * Fixed bug#9276 - Auto-reply to ticket entered via Web interface is sent with
    all lines concatenated to one
  * Fixed bug#10179 - No LinkOption in CustomerNavigationBar.dtl.
  * Fixed bug#10178 - Stat Permissions.
  * Fixed bug#10188 - Inconsistency in graphical ACL editor.
  * Fixed bug#10155 - backup.pl doesn't compress database dump on non-MySQL.
  * Fixed bug#10106 - Sending Articles with ArticleSend() ignores ReplyTo.
  - 3.3.4 2014-01-28
  * Fixed bug#10172 - Can't create process tickets with disabled richtext.
  * Fixed bug#10121 - QQMails break in OTRS.
  * Fixed bug#10153 - Error shown in SysConfig when Setting PendingDiffTime to
    30 Days.
  * Fixed bug#10161 - Edit Stats - 500 internal Server Error.
  * Fixed bug#10167 - Non-deterministic hash key construction in Stats.pm.
  * Fixed bug#10158 - Missing quoting in State::StateGetStatesByType().
  * Fixed bug#10048 - RPM upgrade breaks permissions on config files.
  * Fixed bug#8969 - FAQ module Language files installation fails
    (Kernel/Language permissions).
  * Updated traditional Chinese translation.
  * Updated Brazilian Portugese translation, thanks to Murilo Moreira de
    Oliveira!
  * Fixed bug#10145 - %A is not correctly substituted in Language::Time().
  * Fixed bug#10079 - Cannot operate OTRS on IE7 because of JavaScript error.
  * Fixed bug#10113 - Management dashboard setting doesn't show up when agent
    only has RO on stats.
  * Fixed bug#10088 - Error messages on recieving mailer daemons.
  * Fixed bug#10011 - Management Dashboard: X-Axis element labels may overlap.
  * Fixed bug#10012 - Management Dashboard: strings not translatable.
  * Fixed bug#10140 - Unable to search using before/after in Date Dynamic Fields.
  * Fixed bug#10008 - Customer user is automatically added to Cc at response for
    email-internal in AgentTicketCompose.
  * Added Hebrew translation file, thanks to Amir Elion!
  * Fixed bug#9978 - Activity Dialog for Customer shows "No Process configured!".
  * Fixed bug#10134 - Missing information on icon actions for SMIME certificates
    and keys.
  * Fixed bug#10116 - Random ordering of columns in "Small" ticket lists.
  * Fixed bug#10094 - Former FAO OTRSACLExtensions not available in the ACL
    Editor.
  * Fixed bug#10099 - Missing challenge token checks on customer interface.
  * Fixed bug#10110 - Stats list may show too few or too many stats.
  * Fixed bug#10103 - ArticleTypeID is always undef in AgentTicketCompose
  * Fixed bug#10080 - Bad group check in otrs-scheduler-linux.
  * Fixed bug#10097 - $Param{NextState} is always undef in AgentTicketCompose.
  * Updated Russian translation, thanks to Yuriy Kolesnikov.
  * Fixed bug#10074 - Error if no queue matched in DashboardEventsTicketCalendar.
  * Fixed bug#965 - Special character in customer id breaks Open Tickets in
    AgentTicketZoom.
  * Added functionality to disable access to tickets of other customers with the
    same customer company in customer interface.
  * Fixed bug#9702 - Wrong article type with external ticketnumber recognition
    i.c.w. follow-up reject option.
  * Fixed bug#9723 - TicketAccountedTime stat does not run on Oracle with many
    tickets
  * Fixed bug#10078 - Installer: error log after creating mysql database.
  * Fixed bug#10056 - Installer fails when special characters in database user's
    password.
  * Fixed bug#10077 - regular expressions in postmaster filter return 1 if no
    regex match.
  * Updated Swedish translation, thanks to Andreas Berger.
  * Fixed bug#10075 - Stats widgets permission group is hardcoded to "stats"
  * Updated Russian translation, thanks to Andrey N. Burdin.
  * Fixed bug#10070 - Wrong error message if Transition contains no transition
    actions.
  * Fixed bug#10058 - Owner and Responsible are mandatory if enabled.
  * Fixed bug#7792 - Ticket-Action "Change Queue" is hardcoded and should be
    called "Queue" only.
  * Fixed bug#9109 - Printing ticket does not show the full subject line.
  * Fixed bug#10064 - Translated fields loose sorting in Activity Dialog admin
    screen.
  * Fixed bug#10066 - Required field isn't marked in AgentTicketCustomer.
  * Fixed bug#10059 - Service selection unavailable if customer selection is
    possible.
  * Fixed bug#10062 - Text label indent for locale RU - AgentÒicketViewCompose
  * Fixed bug#10044 - PendingDiffTime removes 2013 (current year) when reaching
    end of the year.
  * Fixed bug#10049 - Transition names in path edit screen ordered by ID instead
    of name.
  * Fixed bug#10055 - Queue-Treeview not working correctly.
  * Fixed bug#10061 - ArticleType dropdown in graphical ActivityDialog mask
    loads with empty value
  * Fixed bug#10060 - Field names are not translated in graphical process editor.
- for further changes please see:
  * https://github.com/OTRS/otrs/blob/rel-3_3_5/CHANGES.md
- rebase patches
  * httpd_config, removed obsolete stuff, added new
  * perm</changelog>
<changelog author="chris@computersalat.de" date="1396526400">- fix for bnc#871758 (CVE-2014-2553)
- update to 3.3.6
  fix for OSA-2014-04 (CVE-2014-2553)
  fix for OSA-2014-05 (CVE-2014-2554)
  * Updated French translation, thanks to Guillaume Houdmon.
  * Extended the OTRS system registration to optionally also send the
    support assessment data along with the system registration data.
    Support assessment data is improved and extended and can be
    accessed in the new Service Center module of the admin area.
  * Fixed bug#10405 - When using the search feature of the tree
    selection overlay, one is not able to expand subtrees of matching
    entries.
  * Fixed bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10400 - AgentTicketProccess will not use error messages
    of dynamic field drivers.
  * Fixed bug#10397 - DynamicField configuration in SysConfig
    'DefaultOverviewColumns' causes JS error.
  * Fixed bug#9592 - Ticket history overflows for dynamic field.
  * Fixed bug#10368 - Ticket title isn't shown.
  * Updated Japanese translation, thanks to Toshihiro Takehara..
  * Fixed bug#10381 - AgentTicket*View has invalid SortBy options.
  * Fixed bug#10383 - Missing 'DefaultColumns' SysConfig for
    AgentTicketSearch view.
  * Fixed bug#10384 - out-of-office information not displayed in
    Ticket Zoom.
  * Fixed bug#10379 - ACL Not Working.
  * Fixed bug#10385 - Wrong Queue ID for Errors and FormUpdate in
    AgentTicketActionCommon.
  * Fixed bug#10369 - Ticket::Frontend::Quote does not work with
    RichText Editor.
  * Improved handling of cachekeys in Stats.pm to prevent cacheing
    problems in the dashboard stats.
  * Fixed bug#10334 - Deleting the attachment deletes the recepients
    too.
  * Fixed bug#10374 - OTRS does not protect against clickjacking.
  * Fixed bug#10364 - Inline images displayed as attachment in SMIME
    and PGP signed messages.
  * Fixed bug#10251 - SMIME signing fail on mails with attachements.
  * Fixed bug#10277 - Statistics per agent also shows invalid agents.
  * Fixed bug#10318 - Dynamic Field: Multi Select does not allow
    empty values.
  * Fixed bug#10365 - Custom State types not working with
    "otrs.PendingJobs.pl" any more.
  * Fixed bug#10349 - System Email notification external not
    highlighted correctly.
  * Fixed bug#10361 - Incorrect handling of special characters in
    DynamicFields.
  * Fixed bug#10324 - Customer user field still marked as empty even
    after providing data.
  * Fixed bug#10019 - Tickets via "In line action bar" cannot be moved.
  * Fixed bug#10283 - MouseOver on the Transitions does not show
    transition actions.
  * Fixed bug#10241 - ACL-Editor Bug..
  * Fixed bug#10338 - Empty Content-ID causes strange result -&gt;
    HTML-tags are "corrupted".
  * Fixed bug#9951 - Line breaks at the end of salutation templates
    are not saved.
  * Fixed bug#10275 - Problem with encoding in attachment.
  * Fixed bug#10085 - Postmaster incorrectly decodes headers, causes
    garbage in the database.
  * Fixed bug#10336 - Problem with symlinked theme directories.
  * Fixed bug#10328 - Error in AdminPostMasterFilter if the name of
    DynamicField changed.
  * Fixed bug#10264 - Description (espacially article description) in
    processes are shown on improper place.
  * Fixed bug#10244 - No mouseover popup for fields in ActivityDialogs.
  * Fixed bug#10240 - Restricting process list by ACLs is only working
    with UserID.
  * Fixed bug#10299 - "Ouf of Office" shows inactive agents.
  * Fixed bug#10321 - Applying Filters to tickets in Status View or
    Queue View will log out session..
  * Fixed bug#9600 - When a ticket is deleted by generic agent job,
    No such TicketID error.
  * Fixed bug#10057 - Advanced Search Window is Cramped and Confusing.
  * Fixed bug#9675 - No use Ticket::Hook in AgentLinkObject.
  * Updated Japanese translation, thanks to Norihiro Tanaka!
  * Fixed bug#10300 - Special character in customer id cuts off string.
  * Fixed bug#10309 - mails with an empty return-path header must not
    trigger auto responses in OTRS.
  * Fixed bug#10245 - Use of uninitialized value $Param{"Value2"} in
    string.
  * Fixed bug#10182 - Customer email suddenly treated by OTRS as
    'email-internal'.
  * Fixed bug#10285 - No use Ticket::Hook in CustomerTicketZoom.
  * Fixed bug#9787 - Queue field doesn't appear in ProcessMgmt.
  * Fixed bug#10222 - Customer search during ticket creation - OTRS
    shows details also if no customer match the search.
  * Fixed bug#10259 - GenericInterface: mapping key can't map from / to 0.
- rebased perm patch
- update httpd_conf patch</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update to 3.3.7
  * Fixed bug#10475 - otrs.RebuildFulltextIndex.pl - multiple output lines.
  * Updated Japanese translation, thanks to Toshihiro Takehara.
  * Updated Swedish translation, thanks to Peter Krantz.
  * Added CPAN module Archive::Tar.
  * Split otrs.checksum.pl functionality it is only able to work in compare mode.
  * Extended package object to be able to generate an MD5Sum of all files within
    a package.
  * Extended email send capabilities to include custom X-Headers.
  * Extended the OTRS services to be able to create a support bundle file.
  * Fixed bug#9350 - Initial notes by ticket split not visible it the ticket zoom.
  * Fixed bug#10501 - Support-Data Swap plugin reports KB instead of MB.
  * Fixed bug#10458 - Can't use system registration with some OTRS-IDs.
  * Fixed bug#10470 - Need FormID! error when embedding image when creating a
    Process Ticket.
  * Fixed bug#9876 - CaseSensitive option wrong in CustomerCompany.
  * Removed OTRS Scheduler Service startup files in favor of Watchdog mode via
    cron jobs.
  * Fixed bug#10468 - Wrong regexp in Kernel/System/HTMLUtils.pm line 171.
  * Fixed bug#10469 - Adding Links in AgentLinkObject not possible if no search
    term was selected.
  * Fixed bug#10428 - Event Notification ArticleSend Loop.
  * Fixed bug#10441 - Eventbased notification - infinite loop.
  * Fixed bug#10462 - Translation of static statistic widgets (Dashboard).
  * Added OTRS Scheduler Watchdog mode.
  * Fixed bug#10464 - Closing link delete screen in AgentTicketPhone reloads
    page for temporary links.
  * Fixed bug#10461 - Link to CustomerTicketProcess in Customer interface
    displayed even though no process is available..
  * Fixed bug#8253 - Missing hover texts for actions in German translation
    of AgentTicketZoom.
  * Fixed bug#10442 - Translation of states in statistic widgets (Dashboard).
  * Fixed bug#10395 - E-mail header parsing bug.
  * Fixed bug#10394 - rfc822 attachments name creating bug and validation
    enhancement.
  * Fixed bug#10449 - Safer commands to upgrade OTRS using PostgreSQL.
  * Fixed bug#10402 - Transition or Transition Action popup a login page.
  * Fixed bug#10446 - otrs.PostMasterMailbox.pl Unknown encoding
    '3DISO-8859-2?=' at /usr/local/otrs/Kernel/System/Encode.pm line 367.
  * Fixed bug#8207 - Wrong encoding in graphs.
  * Fixed bug#10416 - Customer selection is not translated.
  * Fixed bug#9098 - The system still consider the customer_ids, even after
    field is empty on table customer_user.
  * Fixed bug#10202 - Process Modules, Dynamic Fields, and ACLs with AJAX update.
  * Fixed bug#10432 - ACLs not working correctly in CustomerTicketZoom
    (Message Followup).
  * Fixed bug#10436 - Error message in syslog about ACL then there is no ACL
    defined.
  * Fixed bug#10438 - Strange sorting of columns in Ticket Dashboard widgets.
  * Fixed bug#10425 - Customer Information in AgentTicketZoom.
  * Followup for bug#10340 - Dynamic field not visible in queue view screen
    (AgentTicketOverviewSmall.dtl).
  * Fixed bug#10406 - Ticket Templates Type "Create" will be not translated.
  * Fixed bug#10378 - SessionID created with generic interface wont work using
    it as Agent.
  * Fixed bug#10399 - Columns Settings lost after search.
  * Fixed bug#10431 - Fallback configuration for scheduler log is wrong.
  * Fixed bug#10426 - Scheduler RegistrationUpdate task dies with PostgreSQL DB.
  * Fixed bug#10362 - .procmailrc is reset with wrong permissions on
    otrs.SetPermisssion.pl execution.
  * Fixed bug#10350 - Events Ticket Calender: In case
    TicketCalendarStartTime=TicketCalendarEndTime, displayed ticket event time
    frame always 2 hours.
  * Fixed bug#9970 - Existing sequences on oracle databases produces errors.
  * Enhanced DiskSpacePatitions SupportDataCollector plugin to deal correctly
    with multiple partitions with the same name.
  * Followup for bug#10130 - Events Ticket Calendar not working.
- update OTRS::ITSM to 3.3.7
  * Bug# 10146 ? ConfigItem search for Integer shows all CIs in results.
  * Bug# 10487 ? ACL Editor did not include Decision and ITSM field action.</changelog>
<changelog author="jamesp@vicidial.com" date="1404129600">- add otrs-httpd_conf-apache2_4.patch to fix httpd.conf for apache 2.4
  * Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the configuration file had to be modified to look for
    this static module and load pre-2.4 directives if found on
    Apache 2.4. It should be forward compatible if the mod_access
    compat.c module become dynamic in the future and is not loaded.</changelog>
<changelog author="chris@computersalat.de" date="1406635200">- update to 3.3.8
  * Bug#10524 ? Internal Dynamic Fields in Activity Dialog.
  * Bug#10562 ? Inconsistent displaying of ?CustomerID? value.
  * Bug#10508 ? (Agent|Customer)TicketProcess javascript errors when
    uploading attachments/having server errors.
  * Bug#10521 ? OutputFilterText AutoLink CVE.
  * Bug#10430 ? backup.pl doesn?t work with PostgreSQL unix sockets.
  * Bug#5012 ? Merging a watched ticket into another should ?transfer?
    the Watch status to the final ticket, thanks to Michiel Beijen!
  * Bug#10544 ? Upgrade to OTRS 3.3.7 breaks connection to external
    customer user tables.
  * Bug#10535 ? ACLListGet() produces DB warning message.
  * Bug#10163 ? Subject shows only 30 characters.
  * Bug#10519 ? Opening and closing popups in ProcessManagement leads
    to performance issues.
  * Bug#10513 ? Some SupportData Plugin Identifiers ends with ::.
  * Bug#8494 ? Possibility to split quotes in rich text editor.
  * Bug#10491 ? CIC not always accessible via TicketZoom.
  * Bug#10427 ? Bulk action locks tickets ? cancel keeps them locked.
- update OTRS::ITSM to 3.3.8
  * Bug# 10558 ? Slow CI search for classes with a large MaxCount on
    a value and sub values.
  * Bug# 10570 ? Deleting ITSM Change search templates does not work.</changelog>
<changelog author="alexandre@exatati.com.br" date="1412078400">- Update to 3.3.9:
  https://github.com/OTRS/otrs/blob/rel-3_3_9/CHANGES.md
  * Bug#10697 - Column name in CSV report of stats is lowercase.
  * Bug#10652 - Process tickets without any articles create empty
    lines in AgentTicketSearch CSV result file.
  * Bug#10607 - SQL Box can change the database.
  * Bug#10700 - Bugfix: TimeUnits not written if E-Mail is sent via
    BulkAction.
  * Bug#10699 - Cannot add new customer (company).
  * Bug#10497 - CustomerUser secondary database access opens multitude
    of database connections.
  * Bug#9756 - Owner will be set after QueueMove screen AND undo.
  * Bug#10606 - Dynamic fields in dashboard overview are empty.
  * Updated Danish translation, thanks to Lars Jørgensen.
  * Bug#10670 - It is possible to start the scheduler more than once.
  * Bug#10515 - Problem with column filter sorting
  * Bug#10598 - Field tags not parsed properly in auto response subject.
  * Bug#10658 - Issue with multiple customer company backends.
  * Bug#10622 - eMail address only with uppercases - wrong display.
  * Bug#10596 - Manual Generic Agent Run doesn't show archived tickets
    as affected.
  * Bug#10601 - ExternalTicketNumberRecognition produces errors in log
    file.
  * Bug#9851 - Unlocking a ticket in the small view results in
    AgentTicketZoom.
  * Bug#10612 - Wrong Time in DashboardField "Changed", thanks to S7.
  * Bug#10595 - Standard Replies are false sorted in Ticket Zoom
    select box.
  * Bug#10534 - Wildcard hacking the customer information center,
    thanks to S7.
  * Bug#10597 - Process list description column doesn't support line
    breaks, thanks to S7.
  * Bug#10586 - In Customer Portal no attachments are shown.
  * Bug#6601 - Changing search options changes order of fields, thanks
    to S7.
  * Bug#10246 - ProcessManagement: ConditionLinking OR in a Transition
    doesn't work.
  * Bug#10559 - "Previous Owner" don't use the FirstnameLastnameOrder
    configuration.
  * Bug#10532 - PostMasterMailbox.pl hangs parsing mails.
  * Bug#10578 - Service selection in GA Ticket Action allows multi
    select.
- update OTRS::ITSM to 3.3.9
  * Bug#10330 ? ITSM Impact field displayed with Key instead of Value.</changelog>
<changelog author="chris@computersalat.de" date="1412078401">- fix changelog
  * update 3.3.9 with 3.3.9 data
  * add missing update info for OTRS::ITSM
- update itsm-3.3.9 Source</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post script</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- One more fix after fix bashisms in previous commit</changelog>
<changelog author="chris@computersalat.de" date="1419854400">- fix for boo#910988 (CVE-2014-9324)
- update to 3.3.11
  fix for OSA-2014-06 (CVE-2014-9324)
  * Updated translations, thanks to all translators.
  * Bug#10904 ? Upon entering CIC, search only returns hits during
    the first search.
  * Bug#10944 ? Multiple selection in Tree Selection also affects
    filtered elements.
  * Follow-up fix for Bug#6284 ? Problem with unicode characters
    when using FastCGI.
  * Bug#10830 ? Textarea Limitation in Generic Agent.
  * Bug#10920 ? ProcessManagement: Deleting Activities from canvas
    does not update process layout.
  * Bug#10801 ? Editor is extremely slow with large articles.
  * Enhanced Permission Checks in GenericInterface Ticket Connector.
  * Bug#10634 ? ProcessManagement: Can not use an arbitrary email
    address as a CustomerUser.
  * Bug#10839 ? ACL cannot set possible TicketType in
    AgentTicketPhone and AgentTicketEmail.
  * Bug#10776 ? Medium and Large view don?t indicate active
    filters.
  * Bug#10808 ? Set of pending time is not working at all in
    Frontend::Agent::Ticket::ViewNote.
  * Bug#10892 ? TicketActionsPerTicket open multiple popups at
    TicketOverview.
  * Bug#10857 ? JS added too often in AgentTicketOverviewSmall.
  * Bug#10639 ? Set of pending time/state not working properly
    (process management).
  * Bug#10893 ? Missing log name partitions in Service Center.
  * Bug#10879 ? GenericInterfae: TicketSearch operation does not
    take escalation parameters.
  * Bug#10812 ? SOAP Response is always in version SOAP 1.2.
  * Bug#10083 ? SMIME and Email address detection is case sensitive
    (for the right part)..
  * Bug#10826 ? German ? Translation Problem.
  * Bug#10678 ? Dates off by one on area diagram in dashboard widget.
  * Bug#7369 ? LinkQoute fails for some characters in hash or
    parameter.
  * Bug#8404 ? Wrong sorting of responses dropdown in TicketZoom.
  * Bug#8781 ? 508 Compliance: In Ticket Overviews the title
    attribute of large view link is incorrect.
  * Bug#10669 ? Maxlength validation of textarea dynamic fields does
    not work correctly in IE.
  * Bug#10471 ? Missing translations for tooltips of
    TicketOverviewSmall columns.
  * Bug#10850 ? Double-quoted special characters in title of dynamic
    field sidebar output in TicketZoom.
  * Bug#10805 ? Open tickets in 3 days show right function but wrong
    number.
  * Bug#10845 ? No date search if TimeInputFormat is Input.
  * Bug#10706 ? dashboard settings are lost by different user login.
  * Bug#10577 ? Service Center does not show MOD_PERL version on
    Ubuntu 14.04.
  * Bug#10679 ? Texts in notification tags loose their empty lines
    and spaces.</changelog>
<changelog author="aj@ajaissle.de" date="1445688000">- Update to 3.3.15
  * HTML emails not properly displayed (parts missing).
  * Fixed a nasty JSON::XS crash on some platforms.
  * Updated CPAN module Proc::Daemon to version 0.21.
  * TransitionAction TicketLockSet typo, thanks to Torsten Thau (c.a.p.e. IT).
  * auto reply with DynamicFields from webservice.
  * Added option to package manager list action, to show deployment info of installed packages.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
- Changes 3.3.14
  * Package installation/uninstallation leads to endless loop.
  * Lang parameter not correctly validated.
  * Search for multiple ticket numbers with GenericInterface.
- Changes 3.3.13
  * Updated translation files.
  * Refresh bug on process client interface using ie8
  * Adding email recipients via addressbook does not update customer information.
  * Wrong column encoding in Kernel::System::Notification::NotificationGet().
  * Generic Agent ticket actions can't be unselect.
  * GI: Use of uninitialized value in string ne at AdminGenericInterfaceWebservice.pm.
  * Reply in process ticket on webrequest article  fills customer mail into "cc" instead of "to".
  * Download button for dashboard stats visible even if no permissions for AgentStats exist..
  * Invalid utf-8 parameters not filtered sufficciently.
  * DynamicField Filter in AgentDashboard accepts only one value.
  * Can't select customer and/or public interface in AdminACL.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig) also for hash keys.
  * Added possibility to turn of SSL certificate validation.
  * SLA can not be set over Free Fields Dialog.
  * Not possible to change customer.
  * Error from GenericInterface using SOAP and TicketGet operation.
  * Fixed problem with missing TimeObject in GenericInterface/Event/Handler.pm.
  * Updated CPAN module Crypt::PasswdMD5 to version 1.40 to fix problems with perl 5.20.
- Changes 3.3.12
  * Ticket owner is not shown regardless what is configured, thanks to Renee Bäcker.
  * Adressbook search does not permit to add contacts via click.
  * Wrong sortation of Ticket Overview settings.
  * Missing translations in Dashboard and TicketOverview settings.
  * Internal Server Error, instead of warning.
  * Dashlet: Filter Attributes with more then one CustomerID doesn't work.
  * SQL error with "0 oracle" for article body in Ticket Search.
  * Incorrect utf8 in ZZZAuto.pm (via SysConfig).
  * ProcessManagement: TransitionAction delete does not check if is used.
  * GPG option 0xlong breaks decryption of emails.
  * ORA-03113 Error after scheduler start.
  * /etc/init.d/otrs running httpd is not detected on CentOS 7.
  * Unable to change password in customer interface.
  * Dynamic Field shown information in customer interface is not consistent with agent interface.
  * Error: No Process configured! - Agent interface.
  * Error while splitting ticket.
  * ActivityDialogEntityID not working in ACLs from Process screens reducing States.
- Rebased otrs-perm.patch as otrs-3.3.15-perm_test.patch
- Added itsm-update.sh, a script to update the itsm source we use
- Updated sources
  * otrs.README.de
  * otrs.README.en
  * UPGRADING.SuSE -&gt; UPGRADING.SUSE
  * ZZZAuto.pm</changelog>
<changelog author="chris@computersalat.de" date="1477828800">- fix itsm package
  * version is 3.3.14
- rebase otrs-3.3.15-perm_test.patch to otrs-perm_test.patch
- merge otrs-httpd_conf-apache2_4.patch into otrs-httpd_conf.patch</changelog>
<changelog author="chris@computersalat.de" date="1478088000">- fix for boo#1008017
  * execution of JavaScript in OTRS context by opening malicious attachment
- Update to 3.3.16
  * Improved sandboxing of displayed attachments.
    see OSA-2016-02 (CVE-2016-9139)
  * Added package verification information to otrs.PackageManager.pl,
    use bin/otrs.PackageManager.pl -a list -e (to show package verification
    information) or bin/otrs.PackageManager.pl -a list -e -c
    (to show package verification information deleting the cache before).
  * Bug#11959 ? 500 Can?t connect to www.otrs.com/product.xml:443.
  * Bug#11870 ? Missing quoting in Layout::AgentQueueListOption().
  * Bug#11802 ? Customer user can get access to all ticket data.
- fix ZZZAuto.pm
  * do not replace existing file (manually merge needed for ITSM)</changelog>
<changelog author="chris@computersalat.de" date="1496836800">- fix for boo#1043086
  * Incorrect Access Control in OTRS
- Update to 3.3.17 2017-06-06
  * Improved SecureMode detection in Installer.
    see OSA-2017-03 (CVE-2017-9324)
  * Bug#12753 - Function "SystemDataGroupGet" has problems with empty
    values in oracle.
  * Bug#9941 - Articles with multi-byte characters that claim to be
    UTF-8 will not display in the browser.
  * Bug#7961 - customer search should not return results for internal
    articles.
    see OSA-2017-02
  * Bug#12391 - Base64 encoded image does not display in article.
  * Bug#12461 - Chrome can not display attached PDF files since 5.0.14.</changelog>
<changelog author="chris@computersalat.de" date="1506168000">- fix for boo#1059691 (CVE-2017-14635)
  * Code Injection / Privilege Escalation OTRS
- Update to 3.3.18
  * Improved validation in statistic import and export.
    see OSA-2017-04 (Code Injection / Privilege Escalation OTRS)
  * Updated CPAN module URI to version 1.72.</changelog>

</package>
<package pkgid="d5d146bf5593d7ffe808239d1be73d22a1e6799962e366524afadfae1af00b4a" name="pam" arch="src">
    <version epoch="0" ver="1.3.0" rel="10.1"/>

<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>

</package>
<package pkgid="f9f955c348424be316c8725c921264920059865ca5fa1ebd3e712f3ce0bed892" name="pam" arch="src">
    <version epoch="0" ver="1.3.0" rel="16.1"/>

<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>
<changelog author="josef.moellers@suse.com" date="1513166400">- The fail delay is fixed and annoying. The relevant code sections
  from factory are backported here. There is not patch as the
  file with the offending code resides in the top level directory.
  [unix2_chkpw.c, bsc#1070595]</changelog>
<changelog author="josef.moellers@suse.com" date="1513339200">- Remove root's entry from /etc/security/limits.conf as this
  may break a container with the "unlimited" running on a system
  with a limit (/proc/1/limits).
  [pam-nolimit-root.patch, boo#1072826]</changelog>

</package>
<package pkgid="a56e22970118570884e6a73ca494ba9fce8b214c44f5a4a1a40637a882b8e419" name="pam" arch="src">
    <version epoch="0" ver="1.3.0" rel="6.1"/>

<changelog author="kukuk@suse.de" date="1390824000">- Add pam_loginuid-log_write_errors.diff: log significant loginuid
  write errors
- pam_xauth-sigpipe.diff: avoid potential SIGPIPE when writing to
  xauth process</changelog>
<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>

</package>
<package pkgid="24ed61552cb926df5d1e1b169fe089902cf3832552ac7529abb52729a39465e0" name="pam" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="10.1"/>

<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>

</package>
<package pkgid="f2ce0a7c236535c3bc39e6b8e82af1ddfd667528b6f1388c0dea3207be6cd884" name="pam" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="16.1"/>

<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>
<changelog author="josef.moellers@suse.com" date="1513166400">- The fail delay is fixed and annoying. The relevant code sections
  from factory are backported here. There is not patch as the
  file with the offending code resides in the top level directory.
  [unix2_chkpw.c, bsc#1070595]</changelog>
<changelog author="josef.moellers@suse.com" date="1513339200">- Remove root's entry from /etc/security/limits.conf as this
  may break a container with the "unlimited" running on a system
  with a limit (/proc/1/limits).
  [pam-nolimit-root.patch, boo#1072826]</changelog>

</package>
<package pkgid="0c6eefd0dc11e222db81bfbeaa7527f4b372e7ef9bdfcc5ef727694a63012451" name="pam" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="6.1"/>

<changelog author="kukuk@suse.de" date="1390824000">- Add pam_loginuid-log_write_errors.diff: log significant loginuid
  write errors
- pam_xauth-sigpipe.diff: avoid potential SIGPIPE when writing to
  xauth process</changelog>
<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>

</package>
<package pkgid="61252b3faaf73a225023b6ea846193533d4f5699d31368dbecb0f876e5b4574c" name="pam-32bit" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="10.1"/>

<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>

</package>
<package pkgid="07ccdb8b12b0d314636c441959fe566e79037d2092ef218a57a132e58393528c" name="pam-32bit" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="16.1"/>

<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>
<changelog author="josef.moellers@suse.com" date="1513166400">- The fail delay is fixed and annoying. The relevant code sections
  from factory are backported here. There is not patch as the
  file with the offending code resides in the top level directory.
  [unix2_chkpw.c, bsc#1070595]</changelog>
<changelog author="josef.moellers@suse.com" date="1513339200">- Remove root's entry from /etc/security/limits.conf as this
  may break a container with the "unlimited" running on a system
  with a limit (/proc/1/limits).
  [pam-nolimit-root.patch, boo#1072826]</changelog>

</package>
<package pkgid="92efc5a38fbf9048cbfd7ed43f7109718baeb6e82f89ea4133de47d030dee26c" name="pam-32bit" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="6.1"/>

<changelog author="kukuk@suse.de" date="1390824000">- Add pam_loginuid-log_write_errors.diff: log significant loginuid
  write errors
- pam_xauth-sigpipe.diff: avoid potential SIGPIPE when writing to
  xauth process</changelog>
<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>

</package>
<package pkgid="737f9ee5e4146afceae218f809439fa3a08d5054f18322a80e97721f720da35c" name="pam-devel" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="10.1"/>

<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>

</package>
<package pkgid="8996f20b015921a1cb9b133b42f99ad7e0d90b476023b7cdd0439abd86008bac" name="pam-devel" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="16.1"/>

<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>
<changelog author="josef.moellers@suse.com" date="1513166400">- The fail delay is fixed and annoying. The relevant code sections
  from factory are backported here. There is not patch as the
  file with the offending code resides in the top level directory.
  [unix2_chkpw.c, bsc#1070595]</changelog>
<changelog author="josef.moellers@suse.com" date="1513339200">- Remove root's entry from /etc/security/limits.conf as this
  may break a container with the "unlimited" running on a system
  with a limit (/proc/1/limits).
  [pam-nolimit-root.patch, boo#1072826]</changelog>

</package>
<package pkgid="d501eb1b45a3d87506bd0bdeafe47284b39713f1fa1aa5c506d3651ca75648f9" name="pam-devel" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="6.1"/>

<changelog author="kukuk@suse.de" date="1390824000">- Add pam_loginuid-log_write_errors.diff: log significant loginuid
  write errors
- pam_xauth-sigpipe.diff: avoid potential SIGPIPE when writing to
  xauth process</changelog>
<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>

</package>
<package pkgid="fa3055ebca6810c761b8acf2dcefc4c43f46fed88923ea7467e0eadcdaf78703" name="pam-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="10.1"/>

<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>

</package>
<package pkgid="8f7fac5502335d2b517a9f86630910a01b15e0385c6291b70868af66fdbe6beb" name="pam-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="16.1"/>

<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>
<changelog author="josef.moellers@suse.com" date="1513166400">- The fail delay is fixed and annoying. The relevant code sections
  from factory are backported here. There is not patch as the
  file with the offending code resides in the top level directory.
  [unix2_chkpw.c, bsc#1070595]</changelog>
<changelog author="josef.moellers@suse.com" date="1513339200">- Remove root's entry from /etc/security/limits.conf as this
  may break a container with the "unlimited" running on a system
  with a limit (/proc/1/limits).
  [pam-nolimit-root.patch, boo#1072826]</changelog>

</package>
<package pkgid="0abb1a9e494f7e273574e91bf7e70d44650a3c298a82b87a7e302ac3241423b1" name="pam-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="6.1"/>

<changelog author="kukuk@suse.de" date="1390824000">- Add pam_loginuid-log_write_errors.diff: log significant loginuid
  write errors
- pam_xauth-sigpipe.diff: avoid potential SIGPIPE when writing to
  xauth process</changelog>
<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>

</package>
<package pkgid="36207620801776b885925823a0006f2ead48bb87cce01b96561336f56b55b678" name="pam-doc" arch="noarch">
    <version epoch="0" ver="1.3.0" rel="10.1"/>

<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>

</package>
<package pkgid="117bac0cefdb1cb3e0be2320e4e91c3ac049c0b09b3c99c77617e834fa6d0750" name="pam-doc" arch="noarch">
    <version epoch="0" ver="1.3.0" rel="16.1"/>

<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>
<changelog author="josef.moellers@suse.com" date="1509969600">- Removed root's limits from limits.conf
  [pam-limit-nproc.patch, bsc#1012494]</changelog>
<changelog author="josef.moellers@suse.com" date="1513166400">- The fail delay is fixed and annoying. The relevant code sections
  from factory are backported here. There is not patch as the
  file with the offending code resides in the top level directory.
  [unix2_chkpw.c, bsc#1070595]</changelog>
<changelog author="josef.moellers@suse.com" date="1513339200">- Remove root's entry from /etc/security/limits.conf as this
  may break a container with the "unlimited" running on a system
  with a limit (/proc/1/limits).
  [pam-nolimit-root.patch, boo#1072826]</changelog>

</package>
<package pkgid="3307d62c90207570880f1162f14932abb092eefbdc0485c1341607a7b94760e4" name="pam-doc" arch="noarch">
    <version epoch="0" ver="1.3.0" rel="6.1"/>

<changelog author="kukuk@suse.de" date="1390824000">- Add pam_loginuid-log_write_errors.diff: log significant loginuid
  write errors
- pam_xauth-sigpipe.diff: avoid potential SIGPIPE when writing to
  xauth process</changelog>
<changelog author="ckornacker@suse.com" date="1396353600">- adding sclp_line0/ttysclp0 to /etc/securetty on s390 (bnc#869664)</changelog>
<changelog author="ckornacker@suse.com" date="1397044800">- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433)
  bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1399377600">- limit number of processes to 700 to harden against fork-bombs
  Add pam-limit-nproc.patch</changelog>
<changelog author="bwiedemann@suse.com" date="1420804800">- increase process limit to 1200 to help chromium users with many tabs</changelog>
<changelog author="kukuk@suse.de" date="1420804801">- Update to current git:
  - Linux-PAM-git-20150109.diff replaces Linux-PAM-git-20140127.diff
  - obsoletes pam_loginuid-log_write_errors.diff
  - obsoletes pam_xauth-sigpipe.diff
  - obsoletes bug-870433_pam_timestamp-fix-directory-traversal.patch</changelog>
<changelog author="kukuk@suse.de" date="1420804802">- Re-add lost patch encryption_method_nis.diff [bnc#906660]</changelog>
<changelog author="kukuk@suse.de" date="1430136000">- Update to version 1.2.0
  - obsoletes Linux-PAM-git-20150109.diff</changelog>
<changelog author="kukuk@suse.de" date="1435320000">- Update to version 1.2.1
  - security update for CVE-2015-3238</changelog>
<changelog author="joschibrauchle@gmx.de" date="1437825600">- Add folder /etc/security/limits.d as mentioned in 'man pam_limits'</changelog>
<changelog author="kukuk@suse.de" date="1458734400">- Add 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
- Add 0002-Remove-enable-static-modules-option-and-support-from.patch
- Add 0003-fix-nis-checks.patch</changelog>
<changelog author="kukuk@suse.de" date="1459252800">- Add 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - readd PAM_EXTERN for external PAM modules</changelog>
<changelog author="kukuk@suse.de" date="1459512000">- Fix typo in common-account.pamd [bnc#959439]</changelog>
<changelog author="kukuk@suse.de" date="1459512001">- Add 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch
  - Replace IPv4 only functions</changelog>
<changelog author="kukuk@suse.de" date="1460376000">- Remove (since accepted upstream):
  - 0001-Remove-YP-dependencies-from-pam_access-they-were-nev.patch
  - 0002-Remove-enable-static-modules-option-and-support-from.patch
  - 0003-fix-nis-checks.patch
  - 0004-PAM_EXTERN-isn-t-needed-anymore-but-don-t-remove-it-.patch
  - 0005-Use-TI-RPC-functions-if-we-compile-and-link-against-.patch</changelog>
<changelog author="kukuk@suse.de" date="1460635200">- Add /sbin/unix2_chkpwd (moved from pam-modules)</changelog>
<changelog author="kukuk@suse.de" date="1461844800">- Update Linux-PAM to version 1.3.0
- Rediff encryption_method_nis.diff
- Link pam_unix against libtirpc and external libnsl to enable
  IPv6 support.</changelog>
<changelog author="kukuk@suse.de" date="1462190400">- Remove obsolete README.pam_tally [bsc#977973]</changelog>
<changelog author="kukuk@suse.de" date="1469707200">- Add doc directory to filelist.</changelog>
<changelog author="josef.moellers@suse.com" date="1508500800">- Increased nproc limits for non-privileged users to 4069/16384.
  [pam-limit-nproc.patch, bsc#1012494, bsc#1013706, boo#1041099]</changelog>

</package>
<package pkgid="7348f7b0a641769692c5e16c62e7add7c6322181182716eb33673928faaf8714" name="pam_apparmor" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="b9704db5b45839c845eef91d5fcaf00da352ed3f67a65f32484b723e7ea26ede" name="pam_apparmor-32bit" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="08be8bdce25be21a43c43949208d2915f9841f24f7b648fbb1ab51a6774727ef" name="pam_cifscreds" arch="x86_64">
    <version epoch="0" ver="6.5" rel="5.1"/>

<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="lmuelle@suse.com" date="1395316800">- Update to cifs-utils 6.3.
  + fixes for various bugs turned up by Coverity
  + clean unused cruft out of upcall binary
  + add new pam_cifscreds PAM module for establishing NTLM creds on login
    which BuildRequires the pam-devel package
- Make the PAM security directory configurable at compile time; (bso#10513).
  + Make_the_PAM_security_directory_configurable_at_compile_time.patch</changelog>
<changelog author="ro@suse.de" date="1399550400">- use _rundir macro</changelog>
<changelog author="lmuelle@suse.com" date="1403092800">- BuildIgnore libldb, libtevent, and samba4-libs to prevent a package conflict
  on CentOS, Fedora, and RHEL systems.</changelog>
<changelog author="lmuelle@suse.com" date="1406548800">- Update to cifs-utils 6.4.
  + allow PAM directory to be configurable
  - Make_the_PAM_security_directory_configurable_at_compile_time.patch
  + better determination of default keytab file
  + better cifscreds error handling
  + uppercase devicename when retrying mount</changelog>
<changelog author="lmuelle@suse.com" date="1408449600">- Remove cifstab file; obsoleted by the more generic cifs credentials feature.</changelog>
<changelog author="ddiss@suse.com" date="1409486400">- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
  the corresponding module; (bnc#893575).</changelog>
<changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
<changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
<changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
<changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
<changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
<changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
<changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
<changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
<changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
<changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>

</package>
<package pkgid="d474443091e1dc153916bb8bf59728fc7e2a4d855c2caa0c6cbf037c8ed18f9d" name="pasystray" arch="src">
    <version epoch="0" ver="0.6.0" rel="5.1"/>

<changelog author="petr.cervinka@gmail.com" date="1452168000">- New package
- pasystray.desktop: Add missing semicolon to "Keywords"
- disabled wayland in build requirements for Leap 42.1 / SLE12
- spec file cleaned</changelog>
<changelog author="petr@cervinka.net" date="1452513600">- updated License to LGPL-2.1+ in spec file</changelog>
<changelog author="petr@cervinka.net" date="1468843200">- Version bump to 0.6.0:
  * start pavucontrol with ctrl-click on status icon
  * update systray icon on default sink change
  * add context menu option to move all in/outputs to sink/source
  * update the volume icon of non-default sinks
  * To fix notifications for changes of their volume level
  * possible to set the volume icon for notifications independent of the tray icon
  * use gauges for volume notifications
  * set notification icon when changing systray icon
  * send notifications only on volume / mute changes
  * add option to always send notifications on volume change
  * log systray implementation
  * add option to include monitors
  * support disabling status icon support
  * include volume and muted state in item name
  * set notification urgency to low
  * minor Housekeeping for README
  * deprecate --max-volume in favor of --volume-max
  * add option to disable all notifications
  * re-add volume-max option handling
  * update manpage with --volume-inc
  * add option to set volume increment
  * add TODO entries for feature requests
  * stop using stock GtkButton
  * check mii only where needed
  * start pavucontrol with ctrl-click on status icon
  * pasystray.desktop: Add missing semicolon to "Keywords"
- Removed patch icon_keywords_fix.patch (fixed in upstream)</changelog>
<changelog author="petr@cervinka.net" date="1511870400">- Add upstream patch fix-memory-leak.patch for memory leak (boo#1070195)</changelog>

</package>
<package pkgid="8e124f14de49c70da0028f00b2de00cdf87cd6329f781878c54436ae5a117775" name="pasystray" arch="x86_64">
    <version epoch="0" ver="0.6.0" rel="5.1"/>

<changelog author="petr.cervinka@gmail.com" date="1452168000">- New package
- pasystray.desktop: Add missing semicolon to "Keywords"
- disabled wayland in build requirements for Leap 42.1 / SLE12
- spec file cleaned</changelog>
<changelog author="petr@cervinka.net" date="1452513600">- updated License to LGPL-2.1+ in spec file</changelog>
<changelog author="petr@cervinka.net" date="1468843200">- Version bump to 0.6.0:
  * start pavucontrol with ctrl-click on status icon
  * update systray icon on default sink change
  * add context menu option to move all in/outputs to sink/source
  * update the volume icon of non-default sinks
  * To fix notifications for changes of their volume level
  * possible to set the volume icon for notifications independent of the tray icon
  * use gauges for volume notifications
  * set notification icon when changing systray icon
  * send notifications only on volume / mute changes
  * add option to always send notifications on volume change
  * log systray implementation
  * add option to include monitors
  * support disabling status icon support
  * include volume and muted state in item name
  * set notification urgency to low
  * minor Housekeeping for README
  * deprecate --max-volume in favor of --volume-max
  * add option to disable all notifications
  * re-add volume-max option handling
  * update manpage with --volume-inc
  * add option to set volume increment
  * add TODO entries for feature requests
  * stop using stock GtkButton
  * check mii only where needed
  * start pavucontrol with ctrl-click on status icon
  * pasystray.desktop: Add missing semicolon to "Keywords"
- Removed patch icon_keywords_fix.patch (fixed in upstream)</changelog>
<changelog author="petr@cervinka.net" date="1511870400">- Add upstream patch fix-memory-leak.patch for memory leak (boo#1070195)</changelog>

</package>
<package pkgid="045ba2a24d7d9feb99464d916418139146a6e6d2321b964ab7a2d0d56e4cae5d" name="pcp" arch="src">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="83f45e10bb726a6a460b2ab39d5f83822ddcb833953e5ae322889afa87dacaf2" name="pcp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="74688e214cd0d5ce8fe50d5baf08a5cb820c7b988f54c7ca8f4fe25913a18dc2" name="pcp-conf" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="6ec94eb97c2ab92778ec726358bb3da380ee7cae46d78e1ff3f399326e682bc3" name="pcp-devel" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="8aeb20a9ed43b827b750aeef35c5366b4e22dd288b729dc1baf0923e8a8dae5d" name="pcp-doc" arch="noarch">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="6ee6a05b425fe36a649643cec0e0489c84839140fcd61c4462b787e2dd061d92" name="pcp-export-pcp2graphite" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="cfa4c372e6384759597c5510f3a99a8cdda7e45be3c51293124b49c725b09903" name="pcp-export-pcp2influxdb" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="aca9e3d9a9e5841e798110408d7fb465d7ed3918136080004c8bcbfb668f9253" name="pcp-export-zabbix-agent" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="e48b598a9242155fca045ef2819cc20c50ca490a34f484e0c587aa6df885ba91" name="pcp-gui" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="86ca3578ebadda13c520daa4d0fd6340ea84bdafd70672de094589ee42f33fc2" name="pcp-import-collectl2pcp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="985f1991bc0207de5c57a411dc2906214a5ea3c3c65b705c4f10d5e6093db314" name="pcp-import-ganglia2pcp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="2381a0e3b8b2eb5992ce1428c588733d3710cccde8da85c54c4f7b50850fddec" name="pcp-import-iostat2pcp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="3461dedab7786fc71c22b276eca7e81e35e12d05daacdbcdc07845e369263cbd" name="pcp-import-mrtg2pcp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="fc27920a42513b64fe59a802e5e14361cc50ab2bab4ed22480b873e30c476971" name="pcp-import-sar2pcp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="1687ec35ef76f2774e67bd773a583c0a9a8b0288681d5b7c4c87b051dc1182fd" name="pcp-manager" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="7146d0b895eaf1ff1a55dc961c27408bf01449082a727c401c07b332d146b499" name="pcp-pmda-activemq" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="21de23c0ff7030e88f4252f3fde80629eae660772daf9961b12cdef73303c706" name="pcp-pmda-apache" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="b29885a8f9e6550359577c886d4e8426571205ee3cff2431ba98f1167d4bc57a" name="pcp-pmda-bash" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="7f4c3e1f101df66aed49009d03c8f1815e083c1e1e027bfb6a8371b78f8bf93c" name="pcp-pmda-bind2" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="65c9f3c3cd83176c0e508cf43ad8833143619a4392974efc531373e1b3a926c8" name="pcp-pmda-bonding" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="1d4bfc263cc0508a112f0899735cc8e9ffdeb802254ab3173d6898a73242e306" name="pcp-pmda-cifs" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="7b32d838bcce5b12f49d89bc023a2597ae3c9f39d18447911f40d1b6ec77253a" name="pcp-pmda-cisco" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="63a11d8fe1c7966b728c8b0a5e5e3a591be1b10295fb40ba0e08623330fc4d78" name="pcp-pmda-dbping" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="bc9b291fadeb6415443596b9938d4adcd59a139a134ebda56ff9dac71bc72993" name="pcp-pmda-dm" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="6c022bb90a90bef2ccde0698b124eae552f0795ccabdcb72e424e4110e67fbb8" name="pcp-pmda-docker" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="a59dbcdf3a9b9e5fe843cb1a9ec09fa061f572fa2ba2949287afe72b72af18ea" name="pcp-pmda-ds389" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="c07c056c922d9ae1c2d75139ca4de6f5688ffaddbf64c6939c88d5fbc1b8354a" name="pcp-pmda-ds389log" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="9b7489880615dd6a4618f6fb949c0ed889acd1f738817685b7e26144563e415a" name="pcp-pmda-elasticsearch" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="1b5d374794696b4fdda15dc18cfdebfa08a176f0e6ff143b0286f72efa589852" name="pcp-pmda-gfs2" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="9ef1e61a74a5c303c5d26bf8e482c68893c4c0cf73bf1411dd5db6fa705657ca" name="pcp-pmda-gluster" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="bd404c09d9a045cdf4322e8c053d382eed031d63928f3b07026b0035082cb3e5" name="pcp-pmda-gpfs" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="26cb987a3bb54205f060e2f30a9402bf80f528f1f3860ec20fd6e65645acdea8" name="pcp-pmda-gpsd" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="e9d3ef8ad0db441310605621a095e3fe88bc022aa7cb426a4c7b4408c66c01c3" name="pcp-pmda-infiniband" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="f0ee393110350227749318db4bb8f32019a2d860d2917031e868158b1607f9ab" name="pcp-pmda-json" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="9a3dc17dad280c192a2f73ef70033d4d26d6c0117dee3948a16019da6cebd9d0" name="pcp-pmda-kvm" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="e9ce7e1d1a5d865f3a17c431c1e92a221af7d95fcaebe488ab467bd8a8be60eb" name="pcp-pmda-lmsensors" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="4c4628d04058951aa9f0687a7d197b3e7b41a46a0f3466d453b3019dae745c93" name="pcp-pmda-logger" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="22bc703153cb47a5d383773c30526a640507ab4e54eb0cba996082c57f9c6d1f" name="pcp-pmda-lustre" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="c5aac13e297acf7732391d16347ffe24a58f0782f557b4c65fd895a0cde9f70e" name="pcp-pmda-lustrecomm" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="0181d57847f12aefba4a49cb4b950cda36bcda421f9fbd7fd72104bc61524c44" name="pcp-pmda-mailq" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="62337f022a514c9993a7f6468edbd6c05e9b32ef8c04903065dd59973a0f6e23" name="pcp-pmda-memcache" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="1147c83afe06805da040ffda1e492d8b97b003735d3582c47a256006733c529b" name="pcp-pmda-mic" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="0f57063d1bc666b4291490be355c966d99e8f6c6bdb4d849cbec14a0b3d321cd" name="pcp-pmda-mounts" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="5d7054bc6b72facc98592f3f84986ca71fe7c9cece468921777d87fc326d2ef8" name="pcp-pmda-mysql" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="89262afc61521f7f91d23e29840ce88de51225ca53a9316dd1eb0b157d5fbbb4" name="pcp-pmda-named" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="ba420da583cf32665e6c3801bc9abb15fc232a95903b483c147c94f2cf5b4eea" name="pcp-pmda-netfilter" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="55feb829dc4c41ecc2c2bfda6e194a9738f78a3c3aa8336c86790dfa2acc55b1" name="pcp-pmda-news" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="1d0767bf957ef6b1c1f79d80d4bbbee5ebf53b1ebd603534bf2430e56d1feaae" name="pcp-pmda-nfsclient" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="aec7e1b0ea527b122e1a36396ffcaff1c1ebb9465cb72b8808dad7cb1a5db055" name="pcp-pmda-nginx" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="e52194b6af6cb3fd64f40ff9b432efe5b39cd8312abf95e91ae6b2a0f21e4dc4" name="pcp-pmda-nutcracker" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="28de2481a2f897e71a611cdd5308fa4d3e2e8bf432e8c1d20e51508198bf31fe" name="pcp-pmda-nvidia-gpu" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="8198f8a79714977a987853ac4c73fe8bff1d0cc2fb869f784c480826d1c335c1" name="pcp-pmda-oracle" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="b9cf2e40f98c9e45f3d441f1f4cd48a97dbed8d51ccfd6d8f5c3c371dda6e66b" name="pcp-pmda-papi" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="cf78e4740dc6501e28415781ef19ed748cca284979e48ab6b032cf04ebef7ad2" name="pcp-pmda-pdns" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="0bb7a3a3be731d918f52f41c8f4f966e4344fb1a5fd03da079f26a8c7c487a2f" name="pcp-pmda-perfevent" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="c038beaee7664fba3f6207ae122aae94f909f908cb5429302bffbac3168ba058" name="pcp-pmda-postfix" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="f16e250c700848620a5438cc2dea9c7822d9197002b79d758e97bf31676dfe71" name="pcp-pmda-redis" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="da4f6a570045616a6eab2555590132cda0eb1023368a6903ead0bdfddc4ec868" name="pcp-pmda-roomtemp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="6c73e7ccddc4691976655e3e56c4ef95a80f7ae362cad49eaf89e779759bb88b" name="pcp-pmda-rpm" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="3849efcd09da9cae80962724fae5730d976639746a3f9590367012f41e4d0e4b" name="pcp-pmda-rsyslog" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="0a34769aa06417297be2e3d7951b062304f12452a82a7118b7288706fe29561f" name="pcp-pmda-samba" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="b411a67994d9edd19011c274fd64767f895328f8ed6d015029281892498a6658" name="pcp-pmda-sendmail" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="07d28c659e2557c8e7b1c9a819afa3f3ee2a442a7669f66a1d20981350cd448e" name="pcp-pmda-shping" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="294a6d7f2f2eb01deec0f4076119eeafcedda12c8749b66a2490e3cbe622d253" name="pcp-pmda-slurm" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="4d9dfa87cfd762094fccf530223deeb97245541c99d152fcb24f7a03bbee7410" name="pcp-pmda-snmp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="e7efffde0948fd5da326dcbcd1420e275a4092c9366570160202ac6984bba057" name="pcp-pmda-summary" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="ba1623a8bc880349bc7cd7681f77a4adbfd20788408623319e1082e2508b007f" name="pcp-pmda-systemd" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="fe372823a4bf5cf20b8e80c66416d8060858a17cadf10b8ed1ee194933c525af" name="pcp-pmda-trace" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="1424784e5571639ab74b6eb9ea1663976686098757d6b3ab37a7bc4d78f2b7f3" name="pcp-pmda-unbound" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="14ccf791694595cb69331e4b742e859a6ff2966de584d312e2ad4173e05eea56" name="pcp-pmda-vmware" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="374158383bc64d7bb77cbbbe17b6637ee576d720ee30670fa3e21d2e53960ad3" name="pcp-pmda-weblog" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="367ed46c6c52cf508197043593c452527daf91193fbfe8e18135a701973bf75b" name="pcp-pmda-zimbra" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="d74b0d3ed8f91875263899387007af00960582ac2927c5da72658282a8fcabfc" name="pcp-pmda-zswap" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="8e9553595fa848cd4834b4ea85b2932f4bf87e02f86a7b9dab4c3d16b7aa4c39" name="pcp-system-tools" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="a9087cdd6181bd6141ded727c4f73730ae1b071149cb5b4568baa5773c2982b1" name="pcp-testsuite" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="7f03ae980099e5cf9e14cca59dcc95e785731e328097be97dd5301f2d9c0bb87" name="pcp-webapi" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="18d51969888ce662f75c31528cf0ff7ed611f6c59bda23b1fecc17092b3d0fcd" name="pcre" arch="src">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="2177150bd1968910d462fffec7f5ddde03c75f4138db706fda1837b4a9d1eddb" name="pcre-devel" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="f32646eddbc66867da6ceac6c4fe706c661964e30f4a942237dcc240d11733f0" name="pcre-devel-static" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="7fcad5299f5329cdfc949713c6f5aa2fbef2b0e41450c3a026a228d2ae71aba1" name="pcre-doc" arch="noarch">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="2a4a0c2475327307778d834426fd0aa9e3d7dde270b3db1f6d7f3ea26ca44b61" name="pcre-tools" arch="x86_64">
    <version epoch="0" ver="8.39" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 8.10:
  + Major additions:
  - support for (*MARK) and friends
  - PCRE_UCP option, which changes the behaviour of \b, \d, \s,
    and \w (and their opposites) so that they make use of Unicode
    properties
  + Other additions:
  - support for \N, which always matches any character other than
    newline
  - added --line-buffered to pcregrep
  + Several small new features and bugfixes
- Changes from version 8.02:
  + Update Unicode data tables to Unicode 5.2.0
  + Update the licensing terms in the pcregexp.pas file
  + Several bug fixes
- Changes from version 8.01:
  + Several bug fixes and build system improvements
- Changes from version 8.00:
  + Enhancements:
  - remove restrictions on patterns used for partial matching
  - give extra information for partial matches
  - improve the partial matching process
  - add option to make a partial match override a full match
  - enhance "study" process by finding a lower bound matching
    length
  - groups with duplicate numbers may now have duplicated names
    without the use of PCRE_DUPNAMES, but they may not have
    different names
  - add REG_UNGREEDY to the pcreposix interface, which maps to
    PCRE_UNGREEDY.
  + Several bug fixes
- Drop pcre-7.9.patch: fixed upstream.
- Rearrange spec file to have all the %files sections together, as
  well as all the scriptlets together.
- Kill the main package that only included doc files like AUTHORS,
  NEWS, and license, and put those files in libpcre0: this really
  makes more sense. Therefore, make libpcre0 Provides/Obsoletes
  libpcre0.
- We can also remove the other dependencies on the main package,
  since everything already depends on libpcre0.
- Remove AutoReqProv: it's default now.
- Remove references to perl 5.005 in descriptons: it's not
  mentioned anywhere anymore upstream.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1288440000">- Support GCC visibility, symbol clashes no more.</changelog>
<changelog author="coolo@novell.com" date="1299672000">- Update to version 8.12
  * This release fixes some bugs in pcregrep, one of which caused the tests to fail
  on 64-bit big-endian systems. There are no changes to the code of the library.
- Update to version 8.11
  * A number of bugs in the library and in pcregrep have been fixed. As always, see
  ChangeLog for details. The following are the non-bug-fix changes:
  Added --match-limit and --recursion-limit to pcregrep.
  Added an optional parentheses number to the -o and --only-matching options
  of pcregrep.
  Changed the way PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and
  \B.
  Added PCRE_ERROR_SHORTUTF8 to make it possible to distinguish between a
  bad UTF-8 sequence and one that is incomplete when using PCRE_PARTIAL_HARD.
  Recognize (*NO_START_OPT) at the start of a pattern to set the PCRE_NO_
  START_OPTIMIZE option, which is now allowed at compile time</changelog>
<changelog author="coolo@suse.com" date="1316433600">- remove fragile _service</changelog>
<changelog author="dmueller@suse.de" date="1318334400">- udpate to 8.13:
  * too many fixes to list here, see included ChangeLog
  * the Unicode data tables have been updated to Unicode 6.0.0.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1320148800">- Update to version 8.20
  * too many fixes to list here, see included ChangeLog
  * replace pcre-visibility patch with the one I submitted to
    upstream for inclusion.</changelog>
<changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dvaleev@suse.com" date="1328097600">- Fix cache-flush on PPC</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616000">- Update to PCRE 8.30, upstream SONAME bump, libpcre1
- Drop no longer needed ppc patch.
- move library back to %{_libdir}</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328616001">- fix baselibs</changelog>
<changelog author="afaerber@suse.de" date="1336651200">- Add devel-static package</changelog>
<changelog author="jengelh@inai.de" date="1342699200">- Only use --enable-jit on supported architectures; the build will
  otherwise fail (e.g. on sparc).</changelog>
<changelog author="dimstar@opensuse.org" date="1345204800">- Upate to version 8.31:
  + The JIT compiler now supports partial matching and the (*MARK)
    and (*COMMIT) verbs
  + PCRE_INFO_MAXLOOKBEHIND can be used to find the longest
    lookbehing in a pattern.
  + There should be a performance improvement when using the heap
    instead of the stack for recursion
  + pcregrep can now be linked with libedit as an alternative to
    libreadline
  + pcregrep now has a --file-list option where the list of files
    to scan is given as a file
  + pcregrep now recognizes binary files and there are related
    options
  + The Unicode tables have been updated to 6.1.0
- Rebase pcre-visibility.patch.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1352289600">- Use the --enable-pcre16 configure flag.
  This switch enables 16 bit character support that will be required by Qt5</changelog>
<changelog author="jengelh@inai.de" date="1353672000">- Update package descriptions about the differences between the
  PCRE library subpackages.</changelog>
<changelog author="p.drouand@gmail.com" date="1357473600">- Update to 8.32 version:
  * There is now support for 32-bit character strings and UTF-32. Like the
    16-bit support, this is done by compiling a separate 32-bit library.
  * \X now matches a Unicode extended grapheme cluster.
  * Case-independent matching of Unicode characters that have more than one
    "other case" now makes all three (or more) characters equivalent. This
    applies, for example, to Greek Sigma, which has two lowercase versions.
  * Unicode character properties are updated to Unicode 6.2.0.
  * The EBCDIC support, which had decayed, has had a spring clean.
  * A number of JIT optimizations have been added, which give faster JIT
    execution speed. In addition, a new direct interface to JIT execution is
    available. This bypasses some of the sanity checks of pcre_exec() to give a
    noticeable speed-up.
  * A number of issues in pcregrep have been fixed, making it more compatible
    with GNU grep. In particular, --exclude and --include (and variants) apply
    to all files now, not just those obtained from scanning a directory
    recursively. In Windows environments, the default action for directories is
    now "skip" instead of "read" (which provokes an error).
  * If the --only-matching (-o) option in pcregrep is specified multiple
    times, each one causes appropriate output. For example, -o1 -o2 outputs the
    substrings matched by the 1st and 2nd capturing parentheses. A separating
    string can be specified by --om-separator (default empty).
  * When PCRE is built via Autotools using a version of gcc that has the
    "visibility" feature, it is used to hide internal library functions that are
    not part of the public API.
-  updated and versionned pcre-visibility.patch to svn trunk
  * Modifications on configure.ac and makefile have been merged on upstream release</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- Ensure the PCRE library and tools are built with large file
  support in 32 bit archs.</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 8.33
  * The Just-In-Time compiler (JIT) now supports all pattern
  features, including callouts and the backtracking verbs. In
  addition, some bugs are fixed and there are minor performance
  enhancements.
- More robust make install call. Provide signature verification
  files (avoid depending on gpg-offline due to bootstrap cycle).</changelog>
<changelog author="astieger@suse.com" date="1477483200">- Update to PCRE 8.39 FATE#320298 bsc#972127.
  This version fixes a number of vulnerabilities that affect pcre
  and applications using the libary when accepting untrusted input
  as regular expressions or as part thereof. Remote attackers could
  have caused the application to crash, disclose information or
  potentially execute arbitrary code.
  * CVE-2014-8964: pcre: heap buffer overflow (bsc#906574)
  * CVE-2015-2325: pcre: heap buffer overflow in compile_branch() (bsc#924960)
  * CVE-2015-3210 pcre: heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288)
  * CVE-2015-3217: pcre: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878)
  * CVE-2015-5073: pcre: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227)
  * bsc#942865: heap overflow in compile_regex()
  * CVE-2015-8380: pcre: heap overflow in pcre_exec (bsc#957566)
  * CVE-2015-2327: pcre: mishandling of patterns with backreferences (bsc#957567)
  * bsc#957598: various security issues fixed in pcre 8.37 and 8.38 release
  * CVE-2015-2328: pcre: mishandled recursion patterns (bsc#957600)
  * CVE-2016-1283: pcre: Heap buffer overflow in pcre_compile2 causes DoS (bsc#960837)
  * CVE-2016-3191: pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (bsc#971741)
- These other changes are included:
  * JIT compiler improvements
  * performance improvements
  * The Unicode data tables have been updated to Unicode 7.0.0.</changelog>
<changelog author="kstreitova@suse.com" date="1508414400">- add pcre-8.39-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>

</package>
<package pkgid="621811d9b275bfb3dbeb21294a427b7d85ee27fd79195749550e6cecf28936fc" name="pdns" arch="src">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="c428d55c8c02a0d244927e624b327f691582d54a57f6f13441155c5f11dd5a64" name="pdns" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="85dd0b520da425a30818a5299544d9143088d061c196ba538922e465ae03005c" name="pdns-backend-geoip" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="998a48c02e4e8d52f21a4a28188d73c7cc44ca5599c60f2e11fad1ee6fef8396" name="pdns-backend-godbc" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="04a945d8792144ca286ee87a85e1a64bd880af03ed8fe3e7051181e2ea87321c" name="pdns-backend-ldap" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="4e33172f73aaedf3eff9e2f600d01afd3769e4c168caaab26c22fcfad939060f" name="pdns-backend-lua" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="c66f406da3bd06668153be32a7dc93a76ac2931dedbe79a973c9c0df26795e58" name="pdns-backend-mydns" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="385eaf0f57b6b18c1fbb865aecd08d2238a1a47ce719fc129a73a40385a2c801" name="pdns-backend-mysql" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="59ccd783adf2df5e0809a09295070c4acd2c29568ceda6e35ede5b90c6951125" name="pdns-backend-postgresql" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="23de4ae2f434a2a3905afdea33e3c89ac2d42017f1fc4b0b51b991a3f0c643d8" name="pdns-backend-remote" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="955fb2ed16ca229acac010aebb030af3d18b22d5be1629d16aa0b0719fd8e887" name="pdns-backend-sqlite3" arch="x86_64">
    <version epoch="0" ver="4.0.3" rel="9.1"/>

<changelog author="mrueckert@suse.de" date="1422964800">- update to 3.4.2
  This is a performance and bugfix update to 3.4.1 and any earlier
  version. For high traffic setups, including those using DNSSEC,
  upgrading to 3.4.2 may show tremendous performance increases.
  A list of changes since 3.4.1 follows. Please see the full
  clickable changelog at
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342
- move man pages to section 1 to follow upstream change</changelog>
<changelog author="mrueckert@suse.de" date="1422964801">- remove custom PIE handling. upstream does it for us now.</changelog>
<changelog author="mrueckert@suse.de" date="1422964802">- set $LD for now. this fixes the configure check for relro,now.</changelog>
<changelog author="mrueckert@suse.de" date="1425297600">- update to 3.4.3
  Bug fixes:
  - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben
    Kerkhof)
  - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees
    Monshouwer)
  - [commit 3ca050f]: always set di.notified_serial in
    getAllDomains (Kees Monshouwer)
  - [commit d9d09e1]: pdns_control: don't open socket in /tmp
    (Ruben Kerkhof)
  New features:
  - [commit 2f67952]: Limit who can send us AXFR notify queries
    (Ruben Kerkhof)
  Improvements:
  - [commit d7bec64]: respond REFUSED instead of NOERROR for
    "unknown zone" situations
  - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof)
  - [commit d09931d]: Check compiler for relro support instead of
    linker (Ruben Kerkhof)
  - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where
    possible (Christian Hofstaedtler)
  - [commit 5a85152]: PacketHandler: Share UeberBackend with
    DNSSECKeeper (Christian Hofstaedtler)
  - [commit 97bd444]: fix building with GCC 5
  Experimental API changes (Christian Hofstaedtler):
  - [commit ca44706]: API: move shared DomainInfo reader into it's
    own function
  - [commit 102602f]: API: allow writing to domains.account field
  - [commit d82f632]: API: read and expose domain account field
  - [commit 2b06977]: API: be more strict when parsing record
    contents
  - [commit 2f72b7c]: API: Reject unknown types (TYPE0)
  - [commit d82f632]: API: read and expose domain account field</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit ac3ae09: fix rectify-(all)-zones for mixed case domain
    names
  - commit 2dea55e, commit 032d565, commit 55f2dbf: fix
    CVE-2015-1868
  - commit 21cdbe5: Blocking IO in busy-wait for remote backend
    (Wieger Opmeer)
  - commit cc7b2ac: fix double dot for root MX/SRV in bind slave
    zone files (Kees Monshouwer)
  - commit c40307b: Properly lock lmdb database, fixes ticket #1954
    (Aki Tuomi)
  - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof)
  New Features:
  - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out
    zones
  - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and
    f12fcf7: TKEY record type (Aki Tuomi)
  - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350,
    fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9,
    c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki
    Tuomi)
  - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use
    them for TSIG (Aki Tuomi)
  Improvements:
  - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure
    zones; this saves on one rectify when securing a NSEC3 zone
  - commits cce95b9, e2e9243 and e82da97: Improvements to the
    config-file parsing (Aki Tuomi)
  - commit 2180e21: postgresql check should not touch LDFLAGS
    (Ruben Kerkhof)
  - commit 0481021: Log error when remote cannot do AXFR (Aki
    Tuomi)
  - commit 1ecc3a5: Speed improvements when AXFR is disabled
    (Christian Hofstaedtler)
  - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not
    part of the dnstree (Kees Monshouwer)
  - commits dd943dd and 58c4834: Change ifdef to check for
    __GLIBC__ instead of __linux__ to prevent errors with other
    libc's (James Taylor)
  - commit c929d50: Try to raise open files before dropping
    privileges (Aki Tuomi)
  - commit 69fd3dc: Add newline to carbon error message on auth
    (Aki Tuomi)
  - commit 3064f80: Make sure we send servfail on error (Aki Tuomi)
  - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof)
  - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing
    stack usage
  - commit 267fdde: throw if getSOA gets non-SOA record</changelog>
<changelog author="mrueckert@suse.de" date="1430136000">- no longer ship dnsdist here, we will ship a new package based on
  the snapshots from http://dnsdist.org/</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.4.5
  Bug fixes:
  * be careful reading empty lines in our config parser and prevent
  integer overflow.
  * prevent crash after --list-modules (Ruben Kerkhof)
  * Limit the maximum length of a qname
  Improvements:
  * Support /etc/default for our debian/ubuntu packages (Aki Tuomi)
  * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof)
  * Various PKCS#11 fixes and improvements (Aki Tuomi)
  * Several fixes for building on OpenBSD (Florian Obser)
  * Fix several issues found by Coverity (Aki Tuomi)
  * Look for mbedtls before polarssl (Ruben Kerkhof)
  * Detect Lua on OpenBSD (Ruben Kerkhof)
  * Let pkg-config determine botan dependency libs (Ruben Kerkhof)
  * kill some further mallocs and add note to remind us not to add them back
  * Move remotebackend-unix test socket to testsdir (Aki Tuomi)
  * Defer launch of coprocess until first question (Aki Tuomi)
  * pdnssec: check for glue and delegations in parent zones (Kees
  Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1441195200">- update to 3.4.6 [boo#943078] CVE-2015-5230
  Bug fixes:
  * Avoid superfluous backend recycling
  * Removal of dnsdist from the authoritative server distribution
  * Add EDNS unknown version handling and tests EDNS unknown version
  handling
  Improvements:
  * Update YaHTTP to v0.1.7
  * Make trailing/leading spaces stand out in pdnssec check_zone
  * GCC 5.2 support and sync boost.m4 macro with upstream
  * Log answer packets only if log-dns-details is enabled</changelog>
<changelog author="michael@stroeder.com" date="1446552000">- update to 3.4.7
  Bug fixes:
  * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
  * Don't reply to truncated queries (Christian Hofstaedtler)
  * don't log out-of-zone ents during AXFR in (Kees Monshouwer)
  * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien
  Cauquil at Sysdream for pointing this out.
  * Handle NULL and boolean properly in gPGSql (Aki Tuomi)
  * Improve negative caching (Kees Monshouwer)
  * Do not divide timeout twice (Aki Tuomi)
  * Correctly sort records with a priority.
  Improvements:
  * Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
  * Use token names to identify PKCS#11 keys (Aki Tuomi)
  * Fix typo in an error message (Arjen Zonneveld)
  * limit NSEC3 iterations in bindbackend (Kees Monshouwer)
  * Initialize minbody (Aki Tuomi)
  New features:
  * OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
  * add global soa-edit settings (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1454500800">- update to 3.4.8
  * Use AC_SEARCH_LIBS (Ruben Kerkhof)
  * Check for inet_aton in libresolv (Ruben Kerkhof)
  * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
  * pdnssec: don't check disabled records (Pieter Lexis)
  * pdnssec: check all records (including disabled ones)
    only in verbose mode (Kees Monshouwer)
  * traling dot in DNAME content (Kees Monshouwer)
  * Fix luabackend compilation on FreeBSD i386 (RvdE)
  * silence g++ 6.0 warnings and error (Kees Monshouwer)
  * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)</changelog>
<changelog author="michael@stroeder.com" date="1464523200">- update to 3.4.9
  * use OpenSSL for ECDSA signing where available
  * allow common signing key
  * Add a disable-syslog setting
  * fix SOA caching with multiple backends
  * whitespace-related zone parsing fixes [ticket #3568]
  * bindbackend: fix, set domain in list()</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - remotebackend split out now
  - enabled experimental_gss_tsig support
  - enabled protobuf based stats support
  - no more xdb and lmdb backend
  - added odbc backend where supported
- drop pdns-3.4.0-no_date_time.patch: replaced with
  - -enable-reproducible</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
<changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
<changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
<changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15091-4.0.4.patch: An issue has been found in the API
  component of PowerDNS Authoritative, where some operations that
  have an impact on the state of the server are still allowed even
  though the API has been configured as read-only. This missing
  check allows an attacker with valid API credentials could flush
  the cache, trigger a zone transfer or send a NOTIFY.
  (bnc#1069242, CVE-2017-15091)</changelog>

</package>
<package pkgid="65d43f434ebc8d3ea5e6604bed6eceab34d29a92ef4302a1ebc55fff7857aee4" name="pdns-recursor" arch="src">
    <version epoch="0" ver="4.0.5" rel="3.1"/>

<changelog author="mrueckert@suse.de" date="1410436800">- added systemd support for 12.3 and newer</changelog>
<changelog author="mrueckert@suse.de" date="1414497600">- sync permissions/ownership of home and config dir with the pdns
  package</changelog>
<changelog author="michael@stroeder.com" date="1414670400">- update to upstream release 3.6.2 (boo# 906583) CVE-2014-8601
  This is a bugfix update to 3.6.1.
  A list of changes since 3.6.1 follows.
  * gab14b4f: expedite servfail generation for ezdns-like
    failures (fully abort query resolving if we hit more than
    50 outqueries)
  * g42025be: PowerDNS now polls the security status of a
    release at startup and periodically. More detail on this
    feature, and how to turn it off, can be found in Section 2,
    "Security polling".
  * g5027429: We did not transmit the right 'local' socket
    address to Lua for TCP/IP queries in the recursor. In
    addition, we would attempt to lookup a filedescriptor that
    wasn't there in an unlocked map which could conceivably
    lead to crashes. Closes t1828, thanks Winfried for
    reporting
  * g752756c: Sync embedded yahttp copy. API: Replace HTTP
    Basic auth with static key in custom header
  * g6fdd40d: add missing #include &lt;pthread.h&gt; to
    rec-channel.hh (this fixes building on OS X).</changelog>
<changelog author="michael@stroeder.com" date="1415534400">- Fixed broken _localstatedir</changelog>
<changelog author="mrueckert@suse.de" date="1423742400">- update to 3.7.1
  This version contains a mix of speedups and improvements, the combined effect
  of which is vastly improved resilience against traffic spikes and malicious
  query overloads.
  Minor changes:
  - Removal of dead code here and there
    04dc6d618734fc630122de4c56dff641ebaf0988
  - Per-qtype response counters are now 64 bit
    297bb6acf7902068693a4aae1443c424d0e8dd52 on 64 bit systems
  - Add IPv6 addresses for b and c.root-servers.net hints
    efc2595423c9a1be6f2d8f4da25445198ceb8b57
  - Add IP address to logging about terminated queries
    37aa9904d1cc967ba4b5d5e17dbe41485f8cdece
  - Improve qtype name logging
    fab3ed3453e15ae88e29a0e4071b214eb19caad9 (Aki Tuomi)
  - Redefine 'BAD_NETS' for dont-query based on newer IANA guidance
    12cd44ee0fcde5893f85dccc499bfc35152c5fff (lochiiconnectivity)
  - Add documentation links to systemd unit
    eb154adfdffa5c78624e2ea98e938d7b5787119e (Ruben Kerkhof)
  Improvements:
  - Upgrade embedded PolarSSL to 1.3.9:
    d330a2ea1a93d7675ef680311f8aa0306aeefcf1
  - yahttp upgrade c290975778942ed1082ca66918695a5bd2d6bac4
    c65a57e888ee48eaa948e590c90c51420bffa847 (Aki Tuomi)
  - Replace . in hostnames by - for Carbon so as not to confuse
    Metronome 46541751ed1c3bc051d78217543d5fc76733e212
  - Manpages got a lot of love and are now built from Markdown
    (Pieter Lexis)
  - Move to PolarSSL base64
    488360551009784ab35c43ee4580e773a2a8a227 (Kees Monshouwer)
  - The quiet=no query logging is now more informative
    461df9d20c560d240285f772c09b3beb89d46daa
  - We can finally bind to 0.0.0.0 and :: and guarantee answers
    from the correct source
    b71b60ee73ef3c86f80a2179981eda2e61c4363f
  - We use per-packet timestamps to drop ancient traffic in case of
    overload b71b60ee73ef3c86f80a2179981eda2e61c4363f, non-Linux
    portability in d63f0d83631c41eff203d30b0b7c475a88f1db59
  - Builtin webserver can be queried with the API key in the URL
    again c89f8cd022c4a9409b95d22ffa3b03e4e98dc400
  - Ringbuffers are now available via API
    c89f8cd022c4a9409b95d22ffa3b03e4e98dc400
  - Lua 5.3 compatibility 59c6fc3e3931ca87d484337daee512e716bc4cf4
    (Kees Monshouwer)
  - No longer leave a stale UNIX domain socket around from
    rec_control if the recursor was down
    524e4f4d81f4ed9eb218715cbc8a59f0b9868234, ticket #2061
  - Running with 'quiet=no' would strangely actually prevent debug
    messages from being logged
    f48d7b657ec32517f8bfcada3bfe6353ca313314
  - Webserver now implements CORS for the API
    ea89a97e864c43c1cb03f2959ad04c4ebe7580ad, fixing ticket #1984
  - Houskeeping thread would sometimes run multiple times
    simultaneously, which worked, but was odd
    cc59bce675e62e2b9657b42614ce8be3312cae82
  New features:
  - New `root-nx-trust` flag makes PowerDNS generalize NXDOMAIN
    responses from the root-servers
    01402d56846a3a61811ebd4e6bc97e53f908e568
  - `getregisteredname()` for Lua, which turns 'www.bbc.co.uk' into
    'bbc.co.uk' 8cd4851beb78bc6ab320926fb5cb6a09282016b1
  - Lua preoutquery filter 3457a2a0ec41d3b3aff7640f30008788e1228a6e
  - Lua IP-based filter (ipfilter) before parsing packets
    4ea949413c495254acb0bd19335142761c1efc0c
  - `iputils` class for Lua, to quickly process IP addresses and
    netmasks in their native format
  - `getregisteredname` function for Lua, to find the registered
    domain for a given name
  - Various new ringbuffers: top-servfail-remotes,
    top-largeanswer-remotes, top-servfail-queries
  Speedups:
  - Remove unneeded malloc traffic
    93d4a89096e64d53740790f58fadec56f6a0af14
    8682c32bc45b6ffa7c0f6da778e1b223ae7f03ce
    a903b39cfe7364c56324038264d3db50b8cece87
  - Our nameserver-loop detection carried around a lot of baggage
    for complex domain names, plus did not differentiate IPv4 and
    IPv6 well enough 891fbf888ccac074e3edc38864641ca774f2f03c
  - Prioritize new queries over nameserver responses, improving
    latency under query bursts
    bf3b0cec366c090af000b066267b6f6bbb3a512a
  - Remove escaping in case there was nothing to escape
    83b746fd1d94c8742d8bd87a44beb44c154230c7
  - Our logging infrastructure had a lot of locking
    d1449e4d073595e1e1581804f121fc90e37158bf
  - Reduce logging level of certain common messages, which locked
    up synchronously logging systems
    854d44e31c76aa650520e6d462dd3a02b5936f7a
  - Add limit on total wall-clock time spent on a query
    9de3e0340fa066d4c59449e1643a1de8c343f8f2
  - Packet cache is now case-insensitive, which increases hitrate
    90974597aadaf1096e3fd0dc450be7422ea591a5
  Security relevant:
  - Check for PIE, RELRO and stack protector during configure
    8d0354b189c12e1e14f5309d3b49935c17f9eeb0 (Aki Tuomi)
  - Testing for support of PIE etc was improved in
    b2053c28ccb9609e2ce7bcb6beda83f98a062aa3 and beyond, fixes
    [#2125] (Ruben Kerkhof)
  - Max query-per-query limit (max-qperq) is now configurable
    173d790ead08f67733010ca4c6fc404a040fe699
  Bugs fixed:
  - IPv6 outgoing queries had a disproportionate effect on our
    query load. Fixed in 76f190f2a0877cd79ede2994124c1a58dc69ae49
    and beyond.
  - rec_control gave incorrect output on a timeout
    12997e9d800734da51b808767e1e2477244c30eb
  - When using the webserver AND having an error in the Lua script,
    recursor could crash during startup
    62f0ae62984adadab687c23fe1b287c1f219b2cb
  - Hugely long version strings would trip up security polling
    18b7333828a1275ae5f5574a9c8330290d8557ff (Kees Monshouwer)
  - The 'remotes' ringbuffer was sized incorrectly
    f8f243b01215d6adcb59389f09ef494f1309041f
  - Cache sizes had an off-by-one scaling problem, with the wrong
    number of entries allocated per thread
    f8f243b01215d6adcb59389f09ef494f1309041f
  - Our automatic file descriptor limit raising was attempted
  * after* setuid, which made it a lot less effective. Found and
    fixed by Aki Tuomi a6414fdce9b0ec32c340d1f2eea2254f3fedc1c1
  - Timestamps used for dropping packets were occasionaly wrong
    183eb8774e4bc2569f06d5894fec65740f4b70b6 and
    4c4765c104bacc146533217bcc843efb244a8086 (RC2) with thanks to
    Winfried for debugging.
  - In RC1, our new DoS protection measures would crash the
    Recursor if too many root servers were unreachable.
    6a6fb05ad81c519b4002ed1db00f3ed9b7bce6b4. Debugging and testing
    by Fusl.
- remove pdns-rec-lua52.patch:
  no longer needed</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.7.2 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit adb10be commit 3ec3e0f commit dc02ebf Fix handling of
    forward references in label compressed packets; fixes
    CVE-2015-1868
  - commit a7be3f1: make sure we never call sendmsg with
    msg_control!=NULL &amp;&amp; msg_controllen&gt;0. Fixes ticket #2227
  - commit 9d835ed: Improve robustness of root-nx-trust.
  Improvements:
  - commit 99c595b: Silence warnings that always occur on FreeBSD
    (Ruben Kerkhof)</changelog>
<changelog author="mrueckert@suse.de" date="1430308800">- call systemd-tmpfiles during installation</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.7.3 will prevent short bursts of high
  resource usage with malformed qnames.</changelog>
<changelog author="mrueckert@suse.de" date="1437480000">- do not use /run/pdns instead of /var/run/pdns in the init script
  for the rest we have the systemd unit file</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-recursor-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - enabled protobuf based stats
  - enabled botan based code
  - use upstream systemd files</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4119 Improve DNSSEC record skipping for non dnssec queries
    (Kees Monshouwer)
  - #4162 Don't validate zones from the local auth store, go one
    level down while validating when there is a CNAME
  - #4187:
  - Don't go bogus on islands of security
  - Check all possible chains for Insecures
  - Don't go Bogus on a CNAME at the apex
  - #4215 RPZ: default policy should also override local data RRs
  - #4243 Fix a crash when the next name in a chained query is
    empty and rec_control current-queries is invoked
  Improvements
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4140 Fix warnings with gcc on musl-libc (James Taylor)
  - #4160 Also validate on +DO
  - #4164 Fail to start when the lua-dns-script does not exist
  - #4168 Add more Netmask methods for Lua (Aki Tuomi)
  - #4210 Validate DNSSEC for security polling
  - #4217 Turn on root-nx-trust by default and
    log-common-errors=off
  - #4207 Allow for multiple trust anchors per zone
  - #4242 Fix compilation warning when building without Protobuf
  - #4133 Add limits to the size of received {A,I}XFR
    (CVE-2016-6172)</changelog>
<changelog author="michael@stroeder.com" date="1472990400">- update to 4.0.2
  Bug fixes
  - #4264: Set dq.rcode before calling postresolve
  - #4294: Honor PIE flags.
  - #4310: Fix build with LibreSSL, for which
    OPENSSL_VERSION_NUMBER is irrelevant
  - #4340: Don't shuffle CNAME records. (thanks to Gert van Dijk
    for the extensive bug report!)
  - #4354: Fix delegation-only
  Additions and enhancements
  - #4288: Respect the timeout when connecting to a protobuf server
  - #4300: allow newDN to take a DNSName in; document missing
    methods
  - #4301: expose SMN toString to lua
  - #4318: Anonymize the protobuf ECS value as well (thanks to Kai
    Storbeck of XS4All for finding this)
  - #4324: Allow Lua access to the result of the Policy Engine
    decision, skip RPZ, finish RPZ implementation
  - #4349: Remove unused DNSPacket::d_qlen
  - #4351: RPZ: Use query-local-address(6) by default (thanks to
    Oli Schacher of switch.ch for the bug report)
  - #4357: Move the root DNSSEC data to a header file</changelog>
<changelog author="mrueckert@suse.de" date="1473163200">- update to 4.0.3
  A new release for the PowerDNS Recursor with version 4.0.3 is
  available. This release has many fixes and improvements in the
  Policy Engine (RPZ) and the Lua bindings to it. Therefore, we
  recommend users of RPZ to upgrade to this release. We would like
  to thank Wim (42wim on github) for testing and reporting on the
  RPZ module.
  Bug fixes
  - #4350: Call gettag() for TCP queries
  - #4376: Fix the use of an uninitialized filtering policy
  - #4381: Parse query-local-address before lua-config-file
  - #4383: Fix accessing an empty policyCustom, policyName from Lua
  - #4387: ComboAddress: don?t allow invalid ports
  - #4388: Fix RPZ default policy not being applied over IXFR
  - #4391: DNSSEC: Actually follow RFC 7646 §2.1
  - #4396: Add boost context ldflags so freebsd builds can find the
    libs
  - #4402: Ignore NS records in a RPZ zone received over IXFR
  - #4403: Fix build with OpenSSL 1.1.0 final
  - #4404: Don?t validate when a Lua hook took the query
  - #4425: Fix a protobuf regression (requestor/responder mix-up)
  Additions and Enhancements
  - #4394: Support Boost 1.61+ fcontext
  - #4402: Add Lua binding for DNSRecord::d_place</changelog>
<changelog author="adam.majer@suse.de" date="1473768000">- 4462.patch:
  Disable fcontext usage with Boost 1.61+ and revert back to
  slower SystemV ucontext. This fixes failure to build with
  newer Boost version. (boo#998408)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to version 4.0.4
  The following security advisories were fixed
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-2120, boo#1018329)
  complete changeset is availalbe at,
  https://doc.powerdns.com/md/changelog/#powerdns-recursor-404
- remove 4462.patch: in upstream release.</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel
- add signature file for upstream release</changelog>
<changelog author="mrueckert@suse.de" date="1494504000">- move autoreconf into the build section</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- update to version 4.0.5
  + adds ed25519 (algorithm 15) support for DNSSEC
  + adds the 2017 DNSSEC root key
  + complete changeset is available at,
  https://doc.powerdns.com/md/changelog/#powerdns-recursor-405</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15090-4.0.6.patch: An issue has been found in the
  DNSSEC validation component of PowerDNS Recursor, where the
  signatures might have been accepted as valid even if the signed
  data was not in bailiwick of the DNSKEY used to sign it. This
  allows an attacker in position of man-in-the-middle to alter
  the content of records by issuing a valid signature for the
  crafted records. (bnc#1069242, CVE-2017-15090)
- CVE-2017-15092-4.0.6.patch: An issue has been found in the web
  interface of PowerDNS Recursor, where the qname of DNS queries
  was displayed without any escaping, allowing a remote attacker
  to inject HTML and Javascript code into the web interface,
  altering the content. (bnc#1069242, CVE-2017-15092)
- CVE-2017-15093-4.0.6.patch: When `api-config-dir` is set to a
  non-empty value, which is not the case by default, the API
  allows an authorized user to update the Recursor's ACL by
  adding and removing netmasks, and to configure forward zones.
  It was discovered that the new netmask and IP addresses of
  forwarded zones were not sufficiently validated, allowing an
  authenticated user to inject new configuration directives into
  the Recursor's configuration. (bnc#1069242, CVE-2017-15093)
- CVE-2017-15094-4.0.6.patch: An issue has been found in the
  DNSSEC parsing code of PowerDNS Recursor during a code audit by
  Nixu, leading to a memory leak when parsing specially crafted
  DNSSEC ECDSA keys. (bnc#1069242, CVE-2017-15094)</changelog>

</package>
<package pkgid="3593c9c0b9c36c678737559dfa1455f054c7dc72120ec6ce95275a3c1f57e732" name="pdns-recursor" arch="src">
    <version epoch="0" ver="4.0.5" rel="6.1"/>

<changelog author="mrueckert@suse.de" date="1414497600">- sync permissions/ownership of home and config dir with the pdns
  package</changelog>
<changelog author="michael@stroeder.com" date="1414670400">- update to upstream release 3.6.2 (boo# 906583) CVE-2014-8601
  This is a bugfix update to 3.6.1.
  A list of changes since 3.6.1 follows.
  * gab14b4f: expedite servfail generation for ezdns-like
    failures (fully abort query resolving if we hit more than
    50 outqueries)
  * g42025be: PowerDNS now polls the security status of a
    release at startup and periodically. More detail on this
    feature, and how to turn it off, can be found in Section 2,
    "Security polling".
  * g5027429: We did not transmit the right 'local' socket
    address to Lua for TCP/IP queries in the recursor. In
    addition, we would attempt to lookup a filedescriptor that
    wasn't there in an unlocked map which could conceivably
    lead to crashes. Closes t1828, thanks Winfried for
    reporting
  * g752756c: Sync embedded yahttp copy. API: Replace HTTP
    Basic auth with static key in custom header
  * g6fdd40d: add missing #include &lt;pthread.h&gt; to
    rec-channel.hh (this fixes building on OS X).</changelog>
<changelog author="michael@stroeder.com" date="1415534400">- Fixed broken _localstatedir</changelog>
<changelog author="mrueckert@suse.de" date="1423742400">- update to 3.7.1
  This version contains a mix of speedups and improvements, the combined effect
  of which is vastly improved resilience against traffic spikes and malicious
  query overloads.
  Minor changes:
  - Removal of dead code here and there
    04dc6d618734fc630122de4c56dff641ebaf0988
  - Per-qtype response counters are now 64 bit
    297bb6acf7902068693a4aae1443c424d0e8dd52 on 64 bit systems
  - Add IPv6 addresses for b and c.root-servers.net hints
    efc2595423c9a1be6f2d8f4da25445198ceb8b57
  - Add IP address to logging about terminated queries
    37aa9904d1cc967ba4b5d5e17dbe41485f8cdece
  - Improve qtype name logging
    fab3ed3453e15ae88e29a0e4071b214eb19caad9 (Aki Tuomi)
  - Redefine 'BAD_NETS' for dont-query based on newer IANA guidance
    12cd44ee0fcde5893f85dccc499bfc35152c5fff (lochiiconnectivity)
  - Add documentation links to systemd unit
    eb154adfdffa5c78624e2ea98e938d7b5787119e (Ruben Kerkhof)
  Improvements:
  - Upgrade embedded PolarSSL to 1.3.9:
    d330a2ea1a93d7675ef680311f8aa0306aeefcf1
  - yahttp upgrade c290975778942ed1082ca66918695a5bd2d6bac4
    c65a57e888ee48eaa948e590c90c51420bffa847 (Aki Tuomi)
  - Replace . in hostnames by - for Carbon so as not to confuse
    Metronome 46541751ed1c3bc051d78217543d5fc76733e212
  - Manpages got a lot of love and are now built from Markdown
    (Pieter Lexis)
  - Move to PolarSSL base64
    488360551009784ab35c43ee4580e773a2a8a227 (Kees Monshouwer)
  - The quiet=no query logging is now more informative
    461df9d20c560d240285f772c09b3beb89d46daa
  - We can finally bind to 0.0.0.0 and :: and guarantee answers
    from the correct source
    b71b60ee73ef3c86f80a2179981eda2e61c4363f
  - We use per-packet timestamps to drop ancient traffic in case of
    overload b71b60ee73ef3c86f80a2179981eda2e61c4363f, non-Linux
    portability in d63f0d83631c41eff203d30b0b7c475a88f1db59
  - Builtin webserver can be queried with the API key in the URL
    again c89f8cd022c4a9409b95d22ffa3b03e4e98dc400
  - Ringbuffers are now available via API
    c89f8cd022c4a9409b95d22ffa3b03e4e98dc400
  - Lua 5.3 compatibility 59c6fc3e3931ca87d484337daee512e716bc4cf4
    (Kees Monshouwer)
  - No longer leave a stale UNIX domain socket around from
    rec_control if the recursor was down
    524e4f4d81f4ed9eb218715cbc8a59f0b9868234, ticket #2061
  - Running with 'quiet=no' would strangely actually prevent debug
    messages from being logged
    f48d7b657ec32517f8bfcada3bfe6353ca313314
  - Webserver now implements CORS for the API
    ea89a97e864c43c1cb03f2959ad04c4ebe7580ad, fixing ticket #1984
  - Houskeeping thread would sometimes run multiple times
    simultaneously, which worked, but was odd
    cc59bce675e62e2b9657b42614ce8be3312cae82
  New features:
  - New `root-nx-trust` flag makes PowerDNS generalize NXDOMAIN
    responses from the root-servers
    01402d56846a3a61811ebd4e6bc97e53f908e568
  - `getregisteredname()` for Lua, which turns 'www.bbc.co.uk' into
    'bbc.co.uk' 8cd4851beb78bc6ab320926fb5cb6a09282016b1
  - Lua preoutquery filter 3457a2a0ec41d3b3aff7640f30008788e1228a6e
  - Lua IP-based filter (ipfilter) before parsing packets
    4ea949413c495254acb0bd19335142761c1efc0c
  - `iputils` class for Lua, to quickly process IP addresses and
    netmasks in their native format
  - `getregisteredname` function for Lua, to find the registered
    domain for a given name
  - Various new ringbuffers: top-servfail-remotes,
    top-largeanswer-remotes, top-servfail-queries
  Speedups:
  - Remove unneeded malloc traffic
    93d4a89096e64d53740790f58fadec56f6a0af14
    8682c32bc45b6ffa7c0f6da778e1b223ae7f03ce
    a903b39cfe7364c56324038264d3db50b8cece87
  - Our nameserver-loop detection carried around a lot of baggage
    for complex domain names, plus did not differentiate IPv4 and
    IPv6 well enough 891fbf888ccac074e3edc38864641ca774f2f03c
  - Prioritize new queries over nameserver responses, improving
    latency under query bursts
    bf3b0cec366c090af000b066267b6f6bbb3a512a
  - Remove escaping in case there was nothing to escape
    83b746fd1d94c8742d8bd87a44beb44c154230c7
  - Our logging infrastructure had a lot of locking
    d1449e4d073595e1e1581804f121fc90e37158bf
  - Reduce logging level of certain common messages, which locked
    up synchronously logging systems
    854d44e31c76aa650520e6d462dd3a02b5936f7a
  - Add limit on total wall-clock time spent on a query
    9de3e0340fa066d4c59449e1643a1de8c343f8f2
  - Packet cache is now case-insensitive, which increases hitrate
    90974597aadaf1096e3fd0dc450be7422ea591a5
  Security relevant:
  - Check for PIE, RELRO and stack protector during configure
    8d0354b189c12e1e14f5309d3b49935c17f9eeb0 (Aki Tuomi)
  - Testing for support of PIE etc was improved in
    b2053c28ccb9609e2ce7bcb6beda83f98a062aa3 and beyond, fixes
    [#2125] (Ruben Kerkhof)
  - Max query-per-query limit (max-qperq) is now configurable
    173d790ead08f67733010ca4c6fc404a040fe699
  Bugs fixed:
  - IPv6 outgoing queries had a disproportionate effect on our
    query load. Fixed in 76f190f2a0877cd79ede2994124c1a58dc69ae49
    and beyond.
  - rec_control gave incorrect output on a timeout
    12997e9d800734da51b808767e1e2477244c30eb
  - When using the webserver AND having an error in the Lua script,
    recursor could crash during startup
    62f0ae62984adadab687c23fe1b287c1f219b2cb
  - Hugely long version strings would trip up security polling
    18b7333828a1275ae5f5574a9c8330290d8557ff (Kees Monshouwer)
  - The 'remotes' ringbuffer was sized incorrectly
    f8f243b01215d6adcb59389f09ef494f1309041f
  - Cache sizes had an off-by-one scaling problem, with the wrong
    number of entries allocated per thread
    f8f243b01215d6adcb59389f09ef494f1309041f
  - Our automatic file descriptor limit raising was attempted
  * after* setuid, which made it a lot less effective. Found and
    fixed by Aki Tuomi a6414fdce9b0ec32c340d1f2eea2254f3fedc1c1
  - Timestamps used for dropping packets were occasionaly wrong
    183eb8774e4bc2569f06d5894fec65740f4b70b6 and
    4c4765c104bacc146533217bcc843efb244a8086 (RC2) with thanks to
    Winfried for debugging.
  - In RC1, our new DoS protection measures would crash the
    Recursor if too many root servers were unreachable.
    6a6fb05ad81c519b4002ed1db00f3ed9b7bce6b4. Debugging and testing
    by Fusl.
- remove pdns-rec-lua52.patch:
  no longer needed</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.7.2 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit adb10be commit 3ec3e0f commit dc02ebf Fix handling of
    forward references in label compressed packets; fixes
    CVE-2015-1868
  - commit a7be3f1: make sure we never call sendmsg with
    msg_control!=NULL &amp;&amp; msg_controllen&gt;0. Fixes ticket #2227
  - commit 9d835ed: Improve robustness of root-nx-trust.
  Improvements:
  - commit 99c595b: Silence warnings that always occur on FreeBSD
    (Ruben Kerkhof)</changelog>
<changelog author="mrueckert@suse.de" date="1430308800">- call systemd-tmpfiles during installation</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.7.3 will prevent short bursts of high
  resource usage with malformed qnames.</changelog>
<changelog author="mrueckert@suse.de" date="1437480000">- do not use /run/pdns instead of /var/run/pdns in the init script
  for the rest we have the systemd unit file</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-recursor-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - enabled protobuf based stats
  - enabled botan based code
  - use upstream systemd files</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4119 Improve DNSSEC record skipping for non dnssec queries
    (Kees Monshouwer)
  - #4162 Don't validate zones from the local auth store, go one
    level down while validating when there is a CNAME
  - #4187:
  - Don't go bogus on islands of security
  - Check all possible chains for Insecures
  - Don't go Bogus on a CNAME at the apex
  - #4215 RPZ: default policy should also override local data RRs
  - #4243 Fix a crash when the next name in a chained query is
    empty and rec_control current-queries is invoked
  Improvements
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4140 Fix warnings with gcc on musl-libc (James Taylor)
  - #4160 Also validate on +DO
  - #4164 Fail to start when the lua-dns-script does not exist
  - #4168 Add more Netmask methods for Lua (Aki Tuomi)
  - #4210 Validate DNSSEC for security polling
  - #4217 Turn on root-nx-trust by default and
    log-common-errors=off
  - #4207 Allow for multiple trust anchors per zone
  - #4242 Fix compilation warning when building without Protobuf
  - #4133 Add limits to the size of received {A,I}XFR
    (CVE-2016-6172)</changelog>
<changelog author="michael@stroeder.com" date="1472990400">- update to 4.0.2
  Bug fixes
  - #4264: Set dq.rcode before calling postresolve
  - #4294: Honor PIE flags.
  - #4310: Fix build with LibreSSL, for which
    OPENSSL_VERSION_NUMBER is irrelevant
  - #4340: Don't shuffle CNAME records. (thanks to Gert van Dijk
    for the extensive bug report!)
  - #4354: Fix delegation-only
  Additions and enhancements
  - #4288: Respect the timeout when connecting to a protobuf server
  - #4300: allow newDN to take a DNSName in; document missing
    methods
  - #4301: expose SMN toString to lua
  - #4318: Anonymize the protobuf ECS value as well (thanks to Kai
    Storbeck of XS4All for finding this)
  - #4324: Allow Lua access to the result of the Policy Engine
    decision, skip RPZ, finish RPZ implementation
  - #4349: Remove unused DNSPacket::d_qlen
  - #4351: RPZ: Use query-local-address(6) by default (thanks to
    Oli Schacher of switch.ch for the bug report)
  - #4357: Move the root DNSSEC data to a header file</changelog>
<changelog author="mrueckert@suse.de" date="1473163200">- update to 4.0.3
  A new release for the PowerDNS Recursor with version 4.0.3 is
  available. This release has many fixes and improvements in the
  Policy Engine (RPZ) and the Lua bindings to it. Therefore, we
  recommend users of RPZ to upgrade to this release. We would like
  to thank Wim (42wim on github) for testing and reporting on the
  RPZ module.
  Bug fixes
  - #4350: Call gettag() for TCP queries
  - #4376: Fix the use of an uninitialized filtering policy
  - #4381: Parse query-local-address before lua-config-file
  - #4383: Fix accessing an empty policyCustom, policyName from Lua
  - #4387: ComboAddress: don?t allow invalid ports
  - #4388: Fix RPZ default policy not being applied over IXFR
  - #4391: DNSSEC: Actually follow RFC 7646 §2.1
  - #4396: Add boost context ldflags so freebsd builds can find the
    libs
  - #4402: Ignore NS records in a RPZ zone received over IXFR
  - #4403: Fix build with OpenSSL 1.1.0 final
  - #4404: Don?t validate when a Lua hook took the query
  - #4425: Fix a protobuf regression (requestor/responder mix-up)
  Additions and Enhancements
  - #4394: Support Boost 1.61+ fcontext
  - #4402: Add Lua binding for DNSRecord::d_place</changelog>
<changelog author="adam.majer@suse.de" date="1473768000">- 4462.patch:
  Disable fcontext usage with Boost 1.61+ and revert back to
  slower SystemV ucontext. This fixes failure to build with
  newer Boost version. (boo#998408)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to version 4.0.4
  The following security advisories were fixed
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-2120, boo#1018329)
  complete changeset is availalbe at,
  https://doc.powerdns.com/md/changelog/#powerdns-recursor-404
- remove 4462.patch: in upstream release.</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel
- add signature file for upstream release</changelog>
<changelog author="mrueckert@suse.de" date="1494504000">- move autoreconf into the build section</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- update to version 4.0.5
  + adds ed25519 (algorithm 15) support for DNSSEC
  + adds the 2017 DNSSEC root key
  + complete changeset is available at,
  https://doc.powerdns.com/md/changelog/#powerdns-recursor-405</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15090-4.0.6.patch: An issue has been found in the
  DNSSEC validation component of PowerDNS Recursor, where the
  signatures might have been accepted as valid even if the signed
  data was not in bailiwick of the DNSKEY used to sign it. This
  allows an attacker in position of man-in-the-middle to alter
  the content of records by issuing a valid signature for the
  crafted records. (bnc#1069242, CVE-2017-15090)
- CVE-2017-15092-4.0.6.patch: An issue has been found in the web
  interface of PowerDNS Recursor, where the qname of DNS queries
  was displayed without any escaping, allowing a remote attacker
  to inject HTML and Javascript code into the web interface,
  altering the content. (bnc#1069242, CVE-2017-15092)
- CVE-2017-15093-4.0.6.patch: When `api-config-dir` is set to a
  non-empty value, which is not the case by default, the API
  allows an authorized user to update the Recursor's ACL by
  adding and removing netmasks, and to configure forward zones.
  It was discovered that the new netmask and IP addresses of
  forwarded zones were not sufficiently validated, allowing an
  authenticated user to inject new configuration directives into
  the Recursor's configuration. (bnc#1069242, CVE-2017-15093)
- CVE-2017-15094-4.0.6.patch: An issue has been found in the
  DNSSEC parsing code of PowerDNS Recursor during a code audit by
  Nixu, leading to a memory leak when parsing specially crafted
  DNSSEC ECDSA keys. (bnc#1069242, CVE-2017-15094)</changelog>
<changelog author="adam.majer@suse.de" date="1512993600">- CVE-2017-15120-4.0.7.patch: parsing error while handling
  authoritative answers containing a CNAME of a different class
  than IN, leading to a recursor crash via a NULL-pointer
  dereference. (bnc#1072170, CVE-2017-15120)</changelog>

</package>
<package pkgid="29a56d3af14c3cb4a29845a3bd0f402ca7bcca457f7dc3e5e99b55be7662fe84" name="pdns-recursor" arch="x86_64">
    <version epoch="0" ver="4.0.5" rel="3.1"/>

<changelog author="mrueckert@suse.de" date="1410436800">- added systemd support for 12.3 and newer</changelog>
<changelog author="mrueckert@suse.de" date="1414497600">- sync permissions/ownership of home and config dir with the pdns
  package</changelog>
<changelog author="michael@stroeder.com" date="1414670400">- update to upstream release 3.6.2 (boo# 906583) CVE-2014-8601
  This is a bugfix update to 3.6.1.
  A list of changes since 3.6.1 follows.
  * gab14b4f: expedite servfail generation for ezdns-like
    failures (fully abort query resolving if we hit more than
    50 outqueries)
  * g42025be: PowerDNS now polls the security status of a
    release at startup and periodically. More detail on this
    feature, and how to turn it off, can be found in Section 2,
    "Security polling".
  * g5027429: We did not transmit the right 'local' socket
    address to Lua for TCP/IP queries in the recursor. In
    addition, we would attempt to lookup a filedescriptor that
    wasn't there in an unlocked map which could conceivably
    lead to crashes. Closes t1828, thanks Winfried for
    reporting
  * g752756c: Sync embedded yahttp copy. API: Replace HTTP
    Basic auth with static key in custom header
  * g6fdd40d: add missing #include &lt;pthread.h&gt; to
    rec-channel.hh (this fixes building on OS X).</changelog>
<changelog author="michael@stroeder.com" date="1415534400">- Fixed broken _localstatedir</changelog>
<changelog author="mrueckert@suse.de" date="1423742400">- update to 3.7.1
  This version contains a mix of speedups and improvements, the combined effect
  of which is vastly improved resilience against traffic spikes and malicious
  query overloads.
  Minor changes:
  - Removal of dead code here and there
    04dc6d618734fc630122de4c56dff641ebaf0988
  - Per-qtype response counters are now 64 bit
    297bb6acf7902068693a4aae1443c424d0e8dd52 on 64 bit systems
  - Add IPv6 addresses for b and c.root-servers.net hints
    efc2595423c9a1be6f2d8f4da25445198ceb8b57
  - Add IP address to logging about terminated queries
    37aa9904d1cc967ba4b5d5e17dbe41485f8cdece
  - Improve qtype name logging
    fab3ed3453e15ae88e29a0e4071b214eb19caad9 (Aki Tuomi)
  - Redefine 'BAD_NETS' for dont-query based on newer IANA guidance
    12cd44ee0fcde5893f85dccc499bfc35152c5fff (lochiiconnectivity)
  - Add documentation links to systemd unit
    eb154adfdffa5c78624e2ea98e938d7b5787119e (Ruben Kerkhof)
  Improvements:
  - Upgrade embedded PolarSSL to 1.3.9:
    d330a2ea1a93d7675ef680311f8aa0306aeefcf1
  - yahttp upgrade c290975778942ed1082ca66918695a5bd2d6bac4
    c65a57e888ee48eaa948e590c90c51420bffa847 (Aki Tuomi)
  - Replace . in hostnames by - for Carbon so as not to confuse
    Metronome 46541751ed1c3bc051d78217543d5fc76733e212
  - Manpages got a lot of love and are now built from Markdown
    (Pieter Lexis)
  - Move to PolarSSL base64
    488360551009784ab35c43ee4580e773a2a8a227 (Kees Monshouwer)
  - The quiet=no query logging is now more informative
    461df9d20c560d240285f772c09b3beb89d46daa
  - We can finally bind to 0.0.0.0 and :: and guarantee answers
    from the correct source
    b71b60ee73ef3c86f80a2179981eda2e61c4363f
  - We use per-packet timestamps to drop ancient traffic in case of
    overload b71b60ee73ef3c86f80a2179981eda2e61c4363f, non-Linux
    portability in d63f0d83631c41eff203d30b0b7c475a88f1db59
  - Builtin webserver can be queried with the API key in the URL
    again c89f8cd022c4a9409b95d22ffa3b03e4e98dc400
  - Ringbuffers are now available via API
    c89f8cd022c4a9409b95d22ffa3b03e4e98dc400
  - Lua 5.3 compatibility 59c6fc3e3931ca87d484337daee512e716bc4cf4
    (Kees Monshouwer)
  - No longer leave a stale UNIX domain socket around from
    rec_control if the recursor was down
    524e4f4d81f4ed9eb218715cbc8a59f0b9868234, ticket #2061
  - Running with 'quiet=no' would strangely actually prevent debug
    messages from being logged
    f48d7b657ec32517f8bfcada3bfe6353ca313314
  - Webserver now implements CORS for the API
    ea89a97e864c43c1cb03f2959ad04c4ebe7580ad, fixing ticket #1984
  - Houskeeping thread would sometimes run multiple times
    simultaneously, which worked, but was odd
    cc59bce675e62e2b9657b42614ce8be3312cae82
  New features:
  - New `root-nx-trust` flag makes PowerDNS generalize NXDOMAIN
    responses from the root-servers
    01402d56846a3a61811ebd4e6bc97e53f908e568
  - `getregisteredname()` for Lua, which turns 'www.bbc.co.uk' into
    'bbc.co.uk' 8cd4851beb78bc6ab320926fb5cb6a09282016b1
  - Lua preoutquery filter 3457a2a0ec41d3b3aff7640f30008788e1228a6e
  - Lua IP-based filter (ipfilter) before parsing packets
    4ea949413c495254acb0bd19335142761c1efc0c
  - `iputils` class for Lua, to quickly process IP addresses and
    netmasks in their native format
  - `getregisteredname` function for Lua, to find the registered
    domain for a given name
  - Various new ringbuffers: top-servfail-remotes,
    top-largeanswer-remotes, top-servfail-queries
  Speedups:
  - Remove unneeded malloc traffic
    93d4a89096e64d53740790f58fadec56f6a0af14
    8682c32bc45b6ffa7c0f6da778e1b223ae7f03ce
    a903b39cfe7364c56324038264d3db50b8cece87
  - Our nameserver-loop detection carried around a lot of baggage
    for complex domain names, plus did not differentiate IPv4 and
    IPv6 well enough 891fbf888ccac074e3edc38864641ca774f2f03c
  - Prioritize new queries over nameserver responses, improving
    latency under query bursts
    bf3b0cec366c090af000b066267b6f6bbb3a512a
  - Remove escaping in case there was nothing to escape
    83b746fd1d94c8742d8bd87a44beb44c154230c7
  - Our logging infrastructure had a lot of locking
    d1449e4d073595e1e1581804f121fc90e37158bf
  - Reduce logging level of certain common messages, which locked
    up synchronously logging systems
    854d44e31c76aa650520e6d462dd3a02b5936f7a
  - Add limit on total wall-clock time spent on a query
    9de3e0340fa066d4c59449e1643a1de8c343f8f2
  - Packet cache is now case-insensitive, which increases hitrate
    90974597aadaf1096e3fd0dc450be7422ea591a5
  Security relevant:
  - Check for PIE, RELRO and stack protector during configure
    8d0354b189c12e1e14f5309d3b49935c17f9eeb0 (Aki Tuomi)
  - Testing for support of PIE etc was improved in
    b2053c28ccb9609e2ce7bcb6beda83f98a062aa3 and beyond, fixes
    [#2125] (Ruben Kerkhof)
  - Max query-per-query limit (max-qperq) is now configurable
    173d790ead08f67733010ca4c6fc404a040fe699
  Bugs fixed:
  - IPv6 outgoing queries had a disproportionate effect on our
    query load. Fixed in 76f190f2a0877cd79ede2994124c1a58dc69ae49
    and beyond.
  - rec_control gave incorrect output on a timeout
    12997e9d800734da51b808767e1e2477244c30eb
  - When using the webserver AND having an error in the Lua script,
    recursor could crash during startup
    62f0ae62984adadab687c23fe1b287c1f219b2cb
  - Hugely long version strings would trip up security polling
    18b7333828a1275ae5f5574a9c8330290d8557ff (Kees Monshouwer)
  - The 'remotes' ringbuffer was sized incorrectly
    f8f243b01215d6adcb59389f09ef494f1309041f
  - Cache sizes had an off-by-one scaling problem, with the wrong
    number of entries allocated per thread
    f8f243b01215d6adcb59389f09ef494f1309041f
  - Our automatic file descriptor limit raising was attempted
  * after* setuid, which made it a lot less effective. Found and
    fixed by Aki Tuomi a6414fdce9b0ec32c340d1f2eea2254f3fedc1c1
  - Timestamps used for dropping packets were occasionaly wrong
    183eb8774e4bc2569f06d5894fec65740f4b70b6 and
    4c4765c104bacc146533217bcc843efb244a8086 (RC2) with thanks to
    Winfried for debugging.
  - In RC1, our new DoS protection measures would crash the
    Recursor if too many root servers were unreachable.
    6a6fb05ad81c519b4002ed1db00f3ed9b7bce6b4. Debugging and testing
    by Fusl.
- remove pdns-rec-lua52.patch:
  no longer needed</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.7.2 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit adb10be commit 3ec3e0f commit dc02ebf Fix handling of
    forward references in label compressed packets; fixes
    CVE-2015-1868
  - commit a7be3f1: make sure we never call sendmsg with
    msg_control!=NULL &amp;&amp; msg_controllen&gt;0. Fixes ticket #2227
  - commit 9d835ed: Improve robustness of root-nx-trust.
  Improvements:
  - commit 99c595b: Silence warnings that always occur on FreeBSD
    (Ruben Kerkhof)</changelog>
<changelog author="mrueckert@suse.de" date="1430308800">- call systemd-tmpfiles during installation</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.7.3 will prevent short bursts of high
  resource usage with malformed qnames.</changelog>
<changelog author="mrueckert@suse.de" date="1437480000">- do not use /run/pdns instead of /var/run/pdns in the init script
  for the rest we have the systemd unit file</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-recursor-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - enabled protobuf based stats
  - enabled botan based code
  - use upstream systemd files</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4119 Improve DNSSEC record skipping for non dnssec queries
    (Kees Monshouwer)
  - #4162 Don't validate zones from the local auth store, go one
    level down while validating when there is a CNAME
  - #4187:
  - Don't go bogus on islands of security
  - Check all possible chains for Insecures
  - Don't go Bogus on a CNAME at the apex
  - #4215 RPZ: default policy should also override local data RRs
  - #4243 Fix a crash when the next name in a chained query is
    empty and rec_control current-queries is invoked
  Improvements
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4140 Fix warnings with gcc on musl-libc (James Taylor)
  - #4160 Also validate on +DO
  - #4164 Fail to start when the lua-dns-script does not exist
  - #4168 Add more Netmask methods for Lua (Aki Tuomi)
  - #4210 Validate DNSSEC for security polling
  - #4217 Turn on root-nx-trust by default and
    log-common-errors=off
  - #4207 Allow for multiple trust anchors per zone
  - #4242 Fix compilation warning when building without Protobuf
  - #4133 Add limits to the size of received {A,I}XFR
    (CVE-2016-6172)</changelog>
<changelog author="michael@stroeder.com" date="1472990400">- update to 4.0.2
  Bug fixes
  - #4264: Set dq.rcode before calling postresolve
  - #4294: Honor PIE flags.
  - #4310: Fix build with LibreSSL, for which
    OPENSSL_VERSION_NUMBER is irrelevant
  - #4340: Don't shuffle CNAME records. (thanks to Gert van Dijk
    for the extensive bug report!)
  - #4354: Fix delegation-only
  Additions and enhancements
  - #4288: Respect the timeout when connecting to a protobuf server
  - #4300: allow newDN to take a DNSName in; document missing
    methods
  - #4301: expose SMN toString to lua
  - #4318: Anonymize the protobuf ECS value as well (thanks to Kai
    Storbeck of XS4All for finding this)
  - #4324: Allow Lua access to the result of the Policy Engine
    decision, skip RPZ, finish RPZ implementation
  - #4349: Remove unused DNSPacket::d_qlen
  - #4351: RPZ: Use query-local-address(6) by default (thanks to
    Oli Schacher of switch.ch for the bug report)
  - #4357: Move the root DNSSEC data to a header file</changelog>
<changelog author="mrueckert@suse.de" date="1473163200">- update to 4.0.3
  A new release for the PowerDNS Recursor with version 4.0.3 is
  available. This release has many fixes and improvements in the
  Policy Engine (RPZ) and the Lua bindings to it. Therefore, we
  recommend users of RPZ to upgrade to this release. We would like
  to thank Wim (42wim on github) for testing and reporting on the
  RPZ module.
  Bug fixes
  - #4350: Call gettag() for TCP queries
  - #4376: Fix the use of an uninitialized filtering policy
  - #4381: Parse query-local-address before lua-config-file
  - #4383: Fix accessing an empty policyCustom, policyName from Lua
  - #4387: ComboAddress: don?t allow invalid ports
  - #4388: Fix RPZ default policy not being applied over IXFR
  - #4391: DNSSEC: Actually follow RFC 7646 §2.1
  - #4396: Add boost context ldflags so freebsd builds can find the
    libs
  - #4402: Ignore NS records in a RPZ zone received over IXFR
  - #4403: Fix build with OpenSSL 1.1.0 final
  - #4404: Don?t validate when a Lua hook took the query
  - #4425: Fix a protobuf regression (requestor/responder mix-up)
  Additions and Enhancements
  - #4394: Support Boost 1.61+ fcontext
  - #4402: Add Lua binding for DNSRecord::d_place</changelog>
<changelog author="adam.majer@suse.de" date="1473768000">- 4462.patch:
  Disable fcontext usage with Boost 1.61+ and revert back to
  slower SystemV ucontext. This fixes failure to build with
  newer Boost version. (boo#998408)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to version 4.0.4
  The following security advisories were fixed
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-2120, boo#1018329)
  complete changeset is availalbe at,
  https://doc.powerdns.com/md/changelog/#powerdns-recursor-404
- remove 4462.patch: in upstream release.</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel
- add signature file for upstream release</changelog>
<changelog author="mrueckert@suse.de" date="1494504000">- move autoreconf into the build section</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- update to version 4.0.5
  + adds ed25519 (algorithm 15) support for DNSSEC
  + adds the 2017 DNSSEC root key
  + complete changeset is available at,
  https://doc.powerdns.com/md/changelog/#powerdns-recursor-405</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15090-4.0.6.patch: An issue has been found in the
  DNSSEC validation component of PowerDNS Recursor, where the
  signatures might have been accepted as valid even if the signed
  data was not in bailiwick of the DNSKEY used to sign it. This
  allows an attacker in position of man-in-the-middle to alter
  the content of records by issuing a valid signature for the
  crafted records. (bnc#1069242, CVE-2017-15090)
- CVE-2017-15092-4.0.6.patch: An issue has been found in the web
  interface of PowerDNS Recursor, where the qname of DNS queries
  was displayed without any escaping, allowing a remote attacker
  to inject HTML and Javascript code into the web interface,
  altering the content. (bnc#1069242, CVE-2017-15092)
- CVE-2017-15093-4.0.6.patch: When `api-config-dir` is set to a
  non-empty value, which is not the case by default, the API
  allows an authorized user to update the Recursor's ACL by
  adding and removing netmasks, and to configure forward zones.
  It was discovered that the new netmask and IP addresses of
  forwarded zones were not sufficiently validated, allowing an
  authenticated user to inject new configuration directives into
  the Recursor's configuration. (bnc#1069242, CVE-2017-15093)
- CVE-2017-15094-4.0.6.patch: An issue has been found in the
  DNSSEC parsing code of PowerDNS Recursor during a code audit by
  Nixu, leading to a memory leak when parsing specially crafted
  DNSSEC ECDSA keys. (bnc#1069242, CVE-2017-15094)</changelog>

</package>
<package pkgid="b289346d7fd3722b75dabc77ae36326ae6207592aa9d72800bfd8c4b6d321094" name="pdns-recursor" arch="x86_64">
    <version epoch="0" ver="4.0.5" rel="6.1"/>

<changelog author="mrueckert@suse.de" date="1414497600">- sync permissions/ownership of home and config dir with the pdns
  package</changelog>
<changelog author="michael@stroeder.com" date="1414670400">- update to upstream release 3.6.2 (boo# 906583) CVE-2014-8601
  This is a bugfix update to 3.6.1.
  A list of changes since 3.6.1 follows.
  * gab14b4f: expedite servfail generation for ezdns-like
    failures (fully abort query resolving if we hit more than
    50 outqueries)
  * g42025be: PowerDNS now polls the security status of a
    release at startup and periodically. More detail on this
    feature, and how to turn it off, can be found in Section 2,
    "Security polling".
  * g5027429: We did not transmit the right 'local' socket
    address to Lua for TCP/IP queries in the recursor. In
    addition, we would attempt to lookup a filedescriptor that
    wasn't there in an unlocked map which could conceivably
    lead to crashes. Closes t1828, thanks Winfried for
    reporting
  * g752756c: Sync embedded yahttp copy. API: Replace HTTP
    Basic auth with static key in custom header
  * g6fdd40d: add missing #include &lt;pthread.h&gt; to
    rec-channel.hh (this fixes building on OS X).</changelog>
<changelog author="michael@stroeder.com" date="1415534400">- Fixed broken _localstatedir</changelog>
<changelog author="mrueckert@suse.de" date="1423742400">- update to 3.7.1
  This version contains a mix of speedups and improvements, the combined effect
  of which is vastly improved resilience against traffic spikes and malicious
  query overloads.
  Minor changes:
  - Removal of dead code here and there
    04dc6d618734fc630122de4c56dff641ebaf0988
  - Per-qtype response counters are now 64 bit
    297bb6acf7902068693a4aae1443c424d0e8dd52 on 64 bit systems
  - Add IPv6 addresses for b and c.root-servers.net hints
    efc2595423c9a1be6f2d8f4da25445198ceb8b57
  - Add IP address to logging about terminated queries
    37aa9904d1cc967ba4b5d5e17dbe41485f8cdece
  - Improve qtype name logging
    fab3ed3453e15ae88e29a0e4071b214eb19caad9 (Aki Tuomi)
  - Redefine 'BAD_NETS' for dont-query based on newer IANA guidance
    12cd44ee0fcde5893f85dccc499bfc35152c5fff (lochiiconnectivity)
  - Add documentation links to systemd unit
    eb154adfdffa5c78624e2ea98e938d7b5787119e (Ruben Kerkhof)
  Improvements:
  - Upgrade embedded PolarSSL to 1.3.9:
    d330a2ea1a93d7675ef680311f8aa0306aeefcf1
  - yahttp upgrade c290975778942ed1082ca66918695a5bd2d6bac4
    c65a57e888ee48eaa948e590c90c51420bffa847 (Aki Tuomi)
  - Replace . in hostnames by - for Carbon so as not to confuse
    Metronome 46541751ed1c3bc051d78217543d5fc76733e212
  - Manpages got a lot of love and are now built from Markdown
    (Pieter Lexis)
  - Move to PolarSSL base64
    488360551009784ab35c43ee4580e773a2a8a227 (Kees Monshouwer)
  - The quiet=no query logging is now more informative
    461df9d20c560d240285f772c09b3beb89d46daa
  - We can finally bind to 0.0.0.0 and :: and guarantee answers
    from the correct source
    b71b60ee73ef3c86f80a2179981eda2e61c4363f
  - We use per-packet timestamps to drop ancient traffic in case of
    overload b71b60ee73ef3c86f80a2179981eda2e61c4363f, non-Linux
    portability in d63f0d83631c41eff203d30b0b7c475a88f1db59
  - Builtin webserver can be queried with the API key in the URL
    again c89f8cd022c4a9409b95d22ffa3b03e4e98dc400
  - Ringbuffers are now available via API
    c89f8cd022c4a9409b95d22ffa3b03e4e98dc400
  - Lua 5.3 compatibility 59c6fc3e3931ca87d484337daee512e716bc4cf4
    (Kees Monshouwer)
  - No longer leave a stale UNIX domain socket around from
    rec_control if the recursor was down
    524e4f4d81f4ed9eb218715cbc8a59f0b9868234, ticket #2061
  - Running with 'quiet=no' would strangely actually prevent debug
    messages from being logged
    f48d7b657ec32517f8bfcada3bfe6353ca313314
  - Webserver now implements CORS for the API
    ea89a97e864c43c1cb03f2959ad04c4ebe7580ad, fixing ticket #1984
  - Houskeeping thread would sometimes run multiple times
    simultaneously, which worked, but was odd
    cc59bce675e62e2b9657b42614ce8be3312cae82
  New features:
  - New `root-nx-trust` flag makes PowerDNS generalize NXDOMAIN
    responses from the root-servers
    01402d56846a3a61811ebd4e6bc97e53f908e568
  - `getregisteredname()` for Lua, which turns 'www.bbc.co.uk' into
    'bbc.co.uk' 8cd4851beb78bc6ab320926fb5cb6a09282016b1
  - Lua preoutquery filter 3457a2a0ec41d3b3aff7640f30008788e1228a6e
  - Lua IP-based filter (ipfilter) before parsing packets
    4ea949413c495254acb0bd19335142761c1efc0c
  - `iputils` class for Lua, to quickly process IP addresses and
    netmasks in their native format
  - `getregisteredname` function for Lua, to find the registered
    domain for a given name
  - Various new ringbuffers: top-servfail-remotes,
    top-largeanswer-remotes, top-servfail-queries
  Speedups:
  - Remove unneeded malloc traffic
    93d4a89096e64d53740790f58fadec56f6a0af14
    8682c32bc45b6ffa7c0f6da778e1b223ae7f03ce
    a903b39cfe7364c56324038264d3db50b8cece87
  - Our nameserver-loop detection carried around a lot of baggage
    for complex domain names, plus did not differentiate IPv4 and
    IPv6 well enough 891fbf888ccac074e3edc38864641ca774f2f03c
  - Prioritize new queries over nameserver responses, improving
    latency under query bursts
    bf3b0cec366c090af000b066267b6f6bbb3a512a
  - Remove escaping in case there was nothing to escape
    83b746fd1d94c8742d8bd87a44beb44c154230c7
  - Our logging infrastructure had a lot of locking
    d1449e4d073595e1e1581804f121fc90e37158bf
  - Reduce logging level of certain common messages, which locked
    up synchronously logging systems
    854d44e31c76aa650520e6d462dd3a02b5936f7a
  - Add limit on total wall-clock time spent on a query
    9de3e0340fa066d4c59449e1643a1de8c343f8f2
  - Packet cache is now case-insensitive, which increases hitrate
    90974597aadaf1096e3fd0dc450be7422ea591a5
  Security relevant:
  - Check for PIE, RELRO and stack protector during configure
    8d0354b189c12e1e14f5309d3b49935c17f9eeb0 (Aki Tuomi)
  - Testing for support of PIE etc was improved in
    b2053c28ccb9609e2ce7bcb6beda83f98a062aa3 and beyond, fixes
    [#2125] (Ruben Kerkhof)
  - Max query-per-query limit (max-qperq) is now configurable
    173d790ead08f67733010ca4c6fc404a040fe699
  Bugs fixed:
  - IPv6 outgoing queries had a disproportionate effect on our
    query load. Fixed in 76f190f2a0877cd79ede2994124c1a58dc69ae49
    and beyond.
  - rec_control gave incorrect output on a timeout
    12997e9d800734da51b808767e1e2477244c30eb
  - When using the webserver AND having an error in the Lua script,
    recursor could crash during startup
    62f0ae62984adadab687c23fe1b287c1f219b2cb
  - Hugely long version strings would trip up security polling
    18b7333828a1275ae5f5574a9c8330290d8557ff (Kees Monshouwer)
  - The 'remotes' ringbuffer was sized incorrectly
    f8f243b01215d6adcb59389f09ef494f1309041f
  - Cache sizes had an off-by-one scaling problem, with the wrong
    number of entries allocated per thread
    f8f243b01215d6adcb59389f09ef494f1309041f
  - Our automatic file descriptor limit raising was attempted
  * after* setuid, which made it a lot less effective. Found and
    fixed by Aki Tuomi a6414fdce9b0ec32c340d1f2eea2254f3fedc1c1
  - Timestamps used for dropping packets were occasionaly wrong
    183eb8774e4bc2569f06d5894fec65740f4b70b6 and
    4c4765c104bacc146533217bcc843efb244a8086 (RC2) with thanks to
    Winfried for debugging.
  - In RC1, our new DoS protection measures would crash the
    Recursor if too many root servers were unreachable.
    6a6fb05ad81c519b4002ed1db00f3ed9b7bce6b4. Debugging and testing
    by Fusl.
- remove pdns-rec-lua52.patch:
  no longer needed</changelog>
<changelog author="michael@stroeder.com" date="1429790400">- update to 3.7.2 with a fix for CVE-2015-1868 (boo# 927569)
  Bug fixes:
  - commit adb10be commit 3ec3e0f commit dc02ebf Fix handling of
    forward references in label compressed packets; fixes
    CVE-2015-1868
  - commit a7be3f1: make sure we never call sendmsg with
    msg_control!=NULL &amp;&amp; msg_controllen&gt;0. Fixes ticket #2227
  - commit 9d835ed: Improve robustness of root-nx-trust.
  Improvements:
  - commit 99c595b: Silence warnings that always occur on FreeBSD
    (Ruben Kerkhof)</changelog>
<changelog author="mrueckert@suse.de" date="1430308800">- call systemd-tmpfiles during installation</changelog>
<changelog author="michael@stroeder.com" date="1433851200">- update to 3.7.3 will prevent short bursts of high
  resource usage with malformed qnames.</changelog>
<changelog author="mrueckert@suse.de" date="1437480000">- do not use /run/pdns instead of /var/run/pdns in the init script
  for the rest we have the systemd unit file</changelog>
<changelog author="mrueckert@suse.de" date="1468238400">- update to 4.0.0
  https://blog.powerdns.com/2016/07/11/powerdns-recursor-4-0-0-released/
  https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/
- packaging changes:
  - enabled protobuf based stats
  - enabled botan based code
  - use upstream systemd files</changelog>
<changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4119 Improve DNSSEC record skipping for non dnssec queries
    (Kees Monshouwer)
  - #4162 Don't validate zones from the local auth store, go one
    level down while validating when there is a CNAME
  - #4187:
  - Don't go bogus on islands of security
  - Check all possible chains for Insecures
  - Don't go Bogus on a CNAME at the apex
  - #4215 RPZ: default policy should also override local data RRs
  - #4243 Fix a crash when the next name in a chained query is
    empty and rec_control current-queries is invoked
  Improvements
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4140 Fix warnings with gcc on musl-libc (James Taylor)
  - #4160 Also validate on +DO
  - #4164 Fail to start when the lua-dns-script does not exist
  - #4168 Add more Netmask methods for Lua (Aki Tuomi)
  - #4210 Validate DNSSEC for security polling
  - #4217 Turn on root-nx-trust by default and
    log-common-errors=off
  - #4207 Allow for multiple trust anchors per zone
  - #4242 Fix compilation warning when building without Protobuf
  - #4133 Add limits to the size of received {A,I}XFR
    (CVE-2016-6172)</changelog>
<changelog author="michael@stroeder.com" date="1472990400">- update to 4.0.2
  Bug fixes
  - #4264: Set dq.rcode before calling postresolve
  - #4294: Honor PIE flags.
  - #4310: Fix build with LibreSSL, for which
    OPENSSL_VERSION_NUMBER is irrelevant
  - #4340: Don't shuffle CNAME records. (thanks to Gert van Dijk
    for the extensive bug report!)
  - #4354: Fix delegation-only
  Additions and enhancements
  - #4288: Respect the timeout when connecting to a protobuf server
  - #4300: allow newDN to take a DNSName in; document missing
    methods
  - #4301: expose SMN toString to lua
  - #4318: Anonymize the protobuf ECS value as well (thanks to Kai
    Storbeck of XS4All for finding this)
  - #4324: Allow Lua access to the result of the Policy Engine
    decision, skip RPZ, finish RPZ implementation
  - #4349: Remove unused DNSPacket::d_qlen
  - #4351: RPZ: Use query-local-address(6) by default (thanks to
    Oli Schacher of switch.ch for the bug report)
  - #4357: Move the root DNSSEC data to a header file</changelog>
<changelog author="mrueckert@suse.de" date="1473163200">- update to 4.0.3
  A new release for the PowerDNS Recursor with version 4.0.3 is
  available. This release has many fixes and improvements in the
  Policy Engine (RPZ) and the Lua bindings to it. Therefore, we
  recommend users of RPZ to upgrade to this release. We would like
  to thank Wim (42wim on github) for testing and reporting on the
  RPZ module.
  Bug fixes
  - #4350: Call gettag() for TCP queries
  - #4376: Fix the use of an uninitialized filtering policy
  - #4381: Parse query-local-address before lua-config-file
  - #4383: Fix accessing an empty policyCustom, policyName from Lua
  - #4387: ComboAddress: don?t allow invalid ports
  - #4388: Fix RPZ default policy not being applied over IXFR
  - #4391: DNSSEC: Actually follow RFC 7646 §2.1
  - #4396: Add boost context ldflags so freebsd builds can find the
    libs
  - #4402: Ignore NS records in a RPZ zone received over IXFR
  - #4403: Fix build with OpenSSL 1.1.0 final
  - #4404: Don?t validate when a Lua hook took the query
  - #4425: Fix a protobuf regression (requestor/responder mix-up)
  Additions and Enhancements
  - #4394: Support Boost 1.61+ fcontext
  - #4402: Add Lua binding for DNSRecord::d_place</changelog>
<changelog author="adam.majer@suse.de" date="1473768000">- 4462.patch:
  Disable fcontext usage with Boost 1.61+ and revert back to
  slower SystemV ucontext. This fixes failure to build with
  newer Boost version. (boo#998408)</changelog>
<changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
<changelog author="adam.majer@suse.de" date="1484308800">- update to version 4.0.4
  The following security advisories were fixed
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-2120, boo#1018329)
  complete changeset is availalbe at,
  https://doc.powerdns.com/md/changelog/#powerdns-recursor-404
- remove 4462.patch: in upstream release.</changelog>
<changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel
- add signature file for upstream release</changelog>
<changelog author="mrueckert@suse.de" date="1494504000">- move autoreconf into the build section</changelog>
<changelog author="adam.majer@suse.de" date="1497355200">- update to version 4.0.5
  + adds ed25519 (algorithm 15) support for DNSSEC
  + adds the 2017 DNSSEC root key
  + complete changeset is available at,
  https://doc.powerdns.com/md/changelog/#powerdns-recursor-405</changelog>
<changelog author="adam.majer@suse.de" date="1511784000">- CVE-2017-15090-4.0.6.patch: An issue has been found in the
  DNSSEC validation component of PowerDNS Recursor, where the
  signatures might have been accepted as valid even if the signed
  data was not in bailiwick of the DNSKEY used to sign it. This
  allows an attacker in position of man-in-the-middle to alter
  the content of records by issuing a valid signature for the
  crafted records. (bnc#1069242, CVE-2017-15090)
- CVE-2017-15092-4.0.6.patch: An issue has been found in the web
  interface of PowerDNS Recursor, where the qname of DNS queries
  was displayed without any escaping, allowing a remote attacker
  to inject HTML and Javascript code into the web interface,
  altering the content. (bnc#1069242, CVE-2017-15092)
- CVE-2017-15093-4.0.6.patch: When `api-config-dir` is set to a
  non-empty value, which is not the case by default, the API
  allows an authorized user to update the Recursor's ACL by
  adding and removing netmasks, and to configure forward zones.
  It was discovered that the new netmask and IP addresses of
  forwarded zones were not sufficiently validated, allowing an
  authenticated user to inject new configuration directives into
  the Recursor's configuration. (bnc#1069242, CVE-2017-15093)
- CVE-2017-15094-4.0.6.patch: An issue has been found in the
  DNSSEC parsing code of PowerDNS Recursor during a code audit by
  Nixu, leading to a memory leak when parsing specially crafted
  DNSSEC ECDSA keys. (bnc#1069242, CVE-2017-15094)</changelog>
<changelog author="adam.majer@suse.de" date="1512993600">- CVE-2017-15120-4.0.7.patch: parsing error while handling
  authoritative answers containing a CNAME of a different class
  than IN, leading to a recursor crash via a NULL-pointer
  dereference. (bnc#1072170, CVE-2017-15120)</changelog>

</package>
<package pkgid="c6bd0193dd25182096cd7cc32d75d0f882950d54b40d58e69f445a04ee7798ad" name="perl" arch="src">
    <version epoch="0" ver="5.18.2" rel="9.1"/>

<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="schwab@suse.de" date="1369051200">- Disable testsuite only on qemu user space build</changelog>
<changelog author="mls@suse.de" date="1370520000">- update to 5.18.0
  * new handling of experimental features
  * new hash functions to improve security
  * better hash randomization
  * upgrade to Unicode 6.2
  * support for computed labels
  * vertical tabs are now whitespace
  * smartmatch is experimental again
  * lots of bug fixes
- change perl_requires macro to use MODULE_COMPAT form</changelog>
<changelog author="coolo@suse.com" date="1370952000">- obsolete perl-PathTools and other modules in core</changelog>
<changelog author="coolo@suse.com" date="1370952001">- moving the provides of perl-macros to perl-doc so we can check
  for duplicated man pages in the gen_filelist macro</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add perl-db6.diff to bring the DB_File module up to version 1.828
  where it supports building with libdb-6.0.</changelog>
<changelog author="dvaleev@suse.com" date="1375963200">- skip itimer test from Timer-HiRes for powerpc. Build hosts
  are overloaded, building locally shows tests are passed
  (skip_time_hires.patch)</changelog>
<changelog author="mls@suse.de" date="1378209600">- update to perl-5.18.1
  * B has been upgraded from 1.42 to 1.42_01
  * Digest::SHA has been upgraded from 5.84 to 5.84_01
  * Module::CoreList has been upgraded from 2.89 to 2.96
  * A number of memory leaks in regexp have been plugged
  * The debugger's man command been fixed
  * @_ is now correctly visible in the debugger
  * Lexical constants no longer crash when inlined
  * Deep recursion warnings no longer crash lexical subroutines
- backport backref fix from upstream
- fix INC containing directories multiple times</changelog>
<changelog author="mls@suse.de" date="1378296000">- add libperl_requires macro</changelog>
<changelog author="mls@suse.de" date="1389182400">- update to perl-5.18.2
  * updates for the B::Concise, English, File::Glob modules
  * a lexical subs regression has been fixed
  * a regression when using SUPER with AUTOLOAD has been fixed
  * a buffer overflow with very long identifiers has been fixed
  * some other minor bug fixes
- perl-reg89.diff is no longer needed</changelog>
<changelog author="mls@suse.de" date="1396872000">- move English.pm into perl-base [bnc#869736]</changelog>
<changelog author="mls@suse.de" date="1411473600">- Fix infinite recursion in Data::Dumper [bnc#896715]
  new patch: DataDumper-no-infinite-recursion.diff</changelog>
<changelog author="mls@suse.de" date="1457611200">- fix environment dup handling bug [bnc#967082] [CVE-2016-2381]
  new patch: perl-dupenv.diff
- fix memory leak in 'use utf8' handling [bnc#928292]
  new patch: perl-utf8leak.diff</changelog>
<changelog author="mls@suse.de" date="1465214400">- fix regex engine hanging on bad utf8 [bnc976584] [CVE-2015-8853]
  new patch: perl-badutf8hang.diff</changelog>
<changelog author="mls@suse.de" date="1470225600">- fix xsloader looking at a "(eval)" directory [bnc#988311]
  [CVE-2016-6185]
  new patch: perl-xsloadereval.diff
- fix searching current directory for optional modules
  [bnc#987887] [CVE-2016-1238]
  new patch: perl-nodotinc.diff
- fix "Insecure dependency in require" error in taint mode
  [bnc#984906]
  new patch: perl-recontextnocurpm.diff</changelog>
<changelog author="mls@suse.de" date="1472558400">- add missing lock prototype to the debugger [bnc#932894]
  new patch: perl-dblockproto.diff
- remove base.pm changes from perl-nodotinc.diff</changelog>
<changelog author="mls@suse.de" date="1508932800">- fix heap overflow when compiling case-insensitive \N regexp
  [bnc#1057724] [CVE-2017-12837]
  new patch: perl-regcomp-N-ic.diff
- fix buffer overflow when parsing of \N regexp fails
  [bnc#1057721] [CVE-2017-12883]
  new patch: perl-regcomp-N-parse.diff
- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff
- backport set_capture_string changes from upstream [bnc#999735]
  new patch: perl-set_capture_string.diff
- reformat baselibs.conf as source validator workaround</changelog>

</package>
<package pkgid="ced81d8a6f8ec7c865f1f334d76b610950638a831c8b68e00fc6db8deefe324d" name="perl" arch="x86_64">
    <version epoch="0" ver="5.18.2" rel="9.1"/>

<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="schwab@suse.de" date="1369051200">- Disable testsuite only on qemu user space build</changelog>
<changelog author="mls@suse.de" date="1370520000">- update to 5.18.0
  * new handling of experimental features
  * new hash functions to improve security
  * better hash randomization
  * upgrade to Unicode 6.2
  * support for computed labels
  * vertical tabs are now whitespace
  * smartmatch is experimental again
  * lots of bug fixes
- change perl_requires macro to use MODULE_COMPAT form</changelog>
<changelog author="coolo@suse.com" date="1370952000">- obsolete perl-PathTools and other modules in core</changelog>
<changelog author="coolo@suse.com" date="1370952001">- moving the provides of perl-macros to perl-doc so we can check
  for duplicated man pages in the gen_filelist macro</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add perl-db6.diff to bring the DB_File module up to version 1.828
  where it supports building with libdb-6.0.</changelog>
<changelog author="dvaleev@suse.com" date="1375963200">- skip itimer test from Timer-HiRes for powerpc. Build hosts
  are overloaded, building locally shows tests are passed
  (skip_time_hires.patch)</changelog>
<changelog author="mls@suse.de" date="1378209600">- update to perl-5.18.1
  * B has been upgraded from 1.42 to 1.42_01
  * Digest::SHA has been upgraded from 5.84 to 5.84_01
  * Module::CoreList has been upgraded from 2.89 to 2.96
  * A number of memory leaks in regexp have been plugged
  * The debugger's man command been fixed
  * @_ is now correctly visible in the debugger
  * Lexical constants no longer crash when inlined
  * Deep recursion warnings no longer crash lexical subroutines
- backport backref fix from upstream
- fix INC containing directories multiple times</changelog>
<changelog author="mls@suse.de" date="1378296000">- add libperl_requires macro</changelog>
<changelog author="mls@suse.de" date="1389182400">- update to perl-5.18.2
  * updates for the B::Concise, English, File::Glob modules
  * a lexical subs regression has been fixed
  * a regression when using SUPER with AUTOLOAD has been fixed
  * a buffer overflow with very long identifiers has been fixed
  * some other minor bug fixes
- perl-reg89.diff is no longer needed</changelog>
<changelog author="mls@suse.de" date="1396872000">- move English.pm into perl-base [bnc#869736]</changelog>
<changelog author="mls@suse.de" date="1411473600">- Fix infinite recursion in Data::Dumper [bnc#896715]
  new patch: DataDumper-no-infinite-recursion.diff</changelog>
<changelog author="mls@suse.de" date="1457611200">- fix environment dup handling bug [bnc#967082] [CVE-2016-2381]
  new patch: perl-dupenv.diff
- fix memory leak in 'use utf8' handling [bnc#928292]
  new patch: perl-utf8leak.diff</changelog>
<changelog author="mls@suse.de" date="1465214400">- fix regex engine hanging on bad utf8 [bnc976584] [CVE-2015-8853]
  new patch: perl-badutf8hang.diff</changelog>
<changelog author="mls@suse.de" date="1470225600">- fix xsloader looking at a "(eval)" directory [bnc#988311]
  [CVE-2016-6185]
  new patch: perl-xsloadereval.diff
- fix searching current directory for optional modules
  [bnc#987887] [CVE-2016-1238]
  new patch: perl-nodotinc.diff
- fix "Insecure dependency in require" error in taint mode
  [bnc#984906]
  new patch: perl-recontextnocurpm.diff</changelog>
<changelog author="mls@suse.de" date="1472558400">- add missing lock prototype to the debugger [bnc#932894]
  new patch: perl-dblockproto.diff
- remove base.pm changes from perl-nodotinc.diff</changelog>
<changelog author="mls@suse.de" date="1508932800">- fix heap overflow when compiling case-insensitive \N regexp
  [bnc#1057724] [CVE-2017-12837]
  new patch: perl-regcomp-N-ic.diff
- fix buffer overflow when parsing of \N regexp fails
  [bnc#1057721] [CVE-2017-12883]
  new patch: perl-regcomp-N-parse.diff
- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff
- backport set_capture_string changes from upstream [bnc#999735]
  new patch: perl-set_capture_string.diff
- reformat baselibs.conf as source validator workaround</changelog>

</package>
<package pkgid="1e1600a36ec63f3e0e3cc88c17c1c6a181aac7f5e875ca7c279d2a668fb423e0" name="perl-32bit" arch="x86_64">
    <version epoch="0" ver="5.18.2" rel="9.1"/>

<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="schwab@suse.de" date="1369051200">- Disable testsuite only on qemu user space build</changelog>
<changelog author="mls@suse.de" date="1370520000">- update to 5.18.0
  * new handling of experimental features
  * new hash functions to improve security
  * better hash randomization
  * upgrade to Unicode 6.2
  * support for computed labels
  * vertical tabs are now whitespace
  * smartmatch is experimental again
  * lots of bug fixes
- change perl_requires macro to use MODULE_COMPAT form</changelog>
<changelog author="coolo@suse.com" date="1370952000">- obsolete perl-PathTools and other modules in core</changelog>
<changelog author="coolo@suse.com" date="1370952001">- moving the provides of perl-macros to perl-doc so we can check
  for duplicated man pages in the gen_filelist macro</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add perl-db6.diff to bring the DB_File module up to version 1.828
  where it supports building with libdb-6.0.</changelog>
<changelog author="dvaleev@suse.com" date="1375963200">- skip itimer test from Timer-HiRes for powerpc. Build hosts
  are overloaded, building locally shows tests are passed
  (skip_time_hires.patch)</changelog>
<changelog author="mls@suse.de" date="1378209600">- update to perl-5.18.1
  * B has been upgraded from 1.42 to 1.42_01
  * Digest::SHA has been upgraded from 5.84 to 5.84_01
  * Module::CoreList has been upgraded from 2.89 to 2.96
  * A number of memory leaks in regexp have been plugged
  * The debugger's man command been fixed
  * @_ is now correctly visible in the debugger
  * Lexical constants no longer crash when inlined
  * Deep recursion warnings no longer crash lexical subroutines
- backport backref fix from upstream
- fix INC containing directories multiple times</changelog>
<changelog author="mls@suse.de" date="1378296000">- add libperl_requires macro</changelog>
<changelog author="mls@suse.de" date="1389182400">- update to perl-5.18.2
  * updates for the B::Concise, English, File::Glob modules
  * a lexical subs regression has been fixed
  * a regression when using SUPER with AUTOLOAD has been fixed
  * a buffer overflow with very long identifiers has been fixed
  * some other minor bug fixes
- perl-reg89.diff is no longer needed</changelog>
<changelog author="mls@suse.de" date="1396872000">- move English.pm into perl-base [bnc#869736]</changelog>
<changelog author="mls@suse.de" date="1411473600">- Fix infinite recursion in Data::Dumper [bnc#896715]
  new patch: DataDumper-no-infinite-recursion.diff</changelog>
<changelog author="mls@suse.de" date="1457611200">- fix environment dup handling bug [bnc#967082] [CVE-2016-2381]
  new patch: perl-dupenv.diff
- fix memory leak in 'use utf8' handling [bnc#928292]
  new patch: perl-utf8leak.diff</changelog>
<changelog author="mls@suse.de" date="1465214400">- fix regex engine hanging on bad utf8 [bnc976584] [CVE-2015-8853]
  new patch: perl-badutf8hang.diff</changelog>
<changelog author="mls@suse.de" date="1470225600">- fix xsloader looking at a "(eval)" directory [bnc#988311]
  [CVE-2016-6185]
  new patch: perl-xsloadereval.diff
- fix searching current directory for optional modules
  [bnc#987887] [CVE-2016-1238]
  new patch: perl-nodotinc.diff
- fix "Insecure dependency in require" error in taint mode
  [bnc#984906]
  new patch: perl-recontextnocurpm.diff</changelog>
<changelog author="mls@suse.de" date="1472558400">- add missing lock prototype to the debugger [bnc#932894]
  new patch: perl-dblockproto.diff
- remove base.pm changes from perl-nodotinc.diff</changelog>
<changelog author="mls@suse.de" date="1508932800">- fix heap overflow when compiling case-insensitive \N regexp
  [bnc#1057724] [CVE-2017-12837]
  new patch: perl-regcomp-N-ic.diff
- fix buffer overflow when parsing of \N regexp fails
  [bnc#1057721] [CVE-2017-12883]
  new patch: perl-regcomp-N-parse.diff
- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff
- backport set_capture_string changes from upstream [bnc#999735]
  new patch: perl-set_capture_string.diff
- reformat baselibs.conf as source validator workaround</changelog>

</package>
<package pkgid="1dbde69b2c139c657e71bbd273f1ba4adb3927463cba4211076d8b6cb71462b8" name="perl-Business-ISBN-Data" arch="noarch">
    <version epoch="0" ver="20120719.001" rel="10.1"/>

<changelog author="lrupp@suse.de" date="1185192000">- initial package 1.14</changelog>
<changelog author="lars@linux-schulserver.de" date="1202817600">- Update to 1.17:
  [BUGFIX] RT #29078: Fix publihser ranges for Greece</changelog>
<changelog author="chris@computersalat.de" date="1246190400">- update to 20081208
  - 0.00 - Fri Dec  5 12:00:41 2008
  * Latest data update.
  - 20081020 - Mon Oct 20 17:44:15 2008
  * Updated publisher codes thanks to Yakov Shafranovich
  * Version number is now the update date of the module,
    in YYYYMMDD. This not the date of the ISBN Agency
    updates though.
- added perl-macros
  o autogen filelist with perl_gen_filelist
- spec mods
  o fixed deps</changelog>
<changelog author="chris@computersalat.de" date="1248523200">- spec mods
  * removed ^----------
  * removed ^#---------</changelog>
<changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
<changelog author="chris@computersalat.de" date="1283601600">- recreated by cpanspec 1.78
- noarch pkg</changelog>
<changelog author="coolo@novell.com" date="1291118400">- switch to perl_requires macro</changelog>
<changelog author="coolo@suse.com" date="1370347200">- updated to 20120719.001
  * Support data from RangeMessage.xml. You can use the latest
    data from ISBN without updating this module.
    Specify the Test::More version so I cna use subtest.
    No code or feature changes</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1511179200">- Added Requires: perl(Business::ISBN) [bsc#1067186]</changelog>

</package>
<package pkgid="f32e38cd91187bb2d5ea3429c62881d5f156f6a9cf6747e2481f0f08a7ee0004" name="perl-Business-ISBN-Data" arch="src">
    <version epoch="0" ver="20120719.001" rel="10.1"/>

<changelog author="lrupp@suse.de" date="1185192000">- initial package 1.14</changelog>
<changelog author="lars@linux-schulserver.de" date="1202817600">- Update to 1.17:
  [BUGFIX] RT #29078: Fix publihser ranges for Greece</changelog>
<changelog author="chris@computersalat.de" date="1246190400">- update to 20081208
  - 0.00 - Fri Dec  5 12:00:41 2008
  * Latest data update.
  - 20081020 - Mon Oct 20 17:44:15 2008
  * Updated publisher codes thanks to Yakov Shafranovich
  * Version number is now the update date of the module,
    in YYYYMMDD. This not the date of the ISBN Agency
    updates though.
- added perl-macros
  o autogen filelist with perl_gen_filelist
- spec mods
  o fixed deps</changelog>
<changelog author="chris@computersalat.de" date="1248523200">- spec mods
  * removed ^----------
  * removed ^#---------</changelog>
<changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
<changelog author="chris@computersalat.de" date="1283601600">- recreated by cpanspec 1.78
- noarch pkg</changelog>
<changelog author="coolo@novell.com" date="1291118400">- switch to perl_requires macro</changelog>
<changelog author="coolo@suse.com" date="1370347200">- updated to 20120719.001
  * Support data from RangeMessage.xml. You can use the latest
    data from ISBN without updating this module.
    Specify the Test::More version so I cna use subtest.
    No code or feature changes</changelog>
<changelog author="pmonrealgonzalez@suse.com" date="1511179200">- Added Requires: perl(Business::ISBN) [bsc#1067186]</changelog>

</package>
<package pkgid="ade91305351b1a67fd8e1781722efe5c112eddc93dda14e6af8fcbd379d977f8" name="perl-Export-Attrs" arch="noarch">
    <version epoch="0" ver="0.1.0" rel="2.1"/>

<changelog author="coolo@suse.com" date="1505908800">- initial package 0.1.0
  * created by cpanspec 1.78.08</changelog>

</package>
<package pkgid="b4caa7fd873bf4540b47c9c3e4b912197d8ab6717b53059e94bf3b0153bce5bb" name="perl-Export-Attrs" arch="src">
    <version epoch="0" ver="0.1.0" rel="2.1"/>

<changelog author="coolo@suse.com" date="1505908800">- initial package 0.1.0
  * created by cpanspec 1.78.08</changelog>

</package>
<package pkgid="e60a65b3d1a38f92b5a495a487ee496f371f4a87a51cd5b9b01848082f51601c" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="17.1"/>

<changelog author="dmitry_r@opensuse.org" date="1393329600">- Fix quantum depth in package description</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="05a0753e9c84221f81b6058ce77860710e66ae441ca6cee14b0d16a83b58b237" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="20.1"/>

<changelog author="dmitry_r@opensuse.org" date="1410609600">- Update to version 1.3.20
  * See included NEWS.txt for details
- Enable quantum depth in shared library names
- Enable bzip2, jbig, webp support
- Use LCMSv2</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
<changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>

</package>
<package pkgid="87951a881d7976f795cfe1d859ff2489e5a930b2880784ec45e2c79b742490ea" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="27.1"/>

<changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
<changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
<changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>

</package>
<package pkgid="79cd0a6515b012ef7fdc97ce9a830536ca184fe45318f728580b6959eace27cd" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
<changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
<changelog author="pgajdos@suse.com" date="1480420800">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch
  * CVE-2014-9805 [bsc#983752]
    + GraphicsMagick-CVE-2014-9805.patch
  * CVE-2014-9846 [bsc#983521]
    + GraphicsMagick-CVE-2014-9846.patch
  * CVE-2014-9807 [bsc#983794]
    + GraphicsMagick-CVE-2014-9807.patch
  * CVE-2014-9809 [bsc#983799]
    + GraphicsMagick-CVE-2014-9809.patch
  * CVE-2014-9815 [bsc#984372]
    + GraphicsMagick-CVE-2014-9815.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9817.patch
  * CVE-2014-9820 [bsc#984150]
    + GraphicsMagick-CVE-2014-9820.patch
  * CVE-2014-9834 [bsc#984436]
    + GraphicsMagick-CVE-2014-9834.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + GraphicsMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9837 [bsc#984166]
    + GraphicsMagick-CVE-2014-9837.patch
  * CVE-2014-9845 [bsc#984394]
    + GraphicsMagick-CVE-2014-9845.patch
  * CVE-2014-9817 [bsc#984400]
    + GraphicsMagick-CVE-2014-9853.patch
  * CVE-2016-7529 [bsc#1000399]
    + GraphicsMagick-CVE-2016-7529.patch
  * CVE-2016-7528 [bsc#1000434]
    + GraphicsMagick-CVE-2016-7528.patch
  * CVE-2016-7515 [bsc#1000689]
    + GraphicsMagick-CVE-2016-7515.patch
  * CVE-2016-7522 [bsc#1000698]
    + GraphicsMagick-CVE-2016-7522.patch
  * CVE-2016-7531 [bsc#1000704]
    + GraphicsMagick-CVE-2016-7531.patch
  * CVE-2016-7533 [bsc#1000707]
    + GraphicsMagick-CVE-2016-7533.patch
  * CVE-2016-7537 [bsc#1000711]
    + GraphicsMagick-CVE-2016-7537.patch
  * CVE-2016-6823 [bsc#1001066]
    + GraphicsMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + GraphicsMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + GraphicsMagick-write-tiff-div-by-zero.patch
  * fix buffer overflow [bsc#1002209]
    + GraphicsMagick-buffer-overflow-pdb.patch
  * CVE-2016-7800 [bsc#1002422]
    + GraphicsMagick-CVE-2016-7800.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + GraphicsMagick-CVE-2016-7996,7997.patch
  * CVE-2016-8684 [bsc#1005123]
    + GraphicsMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + GraphicsMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + GraphicsMagick-CVE-2016-8683.patch
  * CVE-2016-8862 [bsc#1007245]
    + GraphicsMagick-CVE-2016-8862.patch
  * CVE-2016-9556 [bsc#1011130]
    + GraphicsMagick-CVE-2016-9556.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481630400">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + GraphicsMagick-CVE-2016-8866.patch
  * CVE-2016-9830 [bsc#1013640]
    + GraphicsMagick-CVE-2016-9830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>

</package>
<package pkgid="de45d5cd9141ef66727d1f6aef8b1c2a34de2a081cbe2928d68932f8c4820252" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="39.1"/>

<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10050 [bsc#1017312]
    + GraphicsMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + GraphicsMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + GraphicsMagick-CVE-2016-10052.patch
  * CVE-2016-10048 [bsc#1017310]
    + GraphicsMagick-CVE-2016-10048.patch
  * CVE-2016-10146 [bsc#1020443]
    + GraphicsMagick-CVE-2016-10146.patch
  * CVE-2017-5511 [bsc#1020448]
    + GraphicsMagick-CVE-2017-5511.patch
  * CVE-2016-10068 [bsc#1017324]
    + GraphicsMagick-CVE-2016-10068.patch
  * CVE-2016-10070 [bsc#1017326]
    + GraphicsMagick-CVE-2016-10070.patch
- GraphicsMagick-buffer-overflow-pdb.patch corrected to
  GraphicsMagick-buffer-overflow-map.patch name</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6335 [bsc#1027255]
    + GraphicsMagick-CVE-2017-6335.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>

</package>
<package pkgid="933107703bc22625a4748adf0d3ac4f96f9adf1a972c1fbea1f3a133f546213c" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="44.1"/>

<changelog author="pgajdos@suse.com" date="1493812800">- security update:
  * CVE-2017-8350 [bsc#1036985]
    + GraphicsMagick-CVE-2017-8350.patch
  * CVE-2017-8351 [bsc#1036986]
    + GraphicsMagick-CVE-2017-8351.patch
  * CVE-2017-8353 [bsc#1036988]
    + GraphicsMagick-CVE-2017-8353.patch
  * CVE-2017-8355 [bsc#1036990]
    + GraphicsMagick-CVE-2017-8355.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9142 [bsc#1040304]
    + GraphicsMagick-CVE-2017-9142.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * modified GraphicsMagick-CVE-2017-8350.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + GraphicsMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>

</package>
<package pkgid="dfb5b4c186d5490159632bf19d9aa2cfb1618b8c897078ed17c6eeb2db1cac5f" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="47.1"/>

<changelog author="pgajdos@suse.com" date="1502798400">- security update:
  * CVE-2017-11643 [bsc#1050611]
    + GraphicsMagick-CVE-2017-11643.patch
  * CVE-2017-11636 [bsc#1050674]
    + GraphicsMagick-CVE-2017-11636.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507204800">- security update:
  * CVE-2017-14532 [bsc#1059663]
    + GraphicsMagick-CVE-2017-14532.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="f81744b1820da7b19d61d665f3edfac58e9941e2c3e03b5b4435da6e81fbe376" name="perl-GraphicsMagick" arch="x86_64">
    <version epoch="0" ver="1.3.25" rel="50.1"/>

<changelog author="pgajdos@suse.com" date="1507291200">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507550400">- ThrowException does not return [bsc#1061873c#6]
  + amended GraphicsMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500800">- security update:
  * CVE-2017-13775 [bsc#1056431]
    + GraphicsMagick-CVE-2017-13775.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508500801">- security update:
  * CVE-2017-13063 [bsc#1055050], CVE-2017-13064 [bsc#1055042]
    + GraphicsMagick-CVE-2017-13063,13064.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-12937 [bsc#1054596]
    + GraphicsMagick-CVE-2017-12937.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + GraphicsMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12936 [bsc#1054598]
    + GraphicsMagick-CVE-2017-12936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509537600">- security update:
  * CVE-2017-14165 [bsc#1057508]
    + GraphicsMagick-CVE-2017-14165.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509710400">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + GraphicsMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + GraphicsMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + GraphicsMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13776, CVE-2017-13777 [bsc#1056429], [bsc#1056426]
    + GraphicsMagick-CVE-2017-13776,13777.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + GraphicsMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + GraphicsMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + GraphicsMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + GraphicsMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update (tiff.c)
  * CVE-2017-13737 [bsc#1056162]
    + GraphicsMagick-CVE-2017-13737.patch
  * CVE-2017-11640 [bsc#1050632]
    + GraphicsMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-10799 [bsc#1047054]
    + GraphicsMagick-CVE-2017-10799.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-14994 [bsc#1061587]
    + GraphicsMagick-CVE-2017-14994.patch
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + GraphicsMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + GraphicsMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + GraphicsMagick-CVE-2017-14733.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512993600">- security update (gif.c):
  * CVE-2017-15277 [bsc#1063050]
    + GraphicsMagick-CVE-2017-15277.patch</changelog>
<changelog author="pgajdos@suse.com" date="1513166400">- security update (pnm.c):
  * CVE-2017-14042 [bsc#1056550]
    + GraphicsMagick-CVE-2017-14042.patch
  * CVE-2017-14504 [bsc#1059721]
    + GraphicsMagick-CVE-2017-14504.patch
  * CVE-2017-17498 [bsc#1072103]
    + GraphicsMagick-CVE-2017-17498.patch</changelog>

</package>
<package pkgid="ea815e053cc5f8369540dd248046749f81d01d3ff9c7ae657a81d4f0eb2645e7" name="perl-Mail-SpamAssassin" arch="x86_64">
    <version epoch="0" ver="3.4.1" rel="59.1"/>

<changelog author="mlin@suse.com" date="1361793600">- Install spamd.service and spampd.service accordingly (/usr/lib/systemd
  for 12.3 and up or /lib/systemd for older versions).</changelog>
<changelog author="stefan.jakobs@rus.uni-stuttgart.de" date="1364385600">- remove 'BuildRequires: perl-macros' from spec file, because perl
  included in openSUSE &gt; 1210 deprecates perl-macros which causes a
  build failure.</changelog>
<changelog author="opensuse@dstoecker.de" date="1369483200">- increase maximum message size from 250 to 512 KB for spampd, as SPAM message size increased a lot</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369915200">- Do not use syslog.target or Requires in systemd units.</changelog>
<changelog author="opensuse@dstoecker.de" date="1386504000">- update spampd to version 2.42 (GIT version)</changelog>
<changelog author="opensuse@dstoecker.de" date="1391169600">- set default homedir to override invalid default in spampd file</changelog>
<changelog author="opensuse@dstoecker.de" date="1392292800">- Update to 3.4.0
- INCOMPATIBLE CHANGES
  o DNS queries generated by SpamAssassin now enable option EDNS0 in query
    packets and specify a buffer size of 4096 bytes by default.
  o A default setting for option 'dns_available' was changed from 'test' to
    'yes' (bug 6770, bug 6769), so SpamAssassin now assumes by default that
    it is running on a host with an internet connection and a working DNS resolver.
- BUG FIXES
  o The sa-update program now avoids repeatedly downloading same rules if
    subsequent unpacking of rules and updating fails. Documented in bug 6655.
  o Several incompatibilities with newer versions of a perl module Net::DNS
    as used by sa-update and by the SpamAssassin library were fixed.
  o A perl module Razor agent clobbers entropy of a random number generator by
    re-initializing the generator on every call. The SpamAssassin Razor plugin
    now provides a workaround, preserving entropy across calls to Razor2 agent.
- NEW FEATURES
  o Redis database backend for a Bayes database
  o Improved support for IPv6
  o New command-line options:
  - -listen (or -i), spamd
    Can be specified multiple times and allows spamd to accept requests
    over multiple INET (IPv4) or INET6 (IPv6) or UNIX sockets.
  - X (or --unavailable-tempfail), spamc
    Allows return EX_TEMPFAIL instead of EX_UNAVAILABLE when using option -x.
  - 4 and -6 were added to programs spamassassin, spamd, spamc, and sa-update.
  - v or --verbose,  sa-update
    Can now take multiple -v or --verbose options to increase verbosity.
  - -max-size, sa-learn
  o New configuration options
  - Plugin/URIDNSBL: new tflags options 'a' and 'ns' were introduced. They are
    documented in the Mail::SpamAssassin::Plugin::URIDNSBL POD or man page.
  - Plugin/AutoLearnThreshold: new option autolearn_force was added. It is
    documented in the Mail::SpamAssassin::Plugin::AutoLearnThreshold POD or
    man page.
  - Plugin/ASN: new options asn_prefix and clear_asn_lookups were added.
    They are documented in Mail::SpamAssassin::Plugin::ASN POD or man page.
  - ArchiveIterator has new options opt_max_size and opt_from_regex. They are
    documented in Mail::SpamAssassin::ArchiveIterator POD or man page.
  - A new tag (macro) _RULESVERSION_ was added. It expands to a comma-separated
    list of rules versions, retrieved from an '# UPDATE version' comment in
    rules files and can be used in an 'add_header' configuration setting.
    The following new options, as implemented by various plugins or by
    other modules, are all documented in the Mail::SpamAssassin::Conf POD
    or man page:
  - Plugin/WLBLEval: new configuration options were added: enlist_uri_host,
    delist_uri_host, with shorthands blacklist_uri_host and whitelist_uri_host
    and an associated eval rule check_uri_host_listed.
  - Configuration options dns_query_restriction (allow|deny) and
    clear_dns_query_restriction were added (bug 6884).
  - A 'dns_options' setting accepts new sub-options 'dns0x20' and 'edns'.
  - Added option 'dns_server' which specifies an IP address of a recursive
    DNS server (i.e. DNS resolver) and optionally its port number.
  - Added options dns_local_ports_permit, dns_local_ports_avoid and
    dns_local_ports_none to control source port local ranges available to
    DNS queries
  - Added the following sub-options to the tflags setting: autolearn_force,
    maxhits=N, ips_only, domains_only, a, ns.
  - The option whitelist_from_rcvd can now take an IP address as its second
    argument (instead of a domain name), which can be useful for whitelisting
    a sending mailer which has no reverse DNS mapping.
  o New plugins
    A new plugin AskDNS was introduced.</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1393329600">- Use perl(IO::Socket::IP) only for openSUSE 12.2+, because it requires
  a version minimum version of perl(IO::Socket) of 1.97 which is not available.
  Spamassassin will fallback to use perl(IO::Socket::INET6) or
  perl(IO::Socket::INET) instead.</changelog>
<changelog author="ro@suse.de" date="1404734400">- make init scripts executable to fix build</changelog>
<changelog author="varkoly@suse.com" date="1406894400">- bnc#889004 - Package 'spamassassin' contains 'SuSE' spelling in a filename and/or SPEC file</changelog>
<changelog author="mpluskal@suse.com" date="1420545600">- Fix for boo#911355
- Don't install init files when service files are installed
- Create symlinks for rcspamd and rcspampd when systemd is used
- Remove unnecessary cleanup section from spec files</changelog>
<changelog author="mpluskal@suse.com" date="1422878400">- Enable reload in unit files (boo#915736)</changelog>
<changelog author="hsk@imb-jena.de" date="1436443200">- update to 3.4.1
  * new plugins (disabled by default)
    TxRep -substantially improved replacement of AWL plugin
    PDFInfo - help detecting spam with attached PDF files
    URILocalBL - new rule test types for URIs in html message parts
  * several new or enhanced configuration options, e.g.:
    normalize_charset - reimplemented, see Mail::SpamAssassin::Conf
    bayes_token_sources - more control on sources of tokens for Bayes plugin
  * internal change, probably only affecting 3rd party plugins:
    Util::RegistrarBoundaries is being replaced by RegistryBoundaries
  * rule updates, improvements, optimizations, bug fixes
- patch-utf8 removed, cf. bz.apache.org/SpamAssassin/show_bug.cgi?id=7133
- re-enable "make test" for 13.2 and up</changelog>
<changelog author="hsk@imb-jena.de" date="1440590400">- disable again "make test" (seems not to like being run offline)</changelog>
<changelog author="opensuse@dstoecker.de" date="1448798400">- change default spampd settings to properly support IPv6 and allow larger SPAM</changelog>
<changelog author="bwiedemann@suse.com" date="1452600000">- use service command to restart spamd and amavis (boo#961279)</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't call/require insserv if we use systemd</changelog>
<changelog author="opensuse@dstoecker.de" date="1488110400">- SPAMPD: add spampd-2.42_git_20170226.patch - support IPv6 with IO::Socket::IP
- Drop old init system support (systems before 12.x)</changelog>
<changelog author="vcizek@suse.com" date="1504094400">- Add support for building with OpenSSL 1.1 (bsc#1055252)
  * add 0001-bug-7361-Allow-building-against-OpenSSL-1.1.0.patch
  * add spamassassin-dont_use_SSLv3_methods.patch
- Fix build with Perl 5.26
  * https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7367
  * add 0001-Fix-bug-7367-Don-t-assume-cwd-.-is-in-INC-it-may-be-.patch</changelog>
<changelog author="mpluskal@suse.com" date="1511265600">- Update umask in cronjob (boo#861539)
- Make sure that spamd can start (boo#961291)</changelog>

</package>
<package pkgid="c54c8d9ba35ada089c4c6fb0240d0331dad49af8b8d63edd966df1f504f9535c" name="perl-Mail-SpamAssassin-Plugin-iXhash2" arch="x86_64">
    <version epoch="0" ver="2.05" rel="59.1"/>

<changelog author="mlin@suse.com" date="1361793600">- Install spamd.service and spampd.service accordingly (/usr/lib/systemd
  for 12.3 and up or /lib/systemd for older versions).</changelog>
<changelog author="stefan.jakobs@rus.uni-stuttgart.de" date="1364385600">- remove 'BuildRequires: perl-macros' from spec file, because perl
  included in openSUSE &gt; 1210 deprecates perl-macros which causes a
  build failure.</changelog>
<changelog author="opensuse@dstoecker.de" date="1369483200">- increase maximum message size from 250 to 512 KB for spampd, as SPAM message size increased a lot</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369915200">- Do not use syslog.target or Requires in systemd units.</changelog>
<changelog author="opensuse@dstoecker.de" date="1386504000">- update spampd to version 2.42 (GIT version)</changelog>
<changelog author="opensuse@dstoecker.de" date="1391169600">- set default homedir to override invalid default in spampd file</changelog>
<changelog author="opensuse@dstoecker.de" date="1392292800">- Update to 3.4.0
- INCOMPATIBLE CHANGES
  o DNS queries generated by SpamAssassin now enable option EDNS0 in query
    packets and specify a buffer size of 4096 bytes by default.
  o A default setting for option 'dns_available' was changed from 'test' to
    'yes' (bug 6770, bug 6769), so SpamAssassin now assumes by default that
    it is running on a host with an internet connection and a working DNS resolver.
- BUG FIXES
  o The sa-update program now avoids repeatedly downloading same rules if
    subsequent unpacking of rules and updating fails. Documented in bug 6655.
  o Several incompatibilities with newer versions of a perl module Net::DNS
    as used by sa-update and by the SpamAssassin library were fixed.
  o A perl module Razor agent clobbers entropy of a random number generator by
    re-initializing the generator on every call. The SpamAssassin Razor plugin
    now provides a workaround, preserving entropy across calls to Razor2 agent.
- NEW FEATURES
  o Redis database backend for a Bayes database
  o Improved support for IPv6
  o New command-line options:
  - -listen (or -i), spamd
    Can be specified multiple times and allows spamd to accept requests
    over multiple INET (IPv4) or INET6 (IPv6) or UNIX sockets.
  - X (or --unavailable-tempfail), spamc
    Allows return EX_TEMPFAIL instead of EX_UNAVAILABLE when using option -x.
  - 4 and -6 were added to programs spamassassin, spamd, spamc, and sa-update.
  - v or --verbose,  sa-update
    Can now take multiple -v or --verbose options to increase verbosity.
  - -max-size, sa-learn
  o New configuration options
  - Plugin/URIDNSBL: new tflags options 'a' and 'ns' were introduced. They are
    documented in the Mail::SpamAssassin::Plugin::URIDNSBL POD or man page.
  - Plugin/AutoLearnThreshold: new option autolearn_force was added. It is
    documented in the Mail::SpamAssassin::Plugin::AutoLearnThreshold POD or
    man page.
  - Plugin/ASN: new options asn_prefix and clear_asn_lookups were added.
    They are documented in Mail::SpamAssassin::Plugin::ASN POD or man page.
  - ArchiveIterator has new options opt_max_size and opt_from_regex. They are
    documented in Mail::SpamAssassin::ArchiveIterator POD or man page.
  - A new tag (macro) _RULESVERSION_ was added. It expands to a comma-separated
    list of rules versions, retrieved from an '# UPDATE version' comment in
    rules files and can be used in an 'add_header' configuration setting.
    The following new options, as implemented by various plugins or by
    other modules, are all documented in the Mail::SpamAssassin::Conf POD
    or man page:
  - Plugin/WLBLEval: new configuration options were added: enlist_uri_host,
    delist_uri_host, with shorthands blacklist_uri_host and whitelist_uri_host
    and an associated eval rule check_uri_host_listed.
  - Configuration options dns_query_restriction (allow|deny) and
    clear_dns_query_restriction were added (bug 6884).
  - A 'dns_options' setting accepts new sub-options 'dns0x20' and 'edns'.
  - Added option 'dns_server' which specifies an IP address of a recursive
    DNS server (i.e. DNS resolver) and optionally its port number.
  - Added options dns_local_ports_permit, dns_local_ports_avoid and
    dns_local_ports_none to control source port local ranges available to
    DNS queries
  - Added the following sub-options to the tflags setting: autolearn_force,
    maxhits=N, ips_only, domains_only, a, ns.
  - The option whitelist_from_rcvd can now take an IP address as its second
    argument (instead of a domain name), which can be useful for whitelisting
    a sending mailer which has no reverse DNS mapping.
  o New plugins
    A new plugin AskDNS was introduced.</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1393329600">- Use perl(IO::Socket::IP) only for openSUSE 12.2+, because it requires
  a version minimum version of perl(IO::Socket) of 1.97 which is not available.
  Spamassassin will fallback to use perl(IO::Socket::INET6) or
  perl(IO::Socket::INET) instead.</changelog>
<changelog author="ro@suse.de" date="1404734400">- make init scripts executable to fix build</changelog>
<changelog author="varkoly@suse.com" date="1406894400">- bnc#889004 - Package 'spamassassin' contains 'SuSE' spelling in a filename and/or SPEC file</changelog>
<changelog author="mpluskal@suse.com" date="1420545600">- Fix for boo#911355
- Don't install init files when service files are installed
- Create symlinks for rcspamd and rcspampd when systemd is used
- Remove unnecessary cleanup section from spec files</changelog>
<changelog author="mpluskal@suse.com" date="1422878400">- Enable reload in unit files (boo#915736)</changelog>
<changelog author="hsk@imb-jena.de" date="1436443200">- update to 3.4.1
  * new plugins (disabled by default)
    TxRep -substantially improved replacement of AWL plugin
    PDFInfo - help detecting spam with attached PDF files
    URILocalBL - new rule test types for URIs in html message parts
  * several new or enhanced configuration options, e.g.:
    normalize_charset - reimplemented, see Mail::SpamAssassin::Conf
    bayes_token_sources - more control on sources of tokens for Bayes plugin
  * internal change, probably only affecting 3rd party plugins:
    Util::RegistrarBoundaries is being replaced by RegistryBoundaries
  * rule updates, improvements, optimizations, bug fixes
- patch-utf8 removed, cf. bz.apache.org/SpamAssassin/show_bug.cgi?id=7133
- re-enable "make test" for 13.2 and up</changelog>
<changelog author="hsk@imb-jena.de" date="1440590400">- disable again "make test" (seems not to like being run offline)</changelog>
<changelog author="opensuse@dstoecker.de" date="1448798400">- change default spampd settings to properly support IPv6 and allow larger SPAM</changelog>
<changelog author="bwiedemann@suse.com" date="1452600000">- use service command to restart spamd and amavis (boo#961279)</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't call/require insserv if we use systemd</changelog>
<changelog author="opensuse@dstoecker.de" date="1488110400">- SPAMPD: add spampd-2.42_git_20170226.patch - support IPv6 with IO::Socket::IP
- Drop old init system support (systems before 12.x)</changelog>
<changelog author="vcizek@suse.com" date="1504094400">- Add support for building with OpenSSL 1.1 (bsc#1055252)
  * add 0001-bug-7361-Allow-building-against-OpenSSL-1.1.0.patch
  * add spamassassin-dont_use_SSLv3_methods.patch
- Fix build with Perl 5.26
  * https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7367
  * add 0001-Fix-bug-7367-Don-t-assume-cwd-.-is-in-INC-it-may-be-.patch</changelog>
<changelog author="mpluskal@suse.com" date="1511265600">- Update umask in cronjob (boo#861539)
- Make sure that spamd can start (boo#961291)</changelog>

</package>
<package pkgid="0d79033977592a35ff5ac3c5654b5677dcb34e2b85f90e9626481107a8e84e9d" name="perl-PCP-LogImport" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="a44a963d9cada8c768abb8d8193dfaede62c1a6d9afe82ba9965742da7b31495" name="perl-PCP-LogSummary" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="7c3a8aef6fc1cf911f0ab7ad2b710fa7a689b39e7cda7d91f2e70f896d9d101b" name="perl-PCP-MMV" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="1f2a5eb231fb36f71138e735195fe69f23f95a07526aa528fd293d60b5d5090a" name="perl-PCP-PMDA" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="c0f98954f5a76efbb98a91c8320f324daa9779382031b37f30666f67df202f1f" name="perl-PerlMagick" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="34.1"/>

<changelog author="pgajdos@suse.com" date="1465300800">- security update:
  * CVE-2015-8902 [bsc#983253]
    + ImageMagick-CVE-2015-8902.patch
  * CVE-2015-8901 [bsc#983234]
    + ImageMagick-CVE-2015-8901.patch
  * CVE-2015-8903 [bsc#983259]
    + ImageMagick-CVE-2015-8903.patch
  * CVE-2015-8900 [bsc#983232]
    + ImageMagick-CVE-2015-8900.patch
  * CVE-2016-4562, CVE-2016-4563, CVE-2016-4564 [bsc#983292]
    [bsc#983305] [bsc#983308]
    + ImageMagick-CVE-2016-4562,4563,4564.patch
  * CVE-2014-9846 [bsc#983521]
    + ImageMagick-CVE-2014-9846.patch
  * CVE-2015-8894 [bsc#983523]
    + ImageMagick-CVE-2015-8894.patch
  * CVE-2015-8895 [bsc#983527]
    + ImageMagick-CVE-2015-8895.patch
  * CVE-2015-8896 [bsc#983533]
    + ImageMagick-CVE-2015-8896.patch
  * CVE-2015-8897 [bsc#983739]
    + ImageMagick-CVE-2015-8897.patch
  * CVE-2015-8898 [bsc#983746]
    + ImageMagick-CVE-2015-8898.patch
  * CVE-2014-9805 [bsc#983752]
    + ImageMagick-CVE-2014-9805.patch
  * CVE-2014-9806 [bsc#983774]
    + ImageMagick-CVE-2014-9806.patch
  * CVE-2014-9807 [bsc#983794]
    + ImageMagick-CVE-2014-9807.patch
  * CVE-2014-9808 [bsc#983796]
    + ImageMagick-CVE-2014-9808.patch
  * CVE-2014-9809 [bsc#983799]
    + ImageMagick-CVE-2014-9809.patch
  * CVE-2014-9810 [bsc#983803]
    + ImageMagick-CVE-2014-9810.patch
  * CVE-2014-9821 [bsc#984014]
    + ImageMagick-CVE-2014-9821.patch
  * CVE-2014-9849 [bsc#984018]
    + ImageMagick-CVE-2014-9849.patch
  * CVE-2014-9836 [bsc#984023]
    + ImageMagick-CVE-2014-9836.patch
  * CVE-2014-9828 [bsc#984028]
    + ImageMagick-CVE-2014-9828.patch
  * CVE-2014-9813 [bsc#984035]
    + ImageMagick-CVE-2014-9813.patch
  * CVE-2014-9830 [bsc#984135]
    + ImageMagick-CVE-2014-9830.patch
  * CVE-2014-9811 [bsc#984032]
    + ImageMagick-CVE-2014-9811.patch
  * CVE-2014-9812 [bsc#984137]
    + ImageMagick-CVE-2014-9812.patch
  * CVE-2014-9819 [bsc#984142]
    + ImageMagick-CVE-2014-9819.patch
  * CVE-2014-9847 [bsc#984144]
    + ImageMagick-CVE-2014-9847.patch
  * CVE-2014-9835, CVE-2014-9831 [bsc#984145] [bsc#984375]
    + ImageMagick-CVE-2014-9835,9831.patch
  * CVE-2014-9850 [bsc#984149]
    + ImageMagick-CVE-2014-9850.patch
  * CVE-2014-9820 [bsc#984150]
    + ImageMagick-CVE-2014-9820.patch
  * CVE-2014-9851 [bsc#984160]
    + ImageMagick-CVE-2014-9851.patch
  * CVE-2014-9837 [bsc#984166]
    + ImageMagick-CVE-2014-9837.patch
  * CVE-2014-9841 [bsc#984172]
    + ImageMagick-CVE-2014-9841.patch
  * CVE-2014-9843 [bsc#984179]
    + ImageMagick-CVE-2014-9843.patch
  * CVE-2014-9818, CVE-2014-9826,CVE-2014-9829 [bsc#984181] [bsc#984186] [bsc#984409]
    + ImageMagick-CVE-2014-9818,9826,9829.patch
  * CVE-2014-9832 [bsc#984183]
    + ImageMagick-CVE-2014-9832.patch
  * CVE-2014-9854 [bsc#984184]
    + ImageMagick-CVE-2014-9854.patch
  * CVE-2014-9824 [bsc#984185]
    + ImageMagick-CVE-2014-9824.patch
  * CVE-2014-9822 [bsc#984187]
    + ImageMagick-CVE-2014-9822.patch
  * CVE-2014-9852 [bsc#984191]
    + ImageMagick-CVE-2014-9852.patch
  * CVE-2014-9814 [bsc#984193]
    + ImageMagick-CVE-2014-9814.patch
  * CVE-2014-9838 [bsc#984370]
    + ImageMagick-CVE-2014-9838.patch
  * CVE-2014-9815 [bsc#984372]
    + ImageMagick-CVE-2014-9815.patch
  * CVE-2014-9844 [bsc#984373]
    + ImageMagick-CVE-2014-9844.patch
  * CVE-2014-9842 [bsc#984374]
    + ImageMagick-CVE-2014-9842.patch
  * CVE-2014-9839 [bsc#984379]
    + ImageMagick-CVE-2014-9839.patch
  * CVE-2014-9845 [bsc#984394]
    + ImageMagick-CVE-2014-9845.patch
  * CVE-2014-9816 [bsc#984398]
    + ImageMagick-CVE-2014-9816.patch
  * CVE-2014-9817 [bsc#984400]
    + ImageMagick-CVE-2014-9817.patch
  * CVE-2014-9823 [bsc#984401]
    + ImageMagick-CVE-2014-9823.patch
  * CVE-2014-9848 [bsc#984404]
    + ImageMagick-CVE-2014-9848.patch
  * CVE-2014-9833, CVE-2014-9825 [bsc#984406] [bsc#984427]
    + ImageMagick-CVE-2014-9833,9825.patch
  * CVE-2014-9853 [bsc#984408]
    + ImageMagick-CVE-2014-9853.patch
  * CVE-2014-9840 [bsc#984433]
    + ImageMagick-CVE-2014-9840.patch
  * CVE-2014-9834 [bsc#984436]
    + ImageMagick-CVE-2014-9834.patch
  * CVE-2016-5688 [bsc#985442]
    + ImageMagick-CVE-2016-5688.patch
  * CVE-2016-5687 [bsc#985448]
    + ImageMagick-CVE-2016-5687.patch
  * CVE-2016-5691 [bsc#985456]
    + ImageMagick-CVE-2016-5691.patch
  * CVE-2016-5690 [bsc#985451]
    + ImageMagick-CVE-2016-5690.patch
  * CVE-2016-5689 [bsc#985460]
    + ImageMagick-CVE-2016-5689.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467201600">- security update:
  * CVE-2016-5841 [bsc#986609]
    + ImageMagick-CVE-2016-5841.patch
  * CVE-2016-5842 [bsc#986608]
    + ImageMagick-CVE-2016-5842.patc</changelog>
<changelog author="pgajdos@suse.com" date="1470312000">- security update:
  * CVE-2016-6520 [bsc#991872]
    + ImageMagick-CVE-2016-6520.patch
  * CVE-2016-5010 [bsc#991444]
    + ImageMagick-CVE-2016-5010.patch
  * CVE-2016-6491 [bsc#991445]
    + ImageMagick-CVE-2016-6491.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474891200">- security update:
  * CVE-2016-7540 [bsc#1000394]
    + ImageMagick-CVE-2016-7540.patch
  * CVE-2016-7529 [bsc#1000399]
    + ImageMagick-CVE-2016-7529.patch
  * CVE-2016-7530 [bsc#1000399], [bsc#1000703]
    + ImageMagick-CVE-2016-7530.patch
  * CVE-2016-7528 [bsc#1000434]
    + ImageMagick-CVE-2016-7528.patch
  * CVE-2016-7513 [bsc#1000686]
    + ImageMagick-CVE-2016-7513.patch
  * CVE-2016-7526, CVE-2016-7527 [bsc#1000436]
    + ImageMagick-CVE-2016-7526.patch
    + ImageMagick-CVE-2016-7527.patch
  * CVE-2016-7514 [bsc#1000688]
    + ImageMagick-CVE-2016-7514.patch
  * CVE-2016-7515 [bsc#1000689]
    + ImageMagick-CVE-2016-7515.patch
  * CVE-2015-8957 [bsc#1000690]
    + ImageMagick-CVE-2015-8957.patch
  * CVE-2015-8958, CVE-2016-7518 [bsc#1000691] [bsc#1000694]
    + ImageMagick-CVE-2015-8958,CVE-2016-7518.patch
  * CVE-2016-7516 [bsc#1000692]
    + ImageMagick-CVE-2016-7516.patch
  * CVE-2016-7517 [bsc#1000693]
    + ImageMagick-CVE-2016-7517.patch
  * CVE-2016-7519 [bsc#1000695]
    + ImageMagick-CVE-2016-7519.patch
  * CVE-2016-7520 [bsc#1000696]
    + ImageMagick-CVE-2016-7520.patch
  * CVE-2016-7521 [bsc#1000697]
    + ImageMagick-CVE-2016-7521.patch
  * CVE-2016-7522 [bsc#1000698]
    + ImageMagick-CVE-2016-7522.patch
  * CVE-2016-7523 [bsc#1000699]
    + ImageMagick-CVE-2016-7523.patch
  * CVE-2016-7524 [bsc#1000700], CVE-2016-7800 [bsc#1002422]
    + ImageMagick-CVE-2016-7524,7800.patch
  * CVE-2016-7525 [bsc#1000701]
    + ImageMagick-CVE-2016-7525.patch
  * CVE-2016-7531 [bsc#1000704]
    + ImageMagick-CVE-2016-7531.patch
  * CVE-2016-7532 [bsc#1000706]
    + ImageMagick-CVE-2016-7532.patch
  * CVE-2016-7533 [bsc#1000707]
    + ImageMagick-CVE-2016-7533.patch
  * CVE-2016-7534 [bsc#1000708]
    + ImageMagick-CVE-2016-7534.patch
  * CVE-2016-7535 [bsc#1000709]
    + ImageMagick-CVE-2016-7535.patch
  * CVE-2016-7537 [bsc#1000711]
    + ImageMagick-CVE-2016-7537.patch
  * CVE-2016-7538 [bsc#1000712]
    + ImageMagick-CVE-2016-7538.patch
  * CVE-2015-8959 [bsc#1000713], CVD-2014-9907 [bsc#1000714]
  - ImageMagick-CVE-2016-5687.patch
    + ImageMagick-CVE-2016-5687,CVE-2015-8959,CVE-2014-9907.patch
  * CVE-2016-7539 [bsc#1000715]
    + ImageMagick-CVE-2016-7539.patch
  * CVE-2016-6823 [bsc#1001066]
    + ImageMagick-CVE-2016-6823.patch
  * CVE-2016-7101 [bsc#1001221]
    + ImageMagick-CVE-2016-7101.patch
  * do not divide by zero in WriteTIFFImage [bsc#1002206]
    + ImageMagick-write-tiff-div-by-zero.patch
  * fix buffer overflows [bsc#1002209]
    + ImageMagick-buffer-overflow-pdb,map,tiff.patch
  * CVE-2016-7799 [bsc#1002421]
    + ImageMagick-CVE-2016-7799.patch
  * CVE-2016-7996, CVE-2016-7997 [bsc#1003629]
    + ImageMagick-CVE-2016-7996,7997.patch
  * CVE-2016-10060 [bsc#1017319]
    + ImageMagick-CVE-2016-10060.patch
  * CVE-2016-10061 [bsc#1017319]
    + ImageMagick-CVE-2016-10061.patch
  * CVE-2016-10062 [bsc#1017319]
    + ImageMagick-CVE-2016-10062.patch
  * CVE-2016-10064 [bsc#1017321]
    + ImageMagick-CVE-2016-10064.patch
  * CVE-2016-10068 [bsc#1017324]
    + ImageMagick-CVE-2016-10068.patch
  * CVE-2016-10069 [bsc#1017325]
    + ImageMagick-CVE-2016-10069.patch
  * CVE-2016-10070 [bsc#1017326]
    + ImageMagick-CVE-2016-10070.patch
  * CVE-2016-10071 [bsc#1017326]
    + ImageMagick-CVE-2016-10071.patch
  * CVE-2017-5507 [bsc#1020439]
    + ImageMagick-CVE-2017-5507.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476792000">- security update:
  * CVE-2016-8684 [bsc#1005123]
    + ImageMagick-CVE-2016-8684.patch
  * CVE-2016-8682 [bsc#1005125]
    + ImageMagick-CVE-2016-8682.patch
  * CVE-2016-8683 [bsc#1005127]
    + ImageMagick-CVE-2016-8683.patch
  * CVE-2016-8677 [bsc#1005328]
    + ImageMagick-CVE-2016-8677.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478692800">- security update:
  * CVE-2016-8862 [bsc#1007245]
    + ImageMagick-CVE-2016-8862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1479124800">- renaming the patch for CVE-2015-8957 to declared name</changelog>
<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>

</package>
<package pkgid="732c33e6e9bc0ea86b13fe573811f0d4f648a8e2b6e2a5b57e8de3e7a8b808dd" name="perl-PerlMagick" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="37.1"/>

<changelog author="rdodopoulos@suse.com" date="1479470400">- update incomplete patch
  * CVE-2016-6823 [bsc#1001066]
    changed ImageMagick-CVE-2016-6823.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480334400">- security update:
  * CVE-2016-9556 [bsc#1011130]
    + ImageMagick-CVE-2016-9556.patch
  * CVE-2016-9559 [bsc#1011136]
    + ImageMagick-CVE-2016-9559.patch</changelog>
<changelog author="pgajdos@suse.com" date="1480852800">- turn of make check
- amend ImageMagick-CVE-2014-9848.patch to fix a regression
  discovered by one of the tests</changelog>
<changelog author="pgajdos@suse.com" date="1481544000">- security update:
  * CVE-2016-8866 [bsc#1009318]
    + ImageMagick-CVE-2016-8866.patch
  * CVE-2016-9773 [bsc#1013376]
    + ImageMagick-CVE-2016-9773.patch
  * CVE-2016-8707 [bsc#1014159]
    + ImageMagick-CVE-2016-8707.patch</changelog>
<changelog author="pgajdos@suse.com" date="1483444800">- revert bogus ImageMagick-CVE-2016-9773.patch, ImageMagick-6 is
  not affected by CVE-2016-9773:
  http://www.imagemagick.org/discourse-server/viewtopic.php?t=31045
  [bsc#1017421]</changelog>
<changelog author="pgajdos@suse.com" date="1484654400">- security update:
  * CVE-2016-10049 [bsc#1017311]
    + ImageMagick-CVE-2016-10049.patch
  * CVE-2016-10050 [bsc#1017312]
    + ImageMagick-CVE-2016-10050.patch
  * CVE-2016-10051 [bsc#1017313]
    + ImageMagick-CVE-2016-10051.patch
  * CVE-2016-10052 [bsc#1017314]
    + ImageMagick-CVE-2016-10052.patch
  * CVE-2016-10144 [bsc#1020433]
    + ImageMagick-CVE-2016-10144.patch
  * CVE-2016-10145 [bsc#1020435]
    + ImageMagick-CVE-2016-10145.patch
  * CVE-2017-5506 [bsc#1020436]
    + ImageMagick-CVE-2017-5506.patch
  * CVE-2016-10059 [bsc#1017318]
    + ImageMagick-CVE-2016-10059.patch
  * CVE-2016-10046 [bsc#1017308]
    + ImageMagick-CVE-2016-10046.patch
  * CVE-2016-10048 [bsc#1017310]
    + ImageMagick-CVE-2016-10048.patch
  * CVE-2017-5508 [bsc#1020441]
    + ImageMagick-CVE-2017-5508.patch
  * CVE-2016-10146 [bsc#1020443]
    + ImageMagick-CVE-2016-10146.patch
  * CVE-2016-10063 [bsc#1017320]
    + ImageMagick-CVE-2016-10063.patch
  * CVE-2017-5510 [bsc#1020446]
    + ImageMagick-CVE-2017-5510.patch
  * CVE-2016-10065 [bsc#1017322]
    + ImageMagick-CVE-2016-10065.patch
  * CVE-2017-5511 [bsc#1020448]
    + ImageMagick-CVE-2017-5511.patch</changelog>
<changelog author="pgajdos@suse.com" date="1490097600">- security update:
  * CVE-2017-6502 [bsc#1028075]
    + ImageMagick-CVE-2017-6502.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-7943 [bsc#1034870]
    + ImageMagick-CVE-2017-7943.patch
  * CVE-2017-7942 [bsc#1034872]
    + ImageMagick-CVE-2017-7942.patch
  * CVE-2017-7941 [bsc#1034876]
    + ImageMagick-CVE-2017-7941.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493726400">- security update:
  * CVE-2017-8344 [bsc#1036978]
    + ImageMagick-CVE-2017-8344.patch
  * CVE-2017-8345, CVE-2017-8350 [bsc#1036980] [bsc#1036985]
    + ImageMagick-CVE-2017-8345,8350.patch
  * CVE-2017-8346 [bsc#1036981]
    + ImageMagick-CVE-2017-8346.patch
  * CVE-2017-8357 [bsc#1036976]
    + ImageMagick-CVE-2017-8357.patch
  * CVE-2017-8343 [bsc#1036977]
    + ImageMagick-CVE-2017-8343.patch
  * CVE-2017-8347 [bsc#1036982]
    + ImageMagick-CVE-2017-8347.patch
  * CVE-2017-8348 [bsc#1036983]
    + ImageMagick-CVE-2017-8348.patch
  * CVE-2017-8349 [bsc#1036984]
    + ImageMagick-CVE-2017-8349.patch
  * CVE-2017-8351 [bsc#1036986]
    + ImageMagick-CVE-2017-8351.patch
  * CVE-2017-8352 [bsc#1036987]
    + ImageMagick-CVE-2017-8352.patch
  * CVE-2017-8353 [bsc#1036988]
    + ImageMagick-CVE-2017-8353.patch
  * CVE-2017-8354 [bsc#1036989]
    + ImageMagick-CVE-2017-8354.patch
  * CVE-2017-8355 [bsc#1036990]
    + ImageMagick-CVE-2017-8355.patch
  * CVE-2017-8356 [bsc#1036991]
    + ImageMagick-CVE-2017-8356.patch
  * CVE-2017-7606 [bsc#1033091]
    + ImageMagick-CVE-2017-7606.patch
  * CVE-2017-8765 [bsc#1037527]
    + ImageMagick-CVE-2017-8765.patch
  * CVE-2017-8830 [bsc#1038000]
    + ImageMagick-CVE-2017-8830.patch</changelog>
<changelog author="pgajdos@suse.com" date="1495454400">- security update:
  * CVE-2017-9098 [bsc#1040025]
    + ImageMagick-CVE-2017-9098.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496145600">- security update:
  * CVE-2017-9143 [bsc#1040306]
    + ImageMagick-CVE-2017-9143.patch
  * CVE-2017-9142 [bsc#1040304]
    + ImageMagick-CVE-2017-9142.patch
  * CVE-2017-9141 [bsc#1040303]
    + ImageMagick-CVE-2017-9141.patch
  * CVE-2017-9144 [bsc#1040332]
    + ImageMagick-CVE-2017-9144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1498651200">- security update:
  * CVE-2017-9440 [bsc#1042812]
    + ImageMagick-CVE-2017-9440.patch
  * CVE-2017-9439 [bsc#1042826]
    + ImageMagick-CVE-2017-9439.patch
  * CVE-2017-9501 [bsc#1043289]
    + ImageMagick-CVE-2017-9501.patch</changelog>
<changelog author="pgajdos@suse.com" date="1500638400">- security update:
  * CVE-2017-11403 [bsc#1049072]
    + ImageMagick-CVE-2017-11403.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291200">- revert wrong part of CVE-2016-7530 fix [bsc#1054924]
  * amended ImageMagick-CVE-2016-7530.patch</changelog>
<changelog author="pgajdos@suse.com" date="1507291201">- security update:
  * CVE-2017-15033 [bsc#1061873]
    + ImageMagick-CVE-2017-15033.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508155200">- recommend ghostscript [bsc#1054924c#25]</changelog>
<changelog author="pgajdos@suse.com" date="1508760000">- security update:
  * CVE-2017-13139 [bsc#1055430]
    + ImageMagick-CVE-2017-13139.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508760001">- security update:
  * CVE-2017-13133 [bsc#1055219]
    + ImageMagick-CVE-2017-13133.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508846400">- security update:
  * CVE-2017-12428 [bsc#1052249], CVE-2017-12431 [bsc#1052253],
    CVE-2017-11534 [bsc#1050135]
    + ImageMagick-CVE-2017-12428,12431,11534.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508932800">- security update:
  * CVE-2017-11446 [bsc#1049379]
    + ImageMagick-CVE-2017-11446.patch
  * CVE-2017-12433 [bsc#1052545]
    + ImageMagick-CVE-2017-12433.patch</changelog>

</package>
<package pkgid="54576a3c06a4795399b4a244c2b5d726842d1eab957d70045fba676ee623ebfe" name="perl-PerlMagick" arch="x86_64">
    <version epoch="0" ver="6.8.8.1" rel="40.1"/>

<changelog author="pgajdos@suse.com" date="1509624000">- security update:
  * CVE-2017-12983 [bsc#1054757]
    + ImageMagick-CVE-2017-12983.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969600">- security update:
  * CVE-2017-15930 [bsc#1066003]
    + ImageMagick-CVE-2017-15930.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969601">- security update:
  * CVE-2017-11478 [bsc#1049796]
    + ImageMagick-CVE-2017-11478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969602">- security update:
  * CVE-2017-15217 [bsc#1062750]
    + ImageMagick-CVE-2017-15217.patch</changelog>
<changelog author="pgajdos@suse.com" date="1509969603">- security update:
  * CVE-2017-13134 [bsc#1055214]
    + ImageMagick-CVE-2017-13134.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056000">- security update:
  * CVE-2017-13769 [bsc#1056432]
    + ImageMagick-CVE-2017-13769.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056001">- security update:
  * CVE-2017-14138 [bsc#1057157]
    + ImageMagick-CVE-2017-14138.patch</changelog>
<changelog author="pgajdos@suse.com" date="1510056002">- security update:
  * CVE-2017-14175 [bsc#1057719]
    + ImageMagick-CVE-2017-14175.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511265600">- security update (wpg.c):
  * CVE-2017-14342 [bsc#1058485]
    + ImageMagick-CVE-2017-14342.patch
  * CVE-2017-14341 [bsc#1058637]
    + ImageMagick-CVE-2017-14341.patch
  * CVE-2017-16546 [bsc#1067181]
    + ImageMagick-CVE-2017-16546.patch
  * CVE-2017-16545 [bsc#1067184]
    + ImageMagick-CVE-2017-16545.patch
  * CVE-2017-16669 [bsc#1067409]
    + GraphicsMagick-CVE-2017-16669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511870400">- security update (tiff.c):
  * CVE-2017-14607 [bsc#1059778]
    + ImageMagick-CVE-2017-14607.patch
  * CVE-2017-11640 [bsc#1050632]
    + ImageMagick-CVE-2017-11640.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511956800">- security update (annotate.c):
  * [bsc#1052744]
    + ImageMagick-unable-to-read-font-memory-leaks.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512043200">- security update (token.c):
  * CVE-2017-14682 [bsc#1060176]
    + ImageMagick-CVE-2017-14682.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512129600">- security update (annotate.c):
  * CVE-2017-14989 [bsc#1061254]
    + ImageMagick-CVE-2017-14989.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388800">- security update (dpx.c):
  * CVE-2017-11188 [bsc#1048457]
    + ImageMagick-CVE-2017-11188.patch
  * CVE-2017-11527 [bsc#1050116]
    + ImageMagick-CVE-2017-11527.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512388801">- security update (dcm.c):
  * CVE-2017-12140, CVE-2017-12644 [bsc#1052764] [bsc#1051847]
    + ImageMagick-CVE-2017-12140,12644.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475200">- security update (ps.c):
  * CVE-2017-11535 [bsc#1050139]
    + ImageMagick-CVE-2017-11535.patch
  * CVE-2017-14172 [bsc#1057730]
    + ImageMagick-CVE-2017-14172.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475201">- security update (pdf.c):
  * CVE-2017-12662 [bsc#1052758]
    + ImageMagick-CVE-2017-12662.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475202">- security update (magick.c):
  * CVE-2017-11752 [bsc#1051441]
    + ImageMagick-CVE-2017-11752.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512475203">- security update (cals.c):
  * CVE-2017-12669 [bsc#1052689]
    + ImageMagick-CVE-2017-12669.patch</changelog>
<changelog author="pgajdos@suse.com" date="1512561600">- security update (rle.c):
  * CVE-2017-14733 [bsc#1060577]
    + ImageMagick-CVE-2017-14733.patch</changelog>

</package>
<package pkgid="5781088d95f3680141cd38f2bddcbe4655d3a52464c5822f5ffd3196c1592bbe" name="perl-Spreadsheet-Read" arch="noarch">
    <version epoch="0" ver="0.49" rel="12.1"/>

<changelog author="chris@computersalat.de" date="1314878400">- initial package 0.43
  * created by cpanspec 1.78.05</changelog>
<changelog author="coolo@suse.com" date="1321617600">- update to 0.45
  - NAME / DISTNAME in Makefile.PL
  - More cross-checks for META data</changelog>
<changelog author="coolo@suse.com" date="1329480000">- updated to 0.46
  * Updated copyright to 2012
  * Support passing attributes to the underlying parser
  * Do not strip fields in sheets with no cells at all (RT#74976)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- updated to 0.49
  * /dev/null cannot be used for tests on Windows
  * Improve documentation consistency (RT#80409)
  * Updated copyright to 2013
  * Force old(er) tar format (ustar) - assumes GNU tar on release box
  * Fix yml/json optional_features
  * Install utilities from example by default
  * Several minor changes (for maint)
  * Note that empty sheets are skipped when clip is true (RT#75277)
  * Allow undef as valid value for the options (Max Maischein)
  * Don't generate warnings when stripping whitespace and only
    generating one of cells or rc. (Max Maschein)
  * Fix test warning under perl-5.17.x</changelog>
<changelog author="coolo@suse.com" date="1371297600">- obsolete xsl2csv</changelog>
<changelog author="chris@computersalat.de" date="1513425600">- fix for boo#1064179
  * fix non-standard-perl path
  * add nonstdperlpath.patch</changelog>

</package>
<package pkgid="3a521da33430912f7b5e943cc0941afa0b65bc20f12ece66964ef6cc679aa639" name="perl-Spreadsheet-Read" arch="src">
    <version epoch="0" ver="0.49" rel="12.1"/>

<changelog author="chris@computersalat.de" date="1314878400">- initial package 0.43
  * created by cpanspec 1.78.05</changelog>
<changelog author="coolo@suse.com" date="1321617600">- update to 0.45
  - NAME / DISTNAME in Makefile.PL
  - More cross-checks for META data</changelog>
<changelog author="coolo@suse.com" date="1329480000">- updated to 0.46
  * Updated copyright to 2012
  * Support passing attributes to the underlying parser
  * Do not strip fields in sheets with no cells at all (RT#74976)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- updated to 0.49
  * /dev/null cannot be used for tests on Windows
  * Improve documentation consistency (RT#80409)
  * Updated copyright to 2013
  * Force old(er) tar format (ustar) - assumes GNU tar on release box
  * Fix yml/json optional_features
  * Install utilities from example by default
  * Several minor changes (for maint)
  * Note that empty sheets are skipped when clip is true (RT#75277)
  * Allow undef as valid value for the options (Max Maischein)
  * Don't generate warnings when stripping whitespace and only
    generating one of cells or rc. (Max Maschein)
  * Fix test warning under perl-5.17.x</changelog>
<changelog author="coolo@suse.com" date="1371297600">- obsolete xsl2csv</changelog>
<changelog author="chris@computersalat.de" date="1513425600">- fix for boo#1064179
  * fix non-standard-perl path
  * add nonstdperlpath.patch</changelog>

</package>
<package pkgid="45a60a2d6de4c72c2097e13d8939619ec69a362c30b4cc84430802fae091f15c" name="perl-Test-Mock-Time" arch="noarch">
    <version epoch="0" ver="0.1.6" rel="2.1"/>

<changelog author="coolo@suse.com" date="1505908800">- initial package 0.1.6
  * created by cpanspec 1.78.08</changelog>

</package>
<package pkgid="785d21b1fb9447d5ecb3a0fedfbd533f7484ec616505c89c77808c6baedcd643" name="perl-Test-Mock-Time" arch="src">
    <version epoch="0" ver="0.1.6" rel="2.1"/>

<changelog author="coolo@suse.com" date="1505908800">- initial package 0.1.6
  * created by cpanspec 1.78.08</changelog>

</package>
<package pkgid="15f9d27d4978e198b91629f9ab594a238435032899d2aaa484409031bb2b35ea" name="perl-apparmor" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="9de2505daa88373dc93cfd827c6f21ebee6d9c4eec6b276a6e495d1ebdb84af9" name="perl-base" arch="x86_64">
    <version epoch="0" ver="5.18.2" rel="9.1"/>

<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="schwab@suse.de" date="1369051200">- Disable testsuite only on qemu user space build</changelog>
<changelog author="mls@suse.de" date="1370520000">- update to 5.18.0
  * new handling of experimental features
  * new hash functions to improve security
  * better hash randomization
  * upgrade to Unicode 6.2
  * support for computed labels
  * vertical tabs are now whitespace
  * smartmatch is experimental again
  * lots of bug fixes
- change perl_requires macro to use MODULE_COMPAT form</changelog>
<changelog author="coolo@suse.com" date="1370952000">- obsolete perl-PathTools and other modules in core</changelog>
<changelog author="coolo@suse.com" date="1370952001">- moving the provides of perl-macros to perl-doc so we can check
  for duplicated man pages in the gen_filelist macro</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add perl-db6.diff to bring the DB_File module up to version 1.828
  where it supports building with libdb-6.0.</changelog>
<changelog author="dvaleev@suse.com" date="1375963200">- skip itimer test from Timer-HiRes for powerpc. Build hosts
  are overloaded, building locally shows tests are passed
  (skip_time_hires.patch)</changelog>
<changelog author="mls@suse.de" date="1378209600">- update to perl-5.18.1
  * B has been upgraded from 1.42 to 1.42_01
  * Digest::SHA has been upgraded from 5.84 to 5.84_01
  * Module::CoreList has been upgraded from 2.89 to 2.96
  * A number of memory leaks in regexp have been plugged
  * The debugger's man command been fixed
  * @_ is now correctly visible in the debugger
  * Lexical constants no longer crash when inlined
  * Deep recursion warnings no longer crash lexical subroutines
- backport backref fix from upstream
- fix INC containing directories multiple times</changelog>
<changelog author="mls@suse.de" date="1378296000">- add libperl_requires macro</changelog>
<changelog author="mls@suse.de" date="1389182400">- update to perl-5.18.2
  * updates for the B::Concise, English, File::Glob modules
  * a lexical subs regression has been fixed
  * a regression when using SUPER with AUTOLOAD has been fixed
  * a buffer overflow with very long identifiers has been fixed
  * some other minor bug fixes
- perl-reg89.diff is no longer needed</changelog>
<changelog author="mls@suse.de" date="1396872000">- move English.pm into perl-base [bnc#869736]</changelog>
<changelog author="mls@suse.de" date="1411473600">- Fix infinite recursion in Data::Dumper [bnc#896715]
  new patch: DataDumper-no-infinite-recursion.diff</changelog>
<changelog author="mls@suse.de" date="1457611200">- fix environment dup handling bug [bnc#967082] [CVE-2016-2381]
  new patch: perl-dupenv.diff
- fix memory leak in 'use utf8' handling [bnc#928292]
  new patch: perl-utf8leak.diff</changelog>
<changelog author="mls@suse.de" date="1465214400">- fix regex engine hanging on bad utf8 [bnc976584] [CVE-2015-8853]
  new patch: perl-badutf8hang.diff</changelog>
<changelog author="mls@suse.de" date="1470225600">- fix xsloader looking at a "(eval)" directory [bnc#988311]
  [CVE-2016-6185]
  new patch: perl-xsloadereval.diff
- fix searching current directory for optional modules
  [bnc#987887] [CVE-2016-1238]
  new patch: perl-nodotinc.diff
- fix "Insecure dependency in require" error in taint mode
  [bnc#984906]
  new patch: perl-recontextnocurpm.diff</changelog>
<changelog author="mls@suse.de" date="1472558400">- add missing lock prototype to the debugger [bnc#932894]
  new patch: perl-dblockproto.diff
- remove base.pm changes from perl-nodotinc.diff</changelog>
<changelog author="mls@suse.de" date="1508932800">- fix heap overflow when compiling case-insensitive \N regexp
  [bnc#1057724] [CVE-2017-12837]
  new patch: perl-regcomp-N-ic.diff
- fix buffer overflow when parsing of \N regexp fails
  [bnc#1057721] [CVE-2017-12883]
  new patch: perl-regcomp-N-parse.diff
- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff
- backport set_capture_string changes from upstream [bnc#999735]
  new patch: perl-set_capture_string.diff
- reformat baselibs.conf as source validator workaround</changelog>

</package>
<package pkgid="a059e2def0f489284f370652c5b4b124e581b06bcbaee03ff846427272b906b6" name="perl-base-32bit" arch="x86_64">
    <version epoch="0" ver="5.18.2" rel="9.1"/>

<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="schwab@suse.de" date="1369051200">- Disable testsuite only on qemu user space build</changelog>
<changelog author="mls@suse.de" date="1370520000">- update to 5.18.0
  * new handling of experimental features
  * new hash functions to improve security
  * better hash randomization
  * upgrade to Unicode 6.2
  * support for computed labels
  * vertical tabs are now whitespace
  * smartmatch is experimental again
  * lots of bug fixes
- change perl_requires macro to use MODULE_COMPAT form</changelog>
<changelog author="coolo@suse.com" date="1370952000">- obsolete perl-PathTools and other modules in core</changelog>
<changelog author="coolo@suse.com" date="1370952001">- moving the provides of perl-macros to perl-doc so we can check
  for duplicated man pages in the gen_filelist macro</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add perl-db6.diff to bring the DB_File module up to version 1.828
  where it supports building with libdb-6.0.</changelog>
<changelog author="dvaleev@suse.com" date="1375963200">- skip itimer test from Timer-HiRes for powerpc. Build hosts
  are overloaded, building locally shows tests are passed
  (skip_time_hires.patch)</changelog>
<changelog author="mls@suse.de" date="1378209600">- update to perl-5.18.1
  * B has been upgraded from 1.42 to 1.42_01
  * Digest::SHA has been upgraded from 5.84 to 5.84_01
  * Module::CoreList has been upgraded from 2.89 to 2.96
  * A number of memory leaks in regexp have been plugged
  * The debugger's man command been fixed
  * @_ is now correctly visible in the debugger
  * Lexical constants no longer crash when inlined
  * Deep recursion warnings no longer crash lexical subroutines
- backport backref fix from upstream
- fix INC containing directories multiple times</changelog>
<changelog author="mls@suse.de" date="1378296000">- add libperl_requires macro</changelog>
<changelog author="mls@suse.de" date="1389182400">- update to perl-5.18.2
  * updates for the B::Concise, English, File::Glob modules
  * a lexical subs regression has been fixed
  * a regression when using SUPER with AUTOLOAD has been fixed
  * a buffer overflow with very long identifiers has been fixed
  * some other minor bug fixes
- perl-reg89.diff is no longer needed</changelog>
<changelog author="mls@suse.de" date="1396872000">- move English.pm into perl-base [bnc#869736]</changelog>
<changelog author="mls@suse.de" date="1411473600">- Fix infinite recursion in Data::Dumper [bnc#896715]
  new patch: DataDumper-no-infinite-recursion.diff</changelog>
<changelog author="mls@suse.de" date="1457611200">- fix environment dup handling bug [bnc#967082] [CVE-2016-2381]
  new patch: perl-dupenv.diff
- fix memory leak in 'use utf8' handling [bnc#928292]
  new patch: perl-utf8leak.diff</changelog>
<changelog author="mls@suse.de" date="1465214400">- fix regex engine hanging on bad utf8 [bnc976584] [CVE-2015-8853]
  new patch: perl-badutf8hang.diff</changelog>
<changelog author="mls@suse.de" date="1470225600">- fix xsloader looking at a "(eval)" directory [bnc#988311]
  [CVE-2016-6185]
  new patch: perl-xsloadereval.diff
- fix searching current directory for optional modules
  [bnc#987887] [CVE-2016-1238]
  new patch: perl-nodotinc.diff
- fix "Insecure dependency in require" error in taint mode
  [bnc#984906]
  new patch: perl-recontextnocurpm.diff</changelog>
<changelog author="mls@suse.de" date="1472558400">- add missing lock prototype to the debugger [bnc#932894]
  new patch: perl-dblockproto.diff
- remove base.pm changes from perl-nodotinc.diff</changelog>
<changelog author="mls@suse.de" date="1508932800">- fix heap overflow when compiling case-insensitive \N regexp
  [bnc#1057724] [CVE-2017-12837]
  new patch: perl-regcomp-N-ic.diff
- fix buffer overflow when parsing of \N regexp fails
  [bnc#1057721] [CVE-2017-12883]
  new patch: perl-regcomp-N-parse.diff
- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff
- backport set_capture_string changes from upstream [bnc#999735]
  new patch: perl-set_capture_string.diff
- reformat baselibs.conf as source validator workaround</changelog>

</package>
<package pkgid="266ab6087aef82113e64c6e64f57a880cc635404ceca48b1a7a41d384656bf25" name="perl-doc" arch="noarch">
    <version epoch="0" ver="5.18.2" rel="9.1"/>

<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="schwab@suse.de" date="1369051200">- Disable testsuite only on qemu user space build</changelog>
<changelog author="mls@suse.de" date="1370520000">- update to 5.18.0
  * new handling of experimental features
  * new hash functions to improve security
  * better hash randomization
  * upgrade to Unicode 6.2
  * support for computed labels
  * vertical tabs are now whitespace
  * smartmatch is experimental again
  * lots of bug fixes
- change perl_requires macro to use MODULE_COMPAT form</changelog>
<changelog author="coolo@suse.com" date="1370952000">- obsolete perl-PathTools and other modules in core</changelog>
<changelog author="coolo@suse.com" date="1370952001">- moving the provides of perl-macros to perl-doc so we can check
  for duplicated man pages in the gen_filelist macro</changelog>
<changelog author="jengelh@inai.de" date="1371297600">- Add perl-db6.diff to bring the DB_File module up to version 1.828
  where it supports building with libdb-6.0.</changelog>
<changelog author="dvaleev@suse.com" date="1375963200">- skip itimer test from Timer-HiRes for powerpc. Build hosts
  are overloaded, building locally shows tests are passed
  (skip_time_hires.patch)</changelog>
<changelog author="mls@suse.de" date="1378209600">- update to perl-5.18.1
  * B has been upgraded from 1.42 to 1.42_01
  * Digest::SHA has been upgraded from 5.84 to 5.84_01
  * Module::CoreList has been upgraded from 2.89 to 2.96
  * A number of memory leaks in regexp have been plugged
  * The debugger's man command been fixed
  * @_ is now correctly visible in the debugger
  * Lexical constants no longer crash when inlined
  * Deep recursion warnings no longer crash lexical subroutines
- backport backref fix from upstream
- fix INC containing directories multiple times</changelog>
<changelog author="mls@suse.de" date="1378296000">- add libperl_requires macro</changelog>
<changelog author="mls@suse.de" date="1389182400">- update to perl-5.18.2
  * updates for the B::Concise, English, File::Glob modules
  * a lexical subs regression has been fixed
  * a regression when using SUPER with AUTOLOAD has been fixed
  * a buffer overflow with very long identifiers has been fixed
  * some other minor bug fixes
- perl-reg89.diff is no longer needed</changelog>
<changelog author="mls@suse.de" date="1396872000">- move English.pm into perl-base [bnc#869736]</changelog>
<changelog author="mls@suse.de" date="1411473600">- Fix infinite recursion in Data::Dumper [bnc#896715]
  new patch: DataDumper-no-infinite-recursion.diff</changelog>
<changelog author="mls@suse.de" date="1457611200">- fix environment dup handling bug [bnc#967082] [CVE-2016-2381]
  new patch: perl-dupenv.diff
- fix memory leak in 'use utf8' handling [bnc#928292]
  new patch: perl-utf8leak.diff</changelog>
<changelog author="mls@suse.de" date="1465214400">- fix regex engine hanging on bad utf8 [bnc976584] [CVE-2015-8853]
  new patch: perl-badutf8hang.diff</changelog>
<changelog author="mls@suse.de" date="1470225600">- fix xsloader looking at a "(eval)" directory [bnc#988311]
  [CVE-2016-6185]
  new patch: perl-xsloadereval.diff
- fix searching current directory for optional modules
  [bnc#987887] [CVE-2016-1238]
  new patch: perl-nodotinc.diff
- fix "Insecure dependency in require" error in taint mode
  [bnc#984906]
  new patch: perl-recontextnocurpm.diff</changelog>
<changelog author="mls@suse.de" date="1472558400">- add missing lock prototype to the debugger [bnc#932894]
  new patch: perl-dblockproto.diff
- remove base.pm changes from perl-nodotinc.diff</changelog>
<changelog author="mls@suse.de" date="1508932800">- fix heap overflow when compiling case-insensitive \N regexp
  [bnc#1057724] [CVE-2017-12837]
  new patch: perl-regcomp-N-ic.diff
- fix buffer overflow when parsing of \N regexp fails
  [bnc#1057721] [CVE-2017-12883]
  new patch: perl-regcomp-N-parse.diff
- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff
- backport set_capture_string changes from upstream [bnc#999735]
  new patch: perl-set_capture_string.diff
- reformat baselibs.conf as source validator workaround</changelog>

</package>
<package pkgid="e7c99edcf1994f835f9c6342da311fd9a9b4d724c8b63fe7f1f1f5de6f8e9a35" name="perl-solv" arch="x86_64">
    <version epoch="0" ver="0.6.30" rel="3.1"/>

<changelog author="mls@suse.de" date="1450094400">- change product links to also look at timestamps [bnc#956443]
- rework multiversion orphaned handling [bnc#957606]
- support key type changes in repodata_internalize()
- allow serialization of REPOKEY_TYPE_DELETED
- improve appdata handling of installed packages
- improve performance when run under xen
- bump version to 0.6.15</changelog>
<changelog author="mls@suse.de" date="1450699200">- fix orphan handling for dup with keeporphans set [bnc#957606]
- bump version to 0.6.16</changelog>
<changelog author="mls@suse.de" date="1450785600">- fix update handling of multiversion packages [bnc#957606]
- bump version to 0.6.17</changelog>
<changelog author="mls@suse.de" date="1454068800">- fix rule generation for linked packages [bnc#961738]
- add hash method in bindings for some classes
- bump version to 0.6.18</changelog>
<changelog author="mls@suse.de" date="1455537600">- parse media number from baseurl
- support susedata.&lt;lang&gt;.xml language files
- bump version to 0.6.19</changelog>
<changelog author="mls@suse.de" date="1460116800">- Better support of complex deps in pool_match_dep and
  selection_make_matchdeps
- make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again
- make dep2str use rpm-like output if disttype is rpm
- implement filtering of Requires(pre,post) for installed packages
- simplify handling of pseudo package updates [bnc#967006]
- improve speed of rpmmd metadata parsing
- bump version to 0.6.20</changelog>
<changelog author="mls@suse.de" date="1463572800">- add pool-&gt;setdisttype to the bindings
- fix error in repo_deb that could lead to missing packages
- add reason testing to testcase code
- add pool_whatcontainsdep, selection_make_matchdepid, and
  SELECTION_MATCH_DEPSTR
- add SOLVER_FAVOR and SOLVER_DISFAVOR job types
- allow unknown archs in pool_setarch
- add the SOLVER_FLAG_URPM_REORDER solver flag
- fix segfault in cshash dedup code [bnc#980901]
- fix supplements handling when implicitobsoleteusescolors is set
- bump version to 0.6.21</changelog>
<changelog author="mls@suse.de" date="1465300800">- fix bug in ignoreinst logic [bnc#983141]</changelog>
<changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
<changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
<changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
<changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
<changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
<changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
<changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
<changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
<changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
<changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
<changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
<changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>

</package>
<package pkgid="cce994e808ebf866a93df26e429a3df9490ee0e73dbe9d3abd894403514d63a0" name="permissions" arch="src">
    <version epoch="0" ver="2015.09.28.1626" rel="16.1"/>

<changelog author="meissner@suse.com" date="1404216000">- vlock_main lost its permission checking, so remove from here.</changelog>
<changelog author="krahmer@suse.com" date="1405944000">- permissions: Adding new kdesud path for KDE5 (bnc#872276)</changelog>
<changelog author="meissner@suse.com" date="1406116800">- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)</changelog>
<changelog author="meissner@suse.com" date="1406894400">- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151</changelog>
<changelog author="meissner@suse.com" date="1409054400">- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)</changelog>
<changelog author="meissner@suse.com" date="1415188800">- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647</changelog>
<changelog author="krahmer@suse.com" date="1417608000">- Added iouyap capabilities (bnc#904060)</changelog>
<changelog author="meissner@suse.com" date="1433764800">- remove /usr/bin/get_printing_ticket; (bnc#906336)</changelog>
<changelog author="meissner@suse.com" date="1443441600">- radosgw can get capability cap_bind_net_service (bsc#943471)</changelog>
<changelog author="meissner@suse.com" date="1443441601">- adjusted radosgw to root:www mode 0750 (bsc#943471)</changelog>
<changelog author="meissner@suse.com" date="1446120000">- permissions-suexec-bsc951765.patch: add suexec with 0755 to all standard
  profiles. this can and should be overridden in permissions.local if you
  need it setuid root. bsc#951765 bsc#263789</changelog>
<changelog author="meissner@suse.com" date="1452600000">- pinger needs to be squid:root, not root:squid (there is no squid group) bsc#961363</changelog>
<changelog author="meissner@suse.com" date="1452859200">- permissions-suexec-bsc962060.patch: the apache folks renamed suexec2
  to suexec with symlink. adjust both (bsc#962060)</changelog>
<changelog author="meissner@suse.com" date="1459339200">- permissions-gst-ptp-helper-960173.patch: permissions: adding gstreamer
  ptp file caps (bsc#960173)</changelog>
<changelog author="meissner@suse.com" date="1469534400">- bsc975352-make-chage-sgid.patch: chage only needs read rights
  for /etc/shadow, so setgid shadow instead of setuid root.
  (bsc#975352)</changelog>
<changelog author="krahmer@suse.com" date="1470139200">- permissions-qemu-bridge-helper-988279.patch: adding qemu-bridge-helper
  mode 04750 (bsc#988279)</changelog>
<changelog author="meissner@suse.com" date="1470139201">- permissions-shadow-bsc979282.patch:
  * list the newuidmap and newgidmap, currently 0755 until review is done (bsc#979282)
  * root:shadow 0755 for newuidmap/newgidmap</changelog>
<changelog author="meissner@suse.com" date="1470571200">- permissions-suexec2-is-symlink.patch: suexec2 is just a symlink</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304
  * permissions-singularity-setuidroot.patch</changelog>
<changelog author="astieger@suse.com" date="1506600000">- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738
  * permissions-singularity-setuidroot2.patch</changelog>

</package>
<package pkgid="0250a3ea14095f4cec2d894f28f9698409341b657ec753a3cd0e2737d910e931" name="permissions" arch="x86_64">
    <version epoch="0" ver="2015.09.28.1626" rel="16.1"/>

<changelog author="meissner@suse.com" date="1404216000">- vlock_main lost its permission checking, so remove from here.</changelog>
<changelog author="krahmer@suse.com" date="1405944000">- permissions: Adding new kdesud path for KDE5 (bnc#872276)</changelog>
<changelog author="meissner@suse.com" date="1406116800">- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)</changelog>
<changelog author="meissner@suse.com" date="1406894400">- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151</changelog>
<changelog author="meissner@suse.com" date="1409054400">- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)</changelog>
<changelog author="meissner@suse.com" date="1415188800">- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647</changelog>
<changelog author="krahmer@suse.com" date="1417608000">- Added iouyap capabilities (bnc#904060)</changelog>
<changelog author="meissner@suse.com" date="1433764800">- remove /usr/bin/get_printing_ticket; (bnc#906336)</changelog>
<changelog author="meissner@suse.com" date="1443441600">- radosgw can get capability cap_bind_net_service (bsc#943471)</changelog>
<changelog author="meissner@suse.com" date="1443441601">- adjusted radosgw to root:www mode 0750 (bsc#943471)</changelog>
<changelog author="meissner@suse.com" date="1446120000">- permissions-suexec-bsc951765.patch: add suexec with 0755 to all standard
  profiles. this can and should be overridden in permissions.local if you
  need it setuid root. bsc#951765 bsc#263789</changelog>
<changelog author="meissner@suse.com" date="1452600000">- pinger needs to be squid:root, not root:squid (there is no squid group) bsc#961363</changelog>
<changelog author="meissner@suse.com" date="1452859200">- permissions-suexec-bsc962060.patch: the apache folks renamed suexec2
  to suexec with symlink. adjust both (bsc#962060)</changelog>
<changelog author="meissner@suse.com" date="1459339200">- permissions-gst-ptp-helper-960173.patch: permissions: adding gstreamer
  ptp file caps (bsc#960173)</changelog>
<changelog author="meissner@suse.com" date="1469534400">- bsc975352-make-chage-sgid.patch: chage only needs read rights
  for /etc/shadow, so setgid shadow instead of setuid root.
  (bsc#975352)</changelog>
<changelog author="krahmer@suse.com" date="1470139200">- permissions-qemu-bridge-helper-988279.patch: adding qemu-bridge-helper
  mode 04750 (bsc#988279)</changelog>
<changelog author="meissner@suse.com" date="1470139201">- permissions-shadow-bsc979282.patch:
  * list the newuidmap and newgidmap, currently 0755 until review is done (bsc#979282)
  * root:shadow 0755 for newuidmap/newgidmap</changelog>
<changelog author="meissner@suse.com" date="1470571200">- permissions-suexec2-is-symlink.patch: suexec2 is just a symlink</changelog>
<changelog author="astieger@suse.com" date="1506081600">- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304
  * permissions-singularity-setuidroot.patch</changelog>
<changelog author="astieger@suse.com" date="1506600000">- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738
  * permissions-singularity-setuidroot2.patch</changelog>

</package>
<package pkgid="0b54252db9521c5b0eb82fc86dec500226a55e90ae685e21fe93906c9bdb6dac" name="php-mapi" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="749d4399bf139cd1878e833ff610c723cd4019827dcd6ee92a92a4259e96a8c9" name="php5" arch="src">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="50c8539816553713e47c4dc5d0cd0a3b81bc2245b376a01edbf78fd3fb1bb5a8" name="php5" arch="src">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="2cd4f71bf7d06e99720a08d3436d92fa6557a4f781bb58639ccf276f2d0c33c1" name="php5" arch="src">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="237dd3c7605fd4421ad0c6349ecbb4f659a232563f159dceec0c1f0e92b51187" name="php5" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="59f51ab38cd732764de0d6201841924804b7f270a85f8feb2f96767a47c34813" name="php5" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="8f6465cc7eb17ea14fb4594c2d2b2fc7eea9b513a100305f591ce2c51928e9e4" name="php5" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="fe289159919d2e6ebf523926f2597c09d788bbbe2e30b63131cdeeecb83c83ff" name="php5-bcmath" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="4c3e804d082d4336551ecd4338048b88e3c9adcbf2e41192f7bcea2171f79cb0" name="php5-bcmath" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="d1b302dd28452859e2f4a772d8a1a41cc1045c34d0120b4b02dbc32a9117a372" name="php5-bcmath" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="1aaa58fbdf089e68c90a1de73a98a0c4da7b2fa3410a04f391f7399803d516b0" name="php5-bz2" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="9d0e8c7019e91c812fa8a22edf6ab6d5f17eafe8f83616905dacd6345adc717b" name="php5-bz2" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="e23897fd6df8c795e0a9956153270d3b207c284036ae91c9c557a590aeb17757" name="php5-bz2" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="925300eb4fafcc1787d62e758a1e3e9a2ad5726b3f6009a57e6514de3ff7af39" name="php5-calendar" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="db5bc795718fca207b660b503b48eeb6362c24b73e6b50e24d1b8b76e4bf7518" name="php5-calendar" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="0bca9a5653fb4f0bf2445115f1a417cb6a70e1ddba0ebc165008aba7e2f1cba6" name="php5-calendar" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="ddcaf84667a00e2faec888a00c78d479052cc5d58db2da3c4788fe9c0c155f6f" name="php5-ctype" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="5cffed6d04a4153100ea7ec62bb66822c5fcd4572256b152c0f269a65ed14c3d" name="php5-ctype" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="6966376042e9e118eb6da33e154ed08b4f97125e4a4367731f1fe719859ed106" name="php5-ctype" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="258b960c89c7589dc731edcd364fc359bb3e2c20134e50d1713912d9bd68894c" name="php5-curl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="39d764c29ccbadf7cde8a11b408bccf969e0c9228ed6e3a915ea3ac64cbebb62" name="php5-curl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="ecd7c1c8adce4c13fd5e0b0ee91f36cecf12da7e8f25f11bc644e29033fbdea7" name="php5-curl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="b3e6c1b2ca3d9c5805f48bf0bd5bed0a778f0dd81b17968315991f73c8710cc2" name="php5-dba" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="703fa776e05ce7a5c990a34059b5dc1ffb4aa78fab0fe936bf158bd5828d8e13" name="php5-dba" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="824260bd9cccf313c6696a2e162d4228ac23c9e33d8a7d3e47d9b3d4eaedf9f2" name="php5-dba" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="89650ee5d9b4987ca5819950cdd99bad361444851fa9607cc320c4dd8154ffb7" name="php5-devel" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="20a7a91269336376d02f1516a60512dd7ba02938824fda6689b54f30225fdf94" name="php5-devel" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="8745a99cf7f08d418a732919b2814afee75da67f516a54bacc1d788b36f3459a" name="php5-devel" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="e3dc37d049db5ca5ffc8b2db3d7cab248f3947d201c2258a400c090084e26e7f" name="php5-dom" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="8e73d816d70d8e6715cac34e7ebeca2f5f39fb812d1d6bf565e2be12c2d9ee77" name="php5-dom" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="cc775ff5a6db3482e0db69f10b14cb611425c36265f8301e59fd58660531cceb" name="php5-dom" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="f07b507573fb69b1383288ebd0c7af7ad3926566e1790bba0da17df8df669fb2" name="php5-enchant" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="2585f652508cd55a4785b7ac785a543cb8979a27bdb18b0d58bb2f5fc8ba771a" name="php5-enchant" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="f8051497e98537602d05849cc90254c3856fe28fa543e04aa05e333361eb8b9a" name="php5-enchant" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="76dbf8533967548b0e979b08d8fd4d72e6e9e5c450d0907967d6be57bbf6a932" name="php5-exif" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="979d92dd1e9540b651e9e02f185ef9adf981d9614471947a8d1c9b406df7b08c" name="php5-exif" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="d5235aad5151d49ae426ae2d935aa132b33fedd6013d55e0874089e0dee81f24" name="php5-exif" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="3c6db9a78e30dae84239ab450c92532b8f1144cd515be822f9bfa9cd31479b4b" name="php5-fastcgi" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="db66d6a42a575cb85c110761dd32048b45f1d47723462e35eaf2f824d41c440d" name="php5-fastcgi" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="e263d9ea2c2e13e6610af81fe6255e34c447e16b384e2677db266f0595bb2d6e" name="php5-fastcgi" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="2ef3587705f46302ccb4faa574a06300ae0f5a24298ee4fd18251f331492ed07" name="php5-fileinfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="969ddaf16ac47acd82d8566948fed65f149d699e0ac3843a5f2aa4ab6bff1283" name="php5-fileinfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="9b8e1b9cb12cdbeeb536b359eca64f9d730ea3bd59d545bcf7b1adeec3595017" name="php5-fileinfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="726b8d046094e1a839efe6517ef57ca7e1a59a05de0b37c40f7f306a3d7cd154" name="php5-firebird" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="a72d32439a9968824c6cd01cd4803a34da994cb575e4c54e3a312f0c9f800036" name="php5-firebird" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="3581977b3a65ef8c42920b6f1e083e480750ebecf7c5f12bb5267ef29289f0c2" name="php5-firebird" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="69933741b9bb13fbe9e34cdc3d5bb2e12a223ad889100c88f9e9de6eda03d236" name="php5-fpm" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="3e5a137219163a260312c1ac7eb4763b6482b126f647c0900186cc157323727f" name="php5-fpm" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="a859e4c207c14e0212eac52f25c98e10d162994db96e7b8332832ef505197340" name="php5-fpm" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="a647fcaf6ce7515499514717993f5673c7a82e4640fd205c95cf85051f175848" name="php5-ftp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="c88cabd35e8b17255f0df6a89fb651cd5ff3230ae7f03098ed6eadcabfe3641b" name="php5-ftp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="12f3d5ff6a38e6b8cf7f50602c0831f6ebbb01069ec36d1908bb3c25bcb6e68b" name="php5-ftp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="53a4879d94723195cee2be3bd585abba7c726a4b12e2ef65ad9e74fafe3f18d7" name="php5-gd" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="119d0f1566ee76a89677db19dba232e955ba0dc81610a155f83e534a0cbe7180" name="php5-gd" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="26e29a58c58b227ee8cecd53daa6efaf12af58aa023acfca7d5db198f8f6e72c" name="php5-gd" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="3bbf5cda9490ce3abfcf4758b42308078b7dbe049716c4e2128039d83f1e1702" name="php5-gettext" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="f6fb168abc4f29dfeb85ed3b157d67d557346e647bf69ef78b341b2afee8c937" name="php5-gettext" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="a4aad0a3c4b7aa56d21a2f5a432da372bd2f8524f094b7e7dfebbeb2f3eb594b" name="php5-gettext" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="48437a1f90d946293d5e11e4f6facd1031218f241f2db9e386079cdb6cc3d66d" name="php5-gmp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="af9b4eeaa469edb4394f648bfbcca2183fa940c9556e124bbdc65989896dafa6" name="php5-gmp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="accd932667ff17f73a44c756c4522bdaecf1594c93d88e6b319e76a67b5741c5" name="php5-gmp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="29aa29e723a0a9af5d01043ecf27da3cd0dddb5665278e3d690eec7cab9cd2e5" name="php5-iconv" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="a1ffff0c1a81398063cfb493cf940bd1215461dc885f49e90f2c917e902a3612" name="php5-iconv" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="ba46e69cd74c83ed91aa5a9f17a9759390e994debf79973d1e92048bea03772d" name="php5-iconv" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="742eb61979743406bd527159cbc351e3bd34e73e9fdeb5e195f8604571099b08" name="php5-imap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="692982d5c004edd524314cc8dbbc29d7ac585ce4b6f34050405103fd7f75287b" name="php5-imap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="340e9c9eb248a5435634f9a507c403e8158b7df73b8c6b9564c5574b84c05830" name="php5-imap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="55afc960e32c8f5cf85c8a4830edde56e4d5e303e5ff6df781fe621b15d63418" name="php5-intl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="e012ec6c5025ed75d562c18c4ecb85bbc1682a6b4656932bc63b4b3ceecc6df4" name="php5-intl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="7a44b8226bb9be4a34b8d6a587bb648f0cba0153bd94a2421a3f233194d7fcea" name="php5-intl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="08a51135a6021bf88c3eea343c7dae21630e25acc20ecf2318f1fef7be2c8714" name="php5-json" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="eec253d04b9005d4d3fcd5a666aca1bffd1ff272820e01ca8b8e54fff9032e96" name="php5-json" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="c4593797db6e7b0928dfa3408b6affed4aff25eb93626dc0afe1ac0d3f39ce46" name="php5-json" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="8a336934e67a4d7812e0780507661a6e7317ecd0d6766e2e98fa6fc66175d06e" name="php5-ldap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="c4562703e2c0197b0acdbf9c1db7b5e1e92723e445f76cc549e7dfe153490cce" name="php5-ldap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="3f3e4abc90acc16b652b26fc0100927a820aff621f6494893cb6962f042c9185" name="php5-ldap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="8513a7de7b14bd50e8b647cc6528f7822dfee15eb322bd3e4cc0d611f63236b6" name="php5-mbstring" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="298c89f2422cb13a7658f0a491b28521041fece977a51e83a1d9165e163b1bdb" name="php5-mbstring" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="210d003d02d94e7677a404f2616e7e2a42a9932bf68882e84cddd02955986282" name="php5-mbstring" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="860508a139773cc1cc49e3d6b95fae6939db9f3767f2cad9ec6dce7ede882b52" name="php5-mcrypt" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="50381456a01b5dcf3d06081fbae1a85c51323281548e146e129205bc147c5e1e" name="php5-mcrypt" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="c3bf432a87bade8d0be78f615fa13454bb94e3263f8629cd0e8d681c4b7d2923" name="php5-mcrypt" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="ac7c02cb52593f1f3b9b3080d11112de77d19522027cd0d5c78fbc55823406d7" name="php5-mssql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="7b47dc09859d3a87f0ce62d8d1beba00b986ccde9fc2a02acd4c14da936e8264" name="php5-mssql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="d00c9d5be700fb00a00bff31351196c345683f31f9167c9e5d188576d2d12925" name="php5-mssql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="a75b029f7dbf5d68581baa15654668d686a9fc2482a27817f20984b1c4f633a3" name="php5-mysql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="954fb29a1a843c2cf839ce98eb8187e591fb67a7ff379933485e4e8dd5294c82" name="php5-mysql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="35cfbc0e8ac1302626d1c423534a36edafed1290281c3f8e0ff6d8ee9c1b64f1" name="php5-mysql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="4f3dbc1cf3027e780df5e97968954d905cab3ce16874d48126f3d88025767902" name="php5-odbc" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="dcf6931f3857a26ac98b571cb52cf2816a2a23629d6f9700320e64c407675988" name="php5-odbc" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="f1f7fb0b9cbd7a6899a86a4a81eda8569fa8cb9e6aaed1101eb58d907546c8ca" name="php5-odbc" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="8470badbc4016868524a2ff4e1b36ffe5849f716f3a1bc5c68548770893a792f" name="php5-opcache" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="2b440f1f82eac5ef5355308ff62aa8b9bd0182143a7e005786c31f61217582bd" name="php5-opcache" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="a931afb6fc69a6b452c42e181d7cac68074437382956ccacb273558cca0ca4e1" name="php5-opcache" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="31f1ae6acbd14c2e36d021a3fb81e570fdfb646e7411732faa3e4d6a5f512a31" name="php5-openssl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="8c610ff2a6519917d1e0f6eb82e2a9fe6331038b005cf7eb94435ace26db0388" name="php5-openssl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="0ba47c55e63304cab1c6508c95e46de6d5d71213a2161cb7c7b623df03c1e614" name="php5-openssl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="71143f517aeb79e1dab8695883a186a5a1428bad40455d4a06a85a43f5b0a637" name="php5-pcntl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="05a7c570f3ce1d439338977cc663e5fb7cc2e0e96dbd91facb6e8e03d05a733d" name="php5-pcntl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="877322c162e07e81c0526e3a67fc413c09f9d6bd93078b28b9d72fbb6eb7ade9" name="php5-pcntl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="1f76b8855fb4c9be6851e63e942b3166c60c780275d82c9b319999198582b88b" name="php5-pdo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="54caebca9473414c9aad8b7a900dbda98e125a5eec834f7ee6f7bbea3ed28805" name="php5-pdo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="dc2aeb0c19fd494732266ed859ce9747b186ddd90a442781767b48a19d8ea093" name="php5-pdo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="6d63435abce5fd67f55b90a721e5a47f8737fc33e38ba4b28e6b5b5cc132ab28" name="php5-pear" arch="noarch">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="df231ce1feccba9a3f2a9a3248d977366a5a6a94dc5bc8cd7b78b92e4ce16e9a" name="php5-pear" arch="noarch">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="43aa03fa7d06775287dc464b4207223836587a9fb6e891868f43da530d4e2ae8" name="php5-pear" arch="noarch">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="1d521445bb21a08d9e28ac46a8d84b39adb18c4bb8f04bf33d0f0b8f499529bf" name="php5-pgsql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="76373bfe4eafd005c6e5c0e77e4b842f553338ab1b7657cc7aeded6ba2c8ddf7" name="php5-pgsql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="b6be7a610ba8c036c5fb1b6233db68f20ef3911cd4f50d1df7d7b6ce96cf3292" name="php5-pgsql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="166b56a6b86d601301bc16f5bac1c00b7bf305de004efa197252b93ec2fcc123" name="php5-phar" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="744ea8fa2e1721e6df061e2cbebfe40de483c73a2aaaf2e3209886ad334dbdd9" name="php5-phar" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="d348c2310592642ee5316e7039d3bfbacd2b8b6df57fcabf72877af23456cca2" name="php5-phar" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="90acde569fe6cf1c58cc623388c4cd7e85f5c9962126f61fcd6e79ff7bdd8038" name="php5-posix" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="0d5be4153a315f5f9c7c32692422dd8bc343866a111284bc4e577c0d031e5782" name="php5-posix" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="6a1f310fd539d016f9c70254c7ea25b4bc2bb5598e834e3a2937b251ef59d8c9" name="php5-posix" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="d113c7206bdda5ce21645201f0a97704c40d99a47c252b3ad1610b92de60fe80" name="php5-pspell" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="abf0f95ed1c2b168c2c98b7562d2471394d0e11a785f27226a2655053b3dbe86" name="php5-pspell" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="7867b39d02ee6cc3bd63519d10362be98acd0b48020d7d1fff6eb4fd81963c2e" name="php5-pspell" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="15ba13789cfe1b62f467be43ac221d43e538bc5c1c6abac1f19239508f922551" name="php5-readline" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="a8a7fd95241cfacbb18b52ec9e5e0f03cb71785e55b4809e72e90ce3686f79ad" name="php5-readline" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="f6f133015d98619139cf440e2600216af440dd7f653c1367603e7beec4d0b2a8" name="php5-readline" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="0c650ffa68df589974a455dc4a00af4990d9c2a1aad29e2680263d7de76de20e" name="php5-shmop" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="6203e7e22fd380744dc199173605f082ed2c293cfe3bbe0221a9ec68be20da99" name="php5-shmop" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="4f9fde18234615b51a9c6ab0dc69c90d2612962c9353b02f636b911e30e47a4c" name="php5-shmop" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="bc3f88078ce18094a388370c1c46a67d8c3a57673e4ffefe80c6a5ece91dabcc" name="php5-snmp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="7aabfff2f6a3c39f60369e5040567029ef288d736a8b4664c55509bfd2ad839e" name="php5-snmp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="8443abe4c5b22856f07dfd6cf7514f983e680832d8be2dc1912547076494e51d" name="php5-snmp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="116250d37ec4dc8caf97ea87c3e02f1823cad0d6f05d11ec0a20037db5f47bbe" name="php5-soap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="c9e5b1e666f479e04725d546f254be1044fbd808e487ef65cca3c3cd86aeaf05" name="php5-soap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="27fa3ba68c3d2ac4d6e10d110322ea990560d30c991ac1e02ec44136eb48c0cd" name="php5-soap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="1bcd78d33d4a6ee2d115c50da12255b06fbe088ddf36e69b0d7551e83cdea986" name="php5-sockets" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="fd072c5533d4482dd43ce8c6226494b7d95fa311dad8d7b7f316ccb12457f4d6" name="php5-sockets" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="e9dc7beaef9fbce36b42dc7aeb99f92f80afd1ea67dc45553de8365e3844c485" name="php5-sockets" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="09c29cb7c6c5dde537117052f5b2f4bf76e7789e8a2f9c4d5e5d4fe93514f903" name="php5-sqlite" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="58b03272385f5c9248ec907ddf0cec6f3a0c31f4682226a9b3fefcb1c8a78fbe" name="php5-sqlite" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="6f47ac7cf2a3a781c5d4c70c453ec975232350455e7295f986592e89b5e239ba" name="php5-sqlite" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="c2b303bea744915f0161ac936b6ba2a1504c3db1e55e307d7a7363c7b57d7479" name="php5-suhosin" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="27ab77d61ba90ff8056fa2fede4b986956abac0c2352d8eb10461fa7391b96cd" name="php5-suhosin" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="34c0fe211bd14d5c40facc5429fad60052d11cca5fb88c4b81c78726f7cd1338" name="php5-suhosin" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="b8ecc692e9f9239b6d3e9ed9a17de86aa4c0acec60de398dcafffb682d60ffff" name="php5-sysvmsg" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="3e9ef5bca7d694d791aa9554d67754b69c0ea7df103510a6641a39690cb3fb61" name="php5-sysvmsg" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="302e6203383d106ca349da973d3f1ce9bd7153434caf2c3bdc3a971f6c1bfa4d" name="php5-sysvmsg" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="7070bb55937d5f773a0c254134fad68008bc009269b8ae87a18e228d40031316" name="php5-sysvsem" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="0925639cc692dd3c0cd8c7ae3fabdc1ed651930dd22c3dc17f8866f88cf89715" name="php5-sysvsem" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="879100a2e04e1b34cb090227556095ba278813f4f4f45740e708d3021a479147" name="php5-sysvsem" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="18ac9ebeabeb2d1bb3bb936daa1449bb135332c27194744dfd1f9a3ff227fab9" name="php5-sysvshm" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="090fd77bbcade4f76b862d10dc145bcf0980424a18a489c3923b5f3e1d3a54f7" name="php5-sysvshm" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="5455dd8e71b8a7e0457384a731495ea8939ee6763af7fd29ca4796e4bf57871b" name="php5-sysvshm" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="0e1cdabbb24aff7cd98a29d80fcc15ef145599b676892ed68fdb3eda1de6f443" name="php5-tidy" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="78f04dd5bbff99e77638c6bf54e4b74c4791c3e4444a5d8e97499b3615b13112" name="php5-tidy" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="c7aa7b64be7666bdeee1935db970363b572eeadac060398738e356844d9fffcf" name="php5-tidy" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="c42b111401db2799e2ddcc81234e108ff99097d56fec4c3477452cfe2788ae58" name="php5-tokenizer" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="1f4539877b86c395634144b63df86bdcf2ee68204500b23211a70cfa2df6f7cf" name="php5-tokenizer" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="06c8a110304b648e3687700255652a64b830f6f3c7905cebddf102b4775bab69" name="php5-tokenizer" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="1cb47a131fba790799863a260c43ae251076761e8298d00a72766e58bf96e257" name="php5-wddx" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="5e5fd8c38026615e60d03feca2254ee4cf505e759c0d86fb735c7b2f44de5d0d" name="php5-wddx" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="04e88e1f7f40c04c71dc082a5bb17a0761a9b5b041b6a532594f8def1ab8a90a" name="php5-wddx" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="67e09e2e583a5f7aa1e69ac2b816648ecbeab01caf2a2e4f105f991daa8eec72" name="php5-xmlreader" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="6d56014ced7135d4187fb9fd5cc044f26cb6cc98c0db7820847fada37d1000b2" name="php5-xmlreader" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="57c509f9567461342a45e7c544922e1f58d65ed11e2aeba75222665124be5826" name="php5-xmlreader" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="749bf1c3222f6b6b3128b280e1b000a3995d813da4bacd2d408d6eb547a357f8" name="php5-xmlrpc" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="c1d29d3513f33e628e6008c1bf1e3c134848ea7dc43e05dbc46c0b769e26e4b4" name="php5-xmlrpc" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="121c903a64e027c1fa3816967973cd07786da66de25b4099ba81f83261181442" name="php5-xmlrpc" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="d61d9d0d1420abf33744797cbbce1b7f2978fe8d0d4b51cc6d5dbaa1a6ffb3d0" name="php5-xmlwriter" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="8ef7cb9f645dd2d0eb8bfd856704011c17fe9aa259f0d70ad7435e882c312c21" name="php5-xmlwriter" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="38726f0c65ef96a54b19c71f517d9032210925cfa077aa97c5fb31c8a397b857" name="php5-xmlwriter" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="bbe904d417b5e92a7e1571fc80149752af100e9726bc30a118456abe8dc70f36" name="php5-xsl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="84aafeb3b7fd2db110917c88deccb17d9435d5f535ba34ea57de288a52bd8083" name="php5-xsl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="67a0180b1f28124295bc5bfd763b79e33a50d3e8469710f00b5ae9029a3d39af" name="php5-xsl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="d65e36dea171cf861f80a6cade1fba3ce708d95b7fd6b995030e8a0a81a238ec" name="php5-zip" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="c27ee44226fcd81202422b4f4fc6b43862c02dbde90bf7a1ddacad910cf7cd41" name="php5-zip" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="26abdcf5655656468d86f4d26091d95676d6da2e3f04e022702e6eef8650c287" name="php5-zip" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="3ebe1ace2115933924535b57446ab62581acd4f9348ae01878cbe9b6d8180bd7" name="php5-zlib" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="82.1"/>

<changelog author="pgajdos@suse.com" date="1464091200">- security update:
  * CVE-2015-8877 [bsc#981061]
    + php-CVE-2015-8877.patch
  * CVE-2015-8876 [bsc#981049]
    + php-CVE-2015-8876.patc
  * CVE-2015-8879 [bsc#981050]
    + php-CVE-2015-8879.patch</changelog>
<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>

</package>
<package pkgid="35f45278b2600e9f436a3d0da3bf58d5e5511217af7725cf79f637bfbfd61415" name="php5-zlib" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="85.1"/>

<changelog author="pgajdos@suse.com" date="1464696000">- security update:
  * CVE-2013-7456 [bsc#982009]
    + php-CVE-2013-7456.patch
  * CVE-2016-5093 [bsc#982010]
    + php-CVE-2016-5093.patch
  * CVE-2016-5094, CVE-2016-5095 [bsc#982011] [bsc#982012]
    + php-CVE-2016-5094,5095.patch
  * CVE-2016-5096 [bsc#982013]
    + php-CVE-2016-5096.patch</changelog>
<changelog author="pgajdos@suse.com" date="1467028800">- security update:
  * CVE-2016-5768 [bsc#986246]
    + php-CVE-2016-5768.patch
  * CVE-2016-5772 [bsc#986244]
    + php-CVE-2016-5772.patch
  * CVE-2015-8935 [bsc#986004]
    + php-CVE-2015-8935.patch
  * CVE-2016-5770 [bsc#986392]
    + php-CVE-2016-5770.patch
  * CVE-2016-5771 [bsc#986391]
    + php-CVE-2016-5771.patch
  * CVE-2016-5769 [bsc#986388]
    + php-CVE-2016-5769.patch
  * CVE-2016-5766 [bsc#986386]
    + php-CVE-2016-5766.patch
  * CVE-2016-5767 [bsc#986393]
    + php-CVE-2016-5767.patch
  * CVE-2016-5773 [bsc#986247]
    + php-CVE-2016-5773.patch</changelog>
<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>

</package>
<package pkgid="1b1d4bdaa4572587d272d4be2141ebc53273a445627ea307bb3c44d8b8d99170" name="php5-zlib" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="88.1"/>

<changelog author="sflees@suse.de" date="1468843200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1470139200">- security update:
  * CVE-2014-3587 [bsc#987530]
    + php-CVE-2016-3587.patch
  * CVE-2016-6128 [bsc#987580]
    + php-CVE-2016-6128.patch
  * CVE-2016-6161 [bsc#988032]
    + php-CVE-2016-6161.patch
  * CVE-2016-6292 [bsc#991422]
    + php-CVE-2016-6292.patch
  * CVE-2016-6295 [bsc#991424]
    + php-CVE-2016-6295.patch
  * CVE-2016-6297 [bsc#991426]
    + php-CVE-2016-6297.patch
  * CVE-2016-6291 [bsc#991427]
    + php-CVE-2016-6291.patch
  * CVE-2016-6289 [bsc#991428]
    + php-CVE-2016-6289.patch
  * CVE-2016-6290 [bsc#991429]
    + php-CVE-2016-6290.patch
  * CVE-2016-5399 [bsc#991430]
    + php-CVE-2016-5399.patch
  * CVE-2016-6288 [bsc#991433]
    + php-CVE-2016-6288.patch
  * CVE-2016-6296 [bsc#991437]
    + php-CVE-2016-6296.patch
  * CVE-2016-6207 [bsc#991434]
    + php-CVE-2016-6207.patch</changelog>
<changelog author="pgajdos@suse.com" date="1473076800">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7411 [bsc#999682]
    + php-CVE-2016-7411.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500379200">- security update:
  * CVE-2017-11143 [bsc#1048097]
    + php-CVE-2017-11143.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch
  * CVE-2017-4025 [bsc#1067090]
    + php-CVE-2017-4025.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="b53d934111e338c951d5dba920ffea57dabbb79e663b41ccc10823571b440668" name="php7" arch="src">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="5707b36f0d2c7a45e730f72d35d6b4eb6df5cd242a7b350093719221b68544c3" name="php7" arch="src">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="a6bf5599785f92dbc63c8308f1191ca71c43075b474b4e0e769d6a96fb45627d" name="php7" arch="src">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="b9d524e87e1dbc6fa656d569c9fd167d2bdb482d8a186bac4835a2a640bcf8a6" name="php7" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="c21943f8936bc9a051e7df28e6b933f722752ddec2cae3b7f3c9556fdaa8120b" name="php7" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="4808894434d92462fe89d1ba96c8dfa8b63ddcf740ba7f52d4408402fc418a07" name="php7" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="3a93da6af7fa23b3f91fdfa7826894725f8e4d5f48930ab6f2561a8231689723" name="php7-bcmath" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="fa367fb51d5c0775cfb1d9e473249a9141a150b074bb3b5682990b70b1f7eb86" name="php7-bcmath" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="5c2510227ae5e66f080c467ff49797a66b74dcabfedaf1751fe1e86a38ba20f2" name="php7-bcmath" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="bcf37921d06ab25685fd0f65866ffae73d923015b1e6cba2795658bddb4951ab" name="php7-bz2" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="ac0a699443c3f407b7fdf2dbe47620ea3f61eb6bf132dece1bd12ae04cdbc9c9" name="php7-bz2" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="d160bb69616a518084a51bf8e30f76795d1d7ab709267d6f9221052aa3b4fe0d" name="php7-bz2" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="81ecd3ec4de837ac8e6a6b67588f6f77787c1659bf64b55aa1967ca1dd4e9016" name="php7-calendar" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="46d0197f358c50aced6ee04f061598fdaeccabc3d68c34cb76dcc6c89e7dcd7d" name="php7-calendar" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="1e18fc44636fd43118e8edf9c3e0c4db2c99648765fcb459efdcb5c7d8ef7571" name="php7-calendar" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="2f3183e4ae11b0d9c230c60e9633a60f439cf6f0bebadc5adbe17aadb7d7d0fd" name="php7-ctype" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="700b25e9a7005eb6d33f21bc7e2cfa020002672a2f66fd386101627755c9bab2" name="php7-ctype" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="8d83b0ab3df5c30ddcfce6523d89f5a7dffee01bc948a09d49182434d8601dff" name="php7-ctype" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="13db7ab77448b05dc15e2f90f4c1065ed097827c613a3a5c49d5c2b50c18777c" name="php7-curl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="cd71864561d98fc6b140570bb4ec38b9f4aa3f1113f21567d7cb4ebf33e4d56c" name="php7-curl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="11d3063f2929eec34f44e780fa34918e88f00fc7bcfbc3ed4e2de272ea30c0db" name="php7-curl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="029ce17076700fec76f7e34cb5a8cc8a803415d0ddc1b9478d804f385b0dbfde" name="php7-dba" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="25cb26d668003b14bee2e741a2892073abcc78ef36024c01c7537ddd0e3c91ae" name="php7-dba" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="3b9c64547ff003a7681b1d493385c2ce60b7a56bea9d9a21f3bb63ea3f6e187e" name="php7-dba" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="c7d149cd09aebedf108fcbb935cd3169796d450d0aade199aa11cc3778fe8035" name="php7-devel" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="1293b1e62c1e82ee88bea4b35728c1ef84c4e4b47e2688cb9c9d6acdd5c0a014" name="php7-devel" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="2f2f0d127038b9f523004c395d28f743a6825d5f029b090204df58fe47aa666c" name="php7-devel" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="4dae1e32404fc52bddb2509b7cf6b53dffcb2473c24b9c1e8fb5a76a0000ac8c" name="php7-dom" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="f25ddf7fac6ede4eced939a7e5ed05eaadbdc5b65d87ad4d43b7a04e5c07f07b" name="php7-dom" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="f8d766425ed591ea2a234ad752c985be22c10a975d6730708e22d557b884e78c" name="php7-dom" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="d38827cc020dfa00ce4a263b581cbbb33f2338d6d0d69354e949e7cb22813235" name="php7-enchant" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="9cff69a3a1d302dbe6dffcf9541b1386358fcfda97fb540c04abed32435a60da" name="php7-enchant" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="252d8d11e8619efe6a6d8bec31caca7f1c5111a204d70036cfd402529e93ffd5" name="php7-enchant" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="0d74f58045b6533a227b7a091c95689afbba3eef31e663cdcc498547c54f70bc" name="php7-exif" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="423f043a47587d49d679254040b1e5b14718497926ede3dde50c635efc815a80" name="php7-exif" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="b60d102785e5bd3b29c239e10791e48ba0d45282a63562099c6fb91dbf0b826a" name="php7-exif" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="9c522dcfaca6e19d37d59aa32a977330b6a14b544aec8da2994190c093935fd7" name="php7-fastcgi" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="0bd619c71bb5ffd97307c894e0490546b7734e63b916fef693909c284d8c8abc" name="php7-fastcgi" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="9c2729ff1812c8d320d57884c18489c53aef2d9f413b70d9a3b5f67f91f416a6" name="php7-fastcgi" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="ee66fefc7b7babbc5f32e5653d77038705d6bac0811491ebd05f723a77d5eac4" name="php7-fileinfo" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="f17c74f527ca81ac1e41f362153367cdf015e4c317689ad3096fe5a5e64f4ef0" name="php7-fileinfo" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="ea6945501f9c9837dad1710915f04ddc7c87ae9eb34f928f161f545b51c27bfa" name="php7-fileinfo" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="3977f06b1dfd07cbb2bcf7ce5b016e30248b9b19913f66b588c361defec258f8" name="php7-firebird" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="0c8ddd2efd825cce27f51ebc691ec3dcd74c2cadaa9b2e084b3bc39ee3dfe875" name="php7-firebird" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="13b580e49e1c0a1cfceae392bca3c7a22a4c42bf138d4c7b1c78dfb3383a7e29" name="php7-firebird" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="3d768c7d1d5080a9f4bfa0b9cbd128c6e827b0963b6724e755a291e1c2fb742e" name="php7-fpm" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="bc85d24c154c78c15e9f304c1c1eaca4a2e7b86e10d265d4abd6153b09ef26c2" name="php7-fpm" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="844dfa7c0bc150ace5506dfacd80d7407b559d395cb27618db078c892021f343" name="php7-fpm" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="6bf0a2f2def6aa668bc5b0ed1b877b79fe587b7b7c443ca080166ba4dc5c3012" name="php7-ftp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="bef6e6e85148700238f4d88ef1bcfc1bdab96d55b9a178bf0fb35afe7fc1f8ce" name="php7-ftp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="becbfcd8f60f40572b2c3d28ed9ffdc0460110f325b811d6300478bff165298f" name="php7-ftp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="346f44572dd50b857c88fda60ded78bbc0126deb9d3ed7e9ded2dcb18f7f7af9" name="php7-gd" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="20e9d7f1b016623239d81c31942ed4b0f25fe4581cecba71c06c3b3f0d9aafc7" name="php7-gd" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="eb7e86d1fe58aa57be23450cbe41f4674733c048e7563dde54c3f27d507c7151" name="php7-gd" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="de54ca57b051d96d2e10a0299ff398d5a4221f2a7a41f987955182e86b1f5376" name="php7-gettext" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="7e63433a0522acaad11979410e3bafc0632a092b9d6940097b289e25374ba45e" name="php7-gettext" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="d3def769043f08150ce446e556dff0eb613b2e8d3636230e9e6f8bbf453be209" name="php7-gettext" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="b8b728d6a3e3e4224e742f2ede0548dacbea9be06c95740be18bd2b1ffcc9e8f" name="php7-gmp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="e5e32ecd2d046f03f51aabf71db4b1637bd68f41cf11cb0181478132f2dda3d5" name="php7-gmp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="0cd8f7ad49b0e609dfb6dff4b98f9465050b66acbc754a4f11b64177409cb271" name="php7-gmp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="610c240d1f8402cc5b31cf51a46e56749b17121fbbf3c36928c1a95be88da724" name="php7-iconv" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="20b264671c2178f551007fcecb288505d7db98e64536bc9a961ba17c75c99492" name="php7-iconv" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="0a5e2a1a32f33edcf3fa0286a4393c0866e046b2e2665ec046d221cb6d99aded" name="php7-iconv" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="75c6dd1dae2486ade4728619399f827b6d39177da48e1654375041c6da9e7a54" name="php7-imap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="981ec729da88a2cf4f8f9cf6172cc8c59d32d5f32da304dcb8cbcf396514ba66" name="php7-imap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="0e3f7bb5b4416b90540c9b379d79758e9d84225799f61077ab9e77624c3fbe2f" name="php7-imap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="b31186ec977df96ea64456b2c42fc736c91a05c8f5429b3ee2a90f33ab3b68bb" name="php7-intl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="9184a32988703b168cb558a8c630b0e7e67eb31fe4abc0894fb134a8f4f26a3b" name="php7-intl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="0d2a45ce774e662e98d55b183b14f891def6bb38094e2bf238585a69f6e592dd" name="php7-intl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="14a13737a64671750bb88e6ab46f9785ddaf110b65880cf44f42bbb5a75488fe" name="php7-json" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="bd8ba60dbbaa6fb315be35de42795c80df9a5982a1f292b8491906739177eac4" name="php7-json" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="d23484de457fc6c3819712125fd96729d198adf5b4ea052e33f13f4ee770963f" name="php7-json" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="fbc0c2aa917749ff9d9981f4c67845626f01123a0cf485afad41e481279e6db5" name="php7-ldap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="afa3c956b3c5d3791226b475b0799e8ffd9e83842be07945fbc02f2f16cf8d1d" name="php7-ldap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="b4c7414fc0a23299157304f2501347ff8beb0b9d877f0b37b396e7aeab816524" name="php7-ldap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="5540c32614320cb3eceef244f14c5b7595dd2c6e128a63df74641d818a60a2b2" name="php7-mbstring" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="21b91cfb12915a3292cc4c5492eb1f061f7d6446d6ce9961641158990732d692" name="php7-mbstring" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="0aca9ac9a16563b1f7c809bae7b61ce63c05896a7857f84f9cd31a9332f05700" name="php7-mbstring" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="3280ebe2b41cecc5ebd6b8a8f6f0de53409d545c588b736de9b3b50de070beb8" name="php7-mcrypt" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="31b10a1efa4bcbe78da2f1bb8c2fef58657184fb6ecf723eefa61ab72e00c717" name="php7-mcrypt" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="5be8f03f42aa46745ee90ffc8245d7a307f6bb060e2a716624014f1fb11a5cc1" name="php7-mcrypt" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="c107672aface518c475659d23c0f378e65373e12fde74b18b6c6df4d920ffec0" name="php7-mysql" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="310627680c905c5dbb9921fc55c3f558a36107ba0896eaedf35fd002dbfa3767" name="php7-mysql" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="456a6b20c0c38e3cde3ef687596865c8ed44e9489dedda42ac61d57d7cc2f4ef" name="php7-mysql" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="68eaa2f8c38241f3a2fb205f27613a127c4100c0d69213de41e10acd70086b9e" name="php7-odbc" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="a75418625e7869a1339a8dab3bcc43d97476b6518e533b1d9e5cc14338f2ea59" name="php7-odbc" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="b64f362387bac7a8b407ecc47659da4a335c2b942c96de40b368676211c558a0" name="php7-odbc" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="a7c6d741f3bd51712e3e84a5751e44bb9bad4253ae7849c20cf0a065da8ba98a" name="php7-opcache" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="d075253a8942723c309530418f16ce65c9ca0785b52b83e494bbffd2d2e51ece" name="php7-opcache" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="f4f2008525da7a8d21c6596f54fdeb9c2acff8c865493c4db953cc8e16cc00ea" name="php7-opcache" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="8a1eaa211f91cd11093a3136f2ab1753bfebfe591aef1c71ed0cc85023338784" name="php7-openssl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="c236d1058e630e74ae75349071c5bc62bc437f6c01fb4b4ad0063f449d75fa1b" name="php7-openssl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="5df728ed32c47d1316b5beb4acd29a36b51a483a3aa2fc7132d2344dff557eb7" name="php7-openssl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="9c4527a2e13cdfe5fcf2e89082ce9518fcfa534acccc1fc8aa6df4b9108e3870" name="php7-pcntl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="77b205239bea598181de97c24ab96511cc800619da9bd8e9abcc7a13a0ef05c8" name="php7-pcntl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="4e1fea3eefa210421c54e10947e3ffc461768c840f925c5f7e737723023c586e" name="php7-pcntl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="d58300d64d99a11c0377b0bd4b3b648500bfe71620dd6195327ad03ef11882b2" name="php7-pdo" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="5abaf8824e436c8654580a1742900722bd3f29aed4a2e26a8b7cd3e93bab64c7" name="php7-pdo" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="95c0b9d2fe7d1fbcd337e5a6d37b79783dff2bdfd7a8d36c6a48ae02b0aabf51" name="php7-pdo" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="9d0ea6f82f853e60ab1bfa0768b0fda3e66975567b31aa043684bbe88097c6a5" name="php7-pear" arch="noarch">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="71175fd576e6a1a9357cdca39f726087719139361cedd05dbcc70d0279d18766" name="php7-pear" arch="noarch">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="8a6910b126a2fd250277999efb140137ac226eff0f72f9fd726c8b76afb6dd8d" name="php7-pear" arch="noarch">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="96392059d13e01de73659f8858100136a546604f139acff565d7923fb6a16f0d" name="php7-pear-Archive_Tar" arch="noarch">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="592901eb25f1641f9e1b68cfa457790884b72bd7f25d8f42bd3c7e092e19687e" name="php7-pear-Archive_Tar" arch="noarch">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="1c2a4515bbcbc834d707edbbe58c827924b3d3f4b666ef4364318994b6bdf775" name="php7-pear-Archive_Tar" arch="noarch">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="8436cb3e621d160c5f69b7dedf00ea05f95e59efd08c64397ecd8a15da98ed5c" name="php7-pgsql" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="4e1786dd311ef6e8bec0505d92a1a042da305e3f89195134becdd963d4fbf33b" name="php7-pgsql" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="b3406c64a7983335cc9a6bc1b9c512d01669342e96e1c2bd5badca3fa6b5f188" name="php7-pgsql" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="8cfb1afa5373e97f8cea87e14bc919a40f881ead87c4c5e0c10b8f93e4cc4268" name="php7-phar" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="bb23d9d8608808bdfc47ebc7fdc1d3c246a964b926c5bf8c52ee05bc72e12e68" name="php7-phar" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="5f6bf6ef37cb30f59bd69d859eed4407ad88df2728d7411b8346d9a98ef9dd0d" name="php7-phar" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="04d1f1bb52a408d9af298b8e8817664cf57e621c36fd10c7d9d77a14126969de" name="php7-posix" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="536e43cac3cbdf511a26b5f017ac6233bb7d9762c96acef24acf9680c63b5490" name="php7-posix" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="83feeb97565f464ddf46eab924906d09a885e1473267a57bb35d84948698d468" name="php7-posix" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="a9970e033df9cc772d326ebdf4e1ec0692c164582a6122b712235275a689ff0d" name="php7-pspell" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="87ce40011a06a8a41c6aae923dce3313b28563323eb48e97d9c5d3ef9b50db05" name="php7-pspell" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="f2131bcde4392fda806fedb245ff45c98686ea70785a177749fced6de3bbbdbc" name="php7-pspell" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="1c8437a9c4f0019019cf3c86400c0caf51f1228d561b2fa0f285b2aa4f3a9963" name="php7-readline" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="2736ed6f1c187e6fdc87d8a13c957a507987c0eb41d52a7a08ce7a2be3604533" name="php7-readline" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="491b1d5bf087fb90fbb6a267bc6bb65ec510fe819acada22875f2c4373e12952" name="php7-readline" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="b155e0cf8741a2d205c20fb2360aa628696ea515cd5107ebaab5b77fad3076b8" name="php7-shmop" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="090628b4f721def243db3a14f5b2f9515742b5a3df8ceac704270441a34420a4" name="php7-shmop" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="4c13a5184aee878dc958e22dd81920f74b6559d6699544c30afe4980dc5d067d" name="php7-shmop" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="46d5d66ad8a5310f25e29dad56665b997b7987e13032343eefbf61310d373984" name="php7-snmp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="431611f1668c88629fd7ac087fc2cce2f2bfb1dafb9dae2664ab0c5596ca7b0a" name="php7-snmp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="3b3b03256759e2f2568c19e5f07b978f112b608eb28adf2d10292ab05c3c0441" name="php7-snmp" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="ee97b1a7346aa7799e023ffe4f6422501544d3e5ca2def151dd7c75f96704d69" name="php7-soap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="3b8d67be06e592b8ce86b8b3cd0d0cdff01b608a18ef53adaa2dc1aabbbb5653" name="php7-soap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="b7585c58fdc1614efe10f43c639fcdcf7747877fd21123e69d2d9be2036307ce" name="php7-soap" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="d4e273350870edf36550ec3ec784fde3e901bdd1d96db6bcdf746347da743b7f" name="php7-sockets" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="3faf5bb549782a4a8404c89701980e3fd4a07297fd76d3a0577b3f4d9e2c4433" name="php7-sockets" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="bec90bca4ef8642a4e930c65468c3d26c8cd9b0e8f27d3c3a8eaeca8d37a6f47" name="php7-sockets" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="00023606754509e181609506dff1cb80a6ef13c0eb5e41e2bf0cf055a6949bbb" name="php7-sqlite" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="d69a2f1e73bfa9e8a2ae3c847c2ff7abc640297a552263e50d6de4bd94e0d3d5" name="php7-sqlite" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="ad0700816a05dad2cb9f84107199432ce63ea2b73fdec101f703c5458dd807c3" name="php7-sqlite" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="36fddc4828bfa727f72d2d9fb5e2daaa681d8c809c93e9bcc60ff78ca9294231" name="php7-sysvmsg" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="dad63148f9312c9bb7218dba267f80c47865c5589a66a1c35193921fb1b92e9a" name="php7-sysvmsg" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="1f7c84090c823f02ef218ed2799c21f4fe65599486820f119067ca11e72ec4a2" name="php7-sysvmsg" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="56bd5a1ac6b5c671fb522984368cafb180f98e42ec8c4822baa438b75db73c3d" name="php7-sysvsem" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="e3e202eaffce779de3949eae6041302851b26444379aadae80b3ab5b6c5013dd" name="php7-sysvsem" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="566dd6c4c498c1935414d7fca7f5c467e5d4b620b871bd25cfede03a46082189" name="php7-sysvsem" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="dc39f76c352d8bf6a1be8b9b4899d906772b08b7819047432007dcd9f21cccd7" name="php7-sysvshm" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="8960113dfc0f7ba50451910b7eaebe2f32ff29229b2680220b91d304fbd66a78" name="php7-sysvshm" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="70a6cb2299b487df212b9440c5be19c0f0a109544fe5265271670a9b58b49509" name="php7-sysvshm" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="3a11183f0af955f24890c870f6f0e7deebf5805d5f69c21051380f3f61fc777c" name="php7-tidy" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="2a2f6143155f8df18f07daf6767072cfdddcf3b44eedabc4d6ea1badcb69324f" name="php7-tidy" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="ce787fa328bf8f26cd4b6eacbc159ab2db8e9a9ab77159ff805a84aaf7a1074a" name="php7-tidy" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="741eae6c6844fd91ee015ca6a631582826d918d882c0387047dd1a91e421316a" name="php7-tokenizer" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="fa14447f7e649b534d6713e361a61777e85fd9c407c45aeb24f9e653b90e4ef9" name="php7-tokenizer" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="334d77dcc130afd753a14aeff7078c1c0b576743676ddfb8724a4745fab8f394" name="php7-tokenizer" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="2c76526a13f4a6a25b1ea4aaf55690eefd32bec0b961937105dbe8c3b7550c3c" name="php7-wddx" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="7f831ee0dcca2e801168b3557719d5350e32789c6f0afb3dee6afedf0bfad454" name="php7-wddx" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="72c3cab66dd10a58da0c2b8cee313aabe9dcba0ea88537df6b52d8f427bb3080" name="php7-wddx" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="6428a962d7d416c85cdaf696e1cd38636beb1d3567d989a5d58e5da8851e7429" name="php7-xmlreader" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="4e10a756bd70893a94427bdaf3ebb4d86f9f36d1c0b9a4c2eac70e4e2719ec48" name="php7-xmlreader" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="ca6339e4ed1f21870bfd210219e9e26b34a0713aef982ffefab6162d76f32153" name="php7-xmlreader" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="824dccb18afc9e8a736f16dc878a522f91c5363e0e69314057c0bd929997b149" name="php7-xmlrpc" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="82f8b623fc52d3b45bde42dfd8f0fac637b21e6081f644596b2b9f740a85e693" name="php7-xmlrpc" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="49a230918d274149e4da05057ab045c03477f8c48c8c8cbaaa43a5c14e11438f" name="php7-xmlrpc" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="56f443ce8888b98fe2130b176bfade8382ebdccac6f501b6c7d715b1bf15f862" name="php7-xmlwriter" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="a4ff2abe1a0438954bdfd41d882ea73da9f27b48a46837cf90c094bbf4deebfe" name="php7-xmlwriter" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="d7301aab0cf34c5b71ee4529e3409bdcd8cbf2f3aec1f350e3cdd57cd7421580" name="php7-xmlwriter" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="55cee25f7872d39b24c67db0ceede6228b799abb16a558e49dfe5e1b5a008a8f" name="php7-xsl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="4bfa3982a54ae9d1a878a23310a5db75e8380c5564ba5f5a7c88988b89de2f67" name="php7-xsl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="6717924aa07eaa28269510aada059dc8f1100c2616e57e6add4a722e2d296447" name="php7-xsl" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="9779a2fb56c6293ab171d0538af90123d5357c0dd5fa8b5b3644db4ea718a41a" name="php7-zip" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="0ef4bc02dc86cd1d96e97ec110c00ee57e127ddd5f0971a5fe40e79a7cbb3045" name="php7-zip" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="661ee2d0ca3dd60cf4baca3453ab69ed136cd1bf0cff64426ecb5a1c1f4b1319" name="php7-zip" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="021fa09d9d6c0e6e67b97f88198385a5b6ed8164fc7d8c62bb914acd670149f2" name="php7-zlib" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="19.1"/>

<changelog author="pgajdos@suse.com" date="1473336000">- security update:
  * CVE-2016-7132 [bsc#997230], CVE-2016-7131 [bsc#997225]
    + php-CVE-2016-7131,7132.patch
  * CVE-2016-7129 [bsc#997220]
    + php-CVE-2016-7129.patch
  * CVE-2016-7133 [bsc#997247]
    + php-CVE-2016-7133.patch
  * CVE-2016-7130 [bsc#997257]
    + php-CVE-2016-7130.patch
  * CVE-2016-7134 [bsc#997248]
    + php-CVE-2016-7134.patch
  * CVE-2016-4473 [bsc#995512]
    + php-CVE-2016-4473.patch
  * CVE-2016-7128 [bsc#997211]
    + php-CVE-2016-7128.patch
  * CVE-2016-7127 [bsc#997210]
    + php-CVE-2016-7127.patch
  * CVE-2016-7126 [bsc#997208]
    + php-CVE-2016-7126.patch
  * CVE-2016-7125 [bsc#997207]
    + php-CVE-2016-7125.patch
  * CVE-2016-7124 [bsc#997206]
    + php-CVE-2016-7124.patch</changelog>
<changelog author="pgajdos@suse.com" date="1474459200">- security update:
  * CVE-2016-7412 [bsc#999680]
    + php-CVE-2016-7412.patch
  * CVE-2016-7417 [bsc#999684]
    + php-CVE-2016-7417.patch
  * CVE-2016-7413 [bsc#999679]
    + php-CVE-2016-7413.patch
  * CVE-2016-7418 [bsc#999819]
    + php-CVE-2016-7418.patch
  * CVE-2016-7414 [bsc#999820]
    + php-CVE-2016-7414.patch
  * CVE-2016-7416 [bsc#999685]
    + php-CVE-2016-7416.patch</changelog>
<changelog author="pgajdos@suse.com" date="1475236800">- Conflicts instead of Obsoletes [bsc#1001950], [bsc#999313]</changelog>
<changelog author="pgajdos@suse.com" date="1476446400">- security update:
  * CVE-2016-7568 [bsc#1001900]
    + php-CVE-2016-7568.patch</changelog>
<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>

</package>
<package pkgid="28459f6976f83f3ff045a02f75dbdfa53ce0ec8b4f512ef11a8c768f24476fa4" name="php7-zlib" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="22.1"/>

<changelog author="pgajdos@suse.com" date="1476964800">- security update:
  * CVE-2016-8670 [bsc#1004924]
    + php-CVE-2016-8670.patch
  * CVE-2016-6911 [bsc#1005274]
    + php-CVE-2016-6911.patch</changelog>
<changelog author="pgajdos@suse.com" date="1477915200">- security update:
  * CVE-2016-5385 [bsc#988486]
    + php-CVE-2016-5385.patch</changelog>
<changelog author="pgajdos@suse.com" date="1478606400">- security update:
  * CVE-2016-9137 [bsc#1008029]
    + php-CVE-2016-9137.patch</changelog>
<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>

</package>
<package pkgid="c85e509f9b6753eeefcfc3979e3ad826ea025dc23cdb03d3beff9e5e8bf73c76" name="php7-zlib" arch="x86_64">
    <version epoch="0" ver="7.0.7" rel="25.1"/>

<changelog author="pgajdos@suse.com" date="1481716800">- security update:
  * CVE-2016-9933 [bsc#1015187]
    + php-CVE-2016-9933.patch
  * CVE-2016-9934 [bsc#1015188]
    + php-CVE-2016-9934.patch
  * CVE-2016-9935 [bsc#1015189]
    + php-CVE-2016-9935.patch
  * CVE-2016-9936 [bsc#1015191]
    + php-CVE-2016-9936.patch</changelog>
<changelog author="pgajdos@suse.com" date="1484568000">- security update:
  * CVE-2016-7480 [bsc#1019568]
    + php-CVE-2016-7480.patch
  * CVE-2017-5340 [bsc#1019570]
    + php-CVE-2017-5340.patch
  * CVE-2016-7478 [bsc#1019550]
    + php-CVE-2016-7478.patch
  * CVE-2016-7479 [bsc#1019547], CVE-2016-9138 [bsc#1008026]
    + php-CVE-2016-7479.patch</changelog>
<changelog author="pgajdos@suse.com" date="1485777600">- security update:
  * CVE-2016-10161 [bsc#1022260]
    + php-CVE-2016-10161.patch
  * CVE-2016-10162 [bsc#1022262]
    + php-CVE-2016-10162.patch
  * CVE-2016-10158 [bsc#1022219]
    + php-CVE-2016-10158.patch
  * CVE-2016-10167 [bsc#1022264]
    + php-CVE-2016-10167.patch
  * CVE-2016-10168 [bsc#1022265]
    + php-CVE-2016-10168.patch
  * CVE-2016-10166 [bsc#1022263]
    + php-CVE-2016-10166.patch
  * CVE-2016-10159 [bsc#1022255]
    + php-CVE-2016-10159.patch
  * CVE-2016-10160 [bsc#1022257]
    + php-CVE-2016-10160.patch</changelog>
<changelog author="pgajdos@suse.com" date="1489147200">- security update:
  * CVE-2015-8994 [bsc#1027210]
    + php-CVE-2015-8994.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491220800">- security update:
  * CVE-2017-7272 [bsc#1031246]
    + php-CVE-2017-7272.patch</changelog>
<changelog author="pgajdos@suse.com" date="1491825600">- security update:
  * CVE-2017-6441 [bsc#1032155]
    + php-CVE-2017-6441.patch</changelog>
<changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2016-6294 [bsc#1035111]
    + php-CVE-2016-6294.patch</changelog>
<changelog author="pgajdos@suse.com" date="1496059200">- security update:
  * CVE-2017-9227 [bsc#1040883]
    + php-CVE-2017-9227.patch
  * CVE-2017-9226 [bsc#1040889]
    + php-CVE-2017-9226.patch
  * CVE-2017-9224 [bsc#1040891]
    + php-CVE-2017-9224.patch</changelog>
<changelog author="pgajdos@suse.com" date="1497960000">- fix for CVE-2017-7272 was reverted [bsc#1044976]</changelog>
<changelog author="pgajdos@suse.com" date="1500465600">- security update:
  * CVE-2017-11142 [bsc#1048100]
    + php-CVE-2017-11142.patch
  * CVE-2017-11145 [bsc#1048112]
    + php-CVE-2017-11145.patch
  * CVE-2017-11146 [bsc#1048111]
    + php-CVE-2017-11146.patch
  * CVE-2016-10397 [bsc#1047454]
    + php-CVE-2016-10397.patch
  * CVE-2017-11147 [bsc#1048094]
    + php-CVE-2017-11147.patch
  * CVE-2017-11144 [bsc#1048096]
    + php-CVE-2017-11144.patch
  * regenerate parse_date.c from parse_date.re
    + php7-date-regenerate-lexers.patch</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1502107200">- php7-pear should explicitly require php7-pear-Archive_Tar
  otherwise this dependency must be declared in every
  php7-pear-* package explicitly. [bnc#1052389]</changelog>
<changelog author="pgajdos@suse.com" date="1502193600">- security update:
  * CVE-2017-11628 [bsc#1050726]
    + php-CVE-2017-11628.patch
  * CVE-2017-7890 [bsc#1050241]
    + php-CVE-2017-7890.patch
  * complete fix for CVE-2016-5766 [bsc#986386c#23]
    . amended php-CVE-2016-5766.patch
    . refreshed php-CVE-2016-10168.patch</changelog>
<changelog author="jcejka@suse.de" date="1502798400">- Soap Request with References (bsc#1053645)
  + php7-insert-more-derefs.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504008000">- security update:
  * CVE-2017-12932 [bsc#1054432]
    + php-CVE-2017-12932.patch
  * CVE-2017-12934 [bsc#1054408]
    + php-CVE-2017-12934.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526400">- security update:
  * CVE-2017-12933 [bsc#1054430]
    + php-CVE-2017-12933.patch</changelog>
<changelog author="pgajdos@suse.com" date="1504526401">- php7-devel requires php7-pear [bsc#1057104]</changelog>
<changelog author="jcejka@suse.de" date="1505131200">- Fix namespace encapsulation of imported classes/functions/constants
  (bsc#1057845)
  + php7-Fix-bug-66773-66862.patch</changelog>
<changelog author="pgajdos@suse.com" date="1508328000">- Fix Wrong reference when serialize/unserialize an object
  [bsc#1063815]
  + php7-fix-wrong-reference-serialize.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511179200">- security update:
  * CVE-2017-16642 [bsc#1067441]
    + php-CVE-2017-16642.patch</changelog>
<changelog author="pgajdos@suse.com" date="1511784000">- security update:
  * CVE-2017-9228 [bsc#1069606]
    + php-CVE-2017-9228.patch
  * CVE-2017-9229 [bsc#1069631]
    + php-CVE-2017-9229.patch</changelog>

</package>
<package pkgid="dd0285f271bd236b0f82a02049c332853dd49d5d7c2f9a793d27a9f0c2feb30e" name="phpMyAdmin" arch="noarch">
    <version epoch="0" ver="4.7.5" rel="3.1"/>

<changelog author="chris@computersalat.de" date="1464523200">- rebase phpMyAdmin-config.patch</changelog>
<changelog author="chris@computersalat.de" date="1466683200">- update to 4.6.3 (2016-06-23)
  * gh#12249 Fixed cookie path on Windows
  * gh#12279 Fixed error reporting on connect problems
  * gh#12290 Fixed export of tables without explicitly set engine
  * gh#12285 Designer JavaScript error: Show/Hide tables list
  * gh#12293 Fix MySQL SSL connection with some PHP versions
  * gh#12279 Fix MySQL connection error on version mismatch
  * gh#12281 Keep user attributes (privileges, authentication mode, etc) when copying a user
  * gh#12308 Fix division by zero in case of misconfigured MySQL server
  * gh#12317 Fix editing server variables
  * gh#12303 Fix table size calculation in some circumstances
  * gh#12310 Fix listing routines for non privileged user
  * issue Escape generated query in exporting a database
  * issue Setup script did not properly use input type password for some input types
- fix for boo#986154
  * PMASA-2016-17 (CVE-2016-5701, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-17/
  - BBCode injection vulnerability
  * PMASA-2016-18 (CVE-2016-5702, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-18/
  - Cookie attribute injection attack
  * PMASA-2016-19 (CVE-2016-5703, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-19/
  - SQL injection attack
  * PMASA-2016-20 (CVE-2016-5704, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-20/
  - XSS on table structure page
  * PMASA-2016-21 (CVE-2016-5705, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-21/
  - Multiple XSS vulnerabilities
  * PMASA-2016-22 (CVE-2016-5706, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-22/
  - DOS attack
  * PMASA-2016-23 (CVE-2016-5730, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-23/
  - Multiple full path disclosure vulnerabilities
  * PMASA-2016-24 (CVE-2016-5731, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-24/
  - XSS through FPD
  * PMASA-2016-25 (CVE-2016-5732, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-25/
  - XSS in partition range functionality
  * PMASA-2016-26 (CVE-2016-5733, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-26/
  - Multiple XSS vulnerabilities
  * PMASA-2016-27 (CVE-2016-5734, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-27/
  - Unsafe handling of preg_replace parameters
  * PMASA-2016-28 (CVE-2016-5739, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-28/
  - Referrer leak in transformations</changelog>
<changelog author="chris@computersalat.de" date="1471521600">- 4.6.4 (2016-08-16)
  - securitiy fixes
  * Improve session cookie code for openid.php and signon.php example
    files
  * Full path disclosure in openid.php and signon.php example files
  * Unsafe generation of BlowfishSecret (when not supplied by the user)
  * Referrer leak when phpinfo is enabled
  * Use HTTPS for wiki links
  * Improve SSL certificate handling
  * Fix full path disclosure in debugging code
  * Administrators could trigger SQL injection attack against users
  - other fixes
  * Remove Swekey support
  * Include X-Robots-Tag header in responses
  * Enforce numeric field length when creating table
  * Fixed invalid Content-Length in some HTTP responses
  * gh#12394 Create view should require a view name
  * gh#12391 Message with 'Change password successfully' displayed,
    but does not take effect
  * Tighten control on PHP sessions and session cookies
  * gh#12409 Re-enable overhead on server databases view
  * gh#12414 Fixed rendering of Original theme
  * gh#12413 Fixed deleting users in non English locales
  * gh#12416 Fixed replication status output in Databases listing
  * gh#12303 Avoid typecasting to float when not needed
  * gh#12425 Duplicate message variable names in messages.inc.php
  * gh#12399 Adding index to table shows wrong top navigation
  * gh#12424 Fixed password change on MariaDB without auth plugin
  * gh#12339 Do not error on unset server port
  * gh#12422 Improvements to the original theme
  * gh#12395 Do not try to load old transformation plugins
  * gh#12423 Fixed replication status in database listing
  * gh#12433 Copy table with prefix does not copy the indexes
  * gh#12375 Search in database: Window content is not scrolling down
    when clicking first time on Browse link
  * gh#12346 SQL Editor textareas can have their size increased from
    the top, distorting the page view
- fix for boo#994313
  https://www.phpmyadmin.net/security/
  * Weaknesses with cookie encryption
    see PMASA-2016-29 (CVE-2016-6606, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-30 (CVE-2016-6607, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-31 (CVE-2016-6608, CWE-661)
  * PHP code injection
    see PMASA-2016-32 (CVE-2016-6609, CWE-661)
  * Full path disclosure
    see PMASA-2016-33 (CVE-2016-6610, CWE-661)
  * SQL injection attack
    see PMASA-2016-34 (CVE-2016-6611, CWE-661)
  * Local file exposure through LOAD DATA LOCAL INFILE
    see PMASA-2016-35 (CVE-2016-6612, CWE-661)
  * Local file exposure through symlinks with UploadDir
    see PMASA-2016-36 (CVE-2016-6613, CWE-661)
  * Path traversal with SaveDir and UploadDir
    see PMASA-2016-37 (CVE-2016-6614, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-38 (CVE-2016-6615, CWE-661)
  * SQL injection vulnerability as control user
    see PMASA-2016-39 (CVE-2016-6616, CWE-661)
  * SQL injection vulnerability
    see PMASA-2016-40 (CVE-2016-6617, CWE-661)
  * Denial-of-service attack through transformation feature
    see PMASA-2016-41 (CVE-2016-6618, CWE-661)
  * SQL injection vulnerability as control user
    see PMASA-2016-42 (CVE-2016-6619, CWE-661)
  * Verify data before unserializing
    see PMASA-2016-43 (CVE-2016-6620, CWE-661)
  * SSRF in setup script
    see PMASA-2016-44 (CVE-2016-6621, CWE-661)
  * Denial-of-service attack with
    $cfg['AllowArbitraryServer'] = true and persistent connections
    see PMASA-2016-45 (CVE-2016-6622, CWE-661)
  * Denial-of-service attack by using for loops
    see PMASA-2016-46 (CVE-2016-6623, CWE-661)
  * Possible circumvention of IP-based allow/deny rules with IPv6 and
    proxy server
    see PMASA-2016-47 (CVE-2016-6624, CWE-661)
  * Detect if user is logged in
    see PMASA-2016-48 (CVE-2016-6625, CWE-661)
  * Bypass URL redirection protection
    see PMASA-2016-49 (CVE-2016-6626, CWE-661)
  * Referrer leak
    see PMASA-2016-50 (CVE-2016-6627, CWE-661)
  * Reflected File Download
    see PMASA-2016-51 (CVE-2016-6628, CWE-661)
  * ArbitraryServerRegexp bypass
    see PMASA-2016-52 (CVE-2016-6629, CWE-661)
  * Denial-of-service attack by entering long password
    see PMASA-2016-53 (CVE-2016-6630, CWE-661)
  * Remote code execution vulnerability when running as CGI
    see PMASA-2016-54 (CVE-2016-6631, CWE-661)
  * Denial-of-service attack when PHP uses dbase extension
    see PMASA-2016-55 (CVE-2016-6632, CWE-661)
  * Remove tode execution vulnerability when PHP uses dbase extension
    see PMASA-2016-56 (CVE-2016-6633, CWE-661)
- fix deps
  * add missing php-gettext
- rebase phpMyAdmin-config.patch</changelog>
<changelog author="chris@computersalat.de" date="1478347200">- fix phpMyAdmin.http</changelog>
<changelog author="chris@computersalat.de" date="1478433600">- fix deps
  * add missing Recommends php5-curl
- fix phpMyAdmin.http
  * add &lt;IfModule mod_php7.c&gt;</changelog>
<changelog author="ecsos@opensuse.org" date="1480161600">- update to 4.6.5.1 (2016-11-26)
  - quick fix for 4.6.5
  * an issue affecting a small number of users using
    $cfg['Servers'][$i]['hide_db'] or $cfg['Servers'][$i]['only_db'].
  * an issue affecting the create table dialog where the partition
    selection tool was overzealous and made it difficult to create
    a new table.
- update to 4.6.5 (2016-11-25)
  - security fixes
  * Fix for expanding in navigation pane
  * Reintroduced a simplified version of PmaAbsoluteUri directive
    (needed with reverse proxies)
  * Fix editing of ENUM/SET/DECIMAL field structures
  * Improvements to the parser
  - other fixes
  * Remove potentionally license problematic sRGB profile
  * gh#12459 Display read only fields as read only when editing
  * gh#12384 Fix expanding of navigation pane when clicking on database
  * gh#12430 Impove partitioning support
  * gh#12374 Reintroduced simplified PmaAbsoluteUri configuration
    directive
  * Always use UTC time in HTTP headers
  * gh#12479 Simplified validation of external links
  * gh#12483 Fix browsing tables with built in transformations
  * gh#12485 Do not show warning about short blowfish_secret if none
    is set
  * gh#12251 Fixed random logouts due to wrong cookie path
  * gh#12480 Fixed editing of ENUM/SET/DECIMAL fields structure
  * gh#12497 Missing escaping of configuration used in SQL
    (hide_db and only_db)
  * gh#12476 Add error checking in reading advisory rules file
  * gh#12477 Add checking missing elements and confirming element
    types from json_decode
  * gh#12251 Automatically save SQL query in browser local storage
    rather than in cookie
  * gh#12292 Unable to edit transformations
  * gh#12502 Remove unused paramenter when connecting to MySQLi
  * gh#12303 Fix number formatting with different settings of
    precision in PHP
  * gh#12405 Use single quotes in PHP code
  * gh#12534 Option for the dropped column is not removed from
    'after_field' select, after the column is dropped
  * gh#12531 Properly detect DROP DATABASE queries
  * gh#12470 Fix possible race condition in setting URL hash
  * gh#11924 Remove caching of server information
  * gh#11628 Proper parsing of INSERT ... ON DUPLICATE KEY queries
  * gh#12545 Proper parsing of CREATE TABLE ... PARTITION queries
  * gh#12473 Code can throw unhandled exception
  * gh#12550 Do not try to keep alive session even after expiry
  * gh#12512 Fixed rendering BBCode links in setup
  * gh#12518 Fixed copy of table with generated columns
  * gh#12221 Fixed export of table with generated columns
  * gh#12320 Copying a user does not copy usergroup
  * gh#12272 Adding a new row with default enum goes to no selection
    when you want to add more then 2 rows
  * gh#12487 Drag and drop import prevents file dropping to blob
    column file selector on the insert tab
  * gh#12554 Absence of scrolling makes it impossible to read longer
    text values in grid editing
  * gh#12530 "Edit routine" crashes when the current user is not the
    definer, even if privileges are adequate
  * gh#12300 Export selective tables by-default dumps Events also
  * gh#12298 Fixed export of view definitions
  * gh#12242 Edit routine detail dialog does not fill "Return length"
    field in mysql functions
  * gh#12575 New index Confirm adds whitespace around the field name
  * gh#12382 Bug in zoom search
  * gh#12321 Assign LIMIT clause only to syntactically correct queries
  * gh#12461 Can't Execute SQL With Sub-Query Due To "LIMIT 0,25"
    Inserted At Wrong Place
  * gh#12511 Clarify documentation on ArbitraryServerRegexp
  * gh#12508 Remove duplicate code in SQL escaping
  * gh#12475 Cleanup code for getting table information
  * gh#12579 phpMyAdmin's export of a Select statment without a FROM
    clause generates Wrong SQL
  * gh#12316 Correct export of complex SELECT statements
  * gh#12080 Fixed parsing of subselect queries
  * gh#11740 Fixed handling DELETE ... USING queries
  * gh#12100 Fixed handling of CASE operator
  * gh#12455 Query history stores separate entry for every letter
    typed
  * gh#12327 Create PHP code no longer works
  * gh#12179 Fixed bookmarking of query with multiple statements
  * gh#12419 Wrong description on GRANT OPTION
  * gh#12615 Fixed regexp for matching browser versions
  * gh#12569 Avoid showing import errors twice
  * gh#12362 prefs_manage.php can leave an orphaned temporary file
  * gh#12619 Unable to export csv when using union select
  * gh#12625 Broken Edit links in query results of JOIN query
  * gh#12634 Drop DB error in import if DB doesn't exist
  * gh#12338 Designer reverts to first saved ER after EACH relation
    create or delete
  * gh#12639 'Show trace' in Console generates JS error for functions
    in query's trace called without any arguments
  * gh#12366 Fix user creation with certain MariaDB setups
  * gh#12616 Refuse to work with mbstring.func_overload enabled
  * gh#12472 Properly report connection without password in setup
  * gh#12365 Fix records count for large tables
  * gh#12533 Fix records count for complex queries
  * gh#12454 Query history not updated in console until page refresh
  * gh#12344 Fixed parsing of labels in loop
  * gh#12228 Fixed parsing of BEGIN labels
  * gh#12637 Fixed editing some timestamp values
  * gh#12622 Fixed javascript error in designer
  * gh#12334 Missing page indicator or VIEWs
  * gh#12610 Export of tables with Timestamp/Datetime/Time columns
    defined with ON UPDATE clause with precision fails
  * gh#12661 Error inserting into pma__history after timeout
  * gh#12195 Row_format = fixed not visible
  * gh#12665 Cannot add a foreign key - non-indexed fields not listed
    in InnoDB tables
  * gh#12674 Allow for proper MySQL-allowed strings as identifiers
  * gh#12651 Allow for partial dates on table insert page
  * gh#12681 Fixed designer with tables using special chars
  * gh#12652 Fixed visual query builder for foreign keys with more
    fields
  * gh#12257 Improved search page performance
  * gh#12322 Avoid selecting default function for foreign keys
  * gh#12453 Fixed escaping of SQL parts in some corner cases
  * gh#12542 Missing table name in account privileges editor
  * gh#12691 Remove ksort call on empty array in PMA_getPlugins
    function
  * gh#12443 Check parameter type before processing
  * gh#12299 Avoid generating too long URLs in search
  * gh#12361 Fix self SQL injection in table-specific privileges
  * gh#12698 Add link to release notes and download on new version
    notification
  * gh#12712 Error when trying to setup replication (fatal error in
    call to an old PMA_DBI_connect function)
- fix for boo#1012271
  https://www.phpmyadmin.net/security/
  * Unsafe generation of $cfg['blowfish_secret']
    see PMASA-2016-58 (CVE ids: CVE-2016-9847, CWE-661)
  * phpMyAdmin's phpinfo functionality is removed
    see PMASA-2016-59 (CVE ids: CVE-2016-9848, CWE-661)
  * AllowRoot and allow/deny rule bypass with specially-crafted
    username
    see PMASA-2016-60 (CVE ids: CVE-2016-9849, CWE-661)
  * Username matching weaknesses with allow/deny rules
    see PMASA-2016-61 (CVE ids: CVE-2016-9850, CWE-661)
  * Possible to bypass logout timeout
    see PMASA-2016-62 (CVE ids: CVE-2016-9851, CWE-661)
  * Full path disclosure (FPD) weaknesses
    see PMASA-2016-63 (CVE ids: CVE-2016-9852, CVE-2016-9853,
    CVE-2016-9854, CVE-2016-9855, CWE-661)
  * Multiple XSS weaknesses
    see PMASA-2016-64 (CVE ids: CVE-2016-9856, CVE-2016-9857,
    CWE-661, CWE-352)
  * Multiple denial-of-service (DOS) vulnerabilities
    see PMASA-2016-65 (CVE ids: CVE-2016-9858, CVE-2016-9859,
    CVE-2016-9860, CWE-661, CW-400)
  * Possible to bypass white-list protection for URL redirection
    see PMASA-2016-66 (CVE ids: CVE-2016-9861, CWE-661, CWE-20,
    CWE-601)
  * BBCode injection to login page
    see PMASA-2016-67 (CVE ids: CVE-2016-9862, CWE-661)
  * Denial-of-service (DOS) vulnerability in table partitioning
    see PMASA-2016-68 (CVE ids: CVE-2016-9863, CWE-661, CWE-400)
  * Multiple SQL injection vulnerabilities
    see PMASA-2016-69 (CVE ids: CVE-2016-9864, CWE-661, CWE-89)
  * Incorrect serialized string parsing
    see PMASA-2016-70 (CVE ids: CVE-2016-9865, CWE-661)
  * CSRF token not stripped from the URL
    see PMASA-2016-71 (CVE ids: CVE-2016-9866, CWE-661)</changelog>
<changelog author="chris@computersalat.de" date="1481025600">- update to 4.6.5.2 (2016-12-05)
  * gh#12765 Fixed SQL export with newlines
- update changes (update to 4.6.5 (2016-11-25))
  * add missing (Not yet available) CVE's
- fix phpMyAdmin.http</changelog>
<changelog author="ecsos@opensuse.org" date="1484827200">- Add Patch phpMyAdmin-12757_sql_syntax_errror.patch to fix
  gh#12757 SQL syntax errror on MariaDB &lt; 10.0.2 in check for mysql
  password check plugin.
  Will be fixed in 4.6.6</changelog>
<changelog author="chris@computersalat.de" date="1485345600">- 4.6.6 (2017-01-23)
  * gh#12759 Fix Notice regarding 'Undefined index: old_usergroup'
  * gh#12760 Fix Notice regarding 'Undefined index: users'
  * gh#12762 Fixed parsing of SQL with BINARY function
  * gh#12588 ReCaptcha now works without allow_url_fopen
  * gh#12699 Show no local storage warning only on settings tab
  * gh#12778 Syntax Error in Adding/Changing TIMESTAMP columns with
    default value as NULL
  * gh#12769 Edit/Export links are not clickable under Routines tab
  * gh#12757 Fixed creating new user with older MariaDB
  * gh#12784 Remove ctype installation suggestion
  * gh#12780 Format button replaces all text with blank spaces
  * gh#12786 Fixed database searching
  * gh#12792 Fixed javascript error on new version link
  * gh#12785 Add information about required and suggested extensions
    to composer.json
  * gh#12801 Custom header shown twice with cookie login form
  * gh#12802 Custom footer not shown with auth_type http login failure
  * gh#12434 Improve documentation for servers running with Suhosin
  * gh#12800 Updated embedded phpSecLib to 2.0.4
  * gh#12800 Fixed various issues with PHP 7.1
  * gh#11816 Fixed operation with lower_case_table_names=2
  * gh#12813 Fixed stored procedure execution
  * gh#12826 Honor user configured connection collation
  * gh#12293 Correctly report OpenSSL errors from cookie encryption
  * gh#12814 DateTime won't allow to input length in Routine editor
  * gh#12840 Fix Notice regarding 'Undefined index: row_format' when
    altering table options
  * gh#12841 Fixed moving of columns with whitespace in name
  * gh#12847 Fixed editing of virtual columns
  * gh#12859 Changed WHERE condition to 0 instead of 1 for SQL query
    window to avoid accidents
  * gh#12872 Use same query for display and execution when dropping
    index
  * gh#12868 Fix check for user groups freatures being enabled
  * gh#12876 Fix notices and warning related to dbs_to_test global
  * gh#12831 Fix table formatting on Insert tab, which mostly
    affected row highlighting
  * gh#12495 Reintroduced phpinfo page with limited capabilities
  * gh#12861 Fix renaming tables with lower_case_table_names=2
  * gh#12876 Fix possible PHP error in navigation
  * gh#12881 Fix database search with newer php-gettext
  * gh#12894 Fix linter error on unterminated variable name
  * gh#12732 Fixed filtering for active processes
- fix for boo#1021597
  * PMASA-2016-44 (CVE-2016-6621, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-44/
  - Multiple vulnerabilities in setup script
  * PMASA-2017-1 (CVE-2017-1000013, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-1/
  - Open redirect
  * PMASA-2017-2 (CVE-2015-8980, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-2/
  - php-gettext code execution
  * PMASA-2017-3 (CVE-2017-1000014, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-3/
  - DOS vulnerabiltiy in table editing
  * PMASA-2017-4 (CVE-2017-1000015, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-4/
  - CSS injection in themes
  * PMASA-2017-5 (CVE-2017-1000016, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-5/
  - Cookie attribute injection attack
  * PMASA-2017-6 (CVE-2017-1000017, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-6/
  - SSRF in replication
  * PMASA-2017-7 (CVE-2017-1000018, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-7/
  - DOS in replication status
- remove obsolete phpMyAdmin-12757_sql_syntax_errror.patch
- rework phpMyAdmin-config.patch</changelog>
<changelog author="chris@computersalat.de" date="1490011200">- add http.inc file
  * include one file for php5/php7 admin flags/values</changelog>
<changelog author="ecsos@opensuse.org" date="1491048000">- update to 4.7.0 (2017-03-28)
  * gh#12233 [Display] Improve message when renaming database to
    same name
  * gh#6146  Log authentication attempts to syslog
  * gh#11981 Remove support for Swekey authentication
  * gh#11987 Remove code for no longer supported MSIE versions
  * gh#11962 Remove embedded PHP libraries, use composer to install
    them
  * gh#12017 Cannot easily select multiple tables when exporting
  * gh#12047 Add javascript filtering for databases
  * gh#12166 More compact rendering of navigation tree
  * gh#12129 Improve performance with SkipLockedTables
  * gh#12173 Do not hide indexes under a slider
  * Improve performance of zip file import
  * gh#12196 Removed $cfg['ThemePath']
  * gh#6274  Add support for export user settings as config.inc.php
    snippet
  * gh#5555  Better report query errors while generating SQL exports
  * gh#12307 Produce valid JSON on export
  * gh#12325 Setup script icons broken
  * gh#12378 Support IPv6 proxies
  * Removed MySQL connection retry without password
  * gh#12218 Allow to specify further parameters for control
    connection
  * gh#12162 Show charset for each table on Database structure page
  * gh#12463 Incorrect link in the href of icon at Hide/Show unhide
    links
  * gh#12330 Shortcut for closing console
  * gh#12465 Improved handling of http requests
  * gh#12474 Broken links in Setup forms Navigation
  * gh#12494 Can't add a new User
  * gh#12523 Add 'token' Parameter in all POST requests
    (Fix 'Token mismatch' errors)
  * gh#12302 Improved usage of number_format
  * gh#12656 Server selection not working
  * gh#12543 NULL results in dataset are colored grey
  * gh#12664 Create Bookmark broken
  * gh#12688 Use unsigned int for storing bookmark ID
  * gh#12352 Added password strength indicator
  * gh#12713 Correctly handle HTTP status when doing requests
  * gh#12247 Add option to delete settings from browser storage
  * gh#12783 Remove unused PMA_addJSCode function
  * gh#12069 Add table filtering to database structure
  * gh#12799 Allow to configure signon session parameters
  * gh#12854 Drop database is broken
  * gh#12863 Can't toggle Event Scheduler on
  * gh#12742 Finish removing dead code references to xls/xlsx
    import and export, which was removed some time ago.
  * gh#12536 Rename "Relations" to "Relationships" in many places
    as it's the more proper term
  * gh#12834 Fixed margins in central columns feature
  * gh#12903 Document more export configuration options
  * gh#12897 Use consistent numeric format for table overhead
  * gh#12901 Use server returned table name on renaming table
  * gh#12918 Always use \r\n as newline when editing fields
  * gh#12923 Fixed server side search in navigation panel
  * gh#12929 Undefined index warning with ssl_ca_paths
  * gh#12924 Do not show errors from OpenSSL cookie
    encryption/decryption
  * gh#12945 Fixed hint rendering on adding new user
  * gh#12941 Fixed sorting of tables in relation view
  * gh#12936 Fixed tables pagination in navigation panel
  * gh#12904 Do not collapse add form for central columns if there
    are none
  * gh#12955 Fixed database renaming
  * gh#12954 Fixed export of tracking data
  * gh#12960 Enclose exports in transaction by default
  * gh#12966 After adding a column ADD INDEX option won't be
    displayed when enabling AI
  * gh#12972 Better error message when Composer has not been run
  * gh#12988 Do not show language selector without choices
  * gh#12993 Fixed external links to php documentation
  * gh#12990 Fixed error when loading favorite tables to console
  * gh#12981 Improved rendering of new version information
  * gh#12922 Fixed bookmarks ordering
  * gh#12964 Fixed table search in navigation
  * gh#12985 Fixed rendering of foreign key browsing
  * gh#12957 Fixed manipulation with GIS data having zero
    coordinates
  * gh#12804 Fixed various designer javascript errors
  * gh#12934 Fixed possible javascript error on server status page
  * gh#12927 Fixed javascript error on 3NF normalization
  * gh#12996 List all databses in navigation panel database
    dropdown
  * gh#12980 Better defaults when creating multi field foreign key
  * gh#12976 Improved foreign key editor behavior
  * gh#12958 Always show error reporting dialog on top
  * gh#12693 Improved support for TokuDB
  * gh#11231 Try harder to honor LoginCookieValidity setting
  * gh#13016 and #13017 Slight improvements to the table layout of
    Relation view
  * gh#12345 Correctly show affected rows for LOAD DATA queries
  * gh#13010 Copy database: SQL error for copying PMADB metadata
  * gh#13002 Fixed OpenDocument exports
  * gh#13000 Align NULL values according to the column alignment
  * gh#13021 Show phpMyAdmin errors even with error_reporting
    set to 0
  * gh#13020 Removed warning about client and server versions
    mismatch
  * Hide comments on table Structure tab when no comment is set
  * Fixed submission of error reports
  * gh#13033 Use Referrer-Policy header to specify referrer policy
  * Fixed javascript confirmation of dangerous queries
  * gh#13040 Compatibility with hhvm 3.18
  * gh#13031 Fixed displaying of all rows
  * gh#12967 Fixed related field selection for native relations
  * gh#13045 Properly escape MIME transformatoin names
  * gh#13028 Always show 100% in font selector
  * gh#13047 Fix query simulating for more servers
  * gh#12846 Fix new version check for sites with wrongly
    configured curl
  * gh#12951 When exporting to Excel, the default is now to include
    column names in the first row
  * gh#13059 Removed debugging code
  * gh#13029 Fixed table tracking for nested table groups
  * gh#13053 Fixed broken links in setup
  * gh#12708 Removed phpMyAdmin version from User-Agent header
  * gh#13084 Do not point users to setup when it is disabled
  * gh#12660 Delete only phpMyAdmin cookies on upgrade
  * gh#13088 Fixed editing of rows with text primary key
  * gh#13092 Do not try to sync favorite tables if configuration
    storage is not enabled
  * gh#13105 Fixed changing attribute for virtual field
  * gh#12757 Fixed setting password on recent MariaDB with non
    working plugins
  * gh#12349 Fixed undefined variable on import from some formats
  * gh#13103 Do not offer default names for copying/renaming
    databases
  * [security] Possible to bypass
    $cfg['Servers'][$i]['AllowNoPassword'], see PMASA-2017-08
- Drop patch phpMyAdmin-pma.patch because now in upstream</changelog>
<changelog author="chris@computersalat.de" date="1492862400">- restore phpMyAdmin-pma.patch
  * because it is NOT upstream and needed for configuration storage
- restore previous phpMyAdmin-config.patch
  * merge with upstream config VAR changes
  - removed $cfg['Servers'][$i]['designer_coords']</changelog>
<changelog author="ecsos@opensuse.org" date="1496404800">- update to 4.7.1 (2017-05-25)
  * gh#13132 Always execute tracking queries as controluser
  * gh#13125 Focus on SQL editor after inserting field name
  * gh#13133 Fixed broken links in setup
  * gh#13135 Database list Tooltips: Show wrong value
  * gh#13150 Fixed pagination while browsing resuls
  * gh#13149 Fixed outbound links in changelog.php
  * gh#13146 Do not include devel dependencies in the release
  * gh#13144 Do not show New as a database in database dropdown
  * gh#13130 Fixed handling of errors in AJAX requests
  * gh#13152 Fixed PHP error in case of invalid table preferences
  * gh#13154 Fixed PHP error on password change
  * gh#13219 Fix Refresh of Process List
  * gh#13182 Fix refresh of long queries
  * gh#12301 Improved handling of logout with disabled
    LoginCookieDeleteAll
  * gh#13216 Add support for MySQL 8.0 collations
  * gh#13218 Fixed rendering of phpMyAdmin logos
  * gh#13234 Properly report not working sessions
  * gh#13256 Fixed password check on server replication
  * gh#13252 Fixed grid editing time column
  * gh#13258 Fixed detection of Amazon RDS
  * gh#13241 Redirect user to last page that has any tables to
    display
  * gh#13266 Fix link to User accounts overview page
  * gh#13274 Fix error in query builder
  * gh#13177 Grid editing repeats action after error</changelog>
<changelog author="ecsos@opensuse.org" date="1498996800">- update to 4.7.2 (2017-06-29)
  * gh#13314 Make theme selection keep current server
  * gh#13311 Fixed direct login for accounts without password
  * gh#13316 Fixed check for mbstring.func_overload
  * gh#13323 Fixed wrong encoding of table at triggers
  * gh#12976 Fixed natural sorting in several places
  * gh#12718 Show warning for users removed from mysql.user table
  * gh#13362 Fixed loading additional javascripts
  * gh#13343 Fixed editing QBE
  * gh#13193 Improved documentation on user settings
  * gh#13092 Gracefully handle early fatal errors in AJAX requests
  * gh#13327 Fixed Incorrect NavigationTreeEnableExpansion default
    value in the documentation
  * gh#13008 Fixed export of database with a lot of tables
  * gh#13318 Improved performance when importing with enabled
    tracking
  * gh#13386 Avoid PHP errors with non existing configuration on
    OS X
  * gh#13388 Show only supported charsets for conversion
  * gh#13392 Fixed operation with session.auto_start enabled
  * gh#13383 "Create PHP code" is broken
  * gh#13189 Fixed links to resume timeouted import</changelog>
<changelog author="ecsos@opensuse.org" date="1500724800">- update to 4.7.3
  * gh#13447 Large multi-line query removes Export operation and
    blanks query box options
  * gh#13445 Fixed rendering of query results
  * gh#13437 Fixed version check when not connected to a database
  * gh#13465 Fixed creating relation
  * gh#13475 Fixed export without backquotes
  * gh#13482 Improved handling of uploaded files with open_basedir
  * gh#13387 Fixed inline editing of hex values
  * gh#13382 Fixed size of index edit dialog
  * gh#13489 Fixed rendering SQL lint errors
  * gh#13468 Avoid breakage if set_time_limit is disabled
  * gh#13471 Fail if ini_set/ini_get are disabled
  * gh#13436 Automatically connect using SSL when server is
    configured so
  * gh#13478 Fixed usage of some browser transformations</changelog>
<changelog author="chris@computersalat.de" date="1501243200">- fix for boo#1050980
  * replace mcrypt with openssl, see
    https://github.com/phpseclib/phpseclib/issues/1028
- update changes (update to 4.6.6 (2017-01-23))
  * add missing (CVE-Not yet available) CVE's</changelog>
<changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
<changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
<changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
<changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>

</package>
<package pkgid="d2905aee48843b2184733d07e5317bb438890371bdb1c2330544ff046b8a3057" name="phpMyAdmin" arch="src">
    <version epoch="0" ver="4.7.5" rel="3.1"/>

<changelog author="chris@computersalat.de" date="1464523200">- rebase phpMyAdmin-config.patch</changelog>
<changelog author="chris@computersalat.de" date="1466683200">- update to 4.6.3 (2016-06-23)
  * gh#12249 Fixed cookie path on Windows
  * gh#12279 Fixed error reporting on connect problems
  * gh#12290 Fixed export of tables without explicitly set engine
  * gh#12285 Designer JavaScript error: Show/Hide tables list
  * gh#12293 Fix MySQL SSL connection with some PHP versions
  * gh#12279 Fix MySQL connection error on version mismatch
  * gh#12281 Keep user attributes (privileges, authentication mode, etc) when copying a user
  * gh#12308 Fix division by zero in case of misconfigured MySQL server
  * gh#12317 Fix editing server variables
  * gh#12303 Fix table size calculation in some circumstances
  * gh#12310 Fix listing routines for non privileged user
  * issue Escape generated query in exporting a database
  * issue Setup script did not properly use input type password for some input types
- fix for boo#986154
  * PMASA-2016-17 (CVE-2016-5701, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-17/
  - BBCode injection vulnerability
  * PMASA-2016-18 (CVE-2016-5702, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-18/
  - Cookie attribute injection attack
  * PMASA-2016-19 (CVE-2016-5703, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-19/
  - SQL injection attack
  * PMASA-2016-20 (CVE-2016-5704, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-20/
  - XSS on table structure page
  * PMASA-2016-21 (CVE-2016-5705, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-21/
  - Multiple XSS vulnerabilities
  * PMASA-2016-22 (CVE-2016-5706, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-22/
  - DOS attack
  * PMASA-2016-23 (CVE-2016-5730, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-23/
  - Multiple full path disclosure vulnerabilities
  * PMASA-2016-24 (CVE-2016-5731, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-24/
  - XSS through FPD
  * PMASA-2016-25 (CVE-2016-5732, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-25/
  - XSS in partition range functionality
  * PMASA-2016-26 (CVE-2016-5733, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-26/
  - Multiple XSS vulnerabilities
  * PMASA-2016-27 (CVE-2016-5734, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-27/
  - Unsafe handling of preg_replace parameters
  * PMASA-2016-28 (CVE-2016-5739, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-28/
  - Referrer leak in transformations</changelog>
<changelog author="chris@computersalat.de" date="1471521600">- 4.6.4 (2016-08-16)
  - securitiy fixes
  * Improve session cookie code for openid.php and signon.php example
    files
  * Full path disclosure in openid.php and signon.php example files
  * Unsafe generation of BlowfishSecret (when not supplied by the user)
  * Referrer leak when phpinfo is enabled
  * Use HTTPS for wiki links
  * Improve SSL certificate handling
  * Fix full path disclosure in debugging code
  * Administrators could trigger SQL injection attack against users
  - other fixes
  * Remove Swekey support
  * Include X-Robots-Tag header in responses
  * Enforce numeric field length when creating table
  * Fixed invalid Content-Length in some HTTP responses
  * gh#12394 Create view should require a view name
  * gh#12391 Message with 'Change password successfully' displayed,
    but does not take effect
  * Tighten control on PHP sessions and session cookies
  * gh#12409 Re-enable overhead on server databases view
  * gh#12414 Fixed rendering of Original theme
  * gh#12413 Fixed deleting users in non English locales
  * gh#12416 Fixed replication status output in Databases listing
  * gh#12303 Avoid typecasting to float when not needed
  * gh#12425 Duplicate message variable names in messages.inc.php
  * gh#12399 Adding index to table shows wrong top navigation
  * gh#12424 Fixed password change on MariaDB without auth plugin
  * gh#12339 Do not error on unset server port
  * gh#12422 Improvements to the original theme
  * gh#12395 Do not try to load old transformation plugins
  * gh#12423 Fixed replication status in database listing
  * gh#12433 Copy table with prefix does not copy the indexes
  * gh#12375 Search in database: Window content is not scrolling down
    when clicking first time on Browse link
  * gh#12346 SQL Editor textareas can have their size increased from
    the top, distorting the page view
- fix for boo#994313
  https://www.phpmyadmin.net/security/
  * Weaknesses with cookie encryption
    see PMASA-2016-29 (CVE-2016-6606, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-30 (CVE-2016-6607, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-31 (CVE-2016-6608, CWE-661)
  * PHP code injection
    see PMASA-2016-32 (CVE-2016-6609, CWE-661)
  * Full path disclosure
    see PMASA-2016-33 (CVE-2016-6610, CWE-661)
  * SQL injection attack
    see PMASA-2016-34 (CVE-2016-6611, CWE-661)
  * Local file exposure through LOAD DATA LOCAL INFILE
    see PMASA-2016-35 (CVE-2016-6612, CWE-661)
  * Local file exposure through symlinks with UploadDir
    see PMASA-2016-36 (CVE-2016-6613, CWE-661)
  * Path traversal with SaveDir and UploadDir
    see PMASA-2016-37 (CVE-2016-6614, CWE-661)
  * Multiple XSS vulnerabilities
    see PMASA-2016-38 (CVE-2016-6615, CWE-661)
  * SQL injection vulnerability as control user
    see PMASA-2016-39 (CVE-2016-6616, CWE-661)
  * SQL injection vulnerability
    see PMASA-2016-40 (CVE-2016-6617, CWE-661)
  * Denial-of-service attack through transformation feature
    see PMASA-2016-41 (CVE-2016-6618, CWE-661)
  * SQL injection vulnerability as control user
    see PMASA-2016-42 (CVE-2016-6619, CWE-661)
  * Verify data before unserializing
    see PMASA-2016-43 (CVE-2016-6620, CWE-661)
  * SSRF in setup script
    see PMASA-2016-44 (CVE-2016-6621, CWE-661)
  * Denial-of-service attack with
    $cfg['AllowArbitraryServer'] = true and persistent connections
    see PMASA-2016-45 (CVE-2016-6622, CWE-661)
  * Denial-of-service attack by using for loops
    see PMASA-2016-46 (CVE-2016-6623, CWE-661)
  * Possible circumvention of IP-based allow/deny rules with IPv6 and
    proxy server
    see PMASA-2016-47 (CVE-2016-6624, CWE-661)
  * Detect if user is logged in
    see PMASA-2016-48 (CVE-2016-6625, CWE-661)
  * Bypass URL redirection protection
    see PMASA-2016-49 (CVE-2016-6626, CWE-661)
  * Referrer leak
    see PMASA-2016-50 (CVE-2016-6627, CWE-661)
  * Reflected File Download
    see PMASA-2016-51 (CVE-2016-6628, CWE-661)
  * ArbitraryServerRegexp bypass
    see PMASA-2016-52 (CVE-2016-6629, CWE-661)
  * Denial-of-service attack by entering long password
    see PMASA-2016-53 (CVE-2016-6630, CWE-661)
  * Remote code execution vulnerability when running as CGI
    see PMASA-2016-54 (CVE-2016-6631, CWE-661)
  * Denial-of-service attack when PHP uses dbase extension
    see PMASA-2016-55 (CVE-2016-6632, CWE-661)
  * Remove tode execution vulnerability when PHP uses dbase extension
    see PMASA-2016-56 (CVE-2016-6633, CWE-661)
- fix deps
  * add missing php-gettext
- rebase phpMyAdmin-config.patch</changelog>
<changelog author="chris@computersalat.de" date="1478347200">- fix phpMyAdmin.http</changelog>
<changelog author="chris@computersalat.de" date="1478433600">- fix deps
  * add missing Recommends php5-curl
- fix phpMyAdmin.http
  * add &lt;IfModule mod_php7.c&gt;</changelog>
<changelog author="ecsos@opensuse.org" date="1480161600">- update to 4.6.5.1 (2016-11-26)
  - quick fix for 4.6.5
  * an issue affecting a small number of users using
    $cfg['Servers'][$i]['hide_db'] or $cfg['Servers'][$i]['only_db'].
  * an issue affecting the create table dialog where the partition
    selection tool was overzealous and made it difficult to create
    a new table.
- update to 4.6.5 (2016-11-25)
  - security fixes
  * Fix for expanding in navigation pane
  * Reintroduced a simplified version of PmaAbsoluteUri directive
    (needed with reverse proxies)
  * Fix editing of ENUM/SET/DECIMAL field structures
  * Improvements to the parser
  - other fixes
  * Remove potentionally license problematic sRGB profile
  * gh#12459 Display read only fields as read only when editing
  * gh#12384 Fix expanding of navigation pane when clicking on database
  * gh#12430 Impove partitioning support
  * gh#12374 Reintroduced simplified PmaAbsoluteUri configuration
    directive
  * Always use UTC time in HTTP headers
  * gh#12479 Simplified validation of external links
  * gh#12483 Fix browsing tables with built in transformations
  * gh#12485 Do not show warning about short blowfish_secret if none
    is set
  * gh#12251 Fixed random logouts due to wrong cookie path
  * gh#12480 Fixed editing of ENUM/SET/DECIMAL fields structure
  * gh#12497 Missing escaping of configuration used in SQL
    (hide_db and only_db)
  * gh#12476 Add error checking in reading advisory rules file
  * gh#12477 Add checking missing elements and confirming element
    types from json_decode
  * gh#12251 Automatically save SQL query in browser local storage
    rather than in cookie
  * gh#12292 Unable to edit transformations
  * gh#12502 Remove unused paramenter when connecting to MySQLi
  * gh#12303 Fix number formatting with different settings of
    precision in PHP
  * gh#12405 Use single quotes in PHP code
  * gh#12534 Option for the dropped column is not removed from
    'after_field' select, after the column is dropped
  * gh#12531 Properly detect DROP DATABASE queries
  * gh#12470 Fix possible race condition in setting URL hash
  * gh#11924 Remove caching of server information
  * gh#11628 Proper parsing of INSERT ... ON DUPLICATE KEY queries
  * gh#12545 Proper parsing of CREATE TABLE ... PARTITION queries
  * gh#12473 Code can throw unhandled exception
  * gh#12550 Do not try to keep alive session even after expiry
  * gh#12512 Fixed rendering BBCode links in setup
  * gh#12518 Fixed copy of table with generated columns
  * gh#12221 Fixed export of table with generated columns
  * gh#12320 Copying a user does not copy usergroup
  * gh#12272 Adding a new row with default enum goes to no selection
    when you want to add more then 2 rows
  * gh#12487 Drag and drop import prevents file dropping to blob
    column file selector on the insert tab
  * gh#12554 Absence of scrolling makes it impossible to read longer
    text values in grid editing
  * gh#12530 "Edit routine" crashes when the current user is not the
    definer, even if privileges are adequate
  * gh#12300 Export selective tables by-default dumps Events also
  * gh#12298 Fixed export of view definitions
  * gh#12242 Edit routine detail dialog does not fill "Return length"
    field in mysql functions
  * gh#12575 New index Confirm adds whitespace around the field name
  * gh#12382 Bug in zoom search
  * gh#12321 Assign LIMIT clause only to syntactically correct queries
  * gh#12461 Can't Execute SQL With Sub-Query Due To "LIMIT 0,25"
    Inserted At Wrong Place
  * gh#12511 Clarify documentation on ArbitraryServerRegexp
  * gh#12508 Remove duplicate code in SQL escaping
  * gh#12475 Cleanup code for getting table information
  * gh#12579 phpMyAdmin's export of a Select statment without a FROM
    clause generates Wrong SQL
  * gh#12316 Correct export of complex SELECT statements
  * gh#12080 Fixed parsing of subselect queries
  * gh#11740 Fixed handling DELETE ... USING queries
  * gh#12100 Fixed handling of CASE operator
  * gh#12455 Query history stores separate entry for every letter
    typed
  * gh#12327 Create PHP code no longer works
  * gh#12179 Fixed bookmarking of query with multiple statements
  * gh#12419 Wrong description on GRANT OPTION
  * gh#12615 Fixed regexp for matching browser versions
  * gh#12569 Avoid showing import errors twice
  * gh#12362 prefs_manage.php can leave an orphaned temporary file
  * gh#12619 Unable to export csv when using union select
  * gh#12625 Broken Edit links in query results of JOIN query
  * gh#12634 Drop DB error in import if DB doesn't exist
  * gh#12338 Designer reverts to first saved ER after EACH relation
    create or delete
  * gh#12639 'Show trace' in Console generates JS error for functions
    in query's trace called without any arguments
  * gh#12366 Fix user creation with certain MariaDB setups
  * gh#12616 Refuse to work with mbstring.func_overload enabled
  * gh#12472 Properly report connection without password in setup
  * gh#12365 Fix records count for large tables
  * gh#12533 Fix records count for complex queries
  * gh#12454 Query history not updated in console until page refresh
  * gh#12344 Fixed parsing of labels in loop
  * gh#12228 Fixed parsing of BEGIN labels
  * gh#12637 Fixed editing some timestamp values
  * gh#12622 Fixed javascript error in designer
  * gh#12334 Missing page indicator or VIEWs
  * gh#12610 Export of tables with Timestamp/Datetime/Time columns
    defined with ON UPDATE clause with precision fails
  * gh#12661 Error inserting into pma__history after timeout
  * gh#12195 Row_format = fixed not visible
  * gh#12665 Cannot add a foreign key - non-indexed fields not listed
    in InnoDB tables
  * gh#12674 Allow for proper MySQL-allowed strings as identifiers
  * gh#12651 Allow for partial dates on table insert page
  * gh#12681 Fixed designer with tables using special chars
  * gh#12652 Fixed visual query builder for foreign keys with more
    fields
  * gh#12257 Improved search page performance
  * gh#12322 Avoid selecting default function for foreign keys
  * gh#12453 Fixed escaping of SQL parts in some corner cases
  * gh#12542 Missing table name in account privileges editor
  * gh#12691 Remove ksort call on empty array in PMA_getPlugins
    function
  * gh#12443 Check parameter type before processing
  * gh#12299 Avoid generating too long URLs in search
  * gh#12361 Fix self SQL injection in table-specific privileges
  * gh#12698 Add link to release notes and download on new version
    notification
  * gh#12712 Error when trying to setup replication (fatal error in
    call to an old PMA_DBI_connect function)
- fix for boo#1012271
  https://www.phpmyadmin.net/security/
  * Unsafe generation of $cfg['blowfish_secret']
    see PMASA-2016-58 (CVE ids: CVE-2016-9847, CWE-661)
  * phpMyAdmin's phpinfo functionality is removed
    see PMASA-2016-59 (CVE ids: CVE-2016-9848, CWE-661)
  * AllowRoot and allow/deny rule bypass with specially-crafted
    username
    see PMASA-2016-60 (CVE ids: CVE-2016-9849, CWE-661)
  * Username matching weaknesses with allow/deny rules
    see PMASA-2016-61 (CVE ids: CVE-2016-9850, CWE-661)
  * Possible to bypass logout timeout
    see PMASA-2016-62 (CVE ids: CVE-2016-9851, CWE-661)
  * Full path disclosure (FPD) weaknesses
    see PMASA-2016-63 (CVE ids: CVE-2016-9852, CVE-2016-9853,
    CVE-2016-9854, CVE-2016-9855, CWE-661)
  * Multiple XSS weaknesses
    see PMASA-2016-64 (CVE ids: CVE-2016-9856, CVE-2016-9857,
    CWE-661, CWE-352)
  * Multiple denial-of-service (DOS) vulnerabilities
    see PMASA-2016-65 (CVE ids: CVE-2016-9858, CVE-2016-9859,
    CVE-2016-9860, CWE-661, CW-400)
  * Possible to bypass white-list protection for URL redirection
    see PMASA-2016-66 (CVE ids: CVE-2016-9861, CWE-661, CWE-20,
    CWE-601)
  * BBCode injection to login page
    see PMASA-2016-67 (CVE ids: CVE-2016-9862, CWE-661)
  * Denial-of-service (DOS) vulnerability in table partitioning
    see PMASA-2016-68 (CVE ids: CVE-2016-9863, CWE-661, CWE-400)
  * Multiple SQL injection vulnerabilities
    see PMASA-2016-69 (CVE ids: CVE-2016-9864, CWE-661, CWE-89)
  * Incorrect serialized string parsing
    see PMASA-2016-70 (CVE ids: CVE-2016-9865, CWE-661)
  * CSRF token not stripped from the URL
    see PMASA-2016-71 (CVE ids: CVE-2016-9866, CWE-661)</changelog>
<changelog author="chris@computersalat.de" date="1481025600">- update to 4.6.5.2 (2016-12-05)
  * gh#12765 Fixed SQL export with newlines
- update changes (update to 4.6.5 (2016-11-25))
  * add missing (Not yet available) CVE's
- fix phpMyAdmin.http</changelog>
<changelog author="ecsos@opensuse.org" date="1484827200">- Add Patch phpMyAdmin-12757_sql_syntax_errror.patch to fix
  gh#12757 SQL syntax errror on MariaDB &lt; 10.0.2 in check for mysql
  password check plugin.
  Will be fixed in 4.6.6</changelog>
<changelog author="chris@computersalat.de" date="1485345600">- 4.6.6 (2017-01-23)
  * gh#12759 Fix Notice regarding 'Undefined index: old_usergroup'
  * gh#12760 Fix Notice regarding 'Undefined index: users'
  * gh#12762 Fixed parsing of SQL with BINARY function
  * gh#12588 ReCaptcha now works without allow_url_fopen
  * gh#12699 Show no local storage warning only on settings tab
  * gh#12778 Syntax Error in Adding/Changing TIMESTAMP columns with
    default value as NULL
  * gh#12769 Edit/Export links are not clickable under Routines tab
  * gh#12757 Fixed creating new user with older MariaDB
  * gh#12784 Remove ctype installation suggestion
  * gh#12780 Format button replaces all text with blank spaces
  * gh#12786 Fixed database searching
  * gh#12792 Fixed javascript error on new version link
  * gh#12785 Add information about required and suggested extensions
    to composer.json
  * gh#12801 Custom header shown twice with cookie login form
  * gh#12802 Custom footer not shown with auth_type http login failure
  * gh#12434 Improve documentation for servers running with Suhosin
  * gh#12800 Updated embedded phpSecLib to 2.0.4
  * gh#12800 Fixed various issues with PHP 7.1
  * gh#11816 Fixed operation with lower_case_table_names=2
  * gh#12813 Fixed stored procedure execution
  * gh#12826 Honor user configured connection collation
  * gh#12293 Correctly report OpenSSL errors from cookie encryption
  * gh#12814 DateTime won't allow to input length in Routine editor
  * gh#12840 Fix Notice regarding 'Undefined index: row_format' when
    altering table options
  * gh#12841 Fixed moving of columns with whitespace in name
  * gh#12847 Fixed editing of virtual columns
  * gh#12859 Changed WHERE condition to 0 instead of 1 for SQL query
    window to avoid accidents
  * gh#12872 Use same query for display and execution when dropping
    index
  * gh#12868 Fix check for user groups freatures being enabled
  * gh#12876 Fix notices and warning related to dbs_to_test global
  * gh#12831 Fix table formatting on Insert tab, which mostly
    affected row highlighting
  * gh#12495 Reintroduced phpinfo page with limited capabilities
  * gh#12861 Fix renaming tables with lower_case_table_names=2
  * gh#12876 Fix possible PHP error in navigation
  * gh#12881 Fix database search with newer php-gettext
  * gh#12894 Fix linter error on unterminated variable name
  * gh#12732 Fixed filtering for active processes
- fix for boo#1021597
  * PMASA-2016-44 (CVE-2016-6621, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2016-44/
  - Multiple vulnerabilities in setup script
  * PMASA-2017-1 (CVE-2017-1000013, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-1/
  - Open redirect
  * PMASA-2017-2 (CVE-2015-8980, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-2/
  - php-gettext code execution
  * PMASA-2017-3 (CVE-2017-1000014, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-3/
  - DOS vulnerabiltiy in table editing
  * PMASA-2017-4 (CVE-2017-1000015, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-4/
  - CSS injection in themes
  * PMASA-2017-5 (CVE-2017-1000016, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-5/
  - Cookie attribute injection attack
  * PMASA-2017-6 (CVE-2017-1000017, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-6/
  - SSRF in replication
  * PMASA-2017-7 (CVE-2017-1000018, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2017-7/
  - DOS in replication status
- remove obsolete phpMyAdmin-12757_sql_syntax_errror.patch
- rework phpMyAdmin-config.patch</changelog>
<changelog author="chris@computersalat.de" date="1490011200">- add http.inc file
  * include one file for php5/php7 admin flags/values</changelog>
<changelog author="ecsos@opensuse.org" date="1491048000">- update to 4.7.0 (2017-03-28)
  * gh#12233 [Display] Improve message when renaming database to
    same name
  * gh#6146  Log authentication attempts to syslog
  * gh#11981 Remove support for Swekey authentication
  * gh#11987 Remove code for no longer supported MSIE versions
  * gh#11962 Remove embedded PHP libraries, use composer to install
    them
  * gh#12017 Cannot easily select multiple tables when exporting
  * gh#12047 Add javascript filtering for databases
  * gh#12166 More compact rendering of navigation tree
  * gh#12129 Improve performance with SkipLockedTables
  * gh#12173 Do not hide indexes under a slider
  * Improve performance of zip file import
  * gh#12196 Removed $cfg['ThemePath']
  * gh#6274  Add support for export user settings as config.inc.php
    snippet
  * gh#5555  Better report query errors while generating SQL exports
  * gh#12307 Produce valid JSON on export
  * gh#12325 Setup script icons broken
  * gh#12378 Support IPv6 proxies
  * Removed MySQL connection retry without password
  * gh#12218 Allow to specify further parameters for control
    connection
  * gh#12162 Show charset for each table on Database structure page
  * gh#12463 Incorrect link in the href of icon at Hide/Show unhide
    links
  * gh#12330 Shortcut for closing console
  * gh#12465 Improved handling of http requests
  * gh#12474 Broken links in Setup forms Navigation
  * gh#12494 Can't add a new User
  * gh#12523 Add 'token' Parameter in all POST requests
    (Fix 'Token mismatch' errors)
  * gh#12302 Improved usage of number_format
  * gh#12656 Server selection not working
  * gh#12543 NULL results in dataset are colored grey
  * gh#12664 Create Bookmark broken
  * gh#12688 Use unsigned int for storing bookmark ID
  * gh#12352 Added password strength indicator
  * gh#12713 Correctly handle HTTP status when doing requests
  * gh#12247 Add option to delete settings from browser storage
  * gh#12783 Remove unused PMA_addJSCode function
  * gh#12069 Add table filtering to database structure
  * gh#12799 Allow to configure signon session parameters
  * gh#12854 Drop database is broken
  * gh#12863 Can't toggle Event Scheduler on
  * gh#12742 Finish removing dead code references to xls/xlsx
    import and export, which was removed some time ago.
  * gh#12536 Rename "Relations" to "Relationships" in many places
    as it's the more proper term
  * gh#12834 Fixed margins in central columns feature
  * gh#12903 Document more export configuration options
  * gh#12897 Use consistent numeric format for table overhead
  * gh#12901 Use server returned table name on renaming table
  * gh#12918 Always use \r\n as newline when editing fields
  * gh#12923 Fixed server side search in navigation panel
  * gh#12929 Undefined index warning with ssl_ca_paths
  * gh#12924 Do not show errors from OpenSSL cookie
    encryption/decryption
  * gh#12945 Fixed hint rendering on adding new user
  * gh#12941 Fixed sorting of tables in relation view
  * gh#12936 Fixed tables pagination in navigation panel
  * gh#12904 Do not collapse add form for central columns if there
    are none
  * gh#12955 Fixed database renaming
  * gh#12954 Fixed export of tracking data
  * gh#12960 Enclose exports in transaction by default
  * gh#12966 After adding a column ADD INDEX option won't be
    displayed when enabling AI
  * gh#12972 Better error message when Composer has not been run
  * gh#12988 Do not show language selector without choices
  * gh#12993 Fixed external links to php documentation
  * gh#12990 Fixed error when loading favorite tables to console
  * gh#12981 Improved rendering of new version information
  * gh#12922 Fixed bookmarks ordering
  * gh#12964 Fixed table search in navigation
  * gh#12985 Fixed rendering of foreign key browsing
  * gh#12957 Fixed manipulation with GIS data having zero
    coordinates
  * gh#12804 Fixed various designer javascript errors
  * gh#12934 Fixed possible javascript error on server status page
  * gh#12927 Fixed javascript error on 3NF normalization
  * gh#12996 List all databses in navigation panel database
    dropdown
  * gh#12980 Better defaults when creating multi field foreign key
  * gh#12976 Improved foreign key editor behavior
  * gh#12958 Always show error reporting dialog on top
  * gh#12693 Improved support for TokuDB
  * gh#11231 Try harder to honor LoginCookieValidity setting
  * gh#13016 and #13017 Slight improvements to the table layout of
    Relation view
  * gh#12345 Correctly show affected rows for LOAD DATA queries
  * gh#13010 Copy database: SQL error for copying PMADB metadata
  * gh#13002 Fixed OpenDocument exports
  * gh#13000 Align NULL values according to the column alignment
  * gh#13021 Show phpMyAdmin errors even with error_reporting
    set to 0
  * gh#13020 Removed warning about client and server versions
    mismatch
  * Hide comments on table Structure tab when no comment is set
  * Fixed submission of error reports
  * gh#13033 Use Referrer-Policy header to specify referrer policy
  * Fixed javascript confirmation of dangerous queries
  * gh#13040 Compatibility with hhvm 3.18
  * gh#13031 Fixed displaying of all rows
  * gh#12967 Fixed related field selection for native relations
  * gh#13045 Properly escape MIME transformatoin names
  * gh#13028 Always show 100% in font selector
  * gh#13047 Fix query simulating for more servers
  * gh#12846 Fix new version check for sites with wrongly
    configured curl
  * gh#12951 When exporting to Excel, the default is now to include
    column names in the first row
  * gh#13059 Removed debugging code
  * gh#13029 Fixed table tracking for nested table groups
  * gh#13053 Fixed broken links in setup
  * gh#12708 Removed phpMyAdmin version from User-Agent header
  * gh#13084 Do not point users to setup when it is disabled
  * gh#12660 Delete only phpMyAdmin cookies on upgrade
  * gh#13088 Fixed editing of rows with text primary key
  * gh#13092 Do not try to sync favorite tables if configuration
    storage is not enabled
  * gh#13105 Fixed changing attribute for virtual field
  * gh#12757 Fixed setting password on recent MariaDB with non
    working plugins
  * gh#12349 Fixed undefined variable on import from some formats
  * gh#13103 Do not offer default names for copying/renaming
    databases
  * [security] Possible to bypass
    $cfg['Servers'][$i]['AllowNoPassword'], see PMASA-2017-08
- Drop patch phpMyAdmin-pma.patch because now in upstream</changelog>
<changelog author="chris@computersalat.de" date="1492862400">- restore phpMyAdmin-pma.patch
  * because it is NOT upstream and needed for configuration storage
- restore previous phpMyAdmin-config.patch
  * merge with upstream config VAR changes
  - removed $cfg['Servers'][$i]['designer_coords']</changelog>
<changelog author="ecsos@opensuse.org" date="1496404800">- update to 4.7.1 (2017-05-25)
  * gh#13132 Always execute tracking queries as controluser
  * gh#13125 Focus on SQL editor after inserting field name
  * gh#13133 Fixed broken links in setup
  * gh#13135 Database list Tooltips: Show wrong value
  * gh#13150 Fixed pagination while browsing resuls
  * gh#13149 Fixed outbound links in changelog.php
  * gh#13146 Do not include devel dependencies in the release
  * gh#13144 Do not show New as a database in database dropdown
  * gh#13130 Fixed handling of errors in AJAX requests
  * gh#13152 Fixed PHP error in case of invalid table preferences
  * gh#13154 Fixed PHP error on password change
  * gh#13219 Fix Refresh of Process List
  * gh#13182 Fix refresh of long queries
  * gh#12301 Improved handling of logout with disabled
    LoginCookieDeleteAll
  * gh#13216 Add support for MySQL 8.0 collations
  * gh#13218 Fixed rendering of phpMyAdmin logos
  * gh#13234 Properly report not working sessions
  * gh#13256 Fixed password check on server replication
  * gh#13252 Fixed grid editing time column
  * gh#13258 Fixed detection of Amazon RDS
  * gh#13241 Redirect user to last page that has any tables to
    display
  * gh#13266 Fix link to User accounts overview page
  * gh#13274 Fix error in query builder
  * gh#13177 Grid editing repeats action after error</changelog>
<changelog author="ecsos@opensuse.org" date="1498996800">- update to 4.7.2 (2017-06-29)
  * gh#13314 Make theme selection keep current server
  * gh#13311 Fixed direct login for accounts without password
  * gh#13316 Fixed check for mbstring.func_overload
  * gh#13323 Fixed wrong encoding of table at triggers
  * gh#12976 Fixed natural sorting in several places
  * gh#12718 Show warning for users removed from mysql.user table
  * gh#13362 Fixed loading additional javascripts
  * gh#13343 Fixed editing QBE
  * gh#13193 Improved documentation on user settings
  * gh#13092 Gracefully handle early fatal errors in AJAX requests
  * gh#13327 Fixed Incorrect NavigationTreeEnableExpansion default
    value in the documentation
  * gh#13008 Fixed export of database with a lot of tables
  * gh#13318 Improved performance when importing with enabled
    tracking
  * gh#13386 Avoid PHP errors with non existing configuration on
    OS X
  * gh#13388 Show only supported charsets for conversion
  * gh#13392 Fixed operation with session.auto_start enabled
  * gh#13383 "Create PHP code" is broken
  * gh#13189 Fixed links to resume timeouted import</changelog>
<changelog author="ecsos@opensuse.org" date="1500724800">- update to 4.7.3
  * gh#13447 Large multi-line query removes Export operation and
    blanks query box options
  * gh#13445 Fixed rendering of query results
  * gh#13437 Fixed version check when not connected to a database
  * gh#13465 Fixed creating relation
  * gh#13475 Fixed export without backquotes
  * gh#13482 Improved handling of uploaded files with open_basedir
  * gh#13387 Fixed inline editing of hex values
  * gh#13382 Fixed size of index edit dialog
  * gh#13489 Fixed rendering SQL lint errors
  * gh#13468 Avoid breakage if set_time_limit is disabled
  * gh#13471 Fail if ini_set/ini_get are disabled
  * gh#13436 Automatically connect using SSL when server is
    configured so
  * gh#13478 Fixed usage of some browser transformations</changelog>
<changelog author="chris@computersalat.de" date="1501243200">- fix for boo#1050980
  * replace mcrypt with openssl, see
    https://github.com/phpseclib/phpseclib/issues/1028
- update changes (update to 4.6.6 (2017-01-23))
  * add missing (CVE-Not yet available) CVE's</changelog>
<changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
<changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
<changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
<changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>

</package>
<package pkgid="01c3d276afe58e4e914c445f1c9e3678b7f2ca460ff81cc02f1391db047236b5" name="plasma5-pk-updates" arch="src">
    <version epoch="0" ver="0.2" rel="11.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
<changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
<changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1505390400">- Add patches to add notifications if a transaction requires a
  logout or reboot (boo#951580):
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch</changelog>

</package>
<package pkgid="1d0192dcb26467a70ee827148b71cdf22be8666e948b45e606fefeee953acce5" name="plasma5-pk-updates" arch="src">
    <version epoch="0" ver="0.3.1" rel="14.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
<changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
<changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1505390400">- Add patches to add notifications if a transaction requires a
  logout or reboot (boo#951580):
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Update to 0.3.1. Changes:
  * concat the string
  * reload the cache when the updates had been installed meanwhile manually
  * Re-check selected packages once any is selected/deselected
  * Remove Plasma/PopupApplet from desktop file
  * Add notification about required restart/logout
  * Fix typo in icon name
  * Use new breeze icons
  * Make it compile with GCC &lt; 5
  * Simplify the logic a bit
  * Change the refresh logic and avoid unnecessary calls to the Packagekit Daemon
  * Add a checkbox to select/deselect all packages
  * Use native plasma components
- Remove patches, now upstream:
  * 0001-Add-notification-about-required-restart-logout.patch
  * fix-typo-in-icon-name.patch
  * use-new-breeze-icons.patch
  * use-native-plasma-components.patch
  * change-refresh-logic.patch
  * gcc48.diff
  * add-desktopfile-translations.patch
- Add patch to fix translation of status string:
  * 0001-concat-the-string.patch
- Generate an updated plasma-pk-updates-lang.tar.xz</changelog>

</package>
<package pkgid="76180d0d8152e74f2f204357406261b3993c1b9633ac96c494a1b60e2996c6c9" name="plasma5-pk-updates" arch="x86_64">
    <version epoch="0" ver="0.2" rel="11.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
<changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
<changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1505390400">- Add patches to add notifications if a transaction requires a
  logout or reboot (boo#951580):
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch</changelog>

</package>
<package pkgid="dfdb3c53ee4ec2d7f73f3b10aed3884a3c1c1164da3e0bcb97f91dcab404d5d0" name="plasma5-pk-updates" arch="x86_64">
    <version epoch="0" ver="0.3.1" rel="14.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
<changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
<changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1505390400">- Add patches to add notifications if a transaction requires a
  logout or reboot (boo#951580):
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Update to 0.3.1. Changes:
  * concat the string
  * reload the cache when the updates had been installed meanwhile manually
  * Re-check selected packages once any is selected/deselected
  * Remove Plasma/PopupApplet from desktop file
  * Add notification about required restart/logout
  * Fix typo in icon name
  * Use new breeze icons
  * Make it compile with GCC &lt; 5
  * Simplify the logic a bit
  * Change the refresh logic and avoid unnecessary calls to the Packagekit Daemon
  * Add a checkbox to select/deselect all packages
  * Use native plasma components
- Remove patches, now upstream:
  * 0001-Add-notification-about-required-restart-logout.patch
  * fix-typo-in-icon-name.patch
  * use-new-breeze-icons.patch
  * use-native-plasma-components.patch
  * change-refresh-logic.patch
  * gcc48.diff
  * add-desktopfile-translations.patch
- Add patch to fix translation of status string:
  * 0001-concat-the-string.patch
- Generate an updated plasma-pk-updates-lang.tar.xz</changelog>

</package>
<package pkgid="c72d06aa4356417f8a5794996f89cf4fec0200f7c30dbe77dae13cb1c581b0b2" name="plasma5-pk-updates-lang" arch="noarch">
    <version epoch="0" ver="0.2" rel="11.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
<changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
<changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1505390400">- Add patches to add notifications if a transaction requires a
  logout or reboot (boo#951580):
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch</changelog>

</package>
<package pkgid="5375b89c160d4db4e2cdca680dad7a3f8470c11c041b05c4f85604e616c1472a" name="plasma5-pk-updates-lang" arch="noarch">
    <version epoch="0" ver="0.3.1" rel="14.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
<changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
<changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
<changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
<changelog author="fabian@ritter-vogt.de" date="1505390400">- Add patches to add notifications if a transaction requires a
  logout or reboot (boo#951580):
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch</changelog>
<changelog author="fabian@ritter-vogt.de" date="1510401600">- Update to 0.3.1. Changes:
  * concat the string
  * reload the cache when the updates had been installed meanwhile manually
  * Re-check selected packages once any is selected/deselected
  * Remove Plasma/PopupApplet from desktop file
  * Add notification about required restart/logout
  * Fix typo in icon name
  * Use new breeze icons
  * Make it compile with GCC &lt; 5
  * Simplify the logic a bit
  * Change the refresh logic and avoid unnecessary calls to the Packagekit Daemon
  * Add a checkbox to select/deselect all packages
  * Use native plasma components
- Remove patches, now upstream:
  * 0001-Add-notification-about-required-restart-logout.patch
  * fix-typo-in-icon-name.patch
  * use-new-breeze-icons.patch
  * use-native-plasma-components.patch
  * change-refresh-logic.patch
  * gcc48.diff
  * add-desktopfile-translations.patch
- Add patch to fix translation of status string:
  * 0001-concat-the-string.patch
- Generate an updated plasma-pk-updates-lang.tar.xz</changelog>

</package>
<package pkgid="1470c2db4bd0623b13cdcb3a815147b33f91b15a83af9f47421d17518041fc00" name="plistutil" arch="x86_64">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="a799c61e6b9c571afbcc39f655a20881b1510c02c2a10126780925d0a284553b" name="poppler" arch="src">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="0d9aeeca16448ab87315aa62ae3370ef02e0c53495d6639e9432acb341c2a479" name="poppler-qt" arch="src">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="5d4c47cd3d2b7f25eabf6fcddb47496e85b045662aa0f66ea5bb9ddf1cfd7e9c" name="poppler-qt5" arch="src">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="3b6da22cf9732c0c3f2d8b78062e1f135139b81de1d56a5cbf300cecc63b590f" name="poppler-tools" arch="x86_64">
    <version epoch="0" ver="0.43.0" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1426939200">- Update to version 0.32.0:
  + core:
  - Annotations: Fix rendering of empty BG/BC arrays.
  - Splash:
    . Fix wrong colour shown when GouraudTriangleShFill uses a
    DeviceN colorspace (fdo#89182).
    . Fix use of uninitialized variable in Splash::pipeRun.
  - Remove unnecesary check for font validity (fdo#88939).
  - Small optimization in GooString::appendfv() (fdo#89096).
  - Fix crashes in malformed files.
  + utils:
  - pdftops: Make colorpsace optimization an option instead of
    default.
  - pdfseparate: use always an unique instance for PDFDoc for
    savePageAs.
  + build system:
  - cmake: If extra-cmake-modules is around include the
    Sanitizers module.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1431864000">- Update to version 0.33.0:
  + core:
  - Fix regression in pdftops parameter passing (fdo#89827).
  - Combine base characters and diacritical marks (fdo#87215).
  - Use width from W array for WMode positioning (fdo#89621).
  - Fixed adding annotation of Subtype Popup to pdf page
    (fdo#89136).
  - CairoOutputDev: Fix memory leak in CairoFreeTypeFont::create.
  - SplashOutputDev: memset on error to have reproducible
    outputs.
  + qt4: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + qt5: Fix PDF Text String -&gt; QString conversion (kde#344849).
  + glib:
  - Add poppler_annot_markup_set_popup_rectangle()
  - Fix segfault when creating PopplerAction (fdo#90093).
  + utils: pdftohtml: Set exit status adecuately (fdo#83609).
  + build system: configure: Fix invalid shell comparaison in
    libtiff test.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.34.0:
  + core:
  - Splash:
    . Fix crash in PDF with nested softmasks (fdo#91240).
    . Speed up of rendering icc based images (fdo#90171).
  - PSOutputDev: Embed Type1 fonts to PostScript files correctly
    (fdo#19747).
  - Fix pedantic memory leak.
  + glib: Update new symbols section.
  + Build system: cmake: Make sure ENABLE_LIBOPENJPEG is either 0
    or 1.
- Bump poppler soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1439294400">- Update to version 0.35.0:
  + core:
  - Fix assert in broken file (fdo#91344).
  - Adjust memory layout computation of GooString.
  - Make SplashBitmap XBGR transfer alpha channel.
  - Splash: Fix wrong writes on non rgb outputs (fdo#90570).
  - Splash: remove ifndef in Windows code.
  - GlobalParamsWin bugfixes (fdo#91053).
  + qt4:
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + qt5:
  - Improve efficiency of Poppler::Page::renderToImage.
  - Switch default image format.
  - Add IgnorePaperColor render flag.
  + build system:
  - Allow configuring SPLASH_CMYK support.
    + Add configure --enable-build-type (fdo#90796).
  + glib:
  - Explicitly link against pthread.
  - Deprecation fixes.
  + utils: pdftocairo: Fix cast to pointer from integer of
    different size on win64.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1441972800">- Update to version 0.36.0:
  + core:
  - Patch to support RichMedia annotations.
  - Splash: Fix wrong memory access (fdo#91686).
  - Cairo: fix size of transparency group surface (fdo#66229).
  - Fix bounds check in Linearization::getPageFirst (fdo#91200).
  - File Saving improvements.
  - Add premultiplied alpha channel to SplashBitmap.
  - Fix for xref table creation (fdo#90790).
  - Fix JBIG2Decode infinite loop and stack overflow (fdo#91186).
  - Minor optimization in text extraction.
  + qt4:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizations.
  + qt5:
  - Basic support for RichMedia annotations.
  - Change default image format.
  - Minor optimizationsHEADmaster.
  + cpp: Fix utf8/utf16 conversion (fdo#91644).
  + build system:
  - Do not hardcode -fPIC in Makefile.am.
  - cmake: Allow configuring SHARE_INSTALL_DIR (fdo#90293).
  + utils:
  - pdfunite: Insert embedded files in result pdf (fdo#90066).
  - pdftotext: Add -bbox-layout option (fdo#89941).
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1444478400">- Update to version 0.37.0:
  + core:
  - CairoOutputDev: Use mask for even-odd fill (fdo#84527).
  - SplashOuputDev: Protect calls to set/getAA with the proper
    [#]if guards (fdo#92006).
  - SplashOuputDev: Try to use an external font if the internal
    one is invalid.
  - PageTransition D is a number not an int (fdo#92040).
  - Catalog::getNumPages(): validate page count.
  - Catalog::cachePageTree(): recover from out of memory
    condition.
  - Fix crashes in malformed documents.
  + build system: configure: fix openjpeg detection.
- Use pkgconfig(libopenjp2) BuildRequires for openSUSE newer than
  13.1, stay with openjpeg-devel for older releases.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1447761600">- Update to version 0.38.0:
  + core:
  - Splash: Multiply opacity in case of pattern colorspace
    (fdo#92592).
  - Small form improvements on non ascii character rendering.
  - Clarify README.
  + build system: Clarify internal DCT and JPX are only provided as
    deprecated fallbacks.
  + utils: pdftocairo: fix fit to page transformation.
- Bump soname following upstream changes.</changelog>
<changelog author="pgajdos@suse.com" date="1448020800">- added poppler-qt5 package [bsc#953957]</changelog>
<changelog author="pgajdos@suse.com" date="1448366400">- fix annotations with transparent color [bsc#914316]</changelog>
<changelog author="pgajdos@suse.com" date="1450353600">- Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466]
  + poppler-ligatures.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1450440000">- Update to version 0.39.0:
  + core:
  - Ignore the alternateSpace and tintTransform (fdo#92381).
  - CairoOutputDev:
    . Scale radial pattern (fdo#22098).
    . Implement function shading using mesh gradients
    (fdo#88394).
  - Regression test improvements.
  - Fix typos in error messages.
  + build system: Visual Studio 2015 now supports snprintf
    (fdo#93116).
  + utils:
  - pdftops: fix %%PageBoundingBox (fdo#87161).
  - pdftocairo: Fix double free when both user and owner
    passwords are given.
  + glib:
  - Add duration_real to PopplerPageTransition (fdo#92040).
  - Remove enum PopplerOrientation from API (fdo#93229).
  - Documentation improvements.
  - glib-demo improvements.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1452859200">- Update to version 0.40.0:
  + core:
  - CairoOutputDev: Use shape mask with soft mask (fdo#91931).
  - TextOutputDev:
    . Handle right-to-left text in search
    . Fix finding Arabic Presentation Forms ligatures.
  - Fix crash in invalid file (fdo#93476).
  - Regression test improvements.
  + utils:
  - pdftocairo:
    . Fix writing to stdout out with image output.
    . Document that -singlefile appends file type (fdo#86254).
    . Ensure surface flushed before accessing image data.
    . Check for invalid use of options (fdo#92195).
  - pdfunite: Fix typo in manual.
  + build system: Improve cmake build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1455796800">- Update to version 0.41.0:
  + core:
  - CairoOutputDev: add missing font types (fontCIDType0COT and
    fontTrueTypeOT) (fdo#93559).
  - SplashOutputDev: Adjust limit check and check in addition
    bitmap pointer (fdo#94053).
  + utils:
  - pdfseparate: Refine resource detection.
  - pdfinfo: fix man page.</changelog>
<changelog author="zaitor@opensuse.org" date="1458302400">- Update to version 0.42.0:
  + core:
  - Add the support for version 5 + revision 6 documents
    (fdo#85368).
  - Add initial support for Signature handling.
  - Initialize gamut mapping multipliers in ::copy() functions
    (fdo#90697).
  - Implement jpx streams support with depth &lt; 8.
  - Handle SMaskInData = 0 for JPX encoded images (fdo#93468).
  - Fix rendering of some broken PDF files (fdo#92508).
  - PSOutputDev:
    . Support for LZW encoding.
    . Add support for Flate compression in Level 3 output.
  - SplashOuputDev:
    . Implement function shading (fdo#94441).
    . Improve rendering of some non embedded fonts (fdo#94054).
    . Fall back to Gfx implementation of tiling pattern if
    repetition rate is small (fdo#90596).
    . Implementation of Matte entries in softmasks of
    softmasked images (fdo#22473).
    . Assure line width &gt; 0 in case of text stroke (fdo#94038).
  - TextOuputDev: Cache result of inner loop in visitDepthFirst
    (fdo#77087).
  - Avoid attempting a tiling pattern fill with a singular
    transform matrix.
  + utils:
  - pdfinfo: Add option to show document structure
  - pdfsig: New command that gives information about signature
  + qt4: Fix bug in links to remote documents getting the page
    number wrong sometimes.
  + qt5: Fix bug in links to remote documents getting the page
    number wrong sometimes.
- Add pkgconfig(nss) BuildRequires: Build nss support.
- Bump soname following upstream changes.</changelog>
<changelog author="zaitor@opensuse.org" date="1459857600">- Add poppler-Fix-rendering-of-broken-pdfs.patch: Fix pdf rendering
  commit (boo#973888 bgo#764641 fdo#94830).</changelog>
<changelog author="hpj@suse.com" date="1460721600">- Update to GNOME 3.20 -- Fate#318572.
- Drop poppler-annot-form-transparent-color.patch,
  poppler-configure-moc-version.patch,
  poppler-ligatures.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 0.43.0:
  + core:
  - Implement sanity check for linearization usage (fdo#92482).
  - Add SymbolMT as an alias for the Symbol font (fdo#93168).
  - Fix some blank files (fdo#94756).
  - cairo:
    . Fix fillToStrokePathClip crash and rendering (fdo#62905).
    . Check if PDF knows the width of 'm' in case of substituted
    font (fdo#94054).
    . Save mask state and don't extend image mask (fdo#94234).
  - SplashOuputDev: Compile with C++11 compilers that don't
    define isinfinite (fdo#94761).
  - Typo fixes.
  + utils: pdftocairo: Calculate rotation before scaling
    (fdo#94655).
  + qt4: Fix crash on certain PDF form item activation actions
    (fdo#94873).
  + qt5: Fix crash on certain PDF form item activation actions
    (fdo#94873).
- Drop poppler-Fix-rendering-of-broken-pdfs.patch, fixed upstream.
- Bump soname following upstream changes.</changelog>
<changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)</changelog>
<changelog author="psimons@suse.com" date="1497009600">- Apply 0001-pdfunite-Fix-crash-with-broken-documents.patch from
  upstream to fix crashes in pdfunite when encountering invalid PDF
  files. [bsc#1041783, CVE-2017-7511]
- Apply 0001-Fix-memory-leak-and-probably-logic-bug-parsing-broke.patch
  from upstream to fix a memory leak that occurred while parsing
  invalid XRef attributes [bsc#1042803, CVE-2017-9406].
- Apply 0001-Fix-memory-leak-when-reconstructing-broken-files.patch
  from upstream to fix a memory leak that occurred when the parser
  tried to recover from a broken input file. [bsc#1042802,
  CVE-2017-9408]</changelog>
<changelog author="psimons@suse.com" date="1500465600">- Apply CVE-2017-9775.patch from upstream to fix a stack overflow
  bug in pdftocairo that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045719, CVE-2017-9775]
- Apply CVE-2017-9776.patch from upstream to fix an integer
  overflow bug that could have been exploited in a denial of
  service attack through a specially crafted PDF document.
  [bsc#1045721, CVE-2017-9776]
- Apply CVE-2017-7515.patch to fix a memory leak that occurred when
  the parser tried to recover from a broken input file.
  [bsc#1043088, CVE-2017-7515]</changelog>

</package>
<package pkgid="a027b9a83ef3b05f8c245c1ca33ccdcfa9e821d864546ec60e65f1e3d67e9927" name="postgresql93" arch="src">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="1b35a159a4b9bc8ab03ff7ea3cae7db8d93e0691a3b1e55a7bedd962685a0c94" name="postgresql93" arch="x86_64">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="7e0075565dd537e1911b93dc091659bec56ccf12d7853bbf1927cadac92868e8" name="postgresql93-contrib" arch="x86_64">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="8555eb767126f3926c3eb1c5c125f96e44345898f3a87bcc0b207bc453f6e50f" name="postgresql93-devel" arch="x86_64">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="922615a42b50ba8f9b6ccd54abcb19bea4039b6585f950c0075f8a53efca7f95" name="postgresql93-docs" arch="noarch">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="18d0dab3c001284d6435f9b5885548ca8513ee1ef2d62f1ff442e4f9634edad0" name="postgresql93-libs" arch="src">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="ba33b0b59d951a9efdd6be1c6bd97cb4207b3cadc961f8384e8e41445cdfcfd8" name="postgresql93-plperl" arch="x86_64">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="0d2741d89f386b0da9909a5b7354ba756e5630044cd8cc40ae5407c0514d087c" name="postgresql93-plpython" arch="x86_64">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="3491b1cce00a165b7ae9cfcd6133bdfb9eac8282ff403b08790dc3fd9c45735a" name="postgresql93-pltcl" arch="x86_64">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="c56cea3511b7e6244099d98fcb2eda904e7ef24273362153243e5cf72456a125" name="postgresql93-server" arch="x86_64">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="f04ed7d040eafdf1856f7ef7337f771ed03e8b2783cdbbaeb535c9a4975ba82a" name="postgresql93-test" arch="x86_64">
    <version epoch="0" ver="9.3.18" rel="8.1"/>

<changelog author="ro@suse.de" date="1406289600">- add BuildIgnore systemd-mini to fix build</changelog>
<changelog author="darin@darins.net" date="1406635200">- fix systemd unresolvable for SLE_11
  http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines</changelog>
<changelog author="coolo@suse.com" date="1406808000">- postgresql93-libs doesn't require systemd - avoid cycles</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with version 9.4 and improve the building of
  libs and devel.</changelog>
<changelog author="max@suse.com" date="1424433600">- Security and bugfix release 9.3.6 (bnc#916953):
  * Fix buffer overruns in to_char() (CVE-2015-0241).
  * Fix buffer overrun in replacement *printf() functions
    (CVE-2015-0242).
  * Fix buffer overruns in contrib/pgcrypto (CVE-2015-0243).
  * Fix possible loss of frontend/backend protocol synchronization
    after an error (CVE-2015-0244).
  * Fix information leak via constraint-violation error messages
    (CVE-2014-8161).
  * For the other bug fixes, see the release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-6.html</changelog>
<changelog author="max@suse.com" date="1432296000">- Security and bugfix release 9.3.7:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of the
  * printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly report
    decryption failures as "Wrong key or corrupt data"
  * Protect against wraparound of multixact member IDs.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-7.html</changelog>
<changelog author="max@suse.com" date="1433332800">- Bugfix release 9.3.8:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF
    property, if set.
  * Allow libpq to use TLS protocol versions beyond v1.
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-8.html</changelog>
<changelog author="max@suse.com" date="1440072000">- Merge openSUSE and SLE12 packages (bsc#941886).
- Merge .changes, remove duplicate entries and fix syntax
  violations at the very bottom.
- postgresql-sle10-timestamptz.patch is obsolete.
- remove baselibs.conf, because we don't build the libarries any
  longer.
- Bugfix release 9.3.9:
  * Fix possible failure to recover from an inconsistent database
    state. See full release notes for details.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-9.html</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.3.10:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-3-10.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals.
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.3.11:
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notse, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-11.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.3.12:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.3/static/release-9-3-12.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release 9.3.13
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-3-13.html</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.3.14:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-14.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.3.15:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * Fix EXPLAIN to emit valid XML when track_io_timing is on
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.3/static/release-9-3-15.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.3.16:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.3/static/release-9-3-16.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.3.16-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.3.17:
  * https://www.postgresql.org/docs/9.3/static/release-9-3-16.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.3.16-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.3.18
  * https://www.postgresql.org/docs/9.3/static/release-9-3-18.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="6fe3b5e685a222d57e4918e9a8a46c0793f379100852b956cbda974b422b6c99" name="postgresql94" arch="src">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="8956506542347d9615aa8ddb9dfae009664fab81db318e773bc7fdb7bf6fc81c" name="postgresql94" arch="x86_64">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="f8fed357ed22de829c43630a71cac6ba5661a99a5aad00468c45f3f5e8d2d7ab" name="postgresql94-contrib" arch="x86_64">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="08393d8506d49daf263cdcb668eaf94d595398a3d9075691eed594712e6dc3e4" name="postgresql94-devel" arch="x86_64">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="bfd1848c9e822c635f05d362c2fa6a7afa5e5efeeda08709709f2dc83ba86ff8" name="postgresql94-docs" arch="noarch">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="e99511dcb58ddcf43025d4f09d9448854249af8878a496d0133e0a9dfad33302" name="postgresql94-libs" arch="src">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="1471c1879e109edfc31a5c0a492504175b0af6892ce25612d6904b97fac63523" name="postgresql94-plperl" arch="x86_64">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="a89a9ecfa16a6c749403bd98c9fc203835e2b81e1de6ca8d9b1bfbd377c77434" name="postgresql94-plpython" arch="x86_64">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="112fb8fb795dc1e92b093855360d3360816372cea22b44881cee4df57f7ef79a" name="postgresql94-pltcl" arch="x86_64">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="4db63720ac0c2b5c61f6e12c8574f3fc91a9933e1091a0cba3e6a7a09d914590" name="postgresql94-server" arch="x86_64">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="b0459a20b4c3e9be9686917aec825a2c1b3ad01cf2804af2c469b2a6879c28ce" name="postgresql94-test" arch="x86_64">
    <version epoch="0" ver="9.4.13" rel="12.1"/>

<changelog author="mrueckert@suse.de" date="1423742400">- majorversion should only be 9.4</changelog>
<changelog author="max@suse.com" date="1424260800">- Switch over to 9.4 by building the libs package and disable it
  on 9.3.
- Remove obsolete patches:
  * postgresql-sle10-timestamptz.patch
  * postgresql-plperl.patch</changelog>
<changelog author="max@suse.com" date="1424347200">- Align spec file with 9.3 package.
- Require systemd only where available and only for the main
  package.
- bnc#888564: Move the server socket from /tmp to /var/run to avoid
  problems with clients that use PrivateTmp.
  postgresql-var-run-socket.patch</changelog>
<changelog author="max@suse.com" date="1435320000">- Switch from ossp-uuid to libuuid from e2fsprogs.
- Re-enable running the test suite during build.
- Bugfix release 9.4.4:
  * Fix possible failure to recover from an inconsistent database
    state.
  * Fix rare failure to invalidate relation cache init file.
  * Avoid deadlock between incoming sessions and CREATE/DROP
    DATABASE.
  * Improve planner's cost estimates for semi-joins and anti-joins
    with inner indexscans
- Bugfix release 9.4.3:
  * Avoid failures while fsync'ing data directory during crash
    restart.
  * Fix pg_get_functiondef() to show functions' LEAKPROOF property,
    if set.
  * Fix pushJsonbValue() to unpack jbvBinary objects.
- Security and bugfix release 9.4.2:
  * CVE-2015-3165, bsc#931972: Avoid possible crash when client
    disconnects just before the authentication timeout expires.
  * CVE-2015-3166, bsc#931973: Consistently check for failure of
    the *printf() family of functions.
  * CVE-2015-3167, bsc#931974: In contrib/pgcrypto, uniformly
    report decryption failures as "Wrong key or corrupt data".
  * Protect against wraparound of multixact member IDs.
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-2.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-3.html
  http://www.postgresql.org/docs/9.4/static/release-9-4-4.html</changelog>
<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notes, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Bugfix release 9.4.7:
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1463659200">- Bugfix release to 9.4.8
  This update fixes several problems which caused downtime for
  users, including:
  - Clearing the OpenSSL error queue before OpenSSL calls,
    preventing errors in SSL connections, particularly when using
    the Python, Ruby or PHP OpenSSL wrappers
  - Fixed the "failed to build N-way joins" planner error
  - Fixed incorrect handling of equivalence in multilevel nestloop
    query plans, which could emit rows which didn't match the WHERE
    clause.
  - Prevented two memory leaks with using GIN indexes, including a
    potential index corruption risk.
  The release also includes many other bug fixes for reported
  issues, many of which affect all supported versions:
  - Fix corner-case parser failures occurring when
    operator_precedence_warning is turned on
  - Prevent possible misbehavior of TH, th, and Y,YYY format codes
    in to_timestamp()
  - Correct dumping of VIEWs and RULEs which use ANY (array) in a
    subselect
  - Disallow newlines in ALTER SYSTEM parameter values
  - Avoid possible misbehavior after failing to remove a tablespace
    symlink
  - Fix crash in logical decoding on alignment-picky platforms
  - Avoid repeated requests for feedback from receiver while
    shutting down walsender
  - Multiple fixes for pg_upgrade
  - Support building with Visual Studio 2015
  - This update also contains tzdata release 2016d, with updates
    for Russia, Venezuela, Kirov, and Tomsk.
  http://www.postgresql.org/docs/current/static/release-9-4-8.html</changelog>
<changelog author="max@suse.com" date="1464004800">- The libs are now built in 9.5, so disable them here and remove
  baselibs.conf.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to version 9.4.9:
  * Fix possible mis-evaluation of nested CASE-WHEN expressions
    (CVE-2016-5423, bsc#993454)
  * Fix client programs' handling of special characters in database
    and role names (CVE-2016-5424, bsc#993453)
  * Fix corner-case misbehaviors for IS NULL/IS NOT NULL applied
    to nested composite values
  * Make the inet and cidr data types properly reject IPv6
    addresses with too many colon-separated fields
  * Prevent crash in close_ps() (the point ## lseg operator) for
    NaN input coordinates
  * Fix several one-byte buffer over-reads in to_number()
  * Avoid unsafe intermediate state during expensive paths through
    heap_update()
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-9.html</changelog>
<changelog author="fweiss@suse.com" date="1473940800">- Added "Requires: timezone" to Server Package (bsc#973660)</changelog>
<changelog author="fweiss@suse.com" date="1481198400">- Update to version 9.4.10:
  * Fix WAL-logging of truncation of relation free space maps and
    visibility maps
  * Fix incorrect creation of GIN index WAL records on big-endian
    machines
  * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have
    been updated by a subsequently-aborted transaction
  * Fix EvalPlanQual rechecks involving CTE scans
  * Fix improper repetition of previous results from hashed
    aggregation in a subquery
  * For the other bug fixes, see the release notes:
    https://www.postgresql.org/docs/9.4/static/release-9-4-10.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- Update to version 9.4.11:
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.4/static/release-9-4-11.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a bsc#1029547
  postgresql-9.4.11-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494331200">- Update to version 9.4.12:
  * https://www.postgresql.org/docs/9.4/static/release-9-4-12.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.4.11-fix-timezone-tests.patch
- Move the timezone requirement to the server package as it was
  originally intended.
- Stop building libpq and libecpg on SLE-12 in preparation of the
  submission of version 9.6.
- Sync spec file with postgresql96.
- Merge Factory and SLE-12.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.4.13
  * https://www.postgresql.org/docs/9.4/static/release-9-4-13.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="751c156e234be93ac7c0dff4018eb3343f1b5762c0e05a65c496108caf8eb200" name="postgresql96" arch="src">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="be5ee2594f15ae4957eb419fee3f6d6ba87dc0db997a10a9535ca886c81c278a" name="postgresql96" arch="src">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="25ded47378abb97e6bb7818582daf0b04fbfca5aecfccc0fbf81d3c1d9854ddf" name="postgresql96" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="63dd5956e5dd92bc8f73e002b2bd35a914817590ebacf1448664e959bbbf5fe6" name="postgresql96" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="0dfa40aba5f9b87dc044ecbe4517ab7e8f3f3468f3f682c10ab54f971d5208af" name="postgresql96-contrib" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="2a3acf08116e0d8613f008048046807ac56b4c19d4811cc9919836416d4e05d4" name="postgresql96-contrib" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="43d7559535fb54d9ff0405985e38b7960aa392cc798a25fddc253a307215f808" name="postgresql96-devel" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="a3dd013a08631cfe60c80a7c7e4fd04b5985dbeea63dc7c9f9c1abdc3c1e8570" name="postgresql96-devel" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="d978d86d217ec902ca2b55f64a3ca0568f3e31f2b8b315ad8897d7b673c41f05" name="postgresql96-docs" arch="noarch">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="558584d3465de102df922806498d2bf9c694491b50d5c5d2af541d134986ef48" name="postgresql96-docs" arch="noarch">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="20fe4364cf25b2dc8131599397d692057d7553018368291552ddff8cdd3bcf74" name="postgresql96-libs" arch="src">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="926974af35774230af4ebf8c79bde29698e5b2b9f9dbadcfed7f79eeee748f09" name="postgresql96-libs" arch="src">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="23ea300514e47b83480b8a64517a5f5a94d4ce93e93b7a0bea138bc2bbbd11fe" name="postgresql96-plperl" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="0ced388db0b4527cb18c59e74fd8689b8529d94eb32938db45f01cb97db813ab" name="postgresql96-plperl" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="f595ef65800d0bdb20f15eafe3a92346f7669be1316bb22305f5255c46653cdb" name="postgresql96-plpython" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="2bbc4fbd509f73b6bdf54224d37237a55b51c09a380b63cc23060c8bca09ebdf" name="postgresql96-plpython" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="9c20587ba448fde59ecdb99262c1b595092a7cbeb72073b318fbbaf61c5ebcdf" name="postgresql96-pltcl" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="9a898b92788d974b9306b8fcabf441c2ee3abb628efaa04465e624dc7ee25682" name="postgresql96-pltcl" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="4e840cd98207608650f158ef55cf54e3bd865844b496db903d554dd14ff62aba" name="postgresql96-server" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="2c24c083cf80c6bd9e8b463e540b18606ccc422728e230ffc345ffc01848f96b" name="postgresql96-server" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="ebed365a938c1bf2657d9cc61fa7a913fbae2166fdbd5014b76023b8247f7039" name="postgresql96-test" arch="x86_64">
    <version epoch="0" ver="9.6.4" rel="6.1"/>

<changelog author="max@suse.com" date="1437480000">- Bring PostgreSQL 9.4 to SLE12 (fate#319049).</changelog>
<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>

</package>
<package pkgid="6b106ddda87532f44d69dced0eb72e9c1f930e3dcb86856b2a29856ba9c5fe32" name="postgresql96-test" arch="x86_64">
    <version epoch="0" ver="9.6.6" rel="9.1"/>

<changelog author="max@suse.com" date="1443441600">- Move ~postgres/.bash_profile to postgresql-server to avoid a
  file conflict between the versioned server packages.</changelog>
<changelog author="max@suse.com" date="1444305600">- Make sure that plpgsql.h gets installed, because pldebugger
  needs it.</changelog>
<changelog author="max@suse.com" date="1444651200">- Security and bugfix release 9.4.5:
  * CVE-2015-5289, bsc#949670: json or jsonb input values
    constructed from arbitrary user input can crash the PostgreSQL
    server and cause a denial of service.
  * CVE-2015-5288, bsc#949669: The crypt() function included with
    the optional pgCrypto extension could be exploited to read a
    few additional bytes of memory. No working exploit for this
    issue has been developed.
- For the full release notse, see:
  http://www.postgresql.org/docs/current/static/release-9-4-5.html
- Move systemd related stuff and user creation to postgresql-init.
- Remove some obsolete %suse_version conditionals
- Adjust build time dependencies.
- Fix some more rpmlint warnings.
- Relax dependency on libpq to major version.</changelog>
<changelog author="max@suse.com" date="1455019200">- PL/Perl still needs to be linked with rpath, so that it can find
  libperl.so at runtime.
  bsc#578053, postgresql-plperl-keep-rpath.patch</changelog>
<changelog author="max@suse.com" date="1455278400">- Security and bugfix release 9.4.6:
  * *** IMPORTANT ***
    Users of version 9.4 will need to reindex any jsonb_path_ops
    indexes they have created, in order to fix a persistent issue
    with missing index entries.
  * Fix infinite loops and buffer-overrun problems in regular
    expressions (CVE-2016-0773, bsc#966436).
  * Fix regular-expression compiler to handle loops of constraint
    arcs (CVE-2007-4772).
  * Prevent certain PL/Java parameters from being set by
    non-superusers (CVE-2016-0766, bsc#966435).
  * Fix many issues in pg_dump with specific object types
  * Prevent over-eager pushdown of HAVING clauses for
    GROUPING SETS
  * Fix deparsing error with ON CONFLICT ... WHERE clauses
  * Fix tableoid errors for postgres_fdw
  * Prevent floating-point exceptions in pgbench
  * Make \det search Foreign Table names consistently
  * Fix quoting of domain constraint names in pg_dump
  * Prevent putting expanded objects into Const nodes
  * Allow compile of PL/Java on Windows
  * Fix "unresolved symbol" errors in PL/Python execution
  * Allow Python2 and Python3 to be used in the same database
  * Add support for Python 3.5 in PL/Python
  * Fix issue with subdirectory creation during initdb
  * Make pg_ctl report status correctly on Windows
  * Suppress confusing error when using pg_receivexlog with older
    servers
  * Multiple documentation corrections and additions
  * Fix erroneous hash calculations in gin_extract_jsonb_path()
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-6.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363200">- Security and bugfix release 9.4.7: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- For the full release notes, see:
  http://www.postgresql.org/docs/9.4/static/release-9-4-7.html</changelog>
<changelog author="mrueckert@suse.de" date="1462363201">- Security and bugfix release 9.5.2: (bnc# 978456)
  This release closes security hole CVE-2016-2193, where a query
  plan might get reused for more than one ROLE in the same session.
  This could cause the wrong set of Row Level Security (RLS)
  policies to be used for the query.
  The update also fixes CVE-2016-3065, a server crash bug triggered
  by using pageinspect with BRIN index pages. Since an attacker
  might be able to expose a few bytes of server memory, this crash
  is being treated as a security issue.
  - Fix two bugs in indexed ROW() comparisons
  - Avoid data loss due to renaming files
  - Prevent an error in rechecking rows in SELECT FOR UPDATE/SHARE
  - Fix bugs in multiple json_ and jsonb_ functions
  - Log lock waits for INSERT ON CONFLICT correctly
  - Ignore recovery_min_apply_delay until reaching a consistent
    state
  - Fix issue with pg_subtrans XID wraparound
  - Fix assorted bugs in Logical Decoding
  - Fix planner error with nested security barrier views
  - Prevent memory leak in GIN indexes
  - Fix two issues with ispell dictionaries
  - Avoid a crash on old Windows versions
  - Skip creating an erroneous delete script in pg_upgrade
  - Correctly translate empty arrays into PL/Perl
  - Make PL/Python cope with identifier names
- changes from 9.5.1 (bnc# 966435 bnc# 966436 bnc# 978323)
  This release closes security hole CVE-2016-0773, an issue with
  regular expression (regex) parsing. Prior code allowed users to
  pass in expressions which included out-of-range Unicode
  characters, triggering a backend crash. This issue is critical
  for PostgreSQL systems with untrusted users or which generate
  regexes based on user input.
  The update also fixes CVE-2016-0766, a privilege escalation issue
  for users of PL/Java. Certain custom configuration settings
  (GUCS) for PL/Java will now be modifiable only by the database
  superuser.
  In addition to the above, many other issues were patched in this
  release based on bugs reported by our users over the last few
  months. This includes multiple fixes for new features introduced
  in version 9.5.0, as well as refactoring of pg_dump to eliminate
  a number of chronic issues with backing up EXTENSIONs. Among them
  are:
  - Fix many issues in pg_dump with specific object types
  - Prevent over-eager pushdown of HAVING clauses for GROUPING SETS
  - Fix deparsing error with ON CONFLICT ... WHERE clauses
  - Fix tableoid errors for postgres_fdw
  - Prevent floating-point exceptions in pgbench
  - Make \det search Foreign Table names consistently
  - Fix quoting of domain constraint names in pg_dump
  - Prevent putting expanded objects into Const nodes
  - Allow compile of PL/Java on Windows
  - Fix "unresolved symbol" errors in PL/Python execution
  - Allow Python2 and Python3 to be used in the same database
  - Add support for Python 3.5 in PL/Python
  - Fix issue with subdirectory creation during initdb
  - Make pg_ctl report status correctly on Windows
  - Suppress confusing error when using pg_receivexlog with older
    servers
  - Multiple documentation corrections and additions
  - Fix erroneous hash calculations in gin_extract_jsonb_path()
  - This update also contains tzdata release 2016a, with updates
    for Cayman Islands, Metlakatla, Trans-Baikal Territory
    (Zabaykalsky Krai), and Pakistan.
- changes from 9.5.0
  A most-requested feature by application developers for several
  years, "UPSERT" is shorthand for "INSERT, ON CONFLICT UPDATE",
  allowing new and updated rows to be treated the same. UPSERT
  simplifies web and mobile application development by enabling the
  database to handle conflicts between concurrent data changes.
  This feature also removes the last significant barrier to
  migrating legacy MySQL applications to PostgreSQL.
  Developed over the last two years by Heroku programmer Peter
  Geoghegan, PostgreSQL's implementation of UPSERT is significantly
  more flexible and powerful than those offered by other relational
  databases. The new ON CONFLICT clause permits ignoring the new
  data, or updating different columns or relations in ways which
  will support complex ETL (Extract, Transform, Load) toolchains
  for bulk data loading. And, like all of PostgreSQL, it is
  designed to be absolutely concurrency-safe and to integrate
  with all other PostgreSQL features, including Logical
  Replication.
  PostgreSQL continues to expand database security capabilities
  with its new Row Level Security (RLS) feature. RLS implements
  true per-row and per-column data access control which integrates
  with external label-based security stacks such as SE Linux.
  PostgreSQL is already known as "the most secure by default." RLS
  cements its position as the best choice for applications with
  strong data security requirements, such as compliance with PCI,
  the European Data Protection Directive, and healthcare data
  protection standards.
  RLS is the culmination of five years of security features added
  to PostgreSQL, including extensive work by KaiGai Kohei of NEC,
  Stephen Frost of Crunchy Data, and Dean Rasheed. Through it,
  database administrators can set security "policies" which filter
  which rows particular users are allowed to update or view. Data
  security implemented this way is resistant to SQL injection
  exploits and other application-level security holes.
  PostgreSQL 9.5 includes multiple new features for bigger
  databases, and for integrating with other Big Data systems. These
  features ensure that PostgreSQL continues to have a strong role
  in the rapidly growing open source Big Data marketplace. Among
  them are:
  BRIN Indexing: This new type of index supports creating tiny, but
  effective indexes for very large, "naturally ordered" tables. For
  example, tables containing logging data with billions of rows
  could be indexed and searched in 5% of the time required by
  standard BTree indexes.
  Faster Sorts: PostgreSQL now sorts text and NUMERIC data faster,
  using an algorithm called "abbreviated keys". This makes some
  queries which need to sort large amounts of data 2X to 12X
  faster, and can speed up index creation by 20X.
  CUBE, ROLLUP and GROUPING SETS: These new standard SQL clauses
  let users produce reports with multiple levels of summarization
  in one query instead of requiring several. CUBE will also enable
  tightly integrating PostgreSQL with more Online Analytic
  Processing (OLAP) reporting tools such as Tableau.
  Foreign Data Wrappers (FDWs): These already allow using
  PostgreSQL as a query engine for other Big Data systems such as
  Hadoop and Cassandra. Version 9.5 adds IMPORT FOREIGN SCHEMA and
  JOIN pushdown making query connections to external databases both
  easier to set up and more efficient.
  TABLESAMPLE: This SQL clause allows grabbing a quick statistical
  sample of huge tables, without the need for expensive sorting.
  "The new BRIN index in PostgreSQL 9.5 is a powerful new feature
  which enables PostgreSQL to manage and index volumes of data that
  were impractical or impossible in the past. It allows scalability
  of data and performance beyond what was considered previously
  attainable with traditional relational databases and makes
  PostgreSQL a perfect solution for Big Data analytics," said Boyan
  Botev, Lead Database Administrator, Premier, Inc.
  http://www.postgresql.org/about/news/1636/
- For the full release notes, see:
  http://www.postgresql.org/docs/9.5/static/release-9-5.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-1.html
  http://www.postgresql.org/docs/9.5/static/release-9-5-2.html
- refreshed patches to match new release
  postgresql-conf.patch
  postgresql-plperl-keep-rpath.patch
  postgresql-regress.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- drop postgresql-testsuite-seclabel-location.patch:
  the dummy seclabel test is gone</changelog>
<changelog author="mrueckert@suse.de" date="1463054400">- update to 9.6beta1
  - Major Features of 9.6
    Version 9.6 includes significant changes and exciting
    enhancements including:
  - Parallel sequential scans, joins and aggregates
  - Support for consistent, read-scaling clusters through
    multiple synchronous standbys and "remote_apply" synchronous
    commit.
  - Full text search for phrases
  - postgres_fdw can now execute sorts, joins, UPDATEs and
    DELETEs on the remote server
  - Decreased autovacuum impact on big tables by avoiding
    "refreezing" old data.
  - In particular, parallel execution should bring a noticeable
    increase in performance to supported queries.
  - Help Test for Bugs
    As with other major releases, the improvements in PostgreSQL
    include changes to large amounts of code. We count on you to
    test the altered version with your workloads and testing tools
    in order to find bugs and regressions before the release of
    PostgreSQL 9.6.0. In addition to testing that the new features
    work as documented, consider testing the following:
  - Do parallel queries actually improve performance for you?
  - Can you make parallel queries crash or lose data?
  - Do our code changes cause PostgreSQL to not function on your
    platform?
  - Does improved vacuum freezing safely reduce autovacuum of
    large tables?
  - Does phrase search return the results you expect?
    Version 9.6 Beta 1 also makes changes to the binary backup API.
    Administrators should test version 9.6 with PostgreSQL backup
    tools, including pgBackRest, Barman, WAL-E, and other packaged
    and in-house software.
    As this is a Beta, minor changes to database behaviors, feature
    details, and APIs are still possible. Your feedback and testing
    will help determine the final tweaks on the new features, so
    test soon. The quality of user testing helps determine when we
    can make a final release.
  http://www.postgresql.org/about/news/1668/
  http://www.postgresql.org/docs/devel/static/release-9-6.html
- refreshed patches to apply cleanly again:
  postgresql-plperl-keep-rpath.patch
  postgresql-testsuite-int8.sql.patch
  postgresql-testsuite-keep-results-file.patch
  postgresql-var-run-socket.patch
- regress part is disabled atm as it causes a buildfailure
- also remove static libraries in pglibdir. This release introduced
  a new file there called pgfeutils.a</changelog>
<changelog author="mrueckert@suse.de" date="1466769600">- update to 9.6beta2
  Our users and contributors reported bugs against 9.6 beta 1, and
  some of them have been fixed in this release. This includes
  multiple fixes for failure and performance issues in parallel
  query. We urge our community to re-test to ensure that these bugs
  are actually fixed, including:
  - update most contrib extensions for parallel query
  - two fixes for pg_trgm (trigram) bugs
  - rewrite code to estimate join sizes for better performance
  - correct handling of argument and result datatypes for partial
    aggregation
  - fix lazy_scan_heap so that it won't mark pages all-frozen too
    soon
  - mark additional functions as parallel-unsafe
  - check PlaceHolderVars before pushing down a join in
    postgres_fdw
  - improve the situation for parallel query versus temp relations
  - don't generate parallel paths for rels with parallel-restricted
    outputs
  - make psql_crosstab plans more stable
  - finish loose ends for SQL ACCESS METHOD objects, including
    pg_dump
  - stop the executor if no more tuples can be sent from worker to
    leader
  - several pg_upgrade fixes to support new features
  - fix regression tests for phrase search
  - add new snapshot fields to serialize/deserialize functions
  - measure Bloom index signature-length reloption in bits, not
    words
  - many improvements to parallel regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Additionally, we've made some user-visible changes to parameters
  and functions. These may cause dump/restore between beta 1 and
  beta 2 to generate errors. This includes:
  - rename max_parallel_degree to max_parallel_workers_per_gather
  - add integrity-checking functions to pg_visibility
  - add VACUUM (DISABLE_PAGE_SKIPPING) for emergencies
  - add pg_truncate_visibility_map function
  - add min_parallel_relation_size GUC
  - change default of backend_flush_after GUC to 0 (disabled)
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1470744000">- update to 9.6beta3
  - This included many more fixes to parallel query:
  - adding support for TABLESAMPLE
  - correcting cost data in Gather nodes
  - check parallel-safety of all appended relations
  - fix planner issues with initPlans
  - fix several issues with client_encoding
  - clean up EXPLAIN output for parallel queries
  - multiple changes to parallel aggregation internals
  - Among the other issues addressed were:
  - add conninfo field to pg_stat_wal_receiver
  - clear all-frozen visibilitymap status when locking tuples
  - correctly dump database and tablespace ACLs
  - avoid invalidating all foreign-join cached plans when user
    mappings change
  - fix nested NOT operation cleanup in tsquery
  - allow IMPORT FOREIGN SCHEMA within pl/pgsql
  - print a given subplan only once in EXPLAIN
  - change the GetForeignUpperPaths API
  - fix several issues in postgres_fdw
  - added many additional regression tests
  - many documentation updates and clarifications
  - multiple translation updates for the docs
  Due to changes in system catalogs, a pg_upgrade or dump and restore
  will be required for users migrating databases from earlier betas.
  This includes a version update to the pg_control tool, making it
  incompatible with PostgreSQL 9.4 and earlier. This beta also
  includes patches to many issues shared with earlier versions, which
  will be updated in an upcoming minor release.
  Note that some known issues remain unfixed. Before reporting a bug
  in the beta, please check the Open Items page.</changelog>
<changelog author="fweiss@suse.com" date="1471003200">- Update to 9.6beta4:
    9.6 Beta 4 includes the security fixes in the 2016-08-11
    Security Update, as well as the general bug fixes offered for
    stable versions. Additionally, it contains fixes for the
    following beta issues reported since the last beta:
  * Change minimum max_worker_processes from 1 to 0
  * Make array_to_tsvector() sort and de-duplicate the given
    strings
  * Fix ts_delete(tsvector, text[]) to cope with duplicate array
    entries
  * Fix hard to hit race condition in heapam's tuple locking code
  * Prevent "snapshot too old" from trying to return pruned TOAST
    tuples
  * Make INSERT-from-multiple-VALUES-rows handle targetlist
    indirection
  * Do not let PostmasterContext survive into background workers
  * Add missing casts in information schema
  * Fix assorted problems in recovery tests
  * Block interrupts during HandleParallelMessages()
  * Remove unused arguments from pg_replication_origin_xact_reset
    function
  * Correctly handle owned sequences with extensions
  * Many fixes for tsqueue.c
  * Eliminate a few more user-visible "cache lookup failed"
    errors
  * Teach parser to transform "x IS [NOT] DISTINCT FROM NULL" to
    a NullTest
  * Allow functions that return sets of tuples to return simple
    NULLs
  * Repair damage done by citext--1.1--1.2.sql
  * Correctly set up aggregate FILTER expression in
    partial-aggregation plans
    This beta also includes many documentation updates and
    improvements.
    Due to changes in system catalogs, a pg_upgrade or pg_dump and
    restore will be required for users migrating databases from
    earlier betas.
    Note that some known issues remain unfixed. Before reporting a
    bug in the beta, please check the Open Items page.</changelog>
<changelog author="mrueckert@suse.de" date="1475409600">- update to 9.6.0 final
  For all the details see:
  https://www.postgresql.org/about/news/1703/
  https://wiki.postgresql.org/wiki/NewIn96
  https://www.postgresql.org/docs/current/static/release-9-6.html</changelog>
<changelog author="max@suse.com" date="1476100800">- Build the libs in 9.6 rather then 9.5.</changelog>
<changelog author="13ilya@gmail.com" date="1477828800">- update to 9.6.1
  This release contains a variety of fixes from 9.6.0.
  For information about new features in the 9.6 major release.
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-1.html</changelog>
<changelog author="mrueckert@suse.de" date="1486641600">- upate to 9.6.2
  - Build corruption with CREATE INDEX CONCURRENTLY
  - Fixes for visibility and write-ahead-log stability
  For the full release notes, see:
  https://www.postgresql.org/docs/9.6/static/release-9-6-2.html</changelog>
<changelog author="astieger@suse.com" date="1489579200">- fix tests with timezone 2017a
  postgresql-9.6.2-fix-timezone-tests.patch</changelog>
<changelog author="max@suse.com" date="1494504000">- Update to version 9.6.3:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-3.html
  * CVE-2017-7486, bsc#1037624: Restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
    !!! Manual action is needed to fix this in existing databases
    !!! See upstream release notes for details.
  * CVE-2017-7485, bsc#1038293: recognize PGREQUIRESSL variable
    again.
  * CVE-2017-7484, bsc#1037603: Prevent exposure of statistical
    information via leaky operators.
  * Obsoletes postgresql-9.6.2-fix-timezone-tests.patch
- Added "Requires: timezone" to Server Package (bsc#973660)
- Submit postgresql96 to SLE-12 (bsc#1038474, fate#321481).</changelog>
<changelog author="dimstar@opensuse.org" date="1495022400">- Replace krb5-devel BuildRequires with pkgconfig(krb5): allow OBS
  to deliver krb5-mini when applicable.</changelog>
<changelog author="max@suse.com" date="1502193600">- Update to version 9.6.4:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-4.html
  * CVE-2017-7547, bsc#1051685: Further restrict visibility of
    pg_user_mappings.umoptions, to protect passwords stored as
    user mapping options.
  * CVE-2017-7546, bsc#1051684: Disallow empty passwords in all
    password-based authentication methods.
  * CVE-2017-7548, bsc#1053259: lo_put() function ignores ACLs.</changelog>
<changelog author="max@suse.com" date="1513080000">- Update to version 9.6.6:
  * https://www.postgresql.org/docs/9.6/static/release-9-6-6.html
  * https://www.postgresql.org/docs/9.6/static/release-9-6-5.html
  * CVE-2017-15098, bsc#1067844: Fix crash due to rowtype mismatch
    in json{b}_populate_recordset()
  * CVE-2017-15099, bsc#1067841:Ensure that INSERT ... ON CONFLICT
    DO UPDATE checks table permissions and RLS policies in all
    cases.</changelog>

</package>
<package pkgid="2b1fda44c678146a2cecbf86e7c231d9734c371542e93067fa8857624cdcb965" name="potrace" arch="src">
    <version epoch="0" ver="1.15" rel="13.1"/>

<changelog author="sbrabec@suse.cz" date="1075982400">- Added speed optimization patch from author.</changelog>
<changelog author="sbrabec@suse.cz" date="1078747200">- Updated to version 1.4.</changelog>
<changelog author="sbrabec@suse.cz" date="1093608000">- Updated to version 1.5 (with LZW support).</changelog>
<changelog author="sbrabec@suse.cz" date="1105012800">- Provide bitmap_tracing virtual.</changelog>
<changelog author="sbrabec@suse.cz" date="1109592000">- Updated to version 1.6.</changelog>
<changelog author="nadvornik@suse.cz" date="1110369600">- Updated to version 1.7:
  * A bug in the progress bar code, which caused arithmetic
    exceptions on some 64-bit architectures, has been fixed.</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="pnemec@suse.cz" date="1153310400">- fixed wrong memory allocation in potracelib.c
  (added potrace-wrong_allocation.patch)</changelog>
<changelog author="jw@suse.de" date="1163592000">- replaced wrong_allocation.patch by official
  io.patch -- more bugs fixed.</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Update to version 1.14:
  * Bugs triggered by malformed BMP files have been fixed,
    including CVE-2016-8685 (bsc#1005026) and CVE-2016-8686.
  * Error reporting has been improved.
  * The image size is now truncated when the bitmap data ends
    prematurely.
  * It is now possible to use negative dy in bitmap data.</changelog>
<changelog author="sbrabec@suse.com" date="1502107200">- Update to version 1.15:
  * Fix potential buffer overflows and arithmetic overflows
    (bsc#1051634, CVE-2017-12067).
  * Fix bug triggered by very large bitmaps.
  * Other bugfixes.</changelog>

</package>
<package pkgid="9d984d12b3a79530d463358ecc173eb1b71d8630bad3143890024930536645c5" name="potrace" arch="x86_64">
    <version epoch="0" ver="1.15" rel="13.1"/>

<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Update to version 1.14:
  * Bugs triggered by malformed BMP files have been fixed,
    including CVE-2016-8685 (bsc#1005026) and CVE-2016-8686.
  * Error reporting has been improved.
  * The image size is now truncated when the bitmap data ends
    prematurely.
  * It is now possible to use negative dy in bitmap data.</changelog>
<changelog author="sbrabec@suse.com" date="1502107200">- Update to version 1.15:
  * Fix potential buffer overflows and arithmetic overflows
    (bsc#1051634, CVE-2017-12067).
  * Fix bug triggered by very large bitmaps.
  * Other bugfixes.</changelog>

</package>
<package pkgid="6b7bb194020581de7e3ab79242f6bd6d1f905794f361d02ba03429dd930b4d1f" name="potrace-devel" arch="x86_64">
    <version epoch="0" ver="1.15" rel="13.1"/>

<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Update to version 1.14:
  * Bugs triggered by malformed BMP files have been fixed,
    including CVE-2016-8685 (bsc#1005026) and CVE-2016-8686.
  * Error reporting has been improved.
  * The image size is now truncated when the bitmap data ends
    prematurely.
  * It is now possible to use negative dy in bitmap data.</changelog>
<changelog author="sbrabec@suse.com" date="1502107200">- Update to version 1.15:
  * Fix potential buffer overflows and arithmetic overflows
    (bsc#1051634, CVE-2017-12067).
  * Fix bug triggered by very large bitmaps.
  * Other bugfixes.</changelog>

</package>
<package pkgid="c3b1e78ba22d2b702147dfa5ffccf1f78f9721539b2893bbf6ec1df3987b07c1" name="primus" arch="src">
    <version epoch="0" ver="20150328.d1afbf6" rel="11.1"/>

<changelog author="arnaldo.coelho@gmail.com" date="1354190400">- first package version</changelog>
<changelog author="tchvatal@suse.com" date="1389700800">- Cleanup the package up to the openSUSE requirements.</changelog>
<changelog author="tchvatal@suse.com" date="1389700801">- Needs fixing of the tarball fetching and update of license.</changelog>
<changelog author="cfarrell@suse.com" date="1403697600">- license update: HPND
  See LICENSE.txt
- Install the license file.</changelog>
<changelog author="tchvatal@suse.com" date="1403697601">- Add baselibs.conf to filelist.</changelog>
<changelog author="tchvatal@suse.com" date="1404216000">- Install the license and readme files properly.
- Respect optflags.</changelog>
<changelog author="schwab@linux-m68k.org" date="1405080000">- type-directive.patch: Use % in .type directive since @ is a comment
  character on arm</changelog>
<changelog author="tchvatal@suse.com" date="1472212800">- Update to version 20150328.d1afbf6 bsc#1051277:
  * Fix compilation on arm
  * pass any preprocessor flags defined by environment to gcc
  * Reuse initial ddpy if XOpenDisplay fails in display thread
  * Avoid using primus.ddpy in match_fbconfig
  * Avoid using primus.ddpy in match_visual (GH-132)
  * Remove some of the remaining uses of primus.ddpy
  * Defer glXChooseFBConfig from library constructor to first use (GH-151)
  * Revert back to using compiler support for ifuncs (GH-153)
  * Do not try to reuse ddpy fbconfig (fixes GH-160)
  * Fix connect() error detection (GH-163)
- Drop merged patch type-directive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1507118400">- Try to set the path to gl libraries as needed wrt bsc#995570</changelog>
<changelog author="Mathias.Homann@opensuse.org" date="1507291200">- Add patch to work with our nvidia laout bsc#1061561:
  * primusrun-bsc1061561.diff</changelog>

</package>
<package pkgid="860a3263c605b1179a7d413eec8ffb8a8214e3e47640db248b3f4141acdc8905" name="primus" arch="x86_64">
    <version epoch="0" ver="20150328.d1afbf6" rel="11.1"/>

<changelog author="arnaldo.coelho@gmail.com" date="1354190400">- first package version</changelog>
<changelog author="tchvatal@suse.com" date="1389700800">- Cleanup the package up to the openSUSE requirements.</changelog>
<changelog author="tchvatal@suse.com" date="1389700801">- Needs fixing of the tarball fetching and update of license.</changelog>
<changelog author="cfarrell@suse.com" date="1403697600">- license update: HPND
  See LICENSE.txt
- Install the license file.</changelog>
<changelog author="tchvatal@suse.com" date="1403697601">- Add baselibs.conf to filelist.</changelog>
<changelog author="tchvatal@suse.com" date="1404216000">- Install the license and readme files properly.
- Respect optflags.</changelog>
<changelog author="schwab@linux-m68k.org" date="1405080000">- type-directive.patch: Use % in .type directive since @ is a comment
  character on arm</changelog>
<changelog author="tchvatal@suse.com" date="1472212800">- Update to version 20150328.d1afbf6 bsc#1051277:
  * Fix compilation on arm
  * pass any preprocessor flags defined by environment to gcc
  * Reuse initial ddpy if XOpenDisplay fails in display thread
  * Avoid using primus.ddpy in match_fbconfig
  * Avoid using primus.ddpy in match_visual (GH-132)
  * Remove some of the remaining uses of primus.ddpy
  * Defer glXChooseFBConfig from library constructor to first use (GH-151)
  * Revert back to using compiler support for ifuncs (GH-153)
  * Do not try to reuse ddpy fbconfig (fixes GH-160)
  * Fix connect() error detection (GH-163)
- Drop merged patch type-directive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1507118400">- Try to set the path to gl libraries as needed wrt bsc#995570</changelog>
<changelog author="Mathias.Homann@opensuse.org" date="1507291200">- Add patch to work with our nvidia laout bsc#1061561:
  * primusrun-bsc1061561.diff</changelog>

</package>
<package pkgid="6ee1bf5b19d0cde29e2415fdc6b0619968b65e3d24de47a2d85f6837650d1014" name="primus-32bit" arch="x86_64">
    <version epoch="0" ver="20150328.d1afbf6" rel="11.1"/>

<changelog author="arnaldo.coelho@gmail.com" date="1354190400">- first package version</changelog>
<changelog author="tchvatal@suse.com" date="1389700800">- Cleanup the package up to the openSUSE requirements.</changelog>
<changelog author="tchvatal@suse.com" date="1389700801">- Needs fixing of the tarball fetching and update of license.</changelog>
<changelog author="cfarrell@suse.com" date="1403697600">- license update: HPND
  See LICENSE.txt
- Install the license file.</changelog>
<changelog author="tchvatal@suse.com" date="1403697601">- Add baselibs.conf to filelist.</changelog>
<changelog author="tchvatal@suse.com" date="1404216000">- Install the license and readme files properly.
- Respect optflags.</changelog>
<changelog author="schwab@linux-m68k.org" date="1405080000">- type-directive.patch: Use % in .type directive since @ is a comment
  character on arm</changelog>
<changelog author="tchvatal@suse.com" date="1472212800">- Update to version 20150328.d1afbf6 bsc#1051277:
  * Fix compilation on arm
  * pass any preprocessor flags defined by environment to gcc
  * Reuse initial ddpy if XOpenDisplay fails in display thread
  * Avoid using primus.ddpy in match_fbconfig
  * Avoid using primus.ddpy in match_visual (GH-132)
  * Remove some of the remaining uses of primus.ddpy
  * Defer glXChooseFBConfig from library constructor to first use (GH-151)
  * Revert back to using compiler support for ifuncs (GH-153)
  * Do not try to reuse ddpy fbconfig (fixes GH-160)
  * Fix connect() error detection (GH-163)
- Drop merged patch type-directive.patch</changelog>
<changelog author="tchvatal@suse.com" date="1507118400">- Try to set the path to gl libraries as needed wrt bsc#995570</changelog>
<changelog author="Mathias.Homann@opensuse.org" date="1507291200">- Add patch to work with our nvidia laout bsc#1061561:
  * primusrun-bsc1061561.diff</changelog>

</package>
<package pkgid="6c5c19fdf22debe6e82840027aac1040f469bd410a318c31ca28f12c9d46a0f5" name="procps" arch="src">
    <version epoch="0" ver="3.3.9" rel="14.1"/>

<changelog author="werner@suse.de" date="1372248000">- Add tow upstream patches
  0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch</changelog>
<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>

</package>
<package pkgid="20990b08743b9d3a09cd040cf73280fbc9f4e89a4ac48453bb210ff676b83e78" name="procps" arch="src">
    <version epoch="0" ver="3.3.9" rel="17.1"/>

<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
<changelog author="jcejka@suse.de" date="1502712000">- Don't set buffering on invalid file descriptor (bsc#1053409)
  procps-ng-3.3.9-sysctl-iobuf-fd.patch</changelog>

</package>
<package pkgid="01a4998f5a56f65ba3237569822044ac91a30d961e87711b4298707bb8389f33" name="procps" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="14.1"/>

<changelog author="werner@suse.de" date="1372248000">- Add tow upstream patches
  0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch</changelog>
<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>

</package>
<package pkgid="95129a8595e0f7a8e0899da6d0d3b8c85d20f10e10de6898a9c7c4c32c72e2d3" name="procps" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="17.1"/>

<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
<changelog author="jcejka@suse.de" date="1502712000">- Don't set buffering on invalid file descriptor (bsc#1053409)
  procps-ng-3.3.9-sysctl-iobuf-fd.patch</changelog>

</package>
<package pkgid="60ad170f54baef5772c7f13663ad2ded5051596329cabe994154058c1fa03a30" name="procps-devel" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="14.1"/>

<changelog author="werner@suse.de" date="1372248000">- Add tow upstream patches
  0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch</changelog>
<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>

</package>
<package pkgid="234fe81858048304b47cd3660da0b2d145bf7ff5222d0fc04cd13cdfde45b19a" name="procps-devel" arch="x86_64">
    <version epoch="0" ver="3.3.9" rel="17.1"/>

<changelog author="werner@suse.de" date="1374753600">- Add three upstream patches
  0001-top-enable-screen-contents-preservation-at-endofjob.patch
  0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0002-top-cursor-repositioning-includes-line-oriented-inpu.patch</changelog>
<changelog author="werner@suse.de" date="1375444800">- Add patch procps-ng-3.3.8-vmstat-terabyte.dif to readd last
  trifle rest of the old terabyte patch (is this really required?)</changelog>
<changelog author="werner@suse.de" date="1377864000">- Add patch procps-ng-3.3.8-shmem.patch to show shared memory in
  'free' again
- Add patch procps-ng-3.3.8-libselinux.patch to be able to enable
  selinux</changelog>
<changelog author="werner@suse.de" date="1380542400">- Enable legacy pmap
- Fix crash of legacy pmap (bnc#842340)</changelog>
<changelog author="werner@suse.de" date="1381147200">- Be aware of new VmFlags entry in /proc/&lt;pid&gt;/smaps</changelog>
<changelog author="werner@suse.de" date="1387281600">- Change patch procps-ng-3.3.8-accuracy.dif to really use finally
  jiffies to calculate %CPU output (bnc#855861)</changelog>
<changelog author="tiwai@suse.de" date="1395748800">- Ignore scan_unevictable_pages sysctl entry (bnc#868888)
  procps-ng-3.3.8-ignore-scan_unevictable_pages.patch</changelog>
<changelog author="werner@suse.de" date="1400155200">- Fix missing job in D states in idle mode of top, therefore
  update to latest top of procps-ng git HEAD
  * Rename the patches
    0001-top-enable-screen-contents-preservation-at-endofjob.patch
    0001-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0001-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0002-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0002-top-cursor-repositioning-includes-line-oriented-inpu.patch
    to
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  * Add upstream patches
    0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
    0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
    0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
    0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
    0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
    0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
    0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
    0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
    0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
    0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
    0013-top-modest-efficiency-change-to-message-line-handlin.patch
    0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
    0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
    0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
    0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
    0021-top-address-some-potential-libnuma-display-corruptio.patch
    0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
    0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
    0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
    0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
    0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
    0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
    0033-top-follow-usual-name-conventions-for-global-variabl.patch
    0035-top-provide-for-discontinuous-not-active-NUMA-nodes.patch
    0036-top-restore-the-former-behavior-after-stderr-redirec.patch
    0037-top-avoid-name-conflict-in-the-next-version-of-stdli.patch
    0038-top-protect-against-distortion-when-system-time-rese.patch
    0044-top-avoid-a-nan-when-the-delay-interval-is-very-low.patch
    0045-top-standardize-Esc-key-support-with-prompted-input.patch
    0046-top-miscellaneous-accumulated-changes-to-program-cod.patch
  * Modify patches
    0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
    procps-ng-3.3.8-libselinux.patch</changelog>
<changelog author="werner@suse.de" date="1400241600">- Update to procps-ng-3.3.9
  * kernel namespaces support added to skill, pgrep, ps and top
  * pidof was reimplemented from scratch (replacing sysvinit pidof)
  * ps has configurable libselinux support (--enable-libselinux)
  * ps provides for display of systemd slice unit (--with-systemd)
  * free can once again report non-zero 'shared' memory
  * sysctl provides '--system' to ignore missing /etc/sysctl.conf
  * watch interval capacity was increased - debian #720445
  * pwdx no longer fails in a nonexistent locale - debian #718766
  * top clarified summary area Mem/Swap stats - debian #718670
  * top batch mode -w (width) abend fixed - debian #721204
  * top man page removed 'Bd/Ed' mdoc macros - debian #725713
  * top no longer clears screen at exit - redhat #977561
  * top adapted to potential libnuma stderr message - redhat #998678
  * top added missing batch mode newline - redhat #1008674
- Modify patches
  procps-ng-3.3.8-watch.patch becomes procps-ng-3.3.9-watch.patch
  procps-v3.3.4-w-notruncate.diff becomes procps-ng-3.3.9-w-notruncate.diff
  procps-ng-3.3.8-top.1.diff
  procps-ng-3.3.8-top.1.diff
  procps-v3.3.4-large_pcpu.patch
  procps-ng-3.3.8-bnc634071_procstat2.diff
- Remove patches now upstream
  procps-v3.3.4-stealtime.patch is upstream
  procps-ng-3.3.8-libselinux.patch
  procps-ng-3.3.8-shmem.patch
  0001-top-add-the-major-version-to-dlopen-of-libnuma-sonam.patch
  0002-top-trade-two-groff_mdoc-macros-for-groff-equivalent.patch
  0003-library-for-atexit-support-fix-fileutils-for-EPIPE.patch
  0004-top-enable-screen-contents-preservation-at-end-of-jo.patch
  0005-top-refine-some-miscellaneous-signals-interrupt-stuf.patch
  0006-top-cursor-repositioning-includes-line-oriented-inpu.patch
  0007-top-correct-improve-or-otherwise-tweak-some-comments.patch
  0008-top-tweak-cursor-state-code-to-swat-an-obscure-bugle.patch
  0009-top-correct-cursor-positioning-for-all-Z-or-C-cases.patch
  0010-ps-address-a-potential-newline-quirk-the-libselinux.patch
  0012-top-hint-that-Summary-Area-cached-is-Mem-not-Swap.patch
  0013-top-modest-efficiency-change-to-message-line-handlin.patch
  0014-top-correct-improve-and-otherwise-tweak-configs_read.patch
  0015-top-swat-bug-affecting-batch-mode-and-width-provisio.patch
  0018-top-restore-the-lost-final-newline-when-in-Batch-mod.patch
  0019-top-swat-bug-impacting-idle-mode-user-filtering.patch
  0021-top-address-some-potential-libnuma-display-corruptio.patch
  0022-top-fix-miscellaneous-spelling-errors-in-man-documen.patch
  0023-top-expand-on-column-highlight-quirks-in-man-documen.patch
  0024-top-add-some-flexibility-to-dlopen-for-numa-support.patch
  0025-top-minimize-the-statistics-overhead-for-numa-suppor.patch
  0026-top-eliminate-yet-more-gcc-subscript-resolution-bloa.patch
  0032-top-do-not-lie-about-purported-alphabetical-ordering.patch
  0033-top-follow-usual-name-conventions-for-global-variabl.patch
- Add patches from upstream
  0023-top-do-not-forget-the-fscanf-s-terminating-null-byte.patch
  0024-sysctl-system-loads-default-config-file.patch
  0025-Split-help-lines-to-help-translators.patch
  0026-library-fixing-uninitialized-variable-pos-in-whattim.patch
  0027-pgrep-Fixing-memory-leak-in-do_regcomp.patch
  0028-sysctl-Fixing-memory-leaks-in-PreloadSystem.patch
  0029-ps-ignore-SIGCONT.patch
  0031-vmstat-wide-output-still-not-wide-enough.patch
  0032-library-skip-replacement-of-trailing-0-in-read_unvec.patch
  0033-kill-for-PID-1-restored.patch
  0034-Check-for-presence-of-disks-in-vmstat.patch
  0035-PID-2-to-9-for-kill-too.patch
  0036-pgrep-fails-to-show-full-command-line-with-au.patch
  0037-fail-on-null-string-for-arguments.patch
  0038-Update-help-files.patch
  0039-vmstat-Support-for-timestamps-with-t-fix-for-wd.patch
  0040-watch-Don-t-leak-extra-fds-to-the-child.patch
  0041-vmstat-Fixing-format-security-flaws.patch
  0043-Added-get-trans-target-to-Makefile.patch
  0045-library-properly-handle-memory-used-by-tmpfs.patch
  0046-Minor-i18n-fixes.patch
  0047-sysctl-increase-max-supported-line-length-of-the-con.patch
  0049-fix-url-for-rsync.patch
  0051-top-update-copyright-dates-plus-1-preprocessor-chang.patch
  0052-top-refactor-man-document-so-as-to-allow-translation.patch
  0053-top-minimize-the-usage-of-apostrophes-in-man-documen.patch
  0054-top-swap-opening-quotes-for-back-tics-in-man-documen.patch
  0055-misc-fix-man-doc-spelling-and-grammar-for-translatio.patch
  0058-library-reverting-tmpfs-subtraction-from-cached-18-F.patch
  0060-top-miscellaneous-accumulated-changes-to-man-documen.patch</changelog>
<changelog author="werner@suse.de" date="1400673600">- Require the systemd libraries for build to allow the move
  of systemd.pc back to systemd</changelog>
<changelog author="werner@suse.de" date="1403784000">- Remove patches
  procps-v3.3.3-chroot.diff
  procps-v3.3.5-top-locale.patch
  as already included in upstream code (bnc#884502)</changelog>
<changelog author="jengelh@inai.de" date="1410436800">- Correct package name in descriptions: procps, not props</changelog>
<changelog author="werner@suse.de" date="1417780800">- Add patch procps-ng-3.3.9-errno.patch to avoid leftover errno
  from setlocale() (bsc#908516)</changelog>
<changelog author="werner@suse.de" date="1418731200">- Add upstream patch bsc901202-add-better-help-output.patch
  which includes the commits
  0f649e2cd2eef94075f1975248953f8c5b85d9f4
  4ba9ff5c0df7e94d03a555ac4cec947f6fac2ba6
  b4951bfea367eef551b053e9f0240d717c353c11
  to fix the bug bsc#901202</changelog>
<changelog author="werner@suse.de" date="1464177600">- Let legacy pmap survive newer kernel 4.4 (bsc#981616)</changelog>
<changelog author="lnussel@suse.de" date="1492603200">- make pmap handle LazyFree in /proc/smaps (pmap-lazyfree.diff,
  bsc#1034563)</changelog>
<changelog author="werner@suse.de" date="1493208000">- Update patch procps-ng-3.3.9-w-notruncate.diff to fix bug bsc#1030621
  Command w with option -n doesn't work (invalid option)</changelog>
<changelog author="werner@suse.de" date="1495454400">- Add patch procps-ng-3.3.9-sysctl-a.patch (bsc#1039941)
  that is allow content lines below /proc/sys longer than 1024 characters</changelog>
<changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.9-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.9-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
<changelog author="jcejka@suse.de" date="1502712000">- Don't set buffering on invalid file descriptor (bsc#1053409)
  procps-ng-3.3.9-sysctl-iobuf-fd.patch</changelog>

</package>
<package pkgid="8f197e886fc859196436d0631172c47a42848d211b7461d2d8d5f09726e51d1d" name="proteus" arch="noarch">
    <version epoch="0" ver="4.2.1" rel="3.1"/>

<changelog author="axel.braun@gmx.de" date="1382788800">- initial build on OBS</changelog>
<changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
<changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
<changelog author="axel.braun@gmx.de" date="1463227200">- version 4.0</changelog>
<changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
<changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.1 - Bugfix Release</changelog>

</package>
<package pkgid="a3a5ab99e74690c3edfa955f86e4aa2726a8b34f149db9c2eebb18bf0c5bd38c" name="proteus" arch="src">
    <version epoch="0" ver="4.2.1" rel="3.1"/>

<changelog author="axel.braun@gmx.de" date="1382788800">- initial build on OBS</changelog>
<changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
<changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
<changelog author="axel.braun@gmx.de" date="1463227200">- version 4.0</changelog>
<changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
<changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.1 - Bugfix Release</changelog>

</package>
<package pkgid="b38845b4e54ae31fda04e347ea79173b9919b897162ccc3f9b398c8b7812e467" name="protoc-gen-go" arch="x86_64">
    <version epoch="0" ver="0.0.0+git20170217.69b215d" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1305892800">- Use Go RPM macros instead of custom ones
- Use proper package versioning scheme (needs reinstall)
- Drop provides/obsoletes of old package, needs reinstall anyway</changelog>
<changelog author="saschpe@gmx.de" date="1305979200">- Switch to %{go_make_test} macro</changelog>
<changelog author="saschpe@gmx.de" date="1308052800">- Update to 14/06/2011 mercurial release
  * Adapted reflect API changes
  * Safer unmarshalling
- Added goprotobuf-fix-imports patch
- Added goprotobuf-fix-proto-testsuite patch
- Also build and install goproto-gen-go binary
- Use new %go_disable_brp_strip_static_archive macro</changelog>
<changelog author="saschpe@gmx.de" date="1308916800">- Update to 24/06/2011 mercurial version
  * goprotobuf: update for Alignof/Sizeof returning uintptr, and
    goto restriction
  * goprotobuf: sync from Google internal version</changelog>
<changelog author="saschpe@suse.de" date="1315483200">- Update to 08/09/2011 mercurial version:
  * Follow changes of weekly Go release</changelog>
<changelog author="saschpe@suse.de" date="1323864000">- Adjust to Go weekly.2011-12-02 changes</changelog>
<changelog author="graham@andtech.eu" date="1327492800">- Update for weekly.2012-01-20
- update to go 1 import strings
- Fix panic in SetDefaults for nil sub-messages
- Fix a couple of instances where bad input could cause a panic
- GetExtension now returns a specific error when the requested extension is
  missing</changelog>
<changelog author="graham@andtech.eu" date="1328702400">- patch for encode/decode update runtime.MemStats use for weekly</changelog>
<changelog author="graham@andtech.eu" date="1329393600">- Update for weekly 2012-02-12
- Remove uses of runtime.MemStats.
- Correctly generate extension names for .proto files that don't declare a
  package.
- Better error handling for invalid input that mentions tag 0.
- Weak import/field handling.
- Fix proto.Equal to consider empty and nil repeated fields as equal.
- Avoid generating a struct that uses the same name for a field and a method.
- update to loss of unsafe.Unreflect, unsafe.New</changelog>
<changelog author="graham@andtech.eu" date="1339416000">- Update spec with new package path locations
- Add documentation sub-package</changelog>
<changelog author="graham@andtech.eu" date="1372507200">- Update pacakge to latest upstream mercurial version</changelog>
<changelog author="ro@suse.de" date="1375704000">- use ExclusiveArch to limit build to the same architectures as go</changelog>
<changelog author="i@marguerite.su" date="1426939200">- remove go_disable_brp_strip_static_archive usage
- name changed to go-protobuf
- source changed from google code to github.com/golang/protobuf
- version update to 0.0.0+git20150320.de8c523</changelog>
<changelog author="i@marguerite.su" date="1436616000">- rename golang-github-golang-protobuf
- update version 0.0.0+git20150708.ab974be
- use golang-packaging for packaging</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1451131200">- Update to version 0.0.0+git20151207.68415e7:
  + Unexport proto.MessageSet, and remove a bunch of its support.
  + Add compressed file descriptor code generation.
  + Remove a test that has outlived its usefulness.
  + Generate correct service name for gRPC services without a package name.
  + Document parameters in README
  + Fix unmarshaling code to properly handle multiple instances of the same extension appearing in the wire format. Prior to this change, multiple custom options would result in all but the first being discarded when processed using the proto.GetExtension() facilities.
  + Regenerate protos.
  + Generate sizer functions for oneofs.
  + By popular demand, rename README to README.md and make Markdown consistent.
  + Add some more Markdown annotations.</changelog>
<changelog author="i@marguerite.su" date="1459684800">- add xz dependency for SLE
- get rid of -source subpackage, no one use it</changelog>
<changelog author="tboerger@suse.com" date="1471435200">- Refactoed spec with a new unified layout
- Added rpmlintrc for common golang linting</changelog>
<changelog author="tboerger@suse.com" date="1481198400">- Renamed the subpackage for the protoc-gen-go binary</changelog>
<changelog author="tboerger@suse.com" date="1481198401">- Update to version 0.0.0+git20161116.8ee7999:
  * Run 'make generate-test-pbs' in proto/ to regenerate proto3.pb.go testdata
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.</changelog>
<changelog author="thipp@suse.de" date="1488369600">- Update to version 0.0.0+git20170217.69b215d:
  * protoc-gen-go: Add Filename to ExtensionDesc.
  * Regenerate pb.go files after https://github.com/golang/protobuf/commit/24f28ae800abfde9310e779f94be606b1a98a3fc
  * Add a benchmark demonstrating lock contention when Marshaling/Unmarshaling maps.
  * Generate pb.go files after https://github.com/golang/protobuf/commit/cb9b7771abc2a63ab206dde76539f08f66ab994d
  * jsonpb: treat `null` JSON values for `Timestamp` and `Duration` as defaults (#255)
  * proto: Fix a Marshal race on messages with extensions.
  * proto: Add a descriptor subpackage.
  * jsonpb: merge https://github.com/golang/protobuf/pull/255
  * descriptor: rename generated protobuf package on import.
  * fix import path
- Update rpmlintrc
- Update requirements</changelog>

</package>
<package pkgid="2080395fd8de34227daf367cd7245f73b6f6e3293f5afa5ffee50720dc0b0543" name="psmisc" arch="src">
    <version epoch="0" ver="22.21" rel="10.1"/>

<changelog author="werner@suse.de" date="1308657600">- Update to version 22.14:
  + Fix file descriptor as weel as memory leaks in fuser
  + Strip @ symbol from file names read from /proc/net/unix
  + Above 2 changes close openSuSE bugs #536209, #529520, and #417841
    and provided by Werner Fink
  + Applied patch from Werner Fink to avoid stat(2) on NFS mounts
  + Zeros process group memory - Patch by jgorig SF#3152925 RH#666213
  + fuser -m -s flags work - Patch by jgorig SF#31110178 RH#651794
  + fuser silent if /proc/swaps not available SF#3072134
  + ppc 64 support for peekfd by jgorig SF#3166444
  + jiffies now ULL in killall SF#3138538
  + pstree can show parents of a process. Patch supplied by Curtis
    Hawthorne SF#3135157
  + killall creates right size buffer instead of MAX_PATH Debian #623425
  + check for /proc/$$/stat not /proc/self/stat which is not available
    on hurd platforms. Same Debian bug as above
  + fuser understands IPv6 addresses, removed comment in fuser.1 that it
    doesn't Debian #609904
  + fuser -k only returns 0 if you kill something.
  + fuser doesn't complain if /proc/#/fd disappears SF#3310990</changelog>
<changelog author="werner@suse.de" date="1315828800">- Update to pre version 22.15
  + Really apply patch for SF#31110178 RH#651794
  + Conditionally use fork before stat calls
  + Patch from Corrina Vinschen for compiling on cygwin
  + Remove doubled content in src/lists.h
  + Add another 2 for thread brackets in pstree.c
- Change fork before stat calls to be in best case a second process
  using two pipes for bidirectional communication with main.</changelog>
<changelog author="coolo@suse.com" date="1317211200">- back out the timeout patch, it breaks fuser on i586 completely
  (bnc#720882)</changelog>
<changelog author="mmarek@suse.cz" date="1317643200">- Fix segfault in pstree, patch by Tetsuo Handa (bnc#718915).</changelog>
<changelog author="werner@suse.de" date="1317816000">- Handle internal size of structure stat by including config.h
  to avoid size missmatch during copy result back (bnc#720882)</changelog>
<changelog author="werner@suse.de" date="1317988800">- Make main fuser process more robust against broken pipe and check
  for helper process within a SIGCHLD handler</changelog>
<changelog author="werner@suse.de" date="1318334400">- Use __builtin___strcpy_ instead of __builtin___strcpy_chk to avoid
  trouble with char path[0] tag in struct handle (bnc#723304)</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="werner@suse.de" date="1330344000">- Update to version 22.16
  * Use strncpy for COMM_LEN and make it 18 characters to cover
    brackets in name.
  * don't change COMM_LEN, it breaks matching long commands
    Debian #661145
  * Enable some harden AM_CFLAGS by default, use configure option
  - -disable-harden-flags to not use it.
  * Use ENOENT not EBADE for FreeBSD Debian #631566
  * Fix prstat typos
  * Stop zombies by using waitpid Ubuntu #876387 by Peter Holik, SF#3429674
  * Fixed minor older/younger typo in killall.1 thanks to Maikel Linke
  * Correct defines for timeout in configure.ac</changelog>
<changelog author="werner@suse.de" date="1331640000">- Submit ASCII null fix in pstree upsrtream
- Submit support for static background process for stat system call
  upstream
- Rebuild package with upstream patches</changelog>
<changelog author="werner@suse.de" date="1355832000">- Update to version 22.20 + upstream patch
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * pstree sorts properly on names Debian #682014
  * fuser -m regresion fixed SF #3559232, thanks to hanpt
  * pstree finds orphaned processes SF#3537508
  * fuser finds unix sockets again SF #3502649
  * pstree finds pid 0 stops looping Debian #687829
  * killall with no args exits again SF #3536526
  * Added AC_CANONICAL_TARGET for target_os Debian #673485
  * sed doesn't have [0-9]+ replace with [0-9][0-9]*
  * assert in killall triggered for small lifetimes Debian #628617
  * killall MAX_NAMES off by one Debian #677428
  * Removed remaining parts of pidof
  * fuser uses correct timeout_stat define Debian #661723
  * fuser is not compiled on hurd-i386 Debian #673485
  * No TEXTRELS in src/lists built as PIE on x86
  * Fake pstree root for kernels with hidepid turned on
  * More fixes for Cygwin SF Patch #3511920
  * pstree can show PGIDs SF Patch #3471056
- This should fix the bug reported by Madhu</changelog>
<changelog author="schwab@suse.de" date="1360411200">- peekfd hasn't been ported to aarch64 yet</changelog>
<changelog author="schwab@suse.de" date="1381320000">- peekfd-m68k.patch: Port peekfd to m68k</changelog>
<changelog author="p.drouand@gmail.com" date="1382529600">- Remove %fillup_prereq %insserv_prereq PreReq; package provides
  neither sysconfigfile or sysvinit script
- Use %lang_package instead of define a lang subpackage manually
- Use %configure instead of ./configure
- Don't define CC and CXX flags manually
- Remove redundant %clean section</changelog>
<changelog author="werner@suse.de" date="1395662400">- Update to version 22.21
  * Missing comma in fuser(1) added Debian #702391
  * pstree uses COLUMN env variable Debian #717017
  * pstree shows proper thread names SF Bug#57
  * pstree shows namespace options SF Patch#30
  * killall.1 minor fixes SF Bug#59
  * peekfd for m68k SF Patch#31
  * Fixing some derefefed pointers SF Patch#32
  * Minor typos in man pages SF Bug#61 Bug#60
  * fuser -m and -M flags work either way Debian #606178
- Remove patch
  psmisc-22.20-pstree.patch as now part of upstream
  peekfd-m68k.patch as now part of upstream
- Port the patches
  psmisc-22.20-upstream.patch which becomes psmisc-22.21-upstream.patch
  psmisc-22.20.dif which becomes psmisc-22.21.dif
  psmisc-22.12-pstree.patch which becomes psmisc-22.21-pstree.patch</changelog>
<changelog author="ro@suse.de" date="1398340800">- add patch to fix fuser -M option active all the time (bnc#874983)
  psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch</changelog>
<changelog author="werner@suse.de" date="1427198400">- Add patch psmisc-22.21-boo908063.patch to avoid to close files
  which are never open (boo#908063, bnc#974161)</changelog>
<changelog author="werner@suse.de" date="1499256000">- Add patch for bsc#908068
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file</changelog>
<changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
<changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>

</package>
<package pkgid="8508b0d38b81338a8a89c198e6119656f0086b7cf9c8c2c03f8ffa8fd07d2c07" name="psmisc" arch="x86_64">
    <version epoch="0" ver="22.21" rel="10.1"/>

<changelog author="werner@suse.de" date="1308657600">- Update to version 22.14:
  + Fix file descriptor as weel as memory leaks in fuser
  + Strip @ symbol from file names read from /proc/net/unix
  + Above 2 changes close openSuSE bugs #536209, #529520, and #417841
    and provided by Werner Fink
  + Applied patch from Werner Fink to avoid stat(2) on NFS mounts
  + Zeros process group memory - Patch by jgorig SF#3152925 RH#666213
  + fuser -m -s flags work - Patch by jgorig SF#31110178 RH#651794
  + fuser silent if /proc/swaps not available SF#3072134
  + ppc 64 support for peekfd by jgorig SF#3166444
  + jiffies now ULL in killall SF#3138538
  + pstree can show parents of a process. Patch supplied by Curtis
    Hawthorne SF#3135157
  + killall creates right size buffer instead of MAX_PATH Debian #623425
  + check for /proc/$$/stat not /proc/self/stat which is not available
    on hurd platforms. Same Debian bug as above
  + fuser understands IPv6 addresses, removed comment in fuser.1 that it
    doesn't Debian #609904
  + fuser -k only returns 0 if you kill something.
  + fuser doesn't complain if /proc/#/fd disappears SF#3310990</changelog>
<changelog author="werner@suse.de" date="1315828800">- Update to pre version 22.15
  + Really apply patch for SF#31110178 RH#651794
  + Conditionally use fork before stat calls
  + Patch from Corrina Vinschen for compiling on cygwin
  + Remove doubled content in src/lists.h
  + Add another 2 for thread brackets in pstree.c
- Change fork before stat calls to be in best case a second process
  using two pipes for bidirectional communication with main.</changelog>
<changelog author="coolo@suse.com" date="1317211200">- back out the timeout patch, it breaks fuser on i586 completely
  (bnc#720882)</changelog>
<changelog author="mmarek@suse.cz" date="1317643200">- Fix segfault in pstree, patch by Tetsuo Handa (bnc#718915).</changelog>
<changelog author="werner@suse.de" date="1317816000">- Handle internal size of structure stat by including config.h
  to avoid size missmatch during copy result back (bnc#720882)</changelog>
<changelog author="werner@suse.de" date="1317988800">- Make main fuser process more robust against broken pipe and check
  for helper process within a SIGCHLD handler</changelog>
<changelog author="werner@suse.de" date="1318334400">- Use __builtin___strcpy_ instead of __builtin___strcpy_chk to avoid
  trouble with char path[0] tag in struct handle (bnc#723304)</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="werner@suse.de" date="1330344000">- Update to version 22.16
  * Use strncpy for COMM_LEN and make it 18 characters to cover
    brackets in name.
  * don't change COMM_LEN, it breaks matching long commands
    Debian #661145
  * Enable some harden AM_CFLAGS by default, use configure option
  - -disable-harden-flags to not use it.
  * Use ENOENT not EBADE for FreeBSD Debian #631566
  * Fix prstat typos
  * Stop zombies by using waitpid Ubuntu #876387 by Peter Holik, SF#3429674
  * Fixed minor older/younger typo in killall.1 thanks to Maikel Linke
  * Correct defines for timeout in configure.ac</changelog>
<changelog author="werner@suse.de" date="1331640000">- Submit ASCII null fix in pstree upsrtream
- Submit support for static background process for stat system call
  upstream
- Rebuild package with upstream patches</changelog>
<changelog author="werner@suse.de" date="1355832000">- Update to version 22.20 + upstream patch
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * pstree sorts properly on names Debian #682014
  * fuser -m regresion fixed SF #3559232, thanks to hanpt
  * pstree finds orphaned processes SF#3537508
  * fuser finds unix sockets again SF #3502649
  * pstree finds pid 0 stops looping Debian #687829
  * killall with no args exits again SF #3536526
  * Added AC_CANONICAL_TARGET for target_os Debian #673485
  * sed doesn't have [0-9]+ replace with [0-9][0-9]*
  * assert in killall triggered for small lifetimes Debian #628617
  * killall MAX_NAMES off by one Debian #677428
  * Removed remaining parts of pidof
  * fuser uses correct timeout_stat define Debian #661723
  * fuser is not compiled on hurd-i386 Debian #673485
  * No TEXTRELS in src/lists built as PIE on x86
  * Fake pstree root for kernels with hidepid turned on
  * More fixes for Cygwin SF Patch #3511920
  * pstree can show PGIDs SF Patch #3471056
- This should fix the bug reported by Madhu</changelog>
<changelog author="schwab@suse.de" date="1360411200">- peekfd hasn't been ported to aarch64 yet</changelog>
<changelog author="schwab@suse.de" date="1381320000">- peekfd-m68k.patch: Port peekfd to m68k</changelog>
<changelog author="p.drouand@gmail.com" date="1382529600">- Remove %fillup_prereq %insserv_prereq PreReq; package provides
  neither sysconfigfile or sysvinit script
- Use %lang_package instead of define a lang subpackage manually
- Use %configure instead of ./configure
- Don't define CC and CXX flags manually
- Remove redundant %clean section</changelog>
<changelog author="werner@suse.de" date="1395662400">- Update to version 22.21
  * Missing comma in fuser(1) added Debian #702391
  * pstree uses COLUMN env variable Debian #717017
  * pstree shows proper thread names SF Bug#57
  * pstree shows namespace options SF Patch#30
  * killall.1 minor fixes SF Bug#59
  * peekfd for m68k SF Patch#31
  * Fixing some derefefed pointers SF Patch#32
  * Minor typos in man pages SF Bug#61 Bug#60
  * fuser -m and -M flags work either way Debian #606178
- Remove patch
  psmisc-22.20-pstree.patch as now part of upstream
  peekfd-m68k.patch as now part of upstream
- Port the patches
  psmisc-22.20-upstream.patch which becomes psmisc-22.21-upstream.patch
  psmisc-22.20.dif which becomes psmisc-22.21.dif
  psmisc-22.12-pstree.patch which becomes psmisc-22.21-pstree.patch</changelog>
<changelog author="ro@suse.de" date="1398340800">- add patch to fix fuser -M option active all the time (bnc#874983)
  psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch</changelog>
<changelog author="werner@suse.de" date="1427198400">- Add patch psmisc-22.21-boo908063.patch to avoid to close files
  which are never open (boo#908063, bnc#974161)</changelog>
<changelog author="werner@suse.de" date="1499256000">- Add patch for bsc#908068
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file</changelog>
<changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
<changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>

</package>
<package pkgid="172d7c21a00c1e39644e767ce84fe306cd5332e97c43db96ddb3c185510b9e4f" name="psmisc-lang" arch="noarch">
    <version epoch="0" ver="22.21" rel="10.1"/>

<changelog author="werner@suse.de" date="1308657600">- Update to version 22.14:
  + Fix file descriptor as weel as memory leaks in fuser
  + Strip @ symbol from file names read from /proc/net/unix
  + Above 2 changes close openSuSE bugs #536209, #529520, and #417841
    and provided by Werner Fink
  + Applied patch from Werner Fink to avoid stat(2) on NFS mounts
  + Zeros process group memory - Patch by jgorig SF#3152925 RH#666213
  + fuser -m -s flags work - Patch by jgorig SF#31110178 RH#651794
  + fuser silent if /proc/swaps not available SF#3072134
  + ppc 64 support for peekfd by jgorig SF#3166444
  + jiffies now ULL in killall SF#3138538
  + pstree can show parents of a process. Patch supplied by Curtis
    Hawthorne SF#3135157
  + killall creates right size buffer instead of MAX_PATH Debian #623425
  + check for /proc/$$/stat not /proc/self/stat which is not available
    on hurd platforms. Same Debian bug as above
  + fuser understands IPv6 addresses, removed comment in fuser.1 that it
    doesn't Debian #609904
  + fuser -k only returns 0 if you kill something.
  + fuser doesn't complain if /proc/#/fd disappears SF#3310990</changelog>
<changelog author="werner@suse.de" date="1315828800">- Update to pre version 22.15
  + Really apply patch for SF#31110178 RH#651794
  + Conditionally use fork before stat calls
  + Patch from Corrina Vinschen for compiling on cygwin
  + Remove doubled content in src/lists.h
  + Add another 2 for thread brackets in pstree.c
- Change fork before stat calls to be in best case a second process
  using two pipes for bidirectional communication with main.</changelog>
<changelog author="coolo@suse.com" date="1317211200">- back out the timeout patch, it breaks fuser on i586 completely
  (bnc#720882)</changelog>
<changelog author="mmarek@suse.cz" date="1317643200">- Fix segfault in pstree, patch by Tetsuo Handa (bnc#718915).</changelog>
<changelog author="werner@suse.de" date="1317816000">- Handle internal size of structure stat by including config.h
  to avoid size missmatch during copy result back (bnc#720882)</changelog>
<changelog author="werner@suse.de" date="1317988800">- Make main fuser process more robust against broken pipe and check
  for helper process within a SIGCHLD handler</changelog>
<changelog author="werner@suse.de" date="1318334400">- Use __builtin___strcpy_ instead of __builtin___strcpy_chk to avoid
  trouble with char path[0] tag in struct handle (bnc#723304)</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="werner@suse.de" date="1330344000">- Update to version 22.16
  * Use strncpy for COMM_LEN and make it 18 characters to cover
    brackets in name.
  * don't change COMM_LEN, it breaks matching long commands
    Debian #661145
  * Enable some harden AM_CFLAGS by default, use configure option
  - -disable-harden-flags to not use it.
  * Use ENOENT not EBADE for FreeBSD Debian #631566
  * Fix prstat typos
  * Stop zombies by using waitpid Ubuntu #876387 by Peter Holik, SF#3429674
  * Fixed minor older/younger typo in killall.1 thanks to Maikel Linke
  * Correct defines for timeout in configure.ac</changelog>
<changelog author="werner@suse.de" date="1331640000">- Submit ASCII null fix in pstree upsrtream
- Submit support for static background process for stat system call
  upstream
- Rebuild package with upstream patches</changelog>
<changelog author="werner@suse.de" date="1355832000">- Update to version 22.20 + upstream patch
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * pstree sorts properly on names Debian #682014
  * fuser -m regresion fixed SF #3559232, thanks to hanpt
  * pstree finds orphaned processes SF#3537508
  * fuser finds unix sockets again SF #3502649
  * pstree finds pid 0 stops looping Debian #687829
  * killall with no args exits again SF #3536526
  * Added AC_CANONICAL_TARGET for target_os Debian #673485
  * sed doesn't have [0-9]+ replace with [0-9][0-9]*
  * assert in killall triggered for small lifetimes Debian #628617
  * killall MAX_NAMES off by one Debian #677428
  * Removed remaining parts of pidof
  * fuser uses correct timeout_stat define Debian #661723
  * fuser is not compiled on hurd-i386 Debian #673485
  * No TEXTRELS in src/lists built as PIE on x86
  * Fake pstree root for kernels with hidepid turned on
  * More fixes for Cygwin SF Patch #3511920
  * pstree can show PGIDs SF Patch #3471056
- This should fix the bug reported by Madhu</changelog>
<changelog author="schwab@suse.de" date="1360411200">- peekfd hasn't been ported to aarch64 yet</changelog>
<changelog author="schwab@suse.de" date="1381320000">- peekfd-m68k.patch: Port peekfd to m68k</changelog>
<changelog author="p.drouand@gmail.com" date="1382529600">- Remove %fillup_prereq %insserv_prereq PreReq; package provides
  neither sysconfigfile or sysvinit script
- Use %lang_package instead of define a lang subpackage manually
- Use %configure instead of ./configure
- Don't define CC and CXX flags manually
- Remove redundant %clean section</changelog>
<changelog author="werner@suse.de" date="1395662400">- Update to version 22.21
  * Missing comma in fuser(1) added Debian #702391
  * pstree uses COLUMN env variable Debian #717017
  * pstree shows proper thread names SF Bug#57
  * pstree shows namespace options SF Patch#30
  * killall.1 minor fixes SF Bug#59
  * peekfd for m68k SF Patch#31
  * Fixing some derefefed pointers SF Patch#32
  * Minor typos in man pages SF Bug#61 Bug#60
  * fuser -m and -M flags work either way Debian #606178
- Remove patch
  psmisc-22.20-pstree.patch as now part of upstream
  peekfd-m68k.patch as now part of upstream
- Port the patches
  psmisc-22.20-upstream.patch which becomes psmisc-22.21-upstream.patch
  psmisc-22.20.dif which becomes psmisc-22.21.dif
  psmisc-22.12-pstree.patch which becomes psmisc-22.21-pstree.patch</changelog>
<changelog author="ro@suse.de" date="1398340800">- add patch to fix fuser -M option active all the time (bnc#874983)
  psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch</changelog>
<changelog author="werner@suse.de" date="1427198400">- Add patch psmisc-22.21-boo908063.patch to avoid to close files
  which are never open (boo#908063, bnc#974161)</changelog>
<changelog author="werner@suse.de" date="1499256000">- Add patch for bsc#908068
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file</changelog>
<changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
<changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>

</package>
<package pkgid="a161526361a8c53caf15e72c59fb7fcedfb19991c60fe173d27dddcb93c1b26b" name="pspp" arch="src">
    <version epoch="0" ver="0.10.2" rel="5.1"/>

<changelog author="Matj Cepl &lt;mcepl@redhat.com&gt; 0.6.0-4" date="1213358400">- Second wave of Package Review -- .desktop file
- Mysterious libraries eliminated</changelog>
<changelog author="Matj Cepl &lt;mcepl@redhat.com&gt; 0.6.0-5" date="1213444800">- Approved version with fixed duplicate %%{_sysconfdir}/pspp</changelog>
<changelog author="Matej Cepl &lt;mcepl@redhat.com&gt; 0.6.0-6" date="1213790400">- Bug 451006 has been resolved, so we don't have to munge CFLAGS
  anymore.</changelog>
<changelog author="Matej Cepl &lt;mcepl@redhat.com&gt; 0.6.0-7" date="1215432000">- Fix BuildRequires.</changelog>
<changelog author="Matj Cepl &lt;mcepl@redhat.com&gt; - 0.6.0-8" date="1222344000">- Fix wrong CFLAGS -- add -fgnu89-inline</changelog>
<changelog author="Detlef Steuer &lt;steuer@hsuhh.de&gt; - 0.6.1-0" date="1226664000">- First try for the Opensuse Buildservice</changelog>
<changelog author="embar@super.lt" date="1282305600">- Update to 0.7.5-g7803d3</changelog>
<changelog author="embar@super.lt" date="1326196800">- Update to 0.7.8-gbc9098
- Fix compiling for openSUSE 12.1</changelog>
<changelog author="embar@super.lt" date="1364385600">- Update to 0.7.10</changelog>
<changelog author="embar@super.lt" date="1367928000">- merged 'psppsheet' branch</changelog>
<changelog author="embar@super.lt" date="1375358400">- Update to 0.8.0. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1390737600">- Update to 0.8.2. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1397131200">- Update to 0.8.2.1. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1398513600">- Update to 0.8.3:
  * Independent T-Tests displayed the standard error of the difference
  and the confidence interval for the unequal variances case, where
  the equal variances case should have been.  This has been fixed.
  * REGRESSION now recognises /STATISTICS=CI(x) which causes confidence
  intervals for the coefficients to be printed.
  * When DESCRIPTIVES calculates Z scores, it now omits cases filtered
  by the current FILTER settings.
  * PSPPIRE graphical user interface improvements.
  * System file related improvements.</changelog>
<changelog author="embar@super.lt" date="1415016000">- Update to 0.8.4:
  * Bug fixes.
  * More detailed changelog can be found here:
    http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1439899200">- Update to 0.8.5:
  * The FREQUENCIES and CROSSTABS commands can now generate barcharts.
  * The FACTOR command can now perform PROMAX rotations.
  * SPSS/PC+ system files are now supported on GET and other commands
    that read SPSS system files.  The pspp-convert program can now read
    SPSS/PC+ system files.  Writing the obsolete SPSS/PC+ system file
    format is not supported.
  * SYSFILE INFO can now read SPSS/PC+ system files and SPSS portable
    files.
  * FREQUENCIES: A bug was fixed where an assertion failure occured
    when an empty dataset was presented.
  * The GRAPH command is now available.  Initially it supports
    scatterplots and histograms.
  * The RND operator in expressions now supports additional operands
    for rounding to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1459684800">- Update to 0.10:
  * The QUICK CLUSTER command has a  /PRINT subcommand which shows
  the initial cluster centres and the final cluster membership of
  each case.  The clustering algorithm has also been updated, so
  as to produce better separated clusters.
  * If the DECIMAL character is set to COMMA then the ',' character
  will not be treated as a separator by DATA LIST.
  * The graphical user interface (psppire) has been changed as follows:
  - It now uses Gtk+ version 3 instead of version 2.
  - There is now a Graphs menu to access the GRAPH command.
  - The status of dialog box widgets are now preserved between calls
    to the same dialog box for the same dataset.
  - The dialog box for the Logistic Regression command will now
    infer that string variables or any varible with a "measure"
    of Nominal or Ordinal are to be treated as categorical variables
    and will generate syntax accordingly.
  * The pspp-convert utility can now decrypt encrypted syntax files.
  The encrypted syntax file format is unacceptably insecure, so to
  discourage its use PSPP and PSPPIRE do not directly read or write
  this format.
  * New commands:
  - SORT VARIABLES.
  * The following functions for transformation expressions are new:
  - REPLACE, for search-and-replace of one string with another.
  - STRUNC, to truncate a string and trim trailing spaces.
  - MEDIAN, to compute the median of its arguments.
  - The TRUNC function in expressions now supports additional arguments
    for truncating to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.
  * Various bug fixes.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1470225600">- Update to 0.10.2:
  * CROSSTABS implements a new COUNT subcommand to round case or cell
  weights.
  * Help will be opened as HTML in default browser if yelp
  is not available.
  * When plotting scatterplots with only one dataset (the simple case)
  the colour used for the dataset is now black. The previous default
  from the Tango palette was too faint to see easily.
  * The varible info dialog could previously only paste a single variable.
  Now it can paste multiple variables.
  * Bug fixes, including the following:
  - T-test with independent samples GUI crashed with string
    type variable as group variable.
  - The variable info dialog showed the previous selected variable
    superimposed with the currently selected one.
  - The GLM command did not properly deal with missing values. This
    has been fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1486382400">- Port to ncurses6 (instead of using the deprecated mcurses5):
  + export NCURSES_CONFIG=%{_bindir}/ncurses6-config if the binary
    exists. In case it does not, the default search algorithm of
    configure is being used, meaning ncurses5-config, followed by
    ncurses8-config.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501329600">- Add pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch
  to fix NULL Pointer dereference in ll_insert (bnc#1046997, CVE-2017-10792).
- Add pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch
  to fix  Integer overflow in the hash_int library (bnc#1046998, CVE-2017-10791).</changelog>

</package>
<package pkgid="0e69f76c2452ceddda2f6302abfc2792cdcf8152aef62828937574bdac90b1de" name="pspp" arch="src">
    <version epoch="0" ver="1.0.1" rel="8.1"/>

<changelog author="Matej Cepl &lt;mcepl@redhat.com&gt; 0.6.0-6" date="1213790400">- Bug 451006 has been resolved, so we don't have to munge CFLAGS
  anymore.</changelog>
<changelog author="Matej Cepl &lt;mcepl@redhat.com&gt; 0.6.0-7" date="1215432000">- Fix BuildRequires.</changelog>
<changelog author="Matj Cepl &lt;mcepl@redhat.com&gt; - 0.6.0-8" date="1222344000">- Fix wrong CFLAGS -- add -fgnu89-inline</changelog>
<changelog author="Detlef Steuer &lt;steuer@hsuhh.de&gt; - 0.6.1-0" date="1226664000">- First try for the Opensuse Buildservice</changelog>
<changelog author="embar@super.lt" date="1282305600">- Update to 0.7.5-g7803d3</changelog>
<changelog author="embar@super.lt" date="1326196800">- Update to 0.7.8-gbc9098
- Fix compiling for openSUSE 12.1</changelog>
<changelog author="embar@super.lt" date="1364385600">- Update to 0.7.10</changelog>
<changelog author="embar@super.lt" date="1367928000">- merged 'psppsheet' branch</changelog>
<changelog author="embar@super.lt" date="1375358400">- Update to 0.8.0. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1390737600">- Update to 0.8.2. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1397131200">- Update to 0.8.2.1. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1398513600">- Update to 0.8.3:
  * Independent T-Tests displayed the standard error of the difference
  and the confidence interval for the unequal variances case, where
  the equal variances case should have been.  This has been fixed.
  * REGRESSION now recognises /STATISTICS=CI(x) which causes confidence
  intervals for the coefficients to be printed.
  * When DESCRIPTIVES calculates Z scores, it now omits cases filtered
  by the current FILTER settings.
  * PSPPIRE graphical user interface improvements.
  * System file related improvements.</changelog>
<changelog author="embar@super.lt" date="1415016000">- Update to 0.8.4:
  * Bug fixes.
  * More detailed changelog can be found here:
    http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1439899200">- Update to 0.8.5:
  * The FREQUENCIES and CROSSTABS commands can now generate barcharts.
  * The FACTOR command can now perform PROMAX rotations.
  * SPSS/PC+ system files are now supported on GET and other commands
    that read SPSS system files.  The pspp-convert program can now read
    SPSS/PC+ system files.  Writing the obsolete SPSS/PC+ system file
    format is not supported.
  * SYSFILE INFO can now read SPSS/PC+ system files and SPSS portable
    files.
  * FREQUENCIES: A bug was fixed where an assertion failure occured
    when an empty dataset was presented.
  * The GRAPH command is now available.  Initially it supports
    scatterplots and histograms.
  * The RND operator in expressions now supports additional operands
    for rounding to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1459684800">- Update to 0.10:
  * The QUICK CLUSTER command has a  /PRINT subcommand which shows
  the initial cluster centres and the final cluster membership of
  each case.  The clustering algorithm has also been updated, so
  as to produce better separated clusters.
  * If the DECIMAL character is set to COMMA then the ',' character
  will not be treated as a separator by DATA LIST.
  * The graphical user interface (psppire) has been changed as follows:
  - It now uses Gtk+ version 3 instead of version 2.
  - There is now a Graphs menu to access the GRAPH command.
  - The status of dialog box widgets are now preserved between calls
    to the same dialog box for the same dataset.
  - The dialog box for the Logistic Regression command will now
    infer that string variables or any varible with a "measure"
    of Nominal or Ordinal are to be treated as categorical variables
    and will generate syntax accordingly.
  * The pspp-convert utility can now decrypt encrypted syntax files.
  The encrypted syntax file format is unacceptably insecure, so to
  discourage its use PSPP and PSPPIRE do not directly read or write
  this format.
  * New commands:
  - SORT VARIABLES.
  * The following functions for transformation expressions are new:
  - REPLACE, for search-and-replace of one string with another.
  - STRUNC, to truncate a string and trim trailing spaces.
  - MEDIAN, to compute the median of its arguments.
  - The TRUNC function in expressions now supports additional arguments
    for truncating to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.
  * Various bug fixes.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1470225600">- Update to 0.10.2:
  * CROSSTABS implements a new COUNT subcommand to round case or cell
  weights.
  * Help will be opened as HTML in default browser if yelp
  is not available.
  * When plotting scatterplots with only one dataset (the simple case)
  the colour used for the dataset is now black. The previous default
  from the Tango palette was too faint to see easily.
  * The varible info dialog could previously only paste a single variable.
  Now it can paste multiple variables.
  * Bug fixes, including the following:
  - T-test with independent samples GUI crashed with string
    type variable as group variable.
  - The variable info dialog showed the previous selected variable
    superimposed with the currently selected one.
  - The GLM command did not properly deal with missing values. This
    has been fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1486382400">- Port to ncurses6 (instead of using the deprecated mcurses5):
  + export NCURSES_CONFIG=%{_bindir}/ncurses6-config if the binary
    exists. In case it does not, the default search algorithm of
    configure is being used, meaning ncurses5-config, followed by
    ncurses8-config.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501329600">- Add pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch
  to fix NULL Pointer dereference in ll_insert (bnc#1046997, CVE-2017-10792).
- Add pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch
  to fix  Integer overflow in the hash_int library (bnc#1046998, CVE-2017-10791).</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1502625600">- Update to 0.11.0 version:
  * The REGRESSION command now has a /ORIGIN subcommand to perform
  regression through the origin.
  * The FACTOR command can now analyse matrix files prepared with MATRIX DATA.
  * The FACTOR command can now print the anti-image matrices.
  * The MATRIX DATA command has been added.
  * Some inappropriate properties in selection dialogs have been corrected.
  * A bug which could cause the HTML driver to go into a tight loop
  has been fixed.
  * An error in the FREQUENCIES procedure, where the word "Mean" was
  printed when "Variance" was appropriate has been fixed.
  * The ncurses library is no longer required or used.
  * A bug where the Mann-Whitney test would give misleading results
  if run on multiple variables and MISSING=ANALAYSIS was specified
  has been fixed.
  * Gtk+3.14.5 or later must now be used when building.
  * Graphical user interface changes:
  * There is a new menu: Edit|Options
  * The Non Parametric Statistics Menu has a new item: "K Independent Samples".
  * Dialog boxes can now be canceled using the &lt;Escape&gt; key.
  * The AUTORECODE command now accepts an optional / before INTO.
  * The short form of the VECTOR command can now create string variables.
  * Bug fixes, including fixes for CVE-2017-10791 and CVE-2017-10792.
- Drop pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch:
  Fix for CVE-2017-10792 included in PSPP 0.11.0 version upstream.
- Drop pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch:
  Fix for CVE-2017-10791 included in PSPP 0.11.0 version upstream.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504008000">- Update to 1.0.1 version:
  * Bug fixes, including fixes for CVE-2017-12958 (bnc#1054585),
    CVE-2017-12959 (bnc#1054588), CVE-2017-12960 (bnc#1054587), and
    CVE-2017-12961 (bnc#1054586).
  * Translation updates.</changelog>

</package>
<package pkgid="c5350f269bf2eeb83b7e584a66ef02e4e0daa77ea97d154e798d139b8eb7fece" name="pspp" arch="x86_64">
    <version epoch="0" ver="0.10.2" rel="5.1"/>

<changelog author="embar@super.lt" date="1282305600">- Update to 0.7.5-g7803d3</changelog>
<changelog author="embar@super.lt" date="1326196800">- Update to 0.7.8-gbc9098
- Fix compiling for openSUSE 12.1</changelog>
<changelog author="embar@super.lt" date="1364385600">- Update to 0.7.10</changelog>
<changelog author="embar@super.lt" date="1367928000">- merged 'psppsheet' branch</changelog>
<changelog author="embar@super.lt" date="1375358400">- Update to 0.8.0. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1390737600">- Update to 0.8.2. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1397131200">- Update to 0.8.2.1. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1398513600">- Update to 0.8.3:
  * Independent T-Tests displayed the standard error of the difference
  and the confidence interval for the unequal variances case, where
  the equal variances case should have been.  This has been fixed.
  * REGRESSION now recognises /STATISTICS=CI(x) which causes confidence
  intervals for the coefficients to be printed.
  * When DESCRIPTIVES calculates Z scores, it now omits cases filtered
  by the current FILTER settings.
  * PSPPIRE graphical user interface improvements.
  * System file related improvements.</changelog>
<changelog author="embar@super.lt" date="1415016000">- Update to 0.8.4:
  * Bug fixes.
  * More detailed changelog can be found here:
    http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1439899200">- Update to 0.8.5:
  * The FREQUENCIES and CROSSTABS commands can now generate barcharts.
  * The FACTOR command can now perform PROMAX rotations.
  * SPSS/PC+ system files are now supported on GET and other commands
    that read SPSS system files.  The pspp-convert program can now read
    SPSS/PC+ system files.  Writing the obsolete SPSS/PC+ system file
    format is not supported.
  * SYSFILE INFO can now read SPSS/PC+ system files and SPSS portable
    files.
  * FREQUENCIES: A bug was fixed where an assertion failure occured
    when an empty dataset was presented.
  * The GRAPH command is now available.  Initially it supports
    scatterplots and histograms.
  * The RND operator in expressions now supports additional operands
    for rounding to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1459684800">- Update to 0.10:
  * The QUICK CLUSTER command has a  /PRINT subcommand which shows
  the initial cluster centres and the final cluster membership of
  each case.  The clustering algorithm has also been updated, so
  as to produce better separated clusters.
  * If the DECIMAL character is set to COMMA then the ',' character
  will not be treated as a separator by DATA LIST.
  * The graphical user interface (psppire) has been changed as follows:
  - It now uses Gtk+ version 3 instead of version 2.
  - There is now a Graphs menu to access the GRAPH command.
  - The status of dialog box widgets are now preserved between calls
    to the same dialog box for the same dataset.
  - The dialog box for the Logistic Regression command will now
    infer that string variables or any varible with a "measure"
    of Nominal or Ordinal are to be treated as categorical variables
    and will generate syntax accordingly.
  * The pspp-convert utility can now decrypt encrypted syntax files.
  The encrypted syntax file format is unacceptably insecure, so to
  discourage its use PSPP and PSPPIRE do not directly read or write
  this format.
  * New commands:
  - SORT VARIABLES.
  * The following functions for transformation expressions are new:
  - REPLACE, for search-and-replace of one string with another.
  - STRUNC, to truncate a string and trim trailing spaces.
  - MEDIAN, to compute the median of its arguments.
  - The TRUNC function in expressions now supports additional arguments
    for truncating to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.
  * Various bug fixes.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1470225600">- Update to 0.10.2:
  * CROSSTABS implements a new COUNT subcommand to round case or cell
  weights.
  * Help will be opened as HTML in default browser if yelp
  is not available.
  * When plotting scatterplots with only one dataset (the simple case)
  the colour used for the dataset is now black. The previous default
  from the Tango palette was too faint to see easily.
  * The varible info dialog could previously only paste a single variable.
  Now it can paste multiple variables.
  * Bug fixes, including the following:
  - T-test with independent samples GUI crashed with string
    type variable as group variable.
  - The variable info dialog showed the previous selected variable
    superimposed with the currently selected one.
  - The GLM command did not properly deal with missing values. This
    has been fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1486382400">- Port to ncurses6 (instead of using the deprecated mcurses5):
  + export NCURSES_CONFIG=%{_bindir}/ncurses6-config if the binary
    exists. In case it does not, the default search algorithm of
    configure is being used, meaning ncurses5-config, followed by
    ncurses8-config.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501329600">- Add pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch
  to fix NULL Pointer dereference in ll_insert (bnc#1046997, CVE-2017-10792).
- Add pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch
  to fix  Integer overflow in the hash_int library (bnc#1046998, CVE-2017-10791).</changelog>

</package>
<package pkgid="6b182b4b8665689796b819912b1504876d6d196bcf6682ea93b0ec09b27ee6e1" name="pspp" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="8.1"/>

<changelog author="embar@super.lt" date="1282305600">- Update to 0.7.5-g7803d3</changelog>
<changelog author="embar@super.lt" date="1326196800">- Update to 0.7.8-gbc9098
- Fix compiling for openSUSE 12.1</changelog>
<changelog author="embar@super.lt" date="1364385600">- Update to 0.7.10</changelog>
<changelog author="embar@super.lt" date="1367928000">- merged 'psppsheet' branch</changelog>
<changelog author="embar@super.lt" date="1375358400">- Update to 0.8.0. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1390737600">- Update to 0.8.2. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1397131200">- Update to 0.8.2.1. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1398513600">- Update to 0.8.3:
  * Independent T-Tests displayed the standard error of the difference
  and the confidence interval for the unequal variances case, where
  the equal variances case should have been.  This has been fixed.
  * REGRESSION now recognises /STATISTICS=CI(x) which causes confidence
  intervals for the coefficients to be printed.
  * When DESCRIPTIVES calculates Z scores, it now omits cases filtered
  by the current FILTER settings.
  * PSPPIRE graphical user interface improvements.
  * System file related improvements.</changelog>
<changelog author="embar@super.lt" date="1415016000">- Update to 0.8.4:
  * Bug fixes.
  * More detailed changelog can be found here:
    http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1439899200">- Update to 0.8.5:
  * The FREQUENCIES and CROSSTABS commands can now generate barcharts.
  * The FACTOR command can now perform PROMAX rotations.
  * SPSS/PC+ system files are now supported on GET and other commands
    that read SPSS system files.  The pspp-convert program can now read
    SPSS/PC+ system files.  Writing the obsolete SPSS/PC+ system file
    format is not supported.
  * SYSFILE INFO can now read SPSS/PC+ system files and SPSS portable
    files.
  * FREQUENCIES: A bug was fixed where an assertion failure occured
    when an empty dataset was presented.
  * The GRAPH command is now available.  Initially it supports
    scatterplots and histograms.
  * The RND operator in expressions now supports additional operands
    for rounding to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1459684800">- Update to 0.10:
  * The QUICK CLUSTER command has a  /PRINT subcommand which shows
  the initial cluster centres and the final cluster membership of
  each case.  The clustering algorithm has also been updated, so
  as to produce better separated clusters.
  * If the DECIMAL character is set to COMMA then the ',' character
  will not be treated as a separator by DATA LIST.
  * The graphical user interface (psppire) has been changed as follows:
  - It now uses Gtk+ version 3 instead of version 2.
  - There is now a Graphs menu to access the GRAPH command.
  - The status of dialog box widgets are now preserved between calls
    to the same dialog box for the same dataset.
  - The dialog box for the Logistic Regression command will now
    infer that string variables or any varible with a "measure"
    of Nominal or Ordinal are to be treated as categorical variables
    and will generate syntax accordingly.
  * The pspp-convert utility can now decrypt encrypted syntax files.
  The encrypted syntax file format is unacceptably insecure, so to
  discourage its use PSPP and PSPPIRE do not directly read or write
  this format.
  * New commands:
  - SORT VARIABLES.
  * The following functions for transformation expressions are new:
  - REPLACE, for search-and-replace of one string with another.
  - STRUNC, to truncate a string and trim trailing spaces.
  - MEDIAN, to compute the median of its arguments.
  - The TRUNC function in expressions now supports additional arguments
    for truncating to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.
  * Various bug fixes.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1470225600">- Update to 0.10.2:
  * CROSSTABS implements a new COUNT subcommand to round case or cell
  weights.
  * Help will be opened as HTML in default browser if yelp
  is not available.
  * When plotting scatterplots with only one dataset (the simple case)
  the colour used for the dataset is now black. The previous default
  from the Tango palette was too faint to see easily.
  * The varible info dialog could previously only paste a single variable.
  Now it can paste multiple variables.
  * Bug fixes, including the following:
  - T-test with independent samples GUI crashed with string
    type variable as group variable.
  - The variable info dialog showed the previous selected variable
    superimposed with the currently selected one.
  - The GLM command did not properly deal with missing values. This
    has been fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1486382400">- Port to ncurses6 (instead of using the deprecated mcurses5):
  + export NCURSES_CONFIG=%{_bindir}/ncurses6-config if the binary
    exists. In case it does not, the default search algorithm of
    configure is being used, meaning ncurses5-config, followed by
    ncurses8-config.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501329600">- Add pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch
  to fix NULL Pointer dereference in ll_insert (bnc#1046997, CVE-2017-10792).
- Add pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch
  to fix  Integer overflow in the hash_int library (bnc#1046998, CVE-2017-10791).</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1502625600">- Update to 0.11.0 version:
  * The REGRESSION command now has a /ORIGIN subcommand to perform
  regression through the origin.
  * The FACTOR command can now analyse matrix files prepared with MATRIX DATA.
  * The FACTOR command can now print the anti-image matrices.
  * The MATRIX DATA command has been added.
  * Some inappropriate properties in selection dialogs have been corrected.
  * A bug which could cause the HTML driver to go into a tight loop
  has been fixed.
  * An error in the FREQUENCIES procedure, where the word "Mean" was
  printed when "Variance" was appropriate has been fixed.
  * The ncurses library is no longer required or used.
  * A bug where the Mann-Whitney test would give misleading results
  if run on multiple variables and MISSING=ANALAYSIS was specified
  has been fixed.
  * Gtk+3.14.5 or later must now be used when building.
  * Graphical user interface changes:
  * There is a new menu: Edit|Options
  * The Non Parametric Statistics Menu has a new item: "K Independent Samples".
  * Dialog boxes can now be canceled using the &lt;Escape&gt; key.
  * The AUTORECODE command now accepts an optional / before INTO.
  * The short form of the VECTOR command can now create string variables.
  * Bug fixes, including fixes for CVE-2017-10791 and CVE-2017-10792.
- Drop pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch:
  Fix for CVE-2017-10792 included in PSPP 0.11.0 version upstream.
- Drop pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch:
  Fix for CVE-2017-10791 included in PSPP 0.11.0 version upstream.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504008000">- Update to 1.0.1 version:
  * Bug fixes, including fixes for CVE-2017-12958 (bnc#1054585),
    CVE-2017-12959 (bnc#1054588), CVE-2017-12960 (bnc#1054587), and
    CVE-2017-12961 (bnc#1054586).
  * Translation updates.</changelog>

</package>
<package pkgid="4da27426756501a2bf8fd981e94d6c465b57b645d83db3a2da020a84359f6e08" name="pspp-devel" arch="x86_64">
    <version epoch="0" ver="0.10.2" rel="5.1"/>

<changelog author="embar@super.lt" date="1282305600">- Update to 0.7.5-g7803d3</changelog>
<changelog author="embar@super.lt" date="1326196800">- Update to 0.7.8-gbc9098
- Fix compiling for openSUSE 12.1</changelog>
<changelog author="embar@super.lt" date="1364385600">- Update to 0.7.10</changelog>
<changelog author="embar@super.lt" date="1367928000">- merged 'psppsheet' branch</changelog>
<changelog author="embar@super.lt" date="1375358400">- Update to 0.8.0. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1390737600">- Update to 0.8.2. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1397131200">- Update to 0.8.2.1. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1398513600">- Update to 0.8.3:
  * Independent T-Tests displayed the standard error of the difference
  and the confidence interval for the unequal variances case, where
  the equal variances case should have been.  This has been fixed.
  * REGRESSION now recognises /STATISTICS=CI(x) which causes confidence
  intervals for the coefficients to be printed.
  * When DESCRIPTIVES calculates Z scores, it now omits cases filtered
  by the current FILTER settings.
  * PSPPIRE graphical user interface improvements.
  * System file related improvements.</changelog>
<changelog author="embar@super.lt" date="1415016000">- Update to 0.8.4:
  * Bug fixes.
  * More detailed changelog can be found here:
    http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1439899200">- Update to 0.8.5:
  * The FREQUENCIES and CROSSTABS commands can now generate barcharts.
  * The FACTOR command can now perform PROMAX rotations.
  * SPSS/PC+ system files are now supported on GET and other commands
    that read SPSS system files.  The pspp-convert program can now read
    SPSS/PC+ system files.  Writing the obsolete SPSS/PC+ system file
    format is not supported.
  * SYSFILE INFO can now read SPSS/PC+ system files and SPSS portable
    files.
  * FREQUENCIES: A bug was fixed where an assertion failure occured
    when an empty dataset was presented.
  * The GRAPH command is now available.  Initially it supports
    scatterplots and histograms.
  * The RND operator in expressions now supports additional operands
    for rounding to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1459684800">- Update to 0.10:
  * The QUICK CLUSTER command has a  /PRINT subcommand which shows
  the initial cluster centres and the final cluster membership of
  each case.  The clustering algorithm has also been updated, so
  as to produce better separated clusters.
  * If the DECIMAL character is set to COMMA then the ',' character
  will not be treated as a separator by DATA LIST.
  * The graphical user interface (psppire) has been changed as follows:
  - It now uses Gtk+ version 3 instead of version 2.
  - There is now a Graphs menu to access the GRAPH command.
  - The status of dialog box widgets are now preserved between calls
    to the same dialog box for the same dataset.
  - The dialog box for the Logistic Regression command will now
    infer that string variables or any varible with a "measure"
    of Nominal or Ordinal are to be treated as categorical variables
    and will generate syntax accordingly.
  * The pspp-convert utility can now decrypt encrypted syntax files.
  The encrypted syntax file format is unacceptably insecure, so to
  discourage its use PSPP and PSPPIRE do not directly read or write
  this format.
  * New commands:
  - SORT VARIABLES.
  * The following functions for transformation expressions are new:
  - REPLACE, for search-and-replace of one string with another.
  - STRUNC, to truncate a string and trim trailing spaces.
  - MEDIAN, to compute the median of its arguments.
  - The TRUNC function in expressions now supports additional arguments
    for truncating to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.
  * Various bug fixes.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1470225600">- Update to 0.10.2:
  * CROSSTABS implements a new COUNT subcommand to round case or cell
  weights.
  * Help will be opened as HTML in default browser if yelp
  is not available.
  * When plotting scatterplots with only one dataset (the simple case)
  the colour used for the dataset is now black. The previous default
  from the Tango palette was too faint to see easily.
  * The varible info dialog could previously only paste a single variable.
  Now it can paste multiple variables.
  * Bug fixes, including the following:
  - T-test with independent samples GUI crashed with string
    type variable as group variable.
  - The variable info dialog showed the previous selected variable
    superimposed with the currently selected one.
  - The GLM command did not properly deal with missing values. This
    has been fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1486382400">- Port to ncurses6 (instead of using the deprecated mcurses5):
  + export NCURSES_CONFIG=%{_bindir}/ncurses6-config if the binary
    exists. In case it does not, the default search algorithm of
    configure is being used, meaning ncurses5-config, followed by
    ncurses8-config.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501329600">- Add pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch
  to fix NULL Pointer dereference in ll_insert (bnc#1046997, CVE-2017-10792).
- Add pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch
  to fix  Integer overflow in the hash_int library (bnc#1046998, CVE-2017-10791).</changelog>

</package>
<package pkgid="302453dd9dc2cb377e1691428a369d3125365ddcbef868de75b8b9e6b58446ed" name="pspp-devel" arch="x86_64">
    <version epoch="0" ver="1.0.1" rel="8.1"/>

<changelog author="embar@super.lt" date="1282305600">- Update to 0.7.5-g7803d3</changelog>
<changelog author="embar@super.lt" date="1326196800">- Update to 0.7.8-gbc9098
- Fix compiling for openSUSE 12.1</changelog>
<changelog author="embar@super.lt" date="1364385600">- Update to 0.7.10</changelog>
<changelog author="embar@super.lt" date="1367928000">- merged 'psppsheet' branch</changelog>
<changelog author="embar@super.lt" date="1375358400">- Update to 0.8.0. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1390737600">- Update to 0.8.2. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1397131200">- Update to 0.8.2.1. Detailed changelog can be found here:
  http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="embar@super.lt" date="1398513600">- Update to 0.8.3:
  * Independent T-Tests displayed the standard error of the difference
  and the confidence interval for the unequal variances case, where
  the equal variances case should have been.  This has been fixed.
  * REGRESSION now recognises /STATISTICS=CI(x) which causes confidence
  intervals for the coefficients to be printed.
  * When DESCRIPTIVES calculates Z scores, it now omits cases filtered
  by the current FILTER settings.
  * PSPPIRE graphical user interface improvements.
  * System file related improvements.</changelog>
<changelog author="embar@super.lt" date="1415016000">- Update to 0.8.4:
  * Bug fixes.
  * More detailed changelog can be found here:
    http://git.savannah.gnu.org/cgit/pspp.git/tree/NEWS</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1439899200">- Update to 0.8.5:
  * The FREQUENCIES and CROSSTABS commands can now generate barcharts.
  * The FACTOR command can now perform PROMAX rotations.
  * SPSS/PC+ system files are now supported on GET and other commands
    that read SPSS system files.  The pspp-convert program can now read
    SPSS/PC+ system files.  Writing the obsolete SPSS/PC+ system file
    format is not supported.
  * SYSFILE INFO can now read SPSS/PC+ system files and SPSS portable
    files.
  * FREQUENCIES: A bug was fixed where an assertion failure occured
    when an empty dataset was presented.
  * The GRAPH command is now available.  Initially it supports
    scatterplots and histograms.
  * The RND operator in expressions now supports additional operands
    for rounding to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1459684800">- Update to 0.10:
  * The QUICK CLUSTER command has a  /PRINT subcommand which shows
  the initial cluster centres and the final cluster membership of
  each case.  The clustering algorithm has also been updated, so
  as to produce better separated clusters.
  * If the DECIMAL character is set to COMMA then the ',' character
  will not be treated as a separator by DATA LIST.
  * The graphical user interface (psppire) has been changed as follows:
  - It now uses Gtk+ version 3 instead of version 2.
  - There is now a Graphs menu to access the GRAPH command.
  - The status of dialog box widgets are now preserved between calls
    to the same dialog box for the same dataset.
  - The dialog box for the Logistic Regression command will now
    infer that string variables or any varible with a "measure"
    of Nominal or Ordinal are to be treated as categorical variables
    and will generate syntax accordingly.
  * The pspp-convert utility can now decrypt encrypted syntax files.
  The encrypted syntax file format is unacceptably insecure, so to
  discourage its use PSPP and PSPPIRE do not directly read or write
  this format.
  * New commands:
  - SORT VARIABLES.
  * The following functions for transformation expressions are new:
  - REPLACE, for search-and-replace of one string with another.
  - STRUNC, to truncate a string and trim trailing spaces.
  - MEDIAN, to compute the median of its arguments.
  - The TRUNC function in expressions now supports additional arguments
    for truncating to values other than integers and to indicate a level
    of rounding fuzz.  The default rounding fuzz may now be controlled
    and displayed with SET FUZZBITS and SHOW FUZZBITS, respectively.
  * Various bug fixes.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1470225600">- Update to 0.10.2:
  * CROSSTABS implements a new COUNT subcommand to round case or cell
  weights.
  * Help will be opened as HTML in default browser if yelp
  is not available.
  * When plotting scatterplots with only one dataset (the simple case)
  the colour used for the dataset is now black. The previous default
  from the Tango palette was too faint to see easily.
  * The varible info dialog could previously only paste a single variable.
  Now it can paste multiple variables.
  * Bug fixes, including the following:
  - T-test with independent samples GUI crashed with string
    type variable as group variable.
  - The variable info dialog showed the previous selected variable
    superimposed with the currently selected one.
  - The GLM command did not properly deal with missing values. This
    has been fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1486382400">- Port to ncurses6 (instead of using the deprecated mcurses5):
  + export NCURSES_CONFIG=%{_bindir}/ncurses6-config if the binary
    exists. In case it does not, the default search algorithm of
    configure is being used, meaning ncurses5-config, followed by
    ncurses8-config.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501329600">- Add pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch
  to fix NULL Pointer dereference in ll_insert (bnc#1046997, CVE-2017-10792).
- Add pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch
  to fix  Integer overflow in the hash_int library (bnc#1046998, CVE-2017-10791).</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1502625600">- Update to 0.11.0 version:
  * The REGRESSION command now has a /ORIGIN subcommand to perform
  regression through the origin.
  * The FACTOR command can now analyse matrix files prepared with MATRIX DATA.
  * The FACTOR command can now print the anti-image matrices.
  * The MATRIX DATA command has been added.
  * Some inappropriate properties in selection dialogs have been corrected.
  * A bug which could cause the HTML driver to go into a tight loop
  has been fixed.
  * An error in the FREQUENCIES procedure, where the word "Mean" was
  printed when "Variance" was appropriate has been fixed.
  * The ncurses library is no longer required or used.
  * A bug where the Mann-Whitney test would give misleading results
  if run on multiple variables and MISSING=ANALAYSIS was specified
  has been fixed.
  * Gtk+3.14.5 or later must now be used when building.
  * Graphical user interface changes:
  * There is a new menu: Edit|Options
  * The Non Parametric Statistics Menu has a new item: "K Independent Samples".
  * Dialog boxes can now be canceled using the &lt;Escape&gt; key.
  * The AUTORECODE command now accepts an optional / before INTO.
  * The short form of the VECTOR command can now create string variables.
  * Bug fixes, including fixes for CVE-2017-10791 and CVE-2017-10792.
- Drop pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch:
  Fix for CVE-2017-10792 included in PSPP 0.11.0 version upstream.
- Drop pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch:
  Fix for CVE-2017-10791 included in PSPP 0.11.0 version upstream.</changelog>
<changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504008000">- Update to 1.0.1 version:
  * Bug fixes, including fixes for CVE-2017-12958 (bnc#1054585),
    CVE-2017-12959 (bnc#1054588), CVE-2017-12960 (bnc#1054587), and
    CVE-2017-12961 (bnc#1054586).
  * Translation updates.</changelog>

</package>
<package pkgid="86efade2ca69ef9c0df9595286bcecf6658c7b7a2f720f3bfdbca5ebb8a12361" name="pullin-bcm43xx-firmware" arch="noarch">
    <version epoch="0" ver="1.0" rel="9.1"/>

<changelog author="bwiedemann@suse.com" date="1417348800">- initial version to pull in broadcom firmware (bnc#904025)</changelog>
<changelog author="bwiedemann@suse.com" date="1504612800">- Mark .service file as non-executible (boo#1053657)</changelog>

</package>
<package pkgid="a1f53354bab1b93a5d40baf0769960aead02df32efd50f7bfb39feed663b67dc" name="pullin-bcm43xx-firmware" arch="src">
    <version epoch="0" ver="1.0" rel="9.1"/>

<changelog author="bwiedemann@suse.com" date="1417348800">- initial version to pull in broadcom firmware (bnc#904025)</changelog>
<changelog author="bwiedemann@suse.com" date="1504612800">- Mark .service file as non-executible (boo#1053657)</changelog>

</package>
<package pkgid="09c65655a9721bd566196012b2c4459255dc1bf02c3cf38e604c01377b00c867" name="pulseaudio" arch="src">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="e99c197805dd230519154b7da84a1046ebbb466b2ace93b855fe1e5b9683a4be" name="pulseaudio" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="6684cb07acdf0d6593725ae1228ef91bb7a27413671792bbfb0b4f3c014ee47e" name="pulseaudio-bash-completion" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="36b40446abce17e4b3df5b30c267a7c2989aa84e680a55e4e7fd55f660e34590" name="pulseaudio-esound-compat" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="66f733dbc2ac73278fe8aeaf1e83444f79a1b629f3b430d5541e43975421a97c" name="pulseaudio-gdm-hooks" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="7e05b0e66e249da35344e069d532bb331f788e4f152bae323ff9725722a6247f" name="pulseaudio-lang" arch="noarch">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="ab804beac93122fb8a079a929b1add76ef2eb9d603932eba13cb150e3a195a56" name="pulseaudio-module-bluetooth" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="715590f01cef25c79b4ca862a06c0625db45c2812d641ae3edd0822b9f201cc7" name="pulseaudio-module-gconf" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="1552aec87760c6e087f0dbd46eed9e62c2efa628322ef4b33f616394e3000a1d" name="pulseaudio-module-jack" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="3fd8a42944602d36087adfb7fb2e29c8bfaa3318f903a1ecc124efc8c7d59bb6" name="pulseaudio-module-lirc" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="8731fbcadd0a21c504853f8d8882e730069a530c1223e117ab5e7cc3fd7e0187" name="pulseaudio-module-x11" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="c09cd7a85417ee183b873cd32d6bfe38f7de6ac45491a614698c8970d7b3d37f" name="pulseaudio-module-zeroconf" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="00ea3de871229e1bda993c4c0dc1d835c8d572ee49d8ad222229919c24b3069d" name="pulseaudio-system-wide" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="dbc55414c893b5b48183691fa61dd0077d063084a264641e165b7e655f5fa546" name="pulseaudio-utils" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="414f81a4ef376a0760b77e90522ce262926619ec9feab0cf7baf0f11877779d8" name="pulseaudio-utils-32bit" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="3f5cdd5e98bff36cbd837533e09d265f5335814e0af843ba1ef7455ff925824e" name="pulseaudio-zsh-completion" arch="x86_64">
    <version epoch="0" ver="9.0" rel="5.1"/>

<changelog author="oholecek@suse.com" date="1440763200">- spec-cleaner run</changelog>
<changelog author="oholecek@suse.com" date="1442145600">- Update to 7.0 RC2 (6.99.2)
  + better support for Creative SoundBlaster Omni Surround 5.1 USB
  + coverity scan fixes
  + bug fixes</changelog>
<changelog author="oholecek@suse.com" date="1443096000">- Update to 7.0</changelog>
<changelog author="tiwai@suse.de" date="1444910400">- Disable srbchannel again as a workaround for crashes on KDE
  (boo#950487):
  disable-srbchannel.patch</changelog>
<changelog author="tiwai@suse.de" date="1445083200">- Upstream fix patch for srb channel corruption (boo#950487):
  pstream-Fix-use-after-free-in-srb_callback.patch
- Re-enable srbchannel again</changelog>
<changelog author="tiwai@suse.de" date="1445342400">- Fix another alsa-mixer path for dock line out jack (boo#948979):
  0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- Fix the order of ports updates (boo#948979):
  0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1446206400">- Update to 7.1
  + Fix a crasher when using srbchannel
  + Fix a build system typo that caused symlinks to turn up in /
  + Make Xonar cards work better
  + Other minor  bug fixes and improvements
- remove 0003-alsa-mixer-Add-Dock-Line-Out-jack-handling-to-analog.patch
- remove 0002-alsa-mixer-Recognize-Dock-Line-Out-jack.patch
- remove pstream-Fix-use-after-free-in-srb_callback.patch</changelog>
<changelog author="meissner@suse.com" date="1446465600">- add libpulse-devel to baselibs.conf for use of 32bit biarch
  wine builds on x86_64</changelog>
<changelog author="oholecek@suse.com" date="1451822400">- Update to 8.0 RC1 (7.99.1)
- remove 0004-module-alsa-card-Report-available-ports-before-unava.patch</changelog>
<changelog author="oholecek@suse.com" date="1452600000">- Update to 8.0 RC2 (7.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1453464000">- Update to 8.0
  + Automatic routing more likely to change profile
  + OS X and NetBSD support improvements
  + Systemd journal logging for clients
  + New LFE balance programming interface
  + Module-dbus-protocol improvements
  + More flexible configuration file handling
  + pulsecore-8.0.so moved to a private directory
  + New script for measuring memory consumption
  + Various bug fixes and small improvements
  + https://wiki.freedesktop.org/www/Software/PulseAudio/Notes/8.0/</changelog>
<changelog author="hguo@suse.com" date="1456315200">- Disable flat-volumes by default with config disable_flat_volumes.conf
  Remedy for fate#310668.</changelog>
<changelog author="lmuelle@suse.com" date="1458561600">- Add pulse-%{drvver} and modules subdirectories to any module package;
  (boo#971960).</changelog>
<changelog author="tiwai@suse.de" date="1459771200">- Move libpulsedsp.so into pulseaudio-utils subpackage and add it
  to baselibs.conf so that 32bit compat lib is built (boo#968568);
  also recommends is added in libpulse0-32bit for easy installation
- Fix padsp script to support bi-arch libs (boo#968568) with
  padsp-biarch.patch
- Call bootstrap.sh for rebuilding properly with patches
- Drop the obsoleted disable-srbchannel.patch, which has been fixed
  in upstream already</changelog>
<changelog author="tiwai@suse.de" date="1460635200">- Use /etc/pulse/client.conf.d/50-system.conf as a system setup by
  setup-pulseaudio script instead of modifying the global config.</changelog>
<changelog author="oholecek@suse.com" date="1464350400">- Update to 9.0 RC1 (8.99.1)
  + memfd support (off by default)
  + refinements to automatic switching to HDMI outputs
  + improvements to our echo canceller (including the addition of
    beamforming)
  + lots of other changes
- Updated dependency webrtc-audio-processing &gt;= 0.2
- Do not mark shell completion includes as configs (solves some
  rpmlint warnings)</changelog>
<changelog author="oholecek@suse.com" date="1464523200">- Update to 9.0 RC2 (8.99.2)</changelog>
<changelog author="oholecek@suse.com" date="1466596800">- Update to 9.0
  * Automatic routing improvements
  * Beamforming and various other new features in the WebRTC echo
  canceller
  * Various improvements in module-role-cork and module-role-ducking
  * LFE remixing disabled by default
  * memfd-backed shared memory transport
  * Support for sample rates up to 384 kHz
  * webrtc-audio-processing dependency minimum version bumped to 0.2
  * Changed the C standard from C99 to C11.
- Updated depencency webrtc-audio-processing to 0.3</changelog>
<changelog author="zaitor@opensuse.org" date="1472990400">- Stop passing --disable-bluez5-ofono-headset when using bluez5.</changelog>
<changelog author="fcrozat@suse.com" date="1480507200">- Add alsa-reread-configuration-when-opening-new-devices.patch:
  ensure alsa configuration is re-read when hotplugging
  (fdo#54029 boo#1051714).</changelog>

</package>
<package pkgid="5843f5824e122f272ea299155f2a98ef7abf8afd809e53a605db7a89485b2a21" name="python-PyJWT" arch="noarch">
    <version epoch="0" ver="1.4.2" rel="5.1"/>

<changelog author="mcihar@suse.cz" date="1406116800">- initial packaging</changelog>
<changelog author="mcihar@suse.cz" date="1415275200">- Update to 0.3.0</changelog>
<changelog author="mcihar@suse.cz" date="1429531200">- Update to 1.1.0</changelog>
<changelog author="mcihar@suse.cz" date="1429531201">- Enable testsuite during build</changelog>
<changelog author="mcihar@suse.cz" date="1429704000">- Simplify dependencies (only python-cryptography is needed, pycrypto and ecdsa
  are just fallbacks whet is is not)</changelog>
<changelog author="mcihar@suse.cz" date="1429704001">- Include pycrypto and ecdsa in BuildRequires for complete test coverage
- Use setup.py test to execute testsuite</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436443200">- fix build on RHEL7, add PyJWT-1.1.0.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1439208000">- apply PyJWT-1.1.0.diff only on RHEL/CentOS</changelog>
<changelog author="toddrme2178@gmail.com" date="1446724800">- Update to 1.4.0
  + Fixed
  * Exclude Python cache files from PyPI releases.
  + Added
  * Added new options to require certain claims
    (require_nbf, require_iat, require_exp) and raise `MissingRequiredClaimError`
    if they are not present.
  * If `audience=` or `issuer=` is specified but the claim is not present,
    `MissingRequiredClaimError` is now raised instead of `InvalidAudienceError`
    and `InvalidIssuerError`
- Update to 1.3.0
  + Fixed
  * ECDSA (ES256, ES384, ES512) signatures are now being properly serialized [#158][158]
  * RSA-PSS (PS256, PS384, PS512) signatures now use the proper salt length for PSS padding. [#163][163]
  + Added
  * Added a new `jwt.get_unverified_header()` to parse and return the header portion of a token prior to signature verification.
  + Removed
  * Python 3.2 is no longer a supported platform. This version of Python is
    rarely used. Users affected by this should upgrade to 3.3+.
- Update to 1.2.0
  + Fixed
  * Added back `verify_expiration=` argument to `jwt.decode()` that was erroneously removed in [v1.1.0][1.1.0].
  + Changed
  * Refactored JWS-specific logic out of PyJWT and into PyJWS superclass. [#141][141]
  + Deprecated
  * `verify_expiration=` argument to `jwt.decode()` is now deprecated and will be removed in a future version. Use the `option=` argument instead.
- Rebase PyJWT-1.1.0.diff</changelog>
<changelog author="bwiedemann@suse.com" date="1451995200">- BuildRequire python-pytest-cov &gt;= 1.7</changelog>
<changelog author="tbechtold@suse.com" date="1472731200">- update to 1.4.2:
  - A PEM-formatted key encoded as bytes could cause a `TypeError` to be raised [#213][213]
  - Newer versions of Pytest could not detect warnings properly [#182][182]
  - Non-string 'kid' value now raises `InvalidTokenError` [#174][174]
  - `jwt.decode(None)` now gracefully fails with `InvalidTokenError` [#183][183]</changelog>
<changelog author="tbechtold@suse.com" date="1472731201">- Use https for Source url</changelog>
<changelog author="rjschwei@suse.com" date="1473940800">- Include in SLES 12 (FATE#321371, bsc#998103)</changelog>
<changelog author="jmatejek@suse.com" date="1507896000">- CVE-2017-12880-pkcs1-pubkey.patch: fix symmetric/asymmetric confusion
  when handling PKCS1 public keys (CVE-2017-12880, bsc#1054106)</changelog>

</package>
<package pkgid="0ec349170fb76b21e546c564247732c4cdfafb53758b2d49df5bd38c6f7a170c" name="python-PyJWT" arch="src">
    <version epoch="0" ver="1.4.2" rel="5.1"/>

<changelog author="mcihar@suse.cz" date="1406116800">- initial packaging</changelog>
<changelog author="mcihar@suse.cz" date="1415275200">- Update to 0.3.0</changelog>
<changelog author="mcihar@suse.cz" date="1429531200">- Update to 1.1.0</changelog>
<changelog author="mcihar@suse.cz" date="1429531201">- Enable testsuite during build</changelog>
<changelog author="mcihar@suse.cz" date="1429704000">- Simplify dependencies (only python-cryptography is needed, pycrypto and ecdsa
  are just fallbacks whet is is not)</changelog>
<changelog author="mcihar@suse.cz" date="1429704001">- Include pycrypto and ecdsa in BuildRequires for complete test coverage
- Use setup.py test to execute testsuite</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436443200">- fix build on RHEL7, add PyJWT-1.1.0.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1439208000">- apply PyJWT-1.1.0.diff only on RHEL/CentOS</changelog>
<changelog author="toddrme2178@gmail.com" date="1446724800">- Update to 1.4.0
  + Fixed
  * Exclude Python cache files from PyPI releases.
  + Added
  * Added new options to require certain claims
    (require_nbf, require_iat, require_exp) and raise `MissingRequiredClaimError`
    if they are not present.
  * If `audience=` or `issuer=` is specified but the claim is not present,
    `MissingRequiredClaimError` is now raised instead of `InvalidAudienceError`
    and `InvalidIssuerError`
- Update to 1.3.0
  + Fixed
  * ECDSA (ES256, ES384, ES512) signatures are now being properly serialized [#158][158]
  * RSA-PSS (PS256, PS384, PS512) signatures now use the proper salt length for PSS padding. [#163][163]
  + Added
  * Added a new `jwt.get_unverified_header()` to parse and return the header portion of a token prior to signature verification.
  + Removed
  * Python 3.2 is no longer a supported platform. This version of Python is
    rarely used. Users affected by this should upgrade to 3.3+.
- Update to 1.2.0
  + Fixed
  * Added back `verify_expiration=` argument to `jwt.decode()` that was erroneously removed in [v1.1.0][1.1.0].
  + Changed
  * Refactored JWS-specific logic out of PyJWT and into PyJWS superclass. [#141][141]
  + Deprecated
  * `verify_expiration=` argument to `jwt.decode()` is now deprecated and will be removed in a future version. Use the `option=` argument instead.
- Rebase PyJWT-1.1.0.diff</changelog>
<changelog author="bwiedemann@suse.com" date="1451995200">- BuildRequire python-pytest-cov &gt;= 1.7</changelog>
<changelog author="tbechtold@suse.com" date="1472731200">- update to 1.4.2:
  - A PEM-formatted key encoded as bytes could cause a `TypeError` to be raised [#213][213]
  - Newer versions of Pytest could not detect warnings properly [#182][182]
  - Non-string 'kid' value now raises `InvalidTokenError` [#174][174]
  - `jwt.decode(None)` now gracefully fails with `InvalidTokenError` [#183][183]</changelog>
<changelog author="tbechtold@suse.com" date="1472731201">- Use https for Source url</changelog>
<changelog author="rjschwei@suse.com" date="1473940800">- Include in SLES 12 (FATE#321371, bsc#998103)</changelog>
<changelog author="jmatejek@suse.com" date="1507896000">- CVE-2017-12880-pkcs1-pubkey.patch: fix symmetric/asymmetric confusion
  when handling PKCS1 public keys (CVE-2017-12880, bsc#1054106)</changelog>

</package>
<package pkgid="ed808cae49b4290703d0378ce138d6694375c4a23a4e3771ee104aee6cbeabd2" name="python-PyYAML" arch="src">
    <version epoch="0" ver="3.12" rel="10.1"/>

<changelog author="saschpe@suse.de" date="1328011200">- Initial version</changelog>
<changelog author="saschpe@suse.de" date="1355918400">- Build against libyaml to get the faster module</changelog>
<changelog author="p.drouand@gmail.com" date="1357819200">- Initial python3 support</changelog>
<changelog author="dvaleev@suse.com" date="1362484800">- increase file-descriptor-count for ppc to make tests happy</changelog>
<changelog author="ro@suse.de" date="1391601600">- increase file-descriptor-count for s390 to make tests happy</changelog>
<changelog author="aplanas@suse.com" date="1426075200">- Add patch to fix CVE-2014-9130 (bnc#921588) from
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772815</changelog>
<changelog author="mardnh@gmx.de" date="1472904000">- Update to 3.12
  - Adding an implicit resolver to a derived loader should not
    affect the base loader (fixes issue #57).
  - Uniform representation for OrderedDict? across different
    versions of Python (fixes issue #61).
  - Fixed comparison to None warning (closes issue #64).
- fix Source URL</changelog>
<changelog author="rjschwei@suse.com" date="1485864000">- Remove CVE-2014-9130-pyYAML.patch
  + Be aware, bifurcated history from OBS package due to CVE-2014-9130
    fix handled differently in SLE (patch) vs. openSUSE (version update to
    3.11)
- Version update related to bsc#1002895</changelog>

</package>
<package pkgid="7ae15a94b74cc9068f3b8bbca04a761347c98cb9b29822584975f39c4809f2e1" name="python-PyYAML" arch="x86_64">
    <version epoch="0" ver="3.12" rel="10.1"/>

<changelog author="saschpe@suse.de" date="1328011200">- Initial version</changelog>
<changelog author="saschpe@suse.de" date="1355918400">- Build against libyaml to get the faster module</changelog>
<changelog author="p.drouand@gmail.com" date="1357819200">- Initial python3 support</changelog>
<changelog author="dvaleev@suse.com" date="1362484800">- increase file-descriptor-count for ppc to make tests happy</changelog>
<changelog author="ro@suse.de" date="1391601600">- increase file-descriptor-count for s390 to make tests happy</changelog>
<changelog author="aplanas@suse.com" date="1426075200">- Add patch to fix CVE-2014-9130 (bnc#921588) from
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772815</changelog>
<changelog author="mardnh@gmx.de" date="1472904000">- Update to 3.12
  - Adding an implicit resolver to a derived loader should not
    affect the base loader (fixes issue #57).
  - Uniform representation for OrderedDict? across different
    versions of Python (fixes issue #61).
  - Fixed comparison to None warning (closes issue #64).
- fix Source URL</changelog>
<changelog author="rjschwei@suse.com" date="1485864000">- Remove CVE-2014-9130-pyYAML.patch
  + Be aware, bifurcated history from OBS package due to CVE-2014-9130
    fix handled differently in SLE (patch) vs. openSUSE (version update to
    3.11)
- Version update related to bsc#1002895</changelog>

</package>
<package pkgid="8378981157af40f62abd6f27d51fa0196d1f6f28abf4143186a41c104b0e772a" name="python-blinker" arch="noarch">
    <version epoch="0" ver="1.4" rel="8.1"/>

<changelog author="saschpe@suse.de" date="1316779200">- Initial version</changelog>
<changelog author="saschpe@suse.de" date="1340366400">- Update to version 1.2:
  + Added Signal.receiver_connected and
    Signal.receiver_disconnected per-Signal signals.
  + Deprecated the global 'receiver_connected' signal.
  + Verified Python 3.2 support (no changes needed!)</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1345032000">- python3 package added
- spec improved (files section)</changelog>
<changelog author="benoit.monin@gmx.fr" date="1424606400">- update to version 1.3:
  * The global signal stash behind blinker.signal() is now backed
    by a regular name-to-Signal dictionary
  * blinker.Namespace is now built on a regular dict
  * Signal.connect('text-sender') uses an alterate hashing strategy
    to avoid sharp edges in text identity.</changelog>
<changelog author="freitag@opensuse.org" date="1451822400">- update to version 1.4:
  * Verified Python 3.4 support (no changes needed)
  * Additional bookkeeping cleanup for non-ANY connections at disconnect
    time.
  * Added Signal._cleanup_bookeeping() to prune stale bookkeeping on
    demand</changelog>
<changelog author="freitag@opensuse.org" date="1451822401">- Fixed doc section in file list</changelog>
<changelog author="freitag@opensuse.org" date="1457697600">- use setup.py option to record file list for rpm package</changelog>
<changelog author="rjschwei@suse.com" date="1473940800">- Include in SLES 12 (FATE#321371, bsc#998103)</changelog>

</package>
<package pkgid="5ed4340121dbb593517c6e76cf941f30ead81be0e22704a3333b05bbee9c85a1" name="python-blinker" arch="src">
    <version epoch="0" ver="1.4" rel="8.1"/>

<changelog author="saschpe@suse.de" date="1316779200">- Initial version</changelog>
<changelog author="saschpe@suse.de" date="1340366400">- Update to version 1.2:
  + Added Signal.receiver_connected and
    Signal.receiver_disconnected per-Signal signals.
  + Deprecated the global 'receiver_connected' signal.
  + Verified Python 3.2 support (no changes needed!)</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1345032000">- python3 package added
- spec improved (files section)</changelog>
<changelog author="benoit.monin@gmx.fr" date="1424606400">- update to version 1.3:
  * The global signal stash behind blinker.signal() is now backed
    by a regular name-to-Signal dictionary
  * blinker.Namespace is now built on a regular dict
  * Signal.connect('text-sender') uses an alterate hashing strategy
    to avoid sharp edges in text identity.</changelog>
<changelog author="freitag@opensuse.org" date="1451822400">- update to version 1.4:
  * Verified Python 3.4 support (no changes needed)
  * Additional bookkeeping cleanup for non-ANY connections at disconnect
    time.
  * Added Signal._cleanup_bookeeping() to prune stale bookkeeping on
    demand</changelog>
<changelog author="freitag@opensuse.org" date="1451822401">- Fixed doc section in file list</changelog>
<changelog author="freitag@opensuse.org" date="1457697600">- use setup.py option to record file list for rpm package</changelog>
<changelog author="rjschwei@suse.com" date="1473940800">- Include in SLES 12 (FATE#321371, bsc#998103)</changelog>

</package>
<package pkgid="4205abdbef71731180965f0dd2f954f55384c3f067db2dafaf383d0d663743c0" name="python-boto" arch="noarch">
    <version epoch="0" ver="2.42.0" rel="10.2"/>

<changelog author="speilicke@suse.com" date="1387454400">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="rschweikert@suse.com" date="1388923200">- update to version 2.22.0:
  * Updated Auto Scaling to support the latest API. (commit 9984c4f)
  * Added the ability to alter response sizes in DynamoDB queries/scans.
    (issue 1949, commit 6761b01)
  * Fix string instance tests. (issue 1959, commit ee203bf)
  * Add missing parameters to get_spot_price_history method. (issue 1958,
    commit f635474)
  * Fix unicode string parameter handling in S3Connection. (issue 1954,
    issue 1952, commit 12e6b0c)
  * Fix typo in docstring for SSHClient.run. (issue 1953, commit 5263b20)
  * Properly handle getopt long options in s3put. (issue 1950, issue 1946,
    commit cf693ff)
  * Fixed a missed inheritance bug in mturk. (issue 1936, commit 0137f29)
  * Added cn-north-1 to regions. (commit 9c89de1)
  * Fixed threading issues related to datetime.strptime. (issue 1898,
    commit 2ef66c9)
  * Updated all the old-style inheritance calls. (issue 1918, issue 1936,
    issue 1937, commit 39a997f &amp; commit 607624f)
  * Add support for Elastic Transcoder pagination and new codecs (commit
    dcb1c5a)
  * Add support for new CloudTrail calling format (commit aeafe9b)
  * Update to the latest Support API (commit 45e1884)
  * Add support for arbitrarily large SQS messages stored in S3 via BigMessage.
    (issue 1917, commit e6cd665)
  * Add support for encoding_type to S3 (commit 6b2d967)
  * Add support for Elastic MapReduce tags (issue 1928, issue 1920,
    commit b9749c6, commit 8e4c595)
  * Add high level support for global secondary indexes in DynamoDB (issue
    1924, issue 1913, commit 32dac5b)
  * Add support for Elastic Beanstalk worker environments. (issue 1911,
    commit bbd4fbf)
  * Add support for OpsWorks IAM user permissions per stack (commit ac6e4e7)
  * Add support for SigV4 to S3 (commit deb9e18)
  * Add support for SigV4 to EC2 (commit bdebfe0)
  * Add support for SigV4 to ElastiCache (commit b892b45)
  * Add documentation describing account usage for multipart uploads in S3
    (commit af03d8d)
  * Update DesiredCapacity if AutoScalingGroup.desired_capacity is not None.
    (issue 1906, issue 1906, issue 1757, commit b6670ce)
  * Documentation: add Kinesis API reference (issue 1921, commit c169836)
  * Documentation: sriovNetSupport instance attribute (issue 1915, commit
    e1bafcc)
  * Update RDS documentation for API version: 2013-09-09 (issue 1914, commit
    fcf702a)
  * Switch all classes to new style classes which results in memory use
    improvements (commit ca36fa2)
  * Bug fix for IAM security credentials metadata URL. (issue 1912,
    issue 1908, issue 1907, commit f82e7a5)
  * Add support for Amazon Kinesis (commit d0b684e)
  * Add support for i2 instance types to EC2. (commit 0f5371f)
  * Add support for DynamoDB Global Secondary Indexes (commit 297cacb)
  * Add support for AWS Direct Connect. (issue 1894, issue 1894, commit 3cbca26)
  * Add option for sorting SDB dumps to sdbadmin. (issue 1888, issue 1888,
    commit 070e4f6)
  * Add a retry when EC2 metadata is returned as corrupt JSON. (issue 1883,
    issue 1883, issue 1868, commit 41470a0)
  * Added some missing attributes to DBInstance and DBSnapshot. (issue 1880,
    issue 1880, commit 2751dff)
  * Implement nonzero for DynamoDB Item to consider empty items falsey (issue
    1899, commit 808e550)
  * Remove dimensions from Metric.query() docstring. (issue 1901, issue 1901,
    commit ba6b8c7)
  * Make trailing slashes for EC2 metadata URLs explicit &amp; remove them from
    userdata requests. This fixes using boto for CloudStack (issue 1900,
    issue 1900, issue 1897, issue 1856, commit 5f4506e)
  * Fix the DynamoDB ?scan in? filter to compare the same attribute types in
    a list rather than using an attribute set. (issue 1896, issue 1896,
    commit 5fc59d6)
  * Updating Amazon ElastiCache parameters to be optional when creating a
    new cache cluster. (issue 1876, issue 1876, commit 342b8df)
  * Fix honor cooldown AutoScaling parameter serialization to prevent an
    exception and bad request. (issue 1895, issue 1895, issue 1892,
    commit fc4674f)
  * Fix ignored RDS backup_retention_period when value was 0. (issue 1887,
    issue 1887, issue 1886, commit a19eb14)
  * Use auth_handler to specify host header value including custom ports
    if possible, which are used by Eucalyptus. (issue 1862, issue 1862,
    commit ce6df03)
  * Fix documentation of launch config in Autoscaling Group. (issue 1881,
    issue 1881, commit 6f704d9)
  * typo: AIM -&gt; IAM (issue 1882, commit 7ea2d5c)
  * Add max results parameters to EC2 describe instances and describe tags.
    (issue 1873, issue 1873, commit ad8a64a)
  * Add support for RDS CopyDBSnapshot. (issue 1872, issue 1872,
    issue 1865, commit bffb758)
  * Update README.rst to link to ReadTheDocs changelogs. (issue 1869,
    commit 26f3dbe)
  * Delete the old changelog in favor of the README link to ReadTheDocs
    changelogs. (issue 1870, issue 1870, commit 32bc333)
  * Added missed notes about the cn-north-1 region. (commit 738c8cb)
  * Added the C3 family of EC2 instances. (issue 1938, commit 05b7482)
  * Documentation: sriovNetSupport instance attribute (issue 1915,
    commit e1bafcc)</changelog>
<changelog author="rschweikert@suse.com" date="1391601600">- update to version 2.24.0:
  + Load region and endpoint information from a JSON file (commit b9dbaad)
  + Return the x-amz-restore header with GET KEY and fix provider prefix.
    (issue 1990, commit 43e8e0a)
  + Make S3 key validation optional with the validate parameter (issue
    2013, issue 1996, commit fd6b632)
  + Adding new eu-west-1 and eu-west-2 endpoints for SES. (issue 2015,
    commit d5ef862, commit 56ba3e5)
  + Google Storage now uses new-style Python classes (issue 1927,
    commit 86c9f77)
  + Add support for step summary list to Elastic MapReduce (issue 2011,
    commit d3af158)
  + Added the M3 instance types. (issue 2012, commit 7c82f57)
  + Add credential profile configuration (issue 1979, commit e3ab708)
  + Add support for dead letter queues to SQS (commit 93c7d05)
    Make the Lifecycle Id optional and fix prefix=None in XML generation.
    (issue 2021, commit 362a04a)
  + Fix DynamoDB query limit bug (issue 2014, commit 7ecb3f7)
  + Add documentation about the version_id behavior of Key objects.
    (issue 2026, commit b6b242c)
  + Fixed typo in Table.create example (issue 2023, commit d81a660)
  + Adding a license/copyright header. (issue 2025, commit 26ded39)
  + Update the docstring for the SNS subscribe method (issue 2017,
    commit 4c806de)
  + Renamed unit test with duplicate name (issue 2016, commit c7bd0bd)
  + Use UTC instead of local time in test_refresh_credentials (issue 2020,
    commit b5a2eaf)
  + Fix missing security_token option in some connection classes (issue 1989,
    issue 1942, commit 2b72f32)
  + Fix listing S3 multipart uploads with some parameter combinations
    (issue 2000, commit 49045bc)
  + Fix elbadmin crash because of non-extant instances in load balancer
    (issue 2001, commit d47cc14)
  + Fix anonymous S3 fetch test case (issue 1988, issue 1992, commit 8fb1666)
  + Fix elbadmin boto import (issue 2002, commit 674c3a6)
  + Fixing SQS tutorial to correctly describe behavior of the write
    operation (issue 1986, commit 6147d86)
  + Fix various grammar mistakes (issue 1980, commit ada40b5)
  + Added pagination &amp; date range filtering to Glacier inventory options.
    (issue 1977, commit 402a305)
  + Added the ability to select the specific attributes to fetch in the
    scan &amp; get_item calls within DynamoDB v2. (issue 1945, issue 1972,
    commit f6451fb &amp; commit 96cd413)
  + Allow getting a security token from either an environment or configuration
    variable. (:issue:, :sha:)
  + Ported the has_item call from the original DynamoDB (v1) module to
    DynamoDB v2. (issue 1973, issue 1822, commit f96e9e3)
  + Added an associate_address_object method to EC2. (issue 1967, issue 1874,
    issue 1893, commit dd6180c)
  + Added a download_to_fileobj method to Glacier,similar to the S3 call of
    the same name. (issue 1960, issue 1941, commit 67266e5)
  + Added support for arbitrary dict inputs to MWS. (issue 1966, commit
    46f193f)
  + Made the usage of is/is not more consistent. (issue 1930, commit 8597c54)
  + Imported with_statement for old Python versions (issue 1975,
    commit a53a574)
  + Changed the Binary data object within DynamoDB to throw an error if
    an invalid data type is used. (issue 1963, issue 1956, commit e5d30c8)
  + Altered the integration tests to avoid connection errors to certain
    regions. (commit 2555b8a)
  + Changed the GCS resumable upload handler to save tracker files
    with protection 0600. (commit 7cb344c)
  + Clarified documentation around the list_metrics call in CloudFormation.
    (issue 1962, commit c996a72)
  + Added Tag to the Autoscale API docs. (issue 1964, commit 31118d9)
  + Updated the AWS Support documentation to the latest. (commit 29f9264)</changelog>
<changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- add patch fixGoogleStorageSupport.diff
  + addresses upstream issue 2105 by applying pull request 2112
  + this fixes the exception triggered by any gsutil command</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- add python-xml dependency</changelog>
<changelog author="rschweikert@suse.com" date="1393588800">- update to version 2.26.0:
  + Add support for Route53 API version 2013-04-01 (issue 2080,
    commit 600dcd0)
  + Add option to opt-in for EC2 SigV4 (issue 2074, commit 4d780bd)
  + Add Autoscale feature to get all adjustment types (issue 2058,
    issue 1538, commit b9c7e15)
  + Add Route53 unit tests (issue 2066, commit e859576)
  + Add a basic Route53 tutorial (issue 2060, commit f0ad46b)
  + Add Autoscale associated public IP to launch configuration
    (issue 2051, issue 2028, issue 2029, commit c58bda6)
  + Add option to pass VPC zone identifiers as a Python list (issue 2047,
    issue 1772, commit 07ef9e1)
  + Add RDS call to get all log files (issue 2040, issue 1994, commit 925b8cb)
  + Changed S3 get_bucket to use HEAD in place of GET. (issue 2078,
    issue 2082, commit 016be83)
  + Fix EMR?s describe_cluster_command. (issue 2034, commit 1c5621e)
  + Tutorial small code fix (issue 2072, commit 38e7db1)
  + Fix CloudFront string representation (issue 2069, commit 885c397)
  + Route53 doc cleanup (issue 2059, commit d2fc38e)
  + Fix MWS parsing of GetProductCategoriesForASIN response. (issue 2024,
    commit 0af08ce)
  + Fix SQS docs for get_queue_attributes (issue 2061, commit 1cdc326)
  + Don?t insert a ??? in URLs unless there is a query string (issue 2042,
    issue 1943, commit c15ce60)
  + Added support for MFA in STS AssumeRole. (commit 899810c)
  + Fixed how DynamoDB v2 works with Global Secondary Indexes. (issue 2122,
    commit f602c95)
  + Add request hooks and request logger. (issue 2125, commit e8b20fe)
  + Don?t pull the security token from the environment or config when a
    caller supplies the access key and secret. (issue 2123, commit 4df1694)
  + Read EvaluateTargetHealth from Route53 resource record set. (issue 2120,
    commit 0a97158)
  + Prevent implicit string decode in hmac-v4 handlers. (issue 2037,
    issue 2033, commit 8e56a5f)
  + Updated Datapipeline to include all current regions. (issue 2121,
    commit dff5e3e)
  + Bug fix for Google Storage generate_url authentication. (issue 2116,
    issue 2108, commit 5a50932)
  + Handle JSON error responses in BotoServerError. (issue 2113,
    issue 2077, commit 221085e)
  + Corrected a typo in SQS tutorial. (issue 2114, commit 7ed41f7)
  + Add CloudFormation template capabilities support. (issue 2111,
    issue 2075, commit 65a4323)
  + Add SWF layer1_decisions to docs. (issue 2110, issue 2062, commit 6039cc9)
  + Add support for request intervals in health checks. (issue 2109,
    commit 660b01a)
  + Added checks for invalid regions to the bin scripts (issue 2107,
    commit bbb9f1e)
  + Better error output for unknown region - (issue 2041, issue 1983,
    commit cd63f92)
  + Added certificate tests for CloudTrail. (issue 2106, commit a7e9b4c)
  + Updated Kinesis endpoints. (commit 7bd4b6e)
  + Finished implementation of RDS?s DescribeDBLogFiles. (issue 2084,
    commit f3c706c)
  + Added support for RDS log file downloading. (issue 2086, issue 1993,
    commit 4c51841)
  + Added some unit tests for CloudFront. (issue 2076, commit 6c46b1d)
  + GS should ignore restore_headers as they are never set. (issue 2067,
    commit f02aeb3)
  + Update CloudFormation to support the latest API. (issue 2101,
    commit ea1b1b6)
  + Added Route53 health checks. (issue 2054, commit 9028f7d)
  + Merge branch ?rds2? into develop Fixes #2097. (issue 2097, commit 6843c16)
  + Fix Param class convert method (issue 2094, commit 5cd4598)
  + Added support for Route53 aliasing. (issue 2096, commit df5fa40)
  + Removed the dependence on example.com within the Route53 tests.
    (issue 2098, commit 6ce9e0f)
  + Fixed has_item support in DynamoDB v2. (issue 2090, commit aada5d3)
  + Fix a little typo bug in the S3 tutorial. (issue 2088, commit c091d27)
- remove patch fixGoogleStorageSupport.diff, fix included</changelog>
<changelog author="rschweikert@suse.com" date="1393934400">- add patch boto_useSystemCerts.patch to support use of system suuplied
  certificates, patch accepted upstream https://github.com/boto/boto/pull/2139
- add a boto.cfg file to set boto to use the distro certs
- updates the doc to explain new "system" keyword in boto.cfg</changelog>
<changelog author="rschweikert@suse.com" date="1397649600">- add previously missing dependency for python-paramiko
- update to version 2.27.0
  + remove boto_useSystemCerts.patch, changes included in new version
  + Added support for AccessLog in ELB (issue 2150, commit 7aa35ea)
  + Added better BlockDeviceType deserialization in Autoscaling.
    (issue 2149, commit 04d29a5)
  + Updated CloudFormation documentation (issue 2147, commit 2535aca)
  + Updated Kinesis documentation (issue 2146, commit 01425dc)
  + Add optional bucket tags to lss3 output. (issue 2132, commit 0f35924)
  + Fix getting instance types for Eucalyptus 4.0. (issue 2118, commit 18dc07d)
  + Fixed how quoted strings are handled in SigV4 (issue 2142, commit 2467547)
  + Use system supplied certs without a bundle file (issue 2139, commit 70d15b8)
  + Fixed incorrect test failures in EC2 trim_snapshots (commit 1fa9df7)
  + Raise any exceptions that are tagSet not found (commit 56d7d3e)
  + Added request hook docs (issue 2129, commit 64eedce)
  + Fixed Route53 alias-healthcheck (issue 2126, commit 141077f)
  + Fixed Elastic IP association in EC2 (issue 2131, issue 1310, commit d75fdfa)
  + Fixed builds on Travis for installing dependencies (commit 5e84e30)
  + Support printing tags on buckets when listing buckets (commit c42a5dd)
  + PEP8/pyflakes/(some)pylint (commit 149175e)
  + updated doc explaining use of "system" keyword</changelog>
<changelog author="rschweikert@suse.com" date="1400155200">- update to version 2.28.0
  + Add support for SQS message attributes. (issue 2257, commit a04ca92)
  + Update DynamoDB to support query filters. (issue 2242, commit 141eb71)
  + Implement new Cloudsearch API 2013-01-01 as cloudsearch2 module
    (commit b0ababa)
  + Miscellaneous improvements to the MTurk CLI. (issue 2188, commit c213ff1)
  + Update MWS to latest API version and adds missing API calls.
    (issue 2203, issue 2201, commit 8adf720, commit 8d0a6a8)
  + Update EC2 register_image to expose an option which sets whether an
    instance store is deleted on termination. The default value is
    left as-is. (commit d295ee9)
  + Clarify that MTurkConnection.get_assignments attributes are actually
    strings. (issue 2187, issue 2176, commit 075636b)
  + Add support for ELB Connection Draining attribute.
    (issue 2174, issue 2173, commit 78fa43c)
  + Add support for setting failure threshold for Route53 health checks.
    (issue 2171, issue 2170, commit 15b812f)
  + Fix specification of Elastic Beanstalk tier parameter.
    (issue 2168, commit 4492e86)
  + Fixed part of roboto for euca2ools. (issue 2166, issue 1730,
    commit 63b7a34)
  + Fixed removing policies from listeners. (issue 2165, issue 1708,
    commit e5a2d9b)
  + Reintroduced the reverse fix for DDB. (issue 2163, commit 70ec722)
  + Several fixes to DynamoDB describe calls. (issue 2161, issue 1649,
    issue 1663, commit 84fb748)
  + Fixed how reverse works in DynamoDBv2. (issue 2160, issue 2070,
    issue 2115, commit afdd805)
  + Update Kinesis exceptions (issue 2159, issue 2153, commit 22c6751)
  + Fix ECS problem using new-style classes (issue 2103, commit dc466c7)
  + Add support for passing region info from SWF layer2 to layer1
    (issue 2137, commit 0dc8ce6)
  + Handle plus signs in S3 metadata (issue 2145, commit c2a0f95)
  + Fix Glacier vault date parsing (issue 2158, commit 9e7b132)
  + Fix Route53 evaluate target health bug. (issue 2157, commit 398bb62)
  + Removing obselete core directory. (issue 1987, commit 8e83292)
  + Improve IAM behavior in the cn-north-1 region. (issue 2152, commit 4050e70)
  + Add SetIdentityFeedbackForwardingEnabled and SetIdentityNotificationTopic
    for SES. (issue 2130, issue 2128, commit 83002d5)
  + Altered Route53 bin script to use UPSERT rather than CREATE.
    (issue 2151, commit 2cd20e7)
  + Documentation fix. (issue 2156, commit 7592a58)
  + Fix EC2 documentation typo (issue 2178, commit 2627843)
  + Update Boto configuration tutorial (issue 2191, commit f2a7a08)
  + Correct typo ?possile? ?&gt; ?possible?. (issue 2196, commit d228352)</changelog>
<changelog author="dmueller@suse.com" date="1402920000">- update to 2.29.1:
  + Fix crash when provider is google. (issue 2302, commit 33329d5888)
  + Fix connection pooling issue with CloudSearch (commit 82e83be12a)
  + Added support for shared credentials file.
  + Added support for EBS encryption. (issue 2282, commit d85a449)
  + Added GovCloud CloudFormation endpoint. (issue 2297, commit 0f75fb9)
  + Added new CloudTrail endpoints to endpoints.json. (issue 2269, commit 1168580)
  + Added ?name? param to documentation of ELB LoadBalancer. (issue 2291, commit 86e1174)
  + Fix typo in ELB docs. (issue 2294, commit 37aaa0f)
  + Fix typo in ELB tutorial. (issue 2290, commit 40a758a)
  + Fix OpsWorks connect_to_region exception. (issue 2288, commit 26729c7)
  + Fix timezones in CloudWatch date range example. (issue 2285, commit 138a6d0)
  + Fix description of param tags into rds2.create_db_subnet_group. (issue 2279, commit dc1037f)
  + Fix the incorrect name of a test case. (issue 2273, commit ee195a1)
  + Fix ?consistent? argument to boto.dynamodb2.table.Table.batch_get. (issue 2272, commit c432b09)
  + Update the wheel to be python 2 compatible only. (issue 2286, commit 6ad0b75)
  + Crate.io is no longer a package index. (issue 2289, commit 7f23de0)</changelog>
<changelog author="tbechtold@suse.com" date="1410609600">- update to 2.32.1:
  + DynamoDB (issue 2441, commit 0ef0466, issue 2473, commit 102c3b6,
    issue 2453)
  + CloudWatch Logs (issue 2448, commit 23cbcd1)
  + Support (issue 2406, commit 7b489a0)
  + Elastic Beanstalk (issue 2372, commit d45d00e)
  + CloudSearch (issue 2439, commit 25416f9, issue 2432, commit b17f2d9)
  + STS (issue 2435, commit 1c1239b)
  + SimpleDB (issue 2403, commit 604318d)
  + EC2 (issue 2424, commit 5e5dc4c)
  + VPC (issue 2399, commit 356da91)
  + OpsWorks (issue 2402, commit 68d15a5)
  + CloudWatch (issue 2400, commit a4d0a7a)
  + SWF (issue 2397, commit 6db918e)
  + MWS (issue 2385, commit 5347fbd)
  + ELB (issue 2384, commit 4dcc9be)
  + Elastic Transcoder (issue 2382, commit 40c5e35)
  + EMR (issue 2381, commit edf4020)
  + Route53 (issue 2359, commit 15514f7)
  + Glacier (issue 2357, commit a41042e)
  + RedShift (issue 2362, commit b8888cc)
  + CloudFront (issue 2355, commit f2f54b1)
  + ECS (issue 2364, commit ab84969)
  + Fix pylintrc to run with pylint/python 3. (issue 2366, commit 6292ab2)
  + SNS (issue 2365, commit 170f735)
  + AutoScaling (issue 2393, commit 6a78057)
  + Direct Connect (issue 2361, commit 8488d94)
  + CloudFormation (issue 2373, commit 9872f27)
  + IAM (issue 2358, commit 29ad3e3)
  + ElastiCache (issue 2356, commit 2880f91)
  + SES (issue 2354, commit 1db129e)
  + Fix S3 integration test on Py3. (issue 2466, commit f3eb4cd)
  + Use unittest.mock if exists. (issue 2451, commit cc58978)
  + Add tests/compat.py for test-only imports. (issue 2442, commit 556f3cf)
  + Add backward-compatible support for Python 3.3+ (S3, SQS, Kinesis, CloudTrail). (issue 2344, issue 677, commit b503f4b)
  + Add marker param to describe all ELBs. (issue 2433, commit 49af8b6)
  + Update .travis.yml to add pypy. (issue 2440, commit 4b8667c)
  + Add ?include_all_instances? support to ?get_all_instance_status?. (issue 2446, issue 2230, commit 5949012)
  + Support security tokens in configuration file profiles. (issue 2445, commit a16bcfd)
  + Singapore, Sydney and Tokyo are missing in Kinesis Region. (issue 2434, commit 723290d)
  + Add support for VPC connection peering. (issue 2438, commit 63c78a8)
  + Add seperate doc requirements. (issue 2412, commit 2922d89)
  + Route53 support IP health checks (issue 2195, commit 319d44e)
  + IPv6 support when making connections (issue 2380, commit 1e70179)
  + Support SNS message attributes (issue 2360, commit ec106bd)
  + Add ?attributes? argument to boto.dynamodb2.table.Table.batch_get. (issue 2276, commit fe67f43)
  + Add documentation for top-level S3 module. (issue 2379, commit db77546)
  + Prevent an infinite loop. (issue 2465, commit 71b795a)
  + Updated documentation for copy_image. (issue 2471, commit f9f683a)
  + Fixed #2464 added keyword ?detailed? to docs. (issue 2467, issue 2464, commit eb26fdc)
  + Retry installation commands on Travis CI. (issue 2457, commit a9e8057)
  + Fix for run_instances() network_interfaces argument documentation. (issue 2461, commit 798fd70)
  + pyami module: tidy up to meet PEP8 better. (issue 2460, commit e5a23ed)
  + Updating documentation on cloudsearch regions. (issue 2455, commit de284a4)
  + Fixing lost errors bug in cloudsearch2 commit implementation. (issue 2408, commit fedb937)
  + Import json from boto.compat for several modules. (issue 2450, commit 55e716b)
  + Relocate MWS requirements checks; closes #2304, #2314. (issue 2314, issue 2304, commit 6a8f98b)
  + Added support for creating EMR clusters with a ServiceRole. (issue 2389, commit 7693956)
  + Doc fix: doc_service instead of service on Deleting. (issue 2419, commit f7b7980)
  + Fix dummy value typo on aws_access_key_id. (issue 2418, commit fc2a212)
  + Fix typo; add test. (issue 2447, commit effa8a8)
  + Fix CloudWatch Logs docstring. (issue 2444, commit d4a2b02)
  + Fix S3 mock encoding bug (issue 2443, commit 8dca89b)
  + Skip the ETag header check in responce while using SSE-C encrpytion of S3. (issue 2368, commit 907fc6d)
  + Fix Beanstalk exception handling. (issue 2431, commit 40f4b5d)
  + EC2 UserData encoding fix (Full version of #1698). (issue 2396, issue 1698, commit 78300f1)
  + Fetch S3 key storage class on-demand. (issue 2404, commit 8c4cc67)
  + Added documentation for /manage/cmdshell.py. (issue 2395, commit 5a28d1c)
  + Remove redundant lines in auth.py. (issue 2374, commit 317e322)
  + Fix SWF continue_as_new_workflow_execution start_to_close_timeout. (issue 2378, commit 5101b06)
  + Fix StringIO imports and invocations. (issue 2390, commit 03952c7)
  + Fixed wrong call of urlparse. (issue 2387, commit 4935f67)
  + Update documentation on Valid Values for ses:SetIdentityNotificationTopic. (issue 2367, commit 3f5de0d)
  + Correct list_saml_providers to return all items. (issue 2338, commit 9e9427f)
  + Fixing ELB unit tests. Also did some PEP8 cleanup on ELB code. (issue 2352, commit 5220621)
  + Documentation updates. (issue 2353, commit c9233d4)
  + Add support for Amazon CloudWatch Logs. (commit 125c94d)
  + Add EC2 T2 instance types (commit 544f8925cb)
  + Add new regions for CloudTrail and Kinesis (commit 4d67e19914)
  + Fixed some code formatting and typo in SQS tutorial docs. (issue 2332, commit 08c8fed)
  + Documentation update ? Child workflows and poll API. (issue 2333, issue 2063, issue 2064, commit 4835676)
  + DOC Tutorial update for metrics and use of dimensions property. (issue 2340, issue 2336, commit 45fda90)
  + Let people know only EC2 supported for cloudwatch. (issue 2341, commit 98f03e2)
  + Add namespace to AccessControlPolicy xml representation. (issue 2342, commit ce07446)
  + Make ip_addr optional in Route53 HealthCheck. (issue 2345, commit 79c35ca)
  + Add S3 SigV4 Presigning. (issue 2349, commit 125c4ce)
  + Add missing route53 autodoc. (issue 2343, commit 6472811)
  + Adds scan_index_forward and limit to DynamoDB table query count. (issue 2184, commit 4b6d222)
  + Add method TaggedEC2Object.add_tags(). (issue 2259, commit eea5467)
  + Add network interface lookup to EC2. Add update/attach/detach methods to NetworkInterface object. (issue 2311, commit 4d44530)
  + Parse date/time in a locale independent manner. (issue 2317, issue 2271, commit 3b715e5)
  + Add documentation for delete_hosted_zone. (issue 2316, commit a0fdd39)
  + s/existance/existence/ (issue 2315, commit b8dfa1c)
  + Add multipart upload section to the S3 tutorial. (issue 2308, commit 99953d4)
  + Only attempt shared creds load if path is a file. (issue 2305, commit 0bffa3b)
- Add BotoCheatSheet.pdf</changelog>
<changelog author="rschweikert@suse.com" date="1414324800">- updated to 2.34.0 (bnc#902648)
  + Calculate sha_256 correctly for s3 (issue 2691, commit c0a001f)
  + Fix MTurk typo. (issue 2429, issue 2428, commit 9bfff19)
  + Add the ability to IAM to create a virtual mfa device.
    (issue 2675, commit 075d402)
  + PEP8 tidy up for several modules. (issue 2673, commit 38abbd9)
  + Fix s3 create multipart upload for sigv4 (issue 2684, commit fc73641)
  + Updated endpoints.json for cloudwatch logs to support more regions.
    (issue 2685, commit 5db2ea8)
  + Added TaggedEC2Object.remove_tags. (issue 2610, issue 2269, issue 2414,
    commit bce8fcf)
  + Fixed 403 error from url encoded User-Agent header (issue 2621,
    commit 2043a89)
  + Inserted break when iterating Route53 records. (issue 2631, commit 2de8716)
  + Fix typo in ELB ConnectionSettings attribute (issue 2602, commit 63bd53b)
  + PEP8 fixes to various common modules. (issue 2611, commit 44d873d)
  + Route Tables: Update describe_route_tables to support additional route
    types (VPC peering connection, NIC). (issue 2598, issue 2597,
    commit bbe8ce7)
  + Fix an error in Python 3 when creating launch configs. Enables
    AutoScaling unit tests to run by default. (issue 2591, commit fb4aeec)
  + Use svg instead of png to get better image quality. (issue 2588,
    commit 1de6b41)
  + STS now signs using sigv4. (issue 2627, commit 36b247f)
  + Added support for Amazon Cognito. (issue 2608, commit fa3a39e)
  + Fix bug where sigv4 custom metadata headers were presigned incorrectly.
    (issue 2604, commit 8853e8e)
  + Add some regions to cloudsearch (issue 2593, commit 8c6ea21)
  + fix typo in s3 tutorial (issue 2612, commit 92dd581)
  + Few typo in docstring (issue 2590, commit 0238747)
  + Add support for Amazon Route 53 Domains. (issue 2601, commit d149a87)
  + Support EBS encryption in BlockDeviceType. (issue 2587, issue 2480,
    commit 7a39741)
  + Fix a typo in auth.py: Bejing -&gt; Beijing. (issue 2585, commit 8525616)
  + Update boto/cacerts/cacerts.txt. (issue 2567, commit 02b836c)
  + route53 module: tidy up to meet PEP8 better. (issue 2571, commit 3a3e960)
  + iam module: tidy up to meet PEP8 better. (issue 2566, commit 3c83da9)
  + Assigning ACL ID to network_acl_id instead of route_table_id.
    (issue 2548, commit c017b02)
  + Avoid infinite loop with bucket listing and encoding_type=?url?.
    (issue 2562, issue 2561, commit 39cbcb5)
  + Use urllib timeout param instead of hacking socket global timeout.
    (issue 2560, issue 1935, commit c1dd1fb)
  + Support non-ascii unicode strings in _get_all_query_args.
    Fixes: #2558, #2559. (issue 2559, issue 2558, commit 069d04b)
  + Truncated Response Handling in Route53 ListResourceRecordSets.
    (issue 2542, commit 3ba380f)
  + Update to latest OpsWorks API. (issue 2547, commit ac2b311)
  + Better S3 key repr support for unicode. (issue 2525, issue 2516,
    commit 8198884)
  + Skip test when locale is missing. (issue 2554, issue 2540, commit 2b87583)
  + Add profile_name support to SQS. (issue 2459, commit 3837951)
  + Include test_endpoints.json in source distribution. (issue 2550,
    commit 7f907b7)
  + Pass along params in make_request for elastic transcoder api.
    (issue 2537, commit 964999e)
  + Support auth when headers contains bytes. (issue 2521, issue 2520,
    commit 885348d)
  + PEP8 style fixes for ElastiCache. (issue 2539, commit bd0d6db)
  + PEP8 style fixes for SES. (issue 2538, commit c620c43)
  + Update to latest Redshift API. (issue 2545, commit 9151092)
  + Update to latest support API. (issue 2541, issue 2426, commit 8cf1b52)
  + Uses file name as archive description when uploading to glacier.
    (issue 2535, issue 2528, commit 38478c1)
  + Fix the ec2.elb.listener.Listener class?s __getitem__ method.
    (issue 2533, commit 7b67f98)
  + Add recognized HTTP headers for S3 metadata. (issue 2477,
    issue 2050, commit c8c625a)
  + Fix class name for document. (issue 2530, commit 2f0e689)
  + Copy CloudSearch proxy settings to endpoint services. (issue 2513,
    commit 3cbbc21)
  + Merge branch ?develop? into cloudsearch2-proxy (commit 5b424db)
  + Add IAMer as an application built on boto. (issue 2515, commit 1f35224)
  + Fix Amazon Cognito links in docs (issue 2674, commit 7c28577)
  + fix ELB ConnectionSettings values in documentation (issue 2620,
    commit d2231a2)
  + Update count_slow documentation. (issue 2569, commit e926d2d)
  + Documents not found behavior of get_item(). (issue 2544, commit 9b9c1c4)
  + Doc updates for CloudSearch. (issue 2546, commit 9efebc2)</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430136000">- update to version 2.38.0:
  * Add support for Amazon Machine Learning
  * Fix issue with modify reserved instances for modifying instance
    type
- additional changes from version 2.37.0:
  * Update AWS CloudTrail to the latest API.
  * Add support for UsePreviousValue to CloudFormation UpdateStack.
  * Fix BOTH_PATH to work with Windows drives
  * Fix division calculation in S3 docs.
  * Add Boto 3 link in README.
  * Add more regions for configservice
  * Add ``eu-central-1`` endpoints (Frankfurt region) for IAM and
    Route53
  * Fix unit tests from hanging
  * Fixed wording in dynamodb tutorial
  * Update SWF objects to keep a consistent region name.
  * Print archive ID in glacier upload script.
  * Add some minor documentation for Route53 tutorial.
  * Add Amazon DynamoDB online indexing support on High level API
  * Ensure Content-Length header is a string.
  * Correct docs around overriding SGs on ELBs
  * Fix DynamoDB tests.
  * Fix region bug.
  * Fix import for ``boto.cloudhsm.layer1.CloudHSMConnection``.
- additional changes from version 2.36.0:
  * Add Amazon DynamoDB online indexing support.
  * Allow for binary to be passed to sqs message
  * Kinesis update
  * Fixed spelling of boto.awslambda package.
  * Add support for Amazon EC2 Container Service
  * Add support for CloudHSM
  * Add support for AWS Config
  * Add support for AWS CodeDeploy
  * Add support for AWS Lambda
  * Update both Cognito's to the latest APIs
  * Add sts for eu-central-1.
  * Update opsworks to latest API
  * Add AWS Key Managment Support
- additional changes from version 2.35.2:
  * Add support for new data types in DynamoDB.
  * Expose cloudformation `UsePreviousTemplate` parameter.
  * Fix documentation around using custom connections for DynamoDB
    tables.
  * Fixed bug that unable call query_2 after call describe method
    on dynamodb2 module.
- additional changes from version 2.35.1:
  * Check for results left after computing self._keys_left
- additional changes from version 2.35.0:
  * Add Amazon EC2 Classic Link support
  * Add query string to body for anon STS POST
  * Fix bug that prevented initializing a dynamo item from existing
    item
  * switchover-sigv4:   Add integ tests for sigv4 switchover
    Switch elb/ec2 over to signature version 4
  * Return SetStackPolicyResponse
  * Added ELB Attributes to docs.
  * Fix bug by using correct string joining syntax.
  * Fix SES get_identity_dkim_attributes when input length &gt; 1.
  * DynamoDB table batch_get fails to process all remaining results
    if single batch result is empty.
  * Added suppport for additional fields in EMR objects.
  * Pass version_id in copy if key is versioned.
  * Add support for SQS PurgeQueue operation.
  * Update documentation for launchconfig.
  * Remove unimplemented config param.
  * Add support for private hosted zones.
  * Fix Key.change_storage_class so that it obeys dst_bucket.
  * Fix for s3put host specification.
  * Improve handling of Glacier HTTP 204 responses.
  * Fix raising exception syntax in Python 3.
  * Privatezone: Adding unit/integration test coverage
  * Minor documentation/pep8 fixes.
  * Correct argument type in doc string.
  * Use exclusive start key to get all items from DynamoDB query.
  * Updated link to current config documentation.
  * Fix the SQS certificate error for region cn-north-1.
  * Adds support for getting health checker IP ranges from Route53.
  * fix: snap.create_volume documentation lists general purpose ssd
    Fixes @2774.
  * Fixed param type in get_contents_to_filename docstring.
  * Update DynamoDB local example to include fake access key id.
  * Added 'end' attribute to ReservedInstance.
  * Parse ClusterStatus?s StateChangeReason.
  * Adds SupportedProducts field to EMR JobFlow objects.
  * Fix EMR endpoint.
  * Detect old-style S3 URL for auto-sigv4.
  * Throw host warning for cloudsearch domain
  * Fix CloudSearch2 to work with IAM-based search and upload
    requests
  * iam: add support for Account Password Policy APIs
  * Handle sigv4 non-string header values properly
  * Url encode query string for pure query
- update project URL
- point source URL to pypi
- build python-boto-doc as a subpackage:
  * delete separate spec and changes file
  * merge entries of python-boto-doc.changes in python-boto.changes
  * add python-Sphinx as BuildRequires
  * break the dependency between the doc generation and boto
    by modifying Sphinx configuration file
- delete shebang of python file instead of setting them executable</changelog>
<changelog author="toddrme2178@gmail.com" date="1438171200">- Implement update-alternatives to allow for python 3 version,
  which is now supported upstream.
- specfile cleanups</changelog>
<changelog author="toddrme2178@gmail.com" date="1439467200">- Fix update-alternatives usage.</changelog>
<changelog author="rjschwei@suse.com" date="1452859200">- Add region_support.patch (bsc#962138)
  + Support new region ap-northeast-2
  + Add features to other reagions that are now supported by AWS</changelog>
<changelog author="toddrme2178@gmail.com" date="1454328000">- update to version 2.39.0:
  * Autodetect sigv4 for ap-northeast-2 (:issue:`3461`,
    :sha:`c2a17ce`)
  * Added support for ap-northeast-2 (:issue:`3454`, :sha:`c3c1ddd`)
  * Remove VeriSign Class 3 CA from trusted certs (:issue:`3450`,
    :sha:`8a025df`)
  * Add note about boto3 on all pages of boto docs (:sha:`9bd904c`)
  * Fix for listing EMR steps based on cluster_states filter
    (:issue:`3399`, :sha:`0f92f35`)
  * Fixed param name in set_contents_from_string docstring
    (:issue:`3420`, :sha:`e30297b`)
  * Closes #3441 Remove py3 test whitelist Update rds to pass on py3
    Update mturk to pass tests on py3 Update cloudsearchdomain tests
    to work with py3 (:issue:`3441`, :sha:`5b2f552`)
  * Run tests against py35 (:sha:`7d039d0`)
  * Fix Glacier test failure in python 3.5 due to MagicMock
    (:issue:`3412`, :sha:`d042f07`)
  * Undo log message change BF(PY3): use except ... as syntax instead
    of except ..., (:sha:`607cad7`)
  * Fix travis CI builds for PY3 (:issue:`3439`, :sha:`22ab610`)
  * Spelling fixes (:issue:`3425`, :sha:`f43bbbd`)
  * Fixed docs (:issue:`3401`, :sha:`4f66311`)
  * Add deprecation notice to emr methods (:issue:`3422`,
    :sha:`cee6159`)
  * Add some GovCloud endpoints (:issue:`3421`, :sha:`5afc068`)
- Remove upstream-included region_support.patch</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 2.42.0 (bsc#1002895)
  + Respect is_secure parameter in generate_url_sigv4 (commit 59ba28d)
  + Update MTurk API (issue 3563, commit 250d891)
- From 2.41.0
  + Update endpoints.json (issue 3564, commit 5e786b4)
  + Remove the broken link to PDF?s (issue 3562, commit 46ffb0c)
- From 2.40.0
  + ryansydnor-s3: Allow s3 bucket lifecycle policies with multiple
    transitions (commit c6d5af3)
  + Fixes upload parts for glacier (issue 3524, commit d1973a4)
  + pslawski-unicode-parse-qs: Move utility functions over to compat
    Add S3 integ test for non-ascii keys with sigv4 Fix quoting of tilde
    in S3 canonical_uri for sigv4 Parse unicode query string properly
    in Python 2 (issue 2844, commit 5092c6d)
  + ninchat-config-fix: Add __setstate__ to fix pickling test fail Add
    unit tests for config parsing Don?t access parser through
    __dict__ Config: Catch specific exceptions when wrapping ConfigParser
    methods Config: Don?t inherit from ConfigParser (issue 3474, commit c21aa54)</changelog>
<changelog author="dmueller@suse.com" date="1475755200">- fix requirements</changelog>

</package>
<package pkgid="f4e201dd204347e1768ac549cd2915ca0c9e866ba99ce8f1473b6ee98ce7e1e0" name="python-boto" arch="src">
    <version epoch="0" ver="2.42.0" rel="10.2"/>

<changelog author="speilicke@suse.com" date="1387454400">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="rschweikert@suse.com" date="1388923200">- update to version 2.22.0:
  * Updated Auto Scaling to support the latest API. (commit 9984c4f)
  * Added the ability to alter response sizes in DynamoDB queries/scans.
    (issue 1949, commit 6761b01)
  * Fix string instance tests. (issue 1959, commit ee203bf)
  * Add missing parameters to get_spot_price_history method. (issue 1958,
    commit f635474)
  * Fix unicode string parameter handling in S3Connection. (issue 1954,
    issue 1952, commit 12e6b0c)
  * Fix typo in docstring for SSHClient.run. (issue 1953, commit 5263b20)
  * Properly handle getopt long options in s3put. (issue 1950, issue 1946,
    commit cf693ff)
  * Fixed a missed inheritance bug in mturk. (issue 1936, commit 0137f29)
  * Added cn-north-1 to regions. (commit 9c89de1)
  * Fixed threading issues related to datetime.strptime. (issue 1898,
    commit 2ef66c9)
  * Updated all the old-style inheritance calls. (issue 1918, issue 1936,
    issue 1937, commit 39a997f &amp; commit 607624f)
  * Add support for Elastic Transcoder pagination and new codecs (commit
    dcb1c5a)
  * Add support for new CloudTrail calling format (commit aeafe9b)
  * Update to the latest Support API (commit 45e1884)
  * Add support for arbitrarily large SQS messages stored in S3 via BigMessage.
    (issue 1917, commit e6cd665)
  * Add support for encoding_type to S3 (commit 6b2d967)
  * Add support for Elastic MapReduce tags (issue 1928, issue 1920,
    commit b9749c6, commit 8e4c595)
  * Add high level support for global secondary indexes in DynamoDB (issue
    1924, issue 1913, commit 32dac5b)
  * Add support for Elastic Beanstalk worker environments. (issue 1911,
    commit bbd4fbf)
  * Add support for OpsWorks IAM user permissions per stack (commit ac6e4e7)
  * Add support for SigV4 to S3 (commit deb9e18)
  * Add support for SigV4 to EC2 (commit bdebfe0)
  * Add support for SigV4 to ElastiCache (commit b892b45)
  * Add documentation describing account usage for multipart uploads in S3
    (commit af03d8d)
  * Update DesiredCapacity if AutoScalingGroup.desired_capacity is not None.
    (issue 1906, issue 1906, issue 1757, commit b6670ce)
  * Documentation: add Kinesis API reference (issue 1921, commit c169836)
  * Documentation: sriovNetSupport instance attribute (issue 1915, commit
    e1bafcc)
  * Update RDS documentation for API version: 2013-09-09 (issue 1914, commit
    fcf702a)
  * Switch all classes to new style classes which results in memory use
    improvements (commit ca36fa2)
  * Bug fix for IAM security credentials metadata URL. (issue 1912,
    issue 1908, issue 1907, commit f82e7a5)
  * Add support for Amazon Kinesis (commit d0b684e)
  * Add support for i2 instance types to EC2. (commit 0f5371f)
  * Add support for DynamoDB Global Secondary Indexes (commit 297cacb)
  * Add support for AWS Direct Connect. (issue 1894, issue 1894, commit 3cbca26)
  * Add option for sorting SDB dumps to sdbadmin. (issue 1888, issue 1888,
    commit 070e4f6)
  * Add a retry when EC2 metadata is returned as corrupt JSON. (issue 1883,
    issue 1883, issue 1868, commit 41470a0)
  * Added some missing attributes to DBInstance and DBSnapshot. (issue 1880,
    issue 1880, commit 2751dff)
  * Implement nonzero for DynamoDB Item to consider empty items falsey (issue
    1899, commit 808e550)
  * Remove dimensions from Metric.query() docstring. (issue 1901, issue 1901,
    commit ba6b8c7)
  * Make trailing slashes for EC2 metadata URLs explicit &amp; remove them from
    userdata requests. This fixes using boto for CloudStack (issue 1900,
    issue 1900, issue 1897, issue 1856, commit 5f4506e)
  * Fix the DynamoDB ?scan in? filter to compare the same attribute types in
    a list rather than using an attribute set. (issue 1896, issue 1896,
    commit 5fc59d6)
  * Updating Amazon ElastiCache parameters to be optional when creating a
    new cache cluster. (issue 1876, issue 1876, commit 342b8df)
  * Fix honor cooldown AutoScaling parameter serialization to prevent an
    exception and bad request. (issue 1895, issue 1895, issue 1892,
    commit fc4674f)
  * Fix ignored RDS backup_retention_period when value was 0. (issue 1887,
    issue 1887, issue 1886, commit a19eb14)
  * Use auth_handler to specify host header value including custom ports
    if possible, which are used by Eucalyptus. (issue 1862, issue 1862,
    commit ce6df03)
  * Fix documentation of launch config in Autoscaling Group. (issue 1881,
    issue 1881, commit 6f704d9)
  * typo: AIM -&gt; IAM (issue 1882, commit 7ea2d5c)
  * Add max results parameters to EC2 describe instances and describe tags.
    (issue 1873, issue 1873, commit ad8a64a)
  * Add support for RDS CopyDBSnapshot. (issue 1872, issue 1872,
    issue 1865, commit bffb758)
  * Update README.rst to link to ReadTheDocs changelogs. (issue 1869,
    commit 26f3dbe)
  * Delete the old changelog in favor of the README link to ReadTheDocs
    changelogs. (issue 1870, issue 1870, commit 32bc333)
  * Added missed notes about the cn-north-1 region. (commit 738c8cb)
  * Added the C3 family of EC2 instances. (issue 1938, commit 05b7482)
  * Documentation: sriovNetSupport instance attribute (issue 1915,
    commit e1bafcc)</changelog>
<changelog author="rschweikert@suse.com" date="1391601600">- update to version 2.24.0:
  + Load region and endpoint information from a JSON file (commit b9dbaad)
  + Return the x-amz-restore header with GET KEY and fix provider prefix.
    (issue 1990, commit 43e8e0a)
  + Make S3 key validation optional with the validate parameter (issue
    2013, issue 1996, commit fd6b632)
  + Adding new eu-west-1 and eu-west-2 endpoints for SES. (issue 2015,
    commit d5ef862, commit 56ba3e5)
  + Google Storage now uses new-style Python classes (issue 1927,
    commit 86c9f77)
  + Add support for step summary list to Elastic MapReduce (issue 2011,
    commit d3af158)
  + Added the M3 instance types. (issue 2012, commit 7c82f57)
  + Add credential profile configuration (issue 1979, commit e3ab708)
  + Add support for dead letter queues to SQS (commit 93c7d05)
    Make the Lifecycle Id optional and fix prefix=None in XML generation.
    (issue 2021, commit 362a04a)
  + Fix DynamoDB query limit bug (issue 2014, commit 7ecb3f7)
  + Add documentation about the version_id behavior of Key objects.
    (issue 2026, commit b6b242c)
  + Fixed typo in Table.create example (issue 2023, commit d81a660)
  + Adding a license/copyright header. (issue 2025, commit 26ded39)
  + Update the docstring for the SNS subscribe method (issue 2017,
    commit 4c806de)
  + Renamed unit test with duplicate name (issue 2016, commit c7bd0bd)
  + Use UTC instead of local time in test_refresh_credentials (issue 2020,
    commit b5a2eaf)
  + Fix missing security_token option in some connection classes (issue 1989,
    issue 1942, commit 2b72f32)
  + Fix listing S3 multipart uploads with some parameter combinations
    (issue 2000, commit 49045bc)
  + Fix elbadmin crash because of non-extant instances in load balancer
    (issue 2001, commit d47cc14)
  + Fix anonymous S3 fetch test case (issue 1988, issue 1992, commit 8fb1666)
  + Fix elbadmin boto import (issue 2002, commit 674c3a6)
  + Fixing SQS tutorial to correctly describe behavior of the write
    operation (issue 1986, commit 6147d86)
  + Fix various grammar mistakes (issue 1980, commit ada40b5)
  + Added pagination &amp; date range filtering to Glacier inventory options.
    (issue 1977, commit 402a305)
  + Added the ability to select the specific attributes to fetch in the
    scan &amp; get_item calls within DynamoDB v2. (issue 1945, issue 1972,
    commit f6451fb &amp; commit 96cd413)
  + Allow getting a security token from either an environment or configuration
    variable. (:issue:, :sha:)
  + Ported the has_item call from the original DynamoDB (v1) module to
    DynamoDB v2. (issue 1973, issue 1822, commit f96e9e3)
  + Added an associate_address_object method to EC2. (issue 1967, issue 1874,
    issue 1893, commit dd6180c)
  + Added a download_to_fileobj method to Glacier,similar to the S3 call of
    the same name. (issue 1960, issue 1941, commit 67266e5)
  + Added support for arbitrary dict inputs to MWS. (issue 1966, commit
    46f193f)
  + Made the usage of is/is not more consistent. (issue 1930, commit 8597c54)
  + Imported with_statement for old Python versions (issue 1975,
    commit a53a574)
  + Changed the Binary data object within DynamoDB to throw an error if
    an invalid data type is used. (issue 1963, issue 1956, commit e5d30c8)
  + Altered the integration tests to avoid connection errors to certain
    regions. (commit 2555b8a)
  + Changed the GCS resumable upload handler to save tracker files
    with protection 0600. (commit 7cb344c)
  + Clarified documentation around the list_metrics call in CloudFormation.
    (issue 1962, commit c996a72)
  + Added Tag to the Autoscale API docs. (issue 1964, commit 31118d9)
  + Updated the AWS Support documentation to the latest. (commit 29f9264)</changelog>
<changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- add patch fixGoogleStorageSupport.diff
  + addresses upstream issue 2105 by applying pull request 2112
  + this fixes the exception triggered by any gsutil command</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- add python-xml dependency</changelog>
<changelog author="rschweikert@suse.com" date="1393588800">- update to version 2.26.0:
  + Add support for Route53 API version 2013-04-01 (issue 2080,
    commit 600dcd0)
  + Add option to opt-in for EC2 SigV4 (issue 2074, commit 4d780bd)
  + Add Autoscale feature to get all adjustment types (issue 2058,
    issue 1538, commit b9c7e15)
  + Add Route53 unit tests (issue 2066, commit e859576)
  + Add a basic Route53 tutorial (issue 2060, commit f0ad46b)
  + Add Autoscale associated public IP to launch configuration
    (issue 2051, issue 2028, issue 2029, commit c58bda6)
  + Add option to pass VPC zone identifiers as a Python list (issue 2047,
    issue 1772, commit 07ef9e1)
  + Add RDS call to get all log files (issue 2040, issue 1994, commit 925b8cb)
  + Changed S3 get_bucket to use HEAD in place of GET. (issue 2078,
    issue 2082, commit 016be83)
  + Fix EMR?s describe_cluster_command. (issue 2034, commit 1c5621e)
  + Tutorial small code fix (issue 2072, commit 38e7db1)
  + Fix CloudFront string representation (issue 2069, commit 885c397)
  + Route53 doc cleanup (issue 2059, commit d2fc38e)
  + Fix MWS parsing of GetProductCategoriesForASIN response. (issue 2024,
    commit 0af08ce)
  + Fix SQS docs for get_queue_attributes (issue 2061, commit 1cdc326)
  + Don?t insert a ??? in URLs unless there is a query string (issue 2042,
    issue 1943, commit c15ce60)
  + Added support for MFA in STS AssumeRole. (commit 899810c)
  + Fixed how DynamoDB v2 works with Global Secondary Indexes. (issue 2122,
    commit f602c95)
  + Add request hooks and request logger. (issue 2125, commit e8b20fe)
  + Don?t pull the security token from the environment or config when a
    caller supplies the access key and secret. (issue 2123, commit 4df1694)
  + Read EvaluateTargetHealth from Route53 resource record set. (issue 2120,
    commit 0a97158)
  + Prevent implicit string decode in hmac-v4 handlers. (issue 2037,
    issue 2033, commit 8e56a5f)
  + Updated Datapipeline to include all current regions. (issue 2121,
    commit dff5e3e)
  + Bug fix for Google Storage generate_url authentication. (issue 2116,
    issue 2108, commit 5a50932)
  + Handle JSON error responses in BotoServerError. (issue 2113,
    issue 2077, commit 221085e)
  + Corrected a typo in SQS tutorial. (issue 2114, commit 7ed41f7)
  + Add CloudFormation template capabilities support. (issue 2111,
    issue 2075, commit 65a4323)
  + Add SWF layer1_decisions to docs. (issue 2110, issue 2062, commit 6039cc9)
  + Add support for request intervals in health checks. (issue 2109,
    commit 660b01a)
  + Added checks for invalid regions to the bin scripts (issue 2107,
    commit bbb9f1e)
  + Better error output for unknown region - (issue 2041, issue 1983,
    commit cd63f92)
  + Added certificate tests for CloudTrail. (issue 2106, commit a7e9b4c)
  + Updated Kinesis endpoints. (commit 7bd4b6e)
  + Finished implementation of RDS?s DescribeDBLogFiles. (issue 2084,
    commit f3c706c)
  + Added support for RDS log file downloading. (issue 2086, issue 1993,
    commit 4c51841)
  + Added some unit tests for CloudFront. (issue 2076, commit 6c46b1d)
  + GS should ignore restore_headers as they are never set. (issue 2067,
    commit f02aeb3)
  + Update CloudFormation to support the latest API. (issue 2101,
    commit ea1b1b6)
  + Added Route53 health checks. (issue 2054, commit 9028f7d)
  + Merge branch ?rds2? into develop Fixes #2097. (issue 2097, commit 6843c16)
  + Fix Param class convert method (issue 2094, commit 5cd4598)
  + Added support for Route53 aliasing. (issue 2096, commit df5fa40)
  + Removed the dependence on example.com within the Route53 tests.
    (issue 2098, commit 6ce9e0f)
  + Fixed has_item support in DynamoDB v2. (issue 2090, commit aada5d3)
  + Fix a little typo bug in the S3 tutorial. (issue 2088, commit c091d27)
- remove patch fixGoogleStorageSupport.diff, fix included</changelog>
<changelog author="rschweikert@suse.com" date="1393934400">- add patch boto_useSystemCerts.patch to support use of system suuplied
  certificates, patch accepted upstream https://github.com/boto/boto/pull/2139
- add a boto.cfg file to set boto to use the distro certs
- updates the doc to explain new "system" keyword in boto.cfg</changelog>
<changelog author="rschweikert@suse.com" date="1397649600">- add previously missing dependency for python-paramiko
- update to version 2.27.0
  + remove boto_useSystemCerts.patch, changes included in new version
  + Added support for AccessLog in ELB (issue 2150, commit 7aa35ea)
  + Added better BlockDeviceType deserialization in Autoscaling.
    (issue 2149, commit 04d29a5)
  + Updated CloudFormation documentation (issue 2147, commit 2535aca)
  + Updated Kinesis documentation (issue 2146, commit 01425dc)
  + Add optional bucket tags to lss3 output. (issue 2132, commit 0f35924)
  + Fix getting instance types for Eucalyptus 4.0. (issue 2118, commit 18dc07d)
  + Fixed how quoted strings are handled in SigV4 (issue 2142, commit 2467547)
  + Use system supplied certs without a bundle file (issue 2139, commit 70d15b8)
  + Fixed incorrect test failures in EC2 trim_snapshots (commit 1fa9df7)
  + Raise any exceptions that are tagSet not found (commit 56d7d3e)
  + Added request hook docs (issue 2129, commit 64eedce)
  + Fixed Route53 alias-healthcheck (issue 2126, commit 141077f)
  + Fixed Elastic IP association in EC2 (issue 2131, issue 1310, commit d75fdfa)
  + Fixed builds on Travis for installing dependencies (commit 5e84e30)
  + Support printing tags on buckets when listing buckets (commit c42a5dd)
  + PEP8/pyflakes/(some)pylint (commit 149175e)
  + updated doc explaining use of "system" keyword</changelog>
<changelog author="rschweikert@suse.com" date="1400155200">- update to version 2.28.0
  + Add support for SQS message attributes. (issue 2257, commit a04ca92)
  + Update DynamoDB to support query filters. (issue 2242, commit 141eb71)
  + Implement new Cloudsearch API 2013-01-01 as cloudsearch2 module
    (commit b0ababa)
  + Miscellaneous improvements to the MTurk CLI. (issue 2188, commit c213ff1)
  + Update MWS to latest API version and adds missing API calls.
    (issue 2203, issue 2201, commit 8adf720, commit 8d0a6a8)
  + Update EC2 register_image to expose an option which sets whether an
    instance store is deleted on termination. The default value is
    left as-is. (commit d295ee9)
  + Clarify that MTurkConnection.get_assignments attributes are actually
    strings. (issue 2187, issue 2176, commit 075636b)
  + Add support for ELB Connection Draining attribute.
    (issue 2174, issue 2173, commit 78fa43c)
  + Add support for setting failure threshold for Route53 health checks.
    (issue 2171, issue 2170, commit 15b812f)
  + Fix specification of Elastic Beanstalk tier parameter.
    (issue 2168, commit 4492e86)
  + Fixed part of roboto for euca2ools. (issue 2166, issue 1730,
    commit 63b7a34)
  + Fixed removing policies from listeners. (issue 2165, issue 1708,
    commit e5a2d9b)
  + Reintroduced the reverse fix for DDB. (issue 2163, commit 70ec722)
  + Several fixes to DynamoDB describe calls. (issue 2161, issue 1649,
    issue 1663, commit 84fb748)
  + Fixed how reverse works in DynamoDBv2. (issue 2160, issue 2070,
    issue 2115, commit afdd805)
  + Update Kinesis exceptions (issue 2159, issue 2153, commit 22c6751)
  + Fix ECS problem using new-style classes (issue 2103, commit dc466c7)
  + Add support for passing region info from SWF layer2 to layer1
    (issue 2137, commit 0dc8ce6)
  + Handle plus signs in S3 metadata (issue 2145, commit c2a0f95)
  + Fix Glacier vault date parsing (issue 2158, commit 9e7b132)
  + Fix Route53 evaluate target health bug. (issue 2157, commit 398bb62)
  + Removing obselete core directory. (issue 1987, commit 8e83292)
  + Improve IAM behavior in the cn-north-1 region. (issue 2152, commit 4050e70)
  + Add SetIdentityFeedbackForwardingEnabled and SetIdentityNotificationTopic
    for SES. (issue 2130, issue 2128, commit 83002d5)
  + Altered Route53 bin script to use UPSERT rather than CREATE.
    (issue 2151, commit 2cd20e7)
  + Documentation fix. (issue 2156, commit 7592a58)
  + Fix EC2 documentation typo (issue 2178, commit 2627843)
  + Update Boto configuration tutorial (issue 2191, commit f2a7a08)
  + Correct typo ?possile? ?&gt; ?possible?. (issue 2196, commit d228352)</changelog>
<changelog author="dmueller@suse.com" date="1402920000">- update to 2.29.1:
  + Fix crash when provider is google. (issue 2302, commit 33329d5888)
  + Fix connection pooling issue with CloudSearch (commit 82e83be12a)
  + Added support for shared credentials file.
  + Added support for EBS encryption. (issue 2282, commit d85a449)
  + Added GovCloud CloudFormation endpoint. (issue 2297, commit 0f75fb9)
  + Added new CloudTrail endpoints to endpoints.json. (issue 2269, commit 1168580)
  + Added ?name? param to documentation of ELB LoadBalancer. (issue 2291, commit 86e1174)
  + Fix typo in ELB docs. (issue 2294, commit 37aaa0f)
  + Fix typo in ELB tutorial. (issue 2290, commit 40a758a)
  + Fix OpsWorks connect_to_region exception. (issue 2288, commit 26729c7)
  + Fix timezones in CloudWatch date range example. (issue 2285, commit 138a6d0)
  + Fix description of param tags into rds2.create_db_subnet_group. (issue 2279, commit dc1037f)
  + Fix the incorrect name of a test case. (issue 2273, commit ee195a1)
  + Fix ?consistent? argument to boto.dynamodb2.table.Table.batch_get. (issue 2272, commit c432b09)
  + Update the wheel to be python 2 compatible only. (issue 2286, commit 6ad0b75)
  + Crate.io is no longer a package index. (issue 2289, commit 7f23de0)</changelog>
<changelog author="tbechtold@suse.com" date="1410609600">- update to 2.32.1:
  + DynamoDB (issue 2441, commit 0ef0466, issue 2473, commit 102c3b6,
    issue 2453)
  + CloudWatch Logs (issue 2448, commit 23cbcd1)
  + Support (issue 2406, commit 7b489a0)
  + Elastic Beanstalk (issue 2372, commit d45d00e)
  + CloudSearch (issue 2439, commit 25416f9, issue 2432, commit b17f2d9)
  + STS (issue 2435, commit 1c1239b)
  + SimpleDB (issue 2403, commit 604318d)
  + EC2 (issue 2424, commit 5e5dc4c)
  + VPC (issue 2399, commit 356da91)
  + OpsWorks (issue 2402, commit 68d15a5)
  + CloudWatch (issue 2400, commit a4d0a7a)
  + SWF (issue 2397, commit 6db918e)
  + MWS (issue 2385, commit 5347fbd)
  + ELB (issue 2384, commit 4dcc9be)
  + Elastic Transcoder (issue 2382, commit 40c5e35)
  + EMR (issue 2381, commit edf4020)
  + Route53 (issue 2359, commit 15514f7)
  + Glacier (issue 2357, commit a41042e)
  + RedShift (issue 2362, commit b8888cc)
  + CloudFront (issue 2355, commit f2f54b1)
  + ECS (issue 2364, commit ab84969)
  + Fix pylintrc to run with pylint/python 3. (issue 2366, commit 6292ab2)
  + SNS (issue 2365, commit 170f735)
  + AutoScaling (issue 2393, commit 6a78057)
  + Direct Connect (issue 2361, commit 8488d94)
  + CloudFormation (issue 2373, commit 9872f27)
  + IAM (issue 2358, commit 29ad3e3)
  + ElastiCache (issue 2356, commit 2880f91)
  + SES (issue 2354, commit 1db129e)
  + Fix S3 integration test on Py3. (issue 2466, commit f3eb4cd)
  + Use unittest.mock if exists. (issue 2451, commit cc58978)
  + Add tests/compat.py for test-only imports. (issue 2442, commit 556f3cf)
  + Add backward-compatible support for Python 3.3+ (S3, SQS, Kinesis, CloudTrail). (issue 2344, issue 677, commit b503f4b)
  + Add marker param to describe all ELBs. (issue 2433, commit 49af8b6)
  + Update .travis.yml to add pypy. (issue 2440, commit 4b8667c)
  + Add ?include_all_instances? support to ?get_all_instance_status?. (issue 2446, issue 2230, commit 5949012)
  + Support security tokens in configuration file profiles. (issue 2445, commit a16bcfd)
  + Singapore, Sydney and Tokyo are missing in Kinesis Region. (issue 2434, commit 723290d)
  + Add support for VPC connection peering. (issue 2438, commit 63c78a8)
  + Add seperate doc requirements. (issue 2412, commit 2922d89)
  + Route53 support IP health checks (issue 2195, commit 319d44e)
  + IPv6 support when making connections (issue 2380, commit 1e70179)
  + Support SNS message attributes (issue 2360, commit ec106bd)
  + Add ?attributes? argument to boto.dynamodb2.table.Table.batch_get. (issue 2276, commit fe67f43)
  + Add documentation for top-level S3 module. (issue 2379, commit db77546)
  + Prevent an infinite loop. (issue 2465, commit 71b795a)
  + Updated documentation for copy_image. (issue 2471, commit f9f683a)
  + Fixed #2464 added keyword ?detailed? to docs. (issue 2467, issue 2464, commit eb26fdc)
  + Retry installation commands on Travis CI. (issue 2457, commit a9e8057)
  + Fix for run_instances() network_interfaces argument documentation. (issue 2461, commit 798fd70)
  + pyami module: tidy up to meet PEP8 better. (issue 2460, commit e5a23ed)
  + Updating documentation on cloudsearch regions. (issue 2455, commit de284a4)
  + Fixing lost errors bug in cloudsearch2 commit implementation. (issue 2408, commit fedb937)
  + Import json from boto.compat for several modules. (issue 2450, commit 55e716b)
  + Relocate MWS requirements checks; closes #2304, #2314. (issue 2314, issue 2304, commit 6a8f98b)
  + Added support for creating EMR clusters with a ServiceRole. (issue 2389, commit 7693956)
  + Doc fix: doc_service instead of service on Deleting. (issue 2419, commit f7b7980)
  + Fix dummy value typo on aws_access_key_id. (issue 2418, commit fc2a212)
  + Fix typo; add test. (issue 2447, commit effa8a8)
  + Fix CloudWatch Logs docstring. (issue 2444, commit d4a2b02)
  + Fix S3 mock encoding bug (issue 2443, commit 8dca89b)
  + Skip the ETag header check in responce while using SSE-C encrpytion of S3. (issue 2368, commit 907fc6d)
  + Fix Beanstalk exception handling. (issue 2431, commit 40f4b5d)
  + EC2 UserData encoding fix (Full version of #1698). (issue 2396, issue 1698, commit 78300f1)
  + Fetch S3 key storage class on-demand. (issue 2404, commit 8c4cc67)
  + Added documentation for /manage/cmdshell.py. (issue 2395, commit 5a28d1c)
  + Remove redundant lines in auth.py. (issue 2374, commit 317e322)
  + Fix SWF continue_as_new_workflow_execution start_to_close_timeout. (issue 2378, commit 5101b06)
  + Fix StringIO imports and invocations. (issue 2390, commit 03952c7)
  + Fixed wrong call of urlparse. (issue 2387, commit 4935f67)
  + Update documentation on Valid Values for ses:SetIdentityNotificationTopic. (issue 2367, commit 3f5de0d)
  + Correct list_saml_providers to return all items. (issue 2338, commit 9e9427f)
  + Fixing ELB unit tests. Also did some PEP8 cleanup on ELB code. (issue 2352, commit 5220621)
  + Documentation updates. (issue 2353, commit c9233d4)
  + Add support for Amazon CloudWatch Logs. (commit 125c94d)
  + Add EC2 T2 instance types (commit 544f8925cb)
  + Add new regions for CloudTrail and Kinesis (commit 4d67e19914)
  + Fixed some code formatting and typo in SQS tutorial docs. (issue 2332, commit 08c8fed)
  + Documentation update ? Child workflows and poll API. (issue 2333, issue 2063, issue 2064, commit 4835676)
  + DOC Tutorial update for metrics and use of dimensions property. (issue 2340, issue 2336, commit 45fda90)
  + Let people know only EC2 supported for cloudwatch. (issue 2341, commit 98f03e2)
  + Add namespace to AccessControlPolicy xml representation. (issue 2342, commit ce07446)
  + Make ip_addr optional in Route53 HealthCheck. (issue 2345, commit 79c35ca)
  + Add S3 SigV4 Presigning. (issue 2349, commit 125c4ce)
  + Add missing route53 autodoc. (issue 2343, commit 6472811)
  + Adds scan_index_forward and limit to DynamoDB table query count. (issue 2184, commit 4b6d222)
  + Add method TaggedEC2Object.add_tags(). (issue 2259, commit eea5467)
  + Add network interface lookup to EC2. Add update/attach/detach methods to NetworkInterface object. (issue 2311, commit 4d44530)
  + Parse date/time in a locale independent manner. (issue 2317, issue 2271, commit 3b715e5)
  + Add documentation for delete_hosted_zone. (issue 2316, commit a0fdd39)
  + s/existance/existence/ (issue 2315, commit b8dfa1c)
  + Add multipart upload section to the S3 tutorial. (issue 2308, commit 99953d4)
  + Only attempt shared creds load if path is a file. (issue 2305, commit 0bffa3b)
- Add BotoCheatSheet.pdf</changelog>
<changelog author="rschweikert@suse.com" date="1414324800">- updated to 2.34.0 (bnc#902648)
  + Calculate sha_256 correctly for s3 (issue 2691, commit c0a001f)
  + Fix MTurk typo. (issue 2429, issue 2428, commit 9bfff19)
  + Add the ability to IAM to create a virtual mfa device.
    (issue 2675, commit 075d402)
  + PEP8 tidy up for several modules. (issue 2673, commit 38abbd9)
  + Fix s3 create multipart upload for sigv4 (issue 2684, commit fc73641)
  + Updated endpoints.json for cloudwatch logs to support more regions.
    (issue 2685, commit 5db2ea8)
  + Added TaggedEC2Object.remove_tags. (issue 2610, issue 2269, issue 2414,
    commit bce8fcf)
  + Fixed 403 error from url encoded User-Agent header (issue 2621,
    commit 2043a89)
  + Inserted break when iterating Route53 records. (issue 2631, commit 2de8716)
  + Fix typo in ELB ConnectionSettings attribute (issue 2602, commit 63bd53b)
  + PEP8 fixes to various common modules. (issue 2611, commit 44d873d)
  + Route Tables: Update describe_route_tables to support additional route
    types (VPC peering connection, NIC). (issue 2598, issue 2597,
    commit bbe8ce7)
  + Fix an error in Python 3 when creating launch configs. Enables
    AutoScaling unit tests to run by default. (issue 2591, commit fb4aeec)
  + Use svg instead of png to get better image quality. (issue 2588,
    commit 1de6b41)
  + STS now signs using sigv4. (issue 2627, commit 36b247f)
  + Added support for Amazon Cognito. (issue 2608, commit fa3a39e)
  + Fix bug where sigv4 custom metadata headers were presigned incorrectly.
    (issue 2604, commit 8853e8e)
  + Add some regions to cloudsearch (issue 2593, commit 8c6ea21)
  + fix typo in s3 tutorial (issue 2612, commit 92dd581)
  + Few typo in docstring (issue 2590, commit 0238747)
  + Add support for Amazon Route 53 Domains. (issue 2601, commit d149a87)
  + Support EBS encryption in BlockDeviceType. (issue 2587, issue 2480,
    commit 7a39741)
  + Fix a typo in auth.py: Bejing -&gt; Beijing. (issue 2585, commit 8525616)
  + Update boto/cacerts/cacerts.txt. (issue 2567, commit 02b836c)
  + route53 module: tidy up to meet PEP8 better. (issue 2571, commit 3a3e960)
  + iam module: tidy up to meet PEP8 better. (issue 2566, commit 3c83da9)
  + Assigning ACL ID to network_acl_id instead of route_table_id.
    (issue 2548, commit c017b02)
  + Avoid infinite loop with bucket listing and encoding_type=?url?.
    (issue 2562, issue 2561, commit 39cbcb5)
  + Use urllib timeout param instead of hacking socket global timeout.
    (issue 2560, issue 1935, commit c1dd1fb)
  + Support non-ascii unicode strings in _get_all_query_args.
    Fixes: #2558, #2559. (issue 2559, issue 2558, commit 069d04b)
  + Truncated Response Handling in Route53 ListResourceRecordSets.
    (issue 2542, commit 3ba380f)
  + Update to latest OpsWorks API. (issue 2547, commit ac2b311)
  + Better S3 key repr support for unicode. (issue 2525, issue 2516,
    commit 8198884)
  + Skip test when locale is missing. (issue 2554, issue 2540, commit 2b87583)
  + Add profile_name support to SQS. (issue 2459, commit 3837951)
  + Include test_endpoints.json in source distribution. (issue 2550,
    commit 7f907b7)
  + Pass along params in make_request for elastic transcoder api.
    (issue 2537, commit 964999e)
  + Support auth when headers contains bytes. (issue 2521, issue 2520,
    commit 885348d)
  + PEP8 style fixes for ElastiCache. (issue 2539, commit bd0d6db)
  + PEP8 style fixes for SES. (issue 2538, commit c620c43)
  + Update to latest Redshift API. (issue 2545, commit 9151092)
  + Update to latest support API. (issue 2541, issue 2426, commit 8cf1b52)
  + Uses file name as archive description when uploading to glacier.
    (issue 2535, issue 2528, commit 38478c1)
  + Fix the ec2.elb.listener.Listener class?s __getitem__ method.
    (issue 2533, commit 7b67f98)
  + Add recognized HTTP headers for S3 metadata. (issue 2477,
    issue 2050, commit c8c625a)
  + Fix class name for document. (issue 2530, commit 2f0e689)
  + Copy CloudSearch proxy settings to endpoint services. (issue 2513,
    commit 3cbbc21)
  + Merge branch ?develop? into cloudsearch2-proxy (commit 5b424db)
  + Add IAMer as an application built on boto. (issue 2515, commit 1f35224)
  + Fix Amazon Cognito links in docs (issue 2674, commit 7c28577)
  + fix ELB ConnectionSettings values in documentation (issue 2620,
    commit d2231a2)
  + Update count_slow documentation. (issue 2569, commit e926d2d)
  + Documents not found behavior of get_item(). (issue 2544, commit 9b9c1c4)
  + Doc updates for CloudSearch. (issue 2546, commit 9efebc2)</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430136000">- update to version 2.38.0:
  * Add support for Amazon Machine Learning
  * Fix issue with modify reserved instances for modifying instance
    type
- additional changes from version 2.37.0:
  * Update AWS CloudTrail to the latest API.
  * Add support for UsePreviousValue to CloudFormation UpdateStack.
  * Fix BOTH_PATH to work with Windows drives
  * Fix division calculation in S3 docs.
  * Add Boto 3 link in README.
  * Add more regions for configservice
  * Add ``eu-central-1`` endpoints (Frankfurt region) for IAM and
    Route53
  * Fix unit tests from hanging
  * Fixed wording in dynamodb tutorial
  * Update SWF objects to keep a consistent region name.
  * Print archive ID in glacier upload script.
  * Add some minor documentation for Route53 tutorial.
  * Add Amazon DynamoDB online indexing support on High level API
  * Ensure Content-Length header is a string.
  * Correct docs around overriding SGs on ELBs
  * Fix DynamoDB tests.
  * Fix region bug.
  * Fix import for ``boto.cloudhsm.layer1.CloudHSMConnection``.
- additional changes from version 2.36.0:
  * Add Amazon DynamoDB online indexing support.
  * Allow for binary to be passed to sqs message
  * Kinesis update
  * Fixed spelling of boto.awslambda package.
  * Add support for Amazon EC2 Container Service
  * Add support for CloudHSM
  * Add support for AWS Config
  * Add support for AWS CodeDeploy
  * Add support for AWS Lambda
  * Update both Cognito's to the latest APIs
  * Add sts for eu-central-1.
  * Update opsworks to latest API
  * Add AWS Key Managment Support
- additional changes from version 2.35.2:
  * Add support for new data types in DynamoDB.
  * Expose cloudformation `UsePreviousTemplate` parameter.
  * Fix documentation around using custom connections for DynamoDB
    tables.
  * Fixed bug that unable call query_2 after call describe method
    on dynamodb2 module.
- additional changes from version 2.35.1:
  * Check for results left after computing self._keys_left
- additional changes from version 2.35.0:
  * Add Amazon EC2 Classic Link support
  * Add query string to body for anon STS POST
  * Fix bug that prevented initializing a dynamo item from existing
    item
  * switchover-sigv4:   Add integ tests for sigv4 switchover
    Switch elb/ec2 over to signature version 4
  * Return SetStackPolicyResponse
  * Added ELB Attributes to docs.
  * Fix bug by using correct string joining syntax.
  * Fix SES get_identity_dkim_attributes when input length &gt; 1.
  * DynamoDB table batch_get fails to process all remaining results
    if single batch result is empty.
  * Added suppport for additional fields in EMR objects.
  * Pass version_id in copy if key is versioned.
  * Add support for SQS PurgeQueue operation.
  * Update documentation for launchconfig.
  * Remove unimplemented config param.
  * Add support for private hosted zones.
  * Fix Key.change_storage_class so that it obeys dst_bucket.
  * Fix for s3put host specification.
  * Improve handling of Glacier HTTP 204 responses.
  * Fix raising exception syntax in Python 3.
  * Privatezone: Adding unit/integration test coverage
  * Minor documentation/pep8 fixes.
  * Correct argument type in doc string.
  * Use exclusive start key to get all items from DynamoDB query.
  * Updated link to current config documentation.
  * Fix the SQS certificate error for region cn-north-1.
  * Adds support for getting health checker IP ranges from Route53.
  * fix: snap.create_volume documentation lists general purpose ssd
    Fixes @2774.
  * Fixed param type in get_contents_to_filename docstring.
  * Update DynamoDB local example to include fake access key id.
  * Added 'end' attribute to ReservedInstance.
  * Parse ClusterStatus?s StateChangeReason.
  * Adds SupportedProducts field to EMR JobFlow objects.
  * Fix EMR endpoint.
  * Detect old-style S3 URL for auto-sigv4.
  * Throw host warning for cloudsearch domain
  * Fix CloudSearch2 to work with IAM-based search and upload
    requests
  * iam: add support for Account Password Policy APIs
  * Handle sigv4 non-string header values properly
  * Url encode query string for pure query
- update project URL
- point source URL to pypi
- build python-boto-doc as a subpackage:
  * delete separate spec and changes file
  * merge entries of python-boto-doc.changes in python-boto.changes
  * add python-Sphinx as BuildRequires
  * break the dependency between the doc generation and boto
    by modifying Sphinx configuration file
- delete shebang of python file instead of setting them executable</changelog>
<changelog author="toddrme2178@gmail.com" date="1438171200">- Implement update-alternatives to allow for python 3 version,
  which is now supported upstream.
- specfile cleanups</changelog>
<changelog author="toddrme2178@gmail.com" date="1439467200">- Fix update-alternatives usage.</changelog>
<changelog author="rjschwei@suse.com" date="1452859200">- Add region_support.patch (bsc#962138)
  + Support new region ap-northeast-2
  + Add features to other reagions that are now supported by AWS</changelog>
<changelog author="toddrme2178@gmail.com" date="1454328000">- update to version 2.39.0:
  * Autodetect sigv4 for ap-northeast-2 (:issue:`3461`,
    :sha:`c2a17ce`)
  * Added support for ap-northeast-2 (:issue:`3454`, :sha:`c3c1ddd`)
  * Remove VeriSign Class 3 CA from trusted certs (:issue:`3450`,
    :sha:`8a025df`)
  * Add note about boto3 on all pages of boto docs (:sha:`9bd904c`)
  * Fix for listing EMR steps based on cluster_states filter
    (:issue:`3399`, :sha:`0f92f35`)
  * Fixed param name in set_contents_from_string docstring
    (:issue:`3420`, :sha:`e30297b`)
  * Closes #3441 Remove py3 test whitelist Update rds to pass on py3
    Update mturk to pass tests on py3 Update cloudsearchdomain tests
    to work with py3 (:issue:`3441`, :sha:`5b2f552`)
  * Run tests against py35 (:sha:`7d039d0`)
  * Fix Glacier test failure in python 3.5 due to MagicMock
    (:issue:`3412`, :sha:`d042f07`)
  * Undo log message change BF(PY3): use except ... as syntax instead
    of except ..., (:sha:`607cad7`)
  * Fix travis CI builds for PY3 (:issue:`3439`, :sha:`22ab610`)
  * Spelling fixes (:issue:`3425`, :sha:`f43bbbd`)
  * Fixed docs (:issue:`3401`, :sha:`4f66311`)
  * Add deprecation notice to emr methods (:issue:`3422`,
    :sha:`cee6159`)
  * Add some GovCloud endpoints (:issue:`3421`, :sha:`5afc068`)
- Remove upstream-included region_support.patch</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 2.42.0 (bsc#1002895)
  + Respect is_secure parameter in generate_url_sigv4 (commit 59ba28d)
  + Update MTurk API (issue 3563, commit 250d891)
- From 2.41.0
  + Update endpoints.json (issue 3564, commit 5e786b4)
  + Remove the broken link to PDF?s (issue 3562, commit 46ffb0c)
- From 2.40.0
  + ryansydnor-s3: Allow s3 bucket lifecycle policies with multiple
    transitions (commit c6d5af3)
  + Fixes upload parts for glacier (issue 3524, commit d1973a4)
  + pslawski-unicode-parse-qs: Move utility functions over to compat
    Add S3 integ test for non-ascii keys with sigv4 Fix quoting of tilde
    in S3 canonical_uri for sigv4 Parse unicode query string properly
    in Python 2 (issue 2844, commit 5092c6d)
  + ninchat-config-fix: Add __setstate__ to fix pickling test fail Add
    unit tests for config parsing Don?t access parser through
    __dict__ Config: Catch specific exceptions when wrapping ConfigParser
    methods Config: Don?t inherit from ConfigParser (issue 3474, commit c21aa54)</changelog>
<changelog author="dmueller@suse.com" date="1475755200">- fix requirements</changelog>

</package>
<package pkgid="23f6bc34b00207ae9fc834da1e4c04d823dc7f07ea4d6749c93acf97ccca46e0" name="python-boto-doc" arch="noarch">
    <version epoch="0" ver="2.42.0" rel="10.2"/>

<changelog author="speilicke@suse.com" date="1387454400">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="rschweikert@suse.com" date="1388923200">- update to version 2.22.0:
  * Updated Auto Scaling to support the latest API. (commit 9984c4f)
  * Added the ability to alter response sizes in DynamoDB queries/scans.
    (issue 1949, commit 6761b01)
  * Fix string instance tests. (issue 1959, commit ee203bf)
  * Add missing parameters to get_spot_price_history method. (issue 1958,
    commit f635474)
  * Fix unicode string parameter handling in S3Connection. (issue 1954,
    issue 1952, commit 12e6b0c)
  * Fix typo in docstring for SSHClient.run. (issue 1953, commit 5263b20)
  * Properly handle getopt long options in s3put. (issue 1950, issue 1946,
    commit cf693ff)
  * Fixed a missed inheritance bug in mturk. (issue 1936, commit 0137f29)
  * Added cn-north-1 to regions. (commit 9c89de1)
  * Fixed threading issues related to datetime.strptime. (issue 1898,
    commit 2ef66c9)
  * Updated all the old-style inheritance calls. (issue 1918, issue 1936,
    issue 1937, commit 39a997f &amp; commit 607624f)
  * Add support for Elastic Transcoder pagination and new codecs (commit
    dcb1c5a)
  * Add support for new CloudTrail calling format (commit aeafe9b)
  * Update to the latest Support API (commit 45e1884)
  * Add support for arbitrarily large SQS messages stored in S3 via BigMessage.
    (issue 1917, commit e6cd665)
  * Add support for encoding_type to S3 (commit 6b2d967)
  * Add support for Elastic MapReduce tags (issue 1928, issue 1920,
    commit b9749c6, commit 8e4c595)
  * Add high level support for global secondary indexes in DynamoDB (issue
    1924, issue 1913, commit 32dac5b)
  * Add support for Elastic Beanstalk worker environments. (issue 1911,
    commit bbd4fbf)
  * Add support for OpsWorks IAM user permissions per stack (commit ac6e4e7)
  * Add support for SigV4 to S3 (commit deb9e18)
  * Add support for SigV4 to EC2 (commit bdebfe0)
  * Add support for SigV4 to ElastiCache (commit b892b45)
  * Add documentation describing account usage for multipart uploads in S3
    (commit af03d8d)
  * Update DesiredCapacity if AutoScalingGroup.desired_capacity is not None.
    (issue 1906, issue 1906, issue 1757, commit b6670ce)
  * Documentation: add Kinesis API reference (issue 1921, commit c169836)
  * Documentation: sriovNetSupport instance attribute (issue 1915, commit
    e1bafcc)
  * Update RDS documentation for API version: 2013-09-09 (issue 1914, commit
    fcf702a)
  * Switch all classes to new style classes which results in memory use
    improvements (commit ca36fa2)
  * Bug fix for IAM security credentials metadata URL. (issue 1912,
    issue 1908, issue 1907, commit f82e7a5)
  * Add support for Amazon Kinesis (commit d0b684e)
  * Add support for i2 instance types to EC2. (commit 0f5371f)
  * Add support for DynamoDB Global Secondary Indexes (commit 297cacb)
  * Add support for AWS Direct Connect. (issue 1894, issue 1894, commit 3cbca26)
  * Add option for sorting SDB dumps to sdbadmin. (issue 1888, issue 1888,
    commit 070e4f6)
  * Add a retry when EC2 metadata is returned as corrupt JSON. (issue 1883,
    issue 1883, issue 1868, commit 41470a0)
  * Added some missing attributes to DBInstance and DBSnapshot. (issue 1880,
    issue 1880, commit 2751dff)
  * Implement nonzero for DynamoDB Item to consider empty items falsey (issue
    1899, commit 808e550)
  * Remove dimensions from Metric.query() docstring. (issue 1901, issue 1901,
    commit ba6b8c7)
  * Make trailing slashes for EC2 metadata URLs explicit &amp; remove them from
    userdata requests. This fixes using boto for CloudStack (issue 1900,
    issue 1900, issue 1897, issue 1856, commit 5f4506e)
  * Fix the DynamoDB ?scan in? filter to compare the same attribute types in
    a list rather than using an attribute set. (issue 1896, issue 1896,
    commit 5fc59d6)
  * Updating Amazon ElastiCache parameters to be optional when creating a
    new cache cluster. (issue 1876, issue 1876, commit 342b8df)
  * Fix honor cooldown AutoScaling parameter serialization to prevent an
    exception and bad request. (issue 1895, issue 1895, issue 1892,
    commit fc4674f)
  * Fix ignored RDS backup_retention_period when value was 0. (issue 1887,
    issue 1887, issue 1886, commit a19eb14)
  * Use auth_handler to specify host header value including custom ports
    if possible, which are used by Eucalyptus. (issue 1862, issue 1862,
    commit ce6df03)
  * Fix documentation of launch config in Autoscaling Group. (issue 1881,
    issue 1881, commit 6f704d9)
  * typo: AIM -&gt; IAM (issue 1882, commit 7ea2d5c)
  * Add max results parameters to EC2 describe instances and describe tags.
    (issue 1873, issue 1873, commit ad8a64a)
  * Add support for RDS CopyDBSnapshot. (issue 1872, issue 1872,
    issue 1865, commit bffb758)
  * Update README.rst to link to ReadTheDocs changelogs. (issue 1869,
    commit 26f3dbe)
  * Delete the old changelog in favor of the README link to ReadTheDocs
    changelogs. (issue 1870, issue 1870, commit 32bc333)
  * Added missed notes about the cn-north-1 region. (commit 738c8cb)
  * Added the C3 family of EC2 instances. (issue 1938, commit 05b7482)
  * Documentation: sriovNetSupport instance attribute (issue 1915,
    commit e1bafcc)</changelog>
<changelog author="rschweikert@suse.com" date="1391601600">- update to version 2.24.0:
  + Load region and endpoint information from a JSON file (commit b9dbaad)
  + Return the x-amz-restore header with GET KEY and fix provider prefix.
    (issue 1990, commit 43e8e0a)
  + Make S3 key validation optional with the validate parameter (issue
    2013, issue 1996, commit fd6b632)
  + Adding new eu-west-1 and eu-west-2 endpoints for SES. (issue 2015,
    commit d5ef862, commit 56ba3e5)
  + Google Storage now uses new-style Python classes (issue 1927,
    commit 86c9f77)
  + Add support for step summary list to Elastic MapReduce (issue 2011,
    commit d3af158)
  + Added the M3 instance types. (issue 2012, commit 7c82f57)
  + Add credential profile configuration (issue 1979, commit e3ab708)
  + Add support for dead letter queues to SQS (commit 93c7d05)
    Make the Lifecycle Id optional and fix prefix=None in XML generation.
    (issue 2021, commit 362a04a)
  + Fix DynamoDB query limit bug (issue 2014, commit 7ecb3f7)
  + Add documentation about the version_id behavior of Key objects.
    (issue 2026, commit b6b242c)
  + Fixed typo in Table.create example (issue 2023, commit d81a660)
  + Adding a license/copyright header. (issue 2025, commit 26ded39)
  + Update the docstring for the SNS subscribe method (issue 2017,
    commit 4c806de)
  + Renamed unit test with duplicate name (issue 2016, commit c7bd0bd)
  + Use UTC instead of local time in test_refresh_credentials (issue 2020,
    commit b5a2eaf)
  + Fix missing security_token option in some connection classes (issue 1989,
    issue 1942, commit 2b72f32)
  + Fix listing S3 multipart uploads with some parameter combinations
    (issue 2000, commit 49045bc)
  + Fix elbadmin crash because of non-extant instances in load balancer
    (issue 2001, commit d47cc14)
  + Fix anonymous S3 fetch test case (issue 1988, issue 1992, commit 8fb1666)
  + Fix elbadmin boto import (issue 2002, commit 674c3a6)
  + Fixing SQS tutorial to correctly describe behavior of the write
    operation (issue 1986, commit 6147d86)
  + Fix various grammar mistakes (issue 1980, commit ada40b5)
  + Added pagination &amp; date range filtering to Glacier inventory options.
    (issue 1977, commit 402a305)
  + Added the ability to select the specific attributes to fetch in the
    scan &amp; get_item calls within DynamoDB v2. (issue 1945, issue 1972,
    commit f6451fb &amp; commit 96cd413)
  + Allow getting a security token from either an environment or configuration
    variable. (:issue:, :sha:)
  + Ported the has_item call from the original DynamoDB (v1) module to
    DynamoDB v2. (issue 1973, issue 1822, commit f96e9e3)
  + Added an associate_address_object method to EC2. (issue 1967, issue 1874,
    issue 1893, commit dd6180c)
  + Added a download_to_fileobj method to Glacier,similar to the S3 call of
    the same name. (issue 1960, issue 1941, commit 67266e5)
  + Added support for arbitrary dict inputs to MWS. (issue 1966, commit
    46f193f)
  + Made the usage of is/is not more consistent. (issue 1930, commit 8597c54)
  + Imported with_statement for old Python versions (issue 1975,
    commit a53a574)
  + Changed the Binary data object within DynamoDB to throw an error if
    an invalid data type is used. (issue 1963, issue 1956, commit e5d30c8)
  + Altered the integration tests to avoid connection errors to certain
    regions. (commit 2555b8a)
  + Changed the GCS resumable upload handler to save tracker files
    with protection 0600. (commit 7cb344c)
  + Clarified documentation around the list_metrics call in CloudFormation.
    (issue 1962, commit c996a72)
  + Added Tag to the Autoscale API docs. (issue 1964, commit 31118d9)
  + Updated the AWS Support documentation to the latest. (commit 29f9264)</changelog>
<changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- add patch fixGoogleStorageSupport.diff
  + addresses upstream issue 2105 by applying pull request 2112
  + this fixes the exception triggered by any gsutil command</changelog>
<changelog author="rschweikert@suse.com" date="1393502400">- add python-xml dependency</changelog>
<changelog author="rschweikert@suse.com" date="1393588800">- update to version 2.26.0:
  + Add support for Route53 API version 2013-04-01 (issue 2080,
    commit 600dcd0)
  + Add option to opt-in for EC2 SigV4 (issue 2074, commit 4d780bd)
  + Add Autoscale feature to get all adjustment types (issue 2058,
    issue 1538, commit b9c7e15)
  + Add Route53 unit tests (issue 2066, commit e859576)
  + Add a basic Route53 tutorial (issue 2060, commit f0ad46b)
  + Add Autoscale associated public IP to launch configuration
    (issue 2051, issue 2028, issue 2029, commit c58bda6)
  + Add option to pass VPC zone identifiers as a Python list (issue 2047,
    issue 1772, commit 07ef9e1)
  + Add RDS call to get all log files (issue 2040, issue 1994, commit 925b8cb)
  + Changed S3 get_bucket to use HEAD in place of GET. (issue 2078,
    issue 2082, commit 016be83)
  + Fix EMR?s describe_cluster_command. (issue 2034, commit 1c5621e)
  + Tutorial small code fix (issue 2072, commit 38e7db1)
  + Fix CloudFront string representation (issue 2069, commit 885c397)
  + Route53 doc cleanup (issue 2059, commit d2fc38e)
  + Fix MWS parsing of GetProductCategoriesForASIN response. (issue 2024,
    commit 0af08ce)
  + Fix SQS docs for get_queue_attributes (issue 2061, commit 1cdc326)
  + Don?t insert a ??? in URLs unless there is a query string (issue 2042,
    issue 1943, commit c15ce60)
  + Added support for MFA in STS AssumeRole. (commit 899810c)
  + Fixed how DynamoDB v2 works with Global Secondary Indexes. (issue 2122,
    commit f602c95)
  + Add request hooks and request logger. (issue 2125, commit e8b20fe)
  + Don?t pull the security token from the environment or config when a
    caller supplies the access key and secret. (issue 2123, commit 4df1694)
  + Read EvaluateTargetHealth from Route53 resource record set. (issue 2120,
    commit 0a97158)
  + Prevent implicit string decode in hmac-v4 handlers. (issue 2037,
    issue 2033, commit 8e56a5f)
  + Updated Datapipeline to include all current regions. (issue 2121,
    commit dff5e3e)
  + Bug fix for Google Storage generate_url authentication. (issue 2116,
    issue 2108, commit 5a50932)
  + Handle JSON error responses in BotoServerError. (issue 2113,
    issue 2077, commit 221085e)
  + Corrected a typo in SQS tutorial. (issue 2114, commit 7ed41f7)
  + Add CloudFormation template capabilities support. (issue 2111,
    issue 2075, commit 65a4323)
  + Add SWF layer1_decisions to docs. (issue 2110, issue 2062, commit 6039cc9)
  + Add support for request intervals in health checks. (issue 2109,
    commit 660b01a)
  + Added checks for invalid regions to the bin scripts (issue 2107,
    commit bbb9f1e)
  + Better error output for unknown region - (issue 2041, issue 1983,
    commit cd63f92)
  + Added certificate tests for CloudTrail. (issue 2106, commit a7e9b4c)
  + Updated Kinesis endpoints. (commit 7bd4b6e)
  + Finished implementation of RDS?s DescribeDBLogFiles. (issue 2084,
    commit f3c706c)
  + Added support for RDS log file downloading. (issue 2086, issue 1993,
    commit 4c51841)
  + Added some unit tests for CloudFront. (issue 2076, commit 6c46b1d)
  + GS should ignore restore_headers as they are never set. (issue 2067,
    commit f02aeb3)
  + Update CloudFormation to support the latest API. (issue 2101,
    commit ea1b1b6)
  + Added Route53 health checks. (issue 2054, commit 9028f7d)
  + Merge branch ?rds2? into develop Fixes #2097. (issue 2097, commit 6843c16)
  + Fix Param class convert method (issue 2094, commit 5cd4598)
  + Added support for Route53 aliasing. (issue 2096, commit df5fa40)
  + Removed the dependence on example.com within the Route53 tests.
    (issue 2098, commit 6ce9e0f)
  + Fixed has_item support in DynamoDB v2. (issue 2090, commit aada5d3)
  + Fix a little typo bug in the S3 tutorial. (issue 2088, commit c091d27)
- remove patch fixGoogleStorageSupport.diff, fix included</changelog>
<changelog author="rschweikert@suse.com" date="1393934400">- add patch boto_useSystemCerts.patch to support use of system suuplied
  certificates, patch accepted upstream https://github.com/boto/boto/pull/2139
- add a boto.cfg file to set boto to use the distro certs
- updates the doc to explain new "system" keyword in boto.cfg</changelog>
<changelog author="rschweikert@suse.com" date="1397649600">- add previously missing dependency for python-paramiko
- update to version 2.27.0
  + remove boto_useSystemCerts.patch, changes included in new version
  + Added support for AccessLog in ELB (issue 2150, commit 7aa35ea)
  + Added better BlockDeviceType deserialization in Autoscaling.
    (issue 2149, commit 04d29a5)
  + Updated CloudFormation documentation (issue 2147, commit 2535aca)
  + Updated Kinesis documentation (issue 2146, commit 01425dc)
  + Add optional bucket tags to lss3 output. (issue 2132, commit 0f35924)
  + Fix getting instance types for Eucalyptus 4.0. (issue 2118, commit 18dc07d)
  + Fixed how quoted strings are handled in SigV4 (issue 2142, commit 2467547)
  + Use system supplied certs without a bundle file (issue 2139, commit 70d15b8)
  + Fixed incorrect test failures in EC2 trim_snapshots (commit 1fa9df7)
  + Raise any exceptions that are tagSet not found (commit 56d7d3e)
  + Added request hook docs (issue 2129, commit 64eedce)
  + Fixed Route53 alias-healthcheck (issue 2126, commit 141077f)
  + Fixed Elastic IP association in EC2 (issue 2131, issue 1310, commit d75fdfa)
  + Fixed builds on Travis for installing dependencies (commit 5e84e30)
  + Support printing tags on buckets when listing buckets (commit c42a5dd)
  + PEP8/pyflakes/(some)pylint (commit 149175e)
  + updated doc explaining use of "system" keyword</changelog>
<changelog author="rschweikert@suse.com" date="1400155200">- update to version 2.28.0
  + Add support for SQS message attributes. (issue 2257, commit a04ca92)
  + Update DynamoDB to support query filters. (issue 2242, commit 141eb71)
  + Implement new Cloudsearch API 2013-01-01 as cloudsearch2 module
    (commit b0ababa)
  + Miscellaneous improvements to the MTurk CLI. (issue 2188, commit c213ff1)
  + Update MWS to latest API version and adds missing API calls.
    (issue 2203, issue 2201, commit 8adf720, commit 8d0a6a8)
  + Update EC2 register_image to expose an option which sets whether an
    instance store is deleted on termination. The default value is
    left as-is. (commit d295ee9)
  + Clarify that MTurkConnection.get_assignments attributes are actually
    strings. (issue 2187, issue 2176, commit 075636b)
  + Add support for ELB Connection Draining attribute.
    (issue 2174, issue 2173, commit 78fa43c)
  + Add support for setting failure threshold for Route53 health checks.
    (issue 2171, issue 2170, commit 15b812f)
  + Fix specification of Elastic Beanstalk tier parameter.
    (issue 2168, commit 4492e86)
  + Fixed part of roboto for euca2ools. (issue 2166, issue 1730,
    commit 63b7a34)
  + Fixed removing policies from listeners. (issue 2165, issue 1708,
    commit e5a2d9b)
  + Reintroduced the reverse fix for DDB. (issue 2163, commit 70ec722)
  + Several fixes to DynamoDB describe calls. (issue 2161, issue 1649,
    issue 1663, commit 84fb748)
  + Fixed how reverse works in DynamoDBv2. (issue 2160, issue 2070,
    issue 2115, commit afdd805)
  + Update Kinesis exceptions (issue 2159, issue 2153, commit 22c6751)
  + Fix ECS problem using new-style classes (issue 2103, commit dc466c7)
  + Add support for passing region info from SWF layer2 to layer1
    (issue 2137, commit 0dc8ce6)
  + Handle plus signs in S3 metadata (issue 2145, commit c2a0f95)
  + Fix Glacier vault date parsing (issue 2158, commit 9e7b132)
  + Fix Route53 evaluate target health bug. (issue 2157, commit 398bb62)
  + Removing obselete core directory. (issue 1987, commit 8e83292)
  + Improve IAM behavior in the cn-north-1 region. (issue 2152, commit 4050e70)
  + Add SetIdentityFeedbackForwardingEnabled and SetIdentityNotificationTopic
    for SES. (issue 2130, issue 2128, commit 83002d5)
  + Altered Route53 bin script to use UPSERT rather than CREATE.
    (issue 2151, commit 2cd20e7)
  + Documentation fix. (issue 2156, commit 7592a58)
  + Fix EC2 documentation typo (issue 2178, commit 2627843)
  + Update Boto configuration tutorial (issue 2191, commit f2a7a08)
  + Correct typo ?possile? ?&gt; ?possible?. (issue 2196, commit d228352)</changelog>
<changelog author="dmueller@suse.com" date="1402920000">- update to 2.29.1:
  + Fix crash when provider is google. (issue 2302, commit 33329d5888)
  + Fix connection pooling issue with CloudSearch (commit 82e83be12a)
  + Added support for shared credentials file.
  + Added support for EBS encryption. (issue 2282, commit d85a449)
  + Added GovCloud CloudFormation endpoint. (issue 2297, commit 0f75fb9)
  + Added new CloudTrail endpoints to endpoints.json. (issue 2269, commit 1168580)
  + Added ?name? param to documentation of ELB LoadBalancer. (issue 2291, commit 86e1174)
  + Fix typo in ELB docs. (issue 2294, commit 37aaa0f)
  + Fix typo in ELB tutorial. (issue 2290, commit 40a758a)
  + Fix OpsWorks connect_to_region exception. (issue 2288, commit 26729c7)
  + Fix timezones in CloudWatch date range example. (issue 2285, commit 138a6d0)
  + Fix description of param tags into rds2.create_db_subnet_group. (issue 2279, commit dc1037f)
  + Fix the incorrect name of a test case. (issue 2273, commit ee195a1)
  + Fix ?consistent? argument to boto.dynamodb2.table.Table.batch_get. (issue 2272, commit c432b09)
  + Update the wheel to be python 2 compatible only. (issue 2286, commit 6ad0b75)
  + Crate.io is no longer a package index. (issue 2289, commit 7f23de0)</changelog>
<changelog author="tbechtold@suse.com" date="1410609600">- update to 2.32.1:
  + DynamoDB (issue 2441, commit 0ef0466, issue 2473, commit 102c3b6,
    issue 2453)
  + CloudWatch Logs (issue 2448, commit 23cbcd1)
  + Support (issue 2406, commit 7b489a0)
  + Elastic Beanstalk (issue 2372, commit d45d00e)
  + CloudSearch (issue 2439, commit 25416f9, issue 2432, commit b17f2d9)
  + STS (issue 2435, commit 1c1239b)
  + SimpleDB (issue 2403, commit 604318d)
  + EC2 (issue 2424, commit 5e5dc4c)
  + VPC (issue 2399, commit 356da91)
  + OpsWorks (issue 2402, commit 68d15a5)
  + CloudWatch (issue 2400, commit a4d0a7a)
  + SWF (issue 2397, commit 6db918e)
  + MWS (issue 2385, commit 5347fbd)
  + ELB (issue 2384, commit 4dcc9be)
  + Elastic Transcoder (issue 2382, commit 40c5e35)
  + EMR (issue 2381, commit edf4020)
  + Route53 (issue 2359, commit 15514f7)
  + Glacier (issue 2357, commit a41042e)
  + RedShift (issue 2362, commit b8888cc)
  + CloudFront (issue 2355, commit f2f54b1)
  + ECS (issue 2364, commit ab84969)
  + Fix pylintrc to run with pylint/python 3. (issue 2366, commit 6292ab2)
  + SNS (issue 2365, commit 170f735)
  + AutoScaling (issue 2393, commit 6a78057)
  + Direct Connect (issue 2361, commit 8488d94)
  + CloudFormation (issue 2373, commit 9872f27)
  + IAM (issue 2358, commit 29ad3e3)
  + ElastiCache (issue 2356, commit 2880f91)
  + SES (issue 2354, commit 1db129e)
  + Fix S3 integration test on Py3. (issue 2466, commit f3eb4cd)
  + Use unittest.mock if exists. (issue 2451, commit cc58978)
  + Add tests/compat.py for test-only imports. (issue 2442, commit 556f3cf)
  + Add backward-compatible support for Python 3.3+ (S3, SQS, Kinesis, CloudTrail). (issue 2344, issue 677, commit b503f4b)
  + Add marker param to describe all ELBs. (issue 2433, commit 49af8b6)
  + Update .travis.yml to add pypy. (issue 2440, commit 4b8667c)
  + Add ?include_all_instances? support to ?get_all_instance_status?. (issue 2446, issue 2230, commit 5949012)
  + Support security tokens in configuration file profiles. (issue 2445, commit a16bcfd)
  + Singapore, Sydney and Tokyo are missing in Kinesis Region. (issue 2434, commit 723290d)
  + Add support for VPC connection peering. (issue 2438, commit 63c78a8)
  + Add seperate doc requirements. (issue 2412, commit 2922d89)
  + Route53 support IP health checks (issue 2195, commit 319d44e)
  + IPv6 support when making connections (issue 2380, commit 1e70179)
  + Support SNS message attributes (issue 2360, commit ec106bd)
  + Add ?attributes? argument to boto.dynamodb2.table.Table.batch_get. (issue 2276, commit fe67f43)
  + Add documentation for top-level S3 module. (issue 2379, commit db77546)
  + Prevent an infinite loop. (issue 2465, commit 71b795a)
  + Updated documentation for copy_image. (issue 2471, commit f9f683a)
  + Fixed #2464 added keyword ?detailed? to docs. (issue 2467, issue 2464, commit eb26fdc)
  + Retry installation commands on Travis CI. (issue 2457, commit a9e8057)
  + Fix for run_instances() network_interfaces argument documentation. (issue 2461, commit 798fd70)
  + pyami module: tidy up to meet PEP8 better. (issue 2460, commit e5a23ed)
  + Updating documentation on cloudsearch regions. (issue 2455, commit de284a4)
  + Fixing lost errors bug in cloudsearch2 commit implementation. (issue 2408, commit fedb937)
  + Import json from boto.compat for several modules. (issue 2450, commit 55e716b)
  + Relocate MWS requirements checks; closes #2304, #2314. (issue 2314, issue 2304, commit 6a8f98b)
  + Added support for creating EMR clusters with a ServiceRole. (issue 2389, commit 7693956)
  + Doc fix: doc_service instead of service on Deleting. (issue 2419, commit f7b7980)
  + Fix dummy value typo on aws_access_key_id. (issue 2418, commit fc2a212)
  + Fix typo; add test. (issue 2447, commit effa8a8)
  + Fix CloudWatch Logs docstring. (issue 2444, commit d4a2b02)
  + Fix S3 mock encoding bug (issue 2443, commit 8dca89b)
  + Skip the ETag header check in responce while using SSE-C encrpytion of S3. (issue 2368, commit 907fc6d)
  + Fix Beanstalk exception handling. (issue 2431, commit 40f4b5d)
  + EC2 UserData encoding fix (Full version of #1698). (issue 2396, issue 1698, commit 78300f1)
  + Fetch S3 key storage class on-demand. (issue 2404, commit 8c4cc67)
  + Added documentation for /manage/cmdshell.py. (issue 2395, commit 5a28d1c)
  + Remove redundant lines in auth.py. (issue 2374, commit 317e322)
  + Fix SWF continue_as_new_workflow_execution start_to_close_timeout. (issue 2378, commit 5101b06)
  + Fix StringIO imports and invocations. (issue 2390, commit 03952c7)
  + Fixed wrong call of urlparse. (issue 2387, commit 4935f67)
  + Update documentation on Valid Values for ses:SetIdentityNotificationTopic. (issue 2367, commit 3f5de0d)
  + Correct list_saml_providers to return all items. (issue 2338, commit 9e9427f)
  + Fixing ELB unit tests. Also did some PEP8 cleanup on ELB code. (issue 2352, commit 5220621)
  + Documentation updates. (issue 2353, commit c9233d4)
  + Add support for Amazon CloudWatch Logs. (commit 125c94d)
  + Add EC2 T2 instance types (commit 544f8925cb)
  + Add new regions for CloudTrail and Kinesis (commit 4d67e19914)
  + Fixed some code formatting and typo in SQS tutorial docs. (issue 2332, commit 08c8fed)
  + Documentation update ? Child workflows and poll API. (issue 2333, issue 2063, issue 2064, commit 4835676)
  + DOC Tutorial update for metrics and use of dimensions property. (issue 2340, issue 2336, commit 45fda90)
  + Let people know only EC2 supported for cloudwatch. (issue 2341, commit 98f03e2)
  + Add namespace to AccessControlPolicy xml representation. (issue 2342, commit ce07446)
  + Make ip_addr optional in Route53 HealthCheck. (issue 2345, commit 79c35ca)
  + Add S3 SigV4 Presigning. (issue 2349, commit 125c4ce)
  + Add missing route53 autodoc. (issue 2343, commit 6472811)
  + Adds scan_index_forward and limit to DynamoDB table query count. (issue 2184, commit 4b6d222)
  + Add method TaggedEC2Object.add_tags(). (issue 2259, commit eea5467)
  + Add network interface lookup to EC2. Add update/attach/detach methods to NetworkInterface object. (issue 2311, commit 4d44530)
  + Parse date/time in a locale independent manner. (issue 2317, issue 2271, commit 3b715e5)
  + Add documentation for delete_hosted_zone. (issue 2316, commit a0fdd39)
  + s/existance/existence/ (issue 2315, commit b8dfa1c)
  + Add multipart upload section to the S3 tutorial. (issue 2308, commit 99953d4)
  + Only attempt shared creds load if path is a file. (issue 2305, commit 0bffa3b)
- Add BotoCheatSheet.pdf</changelog>
<changelog author="rschweikert@suse.com" date="1414324800">- updated to 2.34.0 (bnc#902648)
  + Calculate sha_256 correctly for s3 (issue 2691, commit c0a001f)
  + Fix MTurk typo. (issue 2429, issue 2428, commit 9bfff19)
  + Add the ability to IAM to create a virtual mfa device.
    (issue 2675, commit 075d402)
  + PEP8 tidy up for several modules. (issue 2673, commit 38abbd9)
  + Fix s3 create multipart upload for sigv4 (issue 2684, commit fc73641)
  + Updated endpoints.json for cloudwatch logs to support more regions.
    (issue 2685, commit 5db2ea8)
  + Added TaggedEC2Object.remove_tags. (issue 2610, issue 2269, issue 2414,
    commit bce8fcf)
  + Fixed 403 error from url encoded User-Agent header (issue 2621,
    commit 2043a89)
  + Inserted break when iterating Route53 records. (issue 2631, commit 2de8716)
  + Fix typo in ELB ConnectionSettings attribute (issue 2602, commit 63bd53b)
  + PEP8 fixes to various common modules. (issue 2611, commit 44d873d)
  + Route Tables: Update describe_route_tables to support additional route
    types (VPC peering connection, NIC). (issue 2598, issue 2597,
    commit bbe8ce7)
  + Fix an error in Python 3 when creating launch configs. Enables
    AutoScaling unit tests to run by default. (issue 2591, commit fb4aeec)
  + Use svg instead of png to get better image quality. (issue 2588,
    commit 1de6b41)
  + STS now signs using sigv4. (issue 2627, commit 36b247f)
  + Added support for Amazon Cognito. (issue 2608, commit fa3a39e)
  + Fix bug where sigv4 custom metadata headers were presigned incorrectly.
    (issue 2604, commit 8853e8e)
  + Add some regions to cloudsearch (issue 2593, commit 8c6ea21)
  + fix typo in s3 tutorial (issue 2612, commit 92dd581)
  + Few typo in docstring (issue 2590, commit 0238747)
  + Add support for Amazon Route 53 Domains. (issue 2601, commit d149a87)
  + Support EBS encryption in BlockDeviceType. (issue 2587, issue 2480,
    commit 7a39741)
  + Fix a typo in auth.py: Bejing -&gt; Beijing. (issue 2585, commit 8525616)
  + Update boto/cacerts/cacerts.txt. (issue 2567, commit 02b836c)
  + route53 module: tidy up to meet PEP8 better. (issue 2571, commit 3a3e960)
  + iam module: tidy up to meet PEP8 better. (issue 2566, commit 3c83da9)
  + Assigning ACL ID to network_acl_id instead of route_table_id.
    (issue 2548, commit c017b02)
  + Avoid infinite loop with bucket listing and encoding_type=?url?.
    (issue 2562, issue 2561, commit 39cbcb5)
  + Use urllib timeout param instead of hacking socket global timeout.
    (issue 2560, issue 1935, commit c1dd1fb)
  + Support non-ascii unicode strings in _get_all_query_args.
    Fixes: #2558, #2559. (issue 2559, issue 2558, commit 069d04b)
  + Truncated Response Handling in Route53 ListResourceRecordSets.
    (issue 2542, commit 3ba380f)
  + Update to latest OpsWorks API. (issue 2547, commit ac2b311)
  + Better S3 key repr support for unicode. (issue 2525, issue 2516,
    commit 8198884)
  + Skip test when locale is missing. (issue 2554, issue 2540, commit 2b87583)
  + Add profile_name support to SQS. (issue 2459, commit 3837951)
  + Include test_endpoints.json in source distribution. (issue 2550,
    commit 7f907b7)
  + Pass along params in make_request for elastic transcoder api.
    (issue 2537, commit 964999e)
  + Support auth when headers contains bytes. (issue 2521, issue 2520,
    commit 885348d)
  + PEP8 style fixes for ElastiCache. (issue 2539, commit bd0d6db)
  + PEP8 style fixes for SES. (issue 2538, commit c620c43)
  + Update to latest Redshift API. (issue 2545, commit 9151092)
  + Update to latest support API. (issue 2541, issue 2426, commit 8cf1b52)
  + Uses file name as archive description when uploading to glacier.
    (issue 2535, issue 2528, commit 38478c1)
  + Fix the ec2.elb.listener.Listener class?s __getitem__ method.
    (issue 2533, commit 7b67f98)
  + Add recognized HTTP headers for S3 metadata. (issue 2477,
    issue 2050, commit c8c625a)
  + Fix class name for document. (issue 2530, commit 2f0e689)
  + Copy CloudSearch proxy settings to endpoint services. (issue 2513,
    commit 3cbbc21)
  + Merge branch ?develop? into cloudsearch2-proxy (commit 5b424db)
  + Add IAMer as an application built on boto. (issue 2515, commit 1f35224)
  + Fix Amazon Cognito links in docs (issue 2674, commit 7c28577)
  + fix ELB ConnectionSettings values in documentation (issue 2620,
    commit d2231a2)
  + Update count_slow documentation. (issue 2569, commit e926d2d)
  + Documents not found behavior of get_item(). (issue 2544, commit 9b9c1c4)
  + Doc updates for CloudSearch. (issue 2546, commit 9efebc2)</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430136000">- update to version 2.38.0:
  * Add support for Amazon Machine Learning
  * Fix issue with modify reserved instances for modifying instance
    type
- additional changes from version 2.37.0:
  * Update AWS CloudTrail to the latest API.
  * Add support for UsePreviousValue to CloudFormation UpdateStack.
  * Fix BOTH_PATH to work with Windows drives
  * Fix division calculation in S3 docs.
  * Add Boto 3 link in README.
  * Add more regions for configservice
  * Add ``eu-central-1`` endpoints (Frankfurt region) for IAM and
    Route53
  * Fix unit tests from hanging
  * Fixed wording in dynamodb tutorial
  * Update SWF objects to keep a consistent region name.
  * Print archive ID in glacier upload script.
  * Add some minor documentation for Route53 tutorial.
  * Add Amazon DynamoDB online indexing support on High level API
  * Ensure Content-Length header is a string.
  * Correct docs around overriding SGs on ELBs
  * Fix DynamoDB tests.
  * Fix region bug.
  * Fix import for ``boto.cloudhsm.layer1.CloudHSMConnection``.
- additional changes from version 2.36.0:
  * Add Amazon DynamoDB online indexing support.
  * Allow for binary to be passed to sqs message
  * Kinesis update
  * Fixed spelling of boto.awslambda package.
  * Add support for Amazon EC2 Container Service
  * Add support for CloudHSM
  * Add support for AWS Config
  * Add support for AWS CodeDeploy
  * Add support for AWS Lambda
  * Update both Cognito's to the latest APIs
  * Add sts for eu-central-1.
  * Update opsworks to latest API
  * Add AWS Key Managment Support
- additional changes from version 2.35.2:
  * Add support for new data types in DynamoDB.
  * Expose cloudformation `UsePreviousTemplate` parameter.
  * Fix documentation around using custom connections for DynamoDB
    tables.
  * Fixed bug that unable call query_2 after call describe method
    on dynamodb2 module.
- additional changes from version 2.35.1:
  * Check for results left after computing self._keys_left
- additional changes from version 2.35.0:
  * Add Amazon EC2 Classic Link support
  * Add query string to body for anon STS POST
  * Fix bug that prevented initializing a dynamo item from existing
    item
  * switchover-sigv4:   Add integ tests for sigv4 switchover
    Switch elb/ec2 over to signature version 4
  * Return SetStackPolicyResponse
  * Added ELB Attributes to docs.
  * Fix bug by using correct string joining syntax.
  * Fix SES get_identity_dkim_attributes when input length &gt; 1.
  * DynamoDB table batch_get fails to process all remaining results
    if single batch result is empty.
  * Added suppport for additional fields in EMR objects.
  * Pass version_id in copy if key is versioned.
  * Add support for SQS PurgeQueue operation.
  * Update documentation for launchconfig.
  * Remove unimplemented config param.
  * Add support for private hosted zones.
  * Fix Key.change_storage_class so that it obeys dst_bucket.
  * Fix for s3put host specification.
  * Improve handling of Glacier HTTP 204 responses.
  * Fix raising exception syntax in Python 3.
  * Privatezone: Adding unit/integration test coverage
  * Minor documentation/pep8 fixes.
  * Correct argument type in doc string.
  * Use exclusive start key to get all items from DynamoDB query.
  * Updated link to current config documentation.
  * Fix the SQS certificate error for region cn-north-1.
  * Adds support for getting health checker IP ranges from Route53.
  * fix: snap.create_volume documentation lists general purpose ssd
    Fixes @2774.
  * Fixed param type in get_contents_to_filename docstring.
  * Update DynamoDB local example to include fake access key id.
  * Added 'end' attribute to ReservedInstance.
  * Parse ClusterStatus?s StateChangeReason.
  * Adds SupportedProducts field to EMR JobFlow objects.
  * Fix EMR endpoint.
  * Detect old-style S3 URL for auto-sigv4.
  * Throw host warning for cloudsearch domain
  * Fix CloudSearch2 to work with IAM-based search and upload
    requests
  * iam: add support for Account Password Policy APIs
  * Handle sigv4 non-string header values properly
  * Url encode query string for pure query
- update project URL
- point source URL to pypi
- build python-boto-doc as a subpackage:
  * delete separate spec and changes file
  * merge entries of python-boto-doc.changes in python-boto.changes
  * add python-Sphinx as BuildRequires
  * break the dependency between the doc generation and boto
    by modifying Sphinx configuration file
- delete shebang of python file instead of setting them executable</changelog>
<changelog author="toddrme2178@gmail.com" date="1438171200">- Implement update-alternatives to allow for python 3 version,
  which is now supported upstream.
- specfile cleanups</changelog>
<changelog author="toddrme2178@gmail.com" date="1439467200">- Fix update-alternatives usage.</changelog>
<changelog author="rjschwei@suse.com" date="1452859200">- Add region_support.patch (bsc#962138)
  + Support new region ap-northeast-2
  + Add features to other reagions that are now supported by AWS</changelog>
<changelog author="toddrme2178@gmail.com" date="1454328000">- update to version 2.39.0:
  * Autodetect sigv4 for ap-northeast-2 (:issue:`3461`,
    :sha:`c2a17ce`)
  * Added support for ap-northeast-2 (:issue:`3454`, :sha:`c3c1ddd`)
  * Remove VeriSign Class 3 CA from trusted certs (:issue:`3450`,
    :sha:`8a025df`)
  * Add note about boto3 on all pages of boto docs (:sha:`9bd904c`)
  * Fix for listing EMR steps based on cluster_states filter
    (:issue:`3399`, :sha:`0f92f35`)
  * Fixed param name in set_contents_from_string docstring
    (:issue:`3420`, :sha:`e30297b`)
  * Closes #3441 Remove py3 test whitelist Update rds to pass on py3
    Update mturk to pass tests on py3 Update cloudsearchdomain tests
    to work with py3 (:issue:`3441`, :sha:`5b2f552`)
  * Run tests against py35 (:sha:`7d039d0`)
  * Fix Glacier test failure in python 3.5 due to MagicMock
    (:issue:`3412`, :sha:`d042f07`)
  * Undo log message change BF(PY3): use except ... as syntax instead
    of except ..., (:sha:`607cad7`)
  * Fix travis CI builds for PY3 (:issue:`3439`, :sha:`22ab610`)
  * Spelling fixes (:issue:`3425`, :sha:`f43bbbd`)
  * Fixed docs (:issue:`3401`, :sha:`4f66311`)
  * Add deprecation notice to emr methods (:issue:`3422`,
    :sha:`cee6159`)
  * Add some GovCloud endpoints (:issue:`3421`, :sha:`5afc068`)
- Remove upstream-included region_support.patch</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 2.42.0 (bsc#1002895)
  + Respect is_secure parameter in generate_url_sigv4 (commit 59ba28d)
  + Update MTurk API (issue 3563, commit 250d891)
- From 2.41.0
  + Update endpoints.json (issue 3564, commit 5e786b4)
  + Remove the broken link to PDF?s (issue 3562, commit 46ffb0c)
- From 2.40.0
  + ryansydnor-s3: Allow s3 bucket lifecycle policies with multiple
    transitions (commit c6d5af3)
  + Fixes upload parts for glacier (issue 3524, commit d1973a4)
  + pslawski-unicode-parse-qs: Move utility functions over to compat
    Add S3 integ test for non-ascii keys with sigv4 Fix quoting of tilde
    in S3 canonical_uri for sigv4 Parse unicode query string properly
    in Python 2 (issue 2844, commit 5092c6d)
  + ninchat-config-fix: Add __setstate__ to fix pickling test fail Add
    unit tests for config parsing Don?t access parser through
    __dict__ Config: Catch specific exceptions when wrapping ConfigParser
    methods Config: Don?t inherit from ConfigParser (issue 3474, commit c21aa54)</changelog>
<changelog author="dmueller@suse.com" date="1475755200">- fix requirements</changelog>

</package>
<package pkgid="a46fb39bad677b74a929bd7523fd51a1c1f5e98e5a837ad1e23867ec4f477196" name="python-boto3" arch="noarch">
    <version epoch="0" ver="1.4.4" rel="12.1"/>

<changelog author="rjschwei@suse.com" date="1452859200">- Initial build
  + Version 1.2.3</changelog>
<changelog author="rjschwei@suse.com" date="1453204800">- Fix license string</changelog>
<changelog author="rjschwei@suse.com" date="1454414400">- Include in SLE 12 (FATE#320335,bsc#962170)</changelog>
<changelog author="rjschwei@suse.com" date="1460116800">- Update to version 1.3.0 (bsc#974705)
  + feature:Session: Add get_available_partitions and get_available_regions
    methods to determine partitions and a service's available regions.
  + feature:EC2: Update resource model to include Route resources. (issue 532)
- From 1.2.6 - (2016-03-01)
  + bugfix:Resources: Properly alias identifiers which are also in the shape.
- From 1.2.5 - (2016-02-25)
  + bugfix:S3: Forward extra_args when using multipart downloads. (issue 503)
- From 1.2.4 - (2016-02-18)
  + feature:EC2: Add delete_tags() action to Instance resource. (issue 459)
  + feature:Session: Add region_name property on session. (issue 414)
  + bugfix:S3: Fix issue with hanging downloads. (issue 471)</changelog>
<changelog author="rjschwei@suse.com" date="1460116801">- Fix version requirement for botocore</changelog>
<changelog author="jacobwinski@gmail.com" date="1464868800">- Update to 1.3.1
  + feature:S3: Add custom load to ObjectSummary
  + feature:Session: Add method to get session credentials
  + bugfix:DynamoDB: Ensure batch writer never sends more than flush_amount (#483)
  + feature:Resources: Add get_available_subresources to Resources (#113)</changelog>
<changelog author="dmueller@suse.com" date="1465214400">- fix source url</changelog>
<changelog author="rjschwei@suse.com" date="1477396800">- Update to version 1.4.1 (bsc#1007084)
  + feature:Session: Expose available_profiles property for Session
    (``#704 &lt;https://github.com/boto/boto3/issues/704&gt;`__)
  + bugfix:s3: Fix issue when transfers would not exit quickly from signals
  + bugfix:sqs.Queue: Fix issue in DeadLetterSourceQueues collection
- From 1.4.0
  + feature:DynamoDB: Add request auto de-duplication based on specified
    primary keys for batch_writer. (#605)
  + feature:s3: Add managed file-like object uploads to S3 client, Bucket,
    and Object.
  + bugfix:Session: Fixed Session.__repr__ region argument name.
  + feature:s3: Add managed copies to S3 client, Bucket, and Object.
  + feature:s3: Add managed downloads to file-like objects in the S3 client,
    Bucket, and Object.
  + bugfix:s3: Port s3.transfer module to use s3transfer package. Please
    refer to Upgrading Notes when upgrading. In porting the logic over,
    various performance issues and bugs were fixed.
  + feature:s3: Add io_chunksize parameter to TransferConfig</changelog>
<changelog author="rjschwei@suse.com" date="1477483200">- Add missing dependency on python-s3transfer</changelog>
<changelog author="rjschwei@suse.com" date="1477483201">- Fix the version requirement for botocore to ensure proper functioning of
  the API</changelog>
<changelog author="rjschwei@suse.com" date="1481803200">- Update to version 1.4.2 (bsc#1015776)
  + feature:ec2: Update client to latest version</changelog>
<changelog author="astieger@suse.com" date="1484740800">- fetch upstream sources to fix Factory submission</changelog>
<changelog author="toddrme2178@gmail.com" date="1494504000">- Implement single-spec version
- Update source URL.
- Update to version 1.4.4
  * feature:``s3``: Add ability to disable thread use with ``use_threads`` option
  * bugfix:Resource: Fix resource hashing.</changelog>

</package>
<package pkgid="1759804a077f026a9265038f2b531ccd4d40c5b99dc19e5e318651fdfa769d18" name="python-boto3" arch="src">
    <version epoch="0" ver="1.4.4" rel="12.1"/>

<changelog author="rjschwei@suse.com" date="1452859200">- Initial build
  + Version 1.2.3</changelog>
<changelog author="rjschwei@suse.com" date="1453204800">- Fix license string</changelog>
<changelog author="rjschwei@suse.com" date="1454414400">- Include in SLE 12 (FATE#320335,bsc#962170)</changelog>
<changelog author="rjschwei@suse.com" date="1460116800">- Update to version 1.3.0 (bsc#974705)
  + feature:Session: Add get_available_partitions and get_available_regions
    methods to determine partitions and a service's available regions.
  + feature:EC2: Update resource model to include Route resources. (issue 532)
- From 1.2.6 - (2016-03-01)
  + bugfix:Resources: Properly alias identifiers which are also in the shape.
- From 1.2.5 - (2016-02-25)
  + bugfix:S3: Forward extra_args when using multipart downloads. (issue 503)
- From 1.2.4 - (2016-02-18)
  + feature:EC2: Add delete_tags() action to Instance resource. (issue 459)
  + feature:Session: Add region_name property on session. (issue 414)
  + bugfix:S3: Fix issue with hanging downloads. (issue 471)</changelog>
<changelog author="rjschwei@suse.com" date="1460116801">- Fix version requirement for botocore</changelog>
<changelog author="jacobwinski@gmail.com" date="1464868800">- Update to 1.3.1
  + feature:S3: Add custom load to ObjectSummary
  + feature:Session: Add method to get session credentials
  + bugfix:DynamoDB: Ensure batch writer never sends more than flush_amount (#483)
  + feature:Resources: Add get_available_subresources to Resources (#113)</changelog>
<changelog author="dmueller@suse.com" date="1465214400">- fix source url</changelog>
<changelog author="rjschwei@suse.com" date="1477396800">- Update to version 1.4.1 (bsc#1007084)
  + feature:Session: Expose available_profiles property for Session
    (``#704 &lt;https://github.com/boto/boto3/issues/704&gt;`__)
  + bugfix:s3: Fix issue when transfers would not exit quickly from signals
  + bugfix:sqs.Queue: Fix issue in DeadLetterSourceQueues collection
- From 1.4.0
  + feature:DynamoDB: Add request auto de-duplication based on specified
    primary keys for batch_writer. (#605)
  + feature:s3: Add managed file-like object uploads to S3 client, Bucket,
    and Object.
  + bugfix:Session: Fixed Session.__repr__ region argument name.
  + feature:s3: Add managed copies to S3 client, Bucket, and Object.
  + feature:s3: Add managed downloads to file-like objects in the S3 client,
    Bucket, and Object.
  + bugfix:s3: Port s3.transfer module to use s3transfer package. Please
    refer to Upgrading Notes when upgrading. In porting the logic over,
    various performance issues and bugs were fixed.
  + feature:s3: Add io_chunksize parameter to TransferConfig</changelog>
<changelog author="rjschwei@suse.com" date="1477483200">- Add missing dependency on python-s3transfer</changelog>
<changelog author="rjschwei@suse.com" date="1477483201">- Fix the version requirement for botocore to ensure proper functioning of
  the API</changelog>
<changelog author="rjschwei@suse.com" date="1481803200">- Update to version 1.4.2 (bsc#1015776)
  + feature:ec2: Update client to latest version</changelog>
<changelog author="astieger@suse.com" date="1484740800">- fetch upstream sources to fix Factory submission</changelog>
<changelog author="toddrme2178@gmail.com" date="1494504000">- Implement single-spec version
- Update source URL.
- Update to version 1.4.4
  * feature:``s3``: Add ability to disable thread use with ``use_threads`` option
  * bugfix:Resource: Fix resource hashing.</changelog>

</package>
<package pkgid="1e46947f4cdeeb3880828d3b8f8f0069fb7df257360e5fb9906853c99b011697" name="python-botocore" arch="noarch">
    <version epoch="0" ver="1.5.67" rel="12.1"/>

<changelog author="aboe76@gmail.com" date="1427284800">- Updated to version 0.97.0
  + Upstream remove CONTRIBUTING.rst and NOTICE from tarball
  + Updated hidepypckgmgmt.patch for latest version
  + there is no upstream changelog</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.105.0: no upstream changelog
- point source URL to pypi
- increase minimum required version of python-jmespath to 0.6.2
- remove python as BuildRequires, unneeded
- add fdupes as BuildRequires and call it after install</changelog>
<changelog author="rjschwei@suse.com" date="1432728000">- Update to version 1.0.0.a2 (alpha 2)
  + Update models to the latest version
  + Rename event to provide-client-params
  + Add client-method-called event to botocore
  + Update README with date of first alpha release</changelog>
<changelog author="rjschwei@suse.com" date="1433160000">- Update to version 1.0.0.a3 (alpha 3)
  + Fixes issue with APi inconsistency on seesion implementation</changelog>
<changelog author="rjschwei@suse.com" date="1438862400">- Update to version 1.1.6 (fate#318337, bsc#905354)
  + Updating devicefarm
  + Promote 2 functions from JSONParser to BaseJSONParser
  + No upstream changelog for changes between 1.0.0.a3 and 1.1.5
- Forward port hide_py_pckgmgmt.patch</changelog>
<changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.2.10 (bsc#949877)
  + No upstream changelog
- Forward port hide_py_pckgmgmt.patch</changelog>
<changelog author="tbechtold@suse.com" date="1447761600">- update to 1.3.7:
  + No upstream changelog
- Adjust Requires for python-docutils according to requires.txt</changelog>
<changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.3.12 (bsc#958686)
  + No upstream changelog</changelog>
<changelog author="rjschwei@suse.com" date="1453291200">- spec file improvements</changelog>
<changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 1.3.23
  + No upstream changelog</changelog>
<changelog author="toddrme2178@gmail.com" date="1458129600">- Change python-dateutil dependency to renamed python-python-dateutil</changelog>
<changelog author="rjschwei@suse.com" date="1460116800">- Update to version 1.4.10 (bsc#974705)
  + feature:Lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:DS: Added support for Directory Service Conditional Forwarder APIs.
  + feature:Elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting
    token format.
- From 1.4.9
  + feature:APIGateway: Added support for API Import
  + feature:Route53: Added support for metric-based health checks and
    regional health checks.
  + feature:STS: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include
    name and account, as well as the type of entity making the call, such
    as an IAM user vs. federated user.
  + feature:S3: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:S3: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
  + bugfix:Examples: Account for empty input shape in examples (issue 855)
- From 1.4.8
  + feature:ACM: Update client to latest version
  + feature:CloudFormation: Update client to latest version
  + feature:CodeDeploy: Update client to latest version
  + feature:DMS: Update client to latest version
  + feature:ElastiCache: Update client to latest version
  + feature:Elastic Beanstalk: Update client to latest version
  + feature:Redshift: Update client to latest version
  + feature:WAF: Update client to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginator (issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4 (issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502 (issue 853)
- From 1.4.7
  + feature:ElastiCache: Update client to latest version
  + feature:RDS: Update client to latest version
  + feature:StorageGateway: Update client to latest version
  + bugfix: Handle case where error response from proxy is received
    (`issue 850 &lt;https://github.com/boto/botocore/pull/850`__)
- From 1.4.6
  + feature:DeviceFarm: Add support to pay a flat monthly fee for unlimited
    testing of your Android and iOS apps with AWS Device Farm device slots
  + feature:RDS: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
  + bugfix:Signature Version 4: Fix issue when calculating signature
    version 4 signature for certain urls (issue 827)
- From 1.4.5
  + feature:MeteringMarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:S3: Added support for delete marker and abort multipart upload
    lifecycle configuration.
  + feature:IOT: Added support for Amazon Elasticsearch Service and Amazon
    Cloudwatch actions for the AWS IoT rules engine.
  + feature:CloudHSM: Added support for tagging resources.
- From 1.4.4
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints.json to latest version
- From 1.4.3
  + feature:GameLift: Update model to latest version
  + feature:IAM: Update model to latest version
  + feature:Redshift: Update model to latest version
- From 1.4.2
  + feature:ACM: Update model to latest version
  + feature:CodeCommit: Update model to latest version
  + feature:Config: Update model to latest version
  + feature:DeviceFarm: Update model to latest version
  + feature:DirectConnect: Update model to latest version
  + feature:Events: Update model to latest version
  + bugfix:DynamoDB Local: Fix issue when using the local region with
    dynamodb (issue 819)
  + bugfix:CloudSearchDomain: Fix issue when signing requests for
    cloudsearchdomain (boto3 issue 538)
- From 1.4.1
  + feature:Config: Moved Config to its own class to boost import speed
  + feature:EC2: Add support for VPC peering with security groups.
  + feature:DirectoryService: Add SNS event notification support
- From 1.4.0
  + feature:Regions: Add ability to list regions and endpoints for services
    in a partition. (issue 812)
  + feature:DynamoDB: Add support for DescribeLimits.
  + feature:APIGateway: Add support for TestInvokeAuthorizer and
    FlushStageAuthorizersCache operations.
  + feature:CloudSearchDomain: Add support for stats.
- From 1.3.28
  + feature:StorageGateway: Added support for user-supplied barcodes.
  + feature:CodeDeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:SSL: Fixed issue where AWS_CA_BUNDLE was not being used.
- From 1.3.27
  + feature:RDS: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:EMR: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Refactored pagination to handle non-string service
    tokens.
  + bugfix:credentials: Fix race condition in credential provider.
- No upstream changelogs prior to 1.3.27</changelog>
<changelog author="jacobwinski@gmail.com" date="1464868800">- Update to version 1.4.24
  + feature:elasticache: Update elasticache client to latest version
- Update to version 1.4.23
  + feature:rds: Update rds client to latest version
  + feature:ec2: Update ec2 client to latest version
- Update to version 1.4.22
  + feature:firehose: Update firehose client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:ecs: Update ecs client to latest version
- Update to version 1.4.21
  + feature:application-autoscaling: Adds support for Application Auto Scaling. Application Auto Scaling is a general purpose Auto Scaling service for supported elastic AWS resources. With Application Auto Scaling, you can automatically scale your AWS resources, with an experience similar to that of Auto Scaling.
  + feature:endpoints: Updated endpoints.json to latest.
- Update to version 1.4.20
  + feature:dynamodb: Update dynamodb client to latest version
  + bugfix:Waiters: Fix JMESPathTypeError exception being raised (#906, #907)
  + feature:workspaces: Update workspaces client to latest version
  + feature:s3: Add paginator for ListObjectsV2
  + feature:discovery: Update discovery client to latest version
  + feature:iam: Add missing paginators. Fixes #919.
- Update to version 1.4.19
  + feature:ec2: Update ec2 client to latest version
  + feature:ssm: Update ssm client to latest version
  + feature:discovery: Update discovery client to latest version
  + feature:cloudformation: Update cloudformation client to latest version
- Update to version 1.4.18
  + feature:storagegateway: Update storagegateway client to latest version
  + feature:directconnect: Update directconnect client to latest version
  + feature:emr: Update emr client to latest version
  + feature:sqs: Update sqs client to latest version
  + feature:iam: Update iam client to latest version
- Update to version 1.4.17
  + feature:kms: Update kms client to latest version
  + feature:sts: Update sts client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:ecs: Update ecs client to latest version
  + feature:s3: Update s3 client to latest version
  + feature:cloudtrail: Update cloudtrail client to latest version
- Update to version 1.4.16
  + feature:inspector: Update inspector client to latest version
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:opsworks: Add InstanceRegistered waiter
  + feature:elasticbeanstalk: Update elasticbeanstalk client to latest version
- Update to version 1.4.15
  + feature:route53domains: Update route53domains client to latest version
  + feature:opsworks: Update opsworks client to latest version
- Update to version 1.4.14
  + feature:ecr: Update ecr client to latest version
  + bugfix:aws kinesis: Fix issue where "EnhancedMonitoring" was not displayed when running aws kinesis describe-stream (#1929)
  + feature:acm: Update acm client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:sts: Update sts client to latest version
  + bugfix:Serializer: In the rest xml parser, we were converting the input we recieve into a str, which was causing failures on python 2 when multibyte unicode strings were passed in. The fix is to simply use six.text_type, which is unicode on 2 and str on 3. The string will be encoded into the default encoding later on in the serializer. Fixes #868
  + feature:cognito-idp: Update cognito-idp client to latest version
- Update to version 1.4.13
  + feature:EMR: Add support for smart targeted resize feature
  + feature:IOT: Add SQL RulesEngine version support
  + feature:ACM: Add tagging support for ACM
- Update to version 1.4.12
  + bugfix:Credentials: Include timezone information when storing refresh time (#869)
  + feature:EC2: Add support for two new EBS volume types
  + feature:S3: Add support for s3 accelerate configuration
  + feature:CognitoIdentityProvider: Add support for new service, CognitoIdedentityProvider
  + feature:S3: Add support for Amazon S3 Transfer Acceleration
  + feature:CodeCommit: Add paginators for CodeCommit (#881)
  + feature:Kinesis: Update Kinesis client to latest version
  + feature:ElasticBeanstalk: Add support for automatic platform version upgrades with managed updates
  + feature:DeviceFarm: Update DeviceFarm client to latest version
  + feature:FireHose: Update FireHose client to latest version
- Update to version 1.4.11
    feature:IoT: Add methods for managing CA certificates.
    bugfix:EC2: Fix issues with checking an incorrect error code in waiters.
    bugfix:Accept Header: Fix issue in overriding Accept header for API Gateway.</changelog>
<changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.4.28 (bsc#985858)
  + feature:cloudtrail: Update cloudtrail client to latest version
  + feature:acm: Update acm client to latest version
  + bugfix:Stubber: Fix regression in comparing multiple expected parameters
  + feature:rds: Update rds client to latest version
  + feature:ses: Update ses client to latest version
- From 1.4.27
  + feature:Stubber: Allow certain paramters to be ignored by specifying
    stub.ANY. Resolves #931
  + feature:s3: Update s3 client to latest version
- From 1.4.26
  + feature:Config: Add parameter_validation option in config file to
    disable parameter validation when making API calls (#905)
  + feature:dynamodbstreams: Update dynamodbstreams client to latest version
  + bugfix:s3: Make the stubber work with get_bucket_location
  + feature:iot: Update iot client to latest version
  + feature:machinelearning: Update machinelearning client to latest version
- From 1.4.25
  + feature:Stubber: Allow adding additional keys to the service error
    response.
  + feature:ec2: Update ec2 client to latest version
  + feature:application-autoscaling: Update application-autoscaling
    client to latest version</changelog>
<changelog author="rjschwei@suse.com" date="1477483200">- Update to version 1.4.67 (bsc#1007084)
  + feature:elbv2: Update elbv2 client to latest version
  + feature:autoscaling: Update autoscaling client to latest version
- From 1.4.66
  + feature:sms: Update sms client to latest version
  + feature:ecs: Update ecs client to latest version
- From 1.4.65
  + bugfix:Waiters: Add back missing fail fail states to cloudformation
    waiters (#1056)
  + feature:waf: Update waf client to latest version
  + feature:budgets: Update budgets client to latest version
- From 1.4.64
  + feature:cloudfront: Update cloudfront client to latest version
  + feature:iot: Update iot client to latest version
  + feature:config: Update config client to latest version
  + feature:rds: Update rds client to latest version
  + feature:kinesisanalytics: Update kinesisanalytics client to latest version
- From 1.4.63
  + feature:route53: Update route53 client to latest version
  + feature:regions: Add support us-east-2
- From 1.4.62
  + feature:elasticbeanstalk: Update elasticbeanstalk client to latest version
  + feature:acm: Update acm client to latest version
  + feature:gamelift: Update gamelift client to latest version
- From 1.4.61
  + feature:ecr: Update ecr client to latest version
  + feature:cloudfront: Update cloudfront client to latest version
  + feature:codedeploy: Update codedeploy client to latest version
  + feature:sns: Update sns client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:Client Meta: Add partition to client meta object (#1027)
  + feature:elasticache: Update elasticache client to latest version
  + feature:kms: Update kms client to latest version
  + feature:rds: Update rds client to latest version
  + feature:gamelift: Update gamelift client to latest version
- From 1.4.60
  + feature:opsworks: Update opsworks client to latest version
  + feature:devicefarm: Update devicefarm client to latest version
  + feature:kms: Update kms client to latest version
  + feature:s3: Update s3 client to latest version
  + feature:waf: Update waf client to latest version
  + feature:cognito-idp: Update cognito-idp client to latest version
- From 1.4.58
  + feature:snowball: Update snowball client to latest version
  + feature:s3: Update s3 client to latest version
  + feature:ec2: Update ec2 client to latest version
- From 1.4.57
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:kms: Update kms client to latest version
  + feature:efs: Update efs client to latest version
- From 1.4.56
  + feature:redshift: Update redshift client to latest version
  + feature:Stubber: Add ability to specify expected params when using
    add_client_error (#1025)
  + feature:emr: Update emr client to latest version
  + feature:codedeploy: Update codedeploy client to latest version
  + feature:rds: Update rds client to latest version
- From 1.4.55
  + feature:iot: Update iot client to latest version
  + feature:rds: Update rds client to latest version
- From 1.4.54
  + feature:EC2: Add NetworkAclExists waiter (#1019)
  + feature:Paginator: Add paginators for Application Auto Scaling
    service (#1029)
  + feature:Config: Add max_pool_connections to client config
    (#773, #766, #1026)
  + feature:ec2: Update ec2 client to latest version
  + feature:servicecatalog: Update servicecatalog client to latest version
- From 1.4.53
  + feature:support: Update support client to latest version
  + feature:cloudfront: Update cloudfront client to latest version
  + feature:sns: Update sns client to latest version
- From 1.4.52
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:rds: Update rds client to latest version
  + feature:sns: Update sns client to latest version
  + feature:ecr: Update ecr client to latest version
- From 1.4.51
  + feature:rds: Update rds client to latest version
  + feature:ResponseMetadata: Add MaxAttemptsReached and RetryAttempts keys
    to the returned ResonseMetadata dictionary (#1024, #965, #926)
  + feature:application-autoscaling: Update application-autoscaling client
    to latest version
  + feature:cognito-idp: Update cognito-idp client to latest version
  + feature:Waiters: Add last_response attribute to WaiterError (#1023, #957)
  + feature:config: Update config client to latest version
  + feature:gamelift: Update gamelift client to latest version
- From 1.4.50
  + feature:autoscaling: Update autoscaling client to latest version
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:ssm: Update ssm client to latest version
  + feature:cloudfront: Update cloudfront client to latest version
  + feature:route53: Update route53 client to latest version
- From 1.4.49
  + feature:rds: Update rds client to latest version
  + feature:opsworks: Update opsworks client to latest version
- From 1.4.48
  + feature:ec2: Update ec2 client to latest version
  + feature:iam: Update iam client to latest version
  + feature:workspaces: Update workspaces client to latest version
- From 1.4.47
  + feature:elbv2: Update elbv2 client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:ecs: Update ecs client to latest version
  + feature:acm: Update acm client to latest version
  + feature:kms: Update kms client to latest version
- From 1.4.45
  + feature:kms: Update kms client to latest version
  + feature:kinesisanalytics: Update kinesisanalytics client to latest version
  + feature:autoscaling: Update autoscaling client to latest version
  + feature:elb: Update elb client to latest version
  + feature:ecs: Update ecs client to latest version
  + feature:s3: Add support for s3 dualstack configuration
  + feature:snowball: Update snowball client to latest version
  + feature:elbv2: Update elbv2 client to latest version
- From 1.4.44
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    client to latest version
  + feature:ecr: Update ecr client to latest version
  + feature:cloudfront: Update cloudfront client to latest version
- From 1.4.43
  + feature:lambda: Update lambda client to latest version
  + feature:gamelift: Update gamelift client to latest version
  + feature:rds: Update rds client to latest version
- From 1.4.42
  + bugfix:Serialization: Account for boolean in query string serialization
  + feature:rds: Update rds client to latest version
  + feature:iot: Update iot client to latest version
  + feature:ds: Update ds client to latest version
  + feature:meteringmarketplace: Update meteringmarketplace client to
    latest version
  + feature:route53domains: Update route53domains client to latest version
  + feature:application-autoscaling: Update application-autoscaling client
    to latest version
  + feature:emr: Update emr client to latest version
  + feature:cloudwatch: Update cloudwatch client to latest version
  + feature:logs: Update logs client to latest version
  + feature:machinelearning: Update machinelearning client to latest version
- From 1.4.41
  + feature:ds: Update ds client to latest version
  + feature:ses: Update ses client to latest version
  + bugfix:s3: S3 region redirector will now honor the orginial url scheme.
  + feature:sts: Update sts client to latest version
  + feature:cognito-idp: Update cognito-idp client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:es: Update es client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + bugfix:Credentials: Raise error when partial hard coded creds are
    provided when creating a client.
- From 1.4.40
  + feature:s3: Update s3 client to latest version
  + feature:codedeploy: Add a waiter to wait on successful deployments.
  + feature:iot: Update iot client to latest version
- From 1.4.39
  + feature:acm: Update acm client to latest version
  + feature:elastictranscoder: Update elastictranscoder client to latest
    version
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:config: Update config client to latest version
  + feature:application-autoscaling: Update application-autoscaling client
    to latest version
- From 1.4.38
  + feature:ssm: Update ssm client to latest version
  + feature:devicefarm: Update devicefarm client to latest version
- From 1.4.37
  + feature:dms: Update dms client to latest version
  + feature:ecs: Update ecs client to latest version
  + Feature:Credential Provider: Add support for ECS metadata credential
    provider.
  + feature:rds: Update rds client to latest version
- From 1.4.36
  + feature:servicecatalog: Update servicecatalog client to latest version
  + feature:opsworks: Update opsworks client to latest version
  + feature:ds: Update ds client to latest version
  + feature:config: Update config client to latest version
- From 1.4.35
  + feature:iam: Update iam client to latest version
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:efs: Update efs client to latest version
- From 1.4.34
  + feature:dms: Update dms client to latest version
  + feature:ssm: Update ssm client to latest version
- From 1.4.33
  + feature:sns: Update sns client to latest version
  + feature:route53: Update route53 client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:gamelift: Update gamelift client to latest version
  + feature:efs: Update efs client to latest version
  + feature:iot: Update iot client to latest version
- From 1.4.32
  + bugfix:S3: Fixed a bug where the S3 region redirector was potentially
    causing a memory leak on python 2.6.
  + feature:s3: Update s3 client to latest version
- From 1.4.31
  + bugfix:RequestSigner: RequestSigner.generate_presigned_url now requires
    the operation name to be passed in. This does not affect using
    generate_presigned_url through a client.
  + feature:rds: Update rds client to latest version
  + feature:directconnect: Update directconnect client to latest version
  + feature:RequestSigner: Allow botocore.UNSIGNED to be used with
    generate_presigned_url and generate_presigned_post.
  + feature:ec2: Update ec2 client to latest version
  + feature:cognito-identity: Update cognito-identity client to latest version
  + feature:iam: Update iam client to latest version
- From1.4.30
  + bugfix:AssumeRole: Fix regression introduced in #920 where assume role
    responses error out when attempting to cache a response. (#961)
- From 1.4.29
  + feature:ResponseMetadata: Add http response headers to the response
    metadata.
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:s3: Automatically redirect S3 sigv4 requests sent to the wrong
    region.
  + feature:opsworks: Update opsworks client to latest version
  + feature:s3: Use MD5 to sign S3 bodies by default.
  + bugfix:EC2: Replace chars in the EC2 console output we can't decode
    with replacement chars. We were previously returning either the decoded
    content or the original base64 encoded content. We now will consistently
    return decoded output, any any chars we can't decode are substituted
    with a replacement char. (#953)</changelog>
<changelog author="rjschwei@suse.com" date="1481803200">- Update to bersion 1.4.86 (bsc#1015776)
  + feature:dms: Update dms client to latest version
  + feature:rds: Update rds client to latest version
  + feature:logs: Update logs client to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    client to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk client to latest version
  + feature:sts: Update sts client to latest version
  + feature:batch: Update batch client to latest version
- From 1.4.85
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.4.84
  + feature:config: Update config client to latest version
  + feature:health: Add paginators for Health.
  + feature:sqs: Update sqs client to latest version
  + feature:s3: Update s3 client to latest version
- From 1.4.83
  + feature:pinpoint: Update pinpoint client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:sts: Update sts client to latest version
  + feature:config: Update config client to latest version
- From 1.4.82
  + bugfix:Exceptions: Allow parsing of json error responses with non-json
    bodies.
  + feature:opsworks-cm: Added waiter for Opsworks CM
- From 1.4.81
  + feature:parameter: Automatically inject an idempotency token into
    parameters marked with the idempotencyToken trait
  + feature:appstream: Update appstream client to latest version
  + feature:directconnect: Update directconnect client to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk client to latest version
  + feature:shield: Update shield client to latest version
  + feature:opsworkscm: Update opsworkscm client to latest version
  + feature:lambda: Update lambda client to latest version
  + feature:codebuild: Update codebuild client to latest version
  + feature:xray: Update xray client to latest version
  + feature:stepfunctions: Update stepfunctions client to latest version
  + feature:ssm: Update ssm client to latest version
  + feature:health: Update health client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:pinpoint: Update pinpoint client to latest version
- From 1.4.80
  + feature:lightsail: Update lightsail client to latest version
  + feature:polly: Update polly client to latest version
  + feature:snowball: Update snowball client to latest version
  + feature:rekognition: Update rekognition client to latest version
- From 1.4.79
  + bugfix:s3: fixes #1059 (presigned s3v4 URL bug related to blank query
    parameters being filtered incorrectly)
  + feature:s3: Update s3 client to latest version
  + bugfix:Presigner: Support presigning rest-json services.
- From 1.4.78
  + feature:s3: Update s3 client to latest version
  + feature:glacier: Update glacier client to latest version
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:route53: Update route53 client to latest version
- From 1.4.77
  + feature:cloudtrail: Update cloudtrail client to latest version
  + feature:ecs: Update ecs client to latest version
- From 1.4.76
  + feature:application-autoscaling: Update application-autoscaling client
    to latest version
  + feature:elastictranscoder: Update elastictranscoder client to latest version
  + feature:lambda: Update lambda client to latest version
  + feature:emr: Update emr client to latest version
  + feature:gamelift: Update gamelift client to latest version
- From 1.4.75
  + feature:Loader: Support loading json extra files.
  + feature:meteringmarketplace: Update meteringmarketplace client to
    latest version
  + feature:cloudwatch: Update cloudwatch client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:sqs: Update sqs client to latest version
- From 1.4.74
  + feature:route53: Update route53 client to latest version
  + feature:servicecatalog: Update servicecatalog client to latest version
- From 1.4.73
  + feature:kinesis: Update kinesis client to latest version
  + feature:ds: Update ds client to latest version
  + feature:elasticache: Update elasticache client to latest version
- From 1.4.72
  + feature:cognito-idp: Update cognito-idp client to latest version
  + feature:Paginator: Add paginators for AWS WAF
- From 1.4.71
  + bugfix:Parsers: ResponseMetadata will now always be populated, provided
    the response was able to be parsed into a dict.
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:logs: Update logs client to latest version
- From 1.4.70
  + feature:directconnect: Update directconnect client to latest version
- From 1.4.69
  + feature:ses: Update ses client to latest version
- From 1.4.68
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:Stub: Made ANY usable for nested parameters</changelog>
<changelog author="dmueller@suse.com" date="1483358400">- switch to pypi package and fix source url</changelog>
<changelog author="toddrme2178@gmail.com" date="1488283200">- Implement single-spec version.
- Fix source URL.
- Update to 1.5.47
  Too many changes to list, please see:
  https://github.com/boto/botocore/blob/1.5.47/CHANGELOG.rst</changelog>
<changelog author="rjschwei@suse.com" date="1494417600">- Fix source URL missing "/"</changelog>
<changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.5.67 (bsc#1044370)
  + For details see
    https://github.com/boto/botocore/blob/1.5.67/CHANGELOG.rst</changelog>

</package>
<package pkgid="6f856ceda83e9eb0ef0be9c353d3fa5d8736b75d2e4d8884ec706d08b6b2553c" name="python-botocore" arch="src">
    <version epoch="0" ver="1.5.67" rel="12.1"/>

<changelog author="aboe76@gmail.com" date="1427284800">- Updated to version 0.97.0
  + Upstream remove CONTRIBUTING.rst and NOTICE from tarball
  + Updated hidepypckgmgmt.patch for latest version
  + there is no upstream changelog</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.105.0: no upstream changelog
- point source URL to pypi
- increase minimum required version of python-jmespath to 0.6.2
- remove python as BuildRequires, unneeded
- add fdupes as BuildRequires and call it after install</changelog>
<changelog author="rjschwei@suse.com" date="1432728000">- Update to version 1.0.0.a2 (alpha 2)
  + Update models to the latest version
  + Rename event to provide-client-params
  + Add client-method-called event to botocore
  + Update README with date of first alpha release</changelog>
<changelog author="rjschwei@suse.com" date="1433160000">- Update to version 1.0.0.a3 (alpha 3)
  + Fixes issue with APi inconsistency on seesion implementation</changelog>
<changelog author="rjschwei@suse.com" date="1438862400">- Update to version 1.1.6 (fate#318337, bsc#905354)
  + Updating devicefarm
  + Promote 2 functions from JSONParser to BaseJSONParser
  + No upstream changelog for changes between 1.0.0.a3 and 1.1.5
- Forward port hide_py_pckgmgmt.patch</changelog>
<changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.2.10 (bsc#949877)
  + No upstream changelog
- Forward port hide_py_pckgmgmt.patch</changelog>
<changelog author="tbechtold@suse.com" date="1447761600">- update to 1.3.7:
  + No upstream changelog
- Adjust Requires for python-docutils according to requires.txt</changelog>
<changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.3.12 (bsc#958686)
  + No upstream changelog</changelog>
<changelog author="rjschwei@suse.com" date="1453291200">- spec file improvements</changelog>
<changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 1.3.23
  + No upstream changelog</changelog>
<changelog author="toddrme2178@gmail.com" date="1458129600">- Change python-dateutil dependency to renamed python-python-dateutil</changelog>
<changelog author="rjschwei@suse.com" date="1460116800">- Update to version 1.4.10 (bsc#974705)
  + feature:Lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:DS: Added support for Directory Service Conditional Forwarder APIs.
  + feature:Elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting
    token format.
- From 1.4.9
  + feature:APIGateway: Added support for API Import
  + feature:Route53: Added support for metric-based health checks and
    regional health checks.
  + feature:STS: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include
    name and account, as well as the type of entity making the call, such
    as an IAM user vs. federated user.
  + feature:S3: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:S3: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
  + bugfix:Examples: Account for empty input shape in examples (issue 855)
- From 1.4.8
  + feature:ACM: Update client to latest version
  + feature:CloudFormation: Update client to latest version
  + feature:CodeDeploy: Update client to latest version
  + feature:DMS: Update client to latest version
  + feature:ElastiCache: Update client to latest version
  + feature:Elastic Beanstalk: Update client to latest version
  + feature:Redshift: Update client to latest version
  + feature:WAF: Update client to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginator (issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4 (issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502 (issue 853)
- From 1.4.7
  + feature:ElastiCache: Update client to latest version
  + feature:RDS: Update client to latest version
  + feature:StorageGateway: Update client to latest version
  + bugfix: Handle case where error response from proxy is received
    (`issue 850 &lt;https://github.com/boto/botocore/pull/850`__)
- From 1.4.6
  + feature:DeviceFarm: Add support to pay a flat monthly fee for unlimited
    testing of your Android and iOS apps with AWS Device Farm device slots
  + feature:RDS: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
  + bugfix:Signature Version 4: Fix issue when calculating signature
    version 4 signature for certain urls (issue 827)
- From 1.4.5
  + feature:MeteringMarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:S3: Added support for delete marker and abort multipart upload
    lifecycle configuration.
  + feature:IOT: Added support for Amazon Elasticsearch Service and Amazon
    Cloudwatch actions for the AWS IoT rules engine.
  + feature:CloudHSM: Added support for tagging resources.
- From 1.4.4
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints.json to latest version
- From 1.4.3
  + feature:GameLift: Update model to latest version
  + feature:IAM: Update model to latest version
  + feature:Redshift: Update model to latest version
- From 1.4.2
  + feature:ACM: Update model to latest version
  + feature:CodeCommit: Update model to latest version
  + feature:Config: Update model to latest version
  + feature:DeviceFarm: Update model to latest version
  + feature:DirectConnect: Update model to latest version
  + feature:Events: Update model to latest version
  + bugfix:DynamoDB Local: Fix issue when using the local region with
    dynamodb (issue 819)
  + bugfix:CloudSearchDomain: Fix issue when signing requests for
    cloudsearchdomain (boto3 issue 538)
- From 1.4.1
  + feature:Config: Moved Config to its own class to boost import speed
  + feature:EC2: Add support for VPC peering with security groups.
  + feature:DirectoryService: Add SNS event notification support
- From 1.4.0
  + feature:Regions: Add ability to list regions and endpoints for services
    in a partition. (issue 812)
  + feature:DynamoDB: Add support for DescribeLimits.
  + feature:APIGateway: Add support for TestInvokeAuthorizer and
    FlushStageAuthorizersCache operations.
  + feature:CloudSearchDomain: Add support for stats.
- From 1.3.28
  + feature:StorageGateway: Added support for user-supplied barcodes.
  + feature:CodeDeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:SSL: Fixed issue where AWS_CA_BUNDLE was not being used.
- From 1.3.27
  + feature:RDS: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:EMR: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Refactored pagination to handle non-string service
    tokens.
  + bugfix:credentials: Fix race condition in credential provider.
- No upstream changelogs prior to 1.3.27</changelog>
<changelog author="jacobwinski@gmail.com" date="1464868800">- Update to version 1.4.24
  + feature:elasticache: Update elasticache client to latest version
- Update to version 1.4.23
  + feature:rds: Update rds client to latest version
  + feature:ec2: Update ec2 client to latest version
- Update to version 1.4.22
  + feature:firehose: Update firehose client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:ecs: Update ecs client to latest version
- Update to version 1.4.21
  + feature:application-autoscaling: Adds support for Application Auto Scaling. Application Auto Scaling is a general purpose Auto Scaling service for supported elastic AWS resources. With Application Auto Scaling, you can automatically scale your AWS resources, with an experience similar to that of Auto Scaling.
  + feature:endpoints: Updated endpoints.json to latest.
- Update to version 1.4.20
  + feature:dynamodb: Update dynamodb client to latest version
  + bugfix:Waiters: Fix JMESPathTypeError exception being raised (#906, #907)
  + feature:workspaces: Update workspaces client to latest version
  + feature:s3: Add paginator for ListObjectsV2
  + feature:discovery: Update discovery client to latest version
  + feature:iam: Add missing paginators. Fixes #919.
- Update to version 1.4.19
  + feature:ec2: Update ec2 client to latest version
  + feature:ssm: Update ssm client to latest version
  + feature:discovery: Update discovery client to latest version
  + feature:cloudformation: Update cloudformation client to latest version
- Update to version 1.4.18
  + feature:storagegateway: Update storagegateway client to latest version
  + feature:directconnect: Update directconnect client to latest version
  + feature:emr: Update emr client to latest version
  + feature:sqs: Update sqs client to latest version
  + feature:iam: Update iam client to latest version
- Update to version 1.4.17
  + feature:kms: Update kms client to latest version
  + feature:sts: Update sts client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:ecs: Update ecs client to latest version
  + feature:s3: Update s3 client to latest version
  + feature:cloudtrail: Update cloudtrail client to latest version
- Update to version 1.4.16
  + feature:inspector: Update inspector client to latest version
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:opsworks: Add InstanceRegistered waiter
  + feature:elasticbeanstalk: Update elasticbeanstalk client to latest version
- Update to version 1.4.15
  + feature:route53domains: Update route53domains client to latest version
  + feature:opsworks: Update opsworks client to latest version
- Update to version 1.4.14
  + feature:ecr: Update ecr client to latest version
  + bugfix:aws kinesis: Fix issue where "EnhancedMonitoring" was not displayed when running aws kinesis describe-stream (#1929)
  + feature:acm: Update acm client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:sts: Update sts client to latest version
  + bugfix:Serializer: In the rest xml parser, we were converting the input we recieve into a str, which was causing failures on python 2 when multibyte unicode strings were passed in. The fix is to simply use six.text_type, which is unicode on 2 and str on 3. The string will be encoded into the default encoding later on in the serializer. Fixes #868
  + feature:cognito-idp: Update cognito-idp client to latest version
- Update to version 1.4.13
  + feature:EMR: Add support for smart targeted resize feature
  + feature:IOT: Add SQL RulesEngine version support
  + feature:ACM: Add tagging support for ACM
- Update to version 1.4.12
  + bugfix:Credentials: Include timezone information when storing refresh time (#869)
  + feature:EC2: Add support for two new EBS volume types
  + feature:S3: Add support for s3 accelerate configuration
  + feature:CognitoIdentityProvider: Add support for new service, CognitoIdedentityProvider
  + feature:S3: Add support for Amazon S3 Transfer Acceleration
  + feature:CodeCommit: Add paginators for CodeCommit (#881)
  + feature:Kinesis: Update Kinesis client to latest version
  + feature:ElasticBeanstalk: Add support for automatic platform version upgrades with managed updates
  + feature:DeviceFarm: Update DeviceFarm client to latest version
  + feature:FireHose: Update FireHose client to latest version
- Update to version 1.4.11
    feature:IoT: Add methods for managing CA certificates.
    bugfix:EC2: Fix issues with checking an incorrect error code in waiters.
    bugfix:Accept Header: Fix issue in overriding Accept header for API Gateway.</changelog>
<changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.4.28 (bsc#985858)
  + feature:cloudtrail: Update cloudtrail client to latest version
  + feature:acm: Update acm client to latest version
  + bugfix:Stubber: Fix regression in comparing multiple expected parameters
  + feature:rds: Update rds client to latest version
  + feature:ses: Update ses client to latest version
- From 1.4.27
  + feature:Stubber: Allow certain paramters to be ignored by specifying
    stub.ANY. Resolves #931
  + feature:s3: Update s3 client to latest version
- From 1.4.26
  + feature:Config: Add parameter_validation option in config file to
    disable parameter validation when making API calls (#905)
  + feature:dynamodbstreams: Update dynamodbstreams client to latest version
  + bugfix:s3: Make the stubber work with get_bucket_location
  + feature:iot: Update iot client to latest version
  + feature:machinelearning: Update machinelearning client to latest version
- From 1.4.25
  + feature:Stubber: Allow adding additional keys to the service error
    response.
  + feature:ec2: Update ec2 client to latest version
  + feature:application-autoscaling: Update application-autoscaling
    client to latest version</changelog>
<changelog author="rjschwei@suse.com" date="1477483200">- Update to version 1.4.67 (bsc#1007084)
  + feature:elbv2: Update elbv2 client to latest version
  + feature:autoscaling: Update autoscaling client to latest version
- From 1.4.66
  + feature:sms: Update sms client to latest version
  + feature:ecs: Update ecs client to latest version
- From 1.4.65
  + bugfix:Waiters: Add back missing fail fail states to cloudformation
    waiters (#1056)
  + feature:waf: Update waf client to latest version
  + feature:budgets: Update budgets client to latest version
- From 1.4.64
  + feature:cloudfront: Update cloudfront client to latest version
  + feature:iot: Update iot client to latest version
  + feature:config: Update config client to latest version
  + feature:rds: Update rds client to latest version
  + feature:kinesisanalytics: Update kinesisanalytics client to latest version
- From 1.4.63
  + feature:route53: Update route53 client to latest version
  + feature:regions: Add support us-east-2
- From 1.4.62
  + feature:elasticbeanstalk: Update elasticbeanstalk client to latest version
  + feature:acm: Update acm client to latest version
  + feature:gamelift: Update gamelift client to latest version
- From 1.4.61
  + feature:ecr: Update ecr client to latest version
  + feature:cloudfront: Update cloudfront client to latest version
  + feature:codedeploy: Update codedeploy client to latest version
  + feature:sns: Update sns client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:Client Meta: Add partition to client meta object (#1027)
  + feature:elasticache: Update elasticache client to latest version
  + feature:kms: Update kms client to latest version
  + feature:rds: Update rds client to latest version
  + feature:gamelift: Update gamelift client to latest version
- From 1.4.60
  + feature:opsworks: Update opsworks client to latest version
  + feature:devicefarm: Update devicefarm client to latest version
  + feature:kms: Update kms client to latest version
  + feature:s3: Update s3 client to latest version
  + feature:waf: Update waf client to latest version
  + feature:cognito-idp: Update cognito-idp client to latest version
- From 1.4.58
  + feature:snowball: Update snowball client to latest version
  + feature:s3: Update s3 client to latest version
  + feature:ec2: Update ec2 client to latest version
- From 1.4.57
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:kms: Update kms client to latest version
  + feature:efs: Update efs client to latest version
- From 1.4.56
  + feature:redshift: Update redshift client to latest version
  + feature:Stubber: Add ability to specify expected params when using
    add_client_error (#1025)
  + feature:emr: Update emr client to latest version
  + feature:codedeploy: Update codedeploy client to latest version
  + feature:rds: Update rds client to latest version
- From 1.4.55
  + feature:iot: Update iot client to latest version
  + feature:rds: Update rds client to latest version
- From 1.4.54
  + feature:EC2: Add NetworkAclExists waiter (#1019)
  + feature:Paginator: Add paginators for Application Auto Scaling
    service (#1029)
  + feature:Config: Add max_pool_connections to client config
    (#773, #766, #1026)
  + feature:ec2: Update ec2 client to latest version
  + feature:servicecatalog: Update servicecatalog client to latest version
- From 1.4.53
  + feature:support: Update support client to latest version
  + feature:cloudfront: Update cloudfront client to latest version
  + feature:sns: Update sns client to latest version
- From 1.4.52
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:rds: Update rds client to latest version
  + feature:sns: Update sns client to latest version
  + feature:ecr: Update ecr client to latest version
- From 1.4.51
  + feature:rds: Update rds client to latest version
  + feature:ResponseMetadata: Add MaxAttemptsReached and RetryAttempts keys
    to the returned ResonseMetadata dictionary (#1024, #965, #926)
  + feature:application-autoscaling: Update application-autoscaling client
    to latest version
  + feature:cognito-idp: Update cognito-idp client to latest version
  + feature:Waiters: Add last_response attribute to WaiterError (#1023, #957)
  + feature:config: Update config client to latest version
  + feature:gamelift: Update gamelift client to latest version
- From 1.4.50
  + feature:autoscaling: Update autoscaling client to latest version
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:ssm: Update ssm client to latest version
  + feature:cloudfront: Update cloudfront client to latest version
  + feature:route53: Update route53 client to latest version
- From 1.4.49
  + feature:rds: Update rds client to latest version
  + feature:opsworks: Update opsworks client to latest version
- From 1.4.48
  + feature:ec2: Update ec2 client to latest version
  + feature:iam: Update iam client to latest version
  + feature:workspaces: Update workspaces client to latest version
- From 1.4.47
  + feature:elbv2: Update elbv2 client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:ecs: Update ecs client to latest version
  + feature:acm: Update acm client to latest version
  + feature:kms: Update kms client to latest version
- From 1.4.45
  + feature:kms: Update kms client to latest version
  + feature:kinesisanalytics: Update kinesisanalytics client to latest version
  + feature:autoscaling: Update autoscaling client to latest version
  + feature:elb: Update elb client to latest version
  + feature:ecs: Update ecs client to latest version
  + feature:s3: Add support for s3 dualstack configuration
  + feature:snowball: Update snowball client to latest version
  + feature:elbv2: Update elbv2 client to latest version
- From 1.4.44
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    client to latest version
  + feature:ecr: Update ecr client to latest version
  + feature:cloudfront: Update cloudfront client to latest version
- From 1.4.43
  + feature:lambda: Update lambda client to latest version
  + feature:gamelift: Update gamelift client to latest version
  + feature:rds: Update rds client to latest version
- From 1.4.42
  + bugfix:Serialization: Account for boolean in query string serialization
  + feature:rds: Update rds client to latest version
  + feature:iot: Update iot client to latest version
  + feature:ds: Update ds client to latest version
  + feature:meteringmarketplace: Update meteringmarketplace client to
    latest version
  + feature:route53domains: Update route53domains client to latest version
  + feature:application-autoscaling: Update application-autoscaling client
    to latest version
  + feature:emr: Update emr client to latest version
  + feature:cloudwatch: Update cloudwatch client to latest version
  + feature:logs: Update logs client to latest version
  + feature:machinelearning: Update machinelearning client to latest version
- From 1.4.41
  + feature:ds: Update ds client to latest version
  + feature:ses: Update ses client to latest version
  + bugfix:s3: S3 region redirector will now honor the orginial url scheme.
  + feature:sts: Update sts client to latest version
  + feature:cognito-idp: Update cognito-idp client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:es: Update es client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + bugfix:Credentials: Raise error when partial hard coded creds are
    provided when creating a client.
- From 1.4.40
  + feature:s3: Update s3 client to latest version
  + feature:codedeploy: Add a waiter to wait on successful deployments.
  + feature:iot: Update iot client to latest version
- From 1.4.39
  + feature:acm: Update acm client to latest version
  + feature:elastictranscoder: Update elastictranscoder client to latest
    version
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:config: Update config client to latest version
  + feature:application-autoscaling: Update application-autoscaling client
    to latest version
- From 1.4.38
  + feature:ssm: Update ssm client to latest version
  + feature:devicefarm: Update devicefarm client to latest version
- From 1.4.37
  + feature:dms: Update dms client to latest version
  + feature:ecs: Update ecs client to latest version
  + Feature:Credential Provider: Add support for ECS metadata credential
    provider.
  + feature:rds: Update rds client to latest version
- From 1.4.36
  + feature:servicecatalog: Update servicecatalog client to latest version
  + feature:opsworks: Update opsworks client to latest version
  + feature:ds: Update ds client to latest version
  + feature:config: Update config client to latest version
- From 1.4.35
  + feature:iam: Update iam client to latest version
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:efs: Update efs client to latest version
- From 1.4.34
  + feature:dms: Update dms client to latest version
  + feature:ssm: Update ssm client to latest version
- From 1.4.33
  + feature:sns: Update sns client to latest version
  + feature:route53: Update route53 client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:gamelift: Update gamelift client to latest version
  + feature:efs: Update efs client to latest version
  + feature:iot: Update iot client to latest version
- From 1.4.32
  + bugfix:S3: Fixed a bug where the S3 region redirector was potentially
    causing a memory leak on python 2.6.
  + feature:s3: Update s3 client to latest version
- From 1.4.31
  + bugfix:RequestSigner: RequestSigner.generate_presigned_url now requires
    the operation name to be passed in. This does not affect using
    generate_presigned_url through a client.
  + feature:rds: Update rds client to latest version
  + feature:directconnect: Update directconnect client to latest version
  + feature:RequestSigner: Allow botocore.UNSIGNED to be used with
    generate_presigned_url and generate_presigned_post.
  + feature:ec2: Update ec2 client to latest version
  + feature:cognito-identity: Update cognito-identity client to latest version
  + feature:iam: Update iam client to latest version
- From1.4.30
  + bugfix:AssumeRole: Fix regression introduced in #920 where assume role
    responses error out when attempting to cache a response. (#961)
- From 1.4.29
  + feature:ResponseMetadata: Add http response headers to the response
    metadata.
  + feature:codepipeline: Update codepipeline client to latest version
  + feature:s3: Automatically redirect S3 sigv4 requests sent to the wrong
    region.
  + feature:opsworks: Update opsworks client to latest version
  + feature:s3: Use MD5 to sign S3 bodies by default.
  + bugfix:EC2: Replace chars in the EC2 console output we can't decode
    with replacement chars. We were previously returning either the decoded
    content or the original base64 encoded content. We now will consistently
    return decoded output, any any chars we can't decode are substituted
    with a replacement char. (#953)</changelog>
<changelog author="rjschwei@suse.com" date="1481803200">- Update to bersion 1.4.86 (bsc#1015776)
  + feature:dms: Update dms client to latest version
  + feature:rds: Update rds client to latest version
  + feature:logs: Update logs client to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    client to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk client to latest version
  + feature:sts: Update sts client to latest version
  + feature:batch: Update batch client to latest version
- From 1.4.85
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.4.84
  + feature:config: Update config client to latest version
  + feature:health: Add paginators for Health.
  + feature:sqs: Update sqs client to latest version
  + feature:s3: Update s3 client to latest version
- From 1.4.83
  + feature:pinpoint: Update pinpoint client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:sts: Update sts client to latest version
  + feature:config: Update config client to latest version
- From 1.4.82
  + bugfix:Exceptions: Allow parsing of json error responses with non-json
    bodies.
  + feature:opsworks-cm: Added waiter for Opsworks CM
- From 1.4.81
  + feature:parameter: Automatically inject an idempotency token into
    parameters marked with the idempotencyToken trait
  + feature:appstream: Update appstream client to latest version
  + feature:directconnect: Update directconnect client to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk client to latest version
  + feature:shield: Update shield client to latest version
  + feature:opsworkscm: Update opsworkscm client to latest version
  + feature:lambda: Update lambda client to latest version
  + feature:codebuild: Update codebuild client to latest version
  + feature:xray: Update xray client to latest version
  + feature:stepfunctions: Update stepfunctions client to latest version
  + feature:ssm: Update ssm client to latest version
  + feature:health: Update health client to latest version
  + feature:ec2: Update ec2 client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:pinpoint: Update pinpoint client to latest version
- From 1.4.80
  + feature:lightsail: Update lightsail client to latest version
  + feature:polly: Update polly client to latest version
  + feature:snowball: Update snowball client to latest version
  + feature:rekognition: Update rekognition client to latest version
- From 1.4.79
  + bugfix:s3: fixes #1059 (presigned s3v4 URL bug related to blank query
    parameters being filtered incorrectly)
  + feature:s3: Update s3 client to latest version
  + bugfix:Presigner: Support presigning rest-json services.
- From 1.4.78
  + feature:s3: Update s3 client to latest version
  + feature:glacier: Update glacier client to latest version
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:route53: Update route53 client to latest version
- From 1.4.77
  + feature:cloudtrail: Update cloudtrail client to latest version
  + feature:ecs: Update ecs client to latest version
- From 1.4.76
  + feature:application-autoscaling: Update application-autoscaling client
    to latest version
  + feature:elastictranscoder: Update elastictranscoder client to latest version
  + feature:lambda: Update lambda client to latest version
  + feature:emr: Update emr client to latest version
  + feature:gamelift: Update gamelift client to latest version
- From 1.4.75
  + feature:Loader: Support loading json extra files.
  + feature:meteringmarketplace: Update meteringmarketplace client to
    latest version
  + feature:cloudwatch: Update cloudwatch client to latest version
  + feature:apigateway: Update apigateway client to latest version
  + feature:sqs: Update sqs client to latest version
- From 1.4.74
  + feature:route53: Update route53 client to latest version
  + feature:servicecatalog: Update servicecatalog client to latest version
- From 1.4.73
  + feature:kinesis: Update kinesis client to latest version
  + feature:ds: Update ds client to latest version
  + feature:elasticache: Update elasticache client to latest version
- From 1.4.72
  + feature:cognito-idp: Update cognito-idp client to latest version
  + feature:Paginator: Add paginators for AWS WAF
- From 1.4.71
  + bugfix:Parsers: ResponseMetadata will now always be populated, provided
    the response was able to be parsed into a dict.
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:logs: Update logs client to latest version
- From 1.4.70
  + feature:directconnect: Update directconnect client to latest version
- From 1.4.69
  + feature:ses: Update ses client to latest version
- From 1.4.68
  + feature:cloudformation: Update cloudformation client to latest version
  + feature:Stub: Made ANY usable for nested parameters</changelog>
<changelog author="dmueller@suse.com" date="1483358400">- switch to pypi package and fix source url</changelog>
<changelog author="toddrme2178@gmail.com" date="1488283200">- Implement single-spec version.
- Fix source URL.
- Update to 1.5.47
  Too many changes to list, please see:
  https://github.com/boto/botocore/blob/1.5.47/CHANGELOG.rst</changelog>
<changelog author="rjschwei@suse.com" date="1494417600">- Fix source URL missing "/"</changelog>
<changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.5.67 (bsc#1044370)
  + For details see
    https://github.com/boto/botocore/blob/1.5.67/CHANGELOG.rst</changelog>

</package>
<package pkgid="42dd28d9a83a02c2ea07a65d91e585604885656e805e8b38405df97d549c98c9" name="python-ceph-compat" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="d6954e997f241d6949b3eed1a57dc8dd9acd96715b126e085a37fc41cf009b49" name="python-cephfs" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="f4ba0e0027004d9668c727193230b6bfcde8d43f1bd04da84e05c933049344c8" name="python-dulwich" arch="src">
    <version epoch="0" ver="0.16.3" rel="8.1"/>

<changelog author="nix@opensuse.org" date="1283947200">- Update to 0.6.1</changelog>
<changelog author="saschpe@gmx.de" date="1295956800">- Update to 0.7.0
- Packaged documentation
- Added license header</changelog>
<changelog author="saschpe@suse.de" date="1301572800">- Removed *.egg-info from %%files section</changelog>
<changelog author="saschpe@gmx.de" date="1309694400">- Update to version 0.7.1:
  * Documentation udated
  * Tree.entries deprecated</changelog>
<changelog author="saschpe@suse.de" date="1316520000">- Update to version 0.8.0:
  * web: Use correct result MIME types.
  * pack: Cache binary SHA of unpacked objects.
  - See upstream git for more details...</changelog>
<changelog author="saschpe@suse.de" date="1353672000">- Update to version 0.8.6:
  + dulwich.__init__ no longer imports client, protocol, repo and
    server modules. (Jelmer Vernooij)
  + ConfigDict now behaves more like a dictionary.
    (Adam 'Cezar' Jenkins, issue #58)
  + HTTPGitApplication now takes an optional
    fallback_app argument. (Jonas Haag, issue #67)
  + Support for large pack index files. (Jameson Nash)
  + Make index entry tests a little bit less strict, to cope with
    slightly different behaviour on various platforms.
    (Jelmer Vernooij)
  + setup.py test (available when setuptools is installed) now
    runs all tests, not just the basic unit tests.
    (Jelmer Vernooij)
  + Commit._deserialize now actually deserializes the current state rather than
    the previous one. (Yifan Zhang, issue #59)
  + Handle None elements in lists of TreeChange objects. (Alex Holmes)
  + Support cloning repositories without HEAD set.
    (D-Key, Jelmer Vernooij, issue #69)
  + Support MemoryRepo.get_config. (Jelmer Vernooij)
  + In get_transport_and_path, pass extra keyword arguments on to
    HttpGitClient. (Jelmer Vernooij)
- Changes from version 0.8.5:
  + Avoid use of 'with' in dulwich.index. (Jelmer Vernooij)
  + Be a little bit strict about OS behaviour in index tests.
    Should fix the tests on Debian GNU/kFreeBSD. (Jelmer Vernooij)
- See NEWS file for more changes</changelog>
<changelog author="p.drouand@gmail.com" date="1383307200">- Update to version 0.9.3
  + * Fix path for stdint.h in MANIFEST.in.
- Changes from version 0.9.2
  + Include stdint.h in MANIFEST.in
- Changes from version 0.9.1
  + Support lookups of 40-character refs in BaseRepo.__getitem_
  + Fix fetching packs with side-band-64k capability disabled.
  + Several fixes in send-pack protocol behaviour - handling of empty
    pack files and deletes. #1063087
  + Fix capability negotiation when fetching packs over HTTP.
    [#1072461]
  + Enforce determine_wants returning an empty list rather than None.
  + In the server, support pushes just removing refs.
  + Support passing a single revision to BaseRepo.get_walker() rather
    than a list of revisions.
  + Add `Repo.get_description` method.
  + Support thin packs in Pack.iterobjects() and Pack.get_raw().
  + Add `MemoryObjectStore.add_pack` and `MemoryObjectStore.add_thin_pack` methods.
  + Add paramiko-based SSH vendor.
  + Support running 'dulwich.server' and 'dulwich.web' using 'python -m'.
  + Add ObjectStore.close().
  + Raise appropriate NotImplementedError when encountering dumb HTTP servers.
  + SSHVendor.connect_ssh has been renamed to SSHVendor.run_command.
  + ObjectStore.add_pack() now returns a 3-tuple. The last element will be an
    abort() method that can be used to cancel the pack operation.
- Changes from version 0.9.0
  + Push efficiency - report missing objects only. #562676
  + Use indentation consistent with C Git in config files.
    [#1031356]
  + Recognize and skip binary files in diff function.
  + Fix handling of relative paths in dulwich.client.get_transport_and_path.
  + Preserve ordering of entries in configuration.
  + Support ~ expansion in SSH client paths. #1083439
  + Support relative paths in alternate paths.
    [#1175007]
  + Log all error messages from wsgiref server to the logging module. This
    makes the test suit quiet again.
  + Support passing None for empty tree in changes_from_tree.
  + Support fetching empty repository in client. #1060462
  + Add optional honor_filemode flag to build_index_from_tree.
  + Support core/filemode setting when building trees.
  + Add chapter on tags in tutorial
  + Add support for mergetags. #963525
  + Add support for posix shell hooks.
- Changes from 0.8.7
  + Fix use of alternates in ``DiskObjectStore``.{__contains__,__iter__}.
  + Fix compatibility with Python 2.4.</changelog>
<changelog author="p.drouand@gmail.com" date="1383307201">- Fix download Url</changelog>
<changelog author="develop7@develop7.info" date="1424606400">- update to version 0.9.8
  + disabled tests
- Changes from 0.9.7
  + BUG FIXES
  * Various fixes to improve test suite running on Windows.
    (Gary van der Merwe)
  * Limit delta copy length to 64K in v2 pack files. (Robert Brown)
  * Strip newline from final ACKed SHA while fetching packs.
    (Michael Edgar)
  * Remove assignment to PyList_SIZE() that was causing segfaults on
    pypy. (Jelmer Vernooij, #196)
  + IMPROVEMENTS
  * Add porcelain 'receive-pack' and 'upload-pack'. (Jelmer Vernooij)
  * Handle SIGINT signals in bin/dulwich. (Jelmer Vernooij)
  * Add 'status' support to bin/dulwich. (Jelmer Vernooij)
  * Add 'branch_create', 'branch_list', 'branch_delete' porcelain.
    (Jelmer Vernooij)
  * Add 'fetch' porcelain. (Jelmer Vernooij)
  * Add 'tag_delete' porcelain. (Jelmer Vernooij)
  * Add support for serializing/deserializing 'gpgsig' attributes in Commit.
    (Jelmer Vernooij)
  + CHANGES
  * dul-web is now available as 'dulwich web-daemon'.
    (Jelmer Vernooij)
  * dulwich.porcelain.tag has been renamed to tag_create.
    dulwich.porcelain.list_tags has been renamed to tag_list.
    (Jelmer Vernooij)
  + API CHANGES
  * Restore support for Python 2.6. (Jelmer Vernooij, Gary van der Merwe)
- Changes from 0.9.6
  + BUG FIXES
  * Fix tests dependent on hash ordering. (Michael Edgar)
  * Support staging symbolic links in Repo.stage.
    (Robert Brown)
  * Ensure that all files object are closed when running the test suite.
    (Gary van der Merwe)
  * When writing OFS_DELTA pack entries, write correct offset.
    (Augie Fackler)
  * Fix handler of larger copy operations in packs. (Augie Fackler)
  * Various fixes to improve test suite running on Windows.
    (Gary van der Merwe)
  * Fix logic for extra adds of identical files in rename detector.
    (Robert Brown)
  + IMPROVEMENTS
  * Add porcelain 'status'. (Ryan Faulkner)
  * Add porcelain 'daemon'. (Jelmer Vernooij)
  * Add `dulwich.greenthreads` module which provides support
    for concurrency of some object store operations.
    (Fabien Boucher)
  * Various changes to improve compatibility with Python 3.
    (Gary van der Merwe, Hannu Valtonen, michael-k)
  * Add OpenStack Swift backed repository implementation
    in dulwich.contrib. See README.swift for details. (Fabien Boucher)
  + API CHANGES
  * An optional close function can be passed to the Protocol class. This will
    be called by its close method. (Gary van der Merwe)
  * All classes with close methods are now context managers, so that they can
    be easily closed using a `with` statement. (Gary van der Merwe)
  * Remove deprecated `num_objects` argument to `write_pack` methods.
    (Jelmer Vernooij)
  + OTHER CHANGES
  * The 'dul-daemon' script has been removed. The same functionality
    is now available as 'dulwich daemon'. (Jelmer Vernooij)
- Changes from 0.9.5
  + IMPROVEMENTS
  * Add support for recursive add in 'git add'.
    (Ryan Faulkner, Jelmer Vernooij)
  * Add porcelain 'list_tags'. (Ryan Faulkner)
  * Add porcelain 'push'. (Ryan Faulkner)
  * Add porcelain 'pull'. (Ryan Faulkner)
  * Support 'http.proxy' in HttpGitClient.
    (Jelmer Vernooij, #1096030)
  * Support 'http.useragent' in HttpGitClient.
    (Jelmer Vernooij)
  * In server, wait for clients to send empty list of
    wants when talking to empty repository.
    (Damien Tournoud)
  * Various changes to improve compatibility with
    Python 3. (Gary van der Merwe)
  + BUG FIXES
  * Support unseekable 'wsgi.input' streams.
    (Jonas Haag)
  * Raise TypeError when passing unicode() object
    to Repo.__getitem__.
    (Jonas Haag)
  * Fix handling of `reset` command in dulwich.fastexport.
    (Jelmer Vernooij, #1249029)
  * In client, don't wait for server to close connection
    first. Fixes hang when used against GitHub
    server implementation. (Siddharth Agarwal)
  * DeltaChainIterator: fix a corner case where an object is inflated as an
    object already in the repository.
    (Damien Tournoud, #135)
  * Stop leaking file handles during pack reload. (Damien Tournoud)
  * Avoid reopening packs during pack cache reload. (Jelmer Vernooij)
  + API CHANGES
  * Drop support for Python 2.6. (Jelmer Vernooij)
- Changes from 0.9.4
  + IMPROVEMENTS
  * Add porcelain 'tag'. (Ryan Faulkner)
  * New module `dulwich.objectspec` for parsing strings referencing
    objects and commit ranges. (Jelmer Vernooij)
  * Add shallow branch support. (milki)
  * Allow passing urllib2 `opener` into HttpGitClient.
    (Dov Feldstern, #909037)
  + CHANGES
  * Drop support for Python 2.4 and 2.5. (Jelmer Vernooij)
  + API CHANGES
  * Remove long deprecated ``Repo.commit``, ``Repo.get_blob``,
    ``Repo.tree`` and ``Repo.tag``. (Jelmer Vernooij)
  * Remove long deprecated ``Repo.revision_history`` and ``Repo.ref``.
    (Jelmer Vernooij)
  * Remove long deprecated ``Tree.entries``. (Jelmer Vernooij)
  + BUG FIXES
  * Raise KeyError rather than TypeError when passing in
    unicode object of length 20 or 40 to Repo.__getitem__.
    (Jelmer Vernooij)
  * Use 'rm' rather than 'unlink' in tests, since the latter
    does not exist on OpenBSD and other platforms.
    (Dmitrij D. Czarkoff)
- Changes from 0.9.3
  + IMPROVEMENTS
  * Add ssh_kwargs attribute to ParamikoSSHVendor. (milki)
  * Add Repo.set_description(). (Víðir Valberg Guðmundsson)
  * Add a basic `dulwich.porcelain` module. (Jelmer Vernooij, Marcin Kuzminski)
  * Various performance improvements for object access.
    (Jelmer Vernooij)
  * New function `get_transport_and_path_from_url`,
    similar to `get_transport_and_path` but only
    supports URLs.
    (Jelmer Vernooij)
  * Add support for file:// URLs in `get_transport_and_path_from_url`.
    (Jelmer Vernooij)
  * Add LocalGitClient implementation.
    (Jelmer Vernooij)
  + BUG FIXES
  * Support filesystems with 64bit inode and device numbers.
    (André Roth)
  + CHANGES
  * Ref handling has been moved to dulwich.refs.
    (Jelmer Vernooij)
  + API CHANGES
  * Remove long deprecated RefsContainer.set_ref().
    (Jelmer Vernooij)
  * Repo.ref() is now deprecated in favour of Repo.refs[].
    (Jelmer Vernooij)
  + FEATURES
  * Add support for graftpoints. (milki)</changelog>
<changelog author="termim@gmail.com" date="1431432000">- update to version 0.10.1
  + BUG FIXES
  * Return `ApplyDeltaError` when encountering delta errors
    in both C extensions and native delta application code.
    (Jelmer Vernooij, #259)
- update to version 0.10.0
  + BUG FIXES
  * In dulwich.index.build_index_from_tree, by default
    refuse to create entries that start with .git/.
  * Fix running of testsuite when installed.
    (Jelmer Vernooij, #223)
  * Use a block cache in _find_content_rename_candidates(),
    improving performance. (Mike Williams)
  * Add support for ``core.protectNTFS`` setting.
    (Jelmer Vernooij)
  * Fix TypeError when fetching empty updates.
    (Hwee Miin Koh)
  * Resolve delta refs when pulling into a MemoryRepo.
    (Max Shawabkeh, #256)
  * Fix handling of tags of non-commits in missing object finder.
    (Augie Fackler, #211)
  * Explicitly disable mmap on plan9 where it doesn't work.
    (Jeff Sickel)
  + IMPROVEMENTS
  * New public method `Repo.reset_index`. (Jelmer Vernooij)
  * Prevent duplicate parsing of loose files in objects
    directory when reading. Thanks to David Keijser for the
    report. (Jelmer Vernooij, #231)
- update to version 0.9.9
  + SECURITY BUG FIXES
  * Fix buffer overflow in C implementation of pack apply_delta().
    (CVE-2015-0838)
    Thanks to Ivan Fratric of the Google Security Team for
    reporting this issue.
    (Jelmer Vernooij)</changelog>
<changelog author="termim@gmail.com" date="1449316800">- update to 0.11.2
  + IMPROVEMENTS
  * Add support for agent= capability. (Jelmer Vernooij, #298)
  * Add support for quiet capability. (Jelmer Vernooij)
  + BUG FIXES
  * The ParamikoSSHVendor class has been moved to
    dulwich.contrib.paramiko_vendor, as it?s currently untested.
    (Jelmer Vernooij, #364)
- update to 0.11.1 2015-09-13
  * Fix-up release to exclude broken blame.py file.
- update to 0.11.0 2015-09-13
  + IMPROVEMENTS
  * Extended Python3 support to most of the codebase. (Gary van der
    Merwe, Jelmer Vernooij)
  * The Repo object has a new close method that can be called to close
    any open resources. (Gary van der Merwe)
  * Support ?git.bat? in SubprocessGitClient on Windows. (Stefan
    Zimmermann)
  * Advertise ?ofs-delta? capability in receive-pack server side
    capabilities. (Jelmer Vernooij)
  * Switched default_local_git_client_cls to LocalGitClient. (Gary van
    der Merwe)
  * Add porcelain.ls_remote and GitClient.get_refs. (Michael Edgar)
  * Add Repo.discover method. (B. M. Corser)
  * Add dulwich.objectspec.parse_refspec. (Jelmer Vernooij)
  * Add porcelain.pack_objects and porcelain.repack. (Jelmer Vernooij)
  + BUG FIXES
  * Fix handling of ?done? in graph walker and implement the ?no-done?
    capability. (Tommy Yu, #88)
  * Avoid recursion limit issues resolving deltas. (William Grant, #81)
  * Allow arguments in local client binary path overrides. (Jelmer
    Vernooij)
  * Fix handling of commands with arguments in paramiko SSH
    client. (Andreas Klöckner, Jelmer Vernooij, #363)
  * Fix parsing of quoted strings in configs. (Jelmer Vernooij, #305)</changelog>
<changelog author="toddrme2178@gmail.com" date="1452772800">- Update to 0.12.0
  + IMPROVEMENTS
  * Add a `dulwich.archive` module that can create tarballs.
    Based on code from Jonas Haag in klaus.
  * Add a `dulwich.reflog` module for reading and writing reflogs.
    (Jelmer Vernooij)
  * Fix handling of ambiguous refs in `parse_ref` to make
    it match the behaviour described in https://git-scm.com/docs/gitrevisions.
    (Chris Bunney)
  * Support Python3 in C modules. (Lele Gaifax)
  + BUG FIXES
  * Simplify handling of SSH command invocation.
    Fixes quoting of paths. Thanks, Thomas Liebetraut. (#384)
  * Fix inconsistent handling of trailing slashes for DictRefsContainer. (#383)
  * Add hack to support thin packs duing fetch(), albeit while requiring the
    entire pack file to be loaded into memory. (jsbain)
  + CHANGES
  * This will be the last release to support Python 2.6.
- Implement update-alternatives</changelog>
<changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
<changelog author="dmueller@suse.com" date="1484740800">- update to 0.16.3:
  IMPROVEMENTS
  * Fixed failing test-cases on windows.
    (Koen Martens)
  * Add support for worktrees. See `git-worktree(1)` and
    `gitrepository-layout(5)`. (Laurent Rineau)
  * Add support for `commondir` file in Git control
    directories. (Laurent Rineau)
  * Add support for passwords in HTTP URLs.
    (Jon Bain, Mika Mäenpää)
  * Add `release_robot` script to contrib,
    allowing easy finding of current version based on Git tags.
    (Mark Mikofski)
  * Add ``Blob.splitlines`` method.
    (Jelmer Vernooij)
  * Add `dulwich.config.parse_submodules` function.
  * Add `RefsContainer.follow` method. (#438)
  * Support `ssh://` URLs in get_transport_and_path_from_url().
    (Jelmer Vernoo?, #402)
  * Support missing empty line after headers in Git commits and tags.
    (Nicolas Dandrimont, #413)
  * Fix `dulwich.porcelain.status` when used in empty trees.
    (Jelmer Vernoo?, #415)
  * Return copies of objects in MemoryObjectStore rather than
    references, making the behaviour more consistent with that of
    DiskObjectStore. (Félix Mattrat, Jelmer Vernoo?)
  * Fix ``dulwich.web`` on Python3. (#295, Jonas Haag)
  * Many bugfixes, see NEWS file for details
  CHANGES
  * Changed license from "GNU General Public License, version 2.0 or later"
    to "Apache License, version 2.0 or later or GNU General Public License,
    version 2.0 or later". (#153)</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>

</package>
<package pkgid="b77b356e6e62a0ebe3c28315185a8d7a198efdd9ce9bbcb1a9b24e8491a8b09a" name="python-dulwich" arch="x86_64">
    <version epoch="0" ver="0.16.3" rel="8.1"/>

<changelog author="nix@opensuse.org" date="1283947200">- Update to 0.6.1</changelog>
<changelog author="saschpe@gmx.de" date="1295956800">- Update to 0.7.0
- Packaged documentation
- Added license header</changelog>
<changelog author="saschpe@suse.de" date="1301572800">- Removed *.egg-info from %%files section</changelog>
<changelog author="saschpe@gmx.de" date="1309694400">- Update to version 0.7.1:
  * Documentation udated
  * Tree.entries deprecated</changelog>
<changelog author="saschpe@suse.de" date="1316520000">- Update to version 0.8.0:
  * web: Use correct result MIME types.
  * pack: Cache binary SHA of unpacked objects.
  - See upstream git for more details...</changelog>
<changelog author="saschpe@suse.de" date="1353672000">- Update to version 0.8.6:
  + dulwich.__init__ no longer imports client, protocol, repo and
    server modules. (Jelmer Vernooij)
  + ConfigDict now behaves more like a dictionary.
    (Adam 'Cezar' Jenkins, issue #58)
  + HTTPGitApplication now takes an optional
    fallback_app argument. (Jonas Haag, issue #67)
  + Support for large pack index files. (Jameson Nash)
  + Make index entry tests a little bit less strict, to cope with
    slightly different behaviour on various platforms.
    (Jelmer Vernooij)
  + setup.py test (available when setuptools is installed) now
    runs all tests, not just the basic unit tests.
    (Jelmer Vernooij)
  + Commit._deserialize now actually deserializes the current state rather than
    the previous one. (Yifan Zhang, issue #59)
  + Handle None elements in lists of TreeChange objects. (Alex Holmes)
  + Support cloning repositories without HEAD set.
    (D-Key, Jelmer Vernooij, issue #69)
  + Support MemoryRepo.get_config. (Jelmer Vernooij)
  + In get_transport_and_path, pass extra keyword arguments on to
    HttpGitClient. (Jelmer Vernooij)
- Changes from version 0.8.5:
  + Avoid use of 'with' in dulwich.index. (Jelmer Vernooij)
  + Be a little bit strict about OS behaviour in index tests.
    Should fix the tests on Debian GNU/kFreeBSD. (Jelmer Vernooij)
- See NEWS file for more changes</changelog>
<changelog author="p.drouand@gmail.com" date="1383307200">- Update to version 0.9.3
  + * Fix path for stdint.h in MANIFEST.in.
- Changes from version 0.9.2
  + Include stdint.h in MANIFEST.in
- Changes from version 0.9.1
  + Support lookups of 40-character refs in BaseRepo.__getitem_
  + Fix fetching packs with side-band-64k capability disabled.
  + Several fixes in send-pack protocol behaviour - handling of empty
    pack files and deletes. #1063087
  + Fix capability negotiation when fetching packs over HTTP.
    [#1072461]
  + Enforce determine_wants returning an empty list rather than None.
  + In the server, support pushes just removing refs.
  + Support passing a single revision to BaseRepo.get_walker() rather
    than a list of revisions.
  + Add `Repo.get_description` method.
  + Support thin packs in Pack.iterobjects() and Pack.get_raw().
  + Add `MemoryObjectStore.add_pack` and `MemoryObjectStore.add_thin_pack` methods.
  + Add paramiko-based SSH vendor.
  + Support running 'dulwich.server' and 'dulwich.web' using 'python -m'.
  + Add ObjectStore.close().
  + Raise appropriate NotImplementedError when encountering dumb HTTP servers.
  + SSHVendor.connect_ssh has been renamed to SSHVendor.run_command.
  + ObjectStore.add_pack() now returns a 3-tuple. The last element will be an
    abort() method that can be used to cancel the pack operation.
- Changes from version 0.9.0
  + Push efficiency - report missing objects only. #562676
  + Use indentation consistent with C Git in config files.
    [#1031356]
  + Recognize and skip binary files in diff function.
  + Fix handling of relative paths in dulwich.client.get_transport_and_path.
  + Preserve ordering of entries in configuration.
  + Support ~ expansion in SSH client paths. #1083439
  + Support relative paths in alternate paths.
    [#1175007]
  + Log all error messages from wsgiref server to the logging module. This
    makes the test suit quiet again.
  + Support passing None for empty tree in changes_from_tree.
  + Support fetching empty repository in client. #1060462
  + Add optional honor_filemode flag to build_index_from_tree.
  + Support core/filemode setting when building trees.
  + Add chapter on tags in tutorial
  + Add support for mergetags. #963525
  + Add support for posix shell hooks.
- Changes from 0.8.7
  + Fix use of alternates in ``DiskObjectStore``.{__contains__,__iter__}.
  + Fix compatibility with Python 2.4.</changelog>
<changelog author="p.drouand@gmail.com" date="1383307201">- Fix download Url</changelog>
<changelog author="develop7@develop7.info" date="1424606400">- update to version 0.9.8
  + disabled tests
- Changes from 0.9.7
  + BUG FIXES
  * Various fixes to improve test suite running on Windows.
    (Gary van der Merwe)
  * Limit delta copy length to 64K in v2 pack files. (Robert Brown)
  * Strip newline from final ACKed SHA while fetching packs.
    (Michael Edgar)
  * Remove assignment to PyList_SIZE() that was causing segfaults on
    pypy. (Jelmer Vernooij, #196)
  + IMPROVEMENTS
  * Add porcelain 'receive-pack' and 'upload-pack'. (Jelmer Vernooij)
  * Handle SIGINT signals in bin/dulwich. (Jelmer Vernooij)
  * Add 'status' support to bin/dulwich. (Jelmer Vernooij)
  * Add 'branch_create', 'branch_list', 'branch_delete' porcelain.
    (Jelmer Vernooij)
  * Add 'fetch' porcelain. (Jelmer Vernooij)
  * Add 'tag_delete' porcelain. (Jelmer Vernooij)
  * Add support for serializing/deserializing 'gpgsig' attributes in Commit.
    (Jelmer Vernooij)
  + CHANGES
  * dul-web is now available as 'dulwich web-daemon'.
    (Jelmer Vernooij)
  * dulwich.porcelain.tag has been renamed to tag_create.
    dulwich.porcelain.list_tags has been renamed to tag_list.
    (Jelmer Vernooij)
  + API CHANGES
  * Restore support for Python 2.6. (Jelmer Vernooij, Gary van der Merwe)
- Changes from 0.9.6
  + BUG FIXES
  * Fix tests dependent on hash ordering. (Michael Edgar)
  * Support staging symbolic links in Repo.stage.
    (Robert Brown)
  * Ensure that all files object are closed when running the test suite.
    (Gary van der Merwe)
  * When writing OFS_DELTA pack entries, write correct offset.
    (Augie Fackler)
  * Fix handler of larger copy operations in packs. (Augie Fackler)
  * Various fixes to improve test suite running on Windows.
    (Gary van der Merwe)
  * Fix logic for extra adds of identical files in rename detector.
    (Robert Brown)
  + IMPROVEMENTS
  * Add porcelain 'status'. (Ryan Faulkner)
  * Add porcelain 'daemon'. (Jelmer Vernooij)
  * Add `dulwich.greenthreads` module which provides support
    for concurrency of some object store operations.
    (Fabien Boucher)
  * Various changes to improve compatibility with Python 3.
    (Gary van der Merwe, Hannu Valtonen, michael-k)
  * Add OpenStack Swift backed repository implementation
    in dulwich.contrib. See README.swift for details. (Fabien Boucher)
  + API CHANGES
  * An optional close function can be passed to the Protocol class. This will
    be called by its close method. (Gary van der Merwe)
  * All classes with close methods are now context managers, so that they can
    be easily closed using a `with` statement. (Gary van der Merwe)
  * Remove deprecated `num_objects` argument to `write_pack` methods.
    (Jelmer Vernooij)
  + OTHER CHANGES
  * The 'dul-daemon' script has been removed. The same functionality
    is now available as 'dulwich daemon'. (Jelmer Vernooij)
- Changes from 0.9.5
  + IMPROVEMENTS
  * Add support for recursive add in 'git add'.
    (Ryan Faulkner, Jelmer Vernooij)
  * Add porcelain 'list_tags'. (Ryan Faulkner)
  * Add porcelain 'push'. (Ryan Faulkner)
  * Add porcelain 'pull'. (Ryan Faulkner)
  * Support 'http.proxy' in HttpGitClient.
    (Jelmer Vernooij, #1096030)
  * Support 'http.useragent' in HttpGitClient.
    (Jelmer Vernooij)
  * In server, wait for clients to send empty list of
    wants when talking to empty repository.
    (Damien Tournoud)
  * Various changes to improve compatibility with
    Python 3. (Gary van der Merwe)
  + BUG FIXES
  * Support unseekable 'wsgi.input' streams.
    (Jonas Haag)
  * Raise TypeError when passing unicode() object
    to Repo.__getitem__.
    (Jonas Haag)
  * Fix handling of `reset` command in dulwich.fastexport.
    (Jelmer Vernooij, #1249029)
  * In client, don't wait for server to close connection
    first. Fixes hang when used against GitHub
    server implementation. (Siddharth Agarwal)
  * DeltaChainIterator: fix a corner case where an object is inflated as an
    object already in the repository.
    (Damien Tournoud, #135)
  * Stop leaking file handles during pack reload. (Damien Tournoud)
  * Avoid reopening packs during pack cache reload. (Jelmer Vernooij)
  + API CHANGES
  * Drop support for Python 2.6. (Jelmer Vernooij)
- Changes from 0.9.4
  + IMPROVEMENTS
  * Add porcelain 'tag'. (Ryan Faulkner)
  * New module `dulwich.objectspec` for parsing strings referencing
    objects and commit ranges. (Jelmer Vernooij)
  * Add shallow branch support. (milki)
  * Allow passing urllib2 `opener` into HttpGitClient.
    (Dov Feldstern, #909037)
  + CHANGES
  * Drop support for Python 2.4 and 2.5. (Jelmer Vernooij)
  + API CHANGES
  * Remove long deprecated ``Repo.commit``, ``Repo.get_blob``,
    ``Repo.tree`` and ``Repo.tag``. (Jelmer Vernooij)
  * Remove long deprecated ``Repo.revision_history`` and ``Repo.ref``.
    (Jelmer Vernooij)
  * Remove long deprecated ``Tree.entries``. (Jelmer Vernooij)
  + BUG FIXES
  * Raise KeyError rather than TypeError when passing in
    unicode object of length 20 or 40 to Repo.__getitem__.
    (Jelmer Vernooij)
  * Use 'rm' rather than 'unlink' in tests, since the latter
    does not exist on OpenBSD and other platforms.
    (Dmitrij D. Czarkoff)
- Changes from 0.9.3
  + IMPROVEMENTS
  * Add ssh_kwargs attribute to ParamikoSSHVendor. (milki)
  * Add Repo.set_description(). (Víðir Valberg Guðmundsson)
  * Add a basic `dulwich.porcelain` module. (Jelmer Vernooij, Marcin Kuzminski)
  * Various performance improvements for object access.
    (Jelmer Vernooij)
  * New function `get_transport_and_path_from_url`,
    similar to `get_transport_and_path` but only
    supports URLs.
    (Jelmer Vernooij)
  * Add support for file:// URLs in `get_transport_and_path_from_url`.
    (Jelmer Vernooij)
  * Add LocalGitClient implementation.
    (Jelmer Vernooij)
  + BUG FIXES
  * Support filesystems with 64bit inode and device numbers.
    (André Roth)
  + CHANGES
  * Ref handling has been moved to dulwich.refs.
    (Jelmer Vernooij)
  + API CHANGES
  * Remove long deprecated RefsContainer.set_ref().
    (Jelmer Vernooij)
  * Repo.ref() is now deprecated in favour of Repo.refs[].
    (Jelmer Vernooij)
  + FEATURES
  * Add support for graftpoints. (milki)</changelog>
<changelog author="termim@gmail.com" date="1431432000">- update to version 0.10.1
  + BUG FIXES
  * Return `ApplyDeltaError` when encountering delta errors
    in both C extensions and native delta application code.
    (Jelmer Vernooij, #259)
- update to version 0.10.0
  + BUG FIXES
  * In dulwich.index.build_index_from_tree, by default
    refuse to create entries that start with .git/.
  * Fix running of testsuite when installed.
    (Jelmer Vernooij, #223)
  * Use a block cache in _find_content_rename_candidates(),
    improving performance. (Mike Williams)
  * Add support for ``core.protectNTFS`` setting.
    (Jelmer Vernooij)
  * Fix TypeError when fetching empty updates.
    (Hwee Miin Koh)
  * Resolve delta refs when pulling into a MemoryRepo.
    (Max Shawabkeh, #256)
  * Fix handling of tags of non-commits in missing object finder.
    (Augie Fackler, #211)
  * Explicitly disable mmap on plan9 where it doesn't work.
    (Jeff Sickel)
  + IMPROVEMENTS
  * New public method `Repo.reset_index`. (Jelmer Vernooij)
  * Prevent duplicate parsing of loose files in objects
    directory when reading. Thanks to David Keijser for the
    report. (Jelmer Vernooij, #231)
- update to version 0.9.9
  + SECURITY BUG FIXES
  * Fix buffer overflow in C implementation of pack apply_delta().
    (CVE-2015-0838)
    Thanks to Ivan Fratric of the Google Security Team for
    reporting this issue.
    (Jelmer Vernooij)</changelog>
<changelog author="termim@gmail.com" date="1449316800">- update to 0.11.2
  + IMPROVEMENTS
  * Add support for agent= capability. (Jelmer Vernooij, #298)
  * Add support for quiet capability. (Jelmer Vernooij)
  + BUG FIXES
  * The ParamikoSSHVendor class has been moved to
    dulwich.contrib.paramiko_vendor, as it?s currently untested.
    (Jelmer Vernooij, #364)
- update to 0.11.1 2015-09-13
  * Fix-up release to exclude broken blame.py file.
- update to 0.11.0 2015-09-13
  + IMPROVEMENTS
  * Extended Python3 support to most of the codebase. (Gary van der
    Merwe, Jelmer Vernooij)
  * The Repo object has a new close method that can be called to close
    any open resources. (Gary van der Merwe)
  * Support ?git.bat? in SubprocessGitClient on Windows. (Stefan
    Zimmermann)
  * Advertise ?ofs-delta? capability in receive-pack server side
    capabilities. (Jelmer Vernooij)
  * Switched default_local_git_client_cls to LocalGitClient. (Gary van
    der Merwe)
  * Add porcelain.ls_remote and GitClient.get_refs. (Michael Edgar)
  * Add Repo.discover method. (B. M. Corser)
  * Add dulwich.objectspec.parse_refspec. (Jelmer Vernooij)
  * Add porcelain.pack_objects and porcelain.repack. (Jelmer Vernooij)
  + BUG FIXES
  * Fix handling of ?done? in graph walker and implement the ?no-done?
    capability. (Tommy Yu, #88)
  * Avoid recursion limit issues resolving deltas. (William Grant, #81)
  * Allow arguments in local client binary path overrides. (Jelmer
    Vernooij)
  * Fix handling of commands with arguments in paramiko SSH
    client. (Andreas Klöckner, Jelmer Vernooij, #363)
  * Fix parsing of quoted strings in configs. (Jelmer Vernooij, #305)</changelog>
<changelog author="toddrme2178@gmail.com" date="1452772800">- Update to 0.12.0
  + IMPROVEMENTS
  * Add a `dulwich.archive` module that can create tarballs.
    Based on code from Jonas Haag in klaus.
  * Add a `dulwich.reflog` module for reading and writing reflogs.
    (Jelmer Vernooij)
  * Fix handling of ambiguous refs in `parse_ref` to make
    it match the behaviour described in https://git-scm.com/docs/gitrevisions.
    (Chris Bunney)
  * Support Python3 in C modules. (Lele Gaifax)
  + BUG FIXES
  * Simplify handling of SSH command invocation.
    Fixes quoting of paths. Thanks, Thomas Liebetraut. (#384)
  * Fix inconsistent handling of trailing slashes for DictRefsContainer. (#383)
  * Add hack to support thin packs duing fetch(), albeit while requiring the
    entire pack file to be loaded into memory. (jsbain)
  + CHANGES
  * This will be the last release to support Python 2.6.
- Implement update-alternatives</changelog>
<changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
<changelog author="dmueller@suse.com" date="1484740800">- update to 0.16.3:
  IMPROVEMENTS
  * Fixed failing test-cases on windows.
    (Koen Martens)
  * Add support for worktrees. See `git-worktree(1)` and
    `gitrepository-layout(5)`. (Laurent Rineau)
  * Add support for `commondir` file in Git control
    directories. (Laurent Rineau)
  * Add support for passwords in HTTP URLs.
    (Jon Bain, Mika Mäenpää)
  * Add `release_robot` script to contrib,
    allowing easy finding of current version based on Git tags.
    (Mark Mikofski)
  * Add ``Blob.splitlines`` method.
    (Jelmer Vernooij)
  * Add `dulwich.config.parse_submodules` function.
  * Add `RefsContainer.follow` method. (#438)
  * Support `ssh://` URLs in get_transport_and_path_from_url().
    (Jelmer Vernoo?, #402)
  * Support missing empty line after headers in Git commits and tags.
    (Nicolas Dandrimont, #413)
  * Fix `dulwich.porcelain.status` when used in empty trees.
    (Jelmer Vernoo?, #415)
  * Return copies of objects in MemoryObjectStore rather than
    references, making the behaviour more consistent with that of
    DiskObjectStore. (Félix Mattrat, Jelmer Vernoo?)
  * Fix ``dulwich.web`` on Python3. (#295, Jonas Haag)
  * Many bugfixes, see NEWS file for details
  CHANGES
  * Changed license from "GNU General Public License, version 2.0 or later"
    to "Apache License, version 2.0 or later or GNU General Public License,
    version 2.0 or later". (#153)</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>

</package>
<package pkgid="62d977611df2f0285d11f36894fb48267472af3381c8b65102b7f3a97321c8bf" name="python-fasteners" arch="noarch">
    <version epoch="0" ver="0.14.1" rel="6.1"/>

<changelog author="tbechtold@suse.com" date="1435147200">- Initial packaging</changelog>
<changelog author="dmueller@suse.com" date="1435924800">- fix requires</changelog>
<changelog author="tbechtold@suse.com" date="1443960000">- update to 0.13.0:
  * Fix 'ensure_tree' check on freebsd</changelog>
<changelog author="tbechtold@suse.com" date="1450353600">- update to 0.14.1:
  * Allow providing a custom exception logger
    to 'locked' decorator
  * Allow providing a custom logger to process
    lock class
  * Fix issue #12</changelog>

</package>
<package pkgid="3e4dee6742f1720cd2196e916b53c5ea945f474bb23cf295a81018356c5cdcf9" name="python-fasteners" arch="src">
    <version epoch="0" ver="0.14.1" rel="6.1"/>

<changelog author="tbechtold@suse.com" date="1435147200">- Initial packaging</changelog>
<changelog author="dmueller@suse.com" date="1435924800">- fix requires</changelog>
<changelog author="tbechtold@suse.com" date="1443960000">- update to 0.13.0:
  * Fix 'ensure_tree' check on freebsd</changelog>
<changelog author="tbechtold@suse.com" date="1450353600">- update to 0.14.1:
  * Allow providing a custom exception logger
    to 'locked' decorator
  * Allow providing a custom logger to process
    lock class
  * Fix issue #12</changelog>

</package>
<package pkgid="b5f8ac9c605fc7ec0057e6c3bda9f11c2b43d3bf867d85cc7eb66f5c70abe1d3" name="python-gcs-oauth2-boto-plugin" arch="noarch">
    <version epoch="0" ver="1.14" rel="6.1"/>

<changelog author="rjschwei@suse.com" date="1422532800">- Initial build
  patch: gcs_hidePyRequires.patch</changelog>
<changelog author="rjschwei@suse.com" date="1422619200">- Include in SLE 12 FATE/ECO #318435 (bnc#915479)</changelog>
<changelog author="rjschwei@suse.com" date="1422705600">- Support use of system installed certificates
  add: gcs_respectBotoCfgKeyword.patch</changelog>
<changelog author="rjschwei@suse.com" date="1449057600">- Change dependency (bsc#954690)
  + from google-api-python-client to python-oauth2client
    the oauthclient code now stands alone</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 1.14 (bsc#1002895)
  + Remove gcs_hidePyRequires.patch, dependencies are in acceptable format
  + Remove gcs_respectBotoCfgKeyword.patch applied upstream
  + No upstream changelog</changelog>

</package>
<package pkgid="1d677f0c12b3fb143aeb0f7fe729d420bbd58e2198ad45bc67ea5b2320bd7b04" name="python-gcs-oauth2-boto-plugin" arch="src">
    <version epoch="0" ver="1.14" rel="6.1"/>

<changelog author="rjschwei@suse.com" date="1422532800">- Initial build
  patch: gcs_hidePyRequires.patch</changelog>
<changelog author="rjschwei@suse.com" date="1422619200">- Include in SLE 12 FATE/ECO #318435 (bnc#915479)</changelog>
<changelog author="rjschwei@suse.com" date="1422705600">- Support use of system installed certificates
  add: gcs_respectBotoCfgKeyword.patch</changelog>
<changelog author="rjschwei@suse.com" date="1449057600">- Change dependency (bsc#954690)
  + from google-api-python-client to python-oauth2client
    the oauthclient code now stands alone</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 1.14 (bsc#1002895)
  + Remove gcs_hidePyRequires.patch, dependencies are in acceptable format
  + Remove gcs_respectBotoCfgKeyword.patch applied upstream
  + No upstream changelog</changelog>

</package>
<package pkgid="71d9d19ae086a00b0917e4aedd5bedf37e47592e738ca04696c93a51bbab9626" name="python-google-apitools" arch="noarch">
    <version epoch="0" ver="0.5.6" rel="2.1"/>

<changelog author="rjschwei@suse.com" date="1475582400">- Initial build  include in SLES 12 (FATE#321630, bsc#1002895)
  + Version 0.5.4
  + Add apitools-test-clientgen.patch
  + Add apitools-test-disable-requires-internet.patch
  + Add apitools-test-fix-path-gen_client.patch</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Update to version 0.5.6 (bsc#1002895)
  + No upstream changelog
  + Forward port apitools-test-disable-requires-internet.patch
    (improved solution)</changelog>
<changelog author="lchiquitto@suse.de" date="1495022400">- Use python-setuptools 18.0 on SLE 12 (fate#321630)</changelog>

</package>
<package pkgid="a67133ce00b29f1b872c7b59c2ca64d4ffbc63b1723d53eac2f25b5d4489fc78" name="python-google-apitools" arch="src">
    <version epoch="0" ver="0.5.6" rel="2.1"/>

<changelog author="rjschwei@suse.com" date="1475582400">- Initial build  include in SLES 12 (FATE#321630, bsc#1002895)
  + Version 0.5.4
  + Add apitools-test-clientgen.patch
  + Add apitools-test-disable-requires-internet.patch
  + Add apitools-test-fix-path-gen_client.patch</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Update to version 0.5.6 (bsc#1002895)
  + No upstream changelog
  + Forward port apitools-test-disable-requires-internet.patch
    (improved solution)</changelog>
<changelog author="lchiquitto@suse.de" date="1495022400">- Use python-setuptools 18.0 on SLE 12 (fate#321630)</changelog>

</package>
<package pkgid="449c41ee1e948411d5c87cec6b97118fd2794ae07598ed743de9fc77a47ebc81" name="python-httplib2" arch="noarch">
    <version epoch="0" ver="0.9.2" rel="7.1"/>

<changelog author="cstender@opensuse.org" date="1338897600">- update to version 0.7.4
  * See CHANGELOG for all changes and fixes</changelog>
<changelog author="saschpe@suse.de" date="1340193600">- Don't ship private copy of Mozilla NSS certs, use system certs
  instead (bnc#761162)</changelog>
<changelog author="cfarrell@suse.com" date="1341835200">- license update: MIT and Apache-2.0 and (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
  __init__.py contains code derived from a Google owned Apache project.
  cacerts.txt is Mozilla triple-licensed.</changelog>
<changelog author="saschpe@suse.de" date="1342526400">- Add missing runtime requirement on python-pyOpenSSL to gain
  access to 'ssl' module</changelog>
<changelog author="saschpe@suse.de" date="1343044800">- Require openssl-certs on SLE instead of ca-certificates</changelog>
<changelog author="os-dev@jacraig.com" date="1347192000">- Update to 0.7.5, no changelog provided.</changelog>
<changelog author="os-dev@jacraig.com" date="1349524800">- Update to 0.7.6:
  * Fix app engine
  * On Python App Engine 2.7 a body can be passed in that is actually a
    stream. Do a full read of the contents of that stream before proceeding.
- Update URL to one given in setup.py; also where the old one redirects to.</changelog>
<changelog author="p.drouand@gmail.com" date="1357905600">- Update to 0.7.7 version:
  * More fixes for App Engine, now less likely to swallow important exceptions.
  * Adding proxy_info_from_* methods to Python3. Reviewed in https://codereview.appspot.com/6588078/.
  * Added GeoTrust cert
  * Make httplib2.Http() instances pickleable. Reviewed in https://codereview.appspot.com/6506074/
  * The following issues have been fixed:
  - 229 python3 httplib2 clobbers multiple headers of same key
  - 230 Expose meaningful exception for App Engine URLFetch ResponseTooLargeError
  - 231 Expose App Engine URLFetch DeadlineExceededError for debugging purposes</changelog>
<changelog author="p.drouand@gmail.com" date="1357905601">- Initial python3 support</changelog>
<changelog author="p.drouand@gmail.com" date="1357905602">- Drop unneeded python-pyOpenSSL Requires</changelog>
<changelog author="speilicke@suse.com" date="1363953600">- Update to version 0.8:
  + Improved App Engine behavior</changelog>
<changelog author="speilicke@suse.com" date="1367496000">- Add httplib2-bnc-818100.patch (bnc#818100): Fix for subsequent
  request SSL certificate validation</changelog>
<changelog author="speilicke@suse.com" date="1376568000">- Drop pre_checkin.sh</changelog>
<changelog author="rschweikert@suse.com" date="1385812800">- SUSE internal build service does not recognize %0{sles_version}
  use a different version inidcator to depend on openssl-certs vs
  ca-certificates</changelog>
<changelog author="rschweikert@suse.com" date="1392292800">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1394020800">- Modify httplib2-use-system-certs.patch to not depend on a generated bundle.
  OpenSSL has everything built in to do the cert verification, we do not
  need to pass a cert bundle file</changelog>
<changelog author="tbechtold@suse.com" date="1410782400">- update to version 0.9
  * Release 0.9. The heartbleed release.
  * Add an updated cacerts.txt file and fix some tests. Turns out nginx doesn't support etags on gzip'd content.
  * Merge pull request #259 from snarfed/master
  * use socket.getdefaulttimeout() on App Engine as well as off, take 2
  * Merge pull request #258 from snarfed/master
  * use socket.getdefaulttimeout() on App Engine as well as off
  * Update README.md
  * whitespace fix
  * Remove redundant README
  * Remove unused files.
  * Update README.md
  * Merge ../httplib2.current
  * Update README.md
  * Last fixed for markdown.
  * Update README.md
  * Markdown fixes.
  * Moving README over to README.md
  * Pass method by name, not positionally. Fixes issue #252. Reviewed in https://codereview.appspot.com/7987046/.
  * Fix handling of BadStatusLine. Fixes issue #250. Review in https://codereview.appspot.com/7529045/.
  * Clean up tags
  * Added tag 0.8 for changeset 427a4ff7b7e4</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430913600">- update to version 0.9.1:
  * fix #296: There was a problem with headers when a binary string
    is passed (like b'Authorization').
  * fix #276: Default to doing DNS resolution through a proxy
    server if present.</changelog>
<changelog author="rjschwei@suse.com" date="1448971200">- Include 0.9.1 in SLE 12 (FATE#319904, bsc#954690)</changelog>
<changelog author="rjschwei@suse.com" date="1449144000">- Update to version 0.9.2:
  * Fix incorrect ResponseNotReady exceptions, retry on transient errors.</changelog>

</package>
<package pkgid="8810de7a4f9421b0ef8cb35d6cdd08a7e9c5dce249afaf88fa1cf6dc7d149559" name="python-httplib2" arch="src">
    <version epoch="0" ver="0.9.2" rel="7.1"/>

<changelog author="cstender@opensuse.org" date="1338897600">- update to version 0.7.4
  * See CHANGELOG for all changes and fixes</changelog>
<changelog author="saschpe@suse.de" date="1340193600">- Don't ship private copy of Mozilla NSS certs, use system certs
  instead (bnc#761162)</changelog>
<changelog author="cfarrell@suse.com" date="1341835200">- license update: MIT and Apache-2.0 and (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
  __init__.py contains code derived from a Google owned Apache project.
  cacerts.txt is Mozilla triple-licensed.</changelog>
<changelog author="saschpe@suse.de" date="1342526400">- Add missing runtime requirement on python-pyOpenSSL to gain
  access to 'ssl' module</changelog>
<changelog author="saschpe@suse.de" date="1343044800">- Require openssl-certs on SLE instead of ca-certificates</changelog>
<changelog author="os-dev@jacraig.com" date="1347192000">- Update to 0.7.5, no changelog provided.</changelog>
<changelog author="os-dev@jacraig.com" date="1349524800">- Update to 0.7.6:
  * Fix app engine
  * On Python App Engine 2.7 a body can be passed in that is actually a
    stream. Do a full read of the contents of that stream before proceeding.
- Update URL to one given in setup.py; also where the old one redirects to.</changelog>
<changelog author="p.drouand@gmail.com" date="1357905600">- Update to 0.7.7 version:
  * More fixes for App Engine, now less likely to swallow important exceptions.
  * Adding proxy_info_from_* methods to Python3. Reviewed in https://codereview.appspot.com/6588078/.
  * Added GeoTrust cert
  * Make httplib2.Http() instances pickleable. Reviewed in https://codereview.appspot.com/6506074/
  * The following issues have been fixed:
  - 229 python3 httplib2 clobbers multiple headers of same key
  - 230 Expose meaningful exception for App Engine URLFetch ResponseTooLargeError
  - 231 Expose App Engine URLFetch DeadlineExceededError for debugging purposes</changelog>
<changelog author="p.drouand@gmail.com" date="1357905601">- Initial python3 support</changelog>
<changelog author="p.drouand@gmail.com" date="1357905602">- Drop unneeded python-pyOpenSSL Requires</changelog>
<changelog author="speilicke@suse.com" date="1363953600">- Update to version 0.8:
  + Improved App Engine behavior</changelog>
<changelog author="speilicke@suse.com" date="1367496000">- Add httplib2-bnc-818100.patch (bnc#818100): Fix for subsequent
  request SSL certificate validation</changelog>
<changelog author="speilicke@suse.com" date="1376568000">- Drop pre_checkin.sh</changelog>
<changelog author="rschweikert@suse.com" date="1385812800">- SUSE internal build service does not recognize %0{sles_version}
  use a different version inidcator to depend on openssl-certs vs
  ca-certificates</changelog>
<changelog author="rschweikert@suse.com" date="1392292800">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rschweikert@suse.com" date="1394020800">- Modify httplib2-use-system-certs.patch to not depend on a generated bundle.
  OpenSSL has everything built in to do the cert verification, we do not
  need to pass a cert bundle file</changelog>
<changelog author="tbechtold@suse.com" date="1410782400">- update to version 0.9
  * Release 0.9. The heartbleed release.
  * Add an updated cacerts.txt file and fix some tests. Turns out nginx doesn't support etags on gzip'd content.
  * Merge pull request #259 from snarfed/master
  * use socket.getdefaulttimeout() on App Engine as well as off, take 2
  * Merge pull request #258 from snarfed/master
  * use socket.getdefaulttimeout() on App Engine as well as off
  * Update README.md
  * whitespace fix
  * Remove redundant README
  * Remove unused files.
  * Update README.md
  * Merge ../httplib2.current
  * Update README.md
  * Last fixed for markdown.
  * Update README.md
  * Markdown fixes.
  * Moving README over to README.md
  * Pass method by name, not positionally. Fixes issue #252. Reviewed in https://codereview.appspot.com/7987046/.
  * Fix handling of BadStatusLine. Fixes issue #250. Review in https://codereview.appspot.com/7529045/.
  * Clean up tags
  * Added tag 0.8 for changeset 427a4ff7b7e4</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430913600">- update to version 0.9.1:
  * fix #296: There was a problem with headers when a binary string
    is passed (like b'Authorization').
  * fix #276: Default to doing DNS resolution through a proxy
    server if present.</changelog>
<changelog author="rjschwei@suse.com" date="1448971200">- Include 0.9.1 in SLE 12 (FATE#319904, bsc#954690)</changelog>
<changelog author="rjschwei@suse.com" date="1449144000">- Update to version 0.9.2:
  * Fix incorrect ResponseNotReady exceptions, retry on transient errors.</changelog>

</package>
<package pkgid="1efcafbde4860d63cb01df20b45d4f200a7a674c35af1904ab0e313991981cfd" name="python-httpretty" arch="noarch">
    <version epoch="0" ver="0.8.8" rel="7.1"/>

<changelog author="dmueller@suse.com" date="1378123200">- Initial package (0.6.3)</changelog>
<changelog author="dmueller@suse.com" date="1380196800">- update to 0.6.4:
  * Add a way to match the querystrings</changelog>
<changelog author="dmueller@suse.com" date="1382356800">- update to 0.7.0:
  * Refactored core.py and increased its unit test coverage to 80%.
  HTTPretty is slightly more robust now</changelog>
<changelog author="speilicke@suse.com" date="1382961600">- Don't install global "tests" module into python_sitelib</changelog>
<changelog author="speilicke@suse.com" date="1389960000">- Update to version 0.7.1:
  + Bug fix: POST requests being called twice #100
- Rebased deps-cleanup.diff</changelog>
<changelog author="dmueller@suse.com" date="1392638400">- update to 0.8.0:
  * This new version brings Python 3 support, leaner requirements
- remove deps-cleanup.diff</changelog>
<changelog author="speilicke@suse.com" date="1392638401">- Drop old tarball</changelog>
<changelog author="mcihar@suse.cz" date="1406116800">- Upgrate to 0.8.3:
  * various minor fixes</changelog>
<changelog author="mcihar@suse.cz" date="1429704000">- Update to 0.8.8:
  * many changes</changelog>
<changelog author="dmueller@suse.com" date="1457870400">- add copying</changelog>

</package>
<package pkgid="7fa1792bc91d0afed4fc6bb93bdf0bef119a88a5ac4b81c758b344f38851510d" name="python-httpretty" arch="src">
    <version epoch="0" ver="0.8.8" rel="7.1"/>

<changelog author="dmueller@suse.com" date="1378123200">- Initial package (0.6.3)</changelog>
<changelog author="dmueller@suse.com" date="1380196800">- update to 0.6.4:
  * Add a way to match the querystrings</changelog>
<changelog author="dmueller@suse.com" date="1382356800">- update to 0.7.0:
  * Refactored core.py and increased its unit test coverage to 80%.
  HTTPretty is slightly more robust now</changelog>
<changelog author="speilicke@suse.com" date="1382961600">- Don't install global "tests" module into python_sitelib</changelog>
<changelog author="speilicke@suse.com" date="1389960000">- Update to version 0.7.1:
  + Bug fix: POST requests being called twice #100
- Rebased deps-cleanup.diff</changelog>
<changelog author="dmueller@suse.com" date="1392638400">- update to 0.8.0:
  * This new version brings Python 3 support, leaner requirements
- remove deps-cleanup.diff</changelog>
<changelog author="speilicke@suse.com" date="1392638401">- Drop old tarball</changelog>
<changelog author="mcihar@suse.cz" date="1406116800">- Upgrate to 0.8.3:
  * various minor fixes</changelog>
<changelog author="mcihar@suse.cz" date="1429704000">- Update to 0.8.8:
  * many changes</changelog>
<changelog author="dmueller@suse.com" date="1457870400">- add copying</changelog>

</package>
<package pkgid="7972b1a0709c396b505fee486a15f3798c25e68261121c132ae33e2c3d438c2a" name="python-ipa_hbac" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="09d1177f1ac4cd8fb614d4c8412b8b7fec54861fffafdba339a8bc5906252451" name="python-jmespath" arch="noarch">
    <version epoch="0" ver="0.9.2" rel="7.1"/>

<changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
<changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
<changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
<changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
<changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
<changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
<changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
<changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
<changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
<changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
<changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>

</package>
<package pkgid="0981f930d86f468276172050f44612af5e5fc5e534dcc73d2deffcff17267ca0" name="python-jmespath" arch="src">
    <version epoch="0" ver="0.9.2" rel="7.1"/>

<changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
<changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
<changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
<changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
<changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
<changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
<changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
<changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
<changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
<changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
<changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
<changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>

</package>
<package pkgid="4a710d1dc1c16b0795538b2b7bb1181ea045f8046a78573fd785683d343e76ce" name="python-kiwi" arch="src">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="3e678417942a6e137581b83d59936dc8410688b03bb700ea0e16223a894b32a0" name="python-kopano" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="0d98a97d80bcf914d76bdbebbd93b61d9a94947020b1f93214307da389009f72" name="python-libmount" arch="src">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="5c4a9119d2884c829fce52d3438671074e49993ef5b70a46644de5519a3e6ed4" name="python-libmount" arch="x86_64">
    <version epoch="0" ver="2.29.2" rel="5.1"/>

<changelog author="sweet_f_a@gmx.de" date="1478606400">- Update to version 2.29 (FATE#322090)
  * cal: possible to specify month by name (e.g. "cal January
    2017") and use relative placeholders (cal "+1 month")
  * fdisk(8) allows to wipe newly created partitions; the feature
    is possible to control by new command line option
  - -wipe-partitions[==auto|never|default].
  * findmnt --verify: the command scans /etc/fstab and tries to
    verify the configuration.
  * mount(8) now rejects requests to create another device and
    mount filesystem for the same backing file. The command
    `losetup --nooverlap` reuses loop device if already exists
    for the same backing file. All the functionality calculate
    with offset and sizelimit options of course, so it's fine to
    have multiple regions (partitions) in the same image file and
    mount all of them in the same time. The restriction is that
    the regions should not overlap.
  * lscpu supports the "drawer" topology for IBM S/390.
  * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
  * libmount: various issues with cifs mount
    (bsc#982331, bsc#987176).
  * libblkid: Prevent infinite loop DoS while parsing DOS partition
    tables (bsc#988361, CVE-2016-5011).
  * More details at:
    http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
- refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff</changelog>
<changelog author="sbrabec@suse.com" date="1481112000">- Remove no more supported --enable-libmount-force-mountinfo.
  There is --enable-libmount-support-mtab, disabled by default,
  exactly as we need.</changelog>
<changelog author="fbui@suse.com" date="1481803200">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  libsystemd-* libs were deprecated and are gone now.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1483617600">- don't install bash-completions for uninstalled binaries (chfn,
  chsh, newgrp, pg)
- for now remove procps dependency  which is only needed for tests
  because it pulls systemd</changelog>
<changelog author="sbrabec@suse.com" date="1486468800">- Replace raw initscript by a systemd service doing the same thing.
  Based on previous work of fcrozat@suse.com (FATE#321122).</changelog>
<changelog author="sbrabec@suse.com" date="1486468801">- Update to version 2.29.1:
  * lscpu: add aarch64 specific names
  * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
  * More details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes</changelog>
<changelog author="sbrabec@suse.com" date="1486555200">- Merge SLE12 SP3 changes to make the package compatible with
  Tumbleweed, SLE12 SP3 and Leap 42.3.
- Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
  and Leap 42.3. Upstream has a different workaround.
  https://github.com/karelzak/util-linux/issues/296
- INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
  losetup -L changes its meaning from SLE12 SP1&amp;SP2 specific
  - -logical-blocksize to the upstream --nooverlap).
  - -logical-blocksize can be used only with long option
  (bsc#966891).
- Include SLE12 + Leap 42 exclusive feature, implemented by
  hare@suse.de:
  * losetup: Add support for setting logical blocksizes
    (bsc#931634, FATE#319010)
    + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  SLE12 &amp; Leap 42 specific changes:
  * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
    boo#954482, was obsoleted by the systemd update, and skipped.
  * Remove --enable-ncurses that is intended to force non-wide
    ncurses (boo#978993).
  * Make release-dependent conflict with old sysvinit-tools SLE
    specific, as it is required only for SLE 11 upgrade,
    and breaks openSUSE staging builds (boo#994399).
  * Obsolete these patches, now upstreamed:
  * Drop upstreamed patches
    (tests-script-race-on-force-only.patch,
    util-linux-libmount-ignore-redundant-slashes.patch,
    util-linux-sfdisk-show-pt-geometry-1.patch,
    util-linux-sfdisk-show-pt-geometry-2.patch,
    util-linux-sfdisk-show-pt-geometry-3.patch,
    util-linux-libblkid-partition-loop.patch,
    util-linux-libblkid-wipe-offset.patch,
    util-linux-mount-reuse-loop-1.patch,
    util-linux-mount-reuse-loop-2.patch,
    util-linux-mount-reuse-loop-3.patch,
    util-linux-mount-reuse-loop-4.patch,
    util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
    util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
    util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
    util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
    util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
    util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
    util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
    util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
    util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
    util-linux-loop-reuse-20.patch,
    util-linux-libmount-cifs-is_mounted.patch).
  * Refreshed patches
    (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).</changelog>
<changelog author="fbui@suse.com" date="1486728000">- presets are managed by the branding presets package (bsc#1012850)
  The default activation state is defined by the branding preset
  package.
  This also get rid of the only use of the rpm preset macros so we can
  kill them.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1487764800">- Update to version 2.29.2:
  * su(1) security issue CVE-2017-2616 (bsc#1023041)
  * minor bugfixes and enhancements</changelog>
<changelog author="sbrabec@suse.com" date="1488283200">- Keep dependency on insserv and fillup for compatibilitiy reasons
  in Leap 42.3. Too many poorly written packages depend on it.
  (Marked as "sysv compatibility hack".)</changelog>
<changelog author="sbrabec@suse.com" date="1489665600">- Drop "codepage" fstab migration needed for SuSE Linux &lt; 9.1
  (bsc#51950 (suse#36950)).</changelog>
<changelog author="sbrabec@suse.com" date="1489752000">- Conflict with old systemd-presets-branding to ensure correct
  preset migration (boo#1029775, bsc#1012850).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1491307200">- fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - -logical-blocksize was behaving like --nooverlap</changelog>
<changelog author="sbrabec@suse.com" date="1491480000">- To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
  release based conflict with bash-completion from 13.1 to 10.</changelog>
<changelog author="agraf@suse.com" date="1491998400">- Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
  + arm64-lscpu-use-sysfs-for-table-access-if-available.patch</changelog>
<changelog author="msuchanek@suse.com" date="1496923200">- When when hypervisor_decode_sysfw fails continue with other
  detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
  + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch</changelog>
<changelog author="sbrabec@suse.com" date="1497873600">- libmount: Ensure that utab.lock is always created with correct
  mode (bsc#1030763, util-linux-libmount-utab-lock.patch).
- Fix regressions in safe loop re-use patch set for libmount
  not included in 2.29.2 (boo#1012504, bsc#1033236,
  util-linux-loop-reuse-fix-1.patch,
  util-linux-loop-reuse-fix-2.patch,
  util-linux-loop-reuse-fix-3.patch).</changelog>
<changelog author="nfbrown@suse.com" date="1499428800">- util-linux-libmount-umount-never-stat-the-path-when-c-is-given.patch
  util-linux-libmount-use-mount-table-filter-on-no-canonicalize.patch
  util-linux-libmount-umount-use-mount-table-filter-on-c-only.patch
  Allow unmounting of filesystems with ever 'stat'ing
  the mount point, when "-c" is used.
  This is needed when NFS server is down.
  (bsc#1040968)</changelog>
<changelog author="sbrabec@suse.com" date="1502884800">- If multiple subvolumes are mounted, report the default subvolume
  (bsc#1039276, util-linux-libmount-btrfs-report-default.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1510056000">- lscpu fixes:
  * Read correct max/min frequencies
    (util-linux-lscpu-read-cpu-max-min-freq.patch,
    needed for util-linux-lscpu-robust-min-max-freq.patch,
    bsc#1055446#c29)
  * Fix infinite loop or crash on some CPUs
    (bsc#1055446, util-linux-lscpu-robust-min-max-freq.patch)
  * Fix fatal exit on Sydney Amazon EC2 region
    (bsc#1066500, util-linux-lscpu-xen-failure-non-fatal.patch)</changelog>

</package>
<package pkgid="7749325da2ef14363f323d7c0821943972a9b9daefac21c704442df5610bf930" name="python-libxml2" arch="src">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="prusnak@suse.cz" date="1225972800">- fixed CVE-2008-4226 [bnc#441368]</changelog>
<changelog author="prusnak@suse.cz" date="1227009600">- fixed CVE-2008-4225 [bnc#445677]</changelog>
<changelog author="prusnak@suse.cz" date="1227614400">- fix broken xmlsave (xmlsave.patch) [bnc#437203]</changelog>
<changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
<changelog author="prusnak@suse.cz" date="1231761600">- added oldsax.patch to enable pre 2.7.0 sax behaviour [bnc#457056]</changelog>
<changelog author="prusnak@suse.cz" date="1237464000">- updated to 2.7.2
  * Portability fix: fix solaris compilation problem,
    fix compilation if XPath is not configured in
  * Bug fixes: nasty entity bug introduced in 2.7.0, restore old
    behaviour when saving an HTML doc with an xml dump function,
    HTML UTF-8 parsing bug, fix reader custom error handlers
    (Riccardo Scussat)
  * Improvement: xmlSave options for more flexibility to save
    as XML/HTML/XHTML, handle leading BOM in HTML documents
- updated to 2.7.3
  * Build fix: fix build when HTML support is not included.
  * Bug fixes: avoid memory overflow in gigantic text nodes,
    indentation problem on the writed (Rob Richards),
    xmlAddChildList pointer problem (Rob Richards and Kevin Milburn),
    xmlAddChild problem with attribute (Rob Richards and Kris Breuker),
    avoid a memory leak in an edge case (Daniel Zimmermann),
    deallocate some pthread data (Alex Ott).
  * Improvements: configure option to avoid rebuilding docs
    (Adrian Bunk), limit text nodes to 10MB max by default,
    add element traversal APIs, add a parser option to enable
    pre 2.7 SAX behavior (Rob Richards),
    add gcc malloc checking (Marcus Meissner),
    add gcc printf like functions parameters checking (Marcus Meissner).
- dropped obsoleted patches:
  * alloc_size.patch (mainline)
  * CVE-2008-4225.patch (mainline)
  * CVE-2008-4226.patch (mainline)
  * CVE-2008-4409.patch (mainline)
  * oldsax.patch (mainline)
  * pritnf.patch (mainline)
  * xmlsave.patch (mainline)</changelog>
<changelog author="jengelh@medozas.de" date="1260878400">- enable parallel building</changelog>
<changelog author="mrdocs@opensuse.org" date="1269345600">- update to 2.7.7
- add extra options to ./configure for scribus features and avoid a crash
- updates from 2.7.3 &gt; 2.7.7 include a number of portability, correctness
  memory leaks and build fixes including some CVE
- see http://xmlsoft.org/news.html for exact details</changelog>
<changelog author="coolo@novell.com" date="1270641600">- fix build</changelog>
<changelog author="puzel@novell.com" date="1291377600">- update to libxml-2.7.8
  - number of bufixes, documentation and portability fixes
  - update language ID parser to RFC 5646
  - sort python generated stubs
  - add an HTML parser option to avoid a default doctype
  - see http://xmlsoft.org/news.html for exact details
- clean up specfile</changelog>
<changelog author="coolo@novell.com" date="1291636800">- buildrequire python-xml to fix build</changelog>
<changelog author="saschpe@suse.de" date="1310126400">- update to libxml-2.7.8+git20110708
  - several important bugfixes</changelog>
<changelog author="jengelh@medozas.de" date="1324900800">- Remove redundant tags/sections</changelog>
<changelog author="coolo@suse.com" date="1329998400">- renamed to python-libxml2 to follow python naming expectations
- do not require python but let rpm figure it out</changelog>
<changelog author="coolo@suse.com" date="1330171200">- fix version</changelog>
<changelog author="chris@computersalat.de" date="1339502400">- update to 2.8.0
  * please see ChangeLog for more info</changelog>
<changelog author="p.drouand@gmail.com" date="1355572800">- update to 2.9.0 version:
  * please see the Changelog
- Updated patchs to get working with new version:
  * libxml2-2.9.0-CVE-2012-5134.patch ( libxml2-CVE-2012-5134.patch )
  * fix-perl.diff</changelog>
<changelog author="coolo@suse.com" date="1373198400">- buildignore python to avoid build cycle</changelog>
<changelog author="vcizek@suse.com" date="1414756800">- Update to 2.9.2 version</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update python-libxml2 to version libxml2-2.9.4. The new version
  is resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>

</package>
<package pkgid="84ac27a87b31d31a2396053508986a0c07f5ca18cc9cfe900d65f1642c7982e6" name="python-libxml2" arch="x86_64">
    <version epoch="0" ver="2.9.4" rel="12.1"/>

<changelog author="prusnak@suse.cz" date="1237464000">- updated to 2.7.2
  * Portability fix: fix solaris compilation problem,
    fix compilation if XPath is not configured in
  * Bug fixes: nasty entity bug introduced in 2.7.0, restore old
    behaviour when saving an HTML doc with an xml dump function,
    HTML UTF-8 parsing bug, fix reader custom error handlers
    (Riccardo Scussat)
  * Improvement: xmlSave options for more flexibility to save
    as XML/HTML/XHTML, handle leading BOM in HTML documents
- updated to 2.7.3
  * Build fix: fix build when HTML support is not included.
  * Bug fixes: avoid memory overflow in gigantic text nodes,
    indentation problem on the writed (Rob Richards),
    xmlAddChildList pointer problem (Rob Richards and Kevin Milburn),
    xmlAddChild problem with attribute (Rob Richards and Kris Breuker),
    avoid a memory leak in an edge case (Daniel Zimmermann),
    deallocate some pthread data (Alex Ott).
  * Improvements: configure option to avoid rebuilding docs
    (Adrian Bunk), limit text nodes to 10MB max by default,
    add element traversal APIs, add a parser option to enable
    pre 2.7 SAX behavior (Rob Richards),
    add gcc malloc checking (Marcus Meissner),
    add gcc printf like functions parameters checking (Marcus Meissner).
- dropped obsoleted patches:
  * alloc_size.patch (mainline)
  * CVE-2008-4225.patch (mainline)
  * CVE-2008-4226.patch (mainline)
  * CVE-2008-4409.patch (mainline)
  * oldsax.patch (mainline)
  * pritnf.patch (mainline)
  * xmlsave.patch (mainline)</changelog>
<changelog author="jengelh@medozas.de" date="1260878400">- enable parallel building</changelog>
<changelog author="mrdocs@opensuse.org" date="1269345600">- update to 2.7.7
- add extra options to ./configure for scribus features and avoid a crash
- updates from 2.7.3 &gt; 2.7.7 include a number of portability, correctness
  memory leaks and build fixes including some CVE
- see http://xmlsoft.org/news.html for exact details</changelog>
<changelog author="coolo@novell.com" date="1270641600">- fix build</changelog>
<changelog author="puzel@novell.com" date="1291377600">- update to libxml-2.7.8
  - number of bufixes, documentation and portability fixes
  - update language ID parser to RFC 5646
  - sort python generated stubs
  - add an HTML parser option to avoid a default doctype
  - see http://xmlsoft.org/news.html for exact details
- clean up specfile</changelog>
<changelog author="coolo@novell.com" date="1291636800">- buildrequire python-xml to fix build</changelog>
<changelog author="saschpe@suse.de" date="1310126400">- update to libxml-2.7.8+git20110708
  - several important bugfixes</changelog>
<changelog author="jengelh@medozas.de" date="1324900800">- Remove redundant tags/sections</changelog>
<changelog author="coolo@suse.com" date="1329998400">- renamed to python-libxml2 to follow python naming expectations
- do not require python but let rpm figure it out</changelog>
<changelog author="coolo@suse.com" date="1330171200">- fix version</changelog>
<changelog author="chris@computersalat.de" date="1339502400">- update to 2.8.0
  * please see ChangeLog for more info</changelog>
<changelog author="p.drouand@gmail.com" date="1355572800">- update to 2.9.0 version:
  * please see the Changelog
- Updated patchs to get working with new version:
  * libxml2-2.9.0-CVE-2012-5134.patch ( libxml2-CVE-2012-5134.patch )
  * fix-perl.diff</changelog>
<changelog author="coolo@suse.com" date="1373198400">- buildignore python to avoid build cycle</changelog>
<changelog author="vcizek@suse.com" date="1414756800">- Update to 2.9.2 version</changelog>
<changelog author="psimons@suse.com" date="1464350400">- Update python-libxml2 to version libxml2-2.9.4. The new version
  is resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
  CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
  CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
  CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch and
  0001-Add-missing-increments-of-recursion-depth-counter-to.patch.</changelog>

</package>
<package pkgid="04bd594334246c098a9433aa5dc107061a4c41b508f917cd5bba417976b9ff6f" name="python-louis" arch="src">
    <version epoch="0" ver="2.6.4" rel="6.1"/>

<changelog author="vuntz@novell.com" date="1250856000">- Add liblouis-dlopen-versioned.patch to have the python bindings
  open the versioned .so library, so that they don't require the
  devel package.
- Make python-louis require liblouis0.</changelog>
<changelog author="captain.magnus@opensuse.org" date="1250856001">- Update to version 1.7.0:
  + The main new feature of this release is the support for UK and
    Marburg math. Other changes include a new tool to check
    hyphenation and the usual improvement and addition of tables.
    Also The test suite has been enhanced and finally passes
  + Fix for library name and Python bindings
  + Documentation fixes
  + Many small fixes
- Remove liblouis-build-fix.patch. Fixed upstream
- Remove liblouis-dlopen-versioned.patch. Code changed</changelog>
<changelog author="vuntz@novell.com" date="1251460800">- Fix python-louis build: with the new upstream release, we now
  need to build the library before building the python bindings.</changelog>
<changelog author="vuntz@opensuse.org" date="1259755200">- Update to version 1.8.0:
  + This release contains a number of improvements notably the
    integrationof gnulib, the automatic generation of man pages and
    the addition of tables for German grade 2.
  + New features
  - New tables
    . Tables German Grade 2
    . Swiss German
  - Modified tables
    . Updated Norwegian tables
  - man pages
    . All tools accept the --version and --help options and are
    documented in man pages
  - Corpus based test cases for tables
  + Bug fixes
  - Many small fixes
- Rename liblouis0 subpackage to liblouis2, because of soname bump.</changelog>
<changelog author="vuntz@opensuse.org" date="1282996800">- Update to version 2.1.1:
  + Bug fixes:
  - Fixed problems with the Danish grade 2 table
  - Fixed problems with the Marburg maths table for mathematics
    and the UK maths table for mathematics
- Changes from version 2.1.0:
  + New features:
  - New tables:
    . Added tables for Portuguese grade 1 and 2
    . Added unicode.dis for Unicode braille
  - Modified tables: Updated Danish tables
  - Implemented language to table mapping
  - New format of error messages: the error messages are now
    reported in a format similar to the one used in gcc.
  - New opcode: added undefined opcode
  - Python bindings:
    . Allow the user to configure the maximum output length by
    specifying a number by which the input length is multiplied
    using the outlenMultiplier module variable.
    . Add compbrlLeftCursor mode constant.
    . Add compileString function which wraps lou_compileString.
    . Corrections/clarifications to docstrings.
    . Add python binding for the lou_hyphenate function.
    . Added python wrapper for lou_backTranslateString and
    lou_backTranslate.
  - Add liblouisxslt as an example to python/examples.
  - Add compbrlLeftCursor.
  + Bug fixes:
  - Fix the output cursorPos when the compbrlAtCursor mode is
    enabled and the characters around the cursor translate to
    multiple braille cells, such as in the Chinese braille
    tables.
  - Fix outpos when doing back translation
  - Fix the input/output position arrays for characters in the
    input which are undefined in the translation table.
  - Table fixes:
    . Fixed a bug with back translation of '*n'.
    . Fixes to the en-us-g2.ctb table
  - Python bindings:
    . Remove unnecessary imports, allowing the bindings to run in
    Python 2.7.
    . lou_translate* writes output information in typeform, so
    allocate enough bytes for it. Fixes possible buffer
    overruns and resultant crashes.
  - Miscellaneous:
    . Fixes to the man page generation to fix issues
    . Do not invoke help2man when cross-compiling
    . Documentation updates (issue 10)
    . Removing noletsign defaults
    . Many small fixes
- Changes from version 2.0.0:
  + New function: Adding lou_charSize function
- Changes from version 1.9.0:
  + New functions:
  - lou_dotsToChar and lou_charToDots function
  - Added lou_compileString for adding entries to tables at
    run-time.</changelog>
<changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 2.3.0:
  + New features:
  - Multiple table search path (with LOUIS_TABLEPATH environment
    variable)
  - New --quiet option for lou_checktable
  - New functions to make libraries relocatable
  - New Braille tables: Swedish, Sorani (Kurdish), Ethiopic,
    Serbian, many Indian languages , Icelandic 6- and 8-dot,
    Catalan, Dutch Braille (for Belgium and the Netherlands),
    Flemish Braille Math Code (a.k.a. Woluwe code).
  + Braille Table Improvements: Chinse, Spanish Braille, French 6
    and 8 dot, Italian 8 dot, Generic Arabic Grade 1, Spanish,
    Norwegian.
  + Bug fixes:
  - Fixed a long standing bug with an infinite loop in the table
    compiler
  + Improved documentation
- Add pkg-config BuildRequires to get proper pkgconfig() provides.</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Update to version 2.4.1:
  + New features:
  - Czech hyphenation table
  - Spanish grade 1 table
  - New tamil table
  + Braille Table Improvements: Icelandic 8-dot, Norwegian,
    Portuguese grade1, uncontracted Spanish.
- Changes from version 2.4.0:
  + New features:
  - New Generic Farsi Grade 1 table
  - Emacs mode for editing Braille tables
  + Braille Table Improvements: Czech, French comp6 and comp8,
    Generic Arabic Grade 1, Romanian.</changelog>
<changelog author="vuntz@opensuse.org" date="1347278400">- Create a tools and a doc subpackages to contain the tools and
  documentation shipped by liblouis, instead of having a liblouis
  subpackage, since that's confusing (because what people are
  usually interested is the liblouis2 subpackage).
- Ship COPYING.LIB in liblouis2 subpackage and COPYING in the tools
  subpackage since everything is LGPL-3.0+, except the tools that
  are GPL-3.0+. That fixes bnc#779253.
- Since we don't have a liblouis subpackage anymore, add Provides
  and Obsoletes for it to liblouis2 for smooth upgrades.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 2.5.0:
  + New features:
  - New Braille tables
    . Estonian grade 0
    . Portuguese 8 dot Computer braille
  - UTF-8 support in tables
  - Improvements to the python bindings
  - Add a doctest infrastructure
  - Support for Python 3 in the Python bindings
  + Improved C-based test framework
  + Improved documentation
  + Braille table improvements
  + Bug fixes
- Remove checks for outdated openSUSE versions (&lt;= 11.2).</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.5.1:
  + Braille Table Improvements
  - Fix encoding problem in italian table and added more
    character definitions.
  - Rename it-it-g1.utb to it-it-comp6.utb and it-it-g1.utb2 to
    it-it-comp8.utb.
  + Bug fixes:
  - Fix outputPos and inlen where an input character generates
    multiple output characters.</changelog>
<changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 2.5.2:
  + New features:
  - New tool to trace rule application (lou_trace).
  - New Braille tables
    . Inuktitut grade 1.
    . UEB grade 1 and 2.
    . Korean table.
  - Braille Table Improvements
  - da-gk-g2.ctb, fixes for transposed â, å, æ, ä, ø  and ö,
    corrected/improved harness tests.
  - Corrections for en-GB-g2.ctb.
  - Corrections to the Hungarian grade 1 table.
  + Bug Fixes:
  - Update gnulib.
  - Fix a bug in the correct opcode which causes sometimes random
    results when translating.
  - Fixes for compiler warnings.
  - Fix some Valgrind warnings about invalid reads.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add python3-louis target.</changelog>
<changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.5.3:
  + New features:
  - New Braille tables.
    . Korean grade 1 and grade 2.
    . U.K. English 8 dot computer braille table.
    . New Russian literary and computer braille tables. These
    replace the older Russian tables which are left for
    backwards compatibility.
    . New hyphenation dictionary for Russian.
    . Updated hyphenation tables for the Norwegian language
    (nynorsk and bokmål).
    . New hyphenation dictionary for Esperanto.
    . New Esperanto grade 1 table, using the x system for
    accented letters.
  - runHarness.py:
    . Accept filename globs on the commandline to run specific
    harness files. In tests/harness, one can do make &lt;filename&gt;
    or make runall Removed from make check because these checks
    are checking the validity of our tables, rather than
    validity of the code.
  + Braille Table Improvements:
  - da-dk-g2.ctb, mostly rewritten to use nocross and hyphenation
    table.
  - Most tables: removed the default collapse whitespace
    statements, if you need to compress whitespace, consider
    adding compress.ctb to the list of tables when processing.
  - Corrections to Unified English Braille Code (Grade 1 and 2).
  - Corrections to apostrophes in the Computer Spanish 8 dots
    Braille table (Es-Es-G0.utb).
  - Corrections for double angle quotation marks and emphasis
    marks in the Norwegian Grade 0 Braille Table.
  - Fixes for a minor problem regarding the noletsign in
    Norwegian contracted braille.
  - Corrections to the Italian table.
  - Corrections to the Hungarian grade 1 table.
  - Corrections to English, U.S. Grade 2 (ABAE) table.
  - Further reorganization of the tables to remove duplication.
    Move litdigit opcode common parts and include where needed.
  - Removed obsolete en-us-g1.utb, which has been replaced by
    en-us-g1.ctb.
  - Added dictionary harness tests for: en-ueb-g2.ctb,
    en-us-g2.ctb.
  - Corrections to Nemeth character definitions.
  - Corrections to the Esperanto table.
  + Bug Fixes:
  - Cursor position calculation is now based on the same code
    that calculates inpos and outpos. This probably solves a
    number of bugs.
  - Fix nocross opcode processing.
  - Fix several buffer over/under runs in
    lou_translateString.c:hyphenate.
  - Fix the '=' problem, i.e. fix inputPositions calculation for
    the case where the equals sign is used as the dots operand.
  - Fix a bug when resizing a table. Previously not all
    references to this table were updated.
  + Backwards incompatible changes:
  - The feature that allowed a mapping between language code and
    Braille table was removed as it contained a out-of-bounds
    access bug, was never documented and probably never used.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">-Update to version 2.5.4:
  + New features
  - Added function lou_registerTableResolver for plugging in a
    table resolver callback from your host language.
  + Bug Fixes
  - Fixed ENDSEGMENT indicator in computer Braille.
  - Emphasized words should now be contracted consistently.
  - Fixed several problems with back-translation. A slash within
    a number and strings such as 5-inch-diameter and
    25-year-old-man should now back-translate correctly.
  - Fixed a problem with syllable opcode.
  - Fix warnings with gcc 4.8.2.
  - When a table is specified with an absolute or relative path,
    the "includes" in that table will now work as expected,
    meaning files in the same directory will be found.
  + Braille Table Improvements to fr-bfu-comp8, en-us-g2,
    en-ueb-g2, BUlgarian, en-gb-g1, Nemeth, Slovenian, Norwegian,
    Nepali, Danish.
  + Backwards incompatible changes
  - Delete the table chardefs-ueb.cti as these rules are now
    provided by en-ueb-chardefs.uti
- Update source URL.
- COPYING.LIB has been renamed to COPYING.LESSER
- Use fdupes for base package.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 2.6.4:
  + New features: YAML based harness tests. Harness tests can now
    be written in simple YAML notation and they are integrated with
    the normal `make check' command. They can be used for both ucs2
    and ucs4 and no Python is required.
  + Bug fixes:
  - Use a separate gnulib instance for the library and the tools.
    Use the strndup module to avoid build problems on windows.
  - Fix a problem with the nocross opcode when used in
    combination with the opcodes nocont and compbrl.
  - Fix a problem with the decoding of the harness test files.
  - Fix numerous problems in the way braille indicators are
    handled. There is now a safe version of the checkAttr
    function which makes sure that no attributes are checked
    beyond the boundaries of the currentInput. This fixes the
    random behavior with tests where the emphasis extends to the
    end of the input string.
  + Other changes:
  - If found use texi2any to build the documentation.
  - Fix permissions of Korean tables.
  - Update the windows build instructions.
  + Braille table improvements:
- Changes from version 2.6.3:
  + New features:
  - [beta] The new function lou_findTable can be used for table
    discovery based on meta data in table headers.
  - The Python API now has a new function to check tables aptly
    named ~checkTable~.
  + Bug fixes: Fixed a problem in resolveTable when using a Java
    resolver.
  + Other changes: The build dependency on makeinfo is now
    optional. If it is not installed we simply do not build the
    documentation.
  + Braille table improvements.
  + Corrections and improvements made to UEB tables.
- Changes from version 2.6.2:
  + New features: Harness tests now can test for typeform
    differences.
  + Bug fixes: Fix for emphasis bug.
  + Braille table improvements.
- Changes from version 2.6.1:
  + New features: New Braille tables.
  + Braille table improvements.
  + Bug fixes: Fix a compiler warning in the logging code.
  + Documentation updates: The documentation has been restructured
    to be more beginner friendly and a short introduction to
    translation table writing has been added.
  + Other changes:
  - When compiling with mingw or cygwin resulting dll is
    liblouis.dll.
  - runHarness.py: add new output format, compact output mode
    suitable for grepping.
  + Backwards incompatible changes:
  - Deleted ga.ctb now superseded by ga-g1.utb and ga.g2.ctb.
  - Nl-Nl-g1.utb has been removed. It is superseded by
    nl-NL-g1.ctb.
  - nl-be-g1.utb has been removed. It is superseded by
    nl-BE-g1.ctb.
- Changes from version 2.6.0:
  + New features:
  - New Braille tables.
  - Logging callback. There is now a callback system in place to
    get error messages and warnings.
  + Bug fixes:
  - Fix back translation problems when word gets split in unusual
    places causing back translation of whole words.
  - Fixed bug to prevent removal of \xffff between largesign
    rules.
  - Fixed a bug in back translation, when a letsign was
    encountered, the letsign was being applied beyond the element
    it applied to.
  - Fix memory leaks in the default table resolver introduced in
    the previous release.
  - Fixes to the build system.
  + Braille table improvements.
- Bump soname following upstream changes, leading to rename of
  package liblouis2 to liblouis9.
- Update url and sourceurl to new working ones.
- Add exlicit makeinfo BuildRequires, we want to build
  documentation.</changelog>
<changelog author="fcrozat@suse.com" date="1452513600">- Move data from library package to separate subpackage, to ensure
  library package can be safely upgraded.</changelog>
<changelog author="jengelh@inai.de" date="1453204800">- Use %{?_smp_mflags} for parallel build, newer %make_install
  for installation, and remove redundant %clean section.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Move %install_info_delete from postun to preun.
- Drop makeinfo BuildRequires: it's quite a big dependency and
  the .info file is present in the tarball.
- Install doc directly (make_install -C doc).</changelog>
<changelog author="mgorse@suse.com" date="1504699200">- Add patches to fix several CVEs, backported from upstream
  (boo#1056088 boo#1056090 boo#1056093 boo#1056095 boo#1056097
  boo#1056101 boo#1056105 CVE-2017-13738 CVE-2017-13739
  CVE-2017-13740 CVE-2017-13741 CVE_2017-13742 CVE-2017-13743
  CVE-2017-13744):
  0001-Fix-possible-out-of-bounds-write-from-a-followed-by-.patch
  0002-resolveSubtable-Fix-buffer-overflow-parsing-a-malfor.patch
  0003-Fix-possible-use-after-free-when-calling-compileBrai.patch</changelog>

</package>
<package pkgid="85457b5c0a024dcab0e2e9d742abf68ca900f70e9ed13d626f7b6502b4909ef6" name="python-louis" arch="x86_64">
    <version epoch="0" ver="2.6.4" rel="6.1"/>

<changelog author="vuntz@novell.com" date="1250856000">- Add liblouis-dlopen-versioned.patch to have the python bindings
  open the versioned .so library, so that they don't require the
  devel package.
- Make python-louis require liblouis0.</changelog>
<changelog author="captain.magnus@opensuse.org" date="1250856001">- Update to version 1.7.0:
  + The main new feature of this release is the support for UK and
    Marburg math. Other changes include a new tool to check
    hyphenation and the usual improvement and addition of tables.
    Also The test suite has been enhanced and finally passes
  + Fix for library name and Python bindings
  + Documentation fixes
  + Many small fixes
- Remove liblouis-build-fix.patch. Fixed upstream
- Remove liblouis-dlopen-versioned.patch. Code changed</changelog>
<changelog author="vuntz@novell.com" date="1251460800">- Fix python-louis build: with the new upstream release, we now
  need to build the library before building the python bindings.</changelog>
<changelog author="vuntz@opensuse.org" date="1259755200">- Update to version 1.8.0:
  + This release contains a number of improvements notably the
    integrationof gnulib, the automatic generation of man pages and
    the addition of tables for German grade 2.
  + New features
  - New tables
    . Tables German Grade 2
    . Swiss German
  - Modified tables
    . Updated Norwegian tables
  - man pages
    . All tools accept the --version and --help options and are
    documented in man pages
  - Corpus based test cases for tables
  + Bug fixes
  - Many small fixes
- Rename liblouis0 subpackage to liblouis2, because of soname bump.</changelog>
<changelog author="vuntz@opensuse.org" date="1282996800">- Update to version 2.1.1:
  + Bug fixes:
  - Fixed problems with the Danish grade 2 table
  - Fixed problems with the Marburg maths table for mathematics
    and the UK maths table for mathematics
- Changes from version 2.1.0:
  + New features:
  - New tables:
    . Added tables for Portuguese grade 1 and 2
    . Added unicode.dis for Unicode braille
  - Modified tables: Updated Danish tables
  - Implemented language to table mapping
  - New format of error messages: the error messages are now
    reported in a format similar to the one used in gcc.
  - New opcode: added undefined opcode
  - Python bindings:
    . Allow the user to configure the maximum output length by
    specifying a number by which the input length is multiplied
    using the outlenMultiplier module variable.
    . Add compbrlLeftCursor mode constant.
    . Add compileString function which wraps lou_compileString.
    . Corrections/clarifications to docstrings.
    . Add python binding for the lou_hyphenate function.
    . Added python wrapper for lou_backTranslateString and
    lou_backTranslate.
  - Add liblouisxslt as an example to python/examples.
  - Add compbrlLeftCursor.
  + Bug fixes:
  - Fix the output cursorPos when the compbrlAtCursor mode is
    enabled and the characters around the cursor translate to
    multiple braille cells, such as in the Chinese braille
    tables.
  - Fix outpos when doing back translation
  - Fix the input/output position arrays for characters in the
    input which are undefined in the translation table.
  - Table fixes:
    . Fixed a bug with back translation of '*n'.
    . Fixes to the en-us-g2.ctb table
  - Python bindings:
    . Remove unnecessary imports, allowing the bindings to run in
    Python 2.7.
    . lou_translate* writes output information in typeform, so
    allocate enough bytes for it. Fixes possible buffer
    overruns and resultant crashes.
  - Miscellaneous:
    . Fixes to the man page generation to fix issues
    . Do not invoke help2man when cross-compiling
    . Documentation updates (issue 10)
    . Removing noletsign defaults
    . Many small fixes
- Changes from version 2.0.0:
  + New function: Adding lou_charSize function
- Changes from version 1.9.0:
  + New functions:
  - lou_dotsToChar and lou_charToDots function
  - Added lou_compileString for adding entries to tables at
    run-time.</changelog>
<changelog author="dimstar@opensuse.org" date="1306065600">- Update to version 2.3.0:
  + New features:
  - Multiple table search path (with LOUIS_TABLEPATH environment
    variable)
  - New --quiet option for lou_checktable
  - New functions to make libraries relocatable
  - New Braille tables: Swedish, Sorani (Kurdish), Ethiopic,
    Serbian, many Indian languages , Icelandic 6- and 8-dot,
    Catalan, Dutch Braille (for Belgium and the Netherlands),
    Flemish Braille Math Code (a.k.a. Woluwe code).
  + Braille Table Improvements: Chinse, Spanish Braille, French 6
    and 8 dot, Italian 8 dot, Generic Arabic Grade 1, Spanish,
    Norwegian.
  + Bug fixes:
  - Fixed a long standing bug with an infinite loop in the table
    compiler
  + Improved documentation
- Add pkg-config BuildRequires to get proper pkgconfig() provides.</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Update to version 2.4.1:
  + New features:
  - Czech hyphenation table
  - Spanish grade 1 table
  - New tamil table
  + Braille Table Improvements: Icelandic 8-dot, Norwegian,
    Portuguese grade1, uncontracted Spanish.
- Changes from version 2.4.0:
  + New features:
  - New Generic Farsi Grade 1 table
  - Emacs mode for editing Braille tables
  + Braille Table Improvements: Czech, French comp6 and comp8,
    Generic Arabic Grade 1, Romanian.</changelog>
<changelog author="vuntz@opensuse.org" date="1347278400">- Create a tools and a doc subpackages to contain the tools and
  documentation shipped by liblouis, instead of having a liblouis
  subpackage, since that's confusing (because what people are
  usually interested is the liblouis2 subpackage).
- Ship COPYING.LIB in liblouis2 subpackage and COPYING in the tools
  subpackage since everything is LGPL-3.0+, except the tools that
  are GPL-3.0+. That fixes bnc#779253.
- Since we don't have a liblouis subpackage anymore, add Provides
  and Obsoletes for it to liblouis2 for smooth upgrades.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 2.5.0:
  + New features:
  - New Braille tables
    . Estonian grade 0
    . Portuguese 8 dot Computer braille
  - UTF-8 support in tables
  - Improvements to the python bindings
  - Add a doctest infrastructure
  - Support for Python 3 in the Python bindings
  + Improved C-based test framework
  + Improved documentation
  + Braille table improvements
  + Bug fixes
- Remove checks for outdated openSUSE versions (&lt;= 11.2).</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.5.1:
  + Braille Table Improvements
  - Fix encoding problem in italian table and added more
    character definitions.
  - Rename it-it-g1.utb to it-it-comp6.utb and it-it-g1.utb2 to
    it-it-comp8.utb.
  + Bug fixes:
  - Fix outputPos and inlen where an input character generates
    multiple output characters.</changelog>
<changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 2.5.2:
  + New features:
  - New tool to trace rule application (lou_trace).
  - New Braille tables
    . Inuktitut grade 1.
    . UEB grade 1 and 2.
    . Korean table.
  - Braille Table Improvements
  - da-gk-g2.ctb, fixes for transposed â, å, æ, ä, ø  and ö,
    corrected/improved harness tests.
  - Corrections for en-GB-g2.ctb.
  - Corrections to the Hungarian grade 1 table.
  + Bug Fixes:
  - Update gnulib.
  - Fix a bug in the correct opcode which causes sometimes random
    results when translating.
  - Fixes for compiler warnings.
  - Fix some Valgrind warnings about invalid reads.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add python3-louis target.</changelog>
<changelog author="zaitor@opensuse.org" date="1371902400">- Update to version 2.5.3:
  + New features:
  - New Braille tables.
    . Korean grade 1 and grade 2.
    . U.K. English 8 dot computer braille table.
    . New Russian literary and computer braille tables. These
    replace the older Russian tables which are left for
    backwards compatibility.
    . New hyphenation dictionary for Russian.
    . Updated hyphenation tables for the Norwegian language
    (nynorsk and bokmål).
    . New hyphenation dictionary for Esperanto.
    . New Esperanto grade 1 table, using the x system for
    accented letters.
  - runHarness.py:
    . Accept filename globs on the commandline to run specific
    harness files. In tests/harness, one can do make &lt;filename&gt;
    or make runall Removed from make check because these checks
    are checking the validity of our tables, rather than
    validity of the code.
  + Braille Table Improvements:
  - da-dk-g2.ctb, mostly rewritten to use nocross and hyphenation
    table.
  - Most tables: removed the default collapse whitespace
    statements, if you need to compress whitespace, consider
    adding compress.ctb to the list of tables when processing.
  - Corrections to Unified English Braille Code (Grade 1 and 2).
  - Corrections to apostrophes in the Computer Spanish 8 dots
    Braille table (Es-Es-G0.utb).
  - Corrections for double angle quotation marks and emphasis
    marks in the Norwegian Grade 0 Braille Table.
  - Fixes for a minor problem regarding the noletsign in
    Norwegian contracted braille.
  - Corrections to the Italian table.
  - Corrections to the Hungarian grade 1 table.
  - Corrections to English, U.S. Grade 2 (ABAE) table.
  - Further reorganization of the tables to remove duplication.
    Move litdigit opcode common parts and include where needed.
  - Removed obsolete en-us-g1.utb, which has been replaced by
    en-us-g1.ctb.
  - Added dictionary harness tests for: en-ueb-g2.ctb,
    en-us-g2.ctb.
  - Corrections to Nemeth character definitions.
  - Corrections to the Esperanto table.
  + Bug Fixes:
  - Cursor position calculation is now based on the same code
    that calculates inpos and outpos. This probably solves a
    number of bugs.
  - Fix nocross opcode processing.
  - Fix several buffer over/under runs in
    lou_translateString.c:hyphenate.
  - Fix the '=' problem, i.e. fix inputPositions calculation for
    the case where the equals sign is used as the dots operand.
  - Fix a bug when resizing a table. Previously not all
    references to this table were updated.
  + Backwards incompatible changes:
  - The feature that allowed a mapping between language code and
    Braille table was removed as it contained a out-of-bounds
    access bug, was never documented and probably never used.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">-Update to version 2.5.4:
  + New features
  - Added function lou_registerTableResolver for plugging in a
    table resolver callback from your host language.
  + Bug Fixes
  - Fixed ENDSEGMENT indicator in computer Braille.
  - Emphasized words should now be contracted consistently.
  - Fixed several problems with back-translation. A slash within
    a number and strings such as 5-inch-diameter and
    25-year-old-man should now back-translate correctly.
  - Fixed a problem with syllable opcode.
  - Fix warnings with gcc 4.8.2.
  - When a table is specified with an absolute or relative path,
    the "includes" in that table will now work as expected,
    meaning files in the same directory will be found.
  + Braille Table Improvements to fr-bfu-comp8, en-us-g2,
    en-ueb-g2, BUlgarian, en-gb-g1, Nemeth, Slovenian, Norwegian,
    Nepali, Danish.
  + Backwards incompatible changes
  - Delete the table chardefs-ueb.cti as these rules are now
    provided by en-ueb-chardefs.uti
- Update source URL.
- COPYING.LIB has been renamed to COPYING.LESSER
- Use fdupes for base package.</changelog>
<changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 2.6.4:
  + New features: YAML based harness tests. Harness tests can now
    be written in simple YAML notation and they are integrated with
    the normal `make check' command. They can be used for both ucs2
    and ucs4 and no Python is required.
  + Bug fixes:
  - Use a separate gnulib instance for the library and the tools.
    Use the strndup module to avoid build problems on windows.
  - Fix a problem with the nocross opcode when used in
    combination with the opcodes nocont and compbrl.
  - Fix a problem with the decoding of the harness test files.
  - Fix numerous problems in the way braille indicators are
    handled. There is now a safe version of the checkAttr
    function which makes sure that no attributes are checked
    beyond the boundaries of the currentInput. This fixes the
    random behavior with tests where the emphasis extends to the
    end of the input string.
  + Other changes:
  - If found use texi2any to build the documentation.
  - Fix permissions of Korean tables.
  - Update the windows build instructions.
  + Braille table improvements:
- Changes from version 2.6.3:
  + New features:
  - [beta] The new function lou_findTable can be used for table
    discovery based on meta data in table headers.
  - The Python API now has a new function to check tables aptly
    named ~checkTable~.
  + Bug fixes: Fixed a problem in resolveTable when using a Java
    resolver.
  + Other changes: The build dependency on makeinfo is now
    optional. If it is not installed we simply do not build the
    documentation.
  + Braille table improvements.
  + Corrections and improvements made to UEB tables.
- Changes from version 2.6.2:
  + New features: Harness tests now can test for typeform
    differences.
  + Bug fixes: Fix for emphasis bug.
  + Braille table improvements.
- Changes from version 2.6.1:
  + New features: New Braille tables.
  + Braille table improvements.
  + Bug fixes: Fix a compiler warning in the logging code.
  + Documentation updates: The documentation has been restructured
    to be more beginner friendly and a short introduction to
    translation table writing has been added.
  + Other changes:
  - When compiling with mingw or cygwin resulting dll is
    liblouis.dll.
  - runHarness.py: add new output format, compact output mode
    suitable for grepping.
  + Backwards incompatible changes:
  - Deleted ga.ctb now superseded by ga-g1.utb and ga.g2.ctb.
  - Nl-Nl-g1.utb has been removed. It is superseded by
    nl-NL-g1.ctb.
  - nl-be-g1.utb has been removed. It is superseded by
    nl-BE-g1.ctb.
- Changes from version 2.6.0:
  + New features:
  - New Braille tables.
  - Logging callback. There is now a callback system in place to
    get error messages and warnings.
  + Bug fixes:
  - Fix back translation problems when word gets split in unusual
    places causing back translation of whole words.
  - Fixed bug to prevent removal of \xffff between largesign
    rules.
  - Fixed a bug in back translation, when a letsign was
    encountered, the letsign was being applied beyond the element
    it applied to.
  - Fix memory leaks in the default table resolver introduced in
    the previous release.
  - Fixes to the build system.
  + Braille table improvements.
- Bump soname following upstream changes, leading to rename of
  package liblouis2 to liblouis9.
- Update url and sourceurl to new working ones.
- Add exlicit makeinfo BuildRequires, we want to build
  documentation.</changelog>
<changelog author="fcrozat@suse.com" date="1452513600">- Move data from library package to separate subpackage, to ensure
  library package can be safely upgraded.</changelog>
<changelog author="jengelh@inai.de" date="1453204800">- Use %{?_smp_mflags} for parallel build, newer %make_install
  for installation, and remove redundant %clean section.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="dimstar@opensuse.org" date="1465214400">- Move %install_info_delete from postun to preun.
- Drop makeinfo BuildRequires: it's quite a big dependency and
  the .info file is present in the tarball.
- Install doc directly (make_install -C doc).</changelog>
<changelog author="mgorse@suse.com" date="1504699200">- Add patches to fix several CVEs, backported from upstream
  (boo#1056088 boo#1056090 boo#1056093 boo#1056095 boo#1056097
  boo#1056101 boo#1056105 CVE-2017-13738 CVE-2017-13739
  CVE-2017-13740 CVE-2017-13741 CVE_2017-13742 CVE-2017-13743
  CVE-2017-13744):
  0001-Fix-possible-out-of-bounds-write-from-a-followed-by-.patch
  0002-resolveSubtable-Fix-buffer-overflow-parsing-a-malfor.patch
  0003-Fix-possible-use-after-free-when-calling-compileBrai.patch</changelog>

</package>
<package pkgid="e6bb15fb71288ade702e8e465fed8f20eca972dd1ec6dedd5ab1286ede72d923" name="python-magic" arch="src">
    <version epoch="0" ver="5.22" rel="10.1"/>

<changelog author="rguenther@suse.de" date="1201521600">- Split off from file.</changelog>
<changelog author="werner@suse.de" date="1208260800">- Also change version number in python-magic.spec</changelog>
<changelog author="coolo@novell.com" date="1314619200">- ran pre_checkin.sh</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
<changelog author="aj@suse.de" date="1332849600">- ran pre_checkin.sh</changelog>
<changelog author="idonmez@suse.com" date="1363089600">- Run pre_checkin.sh</changelog>
<changelog author="werner@suse.de" date="1380628800">- Make it ready for file 5.15</changelog>
<changelog author="werner@suse.de" date="1385985600">- Make it ready for file 5.16</changelog>
<changelog author="andreas.stieger@gmx.de" date="1393156800">- Update python-magic to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="ro@suse.de" date="1393588800">- adapt version in specfile to 5.17</changelog>
<changelog author="werner@suse.de" date="1403697600">- adapt version in specfile to 5.19</changelog>
<changelog author="werner@suse.de" date="1413201600">- adapt version in specfile to 5.20</changelog>
<changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
<changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>

</package>
<package pkgid="742a2bc8753e31cc3c2d82f2f00dceca6d890fa4e9d696b312f9d83c1fcb4a1f" name="python-magic" arch="src">
    <version epoch="0" ver="5.22" rel="13.1"/>

<changelog author="rguenther@suse.de" date="1201521600">- Split off from file.</changelog>
<changelog author="werner@suse.de" date="1208260800">- Also change version number in python-magic.spec</changelog>
<changelog author="coolo@novell.com" date="1314619200">- ran pre_checkin.sh</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
<changelog author="aj@suse.de" date="1332849600">- ran pre_checkin.sh</changelog>
<changelog author="idonmez@suse.com" date="1363089600">- Run pre_checkin.sh</changelog>
<changelog author="werner@suse.de" date="1380628800">- Make it ready for file 5.15</changelog>
<changelog author="werner@suse.de" date="1385985600">- Make it ready for file 5.16</changelog>
<changelog author="andreas.stieger@gmx.de" date="1393156800">- Update python-magic to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="ro@suse.de" date="1393588800">- adapt version in specfile to 5.17</changelog>
<changelog author="werner@suse.de" date="1403697600">- adapt version in specfile to 5.19</changelog>
<changelog author="werner@suse.de" date="1413201600">- adapt version in specfile to 5.20</changelog>
<changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
<changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>

</package>
<package pkgid="c825fd60467827702fb8ac5dbaea35139b18ff84e8e6d62e42629f644845233e" name="python-magic" arch="x86_64">
    <version epoch="0" ver="5.22" rel="10.1"/>

<changelog author="coolo@novell.com" date="1314619200">- ran pre_checkin.sh</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
<changelog author="aj@suse.de" date="1332849600">- ran pre_checkin.sh</changelog>
<changelog author="idonmez@suse.com" date="1363089600">- Run pre_checkin.sh</changelog>
<changelog author="werner@suse.de" date="1380628800">- Make it ready for file 5.15</changelog>
<changelog author="werner@suse.de" date="1385985600">- Make it ready for file 5.16</changelog>
<changelog author="andreas.stieger@gmx.de" date="1393156800">- Update python-magic to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="ro@suse.de" date="1393588800">- adapt version in specfile to 5.17</changelog>
<changelog author="werner@suse.de" date="1403697600">- adapt version in specfile to 5.19</changelog>
<changelog author="werner@suse.de" date="1413201600">- adapt version in specfile to 5.20</changelog>
<changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
<changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>

</package>
<package pkgid="4f684edd23504e4367e36d9228ae9851cecaea2ae5e20440e5695f844bdede46" name="python-magic" arch="x86_64">
    <version epoch="0" ver="5.22" rel="13.1"/>

<changelog author="coolo@novell.com" date="1314619200">- ran pre_checkin.sh</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
<changelog author="aj@suse.de" date="1332849600">- ran pre_checkin.sh</changelog>
<changelog author="idonmez@suse.com" date="1363089600">- Run pre_checkin.sh</changelog>
<changelog author="werner@suse.de" date="1380628800">- Make it ready for file 5.15</changelog>
<changelog author="werner@suse.de" date="1385985600">- Make it ready for file 5.16</changelog>
<changelog author="andreas.stieger@gmx.de" date="1393156800">- Update python-magic to file version 5.17 (bug fix release)
  * Count recursion levels through indirect magic
  * Prevent infinite recursion on files with indirect offsets of 0
  * Add -E flag that makes file print filesystem errors to stderr
    and exit.
  * mime printing could print results from multiple magic entries
    if there were multiple matches.
  * in some cases overflow was not detected when computing offsets
    in softmagic.
  * use strcasestr() to for cdf strings
  * reset to the "C" locale while doing regex operations, or case
    insensitive comparisons; this is provisional</changelog>
<changelog author="ro@suse.de" date="1393588800">- adapt version in specfile to 5.17</changelog>
<changelog author="werner@suse.de" date="1403697600">- adapt version in specfile to 5.19</changelog>
<changelog author="werner@suse.de" date="1413201600">- adapt version in specfile to 5.20</changelog>
<changelog author="werner@suse.de" date="1418817600">- adapt version in specfile to 5.21</changelog>
<changelog author="werner@suse.de" date="1421755200">- adapt version in specfile to 5.22</changelog>

</package>
<package pkgid="2f249efb5f74b1557ddfdbd02f76c10a41a3c0c5210c649d33514d5b8cc6b89b" name="python-mapi" arch="x86_64">
    <version epoch="0" ver="8.3.3.24" rel="3.2"/>

<changelog author="jengelh@inai.de" date="1478692800">- Update to 8.2 snapshot 397
  * == Fixes ==
  * backup: avoid exceptions on problematic rules/ACLs/delegates [KC-213,KC-266]
  * The comment for server.cfg's "disabled_features" was wrong [KC-262]
  * php: fix crash by adding missing pointer type conversions [KC-274]
  * dagent: the "Received" debugging header had the wrong target address
  * gateway: do not emit an X-Mailer field when retrieving mail [KC-277]
  * server/ldap: report empty ldap_search_base setting
  * client: verify peer's SSL certificate name [KC-156]
  * admin: support unwrapping "default:" type URLs [KC-289]
  * backup: fix tracebacks when used with ZCP [KC-306,KC-307,KC-308]
  * server: implement missing readback of compressed attachments [KC-285]
  * search: add script for findroot upgrade [KC-300]
  * php: ICS import/export functions [KC-302]
  * server: AWS4-HMAC-SHA256 support for S3 [KC-170]
  * pyko: permit "public@company" syntax to specify stores [KC-317]
  * dagent: new AUTORESPOND_BCC option for use with OOF [KC-319]
  * == Enhancements ==
  * PST importer [KC-59]
  * Python 3 support [KC-48,KC-267]
  * search: files are now compacted, and their uid/gid checked [KC-188]
  * server: allow search folder creation outside of own store [KC-271]
  * dagent: forwarding by rule can be restricted with a whitelist [KC-109]
  * == Changes ==
  * Non-Delivery Reports now originate from "Mail Delivery System"
  (like postfix) instead of yourself [KC-309]
  * Support for building with a no-SSLv2 OpenSSL 1.1. [KC-230]
  If you run such a setup, be aware that a config setting like
  "ssl_protocol = !SSLv2" in one or more of kopano-{server,gateway,ical}.cfg
  can inhibit the process from starting.
  * Cleanup of the example LDAP configuration files. [KC-229]
  /usr/share/doc/kopano/example-configs/ now has just a ldap.cfg,
  and no more ldap{,ms}.{active-directory,ldap}.cfg.
  * The example LDAP config file now has a different proposed value for
  ldap_object_search_filter for OpenLDAP. [KC-218]
  * spooler: messages with reminder will be sent with a TNEF copy [KC-152]
  * admin: group features will no longer be shown [KC-239]</changelog>
<changelog author="jengelh@inai.de" date="1479902400">- Update to 8.2 snapshot 451
  * == Fixes ==
  * dagent: iCal descriptions caused wrong body parts to be displayed [KC-138]
  * dagent: mr-process failed to copy attachments to the calendar item [KC-202]
  * dagent: restore/rework forced ASCII charset upgrade [KC-294]
  * == Enhancements ==
  * kopano-stats: bind 'q' key to exit as well [KC-105]
  * presence: log authentication errors
  * Improved PHP7 support [*,KC-330]
  * == Changes ==
  * search: log to file (if set) instead of stdout [KC-204]
  * search: treat '_' as a word break [KC-290]
  * swig: resolve crash when python programs end [KC-269]
  * config: change ldap_object_search_filter for WebApp to be able to
  search by mail address [KC-337]
  * gateway/client: avoid resynchronizing RTF body content [KC-338]</changelog>
<changelog author="jengelh@inai.de" date="1481112000">- Update to 8.3 snapshot 223
  * Enhancements:
  * mapi: drop global lock and replace singleton allocmore table by
  per-object vectors [KC-328]
  * swig: expose group and company properties in Python [KC-320]
  * xapian-compact.py: new -c option to specify config file [KC-205]
  * utils: support setting out-of-office without an until-date [KC-275]
  * Fixes:
  * pyko: do not throw backtraces on log messages [KC-340]
  * server: S3 object sizes were shown wrongly [KC-351]
  * inetmapi: do not always generate winmail.dat [KC-348]
  * icalmapi: timezone search was broken [KC-313]
  * The RTF encoder incorrectly produced paragraphs where
  it should have created linefeeds [KC-338]
  * The RTF decoder failed to see that \uXXXX could start a paragraph [KC-338]
  * The RTF decoder erroneously created a new paragraph on \pard [KC-338]
  * server: Ctrl-C now works in gdb [KC-171]
  * inetmapi: avoid an infinite recursion on SMIME handling [KC-366]
  * ics: make creation of new syncids work incrementally [KC-208]
  * libserver: change incorrect compare operator for EID_V0 [KC-365]
  * Of special mention:
  * search: python3 support (but requires new python-xapian and,
  as a result, a db migration or full reindexing)
  * Developer/packager notes:
  * KC variables and functions now live in the KC:: C++ namespace [KC-369]</changelog>
<changelog author="jengelh@inai.de" date="1482235200">- Update to snapshot 8.3.0~334
  * Enhancements:
  * gateway, server: reload SSL certificates on SIGHUP [KC-301]
  * dagent: log_raw_message option can now be used selectively on
    users [KC-370]
  * Fixes:
  * gateway: report missing attachments over IMAP better [KC-436]
  * inetmapi: avoid overzealously generating winmail.dat [KC-348]
  * common: fix spurious crash in sk_SSL_COMP_free on shutdown
    [KC-443]
  * backup: improved logging when ACL does not resolve to
    user/group [KC-431]
  * migration-pst: show usage, not traceback, for invalid options
    [KC-372]
  * inetmapi: avoid buffer overread on rejected recipients
    (showed garbage in logs) [KC-398]
  * Changes:
  * server: compressed attachments now get the same permissions
    as uncompressed ones [KC-380]
  * backup: maintain deleted folders and add --purge N option
    [KC-376]</changelog>
<changelog author="jengelh@inai.de" date="1485691200">- Update to snapshot 8.3.0~667
  * Changes:
  * server: make softdelete_lifetime config setting a reloadable
    property [KC-472]
  * icalmapi: handle missing timezone for RRULE [KC-414]
  * migration-pst: filter metadata at start of subject [KC-424]</changelog>
<changelog author="jengelh@inai.de" date="1485950400">- Update to snapshot 8.3.0~694
  * migration-pst: skip root folder without hard-coded name check
  * client: add extra checks for EID sizes to CompareEntryIDs
  * php-ext: use /usr/share/kopano/php for mapi classes</changelog>
<changelog author="m.kromer@kopano.com" date="1488456000">- Build-fix include of kopano-migration-imap</changelog>
<changelog author="jengelh@inai.de" date="1488974400">- Update to snapshot 8.3.0~1007
  * Enhancements:
  * gateway: optimize LIST, SELECT, STATUS [KC-490]
  * icalmapi: VCF conversion [KC-420]
  * Fixes:
  * migration-pst: skip root folder more intelligently [KC-487]
  * migration-pst: MV properties are handled better [KC-457]
  * client: add extra checks for EID sizes [KC-500]
  * gateway: enforce user and password checking on local socket [KC-396,KC-490]
  * Changes:
  * migration-pst: ignore decode errors [KC-521]
  * common: fix empty text bodies when converting U+0000 from HTML [KC-557]
  * icalmapi: reworked copying description into mail body [KC-568]</changelog>
<changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 8.3
  * Enhancements:
  * migration-pst: call SaveChanges only once [KC-534]
  * Fixes:
  * caldav: avoid a nullptr dereference [KC-236]
  * cachestat: avoid exception and unpack tuple [KC-402]
  * ldapplugin: revert "catch empty ldap_search_base" [KC-602]
  * spooler: fix crash on forwarding rules [KC-608]</changelog>
<changelog author="jengelh@inai.de" date="1499342400">- Update to new bugfix release 8.3.1
  * inetmapi: do not force HTML when use_tnef is set
    to minimal [KC-664]
  * spooler: avoid a use-after-free, and a deadlock after
    this failure [KC-588]
  * server: avoid unchecked return value and unsigned
    underflow [KC-656]
  * php: rework pointer value storing
  * daemons: call initgroups when switching user and
    don't fall over [KC-684,KC-690]
- Update to new bugfix release 8.3.2
  * gateway: fix an IMAP protocol error [KC-668]
    Apple Mail/Alpine did not show mails with long encoded subjects
  * common: restore ability to output crashdump [KC-630]
  * inetmapi: avoid short allocation on group
    expansion [KC-388,KC-727]</changelog>
<changelog author="jengelh@inai.de" date="1502193600">- Update to new bugfix snapshot 8.3.3~22
  * gateway: trim CRLF from PR_EC_IMAP_BODY{,STRUCTURE} and
    make Apple Mail client work again [KC-668, KC-720]
  * server: disallow empty value for embedded_attachment_limit
    and depth counting error [KC-745]
  * common: fix incorrect timeout check in scheduler which had
    disabled softdeletes [KC-638]
  * server: disable reminders from shared stores [KC-758]
  * catch pointer underflows / NULL pointers [KC-694, KC-60,
    KC-177, KC-355, KC-378, KC-379, KC-669, KC-754]
  * libserver: avoid creating multi-stream gzip files
    [KC-104, KC-304, KC-597]</changelog>
<changelog author="jengelh@inai.de" date="1502798400">- Update to new bugfix snapshot 8.3.3~24
  * server: fix disabling of shared reminders [KC-728]</changelog>

</package>
<package pkgid="5da04fdaa3e11a5a8dd1bdfe0f232c44cceb401d28c9bc979b5f99a42d374d4d" name="python-monotonic" arch="noarch">
    <version epoch="0" ver="1.2" rel="5.1"/>

<changelog author="dmueller@suse.com" date="1434974400">- Initial package (0.2)</changelog>
<changelog author="tbechtold@suse.com" date="1440158400">- update to 0.3:
  * Bump version to 0.3
  * Add support for cygwin
  * Set CLOCK_MONOTONIC for Solaris</changelog>
<changelog author="dmueller@suse.com" date="1455537600">- update to 0.6:
  * Changed AttributeError flow control to getattr-with-default-argument
  * Added support for pre-Vista Windows versions using GetTickCount</changelog>
<changelog author="dmueller@suse.com" date="1479211200">- update to 1.2</changelog>

</package>
<package pkgid="1af7556580cf4ffa70323b6fab11076bb911d8ea61488f3b52197bf755b667cd" name="python-monotonic" arch="src">
    <version epoch="0" ver="1.2" rel="5.1"/>

<changelog author="dmueller@suse.com" date="1434974400">- Initial package (0.2)</changelog>
<changelog author="tbechtold@suse.com" date="1440158400">- update to 0.3:
  * Bump version to 0.3
  * Add support for cygwin
  * Set CLOCK_MONOTONIC for Solaris</changelog>
<changelog author="dmueller@suse.com" date="1455537600">- update to 0.6:
  * Changed AttributeError flow control to getattr-with-default-argument
  * Added support for pre-Vista Windows versions using GetTickCount</changelog>
<changelog author="dmueller@suse.com" date="1479211200">- update to 1.2</changelog>

</package>
<package pkgid="cd4739f4612178abab41ad74ebed6a9557b96b19c30eed2f470080380aedf912" name="python-oauth2client" arch="noarch">
    <version epoch="0" ver="3.0.0" rel="7.1"/>

<changelog author="rjschwei@suse.com" date="1448107200">- Initial build
  + Version 1.5.1</changelog>
<changelog author="rjschwei@suse.com" date="1448971200">- Include in SLE 12 (FATE#319904, bsc#954690)</changelog>
<changelog author="rjschwei@suse.com" date="1448971201">- Do not build the -django subpackage on SLE 11
  + The latest version of Django no longer builds on SLE 11, Python
    is too old</changelog>
<changelog author="rjschwei@suse.com" date="1448971202">- Remove -django subpackage requirements for SLE 11</changelog>
<changelog author="rjschwei@suse.com" date="1451736000">- Do not build the -django subpackage on SLE 12 in IBS
  + libwebp in SLE 12 is too old nad has issues on s390x. libwebp is a
    dependency for python-Pillow, which in turn is a dependncy for
    python-Django
  + .changes file changes in OBS only as we have access to fixed libwebp
    for SLE 12</changelog>
<changelog author="tbechtold@suse.com" date="1457697600">- update to 2.0.1:
  * Making scopes optional on Google Compute Engine `AppAssertionCredentials`
    and adding a warning that GCE won't honor scopes (#419)
  * Adding common `sign_blob()` to service account types and a
    `service_account_email` property. (#421)
  * Improving error message in P12 factory
    `ServiceAccountCredentials.from_p12_keyfile` when pyOpenSSL is
    missing. (#424)
  * Allowing default flags in `oauth2client.tools.run_flow()`
    rather than forcing users to create a dummy argparser (#426)
  * Removing `oauth2client.util.dict_to_tuple_key()` from public
    interface (#429)
  * Adding `oauth2client.contrib._appengine_ndb` helper module
    for `oauth2client.contrib.appengine` and moving most code that
    uses the `ndb` library into the helper (#434)
  * Fix error in `django_util` sample code (#438)
  * Fix Google Compute Engine breakage (#411, breakage introduced in #387) that
    made it impossible to obtain access tokens
  * Implement `ServiceAccountCredentials.from_p12_keyfile_buffer()`
    to allow passing a file-like object in addition to the factory
    constructor that uses a filename directly (#413)
  * Implement `ServiceAccountCredentials.create_delegated()`
    to allow upgrading a credential to one that acts on behalf
    of a given subject (#420)
  * Add django_util (#332)
  * Avoid OAuth2Credentials `id_token` going out of sync after a token
    refresh (#337)
  * Move to a `contrib` sub-package code not considered a core part of
    the library (#346, #353, #370, #375, #376, #382)
  * Add `token_expiry` to `devshell` credentials (#372)
  * Move `Storage` locking into a base class (#379)
  * Added dictionary storage (#380)
  * Added `to_json` and `from_json` methods to all `Credentials`
    classes (#385)
  * Fall back to read-only credentials on EACCES errors (#389)
  * Coalesced the two `ServiceAccountCredentials`
    classes (#395, #396, #397, #398, #400)
  * Add access token refresh error class that includes HTTP status (#310)
  * Python3 compatibility fixes for Django (#316, #318)
  * Fix incremental auth in flask_util (#322)
  * Fall back to credential refresh on EDEADLK in multistore_file (#336)
- Remove test package. tests are no longer shipped by upstream.
- Remove hidePythonDeps.patch
- Some imports moved from oauth2client to oauth2client.contrib</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 3.0.0 (bsc#1002895)
  + Add patch oauth2client-init-django-settings.patch (#661)
  + Package tests again, but remain disabled due to Django issue (#661)
  + Populate token_expiry for GCE credentials. (#473)
  + Move GCE metadata interface to a separate module. (#520)
  + Populate scopes for GCE credentials. (#524)
  + Fix Python 3.5 compatibility. (#531)
  + Add oauth2client.contrib.sqlalchemy, a SQLAlchemy-based credential
    store. (#527)
  + Improve error when an invalid client secret is provided. (#530)
  + Add oauth2client.contrib.multiprocess_storage. This supersedes the
    functionality in oauth2client.contrib.multistore_file. (#504)
  + Pull httplib2 usage into a separate transport module. (#559, #561)
  + Refactor all django-related code into oauth2client.contrib.django_util.
    Add DjangoORMStorage, remove FlowField. (#546)
  + Fix application default credentials resolution order. (#570)
  + Add configurable timeout for GCE metadata server check. (#571)
  + Add warnings when using deprecated approval_prompt='force'. (#572)
  + Add deprecation warning to oauth2client.contrib.multistore_file. (#574)
  + (Hygiene) PEP8 compliance and various style fixes (#537, #540, #552, #562)
  + (Hygiene) Remove duplicated exception classes in
    oauth2client.contrib.appengine. (#533)
- From 2.2.0
  + Added support to override token_uri and revoke_uri in
    oauth2client.service_account.ServiceAccountCredentials. (#510)
  + oauth2client.contrib.multistore_file now handles OSError in addition
    to IOError because Windows may raise OSError where other platforms
    will raise IOError.
  + oauth2client.contrib.django_util and oauth2client.contrib.django_orm
    have been updated to support Django 1.8 - 1.10. Versions of Django
    below 1.8 will not work with these modules.
- From 2.1.0
  + Add basic support for JWT access credentials. (#503)
  + Fix oauth2client.client.DeviceFlowInfo to use UTC instead of the
    system timezone when calculating code expiration.
- From 2.0.2
  + Fix issue where flask_util.UserOAuth2.required would accept expired
    credentials (#452).
  + Fix issue where flask_util would fill the session with Flow objects (#498).
  + Fix issue with Python 3 binary strings in Flow.step2_exchange (#446).
  + Improve test coverage to 100%.</changelog>
<changelog author="rjschwei@suse.com" date="1476273600">- Add missing dependency on python-fasteners</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Add o2c_hide-deprecation-warning.patch
- Add o2c_reauth.patch (bsc#1002895)</changelog>
<changelog author="lchiquitto@suse.de" date="1495022400">- Don't build Django support on SLE 12 (fate#321630)</changelog>
<changelog author="astieger@suse.com" date="1502280000">- Do build Django support where suse_version 1315 is openSUSE Leap
  boo#1002895 fate#321630</changelog>

</package>
<package pkgid="5c3f18929c7d2845a464d8fdffe67aaf2b2e62ead95fce22fe4d55e78f4e32c7" name="python-oauth2client" arch="src">
    <version epoch="0" ver="3.0.0" rel="7.1"/>

<changelog author="rjschwei@suse.com" date="1448107200">- Initial build
  + Version 1.5.1</changelog>
<changelog author="rjschwei@suse.com" date="1448971200">- Include in SLE 12 (FATE#319904, bsc#954690)</changelog>
<changelog author="rjschwei@suse.com" date="1448971201">- Do not build the -django subpackage on SLE 11
  + The latest version of Django no longer builds on SLE 11, Python
    is too old</changelog>
<changelog author="rjschwei@suse.com" date="1448971202">- Remove -django subpackage requirements for SLE 11</changelog>
<changelog author="rjschwei@suse.com" date="1451736000">- Do not build the -django subpackage on SLE 12 in IBS
  + libwebp in SLE 12 is too old nad has issues on s390x. libwebp is a
    dependency for python-Pillow, which in turn is a dependncy for
    python-Django
  + .changes file changes in OBS only as we have access to fixed libwebp
    for SLE 12</changelog>
<changelog author="tbechtold@suse.com" date="1457697600">- update to 2.0.1:
  * Making scopes optional on Google Compute Engine `AppAssertionCredentials`
    and adding a warning that GCE won't honor scopes (#419)
  * Adding common `sign_blob()` to service account types and a
    `service_account_email` property. (#421)
  * Improving error message in P12 factory
    `ServiceAccountCredentials.from_p12_keyfile` when pyOpenSSL is
    missing. (#424)
  * Allowing default flags in `oauth2client.tools.run_flow()`
    rather than forcing users to create a dummy argparser (#426)
  * Removing `oauth2client.util.dict_to_tuple_key()` from public
    interface (#429)
  * Adding `oauth2client.contrib._appengine_ndb` helper module
    for `oauth2client.contrib.appengine` and moving most code that
    uses the `ndb` library into the helper (#434)
  * Fix error in `django_util` sample code (#438)
  * Fix Google Compute Engine breakage (#411, breakage introduced in #387) that
    made it impossible to obtain access tokens
  * Implement `ServiceAccountCredentials.from_p12_keyfile_buffer()`
    to allow passing a file-like object in addition to the factory
    constructor that uses a filename directly (#413)
  * Implement `ServiceAccountCredentials.create_delegated()`
    to allow upgrading a credential to one that acts on behalf
    of a given subject (#420)
  * Add django_util (#332)
  * Avoid OAuth2Credentials `id_token` going out of sync after a token
    refresh (#337)
  * Move to a `contrib` sub-package code not considered a core part of
    the library (#346, #353, #370, #375, #376, #382)
  * Add `token_expiry` to `devshell` credentials (#372)
  * Move `Storage` locking into a base class (#379)
  * Added dictionary storage (#380)
  * Added `to_json` and `from_json` methods to all `Credentials`
    classes (#385)
  * Fall back to read-only credentials on EACCES errors (#389)
  * Coalesced the two `ServiceAccountCredentials`
    classes (#395, #396, #397, #398, #400)
  * Add access token refresh error class that includes HTTP status (#310)
  * Python3 compatibility fixes for Django (#316, #318)
  * Fix incremental auth in flask_util (#322)
  * Fall back to credential refresh on EDEADLK in multistore_file (#336)
- Remove test package. tests are no longer shipped by upstream.
- Remove hidePythonDeps.patch
- Some imports moved from oauth2client to oauth2client.contrib</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 3.0.0 (bsc#1002895)
  + Add patch oauth2client-init-django-settings.patch (#661)
  + Package tests again, but remain disabled due to Django issue (#661)
  + Populate token_expiry for GCE credentials. (#473)
  + Move GCE metadata interface to a separate module. (#520)
  + Populate scopes for GCE credentials. (#524)
  + Fix Python 3.5 compatibility. (#531)
  + Add oauth2client.contrib.sqlalchemy, a SQLAlchemy-based credential
    store. (#527)
  + Improve error when an invalid client secret is provided. (#530)
  + Add oauth2client.contrib.multiprocess_storage. This supersedes the
    functionality in oauth2client.contrib.multistore_file. (#504)
  + Pull httplib2 usage into a separate transport module. (#559, #561)
  + Refactor all django-related code into oauth2client.contrib.django_util.
    Add DjangoORMStorage, remove FlowField. (#546)
  + Fix application default credentials resolution order. (#570)
  + Add configurable timeout for GCE metadata server check. (#571)
  + Add warnings when using deprecated approval_prompt='force'. (#572)
  + Add deprecation warning to oauth2client.contrib.multistore_file. (#574)
  + (Hygiene) PEP8 compliance and various style fixes (#537, #540, #552, #562)
  + (Hygiene) Remove duplicated exception classes in
    oauth2client.contrib.appengine. (#533)
- From 2.2.0
  + Added support to override token_uri and revoke_uri in
    oauth2client.service_account.ServiceAccountCredentials. (#510)
  + oauth2client.contrib.multistore_file now handles OSError in addition
    to IOError because Windows may raise OSError where other platforms
    will raise IOError.
  + oauth2client.contrib.django_util and oauth2client.contrib.django_orm
    have been updated to support Django 1.8 - 1.10. Versions of Django
    below 1.8 will not work with these modules.
- From 2.1.0
  + Add basic support for JWT access credentials. (#503)
  + Fix oauth2client.client.DeviceFlowInfo to use UTC instead of the
    system timezone when calculating code expiration.
- From 2.0.2
  + Fix issue where flask_util.UserOAuth2.required would accept expired
    credentials (#452).
  + Fix issue where flask_util would fill the session with Flow objects (#498).
  + Fix issue with Python 3 binary strings in Flow.step2_exchange (#446).
  + Improve test coverage to 100%.</changelog>
<changelog author="rjschwei@suse.com" date="1476273600">- Add missing dependency on python-fasteners</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Add o2c_hide-deprecation-warning.patch
- Add o2c_reauth.patch (bsc#1002895)</changelog>
<changelog author="lchiquitto@suse.de" date="1495022400">- Don't build Django support on SLE 12 (fate#321630)</changelog>
<changelog author="astieger@suse.com" date="1502280000">- Do build Django support where suse_version 1315 is openSUSE Leap
  boo#1002895 fate#321630</changelog>

</package>
<package pkgid="8b547359836eee6531243d9e65f610ed41a4a88acb9c582c4569f590ece52f3f" name="python-oauth2client-django" arch="noarch">
    <version epoch="0" ver="3.0.0" rel="7.1"/>

<changelog author="rjschwei@suse.com" date="1448107200">- Initial build
  + Version 1.5.1</changelog>
<changelog author="rjschwei@suse.com" date="1448971200">- Include in SLE 12 (FATE#319904, bsc#954690)</changelog>
<changelog author="rjschwei@suse.com" date="1448971201">- Do not build the -django subpackage on SLE 11
  + The latest version of Django no longer builds on SLE 11, Python
    is too old</changelog>
<changelog author="rjschwei@suse.com" date="1448971202">- Remove -django subpackage requirements for SLE 11</changelog>
<changelog author="rjschwei@suse.com" date="1451736000">- Do not build the -django subpackage on SLE 12 in IBS
  + libwebp in SLE 12 is too old nad has issues on s390x. libwebp is a
    dependency for python-Pillow, which in turn is a dependncy for
    python-Django
  + .changes file changes in OBS only as we have access to fixed libwebp
    for SLE 12</changelog>
<changelog author="tbechtold@suse.com" date="1457697600">- update to 2.0.1:
  * Making scopes optional on Google Compute Engine `AppAssertionCredentials`
    and adding a warning that GCE won't honor scopes (#419)
  * Adding common `sign_blob()` to service account types and a
    `service_account_email` property. (#421)
  * Improving error message in P12 factory
    `ServiceAccountCredentials.from_p12_keyfile` when pyOpenSSL is
    missing. (#424)
  * Allowing default flags in `oauth2client.tools.run_flow()`
    rather than forcing users to create a dummy argparser (#426)
  * Removing `oauth2client.util.dict_to_tuple_key()` from public
    interface (#429)
  * Adding `oauth2client.contrib._appengine_ndb` helper module
    for `oauth2client.contrib.appengine` and moving most code that
    uses the `ndb` library into the helper (#434)
  * Fix error in `django_util` sample code (#438)
  * Fix Google Compute Engine breakage (#411, breakage introduced in #387) that
    made it impossible to obtain access tokens
  * Implement `ServiceAccountCredentials.from_p12_keyfile_buffer()`
    to allow passing a file-like object in addition to the factory
    constructor that uses a filename directly (#413)
  * Implement `ServiceAccountCredentials.create_delegated()`
    to allow upgrading a credential to one that acts on behalf
    of a given subject (#420)
  * Add django_util (#332)
  * Avoid OAuth2Credentials `id_token` going out of sync after a token
    refresh (#337)
  * Move to a `contrib` sub-package code not considered a core part of
    the library (#346, #353, #370, #375, #376, #382)
  * Add `token_expiry` to `devshell` credentials (#372)
  * Move `Storage` locking into a base class (#379)
  * Added dictionary storage (#380)
  * Added `to_json` and `from_json` methods to all `Credentials`
    classes (#385)
  * Fall back to read-only credentials on EACCES errors (#389)
  * Coalesced the two `ServiceAccountCredentials`
    classes (#395, #396, #397, #398, #400)
  * Add access token refresh error class that includes HTTP status (#310)
  * Python3 compatibility fixes for Django (#316, #318)
  * Fix incremental auth in flask_util (#322)
  * Fall back to credential refresh on EDEADLK in multistore_file (#336)
- Remove test package. tests are no longer shipped by upstream.
- Remove hidePythonDeps.patch
- Some imports moved from oauth2client to oauth2client.contrib</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 3.0.0 (bsc#1002895)
  + Add patch oauth2client-init-django-settings.patch (#661)
  + Package tests again, but remain disabled due to Django issue (#661)
  + Populate token_expiry for GCE credentials. (#473)
  + Move GCE metadata interface to a separate module. (#520)
  + Populate scopes for GCE credentials. (#524)
  + Fix Python 3.5 compatibility. (#531)
  + Add oauth2client.contrib.sqlalchemy, a SQLAlchemy-based credential
    store. (#527)
  + Improve error when an invalid client secret is provided. (#530)
  + Add oauth2client.contrib.multiprocess_storage. This supersedes the
    functionality in oauth2client.contrib.multistore_file. (#504)
  + Pull httplib2 usage into a separate transport module. (#559, #561)
  + Refactor all django-related code into oauth2client.contrib.django_util.
    Add DjangoORMStorage, remove FlowField. (#546)
  + Fix application default credentials resolution order. (#570)
  + Add configurable timeout for GCE metadata server check. (#571)
  + Add warnings when using deprecated approval_prompt='force'. (#572)
  + Add deprecation warning to oauth2client.contrib.multistore_file. (#574)
  + (Hygiene) PEP8 compliance and various style fixes (#537, #540, #552, #562)
  + (Hygiene) Remove duplicated exception classes in
    oauth2client.contrib.appengine. (#533)
- From 2.2.0
  + Added support to override token_uri and revoke_uri in
    oauth2client.service_account.ServiceAccountCredentials. (#510)
  + oauth2client.contrib.multistore_file now handles OSError in addition
    to IOError because Windows may raise OSError where other platforms
    will raise IOError.
  + oauth2client.contrib.django_util and oauth2client.contrib.django_orm
    have been updated to support Django 1.8 - 1.10. Versions of Django
    below 1.8 will not work with these modules.
- From 2.1.0
  + Add basic support for JWT access credentials. (#503)
  + Fix oauth2client.client.DeviceFlowInfo to use UTC instead of the
    system timezone when calculating code expiration.
- From 2.0.2
  + Fix issue where flask_util.UserOAuth2.required would accept expired
    credentials (#452).
  + Fix issue where flask_util would fill the session with Flow objects (#498).
  + Fix issue with Python 3 binary strings in Flow.step2_exchange (#446).
  + Improve test coverage to 100%.</changelog>
<changelog author="rjschwei@suse.com" date="1476273600">- Add missing dependency on python-fasteners</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Add o2c_hide-deprecation-warning.patch
- Add o2c_reauth.patch (bsc#1002895)</changelog>
<changelog author="lchiquitto@suse.de" date="1495022400">- Don't build Django support on SLE 12 (fate#321630)</changelog>
<changelog author="astieger@suse.com" date="1502280000">- Do build Django support where suse_version 1315 is openSUSE Leap
  boo#1002895 fate#321630</changelog>

</package>
<package pkgid="23c59fda8c57aab5c3a34013f3ddbdf67914d5c377a07cbc1e7cdc04dc6d925e" name="python-oauth2client-flask" arch="noarch">
    <version epoch="0" ver="3.0.0" rel="7.1"/>

<changelog author="rjschwei@suse.com" date="1448107200">- Initial build
  + Version 1.5.1</changelog>
<changelog author="rjschwei@suse.com" date="1448971200">- Include in SLE 12 (FATE#319904, bsc#954690)</changelog>
<changelog author="rjschwei@suse.com" date="1448971201">- Do not build the -django subpackage on SLE 11
  + The latest version of Django no longer builds on SLE 11, Python
    is too old</changelog>
<changelog author="rjschwei@suse.com" date="1448971202">- Remove -django subpackage requirements for SLE 11</changelog>
<changelog author="rjschwei@suse.com" date="1451736000">- Do not build the -django subpackage on SLE 12 in IBS
  + libwebp in SLE 12 is too old nad has issues on s390x. libwebp is a
    dependency for python-Pillow, which in turn is a dependncy for
    python-Django
  + .changes file changes in OBS only as we have access to fixed libwebp
    for SLE 12</changelog>
<changelog author="tbechtold@suse.com" date="1457697600">- update to 2.0.1:
  * Making scopes optional on Google Compute Engine `AppAssertionCredentials`
    and adding a warning that GCE won't honor scopes (#419)
  * Adding common `sign_blob()` to service account types and a
    `service_account_email` property. (#421)
  * Improving error message in P12 factory
    `ServiceAccountCredentials.from_p12_keyfile` when pyOpenSSL is
    missing. (#424)
  * Allowing default flags in `oauth2client.tools.run_flow()`
    rather than forcing users to create a dummy argparser (#426)
  * Removing `oauth2client.util.dict_to_tuple_key()` from public
    interface (#429)
  * Adding `oauth2client.contrib._appengine_ndb` helper module
    for `oauth2client.contrib.appengine` and moving most code that
    uses the `ndb` library into the helper (#434)
  * Fix error in `django_util` sample code (#438)
  * Fix Google Compute Engine breakage (#411, breakage introduced in #387) that
    made it impossible to obtain access tokens
  * Implement `ServiceAccountCredentials.from_p12_keyfile_buffer()`
    to allow passing a file-like object in addition to the factory
    constructor that uses a filename directly (#413)
  * Implement `ServiceAccountCredentials.create_delegated()`
    to allow upgrading a credential to one that acts on behalf
    of a given subject (#420)
  * Add django_util (#332)
  * Avoid OAuth2Credentials `id_token` going out of sync after a token
    refresh (#337)
  * Move to a `contrib` sub-package code not considered a core part of
    the library (#346, #353, #370, #375, #376, #382)
  * Add `token_expiry` to `devshell` credentials (#372)
  * Move `Storage` locking into a base class (#379)
  * Added dictionary storage (#380)
  * Added `to_json` and `from_json` methods to all `Credentials`
    classes (#385)
  * Fall back to read-only credentials on EACCES errors (#389)
  * Coalesced the two `ServiceAccountCredentials`
    classes (#395, #396, #397, #398, #400)
  * Add access token refresh error class that includes HTTP status (#310)
  * Python3 compatibility fixes for Django (#316, #318)
  * Fix incremental auth in flask_util (#322)
  * Fall back to credential refresh on EDEADLK in multistore_file (#336)
- Remove test package. tests are no longer shipped by upstream.
- Remove hidePythonDeps.patch
- Some imports moved from oauth2client to oauth2client.contrib</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 3.0.0 (bsc#1002895)
  + Add patch oauth2client-init-django-settings.patch (#661)
  + Package tests again, but remain disabled due to Django issue (#661)
  + Populate token_expiry for GCE credentials. (#473)
  + Move GCE metadata interface to a separate module. (#520)
  + Populate scopes for GCE credentials. (#524)
  + Fix Python 3.5 compatibility. (#531)
  + Add oauth2client.contrib.sqlalchemy, a SQLAlchemy-based credential
    store. (#527)
  + Improve error when an invalid client secret is provided. (#530)
  + Add oauth2client.contrib.multiprocess_storage. This supersedes the
    functionality in oauth2client.contrib.multistore_file. (#504)
  + Pull httplib2 usage into a separate transport module. (#559, #561)
  + Refactor all django-related code into oauth2client.contrib.django_util.
    Add DjangoORMStorage, remove FlowField. (#546)
  + Fix application default credentials resolution order. (#570)
  + Add configurable timeout for GCE metadata server check. (#571)
  + Add warnings when using deprecated approval_prompt='force'. (#572)
  + Add deprecation warning to oauth2client.contrib.multistore_file. (#574)
  + (Hygiene) PEP8 compliance and various style fixes (#537, #540, #552, #562)
  + (Hygiene) Remove duplicated exception classes in
    oauth2client.contrib.appengine. (#533)
- From 2.2.0
  + Added support to override token_uri and revoke_uri in
    oauth2client.service_account.ServiceAccountCredentials. (#510)
  + oauth2client.contrib.multistore_file now handles OSError in addition
    to IOError because Windows may raise OSError where other platforms
    will raise IOError.
  + oauth2client.contrib.django_util and oauth2client.contrib.django_orm
    have been updated to support Django 1.8 - 1.10. Versions of Django
    below 1.8 will not work with these modules.
- From 2.1.0
  + Add basic support for JWT access credentials. (#503)
  + Fix oauth2client.client.DeviceFlowInfo to use UTC instead of the
    system timezone when calculating code expiration.
- From 2.0.2
  + Fix issue where flask_util.UserOAuth2.required would accept expired
    credentials (#452).
  + Fix issue where flask_util would fill the session with Flow objects (#498).
  + Fix issue with Python 3 binary strings in Flow.step2_exchange (#446).
  + Improve test coverage to 100%.</changelog>
<changelog author="rjschwei@suse.com" date="1476273600">- Add missing dependency on python-fasteners</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Add o2c_hide-deprecation-warning.patch
- Add o2c_reauth.patch (bsc#1002895)</changelog>
<changelog author="lchiquitto@suse.de" date="1495022400">- Don't build Django support on SLE 12 (fate#321630)</changelog>
<changelog author="astieger@suse.com" date="1502280000">- Do build Django support where suse_version 1315 is openSUSE Leap
  boo#1002895 fate#321630</changelog>

</package>
<package pkgid="aa4731b711efad39db063429e8850c2c3beb7eb9276ddd4ebe92650ecf010f55" name="python-oauth2client-gce" arch="noarch">
    <version epoch="0" ver="3.0.0" rel="7.1"/>

<changelog author="rjschwei@suse.com" date="1448107200">- Initial build
  + Version 1.5.1</changelog>
<changelog author="rjschwei@suse.com" date="1448971200">- Include in SLE 12 (FATE#319904, bsc#954690)</changelog>
<changelog author="rjschwei@suse.com" date="1448971201">- Do not build the -django subpackage on SLE 11
  + The latest version of Django no longer builds on SLE 11, Python
    is too old</changelog>
<changelog author="rjschwei@suse.com" date="1448971202">- Remove -django subpackage requirements for SLE 11</changelog>
<changelog author="rjschwei@suse.com" date="1451736000">- Do not build the -django subpackage on SLE 12 in IBS
  + libwebp in SLE 12 is too old nad has issues on s390x. libwebp is a
    dependency for python-Pillow, which in turn is a dependncy for
    python-Django
  + .changes file changes in OBS only as we have access to fixed libwebp
    for SLE 12</changelog>
<changelog author="tbechtold@suse.com" date="1457697600">- update to 2.0.1:
  * Making scopes optional on Google Compute Engine `AppAssertionCredentials`
    and adding a warning that GCE won't honor scopes (#419)
  * Adding common `sign_blob()` to service account types and a
    `service_account_email` property. (#421)
  * Improving error message in P12 factory
    `ServiceAccountCredentials.from_p12_keyfile` when pyOpenSSL is
    missing. (#424)
  * Allowing default flags in `oauth2client.tools.run_flow()`
    rather than forcing users to create a dummy argparser (#426)
  * Removing `oauth2client.util.dict_to_tuple_key()` from public
    interface (#429)
  * Adding `oauth2client.contrib._appengine_ndb` helper module
    for `oauth2client.contrib.appengine` and moving most code that
    uses the `ndb` library into the helper (#434)
  * Fix error in `django_util` sample code (#438)
  * Fix Google Compute Engine breakage (#411, breakage introduced in #387) that
    made it impossible to obtain access tokens
  * Implement `ServiceAccountCredentials.from_p12_keyfile_buffer()`
    to allow passing a file-like object in addition to the factory
    constructor that uses a filename directly (#413)
  * Implement `ServiceAccountCredentials.create_delegated()`
    to allow upgrading a credential to one that acts on behalf
    of a given subject (#420)
  * Add django_util (#332)
  * Avoid OAuth2Credentials `id_token` going out of sync after a token
    refresh (#337)
  * Move to a `contrib` sub-package code not considered a core part of
    the library (#346, #353, #370, #375, #376, #382)
  * Add `token_expiry` to `devshell` credentials (#372)
  * Move `Storage` locking into a base class (#379)
  * Added dictionary storage (#380)
  * Added `to_json` and `from_json` methods to all `Credentials`
    classes (#385)
  * Fall back to read-only credentials on EACCES errors (#389)
  * Coalesced the two `ServiceAccountCredentials`
    classes (#395, #396, #397, #398, #400)
  * Add access token refresh error class that includes HTTP status (#310)
  * Python3 compatibility fixes for Django (#316, #318)
  * Fix incremental auth in flask_util (#322)
  * Fall back to credential refresh on EDEADLK in multistore_file (#336)
- Remove test package. tests are no longer shipped by upstream.
- Remove hidePythonDeps.patch
- Some imports moved from oauth2client to oauth2client.contrib</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 3.0.0 (bsc#1002895)
  + Add patch oauth2client-init-django-settings.patch (#661)
  + Package tests again, but remain disabled due to Django issue (#661)
  + Populate token_expiry for GCE credentials. (#473)
  + Move GCE metadata interface to a separate module. (#520)
  + Populate scopes for GCE credentials. (#524)
  + Fix Python 3.5 compatibility. (#531)
  + Add oauth2client.contrib.sqlalchemy, a SQLAlchemy-based credential
    store. (#527)
  + Improve error when an invalid client secret is provided. (#530)
  + Add oauth2client.contrib.multiprocess_storage. This supersedes the
    functionality in oauth2client.contrib.multistore_file. (#504)
  + Pull httplib2 usage into a separate transport module. (#559, #561)
  + Refactor all django-related code into oauth2client.contrib.django_util.
    Add DjangoORMStorage, remove FlowField. (#546)
  + Fix application default credentials resolution order. (#570)
  + Add configurable timeout for GCE metadata server check. (#571)
  + Add warnings when using deprecated approval_prompt='force'. (#572)
  + Add deprecation warning to oauth2client.contrib.multistore_file. (#574)
  + (Hygiene) PEP8 compliance and various style fixes (#537, #540, #552, #562)
  + (Hygiene) Remove duplicated exception classes in
    oauth2client.contrib.appengine. (#533)
- From 2.2.0
  + Added support to override token_uri and revoke_uri in
    oauth2client.service_account.ServiceAccountCredentials. (#510)
  + oauth2client.contrib.multistore_file now handles OSError in addition
    to IOError because Windows may raise OSError where other platforms
    will raise IOError.
  + oauth2client.contrib.django_util and oauth2client.contrib.django_orm
    have been updated to support Django 1.8 - 1.10. Versions of Django
    below 1.8 will not work with these modules.
- From 2.1.0
  + Add basic support for JWT access credentials. (#503)
  + Fix oauth2client.client.DeviceFlowInfo to use UTC instead of the
    system timezone when calculating code expiration.
- From 2.0.2
  + Fix issue where flask_util.UserOAuth2.required would accept expired
    credentials (#452).
  + Fix issue where flask_util would fill the session with Flow objects (#498).
  + Fix issue with Python 3 binary strings in Flow.step2_exchange (#446).
  + Improve test coverage to 100%.</changelog>
<changelog author="rjschwei@suse.com" date="1476273600">- Add missing dependency on python-fasteners</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Add o2c_hide-deprecation-warning.patch
- Add o2c_reauth.patch (bsc#1002895)</changelog>
<changelog author="lchiquitto@suse.de" date="1495022400">- Don't build Django support on SLE 12 (fate#321630)</changelog>
<changelog author="astieger@suse.com" date="1502280000">- Do build Django support where suse_version 1315 is openSUSE Leap
  boo#1002895 fate#321630</changelog>

</package>
<package pkgid="e4588de5874b6331586d36230fffee81d52a23a948fc79dd7a829ddbb7b66e6b" name="python-oauth2client-test" arch="noarch">
    <version epoch="0" ver="3.0.0" rel="7.1"/>

<changelog author="rjschwei@suse.com" date="1448107200">- Initial build
  + Version 1.5.1</changelog>
<changelog author="rjschwei@suse.com" date="1448971200">- Include in SLE 12 (FATE#319904, bsc#954690)</changelog>
<changelog author="rjschwei@suse.com" date="1448971201">- Do not build the -django subpackage on SLE 11
  + The latest version of Django no longer builds on SLE 11, Python
    is too old</changelog>
<changelog author="rjschwei@suse.com" date="1448971202">- Remove -django subpackage requirements for SLE 11</changelog>
<changelog author="rjschwei@suse.com" date="1451736000">- Do not build the -django subpackage on SLE 12 in IBS
  + libwebp in SLE 12 is too old nad has issues on s390x. libwebp is a
    dependency for python-Pillow, which in turn is a dependncy for
    python-Django
  + .changes file changes in OBS only as we have access to fixed libwebp
    for SLE 12</changelog>
<changelog author="tbechtold@suse.com" date="1457697600">- update to 2.0.1:
  * Making scopes optional on Google Compute Engine `AppAssertionCredentials`
    and adding a warning that GCE won't honor scopes (#419)
  * Adding common `sign_blob()` to service account types and a
    `service_account_email` property. (#421)
  * Improving error message in P12 factory
    `ServiceAccountCredentials.from_p12_keyfile` when pyOpenSSL is
    missing. (#424)
  * Allowing default flags in `oauth2client.tools.run_flow()`
    rather than forcing users to create a dummy argparser (#426)
  * Removing `oauth2client.util.dict_to_tuple_key()` from public
    interface (#429)
  * Adding `oauth2client.contrib._appengine_ndb` helper module
    for `oauth2client.contrib.appengine` and moving most code that
    uses the `ndb` library into the helper (#434)
  * Fix error in `django_util` sample code (#438)
  * Fix Google Compute Engine breakage (#411, breakage introduced in #387) that
    made it impossible to obtain access tokens
  * Implement `ServiceAccountCredentials.from_p12_keyfile_buffer()`
    to allow passing a file-like object in addition to the factory
    constructor that uses a filename directly (#413)
  * Implement `ServiceAccountCredentials.create_delegated()`
    to allow upgrading a credential to one that acts on behalf
    of a given subject (#420)
  * Add django_util (#332)
  * Avoid OAuth2Credentials `id_token` going out of sync after a token
    refresh (#337)
  * Move to a `contrib` sub-package code not considered a core part of
    the library (#346, #353, #370, #375, #376, #382)
  * Add `token_expiry` to `devshell` credentials (#372)
  * Move `Storage` locking into a base class (#379)
  * Added dictionary storage (#380)
  * Added `to_json` and `from_json` methods to all `Credentials`
    classes (#385)
  * Fall back to read-only credentials on EACCES errors (#389)
  * Coalesced the two `ServiceAccountCredentials`
    classes (#395, #396, #397, #398, #400)
  * Add access token refresh error class that includes HTTP status (#310)
  * Python3 compatibility fixes for Django (#316, #318)
  * Fix incremental auth in flask_util (#322)
  * Fall back to credential refresh on EDEADLK in multistore_file (#336)
- Remove test package. tests are no longer shipped by upstream.
- Remove hidePythonDeps.patch
- Some imports moved from oauth2client to oauth2client.contrib</changelog>
<changelog author="rjschwei@suse.com" date="1475668800">- Update to version 3.0.0 (bsc#1002895)
  + Add patch oauth2client-init-django-settings.patch (#661)
  + Package tests again, but remain disabled due to Django issue (#661)
  + Populate token_expiry for GCE credentials. (#473)
  + Move GCE metadata interface to a separate module. (#520)
  + Populate scopes for GCE credentials. (#524)
  + Fix Python 3.5 compatibility. (#531)
  + Add oauth2client.contrib.sqlalchemy, a SQLAlchemy-based credential
    store. (#527)
  + Improve error when an invalid client secret is provided. (#530)
  + Add oauth2client.contrib.multiprocess_storage. This supersedes the
    functionality in oauth2client.contrib.multistore_file. (#504)
  + Pull httplib2 usage into a separate transport module. (#559, #561)
  + Refactor all django-related code into oauth2client.contrib.django_util.
    Add DjangoORMStorage, remove FlowField. (#546)
  + Fix application default credentials resolution order. (#570)
  + Add configurable timeout for GCE metadata server check. (#571)
  + Add warnings when using deprecated approval_prompt='force'. (#572)
  + Add deprecation warning to oauth2client.contrib.multistore_file. (#574)
  + (Hygiene) PEP8 compliance and various style fixes (#537, #540, #552, #562)
  + (Hygiene) Remove duplicated exception classes in
    oauth2client.contrib.appengine. (#533)
- From 2.2.0
  + Added support to override token_uri and revoke_uri in
    oauth2client.service_account.ServiceAccountCredentials. (#510)
  + oauth2client.contrib.multistore_file now handles OSError in addition
    to IOError because Windows may raise OSError where other platforms
    will raise IOError.
  + oauth2client.contrib.django_util and oauth2client.contrib.django_orm
    have been updated to support Django 1.8 - 1.10. Versions of Django
    below 1.8 will not work with these modules.
- From 2.1.0
  + Add basic support for JWT access credentials. (#503)
  + Fix oauth2client.client.DeviceFlowInfo to use UTC instead of the
    system timezone when calculating code expiration.
- From 2.0.2
  + Fix issue where flask_util.UserOAuth2.required would accept expired
    credentials (#452).
  + Fix issue where flask_util would fill the session with Flow objects (#498).
  + Fix issue with Python 3 binary strings in Flow.step2_exchange (#446).
  + Improve test coverage to 100%.</changelog>
<changelog author="rjschwei@suse.com" date="1476273600">- Add missing dependency on python-fasteners</changelog>
<changelog author="rjschwei@suse.com" date="1485777600">- Add o2c_hide-deprecation-warning.patch
- Add o2c_reauth.patch (bsc#1002895)</changelog>
<changelog author="lchiquitto@suse.de" date="1495022400">- Don't build Django support on SLE 12 (fate#321630)</changelog>
<changelog author="astieger@suse.com" date="1502280000">- Do build Django support where suse_version 1315 is openSUSE Leap
  boo#1002895 fate#321630</changelog>

</package>
<package pkgid="1b397b6146cb910fae28d47640700727ec4e46a8820359fa3a529b22d6e64503" name="python-openqa_review" arch="noarch">
    <version epoch="0" ver="1.7.5" rel="3.1"/>

<changelog author="opensuse-packaging@opensuse.org" date="1476792000">- Update to version 1.3.2:
  * Fix crash on new-style 'empty builds'</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1484913600">- Update to version 1.4.0:
  * Add tumblesle example scripts
  * Use index.json to get job groups (#36)
  * Prepare for wellformed json (#38)
  * Fix #41: Handle broken bugrefs gracefully (#42)
  * Fix for parent groups: Use API to get job_groups (#43)
  * Use JSON version of group_overview (#44)
  * TODO: Add entry about configparser travis error
  * Ensure configparser is available for py2+3
  * Fix py27 errors only observable on travis
  * Handle job groups with builds not having any 'done' jobs at all
  * Try to get distri/version for each build (#47)
  * Ensure proper URL concatenation on py2 for bug details retrieval
  * Show parent group in report (#48)
  * Add tumblesle helper script for 12sp3
  * Add update_jekyll for tumblesle release
  * Use blank build value without version prefix (#51)
  * Comment on old bugs with new failed test url (#50)
  * Fix flake8 reported issues after 48fb659
  * Fix parsing of job groups after openQA#9b50b22
  * Run all envs on travis
  * Add command line option for '--min-days-unchanged' for reminder comments</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1484913601">- Update to version 1.4.1:
  * Ignore builds which have an actual empty build value</changelog>
<changelog author="okurz@suse.com" date="1485432000">- Correct missing package content for update to 1.4.1</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1486382400">- Update to version 1.5.0:
  * Post issue reminder comments from daily review script
  * tumblesle_release: Add AMQP notification support for 'suse_msg'
  * tumblesle_release: Add documentation for AMQP notifications
  * tumblesle_release: Prevent spammy repetition of AMQP notifications
  * Get rid of duplicate update_jekyll
  * More tumblesle notifications
  * Fix tumblesle script not checking for new builds / updated job results
  * Make tumblesle_release notification connection more resilient
  * tumblesle_release: Only store in notify_seen on success
  * Recommend safer installation proposals
  * Ensure valid python certificates with certifi
  * Be more specific about the error when file not found in cache
  * Ensure all data is cached on save in openqa_review_osd_daily_email</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1487073600">- Update to version 1.5.1:
  * Fix openqa_review_osd_daily_email running in dry-run by default</changelog>
<changelog author="okurz@suse.com" date="1488542400">- Fix import error on backports.configparser by workaround (boo#1025589)</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1488542401">- Update to version 1.5.2:
  * tumblesle_release: Add optional AMQP authentication
  * Add CII badge after review
  * Replace obsolete gitlab with github reference
  * Fix version file parsing when there is no git tag
  * tumblesle-release: Retry on AMQP connection lost</changelog>
<changelog author="okurz@suse.com" date="1488974400">- Update to version 1.6.1:
  * Add option to exclude job groups by regex
  * Fix flake8 checks in tumblesle_release
  * Ignore obsolete released and development job groups in dashboard report</changelog>
<changelog author="okurz@suse.com" date="1488974401">- Update to version 1.6.2:
  * dashboard: Correct exclude regex syntax after live test</changelog>
<changelog author="okurz@suse.com" date="1489579200">- Include new binary 'openqa-review-daily-email'</changelog>
<changelog author="okurz@suse.com" date="1489579201">- Update to version 1.6.4:
  * Remove unused webtests (#58)
  * dashboard: Prevent duplicate reminder comments
  * Extend review-daily-email for use with opensuse.org
  * Install 'openqa-review-daily-email' script</changelog>
<changelog author="okurz@suse.com" date="1497441600">- Update to version 1.6.6:
  * Add CLOSED to issue states for non-open tickets (#61)
  * Fix broken HTML
  * Fix doc-strings issue D401, not imperative mood
  * Retry download in case of 502</changelog>
<changelog author="okurz@suse.com" date="1500206400">- Update to version 1.6.8:
  * .gitignore: Also exclude pycharm
  * Extract reading reference report in test for simpler ref report updating
  * Fix 'interesting_states' not really filtering out STABLE results
  * Use lowercase 'todo' dict key for easier distinction from TODO in source code comments
  * Tiny duplication removal in tox.ini
  * Fix potential wrong import of not-backported configparser within py27 tests
  * Delete again configparser2 reference which is another module
  * Simplify handling of results/results_by_bugref dicts
  * Delete obsolete test data entry for soft-failed with failed modules
  * Use newer python3.6 as in openSUSE Tumbleweed for testing
  * Also include 'IMPROVED' in soft fail states
  * Simplify 'soft-fail' calculation within IssueEntry
  * Delete some redundant soft-fails for easier testing</changelog>
<changelog author="okurz@suse.com" date="1500638400">- Update to version 1.7.0:
  * Skip error on writing reminder comments gracefully
  * Get bugref details for softfails as well
  * Split big 'bugrefs' test into more subtests
  * Remove not used variables (#70)</changelog>
<changelog author="okurz@suse.com" date="1500811200">- Update to version 1.7.1:
  * Also parse soft-fail needles</changelog>
<changelog author="okurz@suse.com" date="1500897600">- Update to version 1.7.2:
  * Extend soft-fail issue tracker support</changelog>
<changelog author="okurz@suse.com" date="1503748800">- Update to version 1.7.4:
  * Fix error 401 on redmine after server side ngingx update
  * Ignore cscope.out
  * Fix whitespace as reported by flake8
  * Fix handling of dotted build numbers parsing from comments</changelog>
<changelog author="okurz@suse.com" date="1505908800">- Update to version 1.7.5:
  * Add preliminary tumblesle release script for SLE 15
  * Support multi-distri job groups with openQA#037ffd33</changelog>
<changelog author="okurz@suse.com" date="1505995200">- Update version to support more recent openQA web structure (boo#1059661)</changelog>

</package>
<package pkgid="0c20f18af1d1dbc81de9ae5c3cdfae322f58577f7787dc31e1ebadec551bfdb1" name="python-openqa_review" arch="src">
    <version epoch="0" ver="1.7.5" rel="3.1"/>

<changelog author="opensuse-packaging@opensuse.org" date="1476792000">- Update to version 1.3.2:
  * Fix crash on new-style 'empty builds'</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1484913600">- Update to version 1.4.0:
  * Add tumblesle example scripts
  * Use index.json to get job groups (#36)
  * Prepare for wellformed json (#38)
  * Fix #41: Handle broken bugrefs gracefully (#42)
  * Fix for parent groups: Use API to get job_groups (#43)
  * Use JSON version of group_overview (#44)
  * TODO: Add entry about configparser travis error
  * Ensure configparser is available for py2+3
  * Fix py27 errors only observable on travis
  * Handle job groups with builds not having any 'done' jobs at all
  * Try to get distri/version for each build (#47)
  * Ensure proper URL concatenation on py2 for bug details retrieval
  * Show parent group in report (#48)
  * Add tumblesle helper script for 12sp3
  * Add update_jekyll for tumblesle release
  * Use blank build value without version prefix (#51)
  * Comment on old bugs with new failed test url (#50)
  * Fix flake8 reported issues after 48fb659
  * Fix parsing of job groups after openQA#9b50b22
  * Run all envs on travis
  * Add command line option for '--min-days-unchanged' for reminder comments</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1484913601">- Update to version 1.4.1:
  * Ignore builds which have an actual empty build value</changelog>
<changelog author="okurz@suse.com" date="1485432000">- Correct missing package content for update to 1.4.1</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1486382400">- Update to version 1.5.0:
  * Post issue reminder comments from daily review script
  * tumblesle_release: Add AMQP notification support for 'suse_msg'
  * tumblesle_release: Add documentation for AMQP notifications
  * tumblesle_release: Prevent spammy repetition of AMQP notifications
  * Get rid of duplicate update_jekyll
  * More tumblesle notifications
  * Fix tumblesle script not checking for new builds / updated job results
  * Make tumblesle_release notification connection more resilient
  * tumblesle_release: Only store in notify_seen on success
  * Recommend safer installation proposals
  * Ensure valid python certificates with certifi
  * Be more specific about the error when file not found in cache
  * Ensure all data is cached on save in openqa_review_osd_daily_email</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1487073600">- Update to version 1.5.1:
  * Fix openqa_review_osd_daily_email running in dry-run by default</changelog>
<changelog author="okurz@suse.com" date="1488542400">- Fix import error on backports.configparser by workaround (boo#1025589)</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1488542401">- Update to version 1.5.2:
  * tumblesle_release: Add optional AMQP authentication
  * Add CII badge after review
  * Replace obsolete gitlab with github reference
  * Fix version file parsing when there is no git tag
  * tumblesle-release: Retry on AMQP connection lost</changelog>
<changelog author="okurz@suse.com" date="1488974400">- Update to version 1.6.1:
  * Add option to exclude job groups by regex
  * Fix flake8 checks in tumblesle_release
  * Ignore obsolete released and development job groups in dashboard report</changelog>
<changelog author="okurz@suse.com" date="1488974401">- Update to version 1.6.2:
  * dashboard: Correct exclude regex syntax after live test</changelog>
<changelog author="okurz@suse.com" date="1489579200">- Include new binary 'openqa-review-daily-email'</changelog>
<changelog author="okurz@suse.com" date="1489579201">- Update to version 1.6.4:
  * Remove unused webtests (#58)
  * dashboard: Prevent duplicate reminder comments
  * Extend review-daily-email for use with opensuse.org
  * Install 'openqa-review-daily-email' script</changelog>
<changelog author="okurz@suse.com" date="1497441600">- Update to version 1.6.6:
  * Add CLOSED to issue states for non-open tickets (#61)
  * Fix broken HTML
  * Fix doc-strings issue D401, not imperative mood
  * Retry download in case of 502</changelog>
<changelog author="okurz@suse.com" date="1500206400">- Update to version 1.6.8:
  * .gitignore: Also exclude pycharm
  * Extract reading reference report in test for simpler ref report updating
  * Fix 'interesting_states' not really filtering out STABLE results
  * Use lowercase 'todo' dict key for easier distinction from TODO in source code comments
  * Tiny duplication removal in tox.ini
  * Fix potential wrong import of not-backported configparser within py27 tests
  * Delete again configparser2 reference which is another module
  * Simplify handling of results/results_by_bugref dicts
  * Delete obsolete test data entry for soft-failed with failed modules
  * Use newer python3.6 as in openSUSE Tumbleweed for testing
  * Also include 'IMPROVED' in soft fail states
  * Simplify 'soft-fail' calculation within IssueEntry
  * Delete some redundant soft-fails for easier testing</changelog>
<changelog author="okurz@suse.com" date="1500638400">- Update to version 1.7.0:
  * Skip error on writing reminder comments gracefully
  * Get bugref details for softfails as well
  * Split big 'bugrefs' test into more subtests
  * Remove not used variables (#70)</changelog>
<changelog author="okurz@suse.com" date="1500811200">- Update to version 1.7.1:
  * Also parse soft-fail needles</changelog>
<changelog author="okurz@suse.com" date="1500897600">- Update to version 1.7.2:
  * Extend soft-fail issue tracker support</changelog>
<changelog author="okurz@suse.com" date="1503748800">- Update to version 1.7.4:
  * Fix error 401 on redmine after server side ngingx update
  * Ignore cscope.out
  * Fix whitespace as reported by flake8
  * Fix handling of dotted build numbers parsing from comments</changelog>
<changelog author="okurz@suse.com" date="1505908800">- Update to version 1.7.5:
  * Add preliminary tumblesle release script for SLE 15
  * Support multi-distri job groups with openQA#037ffd33</changelog>
<changelog author="okurz@suse.com" date="1505995200">- Update version to support more recent openQA web structure (boo#1059661)</changelog>

</package>
<package pkgid="98641f8c9cf26b9457cf9809de25e771f727966c361130dd0365b6630eb889bb" name="python-openvswitch" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="7519319c9af5131955b0d9aff3d3d3a6e585a12490bf44cb8ca90a873403002f" name="python-openvswitch" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="96c93c8b4b94c7939a826951bfacbacdc6638e0a063672910583bb9113348312" name="python-openvswitch-test" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="4.1"/>

<changelog author="mchandras@suse.de" date="1464264000">- Build a DPDK-enabled Open vSwitch (fate#319170)
  * Apply the following changes to the openvswitch.spec file
  - Add support for building with DPDK capabilities
  - Add conflicts between the two packages.
  - Add new 'open_virtual_switch-*' capabilities for openvswitch,
    openvswitch-switch, openvswitch-test packages which can be used
    by reverse dependencies to select between the two openvswitch
    implementations.
  * Add pre_checkin.sh to generate the openvswitch_dpdk.spec file
    based on the openvswitch.spec one.
  * Add upstream openvswitch-2.5.0-detect-dpdk-installation.patch
    patch to detect and link against a DPDK installation.</changelog>
<changelog author="mchandras@suse.de" date="1464350400">- Add %check directive to run the openvswitch testsuite on demand.
  The openvswitch contains hundreds of tests covering simple and
  complex openvswitch configuration so it's beneficial to run them
  during package builds. However, running the testsuite is not enabled
  by default. Also add the following upstream patch:
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch</changelog>
<changelog author="mchandras@suse.de" date="1466510400">- Multiple fixes for the openvswitch-dpdk package (bsc#985878)
  * Rename main package name to openvswitch-dpdk
  * Do not build the python and kmp packages since they do not
    depend on the DPDK capabilities
  * Remove the open_virtual_switch capability. The
    openvswitch-common will be used by reverse dependencies to
    require either of the OvS packages.
  * Provide virtual capabilities for all DPDK subpackages.
  * Fix the dependencies in the python package to require either
    of the OvS packages.
  * Suggest the kmp package only if it's actually provided.
  * Small cleanups.</changelog>
<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>

</package>
<package pkgid="185f64531c297b872980cdd6a5615adbf431cb423a13191f5ffcfc7c44b434d0" name="python-openvswitch-test" arch="x86_64">
    <version epoch="0" ver="2.7.0" rel="7.1"/>

<changelog author="jengelh@inai.de" date="1466596800">- Update rpm groups, acronym forms.</changelog>
<changelog author="mchandras@suse.de" date="1467115200">- Fix subpackage dependencies to not require the non-existent python
  DPDK subpackages (bsc#986835). We do not provide DPDK versions of
  the python bindings so nothing should depend on these subpackages.</changelog>
<changelog author="mchandras@suse.de" date="1467201600">- Remove the ?_with_dpdk macro usage since this is not being set
  without explicitly passing --with/--without during an OBS build.
  This reverts back to using the %{with dpdk} style which is set
  automatically based on %bcond_with* macros (bsc#989335).</changelog>
<changelog author="mchandras@suse.de" date="1467633600">- Allow the OvS daemon to run as non-root (bsc#987545)
- Add missing 'Conflicts' statements to all the subpackages as
  required by the Factory review tools.</changelog>
<changelog author="mchandras@suse.de" date="1468324800">- Add missing licenses (bsc#988513)
- Misc spec file cleanups highlighted by the spec-cleaner tool.
- Allow aarch64 builds for openvswitch-dpdk</changelog>
<changelog author="ro@suse.de" date="1470571200">- remove aarch from openvswitch-dpdk until we have a dpdk
  that builds for aarch64</changelog>
<changelog author="ro@suse.de" date="1471176000">- enable openvswitch-dpdk on aarch64 since dpdk
  builds on aarch64 now</changelog>
<changelog author="mchandras@suse.de" date="1473163200">- Add new DPDK_OPTIONS environment variable to hold the dpdk
  vswitchd options so that the systemd unit files can be used to
  launch an ovs-vswitcd DPDK capable instance instead of doing
  it manually. (bsc#987265)
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch</changelog>
<changelog author="mchandras@suse.de" date="1475064000">- New upstream bugfix release 2.5.1 (bsc#1001657)
  * DPDK:
  - New appctl command 'dpif-netdev/pmd-rxq-show' to check the port/rxq
    assignment.
  - Type of log messages from PMD threads changed from INFO to DBG.
  * ovs-pki: Changed message digest algorithm from SHA-1 to SHA-512 because
    SHA-1 is no longer secure and some operating systems have started to
    disable it in OpenSSL.
  * Bug fixes</changelog>
<changelog author="mchandras@suse.de" date="1475496000">- Version bump to 2.6.0. Some of the changes are:
  * First supported release of OVN.  See ovn-architecture(7) for more
    details.
  * ovsdb-server:
  - New "monitor_cond" "monitor_cond_update" and "update2" extensions to
    RFC 7047.
  * OpenFlow:
  - OpenFlow 1.3+ bundles now expire after 10 seconds since the
    last time the bundle was either opened, modified, or closed.
  - OpenFlow 1.3 Extension 230, adding OpenFlow Bundles support, is
    now implemented.
  - OpenFlow 1.3+ bundles are now supported for group mods as well as
    flow mods and port mods.  Both 'atomic' and 'ordered' bundle
    flags are supported for group mods as well as flow mods.
  - Internal OpenFlow rule representation for load and set-field
    actions is now much more memory efficient.  For a complex flow
    table this can reduce rule memory consumption by 40%.
  - Bundles are now much more memory efficient than in OVS 2.5.
    Together with memory efficiency improvements in OpenFlow rule
    representation, the peak OVS resident memory use during a
    bundle commit for large complex set of flow mods can be only
    25% of that in OVS 2.5 (4x lower).
  - OpenFlow 1.1+ OFPT_QUEUE_GET_CONFIG_REQUEST now supports OFPP_ANY.
  - OpenFlow 1.4+ OFPMP_QUEUE_DESC is now supported.
  - OpenFlow 1.4+ OFPT_TABLE_STATUS is now supported.
  - New property-based packet-in message format NXT_PACKET_IN2 with support
    for arbitrary user-provided data and for serializing flow table
    traversal into a continuation for later resumption.
  - New extension message NXT_SET_ASYNC_CONFIG2 to allow OpenFlow 1.4-like
    control over asynchronous messages in earlier versions of OpenFlow.
  - [...]
  - For a complete list of changes, please see
    http://openvswitch.org/releases/NEWS-2.6.0
- Remove obsolete patches and files
  * 0001-Remove-broken-pipe-warning-logs-from-ovsdb-server.lo.patch
  * 0001-ovs-ctl-Add-new-DPDK_OPTIONS-environment-variable.patch
  * openvswitch-2.5.0-detect-dpdk-installation.patch
  * openvswitch-switch.logrotate
  * openvswitch.service</changelog>
<changelog author="mchandras@suse.de" date="1478174400">- Version bump to 2.6.1. Some of the changes are:
  * ovn: Do not reply to ARP or ND NS for a VM's own IP address.
  * ovs-ofctl: Tolerate differences in IPv6 formatting.
  * netdev-linux: double tagged packets should use 0x88a8
  * expr: Fix abort when simplifying "x != 0/0".
  * dpif-netdev: Fix crash in dpif_netdev_execute().
  * ovn-controller: Container can have connection to a hosting VM.
  * stream-ssl: Fix memory leak on error path.
  * Other bug fixes.</changelog>
<changelog author="mchandras@suse.de" date="1479729600">- Do not restart the openvswitch service after a package update.
  Restarting the systemd service may break connectivity so let the
  user decide when it is the best time for such an action. (bsc#1002734)</changelog>
<changelog author="mchandras@suse.de" date="1480075200">- Relax the DPDK dependency a bit so we can support stable and
  possibly new minor releases as well.</changelog>
<changelog author="mchandras@suse.de" date="1488283200">- Version bump to 2.7.0 (fate#321541). Some of the changes are:
  * Utilities and daemons that support SSL now allow protocols and
    ciphers to be configured with --ssl-protocols and --ssl-ciphers.
  * OVN:
  - QoS is now implemented via egress shaping rather than ingress policing.
  - DSCP marking is now supported, via the new northbound QoS table.
  - IPAM now supports fixed MAC addresses.
  - Support for source IP address based routing.
  - ovn-trace:
  * New --ovs option to also print OpenFlow flows.
  * put_dhcp_opts and put_dhcp_optsv6 actions may now be traced.
  - Support for managing SSL and remote connection configuration in
    northbound and southbound databases.
  * Fixed regression in table stats maintenance introduced in OVS
    2.3.0, wherein the number of OpenFlow table hits and misses was
    not accurate.
  * OpenFlow:
  - OFPT_PACKET_OUT messages are now supported in bundles.
  - A new "selection_method=dp_hash" type for OpenFlow select group
    bucket selection that uses the datapath computed 5-tuple hash
    without making datapath flows match the 5-tuple fields, which
    is useful for more efficient load balancing, for example.  This
    uses the Netronome extension to OpenFlow 1.5+ that allows
    control over the OpenFlow select groups selection method.  See
    "selection_method" and related options in ovs-ofctl(8) for
    details.
  - The "sample" action now supports "ingress" and "egress" options.
  - The "ct" action now supports the TFTP ALG where support is available.
  - New actions "clone" and "ct_clear".
  * ovs-ofctl:
  - 'bundle' command now supports packet-out messages.
  - New syntax for 'ovs-ofctl packet-out' command, which uses the
    same string parser as the 'bundle' command.  The old 'packet-out'
    syntax is deprecated and will be removed in a later OVS
    release.
  - New unixctl "ofctl/packet-out" command, which can be used to
    instruct a flow monitor to issue OpenFlow packet-out messages.
  * ovsdb-server:
  - Remote connections can now be made read-only (see ovsdb-server(1)).
  * DPDK:
  - Support for DPDK v16.11.
  - Support for rx checksum offload. Refer DPDK HOWTO for details.
  - Port Hotplug is now supported.
  - DPDK physical ports can now have arbitrary names. The PCI address of
    the device must be set using the 'dpdk-devargs' option. Compatibility
    with the old dpdk&lt;portid&gt; naming scheme is broken, and as such a
    device will not be available for use until a valid dpdk-devargs is
    specified.
  - Virtual DPDK Poll Mode Driver (vdev PMD) support.
  * For the complete list of changes, please see:
  - http://openvswitch.org/releases/NEWS-2.7.0
- Add patch to fix DPDK configuration migration for &lt; 2.6 installations
  * 0001-utilities-Add-script-to-support-DPDK-option-migratio.patch
- Rework spec file
  * Enable DPDK by default and drop openvswitch-dpdk* packages. DPDK is only
    enabled on supported architectures though.
  - Remove openvswitch-dpdk.changes
  - Remove openvswitch-dpdk.spec
  - Remove pre_checkin.sh
  * Merge openvswitch and openvswitch-switch into a single package since there
    was no compelling reason to keep the switch functionality in a separate
    subpackage.
  * Split OVN package to ovn-common, ovn-central, ovn-docker, ovn-host and
    ovn-controller similar to the Debian and RedHat packages.</changelog>
<changelog author="mchandras@suse.de" date="1495886400">- Install firewalld OVN files with chmod 644 instead of 755 (4a54614120ea)
- Use python-six instead of python2-six dependency to cover distributions
  which are not using the python-singlespec packaging specification yet (bsc#1041110)
- Add upstream patch to fix a buffer overread vulnerability (cve-2017-9214) (bsc#1040543)
  * 0001-ofp-util-Fix-buffer-overread-in-ofputil_pull_queue_g.patch</changelog>
<changelog author="mchandras@suse.de" date="1500465600">- Add upstream patches to fix two security vulnerabilities
  * 0001-ofp-print-Don-t-abort-on-unknown-reason-in-role-stat.patch (cve-2017-9263) (bsc#1041470)
  * 0001-ofp-util-Check-length-of-buckets-in-ofputil_pull_ofp.patch (cve-2017-9265) (bsc#1041447)</changelog>
<changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
<changelog author="mchandras@suse.de" date="1502884800">- Add missing post/postun scriptlets for ovn-common subpackage (bsc#1054094)
  The ovn-common subpackage contains the libovn library so it needs to call
  ldconfig after installation or removal.</changelog>
<changelog author="mchandras@suse.de" date="1504699200">- Fix 'Provides' version constraints for old openvswitch-dpdk package.
  Also fix the logrotate file to be named after the package name instead
  of the obsoleted openvswitch-switch one (bsc#1057357)</changelog>
<changelog author="mchandras@suse.de" date="1511956800">- Add upstream patches to fix memory leaks (cve-2017-14970) (bsc#1061310)
  * 0001-ofp-util-Fix-memory-leaks-when-parsing-OF1.5-group-p.patch
  * 0001-ofp-util-Fix-memory-leaks-on-error-cases-in-ofputil_.patch</changelog>

</package>
<package pkgid="2c615cf47acd9d889dd830b71cc4373c9205abe7779f8064fb1d3fe52f6131ff" name="python-pcp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="70a24bb17d421dcd4b47045334fe8895b86bcd0b12f43e9ff2dbf6dd05cf5392" name="python-plist" arch="x86_64">
    <version epoch="0" ver="1.12" rel="11.1"/>

<changelog author="vuntz@opensuse.org" date="1270036800">- Clean up packaging, based on what I did in multimedia:libs.</changelog>
<changelog author="opensuse@sukimashita.com" date="1272369600">- Update to version 1.3
  * Endianness, alignment and type-punning fixes
  * Fix armel floating point endianess
  * Allow compiling with mingw on Windows
  * Minor bugfixes</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Fix both -devel package dependencies and broken pkgconfig file</changelog>
<changelog author="opensuse@sukimashita.com" date="1300622400">- Update to version 1.4
  * New maintainer and source location
  * Update AUTHORS from git history
  * Fix Unicode writing in binary plists
  * Update plist doctype
  * Fix Dictionary copy constructor
  * Fix Mac OS X library install path detection
  * Plug memory leak when writing Unicode data
- Remove pkgconfig patch due to upstream fixes</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1305547200">- Add gcc46_build_fix.patch. Fixes build with GCC4.6</changelog>
<changelog author="aj@suse.de" date="1309262400">- Add baselibs.conf - needed by usbmuxd's baselibs.conf.</changelog>
<changelog author="uli@suse.com" date="1317816000">- cross-build fix: set cmake root, python paths
- cross-build workaround: move installed files from sysroot to
  real root</changelog>
<changelog author="jengelh@medozas.de" date="1328011200">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
<changelog author="opensuse@sukimashita.com" date="1333368000">- Update to version 1.8
  * Add Cython based Python bindings
  * Fix memory corruption in libcnary
  * Fix building on Big Endian systems
  * Removed glib dependency, libplist now uses bundled libcnary
  * Fix building of Python bindings with GCC 4.6
- Do not build SWIG bindings for Python
- Remove gcc46_build_fix.patch due to upstream fixes
- Update pkgconfig patch</changelog>
<changelog author="opensuse@sukimashita.com" date="1333972800">- Allow compilation on 11.4 by disabling cython bindings</changelog>
<changelog author="cfarrell@suse.com" date="1346155200">- license update: LGPL-2.1+
  LGPL-2.1 can be relicensed to GPL without further permission. No need to
  explicitly call out the GPL as a license option. Fedora has been using
  LGPL-2.1+ for awhile so gain compatibility there too</changelog>
<changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="i@marguerite.su" date="1402920000">- update version 1.11
  * Deprecated plist_dict_insert_item() in favor of plist_dict_set_item()
  * Updated cython bindings for Python 3.x
  * Removed swig python bindings
  * Changed build system to autotools
  * Added new plist_dict_merge() function
  * WIN32 (MinGW) + OSX compilation fixes
  * Made base64 decoding thread safe
- remove patch: libplist-1.8-pkgconfig.patch
  * upstream fixed
- added plist.pxd, needed by python-imobiledevice build</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.12
  * Fix plist_from_bin() changing value nodes to key nodes in dictionaries
  * Avoid exporting non-public symbols
  * Prevent crash in plist_from_bin() when parsing unusual binary plists
  * Fix crash in String|Key::GetValue() and actually make C++ interface work
  * Fix memory leaks in new_xml_plist() and parse_real_node()
  * Fix header guards to conform to C++ standard
  * Update Cython based Python bindings and remove plist_new_key()
  * Fix key nodes not being output correctly if they contained XML entities
  * Fix handling and storage of signed vs. unsigned integer values
  * Fix date handling to respect the "Mac Epoch" instead of "Unix Epoch"
  * Remove plist_set_type() as it should not be used
  * Fix deprecated macros to work with older LLVM/Clang
  * Fix various shadowed declarations
  * Add documentation to explicitly describe memory buffer ownership
  * Fix memory leak in plist_from_bin()
  * Add various test cases based on fixes
  * Fix wrong timezone related date/time conversion of date nodes
  * Fix endian detection on MIPS architecture
  * Fix parallel build for autotools</changelog>
<changelog author="m.szulecki@libimobiledevice.org" date="1413892800">- Enable %check as it is provided by libplist and improves quality</changelog>
<changelog author="i@marguerite.su" date="1485345600">- Fixed CVE-2017-5209 and boo#1019531: The base64decode function
  in base64.c allows attackers to obtaiin sensitive info from
  process memory or cause a denial of service (buffer over-read)
  via split encoded Apple Property List data.
- Added patch CVE-2017-5209.patch
  * Rework base64decode to handle spliti encoded data correctly
  * The credit goes to Nikias Bassen &lt;nikias@gmx.li&gt;, here's just
    a backport of the upstream commit</changelog>
<changelog author="alarrosa@suse.com" date="1485864000">- Add 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  This patch (from upstream, rebased) prevents an OOB heap buffer
  read which could allow attackers to obtain sensitive information
  from process memory or cause a DoS (bsc#1021610, CVE-2017-5545).</changelog>
<changelog author="alarrosa@suse.com" date="1486468800">- Add patches from upstream to fix a multitude of memory leaks,
  out of bound reads and writes and check index ranges:
  0001-Fix-possible-crash-in-plist_from_bin-caused-by-access-to-already-freed-memory.patch
  0002-Plug-memory-leaks-caused-by-unused-and-unfreed-buffer.patch
  0003-Refactor-binary-plist-parsing-in-a-recursive-way.patch
  0004-Make-sure-to-compare-the-node-sizes-for-integer-nodes.patch
  0005-Change-internal-storage-of-PLIST_DATE-values-from-struct-timeval-to-double.patch
  0006-Fix-possible-out-of-bounds-read-in-parse_dict_node-with-proper-bounds-checking.patch
  0007-Fix-possible-out-of-bounds-reads-in-parse_bin_node.patch
  0008-Make-sure-the-index-in-parse_bin_node_at_index-is-actually-within-the-offset-table.patch
  0009-Prevent-out-of-bounds-read-in-plist_from_bin-when-parsing-offset_table.patch
  0010-Make-sure-to-error-out-if-allocation-of-used_indexes-buffer-in-plist_from_bin-fails.patch
  0011-Disallow-key-nodes-with-non-string-node-types.patch
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch
  0013-Improve-UINT_TO_HOST-macro-remove-uint24_from_be-function.patch
  0014-Check-for-invalid-offset_size-in-bplist-trailer.patch
  0015-Use-proper-struct-for-binary-plist-trailer.patch
  0016-Mass-rename-dict_size-and-param_dict_size-to-more-appropiate-ref_size.patch
  0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  0018-Avoid-heap-buffer-allocation-when-parsing-array-dict-string-data-node-sizes-14.patch
  0019-Unify-size-node-parsing-for-data-string-array-dict-nodes.patch
  0020-Prevent-OOB-read-when-parsing-data-string-array-dict-size-nodes.patch
  0021-Fix-OOB-write-on-heap-buffer-and-improve-recursion-check.patch
  0022-Make-sure-node-index-is-smaller-than-number-of-objects.patch
  0023-Make-sure-the-offset-table-is-in-the-correct-range.patch
  0024-Plug-memory-leak-in-case-parsing-a-dictionary-key-fails.patch
  0026-bplist-Improve-real-date-node-de-serialization.patch
  0027-bplist-Improve-parsing-unicode-nodes.patch
  0029-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  (boo#1029639 CVE-2017-6435)
  0030-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0031-bplist-Make-sure-to-bail-out-if-malloc-fails-in-pars.patch
  0032-bplist-Properly-handle-some-more-malloc-failure-situ.patch
  0033-plist-Fix-assert-to-allow-16-or-8-byte-integer-sizes.patch
  C0001-Plug-memory-leak-when-converting-PLIST_UID-nodes-to-XML.patch
  C0002-Improve-writing-of-array-and-dictionary-nodes.patch
  C0003-Improve-writing-of-integer-nodes.patch
  C0004-Fix-UID-node-parsing-to-match-Apples-parser.patch
  C0005-Improve-writing-of-UID-nodes.patch
  C0006-Improve-writing-of-data-string-and-unicode-nodes.patch
  C0007-Improve-writing-of-offset-table.patch
- Renamed 0001-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to
  0012-Prevent-OOB-heap-buffer-read-by-checking-input-size.patch to integrate
  the patch in the list of patches sorted by date.
- In particular, 0011-Disallow-key-nodes-with-non-string-node-types.patch
  fixes a type inconsistency by which a maliciously crafted file could
  cause the application to crash (bsc#1023807, CVE-2017-5836).
- 0014-Check-for-invalid-offset_size-in-bplist-trailer.patch fixes a
  vulnerability by which a maliciously crafted file could cause libplist
  to allocate large amounts of memory and consume lots of CPU
  (bsc#1023822, CVE-2017-5835).
- 0017-Fix-possible-out-of-bounds-read-in-parse_array_node-with-proper-bounds-checking.patch
  fixes a vulnerability by which a maliciously crafted file could cause
  a heap buffer overflow and a segmentation fault (bsc#1023848,
  CVE-2017-5834)
- Dropped CVE-2017-5209 and added
  B0005-base64-Prevent-buffer-overflow-by-not-decoding-blocks-with-less-than-4-chrs.patch
  B0006-Prevent-use-strlen-in-base64decode-when-input-buffer-size-is-known.patch
  B0007-base64-Rework-base64decode-to-handle-split-encoded-data.patch
  to replace the former. These patches fix the same CVE issue in the
  same way but they retain the information of the commits from upstream
  that fix it and add another check for a pointer to be inside bounds
  (boo#1019531, CVE-2017-5209)</changelog>
<changelog author="mgorse@suse.com" date="1493812800">- Add libplist-boo1035312-overflow-fixes.patch: add some safety
  checks, backported from upstream (boo#1035312 CVE-2017-7982).
- Add libplist-boo1029631-32bit.patch: ensure that sanity checks
  work on 32-bit platforms, and fix data range checks (boo#1029631
  boo#1029638 boo#1029706 boo#1029751 CVE-2017-6440 CVE-2017-6439
  CVE-2017-6438 CVE-2017-6436).</changelog>
<changelog author="mgorse@suse.com" date="1500984000">- Add libplist-boo1029707-base64-invalid-read.patch: prevent
  undefined shift when parsing invalid base64 encoded data
  (boo#1029707 CVE-2017-6437).</changelog>

</package>
<package pkgid="f15f75794ce32201c5eb74bcb233c28f6c2ef95a0cb4f08b00c631fdc912a065" name="python-rados" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="6545c8e1d027cae9e5c20fdff2b1559b124d1a78752fe86c8a85c880235f3f60" name="python-rbd" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="35c3caf48d49e784e05c29da59452c4a3e9e7a449f3ff2a84c8b28b5fa7a6e41" name="python-rgw" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="97a718b9a2328e41e65d9e72f72938fe2c00fef985b9109ec3f43ab4947473f2" name="python-rpm-macros" arch="noarch">
    <version epoch="0" ver="2017.06.29.107ac7a" rel="3.1"/>

<changelog author="jmatejek@suse.com" date="1483444800">- current macro version</changelog>
<changelog author="jmatejek@suse.com" date="1483704000">- set service to localonly mode</changelog>
<changelog author="jmatejek@suse.com" date="1483704001">- rework %python_alternative and remove support for %python_alternative_man
- tell service to compress the tar file</changelog>
<changelog author="jmatejek@suse.com" date="1484136000">- change service version generator to use "1.0.git" instead of "1.0git"</changelog>
<changelog author="jengelh@inai.de" date="1486382400">- Set RPM group</changelog>
<changelog author="jmatejek@suse.com" date="1486468800">- introduce %python_prefix</changelog>
<changelog author="jmatejek@suse.com" date="1486987200">- update service, use repository and tarball name "python-rpm-macros"</changelog>
<changelog author="jmatejek@suse.com" date="1487678400">- add BuildRoot to make SLE11 happy
- check presence of %python_files even on new-style distros
- better visibility of the %python_files error</changelog>
<changelog author="jmatejek@suse.com" date="1487764800">- copy BuildArch to subpackages
- on requires/provides etc., perform macro expansion *after* replacing
  'python' name, to allow for tricking the rewriter to not replace</changelog>
<changelog author="jmatejek@suse.com" date="1487937600">- let %python_module expand *all* its arguments, not just the first
  (so that %{python_module x &gt;= 1.0} works as intended)</changelog>
<changelog author="jmatejek@suse.com" date="1488974400">- make macros more resilient to missing %python_subpackages
- expand %python_bin_suffix properly</changelog>
<changelog author="jmatejek@suse.com" date="1488974401">- support "Supplements" and "Enhances" tags
- support packageand() expression
- fix handling of %name in requires</changelog>
<changelog author="jmatejek@suse.com" date="1489060800">- implement %python_clone to clone files for alternatives</changelog>
<changelog author="jmatejek@suse.com" date="1489406400">- more intelligent %python_install_alternatives
- multiline macro support
- support for %requires_ge and %requires_eq as well as Requires(pre)
  and friends
- "%python_clone -a" auto-creates alternative entries</changelog>
<changelog author="jmatejek@suse.com" date="1490270400">- remove spurious warnings about "unknown arguments" (by making ALL
  possible arguments known)
- fix a bug with %python_clone not working without
  %python_install_alternative being used
- in %python_files, detect and emit an error if %python_subpackages
  is not used</changelog>
<changelog author="jmatejek@suse.com" date="1490788800">- generate %posttrans sections to fix up alternatives after package
  rename
- fix condition where %python_files would emit wrong thing when
  %have_python2 is undefined
- add --quiet to uninstall_alternative, to silence spurious errors
- check for file existence instead of package number in uninstall_alternative</changelog>
<changelog author="jmatejek@suse.com" date="1493294400">- version bump to 2017.04.27.d2ca08c
- switch versioning scheme to date-based
- switch from using service to a custom script update.sh
- auto-generate Provides: python2-modname in old distributions
  (only for main package though)</changelog>
<changelog author="jmatejek@suse.com" date="1494331200">- version bump to 2017.05.09.fc237de
- fix badly generated %posttrans snippets in cases where
  old %python_install_alternative syntax is used for secondary files
- rework %if-macros
- introduce %python_flavor, which configures behavior of generic %python_*
  macros, and can be overriden by the user
- add --force to %python_install, to make install order fully deterministic</changelog>
<changelog author="jmatejek@suse.com" date="1498046400">- version bump to 2017.06.21.6641889
- introduce smarter buildset support
- fix %python_files on nonstandard build sets
- introduce %python_for_executables in favor of magically taking
  "last python in %pythons"
- fix %licence tag handling (gh#opensuse/python-rpm-macros#4)</changelog>
<changelog author="jmatejek@suse.com" date="1498737600">- version bump to 2017.06.29.107ac7a
- fix skip_python2 in environment where python2 is not actually present</changelog>

</package>
<package pkgid="9b113a9d73db399d27611619092ab3eef044b0c0051924ecb4585ac3c5a09d65" name="python-rpm-macros" arch="src">
    <version epoch="0" ver="2017.06.29.107ac7a" rel="3.1"/>

<changelog author="jmatejek@suse.com" date="1483444800">- current macro version</changelog>
<changelog author="jmatejek@suse.com" date="1483704000">- set service to localonly mode</changelog>
<changelog author="jmatejek@suse.com" date="1483704001">- rework %python_alternative and remove support for %python_alternative_man
- tell service to compress the tar file</changelog>
<changelog author="jmatejek@suse.com" date="1484136000">- change service version generator to use "1.0.git" instead of "1.0git"</changelog>
<changelog author="jengelh@inai.de" date="1486382400">- Set RPM group</changelog>
<changelog author="jmatejek@suse.com" date="1486468800">- introduce %python_prefix</changelog>
<changelog author="jmatejek@suse.com" date="1486987200">- update service, use repository and tarball name "python-rpm-macros"</changelog>
<changelog author="jmatejek@suse.com" date="1487678400">- add BuildRoot to make SLE11 happy
- check presence of %python_files even on new-style distros
- better visibility of the %python_files error</changelog>
<changelog author="jmatejek@suse.com" date="1487764800">- copy BuildArch to subpackages
- on requires/provides etc., perform macro expansion *after* replacing
  'python' name, to allow for tricking the rewriter to not replace</changelog>
<changelog author="jmatejek@suse.com" date="1487937600">- let %python_module expand *all* its arguments, not just the first
  (so that %{python_module x &gt;= 1.0} works as intended)</changelog>
<changelog author="jmatejek@suse.com" date="1488974400">- make macros more resilient to missing %python_subpackages
- expand %python_bin_suffix properly</changelog>
<changelog author="jmatejek@suse.com" date="1488974401">- support "Supplements" and "Enhances" tags
- support packageand() expression
- fix handling of %name in requires</changelog>
<changelog author="jmatejek@suse.com" date="1489060800">- implement %python_clone to clone files for alternatives</changelog>
<changelog author="jmatejek@suse.com" date="1489406400">- more intelligent %python_install_alternatives
- multiline macro support
- support for %requires_ge and %requires_eq as well as Requires(pre)
  and friends
- "%python_clone -a" auto-creates alternative entries</changelog>
<changelog author="jmatejek@suse.com" date="1490270400">- remove spurious warnings about "unknown arguments" (by making ALL
  possible arguments known)
- fix a bug with %python_clone not working without
  %python_install_alternative being used
- in %python_files, detect and emit an error if %python_subpackages
  is not used</changelog>
<changelog author="jmatejek@suse.com" date="1490788800">- generate %posttrans sections to fix up alternatives after package
  rename
- fix condition where %python_files would emit wrong thing when
  %have_python2 is undefined
- add --quiet to uninstall_alternative, to silence spurious errors
- check for file existence instead of package number in uninstall_alternative</changelog>
<changelog author="jmatejek@suse.com" date="1493294400">- version bump to 2017.04.27.d2ca08c
- switch versioning scheme to date-based
- switch from using service to a custom script update.sh
- auto-generate Provides: python2-modname in old distributions
  (only for main package though)</changelog>
<changelog author="jmatejek@suse.com" date="1494331200">- version bump to 2017.05.09.fc237de
- fix badly generated %posttrans snippets in cases where
  old %python_install_alternative syntax is used for secondary files
- rework %if-macros
- introduce %python_flavor, which configures behavior of generic %python_*
  macros, and can be overriden by the user
- add --force to %python_install, to make install order fully deterministic</changelog>
<changelog author="jmatejek@suse.com" date="1498046400">- version bump to 2017.06.21.6641889
- introduce smarter buildset support
- fix %python_files on nonstandard build sets
- introduce %python_for_executables in favor of magically taking
  "last python in %pythons"
- fix %licence tag handling (gh#opensuse/python-rpm-macros#4)</changelog>
<changelog author="jmatejek@suse.com" date="1498737600">- version bump to 2017.06.29.107ac7a
- fix skip_python2 in environment where python2 is not actually present</changelog>

</package>
<package pkgid="89127eee6818ec09fcdd3889aed2908760356f75bf29b4a963720115815e31ad" name="python-s3transfer" arch="noarch">
    <version epoch="0" ver="0.1.10" rel="9.1"/>

<changelog author="rjschwei@suse.com" date="1460376000">- Initial build
  + Version 0.0.1</changelog>
<changelog author="rjschwei@suse.com" date="1460462400">- Set the proper target directory for copying the license file
  + Fixes build issue on SLE 11</changelog>
<changelog author="rjschwei@suse.com" date="1460980800">- Include in SLE 12 (FATE#320748, bsc#974993, bsc#975949)</changelog>
<changelog author="rjschwei@suse.com" date="1477483200">- Update to version 0.1.9 (bsc#1007084)
  + Forward port hide_py_pckgmgmt.patch
  + No changelog entry for 0.1.9
- From 0.1.8
  + feature:download: Support downloading to FIFOs.
- From 0.1.7
  + bugfix:TransferManager: Fix memory leak when using same client to create
    multiple TransferManagers
- From 0.1.6
  + bugfix:download: Fix issue where S3 Object was not downloaded to disk
    when empty
- From 0.1.5
  + bugfix:Cntrl-C: Fix issue of hangs when Cntrl-C happens for many queued
    transfers
  + feature:cancel: Expose messages for cancels
- from 0.1.4
  + feature:chunksize: Automatically adjust the chunksize if it doesn't meet
    S3s requirements.
  + bugfix:Download: Add support for downloading to special UNIX file by name
- From 0.1.3
  + feature:delete: Add a .delete() method to the transfer manager.
  + bugfix:seekable upload: Fix issue where seeked position of seekable
    file for a nonmultipart upload was not being taken into account.
- From 0.1.2
  + bugfix:download: Patch memory leak related to unnecessarily holding
    onto futures for downloads.
- From 0.1.1
  + bugfix:deadlock: Fix deadlock issue described here:
    https://bugs.python.org/issue20319 with using concurrent.futures.wait
- From 0.1.0
  + feature:copy: Add support for managed copies.
  + feature:download: Add support for downloading to a filename, seekable
    file-like object, and nonseekable file-like object.
  + feature:general: Add TransferManager class. All public functionality
    for s3transfer is exposed through this class.
  + feature:subscribers: Add subscriber interface. Currently supports
    on_queued, on_progress, and on_done status changes.
  + feature:upload: Add support for uploading a filename, seekable file-like
    object, and nonseekable file-like object.</changelog>
<changelog author="astieger@suse.com" date="1484740800">- update to 0.1.10:
  * feature: TransferManager: Expose ability to use own executor
    class for TransferManager
  * fix factory submission (validate source)</changelog>
<changelog author="dmueller@suse.com" date="1484827200">- use pypi.io</changelog>
<changelog author="toddrme2178@gmail.com" date="1494504000">- Implement single-spec version.
- Update source URL.</changelog>

</package>
<package pkgid="19248b12c4140d1ee0e582014338212e6442fdd3e4cddff27ee9dd11124624d2" name="python-s3transfer" arch="src">
    <version epoch="0" ver="0.1.10" rel="9.1"/>

<changelog author="rjschwei@suse.com" date="1460376000">- Initial build
  + Version 0.0.1</changelog>
<changelog author="rjschwei@suse.com" date="1460462400">- Set the proper target directory for copying the license file
  + Fixes build issue on SLE 11</changelog>
<changelog author="rjschwei@suse.com" date="1460980800">- Include in SLE 12 (FATE#320748, bsc#974993, bsc#975949)</changelog>
<changelog author="rjschwei@suse.com" date="1477483200">- Update to version 0.1.9 (bsc#1007084)
  + Forward port hide_py_pckgmgmt.patch
  + No changelog entry for 0.1.9
- From 0.1.8
  + feature:download: Support downloading to FIFOs.
- From 0.1.7
  + bugfix:TransferManager: Fix memory leak when using same client to create
    multiple TransferManagers
- From 0.1.6
  + bugfix:download: Fix issue where S3 Object was not downloaded to disk
    when empty
- From 0.1.5
  + bugfix:Cntrl-C: Fix issue of hangs when Cntrl-C happens for many queued
    transfers
  + feature:cancel: Expose messages for cancels
- from 0.1.4
  + feature:chunksize: Automatically adjust the chunksize if it doesn't meet
    S3s requirements.
  + bugfix:Download: Add support for downloading to special UNIX file by name
- From 0.1.3
  + feature:delete: Add a .delete() method to the transfer manager.
  + bugfix:seekable upload: Fix issue where seeked position of seekable
    file for a nonmultipart upload was not being taken into account.
- From 0.1.2
  + bugfix:download: Patch memory leak related to unnecessarily holding
    onto futures for downloads.
- From 0.1.1
  + bugfix:deadlock: Fix deadlock issue described here:
    https://bugs.python.org/issue20319 with using concurrent.futures.wait
- From 0.1.0
  + feature:copy: Add support for managed copies.
  + feature:download: Add support for downloading to a filename, seekable
    file-like object, and nonseekable file-like object.
  + feature:general: Add TransferManager class. All public functionality
    for s3transfer is exposed through this class.
  + feature:subscribers: Add subscriber interface. Currently supports
    on_queued, on_progress, and on_done status changes.
  + feature:upload: Add support for uploading a filename, seekable file-like
    object, and nonseekable file-like object.</changelog>
<changelog author="astieger@suse.com" date="1484740800">- update to 0.1.10:
  * feature: TransferManager: Expose ability to use own executor
    class for TransferManager
  * fix factory submission (validate source)</changelog>
<changelog author="dmueller@suse.com" date="1484827200">- use pypi.io</changelog>
<changelog author="toddrme2178@gmail.com" date="1494504000">- Implement single-spec version.
- Update source URL.</changelog>

</package>
<package pkgid="aa819ce032a1a6c7cdc4986ad4e96bd2419431d0135b99512969b5fb51dd04e4" name="python-simplejson" arch="src">
    <version epoch="0" ver="3.8.2" rel="8.2"/>

<changelog author="saschpe@suse.de" date="1299153600">- Update to 2.1.3
  * Support the sort_keys option in C encoding speedups
  * Allow use_decimal to work with dump()
  * Correct wrong end when object_pairs_hook is used
  * Correct output for indent=0
  * Correctly raise TypeError when non-string keys are used with
    speedups
  * Fix the endlineno, endcolno attributes of the JSONDecodeError
    exception.</changelog>
<changelog author="alexandre@exatati.com.br" date="1304942400">- Update to 2.1.6:
  * Prevent segfaults with deeply nested JSON documents
    https://github.com/simplejson/simplejson/issues/11
  * Fix compatibility with Python 2.5
    https://github.com/simplejson/simplejson/issues/5
  - Aditional changes from 2.1.5 released 2011-04-17:
  * Built sdist tarball with setuptools_git installed. Argh.
  - Aditional changes from 2.1.4 released 2011-04-17:
  * Does not try to build the extension when using PyPy
  * Trailing whitespace after commas no longer emitted when indent is used
  * Migrated to github http://github.com/simplejson/simplejson
- Regenerate spec file with py2pack.</changelog>
<changelog author="alexandre@exatati.com.br" date="1315310400">- Update to 2.2.1:
  * Fix MANIFEST.in issue when building a sdist from a sdist.
    https://github.com/simplejson/simplejson/issues/16
- Aditional changes from version 2.2.0:
  * Remove setuptools requirement, reverted to pure distutils
  * use_decimal default for encoding (dump, dumps, JSONEncoder) is now True
  * tuple encoding as JSON objects can be turned off with new
    tuple_as_array=False option.
    https://github.com/simplejson/simplejson/pull/6
  * namedtuple (or other tuple subclasses with _asdict methods) are now
    encoded as JSON objects rather than arrays by default. Can be disabled
    and treated as a tuple with the new namedtuple_as_object=False option.
    https://github.com/simplejson/simplejson/pull/6
  * JSONDecodeError is now raised instead of ValueError when a document
    ends with an opening quote and the C speedups are in use.
    https://github.com/simplejson/simplejson/issues/15
  * Updated documentation with information about JSONDecodeError
  * Force unicode linebreak characters to be escaped (U+2028 and U+2029)
    http://timelessrepo.com/json-isnt-a-javascript-subset
  * Moved documentation from a git submodule to
    http://simplejson.readthedocs.org/</changelog>
<changelog author="saschpe@suse.de" date="1316520000">- Re-add python-distribute, you can't simply remove that, it breaks RPM updates</changelog>
<changelog author="saschpe@gmx.de" date="1331553600">- Update to version 2.4.0:
  * New bigint_as_string option for encoder to trade JavaScript number
    precision issues for type issues.
- Run testsuite
- Package README.rst, CHANGES.txt and LICENSE.txt</changelog>
<changelog author="toddrme2178@gmail.com" date="1337947200">- Clean up spec file
- Update to version 2.5.2:
  * Fix for regression introduced in 2.5.1
- Update to version 2.5.1:
  * Support for use_decimal=True in environments that use Python
    sub-interpreters such as uWSGI
- Update to version 2.5.1:
  * New item_sort_key option for encoder to allow fine grained
    control of sorted output</changelog>
<changelog author="os-dev@jacraig.com" date="1346673600">- Update to 2.6.1:
  * raw_decode() now skips whitespace before the object
- Changes from 2.6.0:
  * Error messages changed to match proposal for Python 3.3.1</changelog>
<changelog author="os-dev@jacraig.com" date="1348920000">- Update to 2.6.2:
  * JSONEncoderForHTML was not exported in the simplejson module</changelog>
<changelog author="p.drouand@gmail.com" date="1357905600">- Update to 3.0.5:
  * NOTE: this release only changes the tests, it is
    not essential to upgrade
  * Tests now run with deprecation warnings printed
  * Fixed Python 3 syntax error in simplejson.tool
    https://github.com/simplejson/simplejson/issues/49
  * Fixed Python 3.3 deprecation warnings in test suite
    https://github.com/simplejson/simplejson/issues/48
- Update to 3.0.4 version:
  * MSVC compatibility for Python 3.3
    https://github.com/simplejson/simplejson/pull/47
- Update to 3.0.3 version:
  * Fixes for bugs introduced in 3.0.2
  * Fixes for Python 2.5 compatibility
  * MSVC compatibility for Python 2.x
    https://github.com/simplejson/simplejson/pull/46
- Update to 3.0.0 version:
  * Python 3.3 is now supported, thanks to Vinay Sajip
    https://github.com/simplejson/simplejson/issues/8
  * `sort_keys`/`item_sort_key` now sort on the stringified verison of the
    key, rather than the original object. This ensures that the sort
    only compares string types and makes the behavior consistent between
    Python 2.x and Python 3.x.
  * Like other number types, Decimal instances used as keys are now
    coerced to strings when use_decimal is True.</changelog>
<changelog author="p.drouand@gmail.com" date="1357905601">- Initial python3 support</changelog>
<changelog author="toddrme2178@gmail.com" date="1358424000">- Update to 3.0.7
  * NOTE: this release only changes the license.
  * simplejson is now dual-licensed software, MIT or AFL v2.1. It is
    also made explicit that this code is also licensed to the PSF under
    a Contributor Agreement.
- Update to 3.0.7
  * Fix for major Python 2.x ensure_ascii=False encoding regression
    introduced in simplejson 3.0.0. If you use this setting, please
    upgrade immediately.</changelog>
<changelog author="p.drouand@gmail.com" date="1361448000">- Update to version 3.0.8:
  * Fix a Python 2.x compiler warning for narrow unicode builds
    https://github.com/simplejson/simplejson/issues/56</changelog>
<changelog author="p.drouand@gmail.com" date="1361448001">- Update to version 3.1.3
  * Updated documentation to discourage subclassing whenever possible.
    default, object_hook, and object_pairs_hook provide almost all of
    the functionality of subclassing.
- Update to version 3.1.2
  * Updated documentation to reflect separators behavior when indent is
    not None
  * Test suite should be compatible with debug builds of Python 2.x and 3.x
- Update to version 3.1.1
  * setup.py now has another workaround for Windows machines without
    MSVC installed
- Update to version 3.1.0
  * Updated JSON conformance test suite
  * simplejson.tool tests and bugfix for Python 3.x
  * Improve error messages for certain kinds of truncated input
  * Moved JSONDecodeError to json.scanner (still available for import
    from json.decoder)
  * Changed scanner to use JSONDecodeError directly rather than
    StopIteration to improve error messages
- Update to version 3.0.9
  * Fix an off-by-one error in the colno property of JSONDecodeError
    (when lineno == 1)</changelog>
<changelog author="benny.gaechter@gmail.com" date="1368014400">- Update to version 3.3.0
  * Unpaired surrogates once again pass through the decoder, to match older
    behavior and the RFC-4627 spec.
    https://github.com/simplejson/simplejson/issues/62</changelog>
<changelog author="dmueller@suse.com" date="1382356800">- update to 3.3.1:
  * JSONDecodeError exceptions can now be pickled</changelog>
<changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="toddrme2178@gmail.com" date="1400587200">- Update to 3.4.1
  * Fixed tests to run on Python 3.4
- Update to 3.4.0
  * Native setuptools support re-introduced
    https://github.com/simplejson/simplejson/pull/92
- Update to 3.3.3
  * Improve test suite's Python 3.4 compatibility
    https://github.com/simplejson/simplejson/issues/87
- Update to 3.3.2
  * Docstring fix for decoded string types
    https://github.com/simplejson/simplejson/pull/82</changelog>
<changelog author="dmueller@suse.com" date="1401537600">- update to 3.5.2:
  * Fix Windows build with VS2008
  Version 3.5.1 released 2014-05-21
  * Consistently reject int_as_string_bitcount settings that are not
    positive integers
  Version 3.5.0 released 2014-05-20
  * Added int_as_string_bitcount encoder option
  * Fixed potential crash when encoder created with incorrect options</changelog>
<changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
<changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>

</package>
<package pkgid="1cfbc261b0125fbb1250f7a181abec50bf1075f3c2bbeda1e19eb5260a04651b" name="python-simplejson" arch="x86_64">
    <version epoch="0" ver="3.8.2" rel="8.2"/>

<changelog author="saschpe@suse.de" date="1299153600">- Update to 2.1.3
  * Support the sort_keys option in C encoding speedups
  * Allow use_decimal to work with dump()
  * Correct wrong end when object_pairs_hook is used
  * Correct output for indent=0
  * Correctly raise TypeError when non-string keys are used with
    speedups
  * Fix the endlineno, endcolno attributes of the JSONDecodeError
    exception.</changelog>
<changelog author="alexandre@exatati.com.br" date="1304942400">- Update to 2.1.6:
  * Prevent segfaults with deeply nested JSON documents
    https://github.com/simplejson/simplejson/issues/11
  * Fix compatibility with Python 2.5
    https://github.com/simplejson/simplejson/issues/5
  - Aditional changes from 2.1.5 released 2011-04-17:
  * Built sdist tarball with setuptools_git installed. Argh.
  - Aditional changes from 2.1.4 released 2011-04-17:
  * Does not try to build the extension when using PyPy
  * Trailing whitespace after commas no longer emitted when indent is used
  * Migrated to github http://github.com/simplejson/simplejson
- Regenerate spec file with py2pack.</changelog>
<changelog author="alexandre@exatati.com.br" date="1315310400">- Update to 2.2.1:
  * Fix MANIFEST.in issue when building a sdist from a sdist.
    https://github.com/simplejson/simplejson/issues/16
- Aditional changes from version 2.2.0:
  * Remove setuptools requirement, reverted to pure distutils
  * use_decimal default for encoding (dump, dumps, JSONEncoder) is now True
  * tuple encoding as JSON objects can be turned off with new
    tuple_as_array=False option.
    https://github.com/simplejson/simplejson/pull/6
  * namedtuple (or other tuple subclasses with _asdict methods) are now
    encoded as JSON objects rather than arrays by default. Can be disabled
    and treated as a tuple with the new namedtuple_as_object=False option.
    https://github.com/simplejson/simplejson/pull/6
  * JSONDecodeError is now raised instead of ValueError when a document
    ends with an opening quote and the C speedups are in use.
    https://github.com/simplejson/simplejson/issues/15
  * Updated documentation with information about JSONDecodeError
  * Force unicode linebreak characters to be escaped (U+2028 and U+2029)
    http://timelessrepo.com/json-isnt-a-javascript-subset
  * Moved documentation from a git submodule to
    http://simplejson.readthedocs.org/</changelog>
<changelog author="saschpe@suse.de" date="1316520000">- Re-add python-distribute, you can't simply remove that, it breaks RPM updates</changelog>
<changelog author="saschpe@gmx.de" date="1331553600">- Update to version 2.4.0:
  * New bigint_as_string option for encoder to trade JavaScript number
    precision issues for type issues.
- Run testsuite
- Package README.rst, CHANGES.txt and LICENSE.txt</changelog>
<changelog author="toddrme2178@gmail.com" date="1337947200">- Clean up spec file
- Update to version 2.5.2:
  * Fix for regression introduced in 2.5.1
- Update to version 2.5.1:
  * Support for use_decimal=True in environments that use Python
    sub-interpreters such as uWSGI
- Update to version 2.5.1:
  * New item_sort_key option for encoder to allow fine grained
    control of sorted output</changelog>
<changelog author="os-dev@jacraig.com" date="1346673600">- Update to 2.6.1:
  * raw_decode() now skips whitespace before the object
- Changes from 2.6.0:
  * Error messages changed to match proposal for Python 3.3.1</changelog>
<changelog author="os-dev@jacraig.com" date="1348920000">- Update to 2.6.2:
  * JSONEncoderForHTML was not exported in the simplejson module</changelog>
<changelog author="p.drouand@gmail.com" date="1357905600">- Update to 3.0.5:
  * NOTE: this release only changes the tests, it is
    not essential to upgrade
  * Tests now run with deprecation warnings printed
  * Fixed Python 3 syntax error in simplejson.tool
    https://github.com/simplejson/simplejson/issues/49
  * Fixed Python 3.3 deprecation warnings in test suite
    https://github.com/simplejson/simplejson/issues/48
- Update to 3.0.4 version:
  * MSVC compatibility for Python 3.3
    https://github.com/simplejson/simplejson/pull/47
- Update to 3.0.3 version:
  * Fixes for bugs introduced in 3.0.2
  * Fixes for Python 2.5 compatibility
  * MSVC compatibility for Python 2.x
    https://github.com/simplejson/simplejson/pull/46
- Update to 3.0.0 version:
  * Python 3.3 is now supported, thanks to Vinay Sajip
    https://github.com/simplejson/simplejson/issues/8
  * `sort_keys`/`item_sort_key` now sort on the stringified verison of the
    key, rather than the original object. This ensures that the sort
    only compares string types and makes the behavior consistent between
    Python 2.x and Python 3.x.
  * Like other number types, Decimal instances used as keys are now
    coerced to strings when use_decimal is True.</changelog>
<changelog author="p.drouand@gmail.com" date="1357905601">- Initial python3 support</changelog>
<changelog author="toddrme2178@gmail.com" date="1358424000">- Update to 3.0.7
  * NOTE: this release only changes the license.
  * simplejson is now dual-licensed software, MIT or AFL v2.1. It is
    also made explicit that this code is also licensed to the PSF under
    a Contributor Agreement.
- Update to 3.0.7
  * Fix for major Python 2.x ensure_ascii=False encoding regression
    introduced in simplejson 3.0.0. If you use this setting, please
    upgrade immediately.</changelog>
<changelog author="p.drouand@gmail.com" date="1361448000">- Update to version 3.0.8:
  * Fix a Python 2.x compiler warning for narrow unicode builds
    https://github.com/simplejson/simplejson/issues/56</changelog>
<changelog author="p.drouand@gmail.com" date="1361448001">- Update to version 3.1.3
  * Updated documentation to discourage subclassing whenever possible.
    default, object_hook, and object_pairs_hook provide almost all of
    the functionality of subclassing.
- Update to version 3.1.2
  * Updated documentation to reflect separators behavior when indent is
    not None
  * Test suite should be compatible with debug builds of Python 2.x and 3.x
- Update to version 3.1.1
  * setup.py now has another workaround for Windows machines without
    MSVC installed
- Update to version 3.1.0
  * Updated JSON conformance test suite
  * simplejson.tool tests and bugfix for Python 3.x
  * Improve error messages for certain kinds of truncated input
  * Moved JSONDecodeError to json.scanner (still available for import
    from json.decoder)
  * Changed scanner to use JSONDecodeError directly rather than
    StopIteration to improve error messages
- Update to version 3.0.9
  * Fix an off-by-one error in the colno property of JSONDecodeError
    (when lineno == 1)</changelog>
<changelog author="benny.gaechter@gmail.com" date="1368014400">- Update to version 3.3.0
  * Unpaired surrogates once again pass through the decoder, to match older
    behavior and the RFC-4627 spec.
    https://github.com/simplejson/simplejson/issues/62</changelog>
<changelog author="dmueller@suse.com" date="1382356800">- update to 3.3.1:
  * JSONDecodeError exceptions can now be pickled</changelog>
<changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="toddrme2178@gmail.com" date="1400587200">- Update to 3.4.1
  * Fixed tests to run on Python 3.4
- Update to 3.4.0
  * Native setuptools support re-introduced
    https://github.com/simplejson/simplejson/pull/92
- Update to 3.3.3
  * Improve test suite's Python 3.4 compatibility
    https://github.com/simplejson/simplejson/issues/87
- Update to 3.3.2
  * Docstring fix for decoded string types
    https://github.com/simplejson/simplejson/pull/82</changelog>
<changelog author="dmueller@suse.com" date="1401537600">- update to 3.5.2:
  * Fix Windows build with VS2008
  Version 3.5.1 released 2014-05-21
  * Consistently reject int_as_string_bitcount settings that are not
    positive integers
  Version 3.5.0 released 2014-05-20
  * Added int_as_string_bitcount encoder option
  * Fixed potential crash when encoder created with incorrect options</changelog>
<changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
<changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>

</package>
<package pkgid="a44a69e476bc33ecaf6f0be635f99404f23c3ff375206a606621573ea9018af6" name="python-solv" arch="x86_64">
    <version epoch="0" ver="0.6.30" rel="3.1"/>

<changelog author="mls@suse.de" date="1450094400">- change product links to also look at timestamps [bnc#956443]
- rework multiversion orphaned handling [bnc#957606]
- support key type changes in repodata_internalize()
- allow serialization of REPOKEY_TYPE_DELETED
- improve appdata handling of installed packages
- improve performance when run under xen
- bump version to 0.6.15</changelog>
<changelog author="mls@suse.de" date="1450699200">- fix orphan handling for dup with keeporphans set [bnc#957606]
- bump version to 0.6.16</changelog>
<changelog author="mls@suse.de" date="1450785600">- fix update handling of multiversion packages [bnc#957606]
- bump version to 0.6.17</changelog>
<changelog author="mls@suse.de" date="1454068800">- fix rule generation for linked packages [bnc#961738]
- add hash method in bindings for some classes
- bump version to 0.6.18</changelog>
<changelog author="mls@suse.de" date="1455537600">- parse media number from baseurl
- support susedata.&lt;lang&gt;.xml language files
- bump version to 0.6.19</changelog>
<changelog author="mls@suse.de" date="1460116800">- Better support of complex deps in pool_match_dep and
  selection_make_matchdeps
- make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again
- make dep2str use rpm-like output if disttype is rpm
- implement filtering of Requires(pre,post) for installed packages
- simplify handling of pseudo package updates [bnc#967006]
- improve speed of rpmmd metadata parsing
- bump version to 0.6.20</changelog>
<changelog author="mls@suse.de" date="1463572800">- add pool-&gt;setdisttype to the bindings
- fix error in repo_deb that could lead to missing packages
- add reason testing to testcase code
- add pool_whatcontainsdep, selection_make_matchdepid, and
  SELECTION_MATCH_DEPSTR
- add SOLVER_FAVOR and SOLVER_DISFAVOR job types
- allow unknown archs in pool_setarch
- add the SOLVER_FLAG_URPM_REORDER solver flag
- fix segfault in cshash dedup code [bnc#980901]
- fix supplements handling when implicitobsoleteusescolors is set
- bump version to 0.6.21</changelog>
<changelog author="mls@suse.de" date="1465300800">- fix bug in ignoreinst logic [bnc#983141]</changelog>
<changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
<changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
<changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
<changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
<changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
<changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
<changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
<changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
<changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
<changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
<changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
<changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>

</package>
<package pkgid="77424d67a4db75e8afeef1b16662448d451649f99aac29cad228475fba51448d" name="python-sss_nss_idmap" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="1898b554c73cb6a0f6ade973ed0be05d69090d04e49a9b2cdf1ff73ae709fd01" name="python-sssd-config" arch="x86_64">
    <version epoch="0" ver="1.13.4" rel="9.1"/>

<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>
<changelog author="hguo@suse.com" date="1448971200">- Add patches:
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
  to resolve issues with missing groups and group attributes from AD.
  Many thanks to Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;
  for the original submission made against Leap 42.1.
  (bsc#957291)</changelog>
<changelog author="hguo@suse.com" date="1455192000">- Upgrade to version 1.13.3 to implement fate#320466.
- Install rcsssd symlink.
- Remove all expired macros from spec file.
- Remove expired patches:
  0002-Signals-Remove-unused-functions.patch
  0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  0004-SDAP-Continue_resolving_SID_even_if_some_fail.patch
  0005-LDAP-tokengroups_do_not_work_with_id_provider=ldap.patch
- Other minor clean-ups.</changelog>
<changelog author="hguo@suse.com" date="1460721600">- Upgrade to minor release 1.13.4 with important regression fixes
  across ID mapper, AD/IPA connectivity, and race conditions.
  Implement fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1460980800">- Enable PAC responder.
  PAC is an extension element returned by domain contriller, to speed
  up resolution of authorisation data such as group memberships.
  Continue implementing fate#320466.</changelog>
<changelog author="hguo@suse.com" date="1476273600">- Avoid linking sssd's nss to pthread, fix bsc#993582 with patch:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
- Install logrotate configuration to fix bsc#1004220.</changelog>
<changelog author="hguo@suse.com" date="1479988800">- Match patch content with the version commited to upstream project:
  0002-sss_client-Defer-thread-cancellation-until-completio.patch
  (bsc#993582)</changelog>
<changelog author="hguo@suse.com" date="1486468800">- The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441)</changelog>
<changelog author="hguo@suse.com" date="1488369600">- Remove invalid definition "After=syslog.target" from systemd
  service file. (bsc#983938)</changelog>
<changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
<changelog author="hguo@suse.com" date="1490616000">- Fix IO error triggered by processing non-ordinary GPO values such
  as remote registry settings with patch:
  0003-GPO-ignore-non-KVP-lines-if-possible.patch
  (bsc#1030473)</changelog>
<changelog author="hguo@suse.com" date="1499860800">- Install /var/lib/sss/mc directory to correct sssd cache invalidation
  behaviour. Spec patch authored by Josef Cejka. (bsc#1039567)</changelog>
<changelog author="hguo@suse.com" date="1507723200">- Introduce patch 0004-sysdb-sanitize-search-filter-input.patch to fix
  CVE-2017-12173 sssd: unsanitized input when searching in local cache database
  (bsc#1061832).</changelog>
<changelog author="hguo@suse.com" date="1508328000">- Introduce patch 0005-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch
  to fix a segfault issue. (bsc#1055123)</changelog>

</package>
<package pkgid="d3270ebab0a42bc9b5209b5e8e2996a95c3fc2d7be5b3f9f7c7b7a8e980467ca" name="python-uritemplate" arch="noarch">
    <version epoch="0" ver="3.0.0" rel="10.1"/>

<changelog author="rschweikert@suse.com" date="1391601600">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rjschwei@suse.com" date="1477569600">- Update to version 3.0.0 (bsc#1002895)
  + No upstream change entry for 2.0 -&gt; 3.0
- From 2.0.0
  + Merge uritemplate.py into uritemplate
  + Relicense uritemplate.py as Apache 2 and BSD
- From 1.0.1
  + Fix some minor packaging problems
- From 1.0.0
  + Fix handling of Unicode values on Python 2.6 and 2.7 for urllib.quote.
  + Confirm public stable API via version number.</changelog>

</package>
<package pkgid="a8fc2f9983c97a84df56e646f3fcd3a7bdf946404e1a7cf4be67a7dcb669ab5d" name="python-uritemplate" arch="src">
    <version epoch="0" ver="3.0.0" rel="10.1"/>

<changelog author="rschweikert@suse.com" date="1391601600">- Initial build</changelog>
<changelog author="rschweikert@suse.com" date="1392897600">- Include in SLE 12 (FATE #316168)</changelog>
<changelog author="rjschwei@suse.com" date="1477569600">- Update to version 3.0.0 (bsc#1002895)
  + No upstream change entry for 2.0 -&gt; 3.0
- From 2.0.0
  + Merge uritemplate.py into uritemplate
  + Relicense uritemplate.py as Apache 2 and BSD
- From 1.0.1
  + Fix some minor packaging problems
- From 1.0.0
  + Fix handling of Unicode values on Python 2.6 and 2.7 for urllib.quote.
  + Confirm public stable API via version number.</changelog>

</package>
<package pkgid="d95de8d07a7529b8a9f86d618d6cf7036cabf979dcc2f7d57bf728a9e3ddb194" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.24" rel="22.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1489665600">- Version bump to 5.1.18 (released 2017-08-15 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Shared Folders: fixed case insensitive filename access (5.1.16 regression; Windows guests only; bug #16549)
    Shared Folders: fixed access to long pathes (5.1.16 regression; Windows guests only; bugs #14651, #16564)
    API: fixed snapshot handling of medium attachments and PCI device attachments (bug #16545)
    API: make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used (5.1.16 regression)
    VBoxBugReport: fixed VM log collection issue
    Linux hosts: fixed autostart service script (bug #14955)
    Windows Additions: fixed automatic logins for Windows Vista and newer (5.1.4 regression; bug #15904)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>

</package>
<package pkgid="ee1286a002c42abfe0b34f4ddbb694ba5d1decdd0e0ba3aedd7d63bd7afd65d6" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.26" rel="25.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1490702400">- Package VBoxVNC.so. This extension is already being built, just not packaged.
  This feature is requested in bsc #1024671.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1491652800">- Add File "vbox_fix_42.3_api.patch" to handle the get_user_pages() API change in Leap 42.3.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1492689600">-  Fixes for CVE-2017-3561, CVE-2017-3563, CVE-2017-3576, CVE-2017-3558, CVE-2017-3587
    CVE-2017-3559, CVE-2017-3575, CVE-2017-3538, CVE-2017-3513
  Version bump to 5.1.20 (released 2017-04-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: don't check if the Extension Pack is up-to-date if the user is about to install a new Extension Pack (bug #16317)
    GUI: fixed a possible crash when switching a multi-monitor VM into full-screen or seamless mode
    GUI: several mini-toolbar fixes in full-screen / seamless mode (X11 hosts only)
    GUI: don't crash on restoring defaults in the appliance import dialog
    Windows Additions: another fix for automatic logins for Windows Vista and newer (bug #15904)
    ICH9: fix for Windows guests with a huge amount (&gt;64G) of guest memory
    BIOS: fixed El Torito hard disk emulation geometry calculation (thanks Dwight Engen)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- VirtualBox has always been started by systemd utilizing the old-style scripts in /etc/init.d.
  These should be converted to the service files native to systemd. This issue has been forced
  as a recent update to Tumbleweed broke the startup of VB for both TW hosts and guests. This
  change starts the conversion to native systemd files. The original scripts are still used; however,
  service files are used to start and stop the VB components. In a later change, all action will
  be accomplished using systemd service files.
  Two new files named "vboxdrv.service" and "vboxadd-service.service" are added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493467201">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1501416000">- Version bump to 5.1.26 (released 2017-07-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: reset the TSC on VM reset to work around a Windows bug (bug #16643)
    Audio: fixed memory leak when enabled with VRDP connections (5.1.24 regression; bug #16928)
    Audio: fixed creation of too many sound sinks on Linux hosts when using the PulseAudio backend (bug #16938)
    Audio: implemented record gain registers for AC'97 emulation; those are needed for newer Ubuntu guests which rely on those when controlling gain and muting the recording (capturing) levels
    Storage: fixed hang when using the emulated NVMe controller with the SPDK (bug #16945)
    Mouse: double click was not working with a precision touchpad (bug #14632)
    Linux hosts: properly bring up host-only network interfaces with iproute (5.1.24 regression; bug #16911)
    Linux hosts: provide Python 3 libraries for deb/rpm packages
    Windows guests: fixed automatic logons for Vista and newer Windows guests (5.1.24 regression; bug #16921)</changelog>

</package>
<package pkgid="1c98ab01c67e7b16603ddf996603d7d72c670a11178eec79bcbc8028f3548fec" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.26" rel="28.2"/>

<changelog author="Larry.Finger@lwfinger.net" date="1493467200">- Version bump to 5.1.22 (released 2017-04-28 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: fixed VERR_IEM_INSTR_NOT_IMPLEMENTED Guru Meditation under certain conditions (5.1 regression; mostly Mac OS X hosts; bugs #15693, #15801, #16274, #16569, #16663)
  VMM: fixed software virtualization on Solaris hosts (5.1.20 regression)
  Storage: fixed a potential hang under rare circumstances (bug #16677)
  Storage: fixed a potential crash under rare circumstances (asynchronous I/O disabled or during maintenance file operations like merging snapshots)
  Linux hosts: make the ALSA backend work again as well as loading the GL libraries on certain hosts (5.1.20 regression; bugs #16667, #16693)
  Linux Additions: fixed mount.vboxsf symlink problem (5.1.20 regression; bug #16670)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1501416000">- Version bump to 5.1.26 (released 2017-07-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: reset the TSC on VM reset to work around a Windows bug (bug #16643)
    Audio: fixed memory leak when enabled with VRDP connections (5.1.24 regression; bug #16928)
    Audio: fixed creation of too many sound sinks on Linux hosts when using the PulseAudio backend (bug #16938)
    Audio: implemented record gain registers for AC'97 emulation; those are needed for newer Ubuntu guests which rely on those when controlling gain and muting the recording (capturing) levels
    Storage: fixed hang when using the emulated NVMe controller with the SPDK (bug #16945)
    Mouse: double click was not working with a precision touchpad (bug #14632)
    Linux hosts: properly bring up host-only network interfaces with iproute (5.1.24 regression; bug #16911)
    Linux hosts: provide Python 3 libraries for deb/rpm packages
    Windows guests: fixed automatic logons for Vista and newer Windows guests (5.1.24 regression; bug #16921)</changelog>
<changelog author="hpj@urpla.net" date="1501761600">- reorganize vbox autostart, coping with systemd:
  - add /usr/lib/virtualbox/vboxes.sh (based on /etc/init.d/vboxes)
  - add /usr/lib/systemd/system/vboxes.service
  - remove /etc/init.d/vboxes</changelog>
<changelog author="schwab@suse.de" date="1502107200">- internal-headers.patch: fix invalid use of internal headers, enable
  POSIX extensions</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1502712000">- Bring the Leap 42.3 version up to the level of the Factory build. Changes include
  Update vboxconfig.sh to fix problems noted in bsc#1042726
  Disable pae build for 32-bit kernels.
  Added missing commands to keep mkinitrd from being called twice during installation of host kernel modules. bsc#1052428.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1502798400">- Corrected typo in bug report number.</changelog>

</package>
<package pkgid="d4f41b1d9c3c59e7beccc6e1c89eb4d92939b75ac8d46f71ca762c259e148ea5" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.26" rel="31.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1493899200">- Add libelf-devel to build. Fixes bnc #1037511.
  Modified the startup files to build the kernel modules if they are missing. Files "vboxconfig.sh" and "vboxguestconfig" added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1494417600">- Make a number of changes:
  * Add VBoxVNC as a proper external pack rather than just make the so available (bnc #1037033). Thanks to Michal Nowak for most of this effort.
    One hack was required to work around a bug in "VBoxManage extpack install" whereby the --accept-license option failed to work.
  * Improve startup of VirtualBox through use of systemd service files:
    a. Beginning with Oracle version 5.0.8, the command used to build the kernel modules outside of the RPM packaging
    code changed; however, the openSUSE version did not implement the new method. That new code is now implemented.
    b. In Tumbleweed, the SysV init scripts to systemd service files stopped working. Part of the new code also checks
    to see if the kernel modules are loaded. If not, new script files are called to include the necessary packages
    and build the necessary modules.
    c. The hooks are in place to remove the sysv init files and do the complete conversion to systemd. This step will
    be done at a later time.
  * New files are "vboxconfig.sh", "vboxguestconfig.sh", "vboxdrv.service", and "vboxadd-service.service".
  * New sub-packages virtualbox-guest-source and virtualbox-vnc are produced.
  * Some typos in virtualbox.spec are fixed.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1495022400">- Made changes to build with gcc 7.x. This adds new file "vbox_fix_for_gcc7.patch".
  Changed the building of VBoxVNC to remove the hack used earlier.</changelog>
<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1501416000">- Version bump to 5.1.26 (released 2017-07-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: reset the TSC on VM reset to work around a Windows bug (bug #16643)
    Audio: fixed memory leak when enabled with VRDP connections (5.1.24 regression; bug #16928)
    Audio: fixed creation of too many sound sinks on Linux hosts when using the PulseAudio backend (bug #16938)
    Audio: implemented record gain registers for AC'97 emulation; those are needed for newer Ubuntu guests which rely on those when controlling gain and muting the recording (capturing) levels
    Storage: fixed hang when using the emulated NVMe controller with the SPDK (bug #16945)
    Mouse: double click was not working with a precision touchpad (bug #14632)
    Linux hosts: properly bring up host-only network interfaces with iproute (5.1.24 regression; bug #16911)
    Linux hosts: provide Python 3 libraries for deb/rpm packages
    Windows guests: fixed automatic logons for Vista and newer Windows guests (5.1.24 regression; bug #16921)</changelog>
<changelog author="hpj@urpla.net" date="1501761600">- reorganize vbox autostart, coping with systemd:
  - add /usr/lib/virtualbox/vboxes.sh (based on /etc/init.d/vboxes)
  - add /usr/lib/systemd/system/vboxes.service
  - remove /etc/init.d/vboxes</changelog>
<changelog author="schwab@suse.de" date="1502107200">- internal-headers.patch: fix invalid use of internal headers, enable
  POSIX extensions</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1502712000">- Bring the Leap 42.3 version up to the level of the Factory build. Changes include
  Update vboxconfig.sh to fix problems noted in bsc#1042726
  Disable pae build for 32-bit kernels.
  Added missing commands to keep mkinitrd from being called twice during installation of host kernel modules. bsc#1052428.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1502798400">- Corrected typo in bug report number.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1505131200">- Mark VBoxNetNAT with the correct permissions line. (bsc#1033425)
  Thanks to Marcus Meissner.</changelog>

</package>
<package pkgid="d1612d10f30ed8507e5c9c4730700c71ebca450dad9f05031233b05374557397" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.28" rel="34.1"/>

<changelog author="hpj@urpla.net" date="1495368000">- add %dir /usr/share/licenses to new vnc package</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1501416000">- Version bump to 5.1.26 (released 2017-07-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: reset the TSC on VM reset to work around a Windows bug (bug #16643)
    Audio: fixed memory leak when enabled with VRDP connections (5.1.24 regression; bug #16928)
    Audio: fixed creation of too many sound sinks on Linux hosts when using the PulseAudio backend (bug #16938)
    Audio: implemented record gain registers for AC'97 emulation; those are needed for newer Ubuntu guests which rely on those when controlling gain and muting the recording (capturing) levels
    Storage: fixed hang when using the emulated NVMe controller with the SPDK (bug #16945)
    Mouse: double click was not working with a precision touchpad (bug #14632)
    Linux hosts: properly bring up host-only network interfaces with iproute (5.1.24 regression; bug #16911)
    Linux hosts: provide Python 3 libraries for deb/rpm packages
    Windows guests: fixed automatic logons for Vista and newer Windows guests (5.1.24 regression; bug #16921)</changelog>
<changelog author="hpj@urpla.net" date="1501761600">- reorganize vbox autostart, coping with systemd:
  - add /usr/lib/virtualbox/vboxes.sh (based on /etc/init.d/vboxes)
  - add /usr/lib/systemd/system/vboxes.service
  - remove /etc/init.d/vboxes</changelog>
<changelog author="schwab@suse.de" date="1502107200">- internal-headers.patch: fix invalid use of internal headers, enable
  POSIX extensions</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1502712000">- Bring the Leap 42.3 version up to the level of the Factory build. Changes include
  Update vboxconfig.sh to fix problems noted in bsc#1042726
  Disable pae build for 32-bit kernels.
  Added missing commands to keep mkinitrd from being called twice during installation of host kernel modules. bsc#1052428.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1502798400">- Corrected typo in bug report number.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1505131200">- Mark VBoxNetNAT with the correct permissions line. (bsc#1033425)
  Thanks to Marcus Meissner.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1506254400">- Patch VirtualBox source for changes in the kernel API for 4.14.x by adding file "fixes_for_4.14.patch".
  The following issues are addressed:
  vfs_write() is replaced by kernel_write()
  symbol SKB_GSO_UDP is removed
  removal of gamma_set and gamma_get from struct drm_fb_helper_funcs
  removal of set_busid from struct drm_driver
  replacement of drm_pci_init() with pci_register_driver()
  replacement of drm_pci_exit() with pci_unregister_driver()
  removal of load_lut from struct drm_crtc_helper_func
- Version bump to 5.1.28 (released 2017-09-13 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Audio: fixed accidental crashes when using the AC'97 sound emulation (bug #16959)
    Audio: fixed crash when default input or output devices have changed (bugs #16968, #16969, #17004)
    Audio: fixed recording when using the ALSA backend
    Audio: fixed handle leak when using the OSS backend
    E1000: fixed a crash related to VLAN traffic over internal network (5.1.26 regression; bug #16960)
    NAT: apply --natbindip1 to TCP connections (bug #16478)
    OVF: when importing an appliance with XHCI controller, don't add an OHCI controller.
    Linux hosts: fixed creating fixed sized VDI images (bug #17010)
    Linux hosts / guests: fixes for Linux 4.4 of openSUSE Leap 42.3 (bug #16966)
    Bridged networking: align outgoing packet at word boundary, preventing Windows host crash in MsLbfoProvider.
    Linux Additions: kernel drm driver support for custom EL7 Linux 3.10 kernel
- Remove file "vbox_fix_42.3_api.patch" as this change is added upstream.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1506513600">- Make changes suggested in bsc#1060072
  The specific changes are:
  (1) Remove the test in vboxdrv.sh as the script tests for the wrong file. This is safe because
    if the package is not installed, the script will not be there.
  (2) Move VBoxDbg.so to package virtualbox-qt. With this change, packages libQt5Core, libQt5Gui
    and libQt5Widgets are no longer needed with package virtualbox. As a result, a text-only
    server no longer needs to load QT to support headless virtual machines.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1507118400">- Make additional change specified in bsc#1060072. Moving VBoxSDL and VBoxSDL.so from package
  virtualbox to virtualbox-qt removes an additional need to load the libqt* binaries on a
  text-only installation running headless VMs.</changelog>

</package>
<package pkgid="f57d833e2c17fb5df2c1fa4358652d255a50bff6eb09be250f9d95c90bdbbece" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.1.30" rel="39.1"/>

<changelog author="Larry.Finger@lwfinger.net" date="1496923200">- Revise warning screen concerning USB passthru - fixes bnc#1041137.
  USB passthru opens a security hole, yet it is so valuable that many users want the feature, thus it is our default.
  Previously, a user needed to edit a udev rule to disable passthru. The bad part was that an update of VB changed the
  rule back to allow passthru without any notification. These changes modify the popup to allow the user to accept or decline
  passthru. If the user declines, then the root password is requested and the udev rule is modified. As these modifications will be
  lost with the next VB update, the inode of the udev rule is kept. If the user has previously declined and the inode has changed,
  the popup will show the next time VB is started. File "fix_usb_rules.sh" is added.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1497096000">- Add installation of package "net-tools-deprecated" as requested in boo#1027742.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498046400">- Now that kernel:HEAD:standard has changed to version 4.12.0-rcX, the VB drivers need some changes for new API's.
  File "vbox_fix_for_kernel_4.12.patch" is added.
  The added installation of "net-tools-deprecated" broke builds for Leap 42.3. That change is now conditional on building for Factory.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392000">- Fix some typos in the various service files as noted in boo#1044931.
  With these fixes, TW guests start correctly. In addition, the /sbin/vboxconfig (for hosts) and the
  /sbin/vboxguestconfig (for guests) work correctly.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498392001">- Fix logic error in scripts to build kernel modules locally - see bnc#1042726.
  Fix "requires" for net-tools-deprecated so that Leap 42.3 will build.
  Fix missing /media for Leap 42.3.
  Fix typo in above changes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1498824000">- Fix missing global for 32-bit version with gcc7. (bsc#1046571).
  Fix missing frame buffer cleanup - private communication from Oracle - adds file "fix_KMS_support.patch".</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1499688000">- Fix several problems with the startup scripts. The SysV form is no longer used for most packages as proper systemd
  service files have been created. These fixes address bsc#1037291, #1043532, and #1045871.
- Increase reserved disk space from 4 to 5 GB. This change was suddested as a fix for the 32-bit failures.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500379200">- In kernel 4.13, wait_queue_t =&gt; wait_queue_entry_t. File "vbox_fix_for_kernel_4.13.patch" patches the source to account for this change.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500465600">- File "vbox_fix_for_kernel_4.12.patch" removed as these changes are fixed upstream.
- File "vbox_fix_for_kernel_4.13.patch" removed as these changes are fixed upstream.
- Version bump to 5.1.24 (released 2017-07-18 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: mask the VME CPUID capability on AMD Ryzen processors for now to make certain guests works, for example Windows XP
    VMM: emulate more SSE2 instructions
    VMM: properly clear the TF and AC flags when dispatching real-mode interrupts
    GUI: fixes to make the mini-toolbar work with recent versions of KDE / Plasma (bug #16325)
    GUI: fixed a potential crash when a VM with multiple screens is running in full screen / seamless mode and a host screen is removed, for example when connecting to the host via RDP
    GUI: fixed initial size hints for guests which set intermediate sizes before responding (bug #16593)
    GUI: prevent stopped screen updates or black screen on reboot in a multi-screen setup under certain conditions
    Audio: many improvements for Windows 10 guests (bugs #15189, #15925, #16170, #16682, #16794 and others)
    Storage: fixed possible crash when using Intels SPDK
    API: use the correct file name of the VM machine state if the VM settings directory is renamed, for example during grouping / ungrouping a VM (bugs #16075 and #16745)
    API: return the correct error code if powering up a VM fails
    API: video recording did not automatically start at VM start when enabled in the VM settings (bug #16803)
    API: when relocating a medium, check that the target path is fully qualified
    EFI: fix for VMs with more than 3504MB RAM (bug #11103)
    Host-only adapter: correctly determine IPv4 netmasks on Windows hosts (bug #16826)
    NAT network: properly do the refcounting for starting / stopping the NAT / DHCP services if the NAT network is changed while the adapter network connection type is anything else but NAT network
    VBoxManage: fixed controlvm videocapfile (bug #16779)
    Linux / Mac OS X hosts: more fixes for loading shared libraries (5.1.20 regression; bugs #16778, #16693)
    Linux hosts / guests: Linux 4.12 fixes (bugs #16725, #16800)
    Linux hosts / guests: reduce the kernel stack consumption for Linux kernels with CONFIG_CPUMASK_OFFSTACK defined
    Linux hosts / guests: fixes for kernel modules built with gcc-7 (bug #16772)
    Linux hosts / guests: Linux 4.13 fix (bug #16887)
    Linux hosts: don't depend on net-tools on newer distributions as this package is deprecated in favour of iproute (bug #16764)
    Linux hosts: make 2D video acceleration available for older Linux distributions (5.1 regression; bug #16858)
    Linux Additions: fix for dynamic resizing with Oracle Linux 6 with UEK4
    Linux Additions: make Fedora 25 and 26 Alpha work when 3D pass-through is enabled
    Linux Additions: no longer recommend removing distribution- installed Additions if they are updated to our guidelines</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1500552000">- Initial submission to openSUSE:Leap:42.3:Update.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1501416000">- Version bump to 5.1.26 (released 2017-07-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: reset the TSC on VM reset to work around a Windows bug (bug #16643)
    Audio: fixed memory leak when enabled with VRDP connections (5.1.24 regression; bug #16928)
    Audio: fixed creation of too many sound sinks on Linux hosts when using the PulseAudio backend (bug #16938)
    Audio: implemented record gain registers for AC'97 emulation; those are needed for newer Ubuntu guests which rely on those when controlling gain and muting the recording (capturing) levels
    Storage: fixed hang when using the emulated NVMe controller with the SPDK (bug #16945)
    Mouse: double click was not working with a precision touchpad (bug #14632)
    Linux hosts: properly bring up host-only network interfaces with iproute (5.1.24 regression; bug #16911)
    Linux hosts: provide Python 3 libraries for deb/rpm packages
    Windows guests: fixed automatic logons for Vista and newer Windows guests (5.1.24 regression; bug #16921)</changelog>
<changelog author="hpj@urpla.net" date="1501761600">- reorganize vbox autostart, coping with systemd:
  - add /usr/lib/virtualbox/vboxes.sh (based on /etc/init.d/vboxes)
  - add /usr/lib/systemd/system/vboxes.service
  - remove /etc/init.d/vboxes</changelog>
<changelog author="schwab@suse.de" date="1502107200">- internal-headers.patch: fix invalid use of internal headers, enable
  POSIX extensions</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1502712000">- Bring the Leap 42.3 version up to the level of the Factory build. Changes include
  Update vboxconfig.sh to fix problems noted in bsc#1042726
  Disable pae build for 32-bit kernels.
  Added missing commands to keep mkinitrd from being called twice during installation of host kernel modules. bsc#1052428.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1502798400">- Corrected typo in bug report number.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1505131200">- Mark VBoxNetNAT with the correct permissions line. (bsc#1033425)
  Thanks to Marcus Meissner.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1506254400">- Patch VirtualBox source for changes in the kernel API for 4.14.x by adding file "fixes_for_4.14.patch".
  The following issues are addressed:
  vfs_write() is replaced by kernel_write()
  symbol SKB_GSO_UDP is removed
  removal of gamma_set and gamma_get from struct drm_fb_helper_funcs
  removal of set_busid from struct drm_driver
  replacement of drm_pci_init() with pci_register_driver()
  replacement of drm_pci_exit() with pci_unregister_driver()
  removal of load_lut from struct drm_crtc_helper_func
- Version bump to 5.1.28 (released 2017-09-13 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Audio: fixed accidental crashes when using the AC'97 sound emulation (bug #16959)
    Audio: fixed crash when default input or output devices have changed (bugs #16968, #16969, #17004)
    Audio: fixed recording when using the ALSA backend
    Audio: fixed handle leak when using the OSS backend
    E1000: fixed a crash related to VLAN traffic over internal network (5.1.26 regression; bug #16960)
    NAT: apply --natbindip1 to TCP connections (bug #16478)
    OVF: when importing an appliance with XHCI controller, don't add an OHCI controller.
    Linux hosts: fixed creating fixed sized VDI images (bug #17010)
    Linux hosts / guests: fixes for Linux 4.4 of openSUSE Leap 42.3 (bug #16966)
    Bridged networking: align outgoing packet at word boundary, preventing Windows host crash in MsLbfoProvider.
    Linux Additions: kernel drm driver support for custom EL7 Linux 3.10 kernel
- Remove file "vbox_fix_42.3_api.patch" as this change is added upstream.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1506513600">- Make changes suggested in bsc#1060072
  The specific changes are:
  (1) Remove the test in vboxdrv.sh as the script tests for the wrong file. This is safe because
    if the package is not installed, the script will not be there.
  (2) Move VBoxDbg.so to package virtualbox-qt. With this change, packages libQt5Core, libQt5Gui
    and libQt5Widgets are no longer needed with package virtualbox. As a result, a text-only
    server no longer needs to load QT to support headless virtual machines.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1507118400">- Make additional change specified in bsc#1060072. Moving VBoxSDL and VBoxSDL.so from package
  virtualbox to virtualbox-qt removes an additional need to load the libqt* binaries on a
  text-only installation running headless VMs.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1509969600">- Addresses VUL-0: CVE-2017-10392,CVE-2017-10407,CVE-2017-10408,CVE-2017-3733,CVE-2017-10428 as noted in bsc #1064200
- Update vboxdrv.sh as recommended in bsc#1060072.
- Move files /usr/lib/virtualbox/VBoxKeyboard.so, /usr/lib/virtualbox/VBoxOGLrenderspu.so, /usr/lib/virtualbox/VBoxSharedClipboard.so, and
  /usr/lib/virtualbox/VBoxSharedCrOpenGL.so from package virtualbox to virtualbox-qt. With this change, package virtualbox no longer needs libX11.
- Version bump to 5.1.30 (released 2017-10-16 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: translation updates
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux hosts: glibc 2.26 compile fix
    Windows Additions: 3D related crash fix (bugs #17082, #17092)</changelog>

</package>
<package pkgid="fc8987ba95e367b747116da1c7491a4e770e45075a8ab148e7b51c4ad15cd005" name="python-websockify" arch="noarch">
    <version epoch="0" ver="0.8.0" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1358424000">- Initial version</changelog>
<changelog author="cfarrell@suse.com" date="1358510400">- license update: LGPL-3.0 and MPL-2.0 and BSD-2-Clause and BSD-3-Clause
  See LICENSE.txt</changelog>
<changelog author="dmueller@suse.com" date="1367236800">- update to 0.4.1:
  * add include/ directory and remove some dev files from source
    distribution.
  * use Buffer base64 support in Node.js implementation</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- update to 0.5.1:
  * use upstream einaros/ws (&gt;=0.4.27) with websockify.js
  * file_only and no_parent security options for WSRequestHandler
  * Update build of web-socket-js (c0855c6cae)
  * add include/web-socket-js-project submodule to gimite/web-socket-js
    for DSFG compliance.
  * drop Hixie protocol support</changelog>
<changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="tbechtold@suse.com" date="1410868800">- update to version 0.6.0:
  * **NOTE** : 0.6.0 will break existing code that sub-classes WebsocketProxy
  * Refactor to use standard SocketServer RequestHandler design
  * Fix zombie process bug on certain systems when using multiprocessing
  * Add better unit tests
  * Log information via python `logging` module</changelog>
<changelog author="benoit.monin@gmx.fr" date="1431604800">- update to version 0.6.1:
  * PATCH RELEASE: Fixes a bug causing file_only to not be passed
    properly
- switch archive to zip (tar.gz not available on pypi)
- add unzip as BuildRequires
- remove unwanted shebang in python files
- drop unneeded executable bit of web_socket.js</changelog>
<changelog author="seife+obs@b1-systems.com" date="1437825600">- fix non-SUSE build by conditionalizing "Recommends:" tag</changelog>
<changelog author="hguo@suse.com" date="1444046400">- Add missing dependency on python-setuptools</changelog>
<changelog author="dmueller@suse.com" date="1462190400">- update to 0.8.0:
  * Make websockify properly terminate children on SIGTERM (#226)
  * Remove logging in signal handlers (this can cause Python to hang under certain conditions) (#219)
  * Make it easier to log to a file (#205)
  * Add support for IPv6 addresses in tokens in the TokenFile token plugins (#197)
  * Improve auth plugin framework to enable better support for HTTP auth (#194, #201)
  * Fix bug in JSONTokenAPI token plugin (#192)
  * Fix a missing variable in the exception handler (#178)
  * Python 3 support fixes (#140, #155, #159)
  * Generic token-parsing plugins support (#162)
  * Generic authentication plugins support (#172)
  * Fixed frame corruption on big-endian systems (#161)
  * Support heartbeats (via PING) and automatic responses to PONG (#169)
  * Automatically reject unmasked client frames by default (strict mode) (#174)
  * Automatically restart interrupted select calls (#175)
  * Make 'run' respect environment settings (including virtualenv) (#176)</changelog>
<changelog author="dmueller@suse.com" date="1500724800">- drop dependency on pyOpenSSL, seems unused (bsc#1049987)</changelog>

</package>
<package pkgid="b7b48211bdb3fb0fba698d798c724d3290df5ebc2c91c8ec50d048d9d26b54af" name="python-websockify" arch="src">
    <version epoch="0" ver="0.8.0" rel="5.1"/>

<changelog author="saschpe@suse.de" date="1358424000">- Initial version</changelog>
<changelog author="cfarrell@suse.com" date="1358510400">- license update: LGPL-3.0 and MPL-2.0 and BSD-2-Clause and BSD-3-Clause
  See LICENSE.txt</changelog>
<changelog author="dmueller@suse.com" date="1367236800">- update to 0.4.1:
  * add include/ directory and remove some dev files from source
    distribution.
  * use Buffer base64 support in Node.js implementation</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- update to 0.5.1:
  * use upstream einaros/ws (&gt;=0.4.27) with websockify.js
  * file_only and no_parent security options for WSRequestHandler
  * Update build of web-socket-js (c0855c6cae)
  * add include/web-socket-js-project submodule to gimite/web-socket-js
    for DSFG compliance.
  * drop Hixie protocol support</changelog>
<changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
<changelog author="tbechtold@suse.com" date="1410868800">- update to version 0.6.0:
  * **NOTE** : 0.6.0 will break existing code that sub-classes WebsocketProxy
  * Refactor to use standard SocketServer RequestHandler design
  * Fix zombie process bug on certain systems when using multiprocessing
  * Add better unit tests
  * Log information via python `logging` module</changelog>
<changelog author="benoit.monin@gmx.fr" date="1431604800">- update to version 0.6.1:
  * PATCH RELEASE: Fixes a bug causing file_only to not be passed
    properly
- switch archive to zip (tar.gz not available on pypi)
- add unzip as BuildRequires
- remove unwanted shebang in python files
- drop unneeded executable bit of web_socket.js</changelog>
<changelog author="seife+obs@b1-systems.com" date="1437825600">- fix non-SUSE build by conditionalizing "Recommends:" tag</changelog>
<changelog author="hguo@suse.com" date="1444046400">- Add missing dependency on python-setuptools</changelog>
<changelog author="dmueller@suse.com" date="1462190400">- update to 0.8.0:
  * Make websockify properly terminate children on SIGTERM (#226)
  * Remove logging in signal handlers (this can cause Python to hang under certain conditions) (#219)
  * Make it easier to log to a file (#205)
  * Add support for IPv6 addresses in tokens in the TokenFile token plugins (#197)
  * Improve auth plugin framework to enable better support for HTTP auth (#194, #201)
  * Fix bug in JSONTokenAPI token plugin (#192)
  * Fix a missing variable in the exception handler (#178)
  * Python 3 support fixes (#140, #155, #159)
  * Generic token-parsing plugins support (#162)
  * Generic authentication plugins support (#172)
  * Fixed frame corruption on big-endian systems (#161)
  * Support heartbeats (via PING) and automatic responses to PONG (#169)
  * Automatically reject unmasked client frames by default (strict mode) (#174)
  * Automatically restart interrupted select calls (#175)
  * Make 'run' respect environment settings (including virtualenv) (#176)</changelog>
<changelog author="dmueller@suse.com" date="1500724800">- drop dependency on pyOpenSSL, seems unused (bsc#1049987)</changelog>

</package>
<package pkgid="dfce7e7a9b16bb63887cfe6b132ffb1e4952b26d257887ec262850c081dc487a" name="python2-clustershell" arch="noarch">
    <version epoch="0" ver="1.8" rel="2.1"/>

<changelog author="stephane.thiell@cea.fr" date="1284120000">- renamed Vim subpackage to vim-clustershell
- update to 1.3.2</changelog>
<changelog author="stephane.thiell@cea.fr" date="1287576000">- update to 1.3.3</changelog>
<changelog author="stephane.thiell@cea.fr" date="1295092800">- update to 1.4</changelog>
<changelog author="stephane.thiell@cea.fr" date="1297598400">- update to 1.4.1</changelog>
<changelog author="stephane.thiell@cea.fr" date="1300190400">- update to 1.4.2</changelog>
<changelog author="stephane.thiell@cea.fr" date="1300536000">- update to 1.4.3</changelog>
<changelog author="stephane.thiell@cea.fr" date="1307534400">- update to 1.5</changelog>
<changelog author="stephane.thiell@cea.fr" date="1307620800">- update to 1.5.1</changelog>
<changelog author="stephane.thiell@cea.fr" date="1333886400">- update to 1.6</changelog>
<changelog author="stephane.thiell@cea.fr" date="1438948800">- update to 1.6.96</changelog>
<changelog author="sthiell@stanford.edu" date="1447156800">- update to 1.7</changelog>
<changelog author="sthiell@stanford.edu" date="1456747200">- update to 1.7.1</changelog>
<changelog author="sthiell@stanford.edu" date="1466251200">- update to 1.7.2</changelog>
<changelog author="sthiell@stanford.edu" date="1482235200">- update to 1.7.3</changelog>
<changelog author="sthiell@stanford.edu" date="1504267200">- update to 1.7.81 (1.8 beta1)</changelog>
<changelog author="sthiell@stanford.edu" date="1504353600">- create separate packages for python2 and python3 modules</changelog>
<changelog author="sthiell@stanford.edu" date="1504440000">- move vim extensions into the clustershell package
- use Requires: vim-filesystem instead of vim-common
- define upgrade path for vim-clustershell</changelog>
<changelog author="sthiell@stanford.edu" date="1504699200">- fix condition for ghost groups symlink</changelog>
<changelog author="sthiell@stanford.edu" date="1505304000">- initial support for openSUSE</changelog>
<changelog author="sthiell@stanford.edu" date="1509019200">- Update to new upstream release 1.8:
  * added Python 3 support (3.4+)
  * support for Python 2.5 and below has been dropped
  * new EventHandler API (backward compatible)
  * task.shell() has a new stdin (boolean) argument
  * NodeSet/nodeset/cluset can now handle numeric node names
  * clush now use slightly different colors that are legible on
    dark backgrounds</changelog>

</package>
<package pkgid="0270f96dd40f28c733484c310f5cba7096bc90baa333f32aa80178a7d340fb7a" name="python2-kiwi" arch="x86_64">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="349bd27c22890ed22020506cdba2e46beeb0ce0bbf86c422d07b461a34efdb02" name="python3-PyJWT" arch="noarch">
    <version epoch="0" ver="1.4.2" rel="3.1"/>

<changelog author="mcihar@suse.cz" date="1406116800">- initial packaging</changelog>
<changelog author="mcihar@suse.cz" date="1415275200">- Update to 0.3.0</changelog>
<changelog author="mcihar@suse.cz" date="1429531200">- Update to 1.1.0</changelog>
<changelog author="mcihar@suse.cz" date="1429531201">- Enable testsuite during build</changelog>
<changelog author="mcihar@suse.cz" date="1429704000">- Simplify dependencies (only python-cryptography is needed, pycrypto and ecdsa
  are just fallbacks whet is is not)</changelog>
<changelog author="mcihar@suse.cz" date="1429704001">- Include pycrypto and ecdsa in BuildRequires for complete test coverage
- Use setup.py test to execute testsuite</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436443200">- fix build on RHEL7, add PyJWT-1.1.0.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1439208000">- apply PyJWT-1.1.0.diff only on RHEL/CentOS</changelog>
<changelog author="toddrme2178@gmail.com" date="1446724800">- Update to 1.4.0
  + Fixed
  * Exclude Python cache files from PyPI releases.
  + Added
  * Added new options to require certain claims
    (require_nbf, require_iat, require_exp) and raise `MissingRequiredClaimError`
    if they are not present.
  * If `audience=` or `issuer=` is specified but the claim is not present,
    `MissingRequiredClaimError` is now raised instead of `InvalidAudienceError`
    and `InvalidIssuerError`
- Update to 1.3.0
  + Fixed
  * ECDSA (ES256, ES384, ES512) signatures are now being properly serialized [#158][158]
  * RSA-PSS (PS256, PS384, PS512) signatures now use the proper salt length for PSS padding. [#163][163]
  + Added
  * Added a new `jwt.get_unverified_header()` to parse and return the header portion of a token prior to signature verification.
  + Removed
  * Python 3.2 is no longer a supported platform. This version of Python is
    rarely used. Users affected by this should upgrade to 3.3+.
- Update to 1.2.0
  + Fixed
  * Added back `verify_expiration=` argument to `jwt.decode()` that was erroneously removed in [v1.1.0][1.1.0].
  + Changed
  * Refactored JWS-specific logic out of PyJWT and into PyJWS superclass. [#141][141]
  + Deprecated
  * `verify_expiration=` argument to `jwt.decode()` is now deprecated and will be removed in a future version. Use the `option=` argument instead.
- Rebase PyJWT-1.1.0.diff</changelog>
<changelog author="bear454@opensuse.org" date="1449576000">- Adapted python package to python3</changelog>
<changelog author="jgleissner@suse.com" date="1452686400">- Disabled tests (broken possibly due to the use of os.urandom)</changelog>
<changelog author="jgleissner@suse.com" date="1452859200">- Re-enabled tests, overriding build service disable of os.urandom</changelog>
<changelog author="jgleissner@suse.com" date="1453896000">- No need for os.urandom workaround anymore</changelog>
<changelog author="arun@gmx.de" date="1462708800">- specfile:
  * changed to https for source url
  * updated source url to files.pythonhosted.org</changelog>
<changelog author="alarrosa@suse.com" date="1489147200">- Update to 1.4.2:
  - A PEM-formatted key encoded as bytes could cause a `TypeError` to be raised [#213][213]
  - Newer versions of Pytest could not detect warnings properly [#182][182]
  - Non-string 'kid' value now raises `InvalidTokenError` [#174][174]
  - `jwt.decode(None)` now gracefully fails with `InvalidTokenError` [#183][183]
- BuildRequire python-pytest-cov &gt;= 1.7
- Use update-alternatives so it can be co-installable with python-PyJWT
- Run the spec file through spec-cleaner
- Drop PyJWT-1.1.0.diff which was only used on rhel (?)</changelog>
<changelog author="jmatejek@suse.com" date="1507896000">- CVE-2017-12880-pkcs1-pubkey.patch: fix symmetric/asymmetric confusion
  when handling PKCS1 public keys (CVE-2017-12880, bsc#1054106)</changelog>

</package>
<package pkgid="f4d91a4c7ca30cbb28090c909b6c3a4f941b8e7fce33a726e408ae061fa21ae1" name="python3-PyJWT" arch="src">
    <version epoch="0" ver="1.4.2" rel="3.1"/>

<changelog author="mcihar@suse.cz" date="1406116800">- initial packaging</changelog>
<changelog author="mcihar@suse.cz" date="1415275200">- Update to 0.3.0</changelog>
<changelog author="mcihar@suse.cz" date="1429531200">- Update to 1.1.0</changelog>
<changelog author="mcihar@suse.cz" date="1429531201">- Enable testsuite during build</changelog>
<changelog author="mcihar@suse.cz" date="1429704000">- Simplify dependencies (only python-cryptography is needed, pycrypto and ecdsa
  are just fallbacks whet is is not)</changelog>
<changelog author="mcihar@suse.cz" date="1429704001">- Include pycrypto and ecdsa in BuildRequires for complete test coverage
- Use setup.py test to execute testsuite</changelog>
<changelog author="seife+obs@b1-systems.com" date="1436443200">- fix build on RHEL7, add PyJWT-1.1.0.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1439208000">- apply PyJWT-1.1.0.diff only on RHEL/CentOS</changelog>
<changelog author="toddrme2178@gmail.com" date="1446724800">- Update to 1.4.0
  + Fixed
  * Exclude Python cache files from PyPI releases.
  + Added
  * Added new options to require certain claims
    (require_nbf, require_iat, require_exp) and raise `MissingRequiredClaimError`
    if they are not present.
  * If `audience=` or `issuer=` is specified but the claim is not present,
    `MissingRequiredClaimError` is now raised instead of `InvalidAudienceError`
    and `InvalidIssuerError`
- Update to 1.3.0
  + Fixed
  * ECDSA (ES256, ES384, ES512) signatures are now being properly serialized [#158][158]
  * RSA-PSS (PS256, PS384, PS512) signatures now use the proper salt length for PSS padding. [#163][163]
  + Added
  * Added a new `jwt.get_unverified_header()` to parse and return the header portion of a token prior to signature verification.
  + Removed
  * Python 3.2 is no longer a supported platform. This version of Python is
    rarely used. Users affected by this should upgrade to 3.3+.
- Update to 1.2.0
  + Fixed
  * Added back `verify_expiration=` argument to `jwt.decode()` that was erroneously removed in [v1.1.0][1.1.0].
  + Changed
  * Refactored JWS-specific logic out of PyJWT and into PyJWS superclass. [#141][141]
  + Deprecated
  * `verify_expiration=` argument to `jwt.decode()` is now deprecated and will be removed in a future version. Use the `option=` argument instead.
- Rebase PyJWT-1.1.0.diff</changelog>
<changelog author="bear454@opensuse.org" date="1449576000">- Adapted python package to python3</changelog>
<changelog author="jgleissner@suse.com" date="1452686400">- Disabled tests (broken possibly due to the use of os.urandom)</changelog>
<changelog author="jgleissner@suse.com" date="1452859200">- Re-enabled tests, overriding build service disable of os.urandom</changelog>
<changelog author="jgleissner@suse.com" date="1453896000">- No need for os.urandom workaround anymore</changelog>
<changelog author="arun@gmx.de" date="1462708800">- specfile:
  * changed to https for source url
  * updated source url to files.pythonhosted.org</changelog>
<changelog author="alarrosa@suse.com" date="1489147200">- Update to 1.4.2:
  - A PEM-formatted key encoded as bytes could cause a `TypeError` to be raised [#213][213]
  - Newer versions of Pytest could not detect warnings properly [#182][182]
  - Non-string 'kid' value now raises `InvalidTokenError` [#174][174]
  - `jwt.decode(None)` now gracefully fails with `InvalidTokenError` [#183][183]
- BuildRequire python-pytest-cov &gt;= 1.7
- Use update-alternatives so it can be co-installable with python-PyJWT
- Run the spec file through spec-cleaner
- Drop PyJWT-1.1.0.diff which was only used on rhel (?)</changelog>
<changelog author="jmatejek@suse.com" date="1507896000">- CVE-2017-12880-pkcs1-pubkey.patch: fix symmetric/asymmetric confusion
  when handling PKCS1 public keys (CVE-2017-12880, bsc#1054106)</changelog>

</package>
<package pkgid="3d0206112f83a3343d8a7b222f1f0bc7b50ab63a39c249e46c54067f059d3183" name="python3-apparmor" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="8601676ef73c18a46a4001801c87b1cc7d92cf7bdfbd23c124c83d2b485c1efd" name="python3-ceph-argparse" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="fe143260176386d79e246b612f20a74bf426b198b06d258bfc03e3add021c1b5" name="python3-cephfs" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="30171ee67620686a55ab5848b3e4eed661001444c98663293516bc1111c57752" name="python3-clustershell" arch="noarch">
    <version epoch="0" ver="1.8" rel="2.1"/>

<changelog author="stephane.thiell@cea.fr" date="1284120000">- renamed Vim subpackage to vim-clustershell
- update to 1.3.2</changelog>
<changelog author="stephane.thiell@cea.fr" date="1287576000">- update to 1.3.3</changelog>
<changelog author="stephane.thiell@cea.fr" date="1295092800">- update to 1.4</changelog>
<changelog author="stephane.thiell@cea.fr" date="1297598400">- update to 1.4.1</changelog>
<changelog author="stephane.thiell@cea.fr" date="1300190400">- update to 1.4.2</changelog>
<changelog author="stephane.thiell@cea.fr" date="1300536000">- update to 1.4.3</changelog>
<changelog author="stephane.thiell@cea.fr" date="1307534400">- update to 1.5</changelog>
<changelog author="stephane.thiell@cea.fr" date="1307620800">- update to 1.5.1</changelog>
<changelog author="stephane.thiell@cea.fr" date="1333886400">- update to 1.6</changelog>
<changelog author="stephane.thiell@cea.fr" date="1438948800">- update to 1.6.96</changelog>
<changelog author="sthiell@stanford.edu" date="1447156800">- update to 1.7</changelog>
<changelog author="sthiell@stanford.edu" date="1456747200">- update to 1.7.1</changelog>
<changelog author="sthiell@stanford.edu" date="1466251200">- update to 1.7.2</changelog>
<changelog author="sthiell@stanford.edu" date="1482235200">- update to 1.7.3</changelog>
<changelog author="sthiell@stanford.edu" date="1504267200">- update to 1.7.81 (1.8 beta1)</changelog>
<changelog author="sthiell@stanford.edu" date="1504353600">- create separate packages for python2 and python3 modules</changelog>
<changelog author="sthiell@stanford.edu" date="1504440000">- move vim extensions into the clustershell package
- use Requires: vim-filesystem instead of vim-common
- define upgrade path for vim-clustershell</changelog>
<changelog author="sthiell@stanford.edu" date="1504699200">- fix condition for ghost groups symlink</changelog>
<changelog author="sthiell@stanford.edu" date="1505304000">- initial support for openSUSE</changelog>
<changelog author="sthiell@stanford.edu" date="1509019200">- Update to new upstream release 1.8:
  * added Python 3 support (3.4+)
  * support for Python 2.5 and below has been dropped
  * new EventHandler API (backward compatible)
  * task.shell() has a new stdin (boolean) argument
  * NodeSet/nodeset/cluset can now handle numeric node names
  * clush now use slightly different colors that are legible on
    dark backgrounds</changelog>

</package>
<package pkgid="9fe66cfbddacb72a08f13d4e8b5d5aed1fa8b7af6d8604c1d56cf4eeec0d2a89" name="python3-kiwi" arch="x86_64">
    <version epoch="0" ver="8.33.3" rel="11.1"/>

<changelog author="ms@suse.com" date="1489665600">- Incorporate important Fixes and Features
  + Added support for layered docker images
  + Added support for base docker images created via umoci/skopeo
  + Added support for multipython build
  + Added image info command
  + Fixed kiwi API, make sure modules are found when used in
    other python programs
  + Fixed use of legacy services
  + Support repositories with credentials
  + Support DNF package manager
  + Fixed network link detection
    Related to (bsc#1011342) and (fate#319678)</changelog>
<changelog author="ms@suse.com" date="1489665601">- Bump version: 8.29.8 ? 8.30.0</changelog>
<changelog author="ms@suse.com" date="1491393600">- Incorporate important Fixes
  + Fixup pxe builder. Filesystem image rootfs was not in toplevel
  + Refactor ip link detection. There is no reliable way to check
    if a link is unplugged, thus the system has to be changed
  + Ensure grub.cfg exists in EFI path for iso images
  + Delete no longer needed btrfs bootpath setup (bsc#1030038)
  + Fixup bootloader menu title setup (bsc#1032118)
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub (bsc#1032119)
  + Added &lt;oem-nic-filter&gt; element
  + Fixup grub2 setup and tool calls</changelog>
<changelog author="ms@suse.com" date="1491393601">- Bump version: 8.30.0 ? 8.30.1</changelog>
<changelog author="ms@suse.com" date="1493208000">- Incorporate important Fixes
  + Add support for derived container builds in OBS
  + Support for weak and strong dependencies in dnf, yum
  + Add support for OCI images
  + Add require/recommend installation support for yum
  + Include 'plusRecommended' management for dnf
  + Update development and contribution chapter
  + Fixup grub2 template parameters
  + Fixup grub2 bios module setup
  + Avoid GRUB_DISTRIBUTOR setup in etc/default/grub
  + Added &lt;oem-nic-filter&gt; element</changelog>
<changelog author="ms@suse.com" date="1493208001">- Bump version: 8.30.1 ? 8.31.0</changelog>
<changelog author="ms@suse.de" date="1497960000">- Incorporate important Fixes
  + Add support for runtime configuration file
  + Add support for custom xz tool options
  + Add support for excluding packages when using DNF
  + Add support for excluding packages when using Yum
  + Fixed GPL license text to match headers and spec
  + Refactor documentation layout and structure
  + Added dracut output file format detection
  + Handle rpm-check-signatures flag for each package manager
  + Fixes OEM deployments on a free partition, bnc#1039469
  + Improve rpm-check-signatures support
  + Added --clear-cache option
  + Add --signing-key option
  + Fixup working dir for editboot scripts
  + Fixup kernel name lookup
  + Added fallback setup for grub secure boot
  + Allow vendor specific grub config file location
  + Fixup EFI setup for iso images
  + Refactor detection code for grub directory name
  + Include imageonly attribute for repositories
  + Fixed gce disk format</changelog>
<changelog author="ms@suse.de" date="1497960001">- Bump version: 8.31.0 ? 8.32.0</changelog>
<changelog author="ms@suse.de" date="1497960002">- Added Leap42.3 boot descriptions</changelog>
<changelog author="ms@suse.de" date="1497960003">- Bump version: 8.32.0 ? 8.32.1</changelog>
<changelog author="ms@suse.de" date="1497960004">- Fixed setup_plymouth_splash
  The schema generated get_bootsplash_theme() method returns a list
  because it's section content. The return value of the method was
  used as a string which caused a runtime error</changelog>
<changelog author="ms@suse.de" date="1498046400">- Bump version: 8.32.1 ? 8.32.2</changelog>
<changelog author="ms@suse.de" date="1508500800">- Incorporate important Fixes
  + Update documentation
  + Added vhdx image format support
  + Move to dracut for vmx and iso types
  + Update btrfs features required for caasp
  + Cleanup use of obs:// repos
  + Better integrate with the buildservice for
    building container images fate#324024
  + Fix vmdk descriptor file (bsc#1050665)
  + Include the disturl label in container
    images (bsc#1055542)</changelog>
<changelog author="ms@suse.de" date="1508500801">- Bump version: 8.32.2 ? 8.33.0</changelog>
<changelog author="dcassany@suse.com" date="1508760000">- Improve coding style to make flake8 happy
  This commit includes the exact Exception class that the 'except' statement
  catches. According to the new flake8 3.5.0 version it should be explicit
  rather than implicit.</changelog>
<changelog author="dcassany@suse.com" date="1508846400">- Bump version: 8.33.0 ? 8.33.1</changelog>
<changelog author="ms@suse.de" date="1508846401">- Cleanup SLE12 boot image descriptions
  Don't use packages which does not exist on SLE12, Fixes #523</changelog>
<changelog author="ms@suse.de" date="1508846402">- Bump version: 8.33.1 ? 8.33.2</changelog>
<changelog author="ms@suse.de" date="1508932800">- Do not require cracklib-dict-full in boot images
  Along with the other boot description cleanup commits
  This fixes bsc#1065028</changelog>
<changelog author="ms@suse.de" date="1508932801">- Bump version: 8.33.2 ? 8.33.3</changelog>

</package>
<package pkgid="3dddf4ac83cb5d1ea34f0fe3be854a937abc1cf65b5d5c8c70f864732ce2ce63" name="python3-pcp" arch="x86_64">
    <version epoch="0" ver="3.11.9" rel="3.1"/>

<changelog author="ddiss@suse.com" date="1354622400">- Fix race conditions in pmie and pmlogger startup scripts.
  + Add fix_pmie_pmlogger_startup_races.patch
  + Upstream fix for regression caused by CVE-2012-5530 fix.</changelog>
<changelog author="ddiss@suse.com" date="1357214400">- Describe xmktime.c and pthread_barrier.h licensing issues. Workaround by
  continuing to remove the testsuite; (bnc#796448).</changelog>
<changelog author="schwab@suse.de" date="1365508800">- Move configure run into the %build section.</changelog>
<changelog author="coolo@suse.com" date="1399809600">- use %_rundir if available</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415620800">- fix bashism in post script</changelog>
<changelog author="boris@steki.net" date="1424692800">- fix gcc5 C99 reserved issue problems with patch
  pcp-3.6.10-gcc5-reservedword.patch</changelog>
<changelog author="kkaempf@suse.com" date="1424692801">- Update to 3.10.2
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new patches
  0007-Honor-CFLAGS-in-qmake.patch
  0008-SUSE-fy-pmsnap-control-path.patch
  0009-pmsnap-control-var-www-srv-www.patch
- renamed patches
  + pcp-xenbuild.patch to 0001-Fix-XEN-build.patch
  + static_lib_perms.diff to
    0002-Install-libraries-without-exec-permission.patch
  + pcp_legacy_init_lsb.patch to 0003-pcp-legacy-init-lsb.patch
  + remove_cpan_rpaths.patch to 0004-Remove-CPAN-rpaths.patch
  + rm_init_script_runlevel_4.patch to
    0005-Remove-runlevel-4-from-init-scripts.patch
  + create-pmlogger-and-pmie-logdirs-during-install.patch
    to 0006-create-pmlogger-and-pmie-logdirs-during-install.patch
- Update to 3.10.1
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=HEAD
  for details
- new sub-packages
  * pcp-doc
  * pcp-gui
  * python3-pcp
  * python-pcp
  * pmda-infiniband
  * pmda-perfevent
  * pmda-papi
  * import-collectl2pcp
- drop fix_pmie_pmlogger_startup_races.patch, upstream
  drop pcp-3.6.10-gcc5-reservedword.patch, obsolete</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Require pcp-conf with libpcp3 on [open]SUSE platforms.</changelog>
<changelog author="ddiss@suse.com" date="1425038400">- Fix perl-PCP-LogImport requires version for pcp-import-sar2pcp.</changelog>
<changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
<changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
<changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
<changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
<changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
<changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
<changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
<changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
<changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
<changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>

</package>
<package pkgid="b9ed4e85a5669050a191d8fa64904a163ec0219861ded637e8664c08c0628e9d" name="python3-rados" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="39ac8a20c18b676abb4f1eaa396998ba7737d769f7047e9b735af991026f6269" name="python3-rbd" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="6d84725837c80530868e35ea13cc575d65d294fa1626c99264e419a9763a3cdc" name="python3-requests" arch="noarch">
    <version epoch="0" ver="2.7.0" rel="11.1"/>

<changelog author="p.drouand@gmail.com" date="1358251200">- Initial python3 support</changelog>
<changelog author="saschpe@suse.de" date="1358510400">- Set license to "Apache-2.0 and LGPL-2.1+ and MIT", according to
  https://github.com/kennethreitz/requests/issues/1111, the base
  license is Apache-2.0 but requests ships two libraries (bnc#799119):
  + charade: LGPL-2.1+
  + urllib3: MIT</changelog>
<changelog author="dmueller@suse.com" date="1368446400">- update to 1.2.0:
  * Fixed cookies on sessions and on requests
  * Significantly change how hooks are dispatched - hooks now receive all the
  arguments specified by the user when making a request so hooks can make a
  secondary request with the same parameters. This is especially necessary for
  authentication handler authors
  * certifi support was removed
  * Fixed bug where using OAuth 1 with body ``signature_type`` sent no data
  * Major proxy work thanks to @Lukasa including parsing of proxy authentication
  from the proxy url
  * Fix DigestAuth handling too many 401s
  * Update vendored urllib3 to include SSL bug fixes
  * Allow keyword arguments to be passed to ``json.loads()`` via the
  ``Response.json()`` method
  * Don't send ``Content-Length`` header by default on ``GET`` or ``HEAD``
  requests
  * Add ``elapsed`` attribute to ``Response`` objects to time how long a request
  took.
  * Fix ``RequestsCookieJar``
  * Sessions and Adapters are now picklable, i.e., can be used with the
  mutiprocessing library
  Update charade to version 1.0.3</changelog>
<changelog author="vuntz@suse.com" date="1374753600">- Add no-default-cacert.patch: completely ignore the internal CA
  bundle and point to /etc/ssl/certs/. This works because we
  patched python to do the right thing when a directory is used
  there instead of a file.
- Manually remove requests/cacert.pem (better than doing that in
  the patch, since it's big) too.</changelog>
<changelog author="p.drouand@gmail.com" date="1380110400">- Update to version 2.0.0
  API Changes:
  + Keys in the Headers dictionary are now native strings on all Python
    versions, i.e. bytestrings on Python 2, unicode on Python 3.
  + Proxy URLs now must have an explicit scheme. A MissingSchema exception
    will be raised if they don't.
  + Timeouts now apply to read time if Stream=False.
  + RequestException is now a subclass of IOError, not RuntimeError.
  + Added new method to PreparedRequest objects: PreparedRequest.copy().
  + Added new method to Session objects: Session.update_request(). This
    method updates a Request object with the data (e.g. cookies) stored on the Session.
  + Added new method to Session objects: Session.prepare_request(). This method
    updates and prepares a Request object, and returns the corresponding PreparedRequest
    object.
  + Added new method to HTTPAdapter objects: HTTPAdapter.proxy_headers().
    This should not be called directly, but improves the subclass interface.
  + httplib.IncompleteRead exceptions caused by incorrect chunked encoding will
    now raise a Requests ChunkedEncodingError instead.
  + Invalid percent-escape sequences now cause a Requests InvalidURL
    exception to be raised.
  + HTTP 208 no longer uses reason phrase "im_used". Correctly uses "already_reported".
  + HTTP 226 reason added ("im_used").
  Bugfixes:
  + Vastly improved proxy support, including the CONNECT verb.
  + Cookies are now properly managed when 401 authentication responses are received.
  + Chunked encoding fixes.
  + Support for mixed case schemes.
  + Better handling of streaming downloads.
  + Retrieve environment proxies from more locations.
  + Minor cookies fixes.
  + Imroved redirect behaviour.
  + Improved streaming behaviour, particularly for compressed data.
  + Miscellaneous small Python 3 text encoding bugs.
  + .netrc no longer overrides explicit auth.
  + Cookies set by hooks are now correctly persisted on Sessions.
  + Fix problem with cookies that specify port numbers in their host field.
  + BytesIO can be used to perform streaming uploads.
  + More generous parsing of the no_proxy environment variable.
  + Non-string objects can be passed in data values alongside files.</changelog>
<changelog author="p.drouand@gmail.com" date="1381492800">- Don't remove python-setuptools metadata directory; only unwanted file</changelog>
<changelog author="rschweikert@suse.com" date="1402574400">- Update to version 2.3.0
  + New ``Response`` property ``is_redirect``, which is true when the
    library could have processed this response as a redirection (whether
    or not it actually did).
  + The ``timeout`` parameter now affects requests with both ``stream=True``
    and ``stream=False`` equally.
  + The change in v2.0.0 to mandate explicit proxy schemes has been reverted.
    Proxy schemes now default to ``http://``.
  + The ``CaseInsensitiveDict`` used for HTTP headers now behaves like a normal
    dictionary when references as string or viewd in the interpreter.
  + No longer expose Authorization or Proxy-Authorization headers on redirect.
    Fix CVE-2014-1829 and CVE-2014-1830 respectively.
  + Authorization is re-evaluated each redirect.
  + On redirect, pass url as native strings.
  + Fall-back to autodetected encoding for JSON when Unicode detection fails.
  + Headers set to ``None`` on the ``Session`` are now correctly not sent.
  + Correctly honor ``decode_unicode`` even if it wasn't used earlier in the
    same response.
  + Stop advertising ``compress`` as a supported Content-Encoding.
  + The ``Response.history`` parameter is now always a list.
  + Many, many ``urllib3`` bugfixes.- Fixes incorrect parsing of proxy
    credentials that contain a literal or encoded '#' character.
  + Assorted urllib3 fixes.
  + New exception: ``ContentDecodingError``. Raised instead of ``urllib3``
    ``DecodeError`` exceptions.
  + Avoid many many exceptions from the buggy implementation of
    ``proxy_bypass`` on OS X in Python 2.6.
  + Avoid crashing when attempting to get authentication credentials
    from ~/.netrc when running as a user without a home directory.
  + Use the correct pool size for pools of connections to proxies.
  + Fix iteration of ``CookieJar`` objects.
  + Ensure that cookies are persisted over redirect.
  + Switch back to using chardet, since it has merged with charade.
  + Cookies set on individual Requests through a ``Session``
    (e.g. via ``Session.get()``) are no longer persisted to the ``Session``.
  + Clean up connections when we hit problems during chunked upload,
    rather than leaking them.
  + Return connections to the pool when a chunked upload is successful,
    rather than leaking it.
  + Match the HTTPbis recommendation for HTTP 301 redirects.
  + Prevent hanging when using streaming uploads and Digest Auth when a
    401 is received.
  + Values of headers set by Requests are now always the native string type.
  + Fix previously broken SNI support.
  + Fix accessing HTTP proxies using proxy authentication.
  + Unencode HTTP Basic usernames and passwords extracted from URLs.
  + Support for IP address ranges for no_proxy environment variable
  + Parse headers correctly when users override the default ``Host:`` header.
  + Avoid munging the URL in case of case-sensitive servers.
  + Looser URL handling for non-HTTP/HTTPS urls.
  + Accept unicode methods in Python 2.6 and 2.7.
  + More resilient cookie handling.
  + Make ``Response`` objects pickleable.
  + Actually added MD5-sess to Digest Auth instead of pretending to like
    last time.
  + Updated internal urllib3.
  + Fixed @Lukasa's lack of taste.
- Add no-default-cacert-sles.patch: use this patch when building
  for SLES, since python in SLES and openSUSE behave differently
  when it comes to SSL, and no-default-cacert.patch is wrong for
  SLES.
- Update no-default-cacert.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1405512000">- Replace python3-distribute with python3-setuptools requirement
- Use tarball from pypi</changelog>
<changelog author="toddrme2178@gmail.com" date="1410436800">- Update to 2.4.1 (2014-09-09)
  - Now has a "security" package extras set,
    ``$ pip install requests[security]``
  - Requests will now use Certifi if it is available.
  - Capture and re-raise urllib3 ProtocolError
  - Bugfix for responses that attempt to redirect to themselves
    forever (wtf?).
- Update to 2.4.0 (2014-08-29)
  * Behavioral Changes
  - ``Connection: keep-alive`` header is now sent automatically.
  * Improvements
  - Support for connect timeouts! Timeout now accepts a tuple
    (connect, read) which is used to set individual connect and
    read timeouts.
  - Allow copying of PreparedRequests without headers/cookies.
  - Updated bundled urllib3 version.
  - Refactored settings loading from environment
    new `Session.merge_environment_settings`.
  - Handle socket errors in iter_content.</changelog>
<changelog author="arun@gmx.de" date="1421496000">- specfile: update copyright year
- update to version 2.5.1:
  * Only catch HTTPErrors in raise_for_status (#2382)
  * Handle LocationParseError from urllib3 (#2344)
  * Handle file-like object filenames that are not strings (#2379)
  * Unbreak HTTPDigestAuth handler. Allow new nonces to be negotiated
    (#2389)
- changes from version 2.5.0:
  * Allow usage of urllib3's Retry object with HTTPAdapters (#2216)
  * The iter_lines method on a response now accepts a delimiter with
    which to split the content (#2295)
  * Add deprecation warnings to functions in requests.utils that will
    be removed in 3.0 (#2309)
  * Sessions used by the functional API are always closed (#2326)
  * Restrict requests to HTTP/1.1 and HTTP/1.0 (stop accepting
    HTTP/0.9) (#2323)
  * Only parse the URL once (#2353)
  * Allow Content-Length header to always be overriden (#2332)
  * Properly handle files in HTTPDigestAuth (#2333)
  * Cap redirect_cache size to prevent memory abuse (#2299)
  * Fix HTTPDigestAuth handling of redirects after authenticating
    successfully (#2253)
  * Fix crash with custom method parameter to Session.request (#2317)
  * Fix how Link headers are parsed using the regular expression
    library (#2271)
  * Add more references for interlinking (#2348)
  * Update CSS for theme (#2290)
  * Update width of buttons and sidebar (#2289)
  * Replace references of Gittip with Gratipay (#2282)
  * Add link to changelog in sidebar (#2273)
- changes from version 2.4.3:
  * Unicode URL improvements for Python 2.
  * Re-order JSON param for backwards compat.
  * Automatically defrag authentication schemes from host/pass
    URIs. (#2249)
- changes from version 2.4.2:
  * FINALLY! Add json parameter for uploads! (#2258)
  * Support for bytestring URLs on Python 3.x (#2238)
  * Avoid getting stuck in a loop (#2244)
  * Multiple calls to iter* fail with unhelpful error. (#2240, #2241)
  * Correct redirection introduction (#2245)
  * Added example of how to send multiple files in one
    request. (#2227)
  * Clarify how to pass a custom set of CAs (#2248)</changelog>
<changelog author="arun@gmx.de" date="1424952000">- update to version 2.5.3:
  * Revert changes to our vendored certificate bundle. For more
    context see (#2455, #2456, and http://bugs.python.org/issue23476)
- changes from version 2.5.2:
  * Features and Improvements
  - Add sha256 fingerprint support. (shazow/urllib3#540)
  - Improve the performance of headers. (shazow/urllib3#544)
  * Bugfixes
  - Copy pip?s import machinery. When downstream redistributors
    remove requests.packages.urllib3 the import machinery will
    continue to let those same symbols work. Example usage in
    requests? documentation and 3rd-party libraries relying on the
    vendored copies of urllib3 will work without having to fallback
    to the system urllib3.
  - Attempt to quote parts of the URL on redirect if unquoting and
    then quoting fails. (#2356)
  - Fix filename type check for multipart form-data uploads. (#2411)
  - Properly handle the case where a server issuing digest
    authentication challenges provides both auth and auth-int
    qop-values. (#2408)
  - Fix a socket leak. (shazow/urllib3#549)
  - Fix multiple Set-Cookie headers properly. (shazow/urllib3#534)
  - Disable the built-in hostname verification. (shazow/urllib3#526)
  - Fix the behaviour of decoding an exhausted
    stream. (shazow/urllib3#535)
  * Security
  - Pulled in an updated cacert.pem.
  - Drop RC4 from the default cipher list. (shazow/urllib3#551)</changelog>
<changelog author="arun@gmx.de" date="1426334400">- update to version 2.6.0:
  * Fix handling of cookies on redirect. Previously a cookie without a
    host value set would use the hostname for the redirected URL
    exposing requests users to session fixation attacks and
    potentially cookie stealing. This was disclosed privately by
    Matthew Daley of BugFuzz. An CVE identifier has not yet been
    assigned for this. This affects all versions of requests from
    v2.1.0 to v2.5.3 (inclusive on both ends).
  * Fix error when requests is an install_requires dependency and
    python setup.py test is run. (#2462)
  * Fix error when urllib3 is unbundled and requests continues to use
    the vendored import location.
  * Include fixes to urllib3?s header handling.
  * Requests? handling of unvendored dependencies is now more
    restrictive.
  * Support bytearrays when passed as parameters in the files
    argument. (#2468)
  * Avoid data duplication when creating a request with str, bytes, or
    bytearray input to the files argument.</changelog>
<changelog author="arun@gmx.de" date="1429790400">- update to version 2.6.1:
  * Remove VendorAlias import machinery introduced in v2.5.2.
  * Simplify the PreparedRequest.prepare API: We no longer require the
    user to pass an empty list to the hooks keyword
    argument. (c.f. #2552)
  * Resolve redirects now receives and forwards all of the original
    arguments to the adapter. (#2503)
  * Handle UnicodeDecodeErrors when trying to deal with a unicode URL
    that cannot be encoded in ASCII. (#2540)
  * Populate the parsed path of the URI field when performing Digest
    Authentication. (#2426)
  * Copy a PreparedRequest?s CookieJar more reliably when it is not an
    instance of RequestsCookieJar. (#2527)</changelog>
<changelog author="arun@gmx.de" date="1429963200">- update to version 2.6.2:
  * Fix regression where compressed data that was sent as chunked data
    was not properly decompressed. (#2561)</changelog>
<changelog author="arun@gmx.de" date="1431172800">- update to version 2.7.0:
  * Updated urllib3 to 1.10.4, resolving several bugs involving
    chunked transfer encoding and response framing.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1485777600">- Removed no-default-cacert.patch, no-default-cacert-sles.patch.
- Added python3-requests-boo912903-default-cacert.patch for
  boo#912903.  This makes https requests use verification based
  on openSUSE's default CA bundle.  This didn't work at all before.</changelog>
<changelog author="jmatejek@suse.com" date="1502452800">- add ca-certificates (and ca-certificates-mozilla) to dependencies,
  otherwise https connections will fail</changelog>

</package>
<package pkgid="149d3f254294671e562c0c52aca2dc4de7ef0a82fe4b4c3e1f62778531644bf7" name="python3-requests" arch="src">
    <version epoch="0" ver="2.7.0" rel="11.1"/>

<changelog author="p.drouand@gmail.com" date="1358251200">- Initial python3 support</changelog>
<changelog author="saschpe@suse.de" date="1358510400">- Set license to "Apache-2.0 and LGPL-2.1+ and MIT", according to
  https://github.com/kennethreitz/requests/issues/1111, the base
  license is Apache-2.0 but requests ships two libraries (bnc#799119):
  + charade: LGPL-2.1+
  + urllib3: MIT</changelog>
<changelog author="dmueller@suse.com" date="1368446400">- update to 1.2.0:
  * Fixed cookies on sessions and on requests
  * Significantly change how hooks are dispatched - hooks now receive all the
  arguments specified by the user when making a request so hooks can make a
  secondary request with the same parameters. This is especially necessary for
  authentication handler authors
  * certifi support was removed
  * Fixed bug where using OAuth 1 with body ``signature_type`` sent no data
  * Major proxy work thanks to @Lukasa including parsing of proxy authentication
  from the proxy url
  * Fix DigestAuth handling too many 401s
  * Update vendored urllib3 to include SSL bug fixes
  * Allow keyword arguments to be passed to ``json.loads()`` via the
  ``Response.json()`` method
  * Don't send ``Content-Length`` header by default on ``GET`` or ``HEAD``
  requests
  * Add ``elapsed`` attribute to ``Response`` objects to time how long a request
  took.
  * Fix ``RequestsCookieJar``
  * Sessions and Adapters are now picklable, i.e., can be used with the
  mutiprocessing library
  Update charade to version 1.0.3</changelog>
<changelog author="vuntz@suse.com" date="1374753600">- Add no-default-cacert.patch: completely ignore the internal CA
  bundle and point to /etc/ssl/certs/. This works because we
  patched python to do the right thing when a directory is used
  there instead of a file.
- Manually remove requests/cacert.pem (better than doing that in
  the patch, since it's big) too.</changelog>
<changelog author="p.drouand@gmail.com" date="1380110400">- Update to version 2.0.0
  API Changes:
  + Keys in the Headers dictionary are now native strings on all Python
    versions, i.e. bytestrings on Python 2, unicode on Python 3.
  + Proxy URLs now must have an explicit scheme. A MissingSchema exception
    will be raised if they don't.
  + Timeouts now apply to read time if Stream=False.
  + RequestException is now a subclass of IOError, not RuntimeError.
  + Added new method to PreparedRequest objects: PreparedRequest.copy().
  + Added new method to Session objects: Session.update_request(). This
    method updates a Request object with the data (e.g. cookies) stored on the Session.
  + Added new method to Session objects: Session.prepare_request(). This method
    updates and prepares a Request object, and returns the corresponding PreparedRequest
    object.
  + Added new method to HTTPAdapter objects: HTTPAdapter.proxy_headers().
    This should not be called directly, but improves the subclass interface.
  + httplib.IncompleteRead exceptions caused by incorrect chunked encoding will
    now raise a Requests ChunkedEncodingError instead.
  + Invalid percent-escape sequences now cause a Requests InvalidURL
    exception to be raised.
  + HTTP 208 no longer uses reason phrase "im_used". Correctly uses "already_reported".
  + HTTP 226 reason added ("im_used").
  Bugfixes:
  + Vastly improved proxy support, including the CONNECT verb.
  + Cookies are now properly managed when 401 authentication responses are received.
  + Chunked encoding fixes.
  + Support for mixed case schemes.
  + Better handling of streaming downloads.
  + Retrieve environment proxies from more locations.
  + Minor cookies fixes.
  + Imroved redirect behaviour.
  + Improved streaming behaviour, particularly for compressed data.
  + Miscellaneous small Python 3 text encoding bugs.
  + .netrc no longer overrides explicit auth.
  + Cookies set by hooks are now correctly persisted on Sessions.
  + Fix problem with cookies that specify port numbers in their host field.
  + BytesIO can be used to perform streaming uploads.
  + More generous parsing of the no_proxy environment variable.
  + Non-string objects can be passed in data values alongside files.</changelog>
<changelog author="p.drouand@gmail.com" date="1381492800">- Don't remove python-setuptools metadata directory; only unwanted file</changelog>
<changelog author="rschweikert@suse.com" date="1402574400">- Update to version 2.3.0
  + New ``Response`` property ``is_redirect``, which is true when the
    library could have processed this response as a redirection (whether
    or not it actually did).
  + The ``timeout`` parameter now affects requests with both ``stream=True``
    and ``stream=False`` equally.
  + The change in v2.0.0 to mandate explicit proxy schemes has been reverted.
    Proxy schemes now default to ``http://``.
  + The ``CaseInsensitiveDict`` used for HTTP headers now behaves like a normal
    dictionary when references as string or viewd in the interpreter.
  + No longer expose Authorization or Proxy-Authorization headers on redirect.
    Fix CVE-2014-1829 and CVE-2014-1830 respectively.
  + Authorization is re-evaluated each redirect.
  + On redirect, pass url as native strings.
  + Fall-back to autodetected encoding for JSON when Unicode detection fails.
  + Headers set to ``None`` on the ``Session`` are now correctly not sent.
  + Correctly honor ``decode_unicode`` even if it wasn't used earlier in the
    same response.
  + Stop advertising ``compress`` as a supported Content-Encoding.
  + The ``Response.history`` parameter is now always a list.
  + Many, many ``urllib3`` bugfixes.- Fixes incorrect parsing of proxy
    credentials that contain a literal or encoded '#' character.
  + Assorted urllib3 fixes.
  + New exception: ``ContentDecodingError``. Raised instead of ``urllib3``
    ``DecodeError`` exceptions.
  + Avoid many many exceptions from the buggy implementation of
    ``proxy_bypass`` on OS X in Python 2.6.
  + Avoid crashing when attempting to get authentication credentials
    from ~/.netrc when running as a user without a home directory.
  + Use the correct pool size for pools of connections to proxies.
  + Fix iteration of ``CookieJar`` objects.
  + Ensure that cookies are persisted over redirect.
  + Switch back to using chardet, since it has merged with charade.
  + Cookies set on individual Requests through a ``Session``
    (e.g. via ``Session.get()``) are no longer persisted to the ``Session``.
  + Clean up connections when we hit problems during chunked upload,
    rather than leaking them.
  + Return connections to the pool when a chunked upload is successful,
    rather than leaking it.
  + Match the HTTPbis recommendation for HTTP 301 redirects.
  + Prevent hanging when using streaming uploads and Digest Auth when a
    401 is received.
  + Values of headers set by Requests are now always the native string type.
  + Fix previously broken SNI support.
  + Fix accessing HTTP proxies using proxy authentication.
  + Unencode HTTP Basic usernames and passwords extracted from URLs.
  + Support for IP address ranges for no_proxy environment variable
  + Parse headers correctly when users override the default ``Host:`` header.
  + Avoid munging the URL in case of case-sensitive servers.
  + Looser URL handling for non-HTTP/HTTPS urls.
  + Accept unicode methods in Python 2.6 and 2.7.
  + More resilient cookie handling.
  + Make ``Response`` objects pickleable.
  + Actually added MD5-sess to Digest Auth instead of pretending to like
    last time.
  + Updated internal urllib3.
  + Fixed @Lukasa's lack of taste.
- Add no-default-cacert-sles.patch: use this patch when building
  for SLES, since python in SLES and openSUSE behave differently
  when it comes to SSL, and no-default-cacert.patch is wrong for
  SLES.
- Update no-default-cacert.patch</changelog>
<changelog author="p.drouand@gmail.com" date="1405512000">- Replace python3-distribute with python3-setuptools requirement
- Use tarball from pypi</changelog>
<changelog author="toddrme2178@gmail.com" date="1410436800">- Update to 2.4.1 (2014-09-09)
  - Now has a "security" package extras set,
    ``$ pip install requests[security]``
  - Requests will now use Certifi if it is available.
  - Capture and re-raise urllib3 ProtocolError
  - Bugfix for responses that attempt to redirect to themselves
    forever (wtf?).
- Update to 2.4.0 (2014-08-29)
  * Behavioral Changes
  - ``Connection: keep-alive`` header is now sent automatically.
  * Improvements
  - Support for connect timeouts! Timeout now accepts a tuple
    (connect, read) which is used to set individual connect and
    read timeouts.
  - Allow copying of PreparedRequests without headers/cookies.
  - Updated bundled urllib3 version.
  - Refactored settings loading from environment
    new `Session.merge_environment_settings`.
  - Handle socket errors in iter_content.</changelog>
<changelog author="arun@gmx.de" date="1421496000">- specfile: update copyright year
- update to version 2.5.1:
  * Only catch HTTPErrors in raise_for_status (#2382)
  * Handle LocationParseError from urllib3 (#2344)
  * Handle file-like object filenames that are not strings (#2379)
  * Unbreak HTTPDigestAuth handler. Allow new nonces to be negotiated
    (#2389)
- changes from version 2.5.0:
  * Allow usage of urllib3's Retry object with HTTPAdapters (#2216)
  * The iter_lines method on a response now accepts a delimiter with
    which to split the content (#2295)
  * Add deprecation warnings to functions in requests.utils that will
    be removed in 3.0 (#2309)
  * Sessions used by the functional API are always closed (#2326)
  * Restrict requests to HTTP/1.1 and HTTP/1.0 (stop accepting
    HTTP/0.9) (#2323)
  * Only parse the URL once (#2353)
  * Allow Content-Length header to always be overriden (#2332)
  * Properly handle files in HTTPDigestAuth (#2333)
  * Cap redirect_cache size to prevent memory abuse (#2299)
  * Fix HTTPDigestAuth handling of redirects after authenticating
    successfully (#2253)
  * Fix crash with custom method parameter to Session.request (#2317)
  * Fix how Link headers are parsed using the regular expression
    library (#2271)
  * Add more references for interlinking (#2348)
  * Update CSS for theme (#2290)
  * Update width of buttons and sidebar (#2289)
  * Replace references of Gittip with Gratipay (#2282)
  * Add link to changelog in sidebar (#2273)
- changes from version 2.4.3:
  * Unicode URL improvements for Python 2.
  * Re-order JSON param for backwards compat.
  * Automatically defrag authentication schemes from host/pass
    URIs. (#2249)
- changes from version 2.4.2:
  * FINALLY! Add json parameter for uploads! (#2258)
  * Support for bytestring URLs on Python 3.x (#2238)
  * Avoid getting stuck in a loop (#2244)
  * Multiple calls to iter* fail with unhelpful error. (#2240, #2241)
  * Correct redirection introduction (#2245)
  * Added example of how to send multiple files in one
    request. (#2227)
  * Clarify how to pass a custom set of CAs (#2248)</changelog>
<changelog author="arun@gmx.de" date="1424952000">- update to version 2.5.3:
  * Revert changes to our vendored certificate bundle. For more
    context see (#2455, #2456, and http://bugs.python.org/issue23476)
- changes from version 2.5.2:
  * Features and Improvements
  - Add sha256 fingerprint support. (shazow/urllib3#540)
  - Improve the performance of headers. (shazow/urllib3#544)
  * Bugfixes
  - Copy pip?s import machinery. When downstream redistributors
    remove requests.packages.urllib3 the import machinery will
    continue to let those same symbols work. Example usage in
    requests? documentation and 3rd-party libraries relying on the
    vendored copies of urllib3 will work without having to fallback
    to the system urllib3.
  - Attempt to quote parts of the URL on redirect if unquoting and
    then quoting fails. (#2356)
  - Fix filename type check for multipart form-data uploads. (#2411)
  - Properly handle the case where a server issuing digest
    authentication challenges provides both auth and auth-int
    qop-values. (#2408)
  - Fix a socket leak. (shazow/urllib3#549)
  - Fix multiple Set-Cookie headers properly. (shazow/urllib3#534)
  - Disable the built-in hostname verification. (shazow/urllib3#526)
  - Fix the behaviour of decoding an exhausted
    stream. (shazow/urllib3#535)
  * Security
  - Pulled in an updated cacert.pem.
  - Drop RC4 from the default cipher list. (shazow/urllib3#551)</changelog>
<changelog author="arun@gmx.de" date="1426334400">- update to version 2.6.0:
  * Fix handling of cookies on redirect. Previously a cookie without a
    host value set would use the hostname for the redirected URL
    exposing requests users to session fixation attacks and
    potentially cookie stealing. This was disclosed privately by
    Matthew Daley of BugFuzz. An CVE identifier has not yet been
    assigned for this. This affects all versions of requests from
    v2.1.0 to v2.5.3 (inclusive on both ends).
  * Fix error when requests is an install_requires dependency and
    python setup.py test is run. (#2462)
  * Fix error when urllib3 is unbundled and requests continues to use
    the vendored import location.
  * Include fixes to urllib3?s header handling.
  * Requests? handling of unvendored dependencies is now more
    restrictive.
  * Support bytearrays when passed as parameters in the files
    argument. (#2468)
  * Avoid data duplication when creating a request with str, bytes, or
    bytearray input to the files argument.</changelog>
<changelog author="arun@gmx.de" date="1429790400">- update to version 2.6.1:
  * Remove VendorAlias import machinery introduced in v2.5.2.
  * Simplify the PreparedRequest.prepare API: We no longer require the
    user to pass an empty list to the hooks keyword
    argument. (c.f. #2552)
  * Resolve redirects now receives and forwards all of the original
    arguments to the adapter. (#2503)
  * Handle UnicodeDecodeErrors when trying to deal with a unicode URL
    that cannot be encoded in ASCII. (#2540)
  * Populate the parsed path of the URI field when performing Digest
    Authentication. (#2426)
  * Copy a PreparedRequest?s CookieJar more reliably when it is not an
    instance of RequestsCookieJar. (#2527)</changelog>
<changelog author="arun@gmx.de" date="1429963200">- update to version 2.6.2:
  * Fix regression where compressed data that was sent as chunked data
    was not properly decompressed. (#2561)</changelog>
<changelog author="arun@gmx.de" date="1431172800">- update to version 2.7.0:
  * Updated urllib3 to 1.10.4, resolving several bugs involving
    chunked transfer encoding and response framing.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1485777600">- Removed no-default-cacert.patch, no-default-cacert-sles.patch.
- Added python3-requests-boo912903-default-cacert.patch for
  boo#912903.  This makes https requests use verification based
  on openSUSE's default CA bundle.  This didn't work at all before.</changelog>
<changelog author="jmatejek@suse.com" date="1502452800">- add ca-certificates (and ca-certificates-mozilla) to dependencies,
  otherwise https connections will fail</changelog>

</package>
<package pkgid="1f9455302523b24d9ae14c6effcce7fb8c81ef7cd4354e0485a49067889950a2" name="python3-rgw" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="c044da042d2a155f5c21d09766c7c05aba5893f0d90415fa099053b06303bce2" name="python3-solv" arch="x86_64">
    <version epoch="0" ver="0.6.30" rel="3.1"/>

<changelog author="mls@suse.de" date="1450094400">- change product links to also look at timestamps [bnc#956443]
- rework multiversion orphaned handling [bnc#957606]
- support key type changes in repodata_internalize()
- allow serialization of REPOKEY_TYPE_DELETED
- improve appdata handling of installed packages
- improve performance when run under xen
- bump version to 0.6.15</changelog>
<changelog author="mls@suse.de" date="1450699200">- fix orphan handling for dup with keeporphans set [bnc#957606]
- bump version to 0.6.16</changelog>
<changelog author="mls@suse.de" date="1450785600">- fix update handling of multiversion packages [bnc#957606]
- bump version to 0.6.17</changelog>
<changelog author="mls@suse.de" date="1454068800">- fix rule generation for linked packages [bnc#961738]
- add hash method in bindings for some classes
- bump version to 0.6.18</changelog>
<changelog author="mls@suse.de" date="1455537600">- parse media number from baseurl
- support susedata.&lt;lang&gt;.xml language files
- bump version to 0.6.19</changelog>
<changelog author="mls@suse.de" date="1460116800">- Better support of complex deps in pool_match_dep and
  selection_make_matchdeps
- make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again
- make dep2str use rpm-like output if disttype is rpm
- implement filtering of Requires(pre,post) for installed packages
- simplify handling of pseudo package updates [bnc#967006]
- improve speed of rpmmd metadata parsing
- bump version to 0.6.20</changelog>
<changelog author="mls@suse.de" date="1463572800">- add pool-&gt;setdisttype to the bindings
- fix error in repo_deb that could lead to missing packages
- add reason testing to testcase code
- add pool_whatcontainsdep, selection_make_matchdepid, and
  SELECTION_MATCH_DEPSTR
- add SOLVER_FAVOR and SOLVER_DISFAVOR job types
- allow unknown archs in pool_setarch
- add the SOLVER_FLAG_URPM_REORDER solver flag
- fix segfault in cshash dedup code [bnc#980901]
- fix supplements handling when implicitobsoleteusescolors is set
- bump version to 0.6.21</changelog>
<changelog author="mls@suse.de" date="1465300800">- fix bug in ignoreinst logic [bnc#983141]</changelog>
<changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
<changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
<changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
<changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
<changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
<changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
<changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
<changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
<changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
<changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
<changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
<changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>

</package>
<package pkgid="94065feb5d0db6bbab5e7ad1c6f8be4f983fa3ecdde25878a79ca716d7c5000f" name="qemu" arch="src">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="b5ad317a1078da54fb062fa65ea963f97ec09a75d6d4d3fe007442ff64b89c85" name="qemu" arch="src">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="5fbb6fd6e6fa91c63522a9bf468437319a0d2598b500a5b5611edc206cbb3438" name="qemu" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="a1f7ff775db0c8d8895b5924baf854fe12420fb78f99487790a1fc9a43988a07" name="qemu" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="30abce553416217ac21c44ff00cf1c14bf8942d4b425671ca732e982a84b0912" name="qemu-arm" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="e4af013ffbe0da2ac1242eff774ce19f1eee825a8dcad6a7cd52a9e7838964db" name="qemu-arm" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="5da3ef7bbbb8f4a1e46bd3d825c4f06190399294ca0491dee494e06ad54b4c86" name="qemu-block-curl" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="19e39df95340c3c6ad07fc7adc738907715268cdf5a49388d8cbaad5ac496ab0" name="qemu-block-curl" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="25275593bfdb3c60008ae9cbd83660ea8b21501c4cd57003b41796b66b1514dd" name="qemu-block-dmg" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="3254d62c05cb9008f5f253dea0d14c18081780a1adeee4c0e839df1a6ad16c8b" name="qemu-block-dmg" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="0fea7e94f2609e91ac3464623d1a83b70902e45deff7c5f0b26e29a12545fbd6" name="qemu-block-iscsi" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="d6b5a9a0179f198ee3c3558c09720fc329f1949146dd888e5cd4bdd368ccad69" name="qemu-block-iscsi" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="0a6e73f74da209909ed3914b82ebaa783a51732eb91397296e29901487b280ad" name="qemu-block-rbd" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="03b173337daf82530ce8c1b6d1cc23a6d78eca02c2f057be0bc5ac103059424c" name="qemu-block-rbd" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="37cd76ec4de5754c3e24713b4173d84be70747637200a324d4c8c4a7cc12946b" name="qemu-block-ssh" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="53f862d7ea42372f9cfc76fa4d12a0fa7a260de6122d9e3256c015b57ab952d5" name="qemu-block-ssh" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="e4b74772630ba63184461e3e000fb00af3a26dcc450b3c976734266ac48351ed" name="qemu-extra" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="8fd5a9350744cdc35a1c613f327eacf4666b0fba823334d3d2596396f40ced8c" name="qemu-extra" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="e71fa3c12aa1b145160ec1f933feae684b6b6a9e61445dd1bb157423335730de" name="qemu-guest-agent" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="de21eb1d84c73a3811c3d73a72d926d35313ec29e6aaf06f38b52c006216df32" name="qemu-guest-agent" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="6d64530bd7dbe4c49a2c9dd5c340a96e24e1616b0861e8d9de38acb45cc8734f" name="qemu-ipxe" arch="noarch">
    <version epoch="0" ver="1.0.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="6919aab508196d9e88baa60ed3f35f089fe69184bebec047cc19b54a5615e778" name="qemu-ipxe" arch="noarch">
    <version epoch="0" ver="1.0.0" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="32dbb65724333d406fa3fb6155fa6a3406284c12ee6c17dcf86ed57bb0e9499a" name="qemu-ksm" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="700ac47f58c89b8ddea03dfa3b3631e8fd6ef120bbe05f5c4b583f74f7cc485d" name="qemu-ksm" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="64ddf8a5ec1177dcdc01392b52a58cde3c76134c902dfb3cb7a1d3ddf96f6326" name="qemu-kvm" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="0f0e7825fe826600fe4f59dc59ab6295e8a17b0272b94236435d49c1033d7484" name="qemu-kvm" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="43d65c2c7ccba856cd816a065fbe1cc544e723bf98f1a88ff25a875dd9cedc15" name="qemu-lang" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="f0bda69dec6f67905ae6a72c64b3cb31203e1a8aa5567755ad896562a6330ffa" name="qemu-lang" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="2bb541ce535cfedffa8a0a413a2601e6bb5c9b883b76bea6b9a22a10607adaa0" name="qemu-linux-user" arch="src">
    <version epoch="0" ver="2.9.0" rel="32.1"/>

<changelog author="brogers@suse.com" date="1488369600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8
  * Patches added:
  0057-display-virtio-gpu-3d-check-virgl-c.patch
  0058-watchdog-6300esb-add-exit-function.patch
  0059-virtio-gpu-3d-fix-memory-leak-in-re.patch
  0060-virtio-gpu-fix-memory-leak-in-resou.patch
  0061-virtio-fix-vq-inuse-recalc-after-mi.patch
  0062-audio-es1370-add-exit-function.patch
  0063-audio-ac97-add-exit-function.patch
  0064-megasas-fix-guest-triggered-memory-.patch
  0065-cirrus-handle-negative-pitch-in-cir.patch
  0066-cirrus-fix-blit-address-mask-handli.patch
  0067-cirrus-fix-oob-access-issue-CVE-201.patch
  0068-usb-ccid-check-ccid-apdu-length.patch
  0069-sd-sdhci-check-data-length-during-d.patch
  0070-virtio-gpu-fix-resource-leak-in-vir.patch
  0071-cirrus-fix-patterncopy-checks.patch
  0072-cirrus-add-blit_is_unsafe-call-to-c.patch</changelog>
<changelog author="brogers@suse.com" date="1488369601">-  Buildignore for the global gcc-PIE, as this package enables PIE
  on its own and has troubles if all use it. (meissner@suse.com)</changelog>
<changelog author="brogers@suse.com" date="1490011200">- Updated to v2.9.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped (included in upstream source archive):
  0035-net-imx-limit-buffer-descriptor-cou.patch
  0045-virtio-gpu-call-cleanup-mapping-fun.patch
  0051-virtio-gpu-fix-information-leak-in-.patch
  0052-display-cirrus-ignore-source-pitch-.patch
  0053-s390x-kvm-fix-small-race-reboot-vs..patch
  0054-target-s390x-use-qemu-cpu-model-in-.patch
  0056-tests-check-path-to-avoid-a-failing.patch
  0057-display-virtio-gpu-3d-check-virgl-c.patch
  0058-watchdog-6300esb-add-exit-function.patch
  0059-virtio-gpu-3d-fix-memory-leak-in-re.patch
  0060-virtio-gpu-fix-memory-leak-in-resou.patch
  0061-virtio-fix-vq-inuse-recalc-after-mi.patch
  0062-audio-es1370-add-exit-function.patch
  0063-audio-ac97-add-exit-function.patch
  0064-megasas-fix-guest-triggered-memory-.patch
  0065-cirrus-handle-negative-pitch-in-cir.patch
  0066-cirrus-fix-blit-address-mask-handli.patch
  0067-cirrus-fix-oob-access-issue-CVE-201.patch
  0068-usb-ccid-check-ccid-apdu-length.patch
  0069-sd-sdhci-check-data-length-during-d.patch
  0070-virtio-gpu-fix-resource-leak-in-vir.patch
  0071-cirrus-fix-patterncopy-checks.patch
  0072-cirrus-add-blit_is_unsafe-call-to-c.patch
  * Patches renamed:
  0036-roms-Makefile-pass-a-packaging-time.patch -&gt; 0035-roms-Makefile-pass-a-packaging-time.patch
  0037-Raise-soft-address-space-limit-to-h.patch -&gt; 0036-Raise-soft-address-space-limit-to-h.patch
  0038-increase-x86_64-physical-bits-to-42.patch -&gt; 0037-increase-x86_64-physical-bits-to-42.patch
  0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -&gt; 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch
  0040-i8254-Fix-migration-from-SLE11-SP2.patch -&gt; 0039-i8254-Fix-migration-from-SLE11-SP2.patch
  0041-acpi_piix4-Fix-migration-from-SLE11.patch -&gt; 0040-acpi_piix4-Fix-migration-from-SLE11.patch
  0042-Fix-tigervnc-long-press-issue.patch -&gt; 0041-Fix-tigervnc-long-press-issue.patch
  0043-fix-xen-hvm-direct-kernel-boot.patch -&gt; 0042-fix-xen-hvm-direct-kernel-boot.patch
  0044-ARM-KVM-Enable-in-kernel-timers-wit.patch -&gt; 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch
  0046-string-input-visitor-Fix-uint64-par.patch -&gt; 0044-string-input-visitor-Fix-uint64-par.patch
  0047-test-string-input-visitor-Add-int-t.patch -&gt; 0045-test-string-input-visitor-Add-int-t.patch
  0048-test-string-input-visitor-Add-uint6.patch -&gt; 0046-test-string-input-visitor-Add-uint6.patch
  0049-tests-Add-QOM-property-unit-tests.patch -&gt; 0047-tests-Add-QOM-property-unit-tests.patch
  0050-tests-Add-scsi-disk-test.patch -&gt; 0048-tests-Add-scsi-disk-test.patch
  0055-linux-user-exclude-cpu-model-code-w.patch -&gt; 0049-linux-user-exclude-cpu-model-code-w.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1490097600">- Updated to v2.9.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped (no longer needed based on what we now build for):
  0024-virtfs-proxy-helper-Provide-__u64-f.patch
  * Patches dropped (included in upstream source archive):
  0034-dma-rc4030-limit-interval-timer-rel.patch
  * Patches renamed:
  0025-configure-Enable-PIE-for-ppc-and-pp.patch -&gt; 0024-configure-Enable-PIE-for-ppc-and-pp.patch
  0026-AIO-Reduce-number-of-threads-for-32.patch -&gt; 0025-AIO-Reduce-number-of-threads-for-32.patch
  0027-dictzip-Fix-on-big-endian-systems.patch -&gt; 0026-dictzip-Fix-on-big-endian-systems.patch
  0028-xen_disk-Add-suse-specific-flush-di.patch -&gt; 0027-xen_disk-Add-suse-specific-flush-di.patch
  0029-qemu-bridge-helper-reduce-security-.patch -&gt; 0028-qemu-bridge-helper-reduce-security-.patch
  0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -&gt; 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch
  0031-configure-Fix-detection-of-seccomp-.patch -&gt; 0030-configure-Fix-detection-of-seccomp-.patch
  0032-linux-user-properly-test-for-infini.patch -&gt; 0031-linux-user-properly-test-for-infini.patch
  0033-linux-user-remove-all-traces-of-qem.patch -&gt; 0032-linux-user-remove-all-traces-of-qem.patch
  0035-roms-Makefile-pass-a-packaging-time.patch -&gt; 0033-roms-Makefile-pass-a-packaging-time.patch
  0036-Raise-soft-address-space-limit-to-h.patch -&gt; 0034-Raise-soft-address-space-limit-to-h.patch
  0037-increase-x86_64-physical-bits-to-42.patch -&gt; 0035-increase-x86_64-physical-bits-to-42.patch
  0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -&gt; 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch
  0039-i8254-Fix-migration-from-SLE11-SP2.patch -&gt; 0037-i8254-Fix-migration-from-SLE11-SP2.patch
  0040-acpi_piix4-Fix-migration-from-SLE11.patch -&gt; 0038-acpi_piix4-Fix-migration-from-SLE11.patch
  0041-Fix-tigervnc-long-press-issue.patch -&gt; 0039-Fix-tigervnc-long-press-issue.patch
  0042-fix-xen-hvm-direct-kernel-boot.patch -&gt; 0040-fix-xen-hvm-direct-kernel-boot.patch
  0043-ARM-KVM-Enable-in-kernel-timers-wit.patch -&gt; 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch
  0044-string-input-visitor-Fix-uint64-par.patch -&gt; 0042-string-input-visitor-Fix-uint64-par.patch
  0045-test-string-input-visitor-Add-int-t.patch -&gt; 0043-test-string-input-visitor-Add-int-t.patch
  0046-test-string-input-visitor-Add-uint6.patch -&gt; 0044-test-string-input-visitor-Add-uint6.patch
  0047-tests-Add-QOM-property-unit-tests.patch -&gt; 0045-tests-Add-QOM-property-unit-tests.patch
  0048-tests-Add-scsi-disk-test.patch -&gt; 0046-tests-Add-scsi-disk-test.patch
  0049-linux-user-exclude-cpu-model-code-w.patch -&gt; 0047-linux-user-exclude-cpu-model-code-w.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1490702400">- Updated to v2.9.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped:
  0047-linux-user-exclude-cpu-model-code-w.patch
  * Patches added:
  0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1490875200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0048-i386-Replace-uint32_t-with-FeatureW.patch
  0049-i386-Don-t-override-cpu-options-on-.patch</changelog>
<changelog author="brogers@suse.com" date="1491393600">- Updated to v2.9.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped:
  0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch
  0048-i386-Replace-uint32_t-with-FeatureW.patch
  0049-i386-Don-t-override-cpu-options-on-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
- Made miscellaneous spec file refinements</changelog>
<changelog author="brogers@suse.com" date="1491912000">- Updated to v2.9.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches renamed:
  0041-ARM-KVM-Enable-in-kernel-timers-wit.patch -&gt; 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch
  0042-string-input-visitor-Fix-uint64-par.patch -&gt; 0041-string-input-visitor-Fix-uint64-par.patch
  0043-test-string-input-visitor-Add-int-t.patch -&gt; 0042-test-string-input-visitor-Add-int-t.patch
  0044-test-string-input-visitor-Add-uint6.patch -&gt; 0043-test-string-input-visitor-Add-uint6.patch
  0045-tests-Add-QOM-property-unit-tests.patch -&gt; 0044-tests-Add-QOM-property-unit-tests.patch
  0046-tests-Add-scsi-disk-test.patch -&gt; 0045-tests-Add-scsi-disk-test.patch
  * Patches added:
  0046-RFC-update-Linux-headers-from-irqs-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1491998400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0048-input-Add-trace-event-for-empty-key.patch</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0055-9pfs-local-forbid-client-access-to-.patch</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0072-slirp-check-len-against-dhcp-option.patch</changelog>
<changelog author="brogers@suse.com" date="1502798400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch</changelog>

</package>
<package pkgid="aaabe91a1da47daa0e1b456d8c7e1ec2729bdbacde63e5b50400c5c0953a7c7a" name="qemu-linux-user" arch="src">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1490702400">- Updated to v2.9.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped:
  0047-linux-user-exclude-cpu-model-code-w.patch
  * Patches added:
  0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1490875200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0048-i386-Replace-uint32_t-with-FeatureW.patch
  0049-i386-Don-t-override-cpu-options-on-.patch</changelog>
<changelog author="brogers@suse.com" date="1491393600">- Updated to v2.9.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped:
  0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch
  0048-i386-Replace-uint32_t-with-FeatureW.patch
  0049-i386-Don-t-override-cpu-options-on-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
- Made miscellaneous spec file refinements</changelog>
<changelog author="brogers@suse.com" date="1491912000">- Updated to v2.9.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches renamed:
  0041-ARM-KVM-Enable-in-kernel-timers-wit.patch -&gt; 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch
  0042-string-input-visitor-Fix-uint64-par.patch -&gt; 0041-string-input-visitor-Fix-uint64-par.patch
  0043-test-string-input-visitor-Add-int-t.patch -&gt; 0042-test-string-input-visitor-Add-int-t.patch
  0044-test-string-input-visitor-Add-uint6.patch -&gt; 0043-test-string-input-visitor-Add-uint6.patch
  0045-tests-Add-QOM-property-unit-tests.patch -&gt; 0044-tests-Add-QOM-property-unit-tests.patch
  0046-tests-Add-scsi-disk-test.patch -&gt; 0045-tests-Add-scsi-disk-test.patch
  * Patches added:
  0046-RFC-update-Linux-headers-from-irqs-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1491998400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0048-input-Add-trace-event-for-empty-key.patch</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0055-9pfs-local-forbid-client-access-to-.patch</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0072-slirp-check-len-against-dhcp-option.patch</changelog>
<changelog author="brogers@suse.com" date="1502798400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3
  * Patches added:
  0061-io-monitor-encoutput-buffer-size-fr.patch
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch</changelog>

</package>
<package pkgid="cf62209cd9a66bc4df6ccf98afe66a7c723686f77aef3dfa66c18f013a84efef" name="qemu-linux-user" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.1"/>

<changelog author="brogers@suse.com" date="1488369600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.8
  * Patches added:
  0057-display-virtio-gpu-3d-check-virgl-c.patch
  0058-watchdog-6300esb-add-exit-function.patch
  0059-virtio-gpu-3d-fix-memory-leak-in-re.patch
  0060-virtio-gpu-fix-memory-leak-in-resou.patch
  0061-virtio-fix-vq-inuse-recalc-after-mi.patch
  0062-audio-es1370-add-exit-function.patch
  0063-audio-ac97-add-exit-function.patch
  0064-megasas-fix-guest-triggered-memory-.patch
  0065-cirrus-handle-negative-pitch-in-cir.patch
  0066-cirrus-fix-blit-address-mask-handli.patch
  0067-cirrus-fix-oob-access-issue-CVE-201.patch
  0068-usb-ccid-check-ccid-apdu-length.patch
  0069-sd-sdhci-check-data-length-during-d.patch
  0070-virtio-gpu-fix-resource-leak-in-vir.patch
  0071-cirrus-fix-patterncopy-checks.patch
  0072-cirrus-add-blit_is_unsafe-call-to-c.patch</changelog>
<changelog author="brogers@suse.com" date="1488369601">-  Buildignore for the global gcc-PIE, as this package enables PIE
  on its own and has troubles if all use it. (meissner@suse.com)</changelog>
<changelog author="brogers@suse.com" date="1490011200">- Updated to v2.9.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped (included in upstream source archive):
  0035-net-imx-limit-buffer-descriptor-cou.patch
  0045-virtio-gpu-call-cleanup-mapping-fun.patch
  0051-virtio-gpu-fix-information-leak-in-.patch
  0052-display-cirrus-ignore-source-pitch-.patch
  0053-s390x-kvm-fix-small-race-reboot-vs..patch
  0054-target-s390x-use-qemu-cpu-model-in-.patch
  0056-tests-check-path-to-avoid-a-failing.patch
  0057-display-virtio-gpu-3d-check-virgl-c.patch
  0058-watchdog-6300esb-add-exit-function.patch
  0059-virtio-gpu-3d-fix-memory-leak-in-re.patch
  0060-virtio-gpu-fix-memory-leak-in-resou.patch
  0061-virtio-fix-vq-inuse-recalc-after-mi.patch
  0062-audio-es1370-add-exit-function.patch
  0063-audio-ac97-add-exit-function.patch
  0064-megasas-fix-guest-triggered-memory-.patch
  0065-cirrus-handle-negative-pitch-in-cir.patch
  0066-cirrus-fix-blit-address-mask-handli.patch
  0067-cirrus-fix-oob-access-issue-CVE-201.patch
  0068-usb-ccid-check-ccid-apdu-length.patch
  0069-sd-sdhci-check-data-length-during-d.patch
  0070-virtio-gpu-fix-resource-leak-in-vir.patch
  0071-cirrus-fix-patterncopy-checks.patch
  0072-cirrus-add-blit_is_unsafe-call-to-c.patch
  * Patches renamed:
  0036-roms-Makefile-pass-a-packaging-time.patch -&gt; 0035-roms-Makefile-pass-a-packaging-time.patch
  0037-Raise-soft-address-space-limit-to-h.patch -&gt; 0036-Raise-soft-address-space-limit-to-h.patch
  0038-increase-x86_64-physical-bits-to-42.patch -&gt; 0037-increase-x86_64-physical-bits-to-42.patch
  0039-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -&gt; 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch
  0040-i8254-Fix-migration-from-SLE11-SP2.patch -&gt; 0039-i8254-Fix-migration-from-SLE11-SP2.patch
  0041-acpi_piix4-Fix-migration-from-SLE11.patch -&gt; 0040-acpi_piix4-Fix-migration-from-SLE11.patch
  0042-Fix-tigervnc-long-press-issue.patch -&gt; 0041-Fix-tigervnc-long-press-issue.patch
  0043-fix-xen-hvm-direct-kernel-boot.patch -&gt; 0042-fix-xen-hvm-direct-kernel-boot.patch
  0044-ARM-KVM-Enable-in-kernel-timers-wit.patch -&gt; 0043-ARM-KVM-Enable-in-kernel-timers-wit.patch
  0046-string-input-visitor-Fix-uint64-par.patch -&gt; 0044-string-input-visitor-Fix-uint64-par.patch
  0047-test-string-input-visitor-Add-int-t.patch -&gt; 0045-test-string-input-visitor-Add-int-t.patch
  0048-test-string-input-visitor-Add-uint6.patch -&gt; 0046-test-string-input-visitor-Add-uint6.patch
  0049-tests-Add-QOM-property-unit-tests.patch -&gt; 0047-tests-Add-QOM-property-unit-tests.patch
  0050-tests-Add-scsi-disk-test.patch -&gt; 0048-tests-Add-scsi-disk-test.patch
  0055-linux-user-exclude-cpu-model-code-w.patch -&gt; 0049-linux-user-exclude-cpu-model-code-w.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1490097600">- Updated to v2.9.0-rc1: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped (no longer needed based on what we now build for):
  0024-virtfs-proxy-helper-Provide-__u64-f.patch
  * Patches dropped (included in upstream source archive):
  0034-dma-rc4030-limit-interval-timer-rel.patch
  * Patches renamed:
  0025-configure-Enable-PIE-for-ppc-and-pp.patch -&gt; 0024-configure-Enable-PIE-for-ppc-and-pp.patch
  0026-AIO-Reduce-number-of-threads-for-32.patch -&gt; 0025-AIO-Reduce-number-of-threads-for-32.patch
  0027-dictzip-Fix-on-big-endian-systems.patch -&gt; 0026-dictzip-Fix-on-big-endian-systems.patch
  0028-xen_disk-Add-suse-specific-flush-di.patch -&gt; 0027-xen_disk-Add-suse-specific-flush-di.patch
  0029-qemu-bridge-helper-reduce-security-.patch -&gt; 0028-qemu-bridge-helper-reduce-security-.patch
  0030-qemu-binfmt-conf-use-qemu-ARCH-binf.patch -&gt; 0029-qemu-binfmt-conf-use-qemu-ARCH-binf.patch
  0031-configure-Fix-detection-of-seccomp-.patch -&gt; 0030-configure-Fix-detection-of-seccomp-.patch
  0032-linux-user-properly-test-for-infini.patch -&gt; 0031-linux-user-properly-test-for-infini.patch
  0033-linux-user-remove-all-traces-of-qem.patch -&gt; 0032-linux-user-remove-all-traces-of-qem.patch
  0035-roms-Makefile-pass-a-packaging-time.patch -&gt; 0033-roms-Makefile-pass-a-packaging-time.patch
  0036-Raise-soft-address-space-limit-to-h.patch -&gt; 0034-Raise-soft-address-space-limit-to-h.patch
  0037-increase-x86_64-physical-bits-to-42.patch -&gt; 0035-increase-x86_64-physical-bits-to-42.patch
  0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -&gt; 0036-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch
  0039-i8254-Fix-migration-from-SLE11-SP2.patch -&gt; 0037-i8254-Fix-migration-from-SLE11-SP2.patch
  0040-acpi_piix4-Fix-migration-from-SLE11.patch -&gt; 0038-acpi_piix4-Fix-migration-from-SLE11.patch
  0041-Fix-tigervnc-long-press-issue.patch -&gt; 0039-Fix-tigervnc-long-press-issue.patch
  0042-fix-xen-hvm-direct-kernel-boot.patch -&gt; 0040-fix-xen-hvm-direct-kernel-boot.patch
  0043-ARM-KVM-Enable-in-kernel-timers-wit.patch -&gt; 0041-ARM-KVM-Enable-in-kernel-timers-wit.patch
  0044-string-input-visitor-Fix-uint64-par.patch -&gt; 0042-string-input-visitor-Fix-uint64-par.patch
  0045-test-string-input-visitor-Add-int-t.patch -&gt; 0043-test-string-input-visitor-Add-int-t.patch
  0046-test-string-input-visitor-Add-uint6.patch -&gt; 0044-test-string-input-visitor-Add-uint6.patch
  0047-tests-Add-QOM-property-unit-tests.patch -&gt; 0045-tests-Add-QOM-property-unit-tests.patch
  0048-tests-Add-scsi-disk-test.patch -&gt; 0046-tests-Add-scsi-disk-test.patch
  0049-linux-user-exclude-cpu-model-code-w.patch -&gt; 0047-linux-user-exclude-cpu-model-code-w.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1490702400">- Updated to v2.9.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped:
  0047-linux-user-exclude-cpu-model-code-w.patch
  * Patches added:
  0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1490875200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0048-i386-Replace-uint32_t-with-FeatureW.patch
  0049-i386-Don-t-override-cpu-options-on-.patch</changelog>
<changelog author="brogers@suse.com" date="1491393600">- Updated to v2.9.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped:
  0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch
  0048-i386-Replace-uint32_t-with-FeatureW.patch
  0049-i386-Don-t-override-cpu-options-on-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
- Made miscellaneous spec file refinements</changelog>
<changelog author="brogers@suse.com" date="1491912000">- Updated to v2.9.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches renamed:
  0041-ARM-KVM-Enable-in-kernel-timers-wit.patch -&gt; 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch
  0042-string-input-visitor-Fix-uint64-par.patch -&gt; 0041-string-input-visitor-Fix-uint64-par.patch
  0043-test-string-input-visitor-Add-int-t.patch -&gt; 0042-test-string-input-visitor-Add-int-t.patch
  0044-test-string-input-visitor-Add-uint6.patch -&gt; 0043-test-string-input-visitor-Add-uint6.patch
  0045-tests-Add-QOM-property-unit-tests.patch -&gt; 0044-tests-Add-QOM-property-unit-tests.patch
  0046-tests-Add-scsi-disk-test.patch -&gt; 0045-tests-Add-scsi-disk-test.patch
  * Patches added:
  0046-RFC-update-Linux-headers-from-irqs-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1491998400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0048-input-Add-trace-event-for-empty-key.patch</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0055-9pfs-local-forbid-client-access-to-.patch</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0072-slirp-check-len-against-dhcp-option.patch</changelog>
<changelog author="brogers@suse.com" date="1502798400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch</changelog>

</package>
<package pkgid="01b3db417fbf71a8577d323b3f4778e0c7e6eea3d2b4dcdbb5e29261eb7d0ac8" name="qemu-linux-user" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1490702400">- Updated to v2.9.0-rc2: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped:
  0047-linux-user-exclude-cpu-model-code-w.patch
  * Patches added:
  0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1490875200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0048-i386-Replace-uint32_t-with-FeatureW.patch
  0049-i386-Don-t-override-cpu-options-on-.patch</changelog>
<changelog author="brogers@suse.com" date="1491393600">- Updated to v2.9.0-rc3: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches dropped:
  0047-hw-intc-arm_gicv3_kvm-Check-KVM_DEV.patch
  0048-i386-Replace-uint32_t-with-FeatureW.patch
  0049-i386-Don-t-override-cpu-options-on-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
- Made miscellaneous spec file refinements</changelog>
<changelog author="brogers@suse.com" date="1491912000">- Updated to v2.9.0-rc4: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Patches renamed:
  0041-ARM-KVM-Enable-in-kernel-timers-wit.patch -&gt; 0047-ARM-KVM-Enable-in-kernel-timers-wit.patch
  0042-string-input-visitor-Fix-uint64-par.patch -&gt; 0041-string-input-visitor-Fix-uint64-par.patch
  0043-test-string-input-visitor-Add-int-t.patch -&gt; 0042-test-string-input-visitor-Add-int-t.patch
  0044-test-string-input-visitor-Add-uint6.patch -&gt; 0043-test-string-input-visitor-Add-uint6.patch
  0045-tests-Add-QOM-property-unit-tests.patch -&gt; 0044-tests-Add-QOM-property-unit-tests.patch
  0046-tests-Add-scsi-disk-test.patch -&gt; 0045-tests-Add-scsi-disk-test.patch
  * Patches added:
  0046-RFC-update-Linux-headers-from-irqs-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1491998400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0048-input-Add-trace-event-for-empty-key.patch</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0055-9pfs-local-forbid-client-access-to-.patch</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0072-slirp-check-len-against-dhcp-option.patch</changelog>
<changelog author="brogers@suse.com" date="1502798400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
  * Patches added:
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3
  * Patches added:
  0061-io-monitor-encoutput-buffer-size-fr.patch
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch</changelog>

</package>
<package pkgid="53e3ffdfdca76abae27381fb0fce62494218aeb39272138afe5bb3ba3c76ae6a" name="qemu-ppc" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="4195f90647b7b43b7246134c52a9bf2a41a070bfa819dd30a103dc2a1ea6ebb5" name="qemu-ppc" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="70fee55b19ae63b4db8d5f4eed523e812cb09d84d5927e4d0e9b71f35a084c2f" name="qemu-s390" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="ca914b30f3ec56d37e5b75ab14aa25708ba258398da756df983c1726e95917e9" name="qemu-s390" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="0f70e5b339243138b0068cb7242130f3af1680fc7309f4e9f00fb67df77ac37e" name="qemu-seabios" arch="noarch">
    <version epoch="0" ver="1.10.2" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="297286dc0ead71673b7d48c316d08d6abecb2c23be3f66f03b2d3b88fe9253bc" name="qemu-seabios" arch="noarch">
    <version epoch="0" ver="1.10.2" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="dfbdf516488b350a75a90995ff846cc024d8af2f0238400b98e0a5200f79f5d0" name="qemu-sgabios" arch="noarch">
    <version epoch="0" ver="8" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="303d0b574879f171f35b934683c849aca2e3cbe0674a20b8040ae69930fc45ea" name="qemu-sgabios" arch="noarch">
    <version epoch="0" ver="8" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="2ccf217318a04cfade90ffcf609467bb67f2df7889e376d10b49306f76d51a35" name="qemu-testsuite" arch="src">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="bc8b3d399a83c8f660d1988f6d4a3b59b31a64fa9e6e2960907c9d277a650b18" name="qemu-testsuite" arch="src">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="dd4953114504e723d6c90ae9a6bd2c6e3b410d476a71b6c117b2fbf2690b24a7" name="qemu-testsuite" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="634ed25d798ac93548d29cf446f4c46e8a402700435938e38839500b5b58b113" name="qemu-testsuite" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="53a71ec965c86761cbc3a753b0a23ac44035398e4013d8f61fca6a8c4982df8f" name="qemu-tools" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="5d4db7bc7a7319a97a8ebf3587bb4aabf452d2aa091b8314dc1d158989985785" name="qemu-tools" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="3b60f2f4ad7c771d9826a3f4f02227f9b99eb92ec706aa90a874d2dbf297957e" name="qemu-vgabios" arch="noarch">
    <version epoch="0" ver="1.10.2" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="5365a0d4f3c83f0b8b9cb071e2b33f00858e11fdfd7554b4a7a263abd1ddd396" name="qemu-vgabios" arch="noarch">
    <version epoch="0" ver="1.10.2" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="5555dd901fd682162ab9daaaf854524f68452076144dc56b9bc754db967fc033" name="qemu-x86" arch="x86_64">
    <version epoch="0" ver="2.9.0" rel="32.4"/>

<changelog author="brogers@suse.com" date="1491998400">- Add empty keyboard queue tracepoint to help openQA testing work
  better (bsc#1031692)
  0048-input-Add-trace-event-for-empty-key.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492516800">- Updated to v2.9.0-rc5: See http://wiki.qemu-project.org/ChangeLog/2.9
  * Includes fix for CVE-2017-7471, a virtfs security issue.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1492689600">- Updated to v2.9.0: See http://wiki.qemu-project.org/ChangeLog/2.9
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1493294400">- Fix issue in shipping qemu v2.9.0, where pci-passthrough for Xen
  HVM guests got broken (bsc#1034131)
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
- Include experimental, unsupported feature to assist in some
  performance analysis work.
  0050-i386-Allow-cpuid-bit-override.patch</changelog>
<changelog author="brogers@suse.com" date="1493899200">- Fix building packages for some older distros.
- Further refine our handling of building firmware (or not) for
  the various arch's and distro versions we build for. Note that
  if we don't build x86 firmware, (eg: x86 Leap 42.1) the upstream
  binary blobs are used, which may have migration incompatibilities
  with previous versions of qemu provided.</changelog>
<changelog author="brogers@suse.com" date="1494504000">- Address various security/stability issues
  * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334)
  0051-input-limit-kbd-queue-depth.patch
  * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242)
  0052-audio-release-capture-buffers.patch
  * Fix OOB access in megasas device emulation (CVE-2017-8380
  bsc#1037336)
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  * Fix DOS in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211)
  0054-vmw_pvscsi-check-message-ring-page-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>

</package>
<package pkgid="8e7a65aa2245bb9daa962a6f1c2302290e128b6babc0bcd6125126d2120f1513" name="qemu-x86" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="35.1"/>

<changelog author="brogers@suse.com" date="1495454400">- Protect access to metadata in virtio-9pfs (CVE-2017-7493 bsc#1039495)
  0055-9pfs-local-forbid-client-access-to-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1495454401">- Fixes for gcc7 compatability (bsc#1040228) (in behalf of Liang Yan)
  0056-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1496750400">- Backport ipxe to support FirstBurstLength (bsc#1040476)
  ipxe-iscsi-Always-send-FirstBurstLength-parameter.patch</changelog>
<changelog author="brogers@suse.com" date="1497960000">- Use most recent compiler to build size-critical firmware, instead
  of hard-coding gcc6 for all target versions (bsc#1043390)
  * A few upstream ipxe patches were needed for gcc7 compatibility:
  ipxe-ath-Add-missing-break-statements.patch
  ipxe-mucurses-Fix-erroneous-__nonnull-attribute.patch
- Add --no-renames to the git format-patch command in the git
  workflow script for better patch compatibility
- Address various security/stability issues
  * Fix potential privilege escalation in virtfs (CVE-2016-9602
  bsc#1020427)
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296)
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808)
  0063-nbd-Fully-initialize-client-in-case.patch
  * Fix regression introduced by recent virtfs security fixes (bsc#1045035)
  0064-9pfs-local-remove-use-correct-path-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1498478400">- Fixed stuck state during usb keyboard reset (bsc#1044936)
  0065-hid-Reset-kbd-modifiers-on-reset.patch
- Fixed keyboard events getting lost (bsc#1044936)
  0066-input-Decrement-queue-count-on-kbd-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1498737600">- Remove build dependency package iasl used for seabios</changelog>
<changelog author="brogers@suse.com" date="1500379200">- Fix migration with xhci (bsc#1048296)
  0067-xhci-only-update-dequeue-ptr-on-com.patch
- Increase VNC delay to fix missing keyboard input events (bsc#1031692)
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1500984000">- Fix support docs to indicate ARM64 is now fully L3 supported in
  SLES 12 SP3. Apply a few additional clarifications in the support
  docs. (bsc#1050268)
- Adjust to libvdeplug-devel package naming changes.</changelog>
<changelog author="brogers@suse.com" date="1500984001">- Address various security/stability issues
  * Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  * Fix DOS from stack overflow in debug messages of usb redirection
  support (bsc#1047674 CVE-2017-10806)
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
  0072-slirp-check-len-against-dhcp-option.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="brogers@suse.com" date="1502107200">- Fixed a few more inaccuracies in the support docs.</changelog>
<changelog author="lyan@suse.com" date="1502280000">- Pre-add group kvm for qemu-tools (bsc#1011144)</changelog>
<changelog author="brogers@suse.com" date="1502798400">- The recent security fix for CVE-2017-11334 adversely affects Xen.
  Include two additional patches to make sure Xen is going to be OK.
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="schwab@suse.de" date="1502884800">- Prerequire shadow for groupadd</changelog>
<changelog author="brogers@suse.com" date="1503057600">- Postrequire acl for setfacl</changelog>
<changelog author="schwab@suse.de" date="1503316800">- Remove redundant prerequire for pwdutils</changelog>
<changelog author="brogers@suse.com" date="1503576000">- Fix package build failure as of glibc v2.26 update in Factory
  (boo#1055587)
  0075-Replace-struct-ucontext-with-uconte.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9</changelog>
<changelog author="lyan@suse.com" date="1504872000">- Updated to v2.9.1, a bug-fix-only release
  * Updated version carries fixes for the following reported issues:
  CVE-2017-13711 bsc#1056291
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-
  SP3
  * Patches dropped:
  0049-ACPI-don-t-call-acpi_pcihp_device_p.patch
  0051-input-limit-kbd-queue-depth.patch
  0052-audio-release-capture-buffers.patch
  0053-scsi-avoid-an-off-by-one-error-in-m.patch
  0054-vmw_pvscsi-check-message-ring-page-.patch
  0055-9pfs-local-forbid-client-access-to-.patch
  0059-Hacks-for-building-on-gcc-7-Fedora-.patch
  0060-9pfs-local-fix-unlink-of-alien-file.patch
  0061-megasas-do-not-read-DCMD-opcode-mor.patch
  0063-nbd-Fully-initialize-client-in-case.patch
  0064-9pfs-local-remove-use-correct-path-.patch
  0065-hid-Reset-kbd-modifiers-on-reset.patch
  0066-input-Decrement-queue-count-on-kbd-.patch
  0067-xhci-only-update-dequeue-ptr-on-com.patch
  0068-vnc-Set-default-kbd-delay-to-10ms.patch
  0069-qemu-nbd-Ignore-SIGPIPE.patch
  0070-usb-redir-fix-stack-overflow-in-usb.patch
  0071-exec-use-qemu_ram_ptr_length-to-acc.patch
  0073-xen-mapcache-store-dma-information-.patch
  0074-exec-Add-lock-parameter-to-qemu_ram.patch
  * Patches renamed:
  0050-i386-Allow-cpuid-bit-override.patch
  - &gt; 0049-i386-Allow-cpuid-bit-override.patch
  0056-jazz_led-fix-bad-snprintf.patch
  - &gt; 0050-jazz_led-fix-bad-snprintf.patch
  0057-slirp-smb-Replace-constant-strings-.patch
  - &gt; 0051-slirp-smb-Replace-constant-strings-.patch
  0058-altera_timer-fix-incorrect-memset.patch
  - &gt; 0052-altera_timer-fix-incorrect-memset.patch
  0062-megasas-always-store-SCSIRequest-in.patch
  - &gt; 0053-megasas-always-store-SCSIRequest-in.patch
  0072-slirp-check-len-against-dhcp-option.patch
  - &gt; 0054-slirp-check-len-against-dhcp-option.patch
  0075-Replace-struct-ucontext-with-uconte.patch
  - &gt; 0055-Replace-struct-ucontext-with-uconte.patch</changelog>
<changelog author="brogers@suse.com" date="1505995200">- Fix case of not being able to build from rpm sources due to
  undefined macro (boo#1057966)
- Fix typo in supported.s390.txt</changelog>
<changelog author="fli@suse.com" date="1507723200">- Address various security issues
  * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378)
  0056-xen-disk-don-t-leak-stack-data-via-.patch
  * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724)
  0057-IDE-Do-not-flush-empty-CDROM-drives.patch
  0058-IDE-test-flush-on-empty-CDROM.patch
  * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585)
  0059-multiboot-validate-multiboot-header.patch
  * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334)
  0060-vga-stop-passing-pointers-to-vga_dr.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>
<changelog author="brogers@suse.com" date="1508414400">- Add announcement in support docs about qed storage format no
  longer being supported in next major SLE release (SLE15)
  (fate#324200)
- Address various security/stability issues
  * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
  0061-io-monitor-encoutput-buffer-size-fr.patch
  * Fix OOB access in cirrus vga device emulation (CVE-2017-15289
  bsc#1063122)
  0062-cirrus-fix-oob-access-in-mode4and5-.patch
  * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
  0063-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP3</changelog>

</package>
<package pkgid="af69b3e90f5dc0c0561c2d1df11a72012d1d7487ccf200beac5d6a7c189bacb6" name="rados-objclass-devel" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="44f1dd1717f1532f34f74fa1ffa31ca67536c15d19b9be5120f5900a67fcfefa" name="rbd-fuse" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="14c0818f68a09a44c8b43ef5a712bd887234464582c99b46dc36e6a85db5ec0b" name="rbd-mirror" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="8190bccd3491cb6fd3f2bed91a9693382f48340ec20b43a7c1ee4d639e751aaa" name="rbd-nbd" arch="x86_64">
    <version epoch="0" ver="12.1.4+git.1502953626.155adb5253" rel="3.3"/>

<changelog author="ncutler@suse.com" date="1498219200">- Update to version 12.0.3+git.1498202776.b806032985:
  + Integration testing changes:
  * add DeepSea integration suite test definitions for teuthology
  * re-enable several RGW tests that upstream only runs on Ubuntu
  + ceph_ver_hack.sh: use git describe --match
  + ReplicatedPG: add CHECKSUM-&gt;CMPEXT req translation</changelog>
<changelog author="ncutler@suse.com" date="1498305600">- Update to version 12.1.0+git.1498309403.f4fc02fff4:
  + upstream 12.1.0 release; for details, see
    http://ceph.com/releases/v12-1-0-luminous-rc-released/
  + revert several pre-release commits that are no longer needed
    because the issues have been fixed upstream in the meantime
  + build/ops: rpm: sane packaging of %{_docdir}/ceph directory</changelog>
<changelog author="ncutler@suse.com" date="1498478400">- Update to version 12.1.0+git.1498478524.117b171715:
  + include 12.1.0 tag to make "ceph --version" happy
  + tests: drop hadoop-s3a tests</changelog>
<changelog author="ncutler@suse.com" date="1498478401">- spec file:
  + removed BR libatomic_ops-devel as upstream replaced it with std:atomic
  + removed defattr as they are no longer needed on sle12 and newer</changelog>
<changelog author="ncutler@suse.com" date="1498651200">- Update to version 12.1.0+git.1498654198.20d6a47cc9:
  + build/ops: rpm: put mgr python build dependencies in make_check bcond
    N.B. this effectively eliminates the following build dependencies:
    python-Babel python-beautifulsoup4 python-CherryPy python-coverage
    python-flup python-Genshi python-html5lib python-logutils python-nose
    python-Paste python-PasteDeploy python-PasteDeploy python-pecan
    python-pyquery python-singledispatch python-waitress python-WebOb
    python-WebTest python-Werkzeug python-WSGIProxy2 pytyhon-python-openid</changelog>
<changelog author="ncutler@suse.com" date="1499083200">- Update to version 12.1.0+git.1499090920.2c11b88d14:
  + With this update, Ceph no longer autocreates a pool called "rbd" with id 0
    Deployment tools must take this into account!
  + systemd: Add explicit Before=ceph.target (bsc#1042973)</changelog>
<changelog author="ncutler@suse.com" date="1500292800">- Update to version 12.1.0+git.1500284183.1ed97736ab:
  + Spec file changes:
  * bump epoch (not relevant for SUSE)
  * add socat buildrequires
  * libcephfs2 now obsoletes libcephfs1 (bsc#1047020)
  * HAVE_BABELTRACE option renamed to WITH_BABELTRACE
  * fix a regression in ceph-base %postun scriptlet
  + Selected other changes:
  * Revert "msg/async: increase worker reference with local listen table enabled backend"
  * build: build erasure-code isa lib without versions
  * ceph-disk/ceph_disk/main.py: Replace ST_ISBLK() test by is_diskdevice()
  * ceph.in: filter out audit from ceph -w
  * common,config: OPT_FLOAT and OPT_DOUBLE output format in config show
  * common/Timer: do not add event if already shutdown
  * compressor/zlib: remove g_ceph_context/g_conf from compressor plugin
  * core: make the conversion from wire error to host OS work
  * core:" Stringify needs access to &lt;&lt; before reference" src/include/stringify.h
  * crush/CrushWrapper: make get_immediate_parent[_id] ignore per-class shadow hierarchy
  * doc/mgr/dashboard: update dashboard docs to reflect new defaults
  * doc/rados.8: add offset option for put command
  * doc: fix link for ceph-mgr cephx authorization
  * doc: update intro, quick start docs
  * isa-l: update isa-l to v2.18
  * librbd: fail IO request when exclusive lock cannot be obtained
  * mgr,librados: service map
  * mgr,mon: debug init and mgrdigest subscriptions
  * mgr,mon: enable/disable mgr modules via 'ceph mgr module ...' commands
  * mgr/ClusterState: do not mangle PGMap outside of Incremental
  * mgr/restful: bind to :: and update docs
  * mgr: Zabbix monitoring module
  * mon,crush: create crush rules using device classes for replicated and ec pools via cli
  * mon/MgrStatMonitor: do not crash on luminous dev version upgrades
  * mon/MonClient: respect the priority in SRV RR
  * mon/Monitor: recreate mon session if features changed
  * mon/OSDMonitor: do not allow crush device classes until luminous
  * mon/OSDMonitor: guard 'osd crush set-device-class'
  * mon/mgr: add detail error infomation
  * mon: Fix status output warning for mon_warn_osd_usage_min_max_delta
  * mon: add support public_bind_addr option
  * mon: collect mon metdata as part of the election
  * mon: debug session feature tracking
  * mon: do crushtool test with fork and timeout, but w/o exec of crushtool
  * mon: fix hang on deprecated/removed 'pg set_\*full_ratio' commands
  * mon: include device class in tree view; hide shadow hierarchy
  * mon: maintain the "cluster" PerfCounters when using ceph-mgr
  * mon: revamp health check/warning system
  * msg/async: increase worker reference with local listen table enabled backend
  * msg/async: make recv_stamp more precise
  * msg: QueueStrategy::wait() joins all threads
  * msg: make listen backlog an option, increase from 128 to 512
  * os/blueStore: Failure retry for opening file
  * os/bluestore/BlueFS: clean up log_writer aios from compaction
  * os/bluestore/BlueFS: clear current log entrys before dump all fnode
  * os/bluestore/KernelDevice: batch aio submit
  * os/bluestore: Make BitmapFreelistManager kv itereator short lived
  * os/bluestore: cap rocksdb cache size
  * os/bluestore: clear up redundant size assignment in KernelDevice
  * os/bluestore: differ default cache size for hdd/ssd backends
  * os/bluestore: fix deferred_aio deadlock
  * os/bluestore: move object exist in assign nid
  * os/bluestore: only submit deferred if there is any
  * os/bluestore: reduce some overhead for _do_clone_range() and _do_remove()
  * os/bluestore: use bufferlist functions whenever possible
  * os/filestore/FileJournal: FileJournal::open() close journal file before return error
  * os/filestore/HashIndex: randomize split threshold by a configurable amount
  * os/filestore: call committed_thru when no journal entries are replayed
  * os/filestore: do not free event if not added
  * os/filestore: queue ondisk completion before apply work
  * os/filestore: require experimental flag for btrfs
  * osd/OSD: auto class on osd start up
  * osd/PrimaryLogPG solve cache tier osd high memory consumption
  * osd/ReplicatedBackend: reset thread heartbeat after every omap entry
  * osd/filestore: Revert "os/filestore: move ondisk in front
  * osd: Check for and automatically repair object info soid during scrub
  * osd: Preserve OSDOp information for historic ops
  * osd: check queue_transaction return value
  * osd: clear_queued_recovery() in on_shutdown()
  * osd: compact osd feature
  * pybind/mgr/dashboard: bind to :: by default
  * pybind/mgr/dashboard: fix get kernel_version error
  * rbd-mirror: ignore permission errors on rbd_mirroring object
  * rbd: do not attempt to load key if auth is disabled
  * rgw: fix compilation with cryptopp
  * rgw,test: fix rgw placement rule pool config option
  * rgw/rgw_frontend.h: Return negative value for empty uid in RGWLoadGenFrontend::init()
  * rgw/rgw_rados: Remove duplicate calls in RGWRados::finalize()
  * rgw: /info claims we do support Swift's accounts ACLs
  * rgw: Correcting the condition in ceph_assert while parsing an AWS Principal
  * rgw: Do not fetch bucket stats by default upon bucket listing
  * rgw: Fix a bug that multipart upload may exceed the quota
  * rgw: Initialize pointer fields
  * rgw: fix leaks with incomplete multiparts
  * rgw: fix memory leak in copy_obj_to_remote_dest
  * rgw: fix not initialized vars which cause rgw crash with ec data pool
  * rgw: fix radosgw-admin data sync run crash
  * rgw: fix s3 object uploads with chunked transfers and v4 signatures
  * rgw: fix the subdir without slash of s3 website url
  * rgw: fix zone did't update realm_id when added to zonegroup
  * rgw: log_meta only for more than one zone
  * rgw: rgw_file skip policy read for virtual components
  * rgw: using RGW_OBJ_NS_MULTIPART in check_bad_index_multipart
  * rgw: verify md5 in post obj
  * rgw_file: add compression interop to RGW NFS
  * rgw?fix s3 aws v2 signature priority between header['X-Amz-Date'] and header['Date']
  * vstart.sh: bind restful, dashboard to ::, not 127.0.0.1
  * vstart: add --rgw_compression to set rgw compression plugin
  * vstart: allow to start multiple radosgw when RGW=x</changelog>
<changelog author="ncutler@suse.com" date="1500292801">- Update to version 12.1.0+git.1500295948.39d2e5f424:
  + spec file:
  * socat build dependency only for make check
  * fix typo WTIH_BABELTRACE</changelog>
<changelog author="ncutler@suse.com" date="1500465600">- Update to version 12.1.1+git.1500447879.e5aac115d7:
  + upstream 12.1.1 (release candidate)
  + Other notable changes:
  * build/ops: rpm: fix typo WTIH_BABELTRACE (pr#16366)
  * build/ops: rpm: put mgr python build dependencies in make_check bcond
    (pr#15940)
  * ceph-disk: support osd new (pr#15432)
  * ceph: allow '-' with -i and -o for stdin/stdout (pr#16359)
  * cls/rbd: trash_list should be iterable (pr#16372)
  * doc: update quick start to add a note for mgr create command for luminous+
    builds (pr#16350)
  * libradosstriper: fix format injection vulnerability (pr#15674)
  * mgr/dashboard: add OSD list view (pr#16373)
  * mon, osd: misc fixes (pr#16283)
  * mon/MDSMonitor: fix segv when multiple MDSs raise same alert (pr#16302)
  * mon/MgrMonitor: fix standby addition to mgrmap (pr#16397)
  * mon/MgrMonitor: only induce mgr epoch shortly after mkfs (pr#16356)
  * mon: Fix output text and doc (pr#16367)
  * mon: add force-create-pg back (pr#16353)
  * mon: skip crush smoke test when running under valgrind (pr#16346)
  * os/bluestore: use reference to avoid string copy (pr#16364)
  * osd: combine conditional statements (pr#16391)
  * osd: restart boot process if waiting for luminous mons (pr#16341)
  * rgw: S3 lifecycle now supports expiration date (pr#15807)
  * rgw: acl grants num limit (pr#16291)
  * rgw: delete object in error path (pr#16324)
  * rgw: drop unused find_replacement() and some function docs (pr#16386)
  * rgw: fix err when copy object in bucket with specified placement rule
    (pr#15837)
  * rgw: fix potential null pointer dereference in rgw_admin (pr#15667)
  * rgw: raise debug level of RGWPostObj_ObjStore_S3::get_policy (pr#16203)
  * rgw: req xml params size limitation error msg (pr#16310)
  * rgw_file:  add service map registration (pr#16251)
  * test,rgw: fix rgw placement rule pool config option (pr#16380)
  * test/fio: print all perfcounters rather than objectstore itself (pr#16339)</changelog>
<changelog author="tserong@suse.com" date="1501243200">- Update to version 12.1.1+git.1501231943.67577225bc
  + Notable changes:
  * rgw_file: properly &amp; |'d flags (bsc#1047977)</changelog>
<changelog author="ncutler@suse.com" date="1501502400">- Update to version 12.1.1+git.1501501507.6dd9e8fd8c:
  + update to latest upstream master (fa70335db25f2b661b329d5d8f37039b77f2d1ae)
  + spec file:
  * build/ops: rpm: Drop legacy libxio support (pr#16449)
  + Other notable changes:
  * osd: moved OpFinisher logic from OSDOp to OpContext (pr#16617)</changelog>
<changelog author="ncutler@suse.com" date="1501675200">- Update to version 12.1.1+git.1501669490.04d0738487:
  + mon: extensible output format for health checks</changelog>
<changelog author="ncutler@suse.com" date="1501675201">- Update to version 12.1.2+git.1501684697.aa6b0153ef:
  + upstream luminous v12.1.2 release candidate
  + latest upstream master (e27a78c9ed3984b54a312ced3ad67fcc8f464fc0)
  * mon: add mgr metdata commands, and overall 'versions' command for all
    daemon versions (bsc#1050063, pr#16460)</changelog>
<changelog author="ncutler@suse.com" date="1501761600">- Update to version 12.1.2+git.1501790037.82d6a9c37a:
  + osd: move CMPEXT response munging into completion function
    (bsc#1047244)</changelog>
<changelog author="ncutler@suse.com" date="1501848000">- Update to version 12.1.2+git.1501865907.88dc8cdc9d:
  + latest upstream master (7350fa65d79b5f0ace427e609565f07be35cfe62)
  * os/bluestore: allow multiple DeferredBatches in flight at once
    (pr#16769, issue#20295, bsc#1043399)</changelog>
<changelog author="ncutler@suse.com" date="1501934400">- Update to version 12.1.2+git.1501914637.59afe41c49:
  + spec file
  * ceph-volume added to ceph-base RPM, where it co-exists with ceph-disk</changelog>
<changelog author="ncutler@suse.com" date="1502712000">- Update to version 12.1.3+git.1502698163.45fc586a51:
  + latest upstream luminous (6808af486d3bdce966232810004648502c967b13)
  * increment upstream version number to 12.1.3</changelog>
<changelog author="ncutler@suse.com" date="1502884800">- Update to version 12.1.4+git.1502871088.edf82a59df:
  + latest upstream luminous (a5f84b37668fc8e03165aaf5cbb380c78e4deba4)
  * increment upstream version number to 12.1.4</changelog>
<changelog author="ncutler@suse.com" date="1502884801">- Update to version 12.1.4+git.1502878199.4183317204:
  + ceph.spec: obsolete libxio
    (Note to reviewer: libxio was only ever used by Ceph (for an experimental
    IB/RDMA feature), it was never submitted to Factory, and its functionality has
    been integrated into Ceph in a different form. For all practical purposes,
    libxio has been replaced by Ceph itself.)</changelog>
<changelog author="ncutler@suse.com" date="1502971200">- Update to version 12.1.4+git.1502953626.155adb5253:
  + ceph.spec: provide libxio 1.7 and obsolete libxio &lt;= 1.7</changelog>

</package>
<package pkgid="f61c1f2c0be2298eacae1c9e8a828d9e6b022b208e2b674905a5c1cee56e967d" name="redis" arch="src">
    <version epoch="0" ver="4.0.2" rel="11.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1431777600">- update to 3.0.1
  * Sentinel memory leak due to hiredis fixed.
  * Sentinel memory leak on duplicated instance.
  * Redis crash on Lua reaching output buffer limits.
  * Sentinel flushes config on +slave events.</changelog>
<changelog author="mrueckert@suse.de" date="1433678400">- update to 3.0.2
  * [FIX] Critical security issue fix by Ben Murphy:
    http://t.co/LpGTyZmfS7
  * [FIX] SMOVE reply fixed when src and dst keys are the same.
    (Glenn Nethercutt)
  * [FIX] Lua cmsgpack lib updated to support str8 type.
    (Sebastian Waisbrot)
  * [NEW] ZADD support for options: NX, XX, CH. See new doc at
    redis.io.  (Salvatore Sanfilippo)
  * [NEW] Senitnel: CKQUORUM and FLUSHCONFIG commands back ported.
    (Salvatore Sanfilippo)</changelog>
<changelog author="mrueckert@suse.de" date="1434369600">- also pass the bind address to the redis-cli for shutdown
  (boo#835815)</changelog>
<changelog author="mrueckert@suse.de" date="1441627200">- update to 3.0.3
  * [FIX] Fix blocking operations timeout precision when HZ is at
    its default value (not increased) and there are thousands
    of clients connected at the same time. This bug affected
    Sidekiq users that experienced a very long delay for
    BLPOP and similar commands to return for timeout. Check
    commit b029ff1 for more info. (Salvatore Sanfilippo)
  * [FIX] MIGRATE "creating socket: Invalid argument" error fix.
    Check issues #2609 and #2612 for more info.
    (Salvatore Sanfilippo)
  * [FIX] Be able to connect to the master even when the slave is
    bound to just the loopback interface and has no valid
    public address in the network the master is reacahble.
    (Salvatore Sanfilippo)
  * [FIX] ZADD with options encoding promotion fixed. (linfangrong)
  * [FIX] Reset aof_delayed_fsync on CONFIG RESETSTATS. (Tom Kiemes)
  * [FIX] PFCOUNT key parsing in cluster fixed. (MOON_CLJ)
  * [FIX] Fix Solaris compilation of Redis 3.0. (Jan-Erik Rediger)
  * [NEW] Variadic EXISTS command. Now the command accepts multiple
    arguments and returns the total count of existing keys.
- added missing sentinel link</changelog>
<changelog author="mrueckert@suse.de" date="1443096000">- update to 3.0.4
  Upgrade urgency: HIGH for Redis and Sentinel. However note that in
    order to fix certain replication bugs, the
    replication internals were modified in a very heavy
    way. So while this release is conceptually saner, it
    may contain regressions. For this reason, before the
    release, QA activities were performed by me (antirez)
    and Redis Labs and no evident bug was found.
  - [FIX] A number of bugs related to replication PSYNC and the (yet
    experimental) diskless replication feature were fixed. The bugs
    could lead to inconsistency between masters and slaves. (Salvatore
    Sanfilippo, Oran Agra fixed the issue found by Yuval Inbar)
  - [FIX] A replication bug in the context of PSYNC partial
    resynchonization was found and fixed. This bug happens even when
    diskless replication is off in the case different slaves connect at
    different times while the master is creating an RDB file, and later
    a partial resynchronization is attempted by a slave that connected
    not as the first one. (Salvatore Sanfilippo, Oran Agra)
  - [FIX] Chained replication and PSYNC interactions leading to
    potential stale chained slaves data set, see issue #2694. (Salvatore
    Sanfilippo fixed an issue reported by "GeorgeBJ" user at Github)
  - [FIX] redis-cli --scan iteration fixed when returned cursor
    overflows 32 bit signed integer. (Ofir Luzon, Yuval Inbar)
  - [FIX] Sentinel: fixed a bug during the master switch process, where
    for a failed conditional check, the new configuration is rewritten,
    during a small window of time, in a corrupted way where the master
    is also reported to be one of the slaves. This bug is rare to
    trigger but apparently it happens in the wild, and the effect is to
    see a replication loop where the master will try to replicate with
    itself.  A detailed explanation of the bug and its effects can be
    found in the commit message here:
    https://github.com/antirez/redis/commit/c20218eb5770b2cafb12bc7092313b8358fedc0a.
    The bug was found by Jan-Erik Rediger using a static analyzer and
    fixed by Salvatore Sanfilippo.
  - [FIX] Sentinel lack of arity checks for certain commands.  (Rogerio
    Goncalves, Salvatore Sanfilippo)
  - [NEW] Replication internals rewritten in order to be more resistant
    to bugs.  The replication handshake in the slave side was rewritten
    as a non blocking state machine. (Salvatore Sanfilippo, Oran Agra)
  - [NEW] New "replication capabilities" feature introduced in order to
    signal from the master to the slave what are the features supported,
    so that the master can choose the kind of replication to start
    (diskless or not) when master and slave are of different versions.
    (Oran Agra, Salvatore Sanfilippo)
  - [NEW] Log clients details when SLAVEOF command is received.
    (Salvatore Sanfilippo with inputs from Nick Craver and Marc
    Gravell).</changelog>
<changelog author="mpluskal@suse.com" date="1448193600">- Update to 3.0.5
  * [FIX] MOVE now moves the TTL as well. A bug lasting forever...
  finally fixed thanks to Andy Grunwald that reported it.
  * [FIX] Fix a false positive in HSTRLEN test.
  * [FIX] Fix a bug in redis-cli --pipe mode that was not able to
  read back replies from the server incrementally. Now a mass
  import will use a lot less memory, and you can use --pipe to
  do incremental streaming.
  * [FIX] Slave detection of master timeout.
  * [NEW] Cluster: redis-trib fix can fix an additional case for
  opens lots.
  * [NEW] Cluster: redis-trib import support for --copy and
  - -replace options</changelog>
<changelog author="eshmarnev@suse.com" date="1455710400">- Update to 3.0.7:
  * [FIX] Many fixes to MIGRATE multiple keys implementation.
  * [FIX] A Redis Cluster node crash was fixed because of wrong handling of
    node-&gt;slaveof pointers.
  * [FIX] Fix redis-trib rebalance when nodes need to be left empty because
    the specified weight is zero.
  * [FIX] MIGRATE: Never send -ASK redirections for MIGRATE when there are
  * [FIX] Lua debugger crash when printing too deeply nested objects.
  * [FIX] Redis-cli implementation of Lua debugging now allows to use the
    SCRIPT DEBUG command directly, switching to debugging mode as needed.
  * [FIX] Redis-trib is now able to fix more errors. A new CLUSTER subcommand
    called BUMPEPOCH was introduced in order to support new modes
    for the "fix" subcommand.
  * [NEW] Redis proctected mode: this feature improves Redis security and makes
    harder to run Redis in a configuration that is unsecure because no
    firewalling was used in order to protect Redis from external accesses.
  * [NEW] Cluster/Sentinel tests now use OSX leak to perform leak detection
    at the end of every unit.
  * [NEW] Detect and show server crashes during Cluster/Sentinel tests.
  * [NEW] More reliable Cluster/Sentinel test becuase of timing errors and
  - LOADING errors.
  * [FIX] lua_struct.c/getnum security issue fixed.
  * [FIX] Redis Cluster replica migration fixed.
  * [FIX] Fix a race condition in processCommand() because of interactions
    with freeMemoryIfNeeded().
  * [NEW] Backported from the upcoming Redis 3.2:
    MIGRATE now supports an extended multiple-keys pipelined mode, which
    is an order of magnitude faster. Redis Cluster now uses this mode
    in order to perform reshardings and rebalancings.
  * [NEW] Backported from the upcoming Redis 3.2:
    Redis Cluster has now support for rebalancing via the redis-trib
    rebalance command. Demo here:
  * [NEW] Redis Cluster redis-trib.rb new "info" subcommand.
  * [NEW] Redis Cluster tests improved.
  * [NEW] Log offending memory access address on SIGSEGV/SIGBUS</changelog>
<changelog author="mamorales@suse.com" date="1461153600">- Fix installation example in README.SUSE</changelog>
<changelog author="rmaliska@suse.com" date="1467201600">- Update to 3.2.1
  * [FIX] Cleaned up spec file.
  * [FIX] Critical bug in Sentinel was hopefully fixed.
  * [FIX] BITFIELD bugs fixed.
  * [FIX] GEO commands fixes on syntax errors and edge cases.
  * [NEW] RESOTRE now accepts dumps generated by older Redis versions.
  * [NEW] Jemalloc now is configured to save you memory, for a problem a
    change in the jemalloc configuration did not really survived when the
    3.2.0 release was finalized.
  * [NEW] TTL and TYPE command no longer alter the last access time of a key, for
    LRU evictions purposes. A new TOUCH command was introduced *just* to
    update the access time of a key.
  * [FIX] A bug was fixed in redis-cli, that connected to the instance running on the
    port 6379 if there was one, regardless of what was specified.
  * [NEW] TCP keep alive is now enabled by default. This should fix most ghost
    connections problems without resulting in any practical change in otherwise
    sane deployments.
  * [FIX] A Sentinel crash that could happen during failovers was fixed.
  * [NEW] avg_ttl reporting in INFO improved.
  * [NEW] Sentinel: improve handling of known Sentinel instances.
  * [NEW] Redis Cluster address update (via gossip section) processing improved
    to avoid initiating inwanted handshakes.
  * [FIX] Critical bug fixed: There was a problem in the way a cluster instance
    loaded the AOF that could cause data written via scripts to be lost during
    reshardings.
  * [NEW] There is a new very powerful BITFIELD command. Check the documentation
    here: http://redis.io/commands/BITFIELD
  * [NEW] CONFIG GET is allowed during the loading of the dataset.
  * [NEW] The DEBUG command have new features and can show an help with DEBUG HELP.
  * [NEW] redis-cli show hits about the commands arguments to the right.
  * [NEW] GEORADIUS got a STORE / STOREDIST option to store the result into a target
    key (as as orted set) instead of reporting it to the user.
  * [NEW] Redis Cluster replicas migration now works in a slightly different way. In
    the past a slave could migrate only to a master that used to have slaves
    in the past (and if there was still trace of this information). Now instead
    if a new slave gets at least a slot, and at least one other master in the
    cluster has a slave, then the new master is considered a valid target for
    replica migration. So if it will be orphaned and there is a spare slave
    it will get one.
  * [NEW] CLUSTER SLOTS output now includes the node ID (in a backward compatible
    manner).</changelog>
<changelog author="astieger@suse.com" date="1469880000">- redis 3.2.2
- Highlight bug fixes:
  * Fix Redis server and Sentinel crashes
  * Fix GEORADIUS errors in reported entries
- New features:
  * slaves support the slave-announce-ip and slave-announce-port
    options.
  * RDB check utlity is now part of Redis and uses the same RDB code
  * redis-check-dump utility is now able to show certain information
    about the RDB file including creating version and date.</changelog>
<changelog author="astieger@suse.com" date="1469880001">- Fix CVE-2013-7458: unsafe permissions of command line history
  boo#991250, adding CVE-2013-7458.patch</changelog>
<changelog author="jengelh@inai.de" date="1469880002">- Test for user/group existence before creating them.
  Request shadow to be present for the scriptlet.</changelog>
<changelog author="astieger@suse.com" date="1470398400">- redis 3.2.3:
  * fix replication delay issue
  * drop CVE-2013-7458.patch, upstream</changelog>
<changelog author="astieger@suse.com" date="1477310400">- update to redis 3.2.4, including fixes for security issues:
  * CVE-2016-8339: CONFIG SET client-output-buffer-limit Code
    Execution Vulnerability [boo#1002351]
- bug fixes:
  * TCP binding bug fixed when only certain addresses were available
    for a given port
  * improved crash report
  * Fix for Redis Cluster redis-trib displaying of info after
    creating a new cluster.</changelog>
<changelog author="rmaliska@suse.com" date="1484913600">- update to redis 3.2.6
  * fixes for GEORADIUS, BITFIELD and Redis Cluster minor fixes.
- update 3.2.5
  * This release only fixes a compilation issue due to the
    missing -ldl at linking time.</changelog>
<changelog author="mpluskal@suse.com" date="1485950400">- Update to version 3.2.7
  * This release fixes important security and correctness issues
    (boo#1064980 CVE-2016-10517)</changelog>
<changelog author="vsistek@suse.com" date="1495108800">- Update to version 3.2.9
  * A few rarely harmful bugs were fixed.
- Changes accumulated from 3.2.8
  Two important bug fixes, the first of one is critical:
  * Apparently Jemalloc 4.4.0 may contain a deadlock under
    particular conditions. See
    https://github.com/antirez/redis/issues/3799.
    We reverted back to the previously used Jemalloc versions and
    plan to upgrade Jemalloc again after having more info about the
    cause of the bug.
  * MIGRATE could crash the server after a socket error. See for
    reference: https://github.com/antirez/redis/issues/3796.</changelog>
<changelog author="chris@computersalat.de" date="1498046400">- cleanup service file
- add redis.sysctl file
- update README.SUSE
  * add info for socket usage per service
  * add info for limits per service (LimitNOFILE=10240)</changelog>
<changelog author="ilya@ilya.pp.ua" date="1507464000">- Drop SLE 11 support.
- Refresh spec-file.
- Update to 4.0.2
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES
  * Different replication fixes to PSYNC2, the new 4.0 replication engine.
  * Modules thread safe contexts were introduced. They are an experimental
    API right now, but the API is considered to be stable and usable when needed.
  * SLOWLOG now logs the offending client name and address. Note that this is a
    backward compatibility breakage in case old code assumes that the slowlog
    entry is composed of exactly three entries.
  * The modules native data types RDB format changed.
  * The AOF check utility is now able to deal with RDB preambles.
  * GEORADIUS_RO and GEORADIUSBYMEMBER_RO variants, not supporting the STORE option,
    were added in order to allow read-only scaling of such queries.
  * HSET is now variadic, and HMSET is considered deprecated
    (but will be supported for years to come). Please use HSET in new code.
  * GEORADIUS huge radius (&gt;= ~6000 km) corner cases fixed,
    certain elements near the edges were not returned.
  * DEBUG DIGEST modules API added.
  * HyperLogLog commands no longer crash on certain input (non HLL) strings.
  * Fixed SLAVEOF inside MULTI/EXEC blocks.
  * Many other minor bug fixes and improvements.</changelog>
<changelog author="mpluskal@suse.com" date="1509537600">- Update changelog with CVE reference</changelog>

</package>
<package pkgid="9c48a39c88494b4d6126f96d0a58fee526b4eb7af16c058eb6ffe0a7301ad56e" name="redis" arch="x86_64">
    <version epoch="0" ver="4.0.2" rel="11.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1431777600">- update to 3.0.1
  * Sentinel memory leak due to hiredis fixed.
  * Sentinel memory leak on duplicated instance.
  * Redis crash on Lua reaching output buffer limits.
  * Sentinel flushes config on +slave events.</changelog>
<changelog author="mrueckert@suse.de" date="1433678400">- update to 3.0.2
  * [FIX] Critical security issue fix by Ben Murphy:
    http://t.co/LpGTyZmfS7
  * [FIX] SMOVE reply fixed when src and dst keys are the same.
    (Glenn Nethercutt)
  * [FIX] Lua cmsgpack lib updated to support str8 type.
    (Sebastian Waisbrot)
  * [NEW] ZADD support for options: NX, XX, CH. See new doc at
    redis.io.  (Salvatore Sanfilippo)
  * [NEW] Senitnel: CKQUORUM and FLUSHCONFIG commands back ported.
    (Salvatore Sanfilippo)</changelog>
<changelog author="mrueckert@suse.de" date="1434369600">- also pass the bind address to the redis-cli for shutdown
  (boo#835815)</changelog>
<changelog author="mrueckert@suse.de" date="1441627200">- update to 3.0.3
  * [FIX] Fix blocking operations timeout precision when HZ is at
    its default value (not increased) and there are thousands
    of clients connected at the same time. This bug affected
    Sidekiq users that experienced a very long delay for
    BLPOP and similar commands to return for timeout. Check
    commit b029ff1 for more info. (Salvatore Sanfilippo)
  * [FIX] MIGRATE "creating socket: Invalid argument" error fix.
    Check issues #2609 and #2612 for more info.
    (Salvatore Sanfilippo)
  * [FIX] Be able to connect to the master even when the slave is
    bound to just the loopback interface and has no valid
    public address in the network the master is reacahble.
    (Salvatore Sanfilippo)
  * [FIX] ZADD with options encoding promotion fixed. (linfangrong)
  * [FIX] Reset aof_delayed_fsync on CONFIG RESETSTATS. (Tom Kiemes)
  * [FIX] PFCOUNT key parsing in cluster fixed. (MOON_CLJ)
  * [FIX] Fix Solaris compilation of Redis 3.0. (Jan-Erik Rediger)
  * [NEW] Variadic EXISTS command. Now the command accepts multiple
    arguments and returns the total count of existing keys.
- added missing sentinel link</changelog>
<changelog author="mrueckert@suse.de" date="1443096000">- update to 3.0.4
  Upgrade urgency: HIGH for Redis and Sentinel. However note that in
    order to fix certain replication bugs, the
    replication internals were modified in a very heavy
    way. So while this release is conceptually saner, it
    may contain regressions. For this reason, before the
    release, QA activities were performed by me (antirez)
    and Redis Labs and no evident bug was found.
  - [FIX] A number of bugs related to replication PSYNC and the (yet
    experimental) diskless replication feature were fixed. The bugs
    could lead to inconsistency between masters and slaves. (Salvatore
    Sanfilippo, Oran Agra fixed the issue found by Yuval Inbar)
  - [FIX] A replication bug in the context of PSYNC partial
    resynchonization was found and fixed. This bug happens even when
    diskless replication is off in the case different slaves connect at
    different times while the master is creating an RDB file, and later
    a partial resynchronization is attempted by a slave that connected
    not as the first one. (Salvatore Sanfilippo, Oran Agra)
  - [FIX] Chained replication and PSYNC interactions leading to
    potential stale chained slaves data set, see issue #2694. (Salvatore
    Sanfilippo fixed an issue reported by "GeorgeBJ" user at Github)
  - [FIX] redis-cli --scan iteration fixed when returned cursor
    overflows 32 bit signed integer. (Ofir Luzon, Yuval Inbar)
  - [FIX] Sentinel: fixed a bug during the master switch process, where
    for a failed conditional check, the new configuration is rewritten,
    during a small window of time, in a corrupted way where the master
    is also reported to be one of the slaves. This bug is rare to
    trigger but apparently it happens in the wild, and the effect is to
    see a replication loop where the master will try to replicate with
    itself.  A detailed explanation of the bug and its effects can be
    found in the commit message here:
    https://github.com/antirez/redis/commit/c20218eb5770b2cafb12bc7092313b8358fedc0a.
    The bug was found by Jan-Erik Rediger using a static analyzer and
    fixed by Salvatore Sanfilippo.
  - [FIX] Sentinel lack of arity checks for certain commands.  (Rogerio
    Goncalves, Salvatore Sanfilippo)
  - [NEW] Replication internals rewritten in order to be more resistant
    to bugs.  The replication handshake in the slave side was rewritten
    as a non blocking state machine. (Salvatore Sanfilippo, Oran Agra)
  - [NEW] New "replication capabilities" feature introduced in order to
    signal from the master to the slave what are the features supported,
    so that the master can choose the kind of replication to start
    (diskless or not) when master and slave are of different versions.
    (Oran Agra, Salvatore Sanfilippo)
  - [NEW] Log clients details when SLAVEOF command is received.
    (Salvatore Sanfilippo with inputs from Nick Craver and Marc
    Gravell).</changelog>
<changelog author="mpluskal@suse.com" date="1448193600">- Update to 3.0.5
  * [FIX] MOVE now moves the TTL as well. A bug lasting forever...
  finally fixed thanks to Andy Grunwald that reported it.
  * [FIX] Fix a false positive in HSTRLEN test.
  * [FIX] Fix a bug in redis-cli --pipe mode that was not able to
  read back replies from the server incrementally. Now a mass
  import will use a lot less memory, and you can use --pipe to
  do incremental streaming.
  * [FIX] Slave detection of master timeout.
  * [NEW] Cluster: redis-trib fix can fix an additional case for
  opens lots.
  * [NEW] Cluster: redis-trib import support for --copy and
  - -replace options</changelog>
<changelog author="eshmarnev@suse.com" date="1455710400">- Update to 3.0.7:
  * [FIX] Many fixes to MIGRATE multiple keys implementation.
  * [FIX] A Redis Cluster node crash was fixed because of wrong handling of
    node-&gt;slaveof pointers.
  * [FIX] Fix redis-trib rebalance when nodes need to be left empty because
    the specified weight is zero.
  * [FIX] MIGRATE: Never send -ASK redirections for MIGRATE when there are
  * [FIX] Lua debugger crash when printing too deeply nested objects.
  * [FIX] Redis-cli implementation of Lua debugging now allows to use the
    SCRIPT DEBUG command directly, switching to debugging mode as needed.
  * [FIX] Redis-trib is now able to fix more errors. A new CLUSTER subcommand
    called BUMPEPOCH was introduced in order to support new modes
    for the "fix" subcommand.
  * [NEW] Redis proctected mode: this feature improves Redis security and makes
    harder to run Redis in a configuration that is unsecure because no
    firewalling was used in order to protect Redis from external accesses.
  * [NEW] Cluster/Sentinel tests now use OSX leak to perform leak detection
    at the end of every unit.
  * [NEW] Detect and show server crashes during Cluster/Sentinel tests.
  * [NEW] More reliable Cluster/Sentinel test becuase of timing errors and
  - LOADING errors.
  * [FIX] lua_struct.c/getnum security issue fixed.
  * [FIX] Redis Cluster replica migration fixed.
  * [FIX] Fix a race condition in processCommand() because of interactions
    with freeMemoryIfNeeded().
  * [NEW] Backported from the upcoming Redis 3.2:
    MIGRATE now supports an extended multiple-keys pipelined mode, which
    is an order of magnitude faster. Redis Cluster now uses this mode
    in order to perform reshardings and rebalancings.
  * [NEW] Backported from the upcoming Redis 3.2:
    Redis Cluster has now support for rebalancing via the redis-trib
    rebalance command. Demo here:
  * [NEW] Redis Cluster redis-trib.rb new "info" subcommand.
  * [NEW] Redis Cluster tests improved.
  * [NEW] Log offending memory access address on SIGSEGV/SIGBUS</changelog>
<changelog author="mamorales@suse.com" date="1461153600">- Fix installation example in README.SUSE</changelog>
<changelog author="rmaliska@suse.com" date="1467201600">- Update to 3.2.1
  * [FIX] Cleaned up spec file.
  * [FIX] Critical bug in Sentinel was hopefully fixed.
  * [FIX] BITFIELD bugs fixed.
  * [FIX] GEO commands fixes on syntax errors and edge cases.
  * [NEW] RESOTRE now accepts dumps generated by older Redis versions.
  * [NEW] Jemalloc now is configured to save you memory, for a problem a
    change in the jemalloc configuration did not really survived when the
    3.2.0 release was finalized.
  * [NEW] TTL and TYPE command no longer alter the last access time of a key, for
    LRU evictions purposes. A new TOUCH command was introduced *just* to
    update the access time of a key.
  * [FIX] A bug was fixed in redis-cli, that connected to the instance running on the
    port 6379 if there was one, regardless of what was specified.
  * [NEW] TCP keep alive is now enabled by default. This should fix most ghost
    connections problems without resulting in any practical change in otherwise
    sane deployments.
  * [FIX] A Sentinel crash that could happen during failovers was fixed.
  * [NEW] avg_ttl reporting in INFO improved.
  * [NEW] Sentinel: improve handling of known Sentinel instances.
  * [NEW] Redis Cluster address update (via gossip section) processing improved
    to avoid initiating inwanted handshakes.
  * [FIX] Critical bug fixed: There was a problem in the way a cluster instance
    loaded the AOF that could cause data written via scripts to be lost during
    reshardings.
  * [NEW] There is a new very powerful BITFIELD command. Check the documentation
    here: http://redis.io/commands/BITFIELD
  * [NEW] CONFIG GET is allowed during the loading of the dataset.
  * [NEW] The DEBUG command have new features and can show an help with DEBUG HELP.
  * [NEW] redis-cli show hits about the commands arguments to the right.
  * [NEW] GEORADIUS got a STORE / STOREDIST option to store the result into a target
    key (as as orted set) instead of reporting it to the user.
  * [NEW] Redis Cluster replicas migration now works in a slightly different way. In
    the past a slave could migrate only to a master that used to have slaves
    in the past (and if there was still trace of this information). Now instead
    if a new slave gets at least a slot, and at least one other master in the
    cluster has a slave, then the new master is considered a valid target for
    replica migration. So if it will be orphaned and there is a spare slave
    it will get one.
  * [NEW] CLUSTER SLOTS output now includes the node ID (in a backward compatible
    manner).</changelog>
<changelog author="astieger@suse.com" date="1469880000">- redis 3.2.2
- Highlight bug fixes:
  * Fix Redis server and Sentinel crashes
  * Fix GEORADIUS errors in reported entries
- New features:
  * slaves support the slave-announce-ip and slave-announce-port
    options.
  * RDB check utlity is now part of Redis and uses the same RDB code
  * redis-check-dump utility is now able to show certain information
    about the RDB file including creating version and date.</changelog>
<changelog author="astieger@suse.com" date="1469880001">- Fix CVE-2013-7458: unsafe permissions of command line history
  boo#991250, adding CVE-2013-7458.patch</changelog>
<changelog author="jengelh@inai.de" date="1469880002">- Test for user/group existence before creating them.
  Request shadow to be present for the scriptlet.</changelog>
<changelog author="astieger@suse.com" date="1470398400">- redis 3.2.3:
  * fix replication delay issue
  * drop CVE-2013-7458.patch, upstream</changelog>
<changelog author="astieger@suse.com" date="1477310400">- update to redis 3.2.4, including fixes for security issues:
  * CVE-2016-8339: CONFIG SET client-output-buffer-limit Code
    Execution Vulnerability [boo#1002351]
- bug fixes:
  * TCP binding bug fixed when only certain addresses were available
    for a given port
  * improved crash report
  * Fix for Redis Cluster redis-trib displaying of info after
    creating a new cluster.</changelog>
<changelog author="rmaliska@suse.com" date="1484913600">- update to redis 3.2.6
  * fixes for GEORADIUS, BITFIELD and Redis Cluster minor fixes.
- update 3.2.5
  * This release only fixes a compilation issue due to the
    missing -ldl at linking time.</changelog>
<changelog author="mpluskal@suse.com" date="1485950400">- Update to version 3.2.7
  * This release fixes important security and correctness issues
    (boo#1064980 CVE-2016-10517)</changelog>
<changelog author="vsistek@suse.com" date="1495108800">- Update to version 3.2.9
  * A few rarely harmful bugs were fixed.
- Changes accumulated from 3.2.8
  Two important bug fixes, the first of one is critical:
  * Apparently Jemalloc 4.4.0 may contain a deadlock under
    particular conditions. See
    https://github.com/antirez/redis/issues/3799.
    We reverted back to the previously used Jemalloc versions and
    plan to upgrade Jemalloc again after having more info about the
    cause of the bug.
  * MIGRATE could crash the server after a socket error. See for
    reference: https://github.com/antirez/redis/issues/3796.</changelog>
<changelog author="chris@computersalat.de" date="1498046400">- cleanup service file
- add redis.sysctl file
- update README.SUSE
  * add info for socket usage per service
  * add info for limits per service (LimitNOFILE=10240)</changelog>
<changelog author="ilya@ilya.pp.ua" date="1507464000">- Drop SLE 11 support.
- Refresh spec-file.
- Update to 4.0.2
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES
  * Different replication fixes to PSYNC2, the new 4.0 replication engine.
  * Modules thread safe contexts were introduced. They are an experimental
    API right now, but the API is considered to be stable and usable when needed.
  * SLOWLOG now logs the offending client name and address. Note that this is a
    backward compatibility breakage in case old code assumes that the slowlog
    entry is composed of exactly three entries.
  * The modules native data types RDB format changed.
  * The AOF check utility is now able to deal with RDB preambles.
  * GEORADIUS_RO and GEORADIUSBYMEMBER_RO variants, not supporting the STORE option,
    were added in order to allow read-only scaling of such queries.
  * HSET is now variadic, and HMSET is considered deprecated
    (but will be supported for years to come). Please use HSET in new code.
  * GEORADIUS huge radius (&gt;= ~6000 km) corner cases fixed,
    certain elements near the edges were not returned.
  * DEBUG DIGEST modules API added.
  * HyperLogLog commands no longer crash on certain input (non HLL) strings.
  * Fixed SLAVEOF inside MULTI/EXEC blocks.
  * Many other minor bug fixes and improvements.</changelog>
<changelog author="mpluskal@suse.com" date="1509537600">- Update changelog with CVE reference</changelog>

</package>
<package pkgid="a11efd3d4b14c9b016de18e39440ee508b093232aba5ee31a8aed95cf3217735" name="release-notes-openSUSE" arch="noarch">
    <version epoch="0" ver="42.3.20170731" rel="3.1"/>

<changelog author="ke@suse.de" date="1444651200">- 42.1.20151012 (bsc#949491):
- New entries: grep update (bsc#932494); Base System Installation
  (bsc#947712).</changelog>
<changelog author="ke@suse.de" date="1445515200">- 42.1.20151022 (bsc#950877):
- New entries: openSUSE Leap as Guest in VirtualBox (bsc#950877).</changelog>
<changelog author="ke@suse.de" date="1445601600">- 42.1.20151023 (bsc#950877):
- Updating some texts and translations.</changelog>
<changelog author="ke@suse.de" date="1445947200">- 42.1.20151027:
- New entries: CUPS (bsc#951596); Warn about minimal install not having
  yast or susefirewall (bsc#951866).
- Removed entries: grep update (bsc#932494); openSUSE Leap as Guest in
  VirtualBox (bsc#952019).</changelog>
<changelog author="ke@suse.de" date="1446033600">- 42.1.20151028:
- Changed entries: Warn about minimal install not having
  yast or susefirewall (bsc#951866).</changelog>
<changelog author="sknorr@suse.com" date="1447070400">- 42.1.20151109
- Added entry: sddm hangs while causing autofs to mount hundreds of
  nfs homes
- Added entry: network interface naming scheme has changed, this
  may lock users out of remote computers</changelog>
<changelog author="sknorr@suse.com" date="1453896000">- 42.1.20160127:
- Post-GA update
- Added entries:
  + Btrfs disk space leak (bsc#953985)
  + No screensaver in KDE (bsc#956173)
- Changed entries
  + Numerous spelling, grammar, punctuation fixes</changelog>
<changelog author="sknorr@suse.com" date="1455710400">- 42.1.20160217 (tracked in bsc#967075):
- Post-GA update
- Take release notes from the correct Git branch (we accidentally
  used the Tumbleweed RN last time) (bsc#965691)
- Add necessary CJK fonts to spec file (bsc#965462)</changelog>
<changelog author="sknorr@suse.com" date="1469707200">- Initial release for openSUSE Leap 42.2
- Updated to use DocBook with Profiling
- Various Makefile updates</changelog>
<changelog author="sknorr@suse.com" date="1473940800">- 42.2.20160915
- Updated Makefile:
  - Added missing sed line for English XML file (bsc#996528)
- Entry changes:
  - Added hint for users of GNOME &amp; Synaptics driver (bsc#981924)
  - Added note about /var/cache conversion (bsc#989799, FATE#320834)
  - Added back upgrade notes from the 42.1 release notes
  - Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1475236800">- 42.2.20160930
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1477569600">- 42.2.20161027
- Updated Makefile
- Added note on Nouveau driver (boo#1005323)
- Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1478606400">- 42.2.20161108
- Updated Makefile
- Disable special treatment for en_GB (bsc#1008192)
- KDE PIM entry (boo#1001872)
- Consistently use bugzilla.opensuse.org (boo#1008437)
- Updated note on Nouveau driver</changelog>
<changelog author="sknorr@suse.com" date="1481544000">- 42.2.20161212 (tracked in bsc#1009123)
- Updated Makefile
- Updated translations
- Added note on Dolphin and extended permission bits (boo#1009275)
- Added note on AArch64 Page Size (boo#998663)
- Added note on GNOME Shell not locking without GDM (boo#995062)
- Added note on Mount by Label installer crash (boo#1009493)
- Added warning to section about Btrfs disk space leak (boo#1010575)
- Added nodejs to list of renamed packages
- Removed Seamonkey from list of replaced packages (boo#1014686)</changelog>
<changelog author="sknorr@suse.com" date="1487592000">- 42.3.20170220 (bsc#933411)
- Initial package for openSUSE Leap 42.3</changelog>
<changelog author="sknorr@suse.com" date="1494244800">- 42.3.20170508
- Updated translations
- Added entries related to KDE (PIM, Baloo, global menu, synaptics
    driver)
- Added note about fontinfo having been removed</changelog>
<changelog author="sknorr@suse.com" date="1498046400">- 42.3.20170621
- Updated translations
- Added note about installation of Nvidia's .run packages
  (boo#1045124)</changelog>
<changelog author="sknorr@suse.com" date="1499169600">- 42.3.20170704
- Updated translations
- Shorewall package upgraded to 5.1.4.3
- perl-Mojolicious-Plugin-Bootstrap3 replaced by
    perl-Mojolicious-Plugin-AssetPack</changelog>
<changelog author="sknorr@suse.com" date="1500033600">- 42.3.20170714
- Updated translations
- Added more removed/replaced packages to list
- Konqueror now also cannot set extended permission bits (bsc#1048392)</changelog>
<changelog author="sseebergelverfeldt@suse.com" date="1501502400">- 42.3.20170731
- Description about kernel graphics update (boo#1050519)</changelog>

</package>
<package pkgid="1e94d9334177465136d770f7dfb9ada847b370056ef7a90a3a68ea3cff4bbce4" name="release-notes-openSUSE" arch="noarch">
    <version epoch="0" ver="42.3.20170911" rel="6.1"/>

<changelog author="ke@suse.de" date="1445515200">- 42.1.20151022 (bsc#950877):
- New entries: openSUSE Leap as Guest in VirtualBox (bsc#950877).</changelog>
<changelog author="ke@suse.de" date="1445601600">- 42.1.20151023 (bsc#950877):
- Updating some texts and translations.</changelog>
<changelog author="ke@suse.de" date="1445947200">- 42.1.20151027:
- New entries: CUPS (bsc#951596); Warn about minimal install not having
  yast or susefirewall (bsc#951866).
- Removed entries: grep update (bsc#932494); openSUSE Leap as Guest in
  VirtualBox (bsc#952019).</changelog>
<changelog author="ke@suse.de" date="1446033600">- 42.1.20151028:
- Changed entries: Warn about minimal install not having
  yast or susefirewall (bsc#951866).</changelog>
<changelog author="sknorr@suse.com" date="1447070400">- 42.1.20151109
- Added entry: sddm hangs while causing autofs to mount hundreds of
  nfs homes
- Added entry: network interface naming scheme has changed, this
  may lock users out of remote computers</changelog>
<changelog author="sknorr@suse.com" date="1453896000">- 42.1.20160127:
- Post-GA update
- Added entries:
  + Btrfs disk space leak (bsc#953985)
  + No screensaver in KDE (bsc#956173)
- Changed entries
  + Numerous spelling, grammar, punctuation fixes</changelog>
<changelog author="sknorr@suse.com" date="1455710400">- 42.1.20160217 (tracked in bsc#967075):
- Post-GA update
- Take release notes from the correct Git branch (we accidentally
  used the Tumbleweed RN last time) (bsc#965691)
- Add necessary CJK fonts to spec file (bsc#965462)</changelog>
<changelog author="sknorr@suse.com" date="1469707200">- Initial release for openSUSE Leap 42.2
- Updated to use DocBook with Profiling
- Various Makefile updates</changelog>
<changelog author="sknorr@suse.com" date="1473940800">- 42.2.20160915
- Updated Makefile:
  - Added missing sed line for English XML file (bsc#996528)
- Entry changes:
  - Added hint for users of GNOME &amp; Synaptics driver (bsc#981924)
  - Added note about /var/cache conversion (bsc#989799, FATE#320834)
  - Added back upgrade notes from the 42.1 release notes
  - Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1475236800">- 42.2.20160930
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1477569600">- 42.2.20161027
- Updated Makefile
- Added note on Nouveau driver (boo#1005323)
- Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1478606400">- 42.2.20161108
- Updated Makefile
- Disable special treatment for en_GB (bsc#1008192)
- KDE PIM entry (boo#1001872)
- Consistently use bugzilla.opensuse.org (boo#1008437)
- Updated note on Nouveau driver</changelog>
<changelog author="sknorr@suse.com" date="1481544000">- 42.2.20161212 (tracked in bsc#1009123)
- Updated Makefile
- Updated translations
- Added note on Dolphin and extended permission bits (boo#1009275)
- Added note on AArch64 Page Size (boo#998663)
- Added note on GNOME Shell not locking without GDM (boo#995062)
- Added note on Mount by Label installer crash (boo#1009493)
- Added warning to section about Btrfs disk space leak (boo#1010575)
- Added nodejs to list of renamed packages
- Removed Seamonkey from list of replaced packages (boo#1014686)</changelog>
<changelog author="sknorr@suse.com" date="1487592000">- 42.3.20170220 (bsc#933411)
- Initial package for openSUSE Leap 42.3</changelog>
<changelog author="sknorr@suse.com" date="1494244800">- 42.3.20170508
- Updated translations
- Added entries related to KDE (PIM, Baloo, global menu, synaptics
    driver)
- Added note about fontinfo having been removed</changelog>
<changelog author="sknorr@suse.com" date="1498046400">- 42.3.20170621
- Updated translations
- Added note about installation of Nvidia's .run packages
  (boo#1045124)</changelog>
<changelog author="sknorr@suse.com" date="1499169600">- 42.3.20170704
- Updated translations
- Shorewall package upgraded to 5.1.4.3
- perl-Mojolicious-Plugin-Bootstrap3 replaced by
    perl-Mojolicious-Plugin-AssetPack</changelog>
<changelog author="sknorr@suse.com" date="1500033600">- 42.3.20170714
- Updated translations
- Added more removed/replaced packages to list
- Konqueror now also cannot set extended permission bits (bsc#1048392)</changelog>
<changelog author="sseebergelverfeldt@suse.com" date="1501502400">- 42.3.20170731
- Description about kernel graphics update (boo#1050519)</changelog>
<changelog author="sknorr@suse.com" date="1505131200">- 42.3.20170911 (tracked in bsc#1058126)
- Updated translations (Catalan, Chinese (China), Chinese (Taiwan),
  Czech, Danish, Dutch, French, German, Greek, Indonesian, Italian,
  Japanese, Lithuanian, Malay, Portuguese (Brazil), Russian, Slovak,
  Spanish, Ukrainian)
- Added note about deprecated packages
- Added note about GCC 6 package version (boo#1048692)
- Added note about MP3 support in the default repo
- Added note about LibreOffice and Type-1 fonts (bsc#1048660)
- Mentioned libatlas3 under removed packages
- Updated description about kernel graphics (boo#1050519)</changelog>

</package>
<package pkgid="f4f4bff9f1ecf073c151351197a79ac6d4fc4eb474853c474c37990907f0ddcf" name="release-notes-openSUSE" arch="src">
    <version epoch="0" ver="42.3.20170731" rel="3.1"/>

<changelog author="ke@suse.de" date="1444651200">- 42.1.20151012 (bsc#949491):
- New entries: grep update (bsc#932494); Base System Installation
  (bsc#947712).</changelog>
<changelog author="ke@suse.de" date="1445515200">- 42.1.20151022 (bsc#950877):
- New entries: openSUSE Leap as Guest in VirtualBox (bsc#950877).</changelog>
<changelog author="ke@suse.de" date="1445601600">- 42.1.20151023 (bsc#950877):
- Updating some texts and translations.</changelog>
<changelog author="ke@suse.de" date="1445947200">- 42.1.20151027:
- New entries: CUPS (bsc#951596); Warn about minimal install not having
  yast or susefirewall (bsc#951866).
- Removed entries: grep update (bsc#932494); openSUSE Leap as Guest in
  VirtualBox (bsc#952019).</changelog>
<changelog author="ke@suse.de" date="1446033600">- 42.1.20151028:
- Changed entries: Warn about minimal install not having
  yast or susefirewall (bsc#951866).</changelog>
<changelog author="sknorr@suse.com" date="1447070400">- 42.1.20151109
- Added entry: sddm hangs while causing autofs to mount hundreds of
  nfs homes
- Added entry: network interface naming scheme has changed, this
  may lock users out of remote computers</changelog>
<changelog author="sknorr@suse.com" date="1453896000">- 42.1.20160127:
- Post-GA update
- Added entries:
  + Btrfs disk space leak (bsc#953985)
  + No screensaver in KDE (bsc#956173)
- Changed entries
  + Numerous spelling, grammar, punctuation fixes</changelog>
<changelog author="sknorr@suse.com" date="1455710400">- 42.1.20160217 (tracked in bsc#967075):
- Post-GA update
- Take release notes from the correct Git branch (we accidentally
  used the Tumbleweed RN last time) (bsc#965691)
- Add necessary CJK fonts to spec file (bsc#965462)</changelog>
<changelog author="sknorr@suse.com" date="1469707200">- Initial release for openSUSE Leap 42.2
- Updated to use DocBook with Profiling
- Various Makefile updates</changelog>
<changelog author="sknorr@suse.com" date="1473940800">- 42.2.20160915
- Updated Makefile:
  - Added missing sed line for English XML file (bsc#996528)
- Entry changes:
  - Added hint for users of GNOME &amp; Synaptics driver (bsc#981924)
  - Added note about /var/cache conversion (bsc#989799, FATE#320834)
  - Added back upgrade notes from the 42.1 release notes
  - Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1475236800">- 42.2.20160930
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1477569600">- 42.2.20161027
- Updated Makefile
- Added note on Nouveau driver (boo#1005323)
- Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1478606400">- 42.2.20161108
- Updated Makefile
- Disable special treatment for en_GB (bsc#1008192)
- KDE PIM entry (boo#1001872)
- Consistently use bugzilla.opensuse.org (boo#1008437)
- Updated note on Nouveau driver</changelog>
<changelog author="sknorr@suse.com" date="1481544000">- 42.2.20161212 (tracked in bsc#1009123)
- Updated Makefile
- Updated translations
- Added note on Dolphin and extended permission bits (boo#1009275)
- Added note on AArch64 Page Size (boo#998663)
- Added note on GNOME Shell not locking without GDM (boo#995062)
- Added note on Mount by Label installer crash (boo#1009493)
- Added warning to section about Btrfs disk space leak (boo#1010575)
- Added nodejs to list of renamed packages
- Removed Seamonkey from list of replaced packages (boo#1014686)</changelog>
<changelog author="sknorr@suse.com" date="1487592000">- 42.3.20170220 (bsc#933411)
- Initial package for openSUSE Leap 42.3</changelog>
<changelog author="sknorr@suse.com" date="1494244800">- 42.3.20170508
- Updated translations
- Added entries related to KDE (PIM, Baloo, global menu, synaptics
    driver)
- Added note about fontinfo having been removed</changelog>
<changelog author="sknorr@suse.com" date="1498046400">- 42.3.20170621
- Updated translations
- Added note about installation of Nvidia's .run packages
  (boo#1045124)</changelog>
<changelog author="sknorr@suse.com" date="1499169600">- 42.3.20170704
- Updated translations
- Shorewall package upgraded to 5.1.4.3
- perl-Mojolicious-Plugin-Bootstrap3 replaced by
    perl-Mojolicious-Plugin-AssetPack</changelog>
<changelog author="sknorr@suse.com" date="1500033600">- 42.3.20170714
- Updated translations
- Added more removed/replaced packages to list
- Konqueror now also cannot set extended permission bits (bsc#1048392)</changelog>
<changelog author="sseebergelverfeldt@suse.com" date="1501502400">- 42.3.20170731
- Description about kernel graphics update (boo#1050519)</changelog>

</package>
<package pkgid="a1a8d6e731e67b8f62dcfff05076707ed38a946849e827b7da9a3a627f7c8b53" name="release-notes-openSUSE" arch="src">
    <version epoch="0" ver="42.3.20170911" rel="6.1"/>

<changelog author="ke@suse.de" date="1445515200">- 42.1.20151022 (bsc#950877):
- New entries: openSUSE Leap as Guest in VirtualBox (bsc#950877).</changelog>
<changelog author="ke@suse.de" date="1445601600">- 42.1.20151023 (bsc#950877):
- Updating some texts and translations.</changelog>
<changelog author="ke@suse.de" date="1445947200">- 42.1.20151027:
- New entries: CUPS (bsc#951596); Warn about minimal install not having
  yast or susefirewall (bsc#951866).
- Removed entries: grep update (bsc#932494); openSUSE Leap as Guest in
  VirtualBox (bsc#952019).</changelog>
<changelog author="ke@suse.de" date="1446033600">- 42.1.20151028:
- Changed entries: Warn about minimal install not having
  yast or susefirewall (bsc#951866).</changelog>
<changelog author="sknorr@suse.com" date="1447070400">- 42.1.20151109
- Added entry: sddm hangs while causing autofs to mount hundreds of
  nfs homes
- Added entry: network interface naming scheme has changed, this
  may lock users out of remote computers</changelog>
<changelog author="sknorr@suse.com" date="1453896000">- 42.1.20160127:
- Post-GA update
- Added entries:
  + Btrfs disk space leak (bsc#953985)
  + No screensaver in KDE (bsc#956173)
- Changed entries
  + Numerous spelling, grammar, punctuation fixes</changelog>
<changelog author="sknorr@suse.com" date="1455710400">- 42.1.20160217 (tracked in bsc#967075):
- Post-GA update
- Take release notes from the correct Git branch (we accidentally
  used the Tumbleweed RN last time) (bsc#965691)
- Add necessary CJK fonts to spec file (bsc#965462)</changelog>
<changelog author="sknorr@suse.com" date="1469707200">- Initial release for openSUSE Leap 42.2
- Updated to use DocBook with Profiling
- Various Makefile updates</changelog>
<changelog author="sknorr@suse.com" date="1473940800">- 42.2.20160915
- Updated Makefile:
  - Added missing sed line for English XML file (bsc#996528)
- Entry changes:
  - Added hint for users of GNOME &amp; Synaptics driver (bsc#981924)
  - Added note about /var/cache conversion (bsc#989799, FATE#320834)
  - Added back upgrade notes from the 42.1 release notes
  - Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1475236800">- 42.2.20160930
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1477569600">- 42.2.20161027
- Updated Makefile
- Added note on Nouveau driver (boo#1005323)
- Added more entries to section about removed packages
- Translation updates</changelog>
<changelog author="sknorr@suse.com" date="1478606400">- 42.2.20161108
- Updated Makefile
- Disable special treatment for en_GB (bsc#1008192)
- KDE PIM entry (boo#1001872)
- Consistently use bugzilla.opensuse.org (boo#1008437)
- Updated note on Nouveau driver</changelog>
<changelog author="sknorr@suse.com" date="1481544000">- 42.2.20161212 (tracked in bsc#1009123)
- Updated Makefile
- Updated translations
- Added note on Dolphin and extended permission bits (boo#1009275)
- Added note on AArch64 Page Size (boo#998663)
- Added note on GNOME Shell not locking without GDM (boo#995062)
- Added note on Mount by Label installer crash (boo#1009493)
- Added warning to section about Btrfs disk space leak (boo#1010575)
- Added nodejs to list of renamed packages
- Removed Seamonkey from list of replaced packages (boo#1014686)</changelog>
<changelog author="sknorr@suse.com" date="1487592000">- 42.3.20170220 (bsc#933411)
- Initial package for openSUSE Leap 42.3</changelog>
<changelog author="sknorr@suse.com" date="1494244800">- 42.3.20170508
- Updated translations
- Added entries related to KDE (PIM, Baloo, global menu, synaptics
    driver)
- Added note about fontinfo having been removed</changelog>
<changelog author="sknorr@suse.com" date="1498046400">- 42.3.20170621
- Updated translations
- Added note about installation of Nvidia's .run packages
  (boo#1045124)</changelog>
<changelog author="sknorr@suse.com" date="1499169600">- 42.3.20170704
- Updated translations
- Shorewall package upgraded to 5.1.4.3
- perl-Mojolicious-Plugin-Bootstrap3 replaced by
    perl-Mojolicious-Plugin-AssetPack</changelog>
<changelog author="sknorr@suse.com" date="1500033600">- 42.3.20170714
- Updated translations
- Added more removed/replaced packages to list
- Konqueror now also cannot set extended permission bits (bsc#1048392)</changelog>
<changelog author="sseebergelverfeldt@suse.com" date="1501502400">- 42.3.20170731
- Description about kernel graphics update (boo#1050519)</changelog>
<changelog author="sknorr@suse.com" date="1505131200">- 42.3.20170911 (tracked in bsc#1058126)
- Updated translations (Catalan, Chinese (China), Chinese (Taiwan),
  Czech, Danish, Dutch, French, German, Greek, Indonesian, Italian,
  Japanese, Lithuanian, Malay, Portuguese (Brazil), Russian, Slovak,
  Spanish, Ukrainian)
- Added note about deprecated packages
- Added note about GCC 6 package version (boo#1048692)
- Added note about MP3 support in the default repo
- Added note about LibreOffice and Type-1 fonts (bsc#1048660)
- Mentioned libatlas3 under removed packages
- Updated description about kernel graphics (boo#1050519)</changelog>

</package>
<package pkgid="1f319b7749402db6fbe7d205421171dc306e9ef934672dc83646a63d9ef43c1a" name="resource-agents" arch="src">
    <version epoch="0" ver="4.0.1+git.1495055229.643177f1" rel="3.1"/>

<changelog author="kgronlund@suse.com" date="1453118400">- Update to version 3.9.6+git.1452867140.fc8ace0:
  + SAPDatabase: Add Oracle 12 to list of supported databases (bsc#953991)
  + High: clvm: fix issue with only first option of daemon_options being used
  + High: mysql: fix grep failure on MySQL5.6 or higher when checking read_only variable
  + Medium: sg_persist: remove uncalled for ocf_run calls
  + Medium: ocf_shellfuncs: suppress bash specific trace_ra log on dash
  + Medium: ocf-rarun: replace error log messages with calls to ocf_exit_reason
  + Medium: nfsserver: do redhat specific stuff on redhat
  + Medium: iscsi: replace error log messages with calls to ocf_exit_reason
  + Medium: oracle/oralsnr: replace error log messages with calls to ocf_exit_reason
  + Medium: pingd: replace error log messages with calls to ocf_exit_reason
  + Medium: Raid1: replace error log messages with calls to ocf_exit_reason
  + Medium: pgsql: replace error log messages with calls to ocf_exit_reason
  + Medium: exportfs: don't increment fsid for single directory
  + Medium: Filesystem: add overlay as supported filesystem
  + Medium: mysql: When mysql has been already stopped, mysql is finished normally.
  + Low: pgsql: fix to be used valid charcters when the invalid characters is used in replication_slot_name.
  + Low: mysql: fix missing variables
  + Low: mysql: tmpfile is leaking when set the OCF_CHECK_LEVEL to 10
  + Low: nfsserver: prevent error messages on platforms without rpcuser (again)
  + Low: pgsql : fix invalid log message
  + Low: apache-conf: handle parsing includes with values in quotes
  + Low: pgsql: properly show default values in meta-data
  + Low : Changed the check handling of pid to the common function.
  + Low : Changed it that the message which pid file deleted repeated and did not appear
  + Low: pgsql: fix grep failure when using pacemaker 1.1.12
  + LVM: Allow vgck failures if partial
  + LVM: Correct grammar in partial_activation descriptions
  + IPaddr2: Add IPv6 DAD collision detection
  + VirtualDomain: New resource attributes migration_speed and migration_downtime
  + Nagios Resource Agent
  + Fix 90s wait/killing of databases containing the name of the database being killed, and added cleanup code to kill remaining listener process.
  + mysql.sh: wait up to startup_wait seconds before failing if mysqld startup is slow
- Remove patches that have been merged upstream
  - Remove 0001-nfsserver-Add-EXEC_MODE-for-systemd-without-nfs-lock.patch
  - Remove 0002-nfsserver-Use-rpc-statd.service-for-NFS-locking-in-E.patch</changelog>
<changelog author="kgronlund@suse.com" date="1453982400">- Update to version 3.9.7~rc1+git.1453889774.3446b99:
  + Low: ldirectord: Fix unset failcount error (bsc#962795)</changelog>
<changelog author="kgronlund@suse.com" date="1454500800">- Update to version 3.9.7+git.1454497075.e697f43:
  + Medium: nfsserver: fix monitor for systemd
  + galera: force crash recovery if needed during last commit detection
  + galera: prevent recovered nodes from bootstrapping cluster when possible
  + galera: remove bashism
  + Add portal check to open_iscsi_get_session_id()</changelog>
<changelog author="kgronlund@suse.com" date="1455883200">- Update to version 3.9.7+git.1454950092.6f56933:
  + Dev: ocft: include runocft to the tarball</changelog>
<changelog author="kgronlund@suse.com" date="1458561600">- Update to version 3.9.7+git.1458512170.48350a9:
  + High: SAPDatabase: Add support for Oracle 12c (bsc#967380)
  + High: sapdb.sh evaluate parameter DBOSUSER also in start and stop methods (bsc#971914)
  + Low: SAPInstance: Update version support statement (bsc#965872)
  + Low: apache: ensure readable $TESTCONFFILE
  + Added iSER enabled portal support
  + quote vgchange options
  + Added pgagent RA
  + galera: fix monitoring of joining node for long running SST
  + galera: don't bootstrap from a node with no grastate.dat when possible
  + oralsnr: fix status check fail when username is more than 8 characters long</changelog>
<changelog author="kgronlund@suse.com" date="1461672000">- Update to version 3.9.7+git.1461679689.18a78f5:
  + Medium: symlink: Handle missing directories in target (bsc#973054)
  + oracle: "shutdown immediate;" is needed after cleanup to be able to recover from the ORA-01081 error
  + oracle: inform user that monprofile must start with C## for container databases
  + tickle_tcp: Fix "Failed to open raw socket (Invalid argument)" issue</changelog>
<changelog author="kgronlund@suse.com" date="1462276800">- Update to version 3.9.7+git.1461938976.cb7c36a:
  + High: managing "Elastic IP" for EC2 instances
  + High: managing "Secondary Private IP" for EC2 instances
  + Low: VirtualDomain: fix unnecessary error when probing nonexistent domain
  + Low: mysql: Handle non-standard mysql server port
  + Low: Fix protential error for RA:nagios
  + Medium: iSCSILogicalUnit: Fix when using rbd store.
  + Low: iSCSILogicalUnit: Add tgt_bsopts parameter.
  + Low: Don't send Inaccessible real server e-mails in fork=yes mode</changelog>
<changelog author="jengelh@inai.de" date="1463745600">- Remove redundant %clean section. Ensure systemd-tmpfiles is run.</changelog>
<changelog author="kgronlund@suse.com" date="1464609600">- Medium: ldirectord: Remove IPv6 workaround (bsc#977193)
- Medium: CTDB: Use --logging syntax for ctdbd (bsc#981863)
- Add 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
- Add 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1467115200">- exportfs: Add pseudo resource factor (bsc#978680)
- Add 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="tchvatal@suse.com" date="1467288000">- Remove unused conditions from the spec-file as we build only on
  new enough distributions
- Sort all variables with spec-cleaner for better readability
- Enable monitoring subpkg as we now have all the needed dependencies
- Convert to pkgconfig style dependencies where applicable</changelog>
<changelog author="kgronlund@suse.com" date="1470916800">- Use non-libnet version of send_arp for IB support (bsc#985486)</changelog>
<changelog author="kgronlund@suse.com" date="1475755200">- Update to version 3.9.7+git.1475676827.4af1003:
  * High: rabbitmq-cluster: forget stopped rmq nodes with notify=true
  * [rabbitmq-cluster] Backup and restore rabbitmq users during resource restart
  * RabbitMQ: New error code - 69
  * RabbitMQ: Forget node before 2nd joining attempt
  * rabbitmq: Allow automatic cluster recovery before forcing it
  * oracle: fix MONPROFILE to use monprofile parameter when set
  * oracle: fix issue with C## in monprofile (bsc#1005424)
  * oracle: add quotes for monuser and monpassword
  * Medium: pgsql: change stop_escalate parameter as usable value
  * Low: pgsql: adjust stop_escalate time when it is longer than the timeout
  * [galera] Add /etc/default/clustercheck importation
  * Medium: ldirectord: Fix the issue in IPv4/IPv6 mixed environment
  * ldirectord: Do an initial check of all services in when in 'starting' status
  * Low NFS: add more default init scripts to check
  * exportfs: Add pseudo resource factor (bsc#978680)
  * exportfs: Add IPv6 support
  * Low: extend support for AWS elastic ip association
  * Low: Rename ra-dev-guide.txt to ra-dev-guide.asc
  * garbd: Introduces garbd resource-agent
- Drop merged patches:
  * Remove 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
  * Remove 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="kgronlund@suse.com" date="1476792000">- Revert send_arp to libnet version (bsc#985486)
  * For infiniband support in IPaddr2, install ipoibtools</changelog>
<changelog author="kgronlund@suse.com" date="1476792001">- Update to version 3.9.7+git.1475827855.a95ea74:
  * High: nfsserver: Delete the temp file correctly.
  * Low: nfsserver: Prevent unnecessary log output</changelog>
<changelog author="kgronlund@suse.com" date="1478001600">- Update to version 3.9.7+git.1477655995.de4be97:
  * adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142)
  * Medium: docker: Use docker exec for monitor_cmd if supported (bsc#1007867)
  * sg_persist: fix matching of hex node ids
  * sg_persist: do not spill info output to stderr
  * lvm.sh: fix status clustered to check the specified logical volume
  * Delay: set default startdelay lower than start timeout to avoid it timing out before starting with default values
  * Low: Filesystem: Clearer exit reason if mount fails</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 3.9.7+git.1478106349.5ff08d4:
  * tomcat: Add force_systemd parameter to rely on systemd service
  * nfsserver: dont stop rpcbind, as other services might use it
  * ldirectord: a further fix for spurious reminder e-mails
  * Medium: docker: Reduce monitor log spam
  * Medium: mysql-proxy: Fix incorrect conditional reported by shellcheck
  * Medium: garbd: Fix broken probe check
  * Doc: docker: Clarify limitations of monitor_cmd in parameter description</changelog>
<changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
<changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>

</package>
<package pkgid="5e9563e19dc4822075031b1a4a131001cc0557629969fecf36319a57bf195ceb" name="resource-agents" arch="src">
    <version epoch="0" ver="4.0.1+git.1495055229.643177f1" rel="6.1"/>

<changelog author="kgronlund@suse.com" date="1453982400">- Update to version 3.9.7~rc1+git.1453889774.3446b99:
  + Low: ldirectord: Fix unset failcount error (bsc#962795)</changelog>
<changelog author="kgronlund@suse.com" date="1454500800">- Update to version 3.9.7+git.1454497075.e697f43:
  + Medium: nfsserver: fix monitor for systemd
  + galera: force crash recovery if needed during last commit detection
  + galera: prevent recovered nodes from bootstrapping cluster when possible
  + galera: remove bashism
  + Add portal check to open_iscsi_get_session_id()</changelog>
<changelog author="kgronlund@suse.com" date="1455883200">- Update to version 3.9.7+git.1454950092.6f56933:
  + Dev: ocft: include runocft to the tarball</changelog>
<changelog author="kgronlund@suse.com" date="1458561600">- Update to version 3.9.7+git.1458512170.48350a9:
  + High: SAPDatabase: Add support for Oracle 12c (bsc#967380)
  + High: sapdb.sh evaluate parameter DBOSUSER also in start and stop methods (bsc#971914)
  + Low: SAPInstance: Update version support statement (bsc#965872)
  + Low: apache: ensure readable $TESTCONFFILE
  + Added iSER enabled portal support
  + quote vgchange options
  + Added pgagent RA
  + galera: fix monitoring of joining node for long running SST
  + galera: don't bootstrap from a node with no grastate.dat when possible
  + oralsnr: fix status check fail when username is more than 8 characters long</changelog>
<changelog author="kgronlund@suse.com" date="1461672000">- Update to version 3.9.7+git.1461679689.18a78f5:
  + Medium: symlink: Handle missing directories in target (bsc#973054)
  + oracle: "shutdown immediate;" is needed after cleanup to be able to recover from the ORA-01081 error
  + oracle: inform user that monprofile must start with C## for container databases
  + tickle_tcp: Fix "Failed to open raw socket (Invalid argument)" issue</changelog>
<changelog author="kgronlund@suse.com" date="1462276800">- Update to version 3.9.7+git.1461938976.cb7c36a:
  + High: managing "Elastic IP" for EC2 instances
  + High: managing "Secondary Private IP" for EC2 instances
  + Low: VirtualDomain: fix unnecessary error when probing nonexistent domain
  + Low: mysql: Handle non-standard mysql server port
  + Low: Fix protential error for RA:nagios
  + Medium: iSCSILogicalUnit: Fix when using rbd store.
  + Low: iSCSILogicalUnit: Add tgt_bsopts parameter.
  + Low: Don't send Inaccessible real server e-mails in fork=yes mode</changelog>
<changelog author="jengelh@inai.de" date="1463745600">- Remove redundant %clean section. Ensure systemd-tmpfiles is run.</changelog>
<changelog author="kgronlund@suse.com" date="1464609600">- Medium: ldirectord: Remove IPv6 workaround (bsc#977193)
- Medium: CTDB: Use --logging syntax for ctdbd (bsc#981863)
- Add 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
- Add 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1467115200">- exportfs: Add pseudo resource factor (bsc#978680)
- Add 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="tchvatal@suse.com" date="1467288000">- Remove unused conditions from the spec-file as we build only on
  new enough distributions
- Sort all variables with spec-cleaner for better readability
- Enable monitoring subpkg as we now have all the needed dependencies
- Convert to pkgconfig style dependencies where applicable</changelog>
<changelog author="kgronlund@suse.com" date="1470916800">- Use non-libnet version of send_arp for IB support (bsc#985486)</changelog>
<changelog author="kgronlund@suse.com" date="1475755200">- Update to version 3.9.7+git.1475676827.4af1003:
  * High: rabbitmq-cluster: forget stopped rmq nodes with notify=true
  * [rabbitmq-cluster] Backup and restore rabbitmq users during resource restart
  * RabbitMQ: New error code - 69
  * RabbitMQ: Forget node before 2nd joining attempt
  * rabbitmq: Allow automatic cluster recovery before forcing it
  * oracle: fix MONPROFILE to use monprofile parameter when set
  * oracle: fix issue with C## in monprofile (bsc#1005424)
  * oracle: add quotes for monuser and monpassword
  * Medium: pgsql: change stop_escalate parameter as usable value
  * Low: pgsql: adjust stop_escalate time when it is longer than the timeout
  * [galera] Add /etc/default/clustercheck importation
  * Medium: ldirectord: Fix the issue in IPv4/IPv6 mixed environment
  * ldirectord: Do an initial check of all services in when in 'starting' status
  * Low NFS: add more default init scripts to check
  * exportfs: Add pseudo resource factor (bsc#978680)
  * exportfs: Add IPv6 support
  * Low: extend support for AWS elastic ip association
  * Low: Rename ra-dev-guide.txt to ra-dev-guide.asc
  * garbd: Introduces garbd resource-agent
- Drop merged patches:
  * Remove 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
  * Remove 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="kgronlund@suse.com" date="1476792000">- Revert send_arp to libnet version (bsc#985486)
  * For infiniband support in IPaddr2, install ipoibtools</changelog>
<changelog author="kgronlund@suse.com" date="1476792001">- Update to version 3.9.7+git.1475827855.a95ea74:
  * High: nfsserver: Delete the temp file correctly.
  * Low: nfsserver: Prevent unnecessary log output</changelog>
<changelog author="kgronlund@suse.com" date="1478001600">- Update to version 3.9.7+git.1477655995.de4be97:
  * adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142)
  * Medium: docker: Use docker exec for monitor_cmd if supported (bsc#1007867)
  * sg_persist: fix matching of hex node ids
  * sg_persist: do not spill info output to stderr
  * lvm.sh: fix status clustered to check the specified logical volume
  * Delay: set default startdelay lower than start timeout to avoid it timing out before starting with default values
  * Low: Filesystem: Clearer exit reason if mount fails</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 3.9.7+git.1478106349.5ff08d4:
  * tomcat: Add force_systemd parameter to rely on systemd service
  * nfsserver: dont stop rpcbind, as other services might use it
  * ldirectord: a further fix for spurious reminder e-mails
  * Medium: docker: Reduce monitor log spam
  * Medium: mysql-proxy: Fix incorrect conditional reported by shellcheck
  * Medium: garbd: Fix broken probe check
  * Doc: docker: Clarify limitations of monitor_cmd in parameter description</changelog>
<changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
<changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
<changelog author="kgronlund@suse.com" date="1504612800">- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Add 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
- Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Add 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
- Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * Add 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
- High: galera: Backport fixes from upstream
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)
  * Add 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch</changelog>

</package>
<package pkgid="60064026100f5eeed89d7f8ed4404603c2abd3fbebe008c37912be3a39098055" name="resource-agents" arch="x86_64">
    <version epoch="0" ver="4.0.1+git.1495055229.643177f1" rel="3.1"/>

<changelog author="kgronlund@suse.com" date="1453118400">- Update to version 3.9.6+git.1452867140.fc8ace0:
  + SAPDatabase: Add Oracle 12 to list of supported databases (bsc#953991)
  + High: clvm: fix issue with only first option of daemon_options being used
  + High: mysql: fix grep failure on MySQL5.6 or higher when checking read_only variable
  + Medium: sg_persist: remove uncalled for ocf_run calls
  + Medium: ocf_shellfuncs: suppress bash specific trace_ra log on dash
  + Medium: ocf-rarun: replace error log messages with calls to ocf_exit_reason
  + Medium: nfsserver: do redhat specific stuff on redhat
  + Medium: iscsi: replace error log messages with calls to ocf_exit_reason
  + Medium: oracle/oralsnr: replace error log messages with calls to ocf_exit_reason
  + Medium: pingd: replace error log messages with calls to ocf_exit_reason
  + Medium: Raid1: replace error log messages with calls to ocf_exit_reason
  + Medium: pgsql: replace error log messages with calls to ocf_exit_reason
  + Medium: exportfs: don't increment fsid for single directory
  + Medium: Filesystem: add overlay as supported filesystem
  + Medium: mysql: When mysql has been already stopped, mysql is finished normally.
  + Low: pgsql: fix to be used valid charcters when the invalid characters is used in replication_slot_name.
  + Low: mysql: fix missing variables
  + Low: mysql: tmpfile is leaking when set the OCF_CHECK_LEVEL to 10
  + Low: nfsserver: prevent error messages on platforms without rpcuser (again)
  + Low: pgsql : fix invalid log message
  + Low: apache-conf: handle parsing includes with values in quotes
  + Low: pgsql: properly show default values in meta-data
  + Low : Changed the check handling of pid to the common function.
  + Low : Changed it that the message which pid file deleted repeated and did not appear
  + Low: pgsql: fix grep failure when using pacemaker 1.1.12
  + LVM: Allow vgck failures if partial
  + LVM: Correct grammar in partial_activation descriptions
  + IPaddr2: Add IPv6 DAD collision detection
  + VirtualDomain: New resource attributes migration_speed and migration_downtime
  + Nagios Resource Agent
  + Fix 90s wait/killing of databases containing the name of the database being killed, and added cleanup code to kill remaining listener process.
  + mysql.sh: wait up to startup_wait seconds before failing if mysqld startup is slow
- Remove patches that have been merged upstream
  - Remove 0001-nfsserver-Add-EXEC_MODE-for-systemd-without-nfs-lock.patch
  - Remove 0002-nfsserver-Use-rpc-statd.service-for-NFS-locking-in-E.patch</changelog>
<changelog author="kgronlund@suse.com" date="1453982400">- Update to version 3.9.7~rc1+git.1453889774.3446b99:
  + Low: ldirectord: Fix unset failcount error (bsc#962795)</changelog>
<changelog author="kgronlund@suse.com" date="1454500800">- Update to version 3.9.7+git.1454497075.e697f43:
  + Medium: nfsserver: fix monitor for systemd
  + galera: force crash recovery if needed during last commit detection
  + galera: prevent recovered nodes from bootstrapping cluster when possible
  + galera: remove bashism
  + Add portal check to open_iscsi_get_session_id()</changelog>
<changelog author="kgronlund@suse.com" date="1455883200">- Update to version 3.9.7+git.1454950092.6f56933:
  + Dev: ocft: include runocft to the tarball</changelog>
<changelog author="kgronlund@suse.com" date="1458561600">- Update to version 3.9.7+git.1458512170.48350a9:
  + High: SAPDatabase: Add support for Oracle 12c (bsc#967380)
  + High: sapdb.sh evaluate parameter DBOSUSER also in start and stop methods (bsc#971914)
  + Low: SAPInstance: Update version support statement (bsc#965872)
  + Low: apache: ensure readable $TESTCONFFILE
  + Added iSER enabled portal support
  + quote vgchange options
  + Added pgagent RA
  + galera: fix monitoring of joining node for long running SST
  + galera: don't bootstrap from a node with no grastate.dat when possible
  + oralsnr: fix status check fail when username is more than 8 characters long</changelog>
<changelog author="kgronlund@suse.com" date="1461672000">- Update to version 3.9.7+git.1461679689.18a78f5:
  + Medium: symlink: Handle missing directories in target (bsc#973054)
  + oracle: "shutdown immediate;" is needed after cleanup to be able to recover from the ORA-01081 error
  + oracle: inform user that monprofile must start with C## for container databases
  + tickle_tcp: Fix "Failed to open raw socket (Invalid argument)" issue</changelog>
<changelog author="kgronlund@suse.com" date="1462276800">- Update to version 3.9.7+git.1461938976.cb7c36a:
  + High: managing "Elastic IP" for EC2 instances
  + High: managing "Secondary Private IP" for EC2 instances
  + Low: VirtualDomain: fix unnecessary error when probing nonexistent domain
  + Low: mysql: Handle non-standard mysql server port
  + Low: Fix protential error for RA:nagios
  + Medium: iSCSILogicalUnit: Fix when using rbd store.
  + Low: iSCSILogicalUnit: Add tgt_bsopts parameter.
  + Low: Don't send Inaccessible real server e-mails in fork=yes mode</changelog>
<changelog author="jengelh@inai.de" date="1463745600">- Remove redundant %clean section. Ensure systemd-tmpfiles is run.</changelog>
<changelog author="kgronlund@suse.com" date="1464609600">- Medium: ldirectord: Remove IPv6 workaround (bsc#977193)
- Medium: CTDB: Use --logging syntax for ctdbd (bsc#981863)
- Add 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
- Add 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1467115200">- exportfs: Add pseudo resource factor (bsc#978680)
- Add 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="tchvatal@suse.com" date="1467288000">- Remove unused conditions from the spec-file as we build only on
  new enough distributions
- Sort all variables with spec-cleaner for better readability
- Enable monitoring subpkg as we now have all the needed dependencies
- Convert to pkgconfig style dependencies where applicable</changelog>
<changelog author="kgronlund@suse.com" date="1470916800">- Use non-libnet version of send_arp for IB support (bsc#985486)</changelog>
<changelog author="kgronlund@suse.com" date="1475755200">- Update to version 3.9.7+git.1475676827.4af1003:
  * High: rabbitmq-cluster: forget stopped rmq nodes with notify=true
  * [rabbitmq-cluster] Backup and restore rabbitmq users during resource restart
  * RabbitMQ: New error code - 69
  * RabbitMQ: Forget node before 2nd joining attempt
  * rabbitmq: Allow automatic cluster recovery before forcing it
  * oracle: fix MONPROFILE to use monprofile parameter when set
  * oracle: fix issue with C## in monprofile (bsc#1005424)
  * oracle: add quotes for monuser and monpassword
  * Medium: pgsql: change stop_escalate parameter as usable value
  * Low: pgsql: adjust stop_escalate time when it is longer than the timeout
  * [galera] Add /etc/default/clustercheck importation
  * Medium: ldirectord: Fix the issue in IPv4/IPv6 mixed environment
  * ldirectord: Do an initial check of all services in when in 'starting' status
  * Low NFS: add more default init scripts to check
  * exportfs: Add pseudo resource factor (bsc#978680)
  * exportfs: Add IPv6 support
  * Low: extend support for AWS elastic ip association
  * Low: Rename ra-dev-guide.txt to ra-dev-guide.asc
  * garbd: Introduces garbd resource-agent
- Drop merged patches:
  * Remove 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
  * Remove 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="kgronlund@suse.com" date="1476792000">- Revert send_arp to libnet version (bsc#985486)
  * For infiniband support in IPaddr2, install ipoibtools</changelog>
<changelog author="kgronlund@suse.com" date="1476792001">- Update to version 3.9.7+git.1475827855.a95ea74:
  * High: nfsserver: Delete the temp file correctly.
  * Low: nfsserver: Prevent unnecessary log output</changelog>
<changelog author="kgronlund@suse.com" date="1478001600">- Update to version 3.9.7+git.1477655995.de4be97:
  * adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142)
  * Medium: docker: Use docker exec for monitor_cmd if supported (bsc#1007867)
  * sg_persist: fix matching of hex node ids
  * sg_persist: do not spill info output to stderr
  * lvm.sh: fix status clustered to check the specified logical volume
  * Delay: set default startdelay lower than start timeout to avoid it timing out before starting with default values
  * Low: Filesystem: Clearer exit reason if mount fails</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 3.9.7+git.1478106349.5ff08d4:
  * tomcat: Add force_systemd parameter to rely on systemd service
  * nfsserver: dont stop rpcbind, as other services might use it
  * ldirectord: a further fix for spurious reminder e-mails
  * Medium: docker: Reduce monitor log spam
  * Medium: mysql-proxy: Fix incorrect conditional reported by shellcheck
  * Medium: garbd: Fix broken probe check
  * Doc: docker: Clarify limitations of monitor_cmd in parameter description</changelog>
<changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
<changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>

</package>
<package pkgid="aff2a841274384bf514103ea65c0fdd1b1fcfb4110a12bd689a6a5632c842cb0" name="resource-agents" arch="x86_64">
    <version epoch="0" ver="4.0.1+git.1495055229.643177f1" rel="6.1"/>

<changelog author="kgronlund@suse.com" date="1453982400">- Update to version 3.9.7~rc1+git.1453889774.3446b99:
  + Low: ldirectord: Fix unset failcount error (bsc#962795)</changelog>
<changelog author="kgronlund@suse.com" date="1454500800">- Update to version 3.9.7+git.1454497075.e697f43:
  + Medium: nfsserver: fix monitor for systemd
  + galera: force crash recovery if needed during last commit detection
  + galera: prevent recovered nodes from bootstrapping cluster when possible
  + galera: remove bashism
  + Add portal check to open_iscsi_get_session_id()</changelog>
<changelog author="kgronlund@suse.com" date="1455883200">- Update to version 3.9.7+git.1454950092.6f56933:
  + Dev: ocft: include runocft to the tarball</changelog>
<changelog author="kgronlund@suse.com" date="1458561600">- Update to version 3.9.7+git.1458512170.48350a9:
  + High: SAPDatabase: Add support for Oracle 12c (bsc#967380)
  + High: sapdb.sh evaluate parameter DBOSUSER also in start and stop methods (bsc#971914)
  + Low: SAPInstance: Update version support statement (bsc#965872)
  + Low: apache: ensure readable $TESTCONFFILE
  + Added iSER enabled portal support
  + quote vgchange options
  + Added pgagent RA
  + galera: fix monitoring of joining node for long running SST
  + galera: don't bootstrap from a node with no grastate.dat when possible
  + oralsnr: fix status check fail when username is more than 8 characters long</changelog>
<changelog author="kgronlund@suse.com" date="1461672000">- Update to version 3.9.7+git.1461679689.18a78f5:
  + Medium: symlink: Handle missing directories in target (bsc#973054)
  + oracle: "shutdown immediate;" is needed after cleanup to be able to recover from the ORA-01081 error
  + oracle: inform user that monprofile must start with C## for container databases
  + tickle_tcp: Fix "Failed to open raw socket (Invalid argument)" issue</changelog>
<changelog author="kgronlund@suse.com" date="1462276800">- Update to version 3.9.7+git.1461938976.cb7c36a:
  + High: managing "Elastic IP" for EC2 instances
  + High: managing "Secondary Private IP" for EC2 instances
  + Low: VirtualDomain: fix unnecessary error when probing nonexistent domain
  + Low: mysql: Handle non-standard mysql server port
  + Low: Fix protential error for RA:nagios
  + Medium: iSCSILogicalUnit: Fix when using rbd store.
  + Low: iSCSILogicalUnit: Add tgt_bsopts parameter.
  + Low: Don't send Inaccessible real server e-mails in fork=yes mode</changelog>
<changelog author="jengelh@inai.de" date="1463745600">- Remove redundant %clean section. Ensure systemd-tmpfiles is run.</changelog>
<changelog author="kgronlund@suse.com" date="1464609600">- Medium: ldirectord: Remove IPv6 workaround (bsc#977193)
- Medium: CTDB: Use --logging syntax for ctdbd (bsc#981863)
- Add 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
- Add 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1467115200">- exportfs: Add pseudo resource factor (bsc#978680)
- Add 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="tchvatal@suse.com" date="1467288000">- Remove unused conditions from the spec-file as we build only on
  new enough distributions
- Sort all variables with spec-cleaner for better readability
- Enable monitoring subpkg as we now have all the needed dependencies
- Convert to pkgconfig style dependencies where applicable</changelog>
<changelog author="kgronlund@suse.com" date="1470916800">- Use non-libnet version of send_arp for IB support (bsc#985486)</changelog>
<changelog author="kgronlund@suse.com" date="1475755200">- Update to version 3.9.7+git.1475676827.4af1003:
  * High: rabbitmq-cluster: forget stopped rmq nodes with notify=true
  * [rabbitmq-cluster] Backup and restore rabbitmq users during resource restart
  * RabbitMQ: New error code - 69
  * RabbitMQ: Forget node before 2nd joining attempt
  * rabbitmq: Allow automatic cluster recovery before forcing it
  * oracle: fix MONPROFILE to use monprofile parameter when set
  * oracle: fix issue with C## in monprofile (bsc#1005424)
  * oracle: add quotes for monuser and monpassword
  * Medium: pgsql: change stop_escalate parameter as usable value
  * Low: pgsql: adjust stop_escalate time when it is longer than the timeout
  * [galera] Add /etc/default/clustercheck importation
  * Medium: ldirectord: Fix the issue in IPv4/IPv6 mixed environment
  * ldirectord: Do an initial check of all services in when in 'starting' status
  * Low NFS: add more default init scripts to check
  * exportfs: Add pseudo resource factor (bsc#978680)
  * exportfs: Add IPv6 support
  * Low: extend support for AWS elastic ip association
  * Low: Rename ra-dev-guide.txt to ra-dev-guide.asc
  * garbd: Introduces garbd resource-agent
- Drop merged patches:
  * Remove 0001-Medium-ldirectord-Remove-IPv6-workaround-bsc-977193.patch
  * Remove 0001-exportfs-Add-pseudo-resource-factor-bsc-978680.patch</changelog>
<changelog author="kgronlund@suse.com" date="1476792000">- Revert send_arp to libnet version (bsc#985486)
  * For infiniband support in IPaddr2, install ipoibtools</changelog>
<changelog author="kgronlund@suse.com" date="1476792001">- Update to version 3.9.7+git.1475827855.a95ea74:
  * High: nfsserver: Delete the temp file correctly.
  * Low: nfsserver: Prevent unnecessary log output</changelog>
<changelog author="kgronlund@suse.com" date="1478001600">- Update to version 3.9.7+git.1477655995.de4be97:
  * adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142)
  * Medium: docker: Use docker exec for monitor_cmd if supported (bsc#1007867)
  * sg_persist: fix matching of hex node ids
  * sg_persist: do not spill info output to stderr
  * lvm.sh: fix status clustered to check the specified logical volume
  * Delay: set default startdelay lower than start timeout to avoid it timing out before starting with default values
  * Low: Filesystem: Clearer exit reason if mount fails</changelog>
<changelog author="kgronlund@suse.com" date="1478088000">- Update to version 3.9.7+git.1478106349.5ff08d4:
  * tomcat: Add force_systemd parameter to rely on systemd service
  * nfsserver: dont stop rpcbind, as other services might use it
  * ldirectord: a further fix for spurious reminder e-mails
  * Medium: docker: Reduce monitor log spam
  * Medium: mysql-proxy: Fix incorrect conditional reported by shellcheck
  * Medium: garbd: Fix broken probe check
  * Doc: docker: Clarify limitations of monitor_cmd in parameter description</changelog>
<changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
<changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
<changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
<changelog author="kgronlund@suse.com" date="1504612800">- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0007-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0008-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  * Add 0009-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch
- Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Add 0011-Low-ocf-shellfuncs-Avoid-printing-empty-INFO-message.patch
- Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * Add 0012-Low-SAPInstance-Mention-monitor-support-in-documenta.patch
- High: galera: Backport fixes from upstream
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)
  * Add 0013-High-galera-Backport-galera-fixes-from-upstream-bsc-.patch</changelog>

</package>
<package pkgid="a5d2de2c2bfd40222cf7d5aa21e948c241958a8129169a93b6d34dee76d7ef65" name="rmail" arch="x86_64">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="7a42f0550968cb9c5ff7fe934786f6c47413a37f9ff4620f26dd598f49c86bf9" name="rp-pppoe" arch="src">
    <version epoch="0" ver="3.12" rel="3.1"/>

<changelog author="ro@suse.de" date="1062763200">- fix typo in specfile</changelog>
<changelog author="adrian@suse.de" date="1073736000">- build as user</changelog>
<changelog author="arvin@suse.de" date="1106136000">- fixed build on s390 by compiling without -ansi</changelog>
<changelog author="arvin@suse.de" date="1127304000">- updated to version 3.6:
  - Changed the names of commands from adsl-* to pppoe-* to
    more logically name the scripts (incompatibility)
  - Changed sample firewall scripts to use iptables instead of
    the old ipchains command</changelog>
<changelog author="arvin@suse.de" date="1132228800">- updated to version 3.7
  - pppoe-server prepends "nic-" to interface name if used with
    kernel-mode plugin
  - added -O option to pppoe-server that specify a different
    default options file for pppd</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="schwab@suse.de" date="1148644800">- Use RPM_OPT_FLAGS.
- Don't strip binaries.</changelog>
<changelog author="mskibbe@suse.de" date="1152792000">- update to version 3.8 which
  o Adjusted code and made it possible to disable debugging code
    to shrink size of pppoe executable.
  o Fixed bug in MD5 code that caused pppoe-server to segfault on
    64-bit machines.
  o Made various functions and variables static that didn't need
    to be visible outside their source files.</changelog>
<changelog author="crrodriguez@suse.de" date="1203595200">- add missing remote_fs dependency in the init script
- fix/add missing calls to restart_on_update and stop_on_removal macros</changelog>
<changelog author="hvogel@suse.de" date="1215172800">- update to version 3.10
  * some compilation fixes
  * pppoe-server has new "-x" option to limit the number of sessions
    per MAC address.
  * Added proper timeout handling while waiting for PADO/PADS.
  * Fix race condition with some access concentrators</changelog>
<changelog author="chris@computersalat.de" date="1239796800">- beautify spec</changelog>
<changelog author="chris@computersalat.de" date="1241784000">- new patch for init script
  o added reload
  o rework of status
- added config patch</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="crrodriguez@opensuse.org" date="1327406400">- build pppoe-wrapper with PIE and full RELRO</changelog>
<changelog author="binli@opensuse.org" date="1366718400">- update to version 3.11
  * Make the rp-pppoe.so plugin avoid calling exit() if
    the "persist" pppd option was given.
  * Get rid of hard-coded nobsdcomp, nodeflate, novj and novjccomp
    options in pppoe-server.
  * Handle UNIT=xxx directive in pppoe-connect.
  * Add "-i" flag to pppoe-server to ignore PADIs if there are
    no free sessions.
  * Add "-X &lt;pidfile&gt;" option to pppoe-server.
  * In plugin, don't set devnam if it's already set.
  * Eliminate race condition in signal handling.
  * pppoe-server: Add -q and -Q options to allow specification of
    path to pppd and pppoe programs respectively.
  * Add a few more sanity checks to pppoe-server packet handling.</changelog>
<changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit; add pppoe-server.service
- Install fixed versions of rp-pppoe scripts for openSUSE &gt; 11.4
  most of fixes are about paths, because of /usr move
  Added:  pppoe-setup, ,pppoe-start, pppoe-connect, pppoe-status ,
  pppoe-stop</changelog>
<changelog author="13ilya@gmail.com" date="1477396800">- Update to version 3.12.
- Fix patch release-buildsystem.diff for 3.12 version.
- Add to Requires net-tools-deprecated package.
- Reordered patch positions.
- Formated all the variables in the spec-file to macro style.</changelog>
<changelog author="13ilya@gmail.com" date="1479297600">- Fix patches and script for version 3.12.
- dropped logger-path.diff
- Add net-tools support. net-tools-deprecated is no longer required.</changelog>
<changelog author="ilya@ilya.pp.ua" date="1507464000">- Add pppoe.service for run pppoe as client (boo#1060710).
- Refresh pppoe.spec.
- Drop SLE 11 support.</changelog>
<changelog author="ilya@ilya.pp.ua" date="1510228800">- Refresh pppoe.spec via spec-cleaner.</changelog>

</package>
<package pkgid="7db8ab9c288254a1beecebf478ea2918f3df3da471408e323b5f3a2c63b18ff1" name="rp-pppoe" arch="x86_64">
    <version epoch="0" ver="3.12" rel="3.1"/>

<changelog author="chris@computersalat.de" date="1239796800">- beautify spec</changelog>
<changelog author="chris@computersalat.de" date="1241784000">- new patch for init script
  o added reload
  o rework of status
- added config patch</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="crrodriguez@opensuse.org" date="1327406400">- build pppoe-wrapper with PIE and full RELRO</changelog>
<changelog author="binli@opensuse.org" date="1366718400">- update to version 3.11
  * Make the rp-pppoe.so plugin avoid calling exit() if
    the "persist" pppd option was given.
  * Get rid of hard-coded nobsdcomp, nodeflate, novj and novjccomp
    options in pppoe-server.
  * Handle UNIT=xxx directive in pppoe-connect.
  * Add "-i" flag to pppoe-server to ignore PADIs if there are
    no free sessions.
  * Add "-X &lt;pidfile&gt;" option to pppoe-server.
  * In plugin, don't set devnam if it's already set.
  * Eliminate race condition in signal handling.
  * pppoe-server: Add -q and -Q options to allow specification of
    path to pppd and pppoe programs respectively.
  * Add a few more sanity checks to pppoe-server packet handling.</changelog>
<changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit; add pppoe-server.service
- Install fixed versions of rp-pppoe scripts for openSUSE &gt; 11.4
  most of fixes are about paths, because of /usr move
  Added:  pppoe-setup, ,pppoe-start, pppoe-connect, pppoe-status ,
  pppoe-stop</changelog>
<changelog author="13ilya@gmail.com" date="1477396800">- Update to version 3.12.
- Fix patch release-buildsystem.diff for 3.12 version.
- Add to Requires net-tools-deprecated package.
- Reordered patch positions.
- Formated all the variables in the spec-file to macro style.</changelog>
<changelog author="13ilya@gmail.com" date="1479297600">- Fix patches and script for version 3.12.
- dropped logger-path.diff
- Add net-tools support. net-tools-deprecated is no longer required.</changelog>
<changelog author="ilya@ilya.pp.ua" date="1507464000">- Add pppoe.service for run pppoe as client (boo#1060710).
- Refresh pppoe.spec.
- Drop SLE 11 support.</changelog>
<changelog author="ilya@ilya.pp.ua" date="1510228800">- Refresh pppoe.spec via spec-cleaner.</changelog>

</package>
<package pkgid="73a99e3206ce7819da48643ae00d91b64fc45bb0403b92c126a6671ca08c826d" name="rpmlint" arch="noarch">
    <version epoch="0" ver="1.8" rel="16.1"/>

<changelog author="krahmer@suse.com" date="1486382400">- adding blueman (bsc#987141)</changelog>
<changelog author="lars@linux-schulserver.de" date="1486382401">- rename user/group sks to _sks following
  https://github.com/LinuxStandardBase/lsb/pull/21</changelog>
<changelog author="mimi.vx@gmail.com" date="1488456000">- fix boo#1027577
  patch boo1027577-license_tag.patch</changelog>
<changelog author="lnussel@suse.de" date="1489060800">- rpmlint-checks:
  * Check for old SysVinit scripts and the usage of insserv (FATE#322953)
  * Prevent a false-positive in systemd</changelog>
<changelog author="kkaempf@suse.com" date="1489752000">- Add logstash to StandardGroups and StandardUsers.</changelog>
<changelog author="lnussel@suse.de" date="1490011200">- actually enable CheckSysVinitOnSystemd</changelog>
<changelog author="dmueller@suse.com" date="1491825600">- remove CheckKDE4Deps, CheckInitScripts</changelog>
<changelog author="krahmer@suse.com" date="1491912000">- Adding os-autoinst (bsc#1032649)</changelog>
<changelog author="mgerstner@suse.com" date="1491912001">- Adding kwalletmanager5 (bsc#1033296)</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492516800">- Update to version 84.87+git20170418.092177d:
  * Remove initscript related tests, systemd FTW!</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492516801">- Update to version master:
  * remote unused/outdated checks</changelog>
<changelog author="krahmer@suse.com" date="1492603200">- whitelisting thunderbolt (bsc#1033554)</changelog>
<changelog author="mgerstner@suse.com" date="1493380800">- whitelisting backintime (bsc#1007723, bsc#1032717)</changelog>
<changelog author="krahmer@suse.com" date="1494936000">- whitelisting switchroo-control (bsc#1034309)</changelog>
<changelog author="tserong@suse.com" date="1495713600">- add 'prometheus' and 'grafana' standard users and groups</changelog>
<changelog author="krahmer@suse.com" date="1496232000">- whitelisting openqa (bsc#1039290)</changelog>
<changelog author="jochen.becker@hrz.tu-darmstadt.de" date="1496232001">- std-user and std-group 'xymon', added for building correct xymon client</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1496318400">- Add BinariesCheck_fix_chroot_check_on_non_x86.patch
  Check for correct invocation of chroot was only implemented for x86</changelog>
<changelog author="marec@detebe.org" date="1496750400">- std-user and std-group 'bitcoin' added for building correct bitcoin daemon</changelog>
<changelog author="matthias.gerstner@suse.com" date="1509969600">- backported NetworkManager-l2tp whitelisting from Factory (bnc#846337) to
  facilitate sr#537752</changelog>

</package>
<package pkgid="7f8c298d0502974e10c7214939ec81027859686c632279a744178a7a2c58edc1" name="rpmlint" arch="src">
    <version epoch="0" ver="1.8" rel="16.1"/>

<changelog author="krahmer@suse.com" date="1486382400">- adding blueman (bsc#987141)</changelog>
<changelog author="lars@linux-schulserver.de" date="1486382401">- rename user/group sks to _sks following
  https://github.com/LinuxStandardBase/lsb/pull/21</changelog>
<changelog author="mimi.vx@gmail.com" date="1488456000">- fix boo#1027577
  patch boo1027577-license_tag.patch</changelog>
<changelog author="lnussel@suse.de" date="1489060800">- rpmlint-checks:
  * Check for old SysVinit scripts and the usage of insserv (FATE#322953)
  * Prevent a false-positive in systemd</changelog>
<changelog author="kkaempf@suse.com" date="1489752000">- Add logstash to StandardGroups and StandardUsers.</changelog>
<changelog author="lnussel@suse.de" date="1490011200">- actually enable CheckSysVinitOnSystemd</changelog>
<changelog author="dmueller@suse.com" date="1491825600">- remove CheckKDE4Deps, CheckInitScripts</changelog>
<changelog author="krahmer@suse.com" date="1491912000">- Adding os-autoinst (bsc#1032649)</changelog>
<changelog author="mgerstner@suse.com" date="1491912001">- Adding kwalletmanager5 (bsc#1033296)</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492516800">- Update to version 84.87+git20170418.092177d:
  * Remove initscript related tests, systemd FTW!</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492516801">- Update to version master:
  * remote unused/outdated checks</changelog>
<changelog author="krahmer@suse.com" date="1492603200">- whitelisting thunderbolt (bsc#1033554)</changelog>
<changelog author="mgerstner@suse.com" date="1493380800">- whitelisting backintime (bsc#1007723, bsc#1032717)</changelog>
<changelog author="krahmer@suse.com" date="1494936000">- whitelisting switchroo-control (bsc#1034309)</changelog>
<changelog author="tserong@suse.com" date="1495713600">- add 'prometheus' and 'grafana' standard users and groups</changelog>
<changelog author="krahmer@suse.com" date="1496232000">- whitelisting openqa (bsc#1039290)</changelog>
<changelog author="jochen.becker@hrz.tu-darmstadt.de" date="1496232001">- std-user and std-group 'xymon', added for building correct xymon client</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1496318400">- Add BinariesCheck_fix_chroot_check_on_non_x86.patch
  Check for correct invocation of chroot was only implemented for x86</changelog>
<changelog author="marec@detebe.org" date="1496750400">- std-user and std-group 'bitcoin' added for building correct bitcoin daemon</changelog>
<changelog author="matthias.gerstner@suse.com" date="1509969600">- backported NetworkManager-l2tp whitelisting from Factory (bnc#846337) to
  facilitate sr#537752</changelog>

</package>
<package pkgid="b71a5ffae5b263d47a612de32b35de02abd0b8a48f60c92914beddb97720ed2c" name="rpmlint-mini" arch="src">
    <version epoch="0" ver="1.8" rel="6.2"/>

<changelog author="giecrilj@stegny.2a.pl" date="1330084800">- add documentation</changelog>
<changelog author="dmueller@suse.com" date="1347451200">- update to desktop-file-validate 0.20 (bnc#779850):
  - add MATE and Razor to list of registered environments (Vincent)
  - validate Desktop Actions (Giovanni Campagna, Vincent)</changelog>
<changelog author="coolo@suse.com" date="1351425600">- let it require cpio - the same as with rpmlint</changelog>
<changelog author="coolo@suse.com" date="1351425601">- fix build by passing rpmlint :)</changelog>
<changelog author="dmueller@suse.com" date="1357128000">- bump version to 1.4</changelog>
<changelog author="dmueller@suse.com" date="1372248000">- fix build against python 2.7.5</changelog>
<changelog author="dmueller@suse.com" date="1372420800">- update to desktop-file-validate 0.21:
  - update to current version of menu specification (Vincent):
  - only print hint if no main category is present, not an error
  - make Science a main category
  - add new registered categories: Adult, Feed, Humanities, Maps,
    Shooter, Spirituality, XFCE
  - update related categories
  - add TDE to list of registered OnlyShowIn
  - accept and validate GNOME3/GSettings for AutostartCondition (Vincent)
  - output hint if more than one main category is present (Vincent)
  - output hint about suggested related categories (Vincent)</changelog>
<changelog author="dmueller@suse.com" date="1378123200">- update to desktop-file-validate 0.22:
  - add DBusActivatable key to allowed keys
  - warn about OnlyShowIn in Action groups
  - allow validating multiple desktop files
  - improve help output
  - update man page</changelog>
<changelog author="dmueller@suse.com" date="1380024000">- no longer install rpmgroups.config</changelog>
<changelog author="lnussel@suse.de" date="1380715200">- dash is in /usr/bin now</changelog>
<changelog author="dmueller@suse.com" date="1380801600">- repackage libedit0 dependency of dash</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1398513600">- package dependencies of ErlangCheck.py:
  - python-pybeam
  - python-construct
  - python-six
  note, that ErlangCheck.py is not enabled by default</changelog>
<changelog author="lnussel@suse.de" date="1429531200">- add lib-dynload/unicodedata.so required by rpmlint 1.6</changelog>
<changelog author="dmueller@suse.com" date="1456142400">- raise version to 1.8</changelog>
<changelog author="werner@suse.de" date="1461153600">- Also copy magic and magic.mgc to /opt/testing to have the
  correct magic files for the used libmagic around.
  Use the environment variable MAGIC to hel the wrapper to
  to find the magic file for its libmagic (boo#976406)</changelog>
<changelog author="dmueller@suse.com" date="1477656000">- update desktop-file-utils to 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).</changelog>
<changelog author="dimstar@opensuse.org" date="1481284800">- Configure appdata_checker: pass --nonet in plus: as OBS has no
  internet access, every appdata file containing screenshots would
  be marked as 'failed' otherwise.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1484740800">- Adapt rpmlint-deps.txt for python-construct &gt;= 2.8</changelog>
<changelog author="meissner@suse.com" date="1485950400">- buildignore ourselves to allow better bootstrapping.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1495800000">- Add rpmlint-deps.patch:
  Revert 'Adapt rpmlint-deps.txt for python-construct &gt;= 2.8'
  for Leap 42.x</changelog>

</package>
<package pkgid="1fa56afcb1cf9550d03dd1f001e65be266e7312150fd4cd82f854f408e0f010f" name="rpmlint-mini" arch="x86_64">
    <version epoch="0" ver="1.8" rel="6.2"/>

<changelog author="giecrilj@stegny.2a.pl" date="1330084800">- add documentation</changelog>
<changelog author="dmueller@suse.com" date="1347451200">- update to desktop-file-validate 0.20 (bnc#779850):
  - add MATE and Razor to list of registered environments (Vincent)
  - validate Desktop Actions (Giovanni Campagna, Vincent)</changelog>
<changelog author="coolo@suse.com" date="1351425600">- let it require cpio - the same as with rpmlint</changelog>
<changelog author="coolo@suse.com" date="1351425601">- fix build by passing rpmlint :)</changelog>
<changelog author="dmueller@suse.com" date="1357128000">- bump version to 1.4</changelog>
<changelog author="dmueller@suse.com" date="1372248000">- fix build against python 2.7.5</changelog>
<changelog author="dmueller@suse.com" date="1372420800">- update to desktop-file-validate 0.21:
  - update to current version of menu specification (Vincent):
  - only print hint if no main category is present, not an error
  - make Science a main category
  - add new registered categories: Adult, Feed, Humanities, Maps,
    Shooter, Spirituality, XFCE
  - update related categories
  - add TDE to list of registered OnlyShowIn
  - accept and validate GNOME3/GSettings for AutostartCondition (Vincent)
  - output hint if more than one main category is present (Vincent)
  - output hint about suggested related categories (Vincent)</changelog>
<changelog author="dmueller@suse.com" date="1378123200">- update to desktop-file-validate 0.22:
  - add DBusActivatable key to allowed keys
  - warn about OnlyShowIn in Action groups
  - allow validating multiple desktop files
  - improve help output
  - update man page</changelog>
<changelog author="dmueller@suse.com" date="1380024000">- no longer install rpmgroups.config</changelog>
<changelog author="lnussel@suse.de" date="1380715200">- dash is in /usr/bin now</changelog>
<changelog author="dmueller@suse.com" date="1380801600">- repackage libedit0 dependency of dash</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1398513600">- package dependencies of ErlangCheck.py:
  - python-pybeam
  - python-construct
  - python-six
  note, that ErlangCheck.py is not enabled by default</changelog>
<changelog author="lnussel@suse.de" date="1429531200">- add lib-dynload/unicodedata.so required by rpmlint 1.6</changelog>
<changelog author="dmueller@suse.com" date="1456142400">- raise version to 1.8</changelog>
<changelog author="werner@suse.de" date="1461153600">- Also copy magic and magic.mgc to /opt/testing to have the
  correct magic files for the used libmagic around.
  Use the environment variable MAGIC to hel the wrapper to
  to find the magic file for its libmagic (boo#976406)</changelog>
<changelog author="dmueller@suse.com" date="1477656000">- update desktop-file-utils to 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).</changelog>
<changelog author="dimstar@opensuse.org" date="1481284800">- Configure appdata_checker: pass --nonet in plus: as OBS has no
  internet access, every appdata file containing screenshots would
  be marked as 'failed' otherwise.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1484740800">- Adapt rpmlint-deps.txt for python-construct &gt;= 2.8</changelog>
<changelog author="meissner@suse.com" date="1485950400">- buildignore ourselves to allow better bootstrapping.</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1495800000">- Add rpmlint-deps.patch:
  Revert 'Adapt rpmlint-deps.txt for python-construct &gt;= 2.8'
  for Leap 42.x</changelog>

</package>
<package pkgid="cbc8d94139432d08aae993491c9f8f38e39ea7d46faafa085dee71de06af8af5" name="rpmlint-tests" arch="src">
    <version epoch="0" ver="84.87+git20170418.092177d" rel="16.1"/>

<changelog author="lnussel@suse.de" date="1394193600">- add appdata check</changelog>
<changelog author="lnussel@suse.de" date="1399377600">- adjust for new var/run check
- use service file</changelog>
<changelog author="lnussel@suse.de" date="1408622400">- add test cases for systemd macros</changelog>
<changelog author="lnussel@suse.de" date="1408622401">- fix rclink* tests by adding expected systemd macros</changelog>
<changelog author="lnussel@suse.de" date="1425988800">- Update to version 13.2+git20150310.00c9b55:
  + fix reference output when new bash is used</changelog>
<changelog author="meissner@suse.com" date="1428580800">- rpmlint-pie-fixes.patch: build own non-pie binaries to avoid
  relying on random system binaries.</changelog>
<changelog author="lnussel@suse.de" date="1429617600">- Update to version 13.2+git20150410.6161e60:
  + build our own non-PIE binaries, as the distribution slowly gets converted to all PIE binaries
  (removed rpmlint-pie-fixes.patch)</changelog>
<changelog author="lnussel@suse.de" date="1432036800">- Update to version 13.2+git20150519.278efdf:
  + add ghost file checks
  + print names of failed tests</changelog>
<changelog author="lnussel@suse.de" date="1432123200">- Update to version 13.2+git20150520.a374c88:
  + add tmpfiles.d checks</changelog>
<changelog author="lnussel@suse.de" date="1447156800">- Update to version 13.2+git20151110.e8d6260:
  + fixed two new warnings</changelog>
<changelog author="lnussel@suse.de" date="1447416000">- Update to version 13.2+git20151113.ff9879a:
  + adjust for tmpfiles fix</changelog>
<changelog author="lnussel@suse.de" date="1448884800">- Update to version 13.2+git20151130.b31588d:
  + add shared library tests</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1457438400">- add regression test for boo#970170</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1467979200">- BuildRequire rpmlint-Factory-strict to have same config on all
  releases, fixes failed tests on Tumbleweed</changelog>
<changelog author="lnussel@suse.de" date="1469448000">- Update to version 13.2+git20160725.8d99488:
  * add check for calls to gethostbyname and similar
  * add check for correct invocation of chroot
- remove rpmlint-check-gethostbyname.patch</changelog>
<changelog author="jberry@suse.com" date="1477396800">- Patch lint severity reductions for &gt;= Leap 42.2:
  0001-Update-varrun-test-for-Leap-42.2-severity-reduction.patch
  0002-Update-license1-test-for-Leap-42.2-severity-reductio.patch</changelog>
<changelog author="lnussel@suse.de" date="1489060800">- Update to version 84.87+git20161214.5500838
  * add checks for shlib-policy-name-error and "no dependency on *lib*"
- remove
  0002-Update-license1-test-for-Leap-42.2-severity-reductio.patch as
  rpmlint-Factory-strict is pulled in always.</changelog>
<changelog author="lnussel@suse.de" date="1490011200">- Update to version 84.87+git20170320.f92cea5:
  * Adjust for new init script check</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492516800">- Update to version 84.87+git20170418.092177d:
  * Remove initscript related tests, systemd FTW!</changelog>
<changelog author="opensuse-packaging@opensuse.org" date="1492516801">- Update to version master:
  * remote unused/outdated checks</changelog>

</package>
<package pkgid="bc2ea7e8828240f21e0f928e767f6b9584cc2463f0c99eb96924cd4e81c0c294" name="rsvg-thumbnailer" arch="noarch">
    <version epoch="0" ver="2.40.18" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
<changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
<changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
<changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
<changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
<changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
<changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
<changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
<changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
<changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
<changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
<changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
<changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>

</package>
<package pkgid="f918b207e39af784963c0df4891c75e13c4bc4ac3e50b4da4db5d75228618610" name="rsvg-view" arch="x86_64">
    <version epoch="0" ver="2.40.18" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1395144000">- Update to version 2.40.2:
  + Bugs fixed: bgo#710163, bgo#719552.</changelog>
<changelog author="dimstar@opensuse.org" date="1408363200">- Update to version 2.40.3:
  + Bugs fixed: bgo#731182, bgo#710310, bgo#721354.</changelog>
<changelog author="dimstar@opensuse.org" date="1408795200">- BuildIgnore adwaita-icon-theme: Avoid cycle: we do not require
  the adwaita-icon-theme to be present. libgtk-3.0 requires this
  for end users.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1410696000">- Update to version 2.40.4:
  + rsvg-convert: Handle gzip compressed input (bgo#735836).</changelog>
<changelog author="dimstar@opensuse.org" date="1413201600">- Update to version 2.40.5:
  + bgo#736825: handle: Call close() after write() even on write
    error.
  + bgo#735836: rsvg-convert: Fix argument processing.</changelog>
<changelog author="zaitor@opensuse.org" date="1417608000">- Update to version 2.40.6:
  + MinGW build fixes.
  + Fix path data number parsing.
  + Fix build with newer libtool.</changelog>
<changelog author="dimstar@opensuse.org" date="1424088000">- Update to version 2.40.7:
  + Fixed unfiled bug from fuzz testing, where the convolution
    filter had an integer multiplication overflow.
  + Fix build of rsvg-convert on Windows.
  + Fix a bunch of compiler warnings.
  + Bugs fixed from fuzz testing: bgo#703102, bgo#738050,
    bgo#738169, bgo#744270, bgo#744299.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 2.40.8 (boo#916784):
  + Bugs fixed from fuzz testing: bgo#744688 - possible double
    g_free() when processing stroke-dasharray.
  + Optimize rendering of polylines, lines, rectangles, circles,
    and ellipses.  These should be marginally faster, marginally
    more precise, and should put less pressure on the memory
    allocator.</changelog>
<changelog author="zaitor@opensuse.org" date="1427457600">- Update to version 2.40.9:
  + bgo#738367: V/v/H/h commands in path elements were not working.
  + bgo#605875: Gaussian-blurred objects were sometimes missing.
  + bgo#710163: Use _wfullpath() on Windows when canonicalizing
    filenames.</changelog>
<changelog author="dimstar@opensuse.org" date="1431691200">- Remove reference to gtk2-engine-svg from baselibs.conf: this
  subpackage hasn't been built since Oct 22 2013.</changelog>
<changelog author="zaitor@opensuse.org" date="1439121600">- Update to version 2.40.10:
  + bgo#748608: Memory leak when Gaussian-blurring.
  + bgo#739329: Font-family attributes with singly-quoted names
    were not handled correctly, yielding incorrect fonts.
  + bgo#476507: Path start/end markers didn't have the correct
    angle if the path was a curve with coincident control points.
  + bgo#688689: Support font-style="normal" within a non-normal
    styled text block.
  + Fixed builddir != srcdir.
  + Remove a bunch of deprecated GTK+ calls.</changelog>
<changelog author="zaitor@opensuse.org" date="1444305600">- Update to version 2.40.11:
  + Add project files for building on Visual Studio (bgo#753555).
  + Added an "--export-id" option to rsvg-convert(1). This lets you
    select a single object to export, for example, to pick out a
    group from a multi-part drawing.  Note that this is mostly
    useful for PNG output right now; for SVG output we don't
    preserve many attributes which could be useful in the extracted
    version.  Doing this properly requires an internal "output to
    SVG" backend instead of just telling Cairo to render to SVG.</changelog>
<changelog author="zaitor@opensuse.org" date="1449057600">- Update to version 2.40.12:
  + Refactoring of the test harness to use Glib's gtest
    infrastructure, instead of using home-grown machinery.  Tests
    can simply be put as SVG files in the tests/subdirectories; it
    is not necessary to list them explicitly in some text file.
  + Gzipped SVGs now work if read from streams.
  + References to objects/filters/URIs/etc. are now handled lazily.
    Also, there is a general-purpose cycle detector so malformed
    SVGs don't cause infinite loops.
  + Removed parsing of Adobe blend modes; they were not
    implemented, anyway.
  + Bugs fixed: bgo#700911, bgo#630732, bgo#677068.</changelog>
<changelog author="zaitor@opensuse.org" date="1452254400">- Update to version 2.40.13:
  + Fixed the Windows build.
  + Added basic support for the "baseline-shift" attribute in text
    objects (bgo#340047).
  + Fixed some duplicate logic when rendering paths (bgo#749415).
  + Rewrote the markers engine (bgo#685906, bgo#760180).</changelog>
<changelog author="zaitor@opensuse.org" date="1459598400">- Update to version 2.40.15:
  + Librsvg now uses the Contributor Covenant Code of Conduct,
    version 1.4, to which all contributors and maintainers are
    expected to abide. Please see the code_of_conduct.md file for
    details.
  + Fixed builds on Visual Studio pre-2012.
  + Fixed bgo#759084: Don't crash when filters don't actually
    exist.
  + Updated our autogen.sh to use modern autotools.
  + Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer
    filter.</changelog>
<changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
<changelog author="zaitor@opensuse.org" date="1460980800">- Add librsvg-Fix-rsvg-convert.patch: Actually scale the image if
  required, regression fix from upstream git (bgo#760262).</changelog>
<changelog author="zaitor@opensuse.org" date="1465473600">- Update to version 2.40.16:
  + Support for building the introspection files under MSVC.
  + Make the zooming options in rsvg-convert(1) work again for
    scaling the resulting image (bgo#760262).
  + Wikipedia generates equations as SVGs and renders them, but
    uses fill="currentColor". Since we don't let caller specify a
    starting state for CSS, we need to start with opaque black as
    the default current color (bgo#764808).
  + Added documentation for how to replace the deprecated
    rsvg_handle_set_size_callback().
- Drop librsvg-Fix-rsvg-convert.patch: Fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 2.40.17:
  + bgo#778666: Use our own thumbnailer specification file, so
    gnome-desktop-thumbnailer can generate thumbnails outside of
    the calling process.
  + Removed some redundant code.
  + Windows build fixes.
- Split out new sub-package rsvg-thumbnailer (noarch).</changelog>
<changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
  + Fix division-by-zero in the Gaussian blur code (bgo#783835,
    boo#1049607, CVE-2017-11464).
  + Fix other cases of division-by-zero on fuzzed SVG files.
  + Don't crash on invalid transformation matrices.
  + Support Visual Studio 2017; generate .pc files for Meson on
    Windows.</changelog>

</package>
<package pkgid="989fe306a5b3dca9b1e808fb481e0b12cb7df5f33aa4d954eb6a9c496fb8d8c8" name="ruby-apparmor" arch="x86_64">
    <version epoch="0" ver="2.10.3" rel="16.1"/>

<changelog author="opensuse@cboltz.de" date="1429272000">- make sure %service_del_postun doesn't call systemctl try-restart
  (boo#853019, bare systemd edition)
- add samba-4.2-profiles.diff: update samba (winbindd and nmb)
  profiles for samba 4.2 (boo#921098, boo#923201)</changelog>
<changelog author="opensuse@cboltz.de" date="1429876800">- update to AppArmor 2.9.2 (2.9 branch r2911)
  - lots of bugfixes in the parser and the aa-* tools (including
    boo#918787)
  - update dovecot and dnsmasq profiles and several abstractions
    (including boo#911001)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
    full changelog
- remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
  apparmor-fix-stl-ostream.diff
- replace GPG key with new AppArmor GPG signing key, see
  https://launchpad.net/apparmor/+announcement/13404</changelog>
<changelog author="opensuse@cboltz.de" date="1434369600">- systemd-rpm-macros and %systemd_requires were at the wrong place,
  move them to the parser package (boo#931792)</changelog>
<changelog author="opensuse@cboltz.de" date="1437048000">- update to AppArmor 2.10 (trunk r3205)
  - profile names can now contain variables
  - improved profile compile time in apparmor_parser
  - lots of improvements, refactoring and bugfixes in the aa-* tools
  - new apis for managing and loading profile caches into the kernel in
    libapparmor
  - lots of profile updates
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
    complete changelog with more details
- add new apparmor_private.h and the aa_query_label(2), aa_features(3),
  aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
  to libapparmor-devel
- drop apparmor-2.5.1-edirectory-profile patch - it's most probably
  no longer needed (see boo#621394 for details)
- drop upstreamed samba-4.2-profiles.diff
- refresh apparmor-samba-include-permissions-for-shares.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1437652800">- add fix-initscript-aa_log_end_msg.diff - fixes ugly initscript
  output (boo#862170)</changelog>
<changelog author="opensuse@cboltz.de" date="1438257600">- add apparmor-winbindd-r3213.diff - add missing k permissions for
  /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)</changelog>
<changelog author="opensuse@cboltz.de" date="1442145600">- netstat moved to net-tools-deprecated in Tumbleweed (boo#944904)</changelog>
<changelog author="opensuse@cboltz.de" date="1444219200">- add syslog-ng-profile-boo948584.diff - add several permissions needed
  by latest syslog-ng (boo#948584, boo#948753)
- add upstream-profile-updates-r3205-3241.diff with several profile updates:
  - add /usr/share/locale-bundle/** to abstractions/base
  - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
  - allow dovecot imap to read /run/dovecot/mounts
  - allow avahi-daemon to write to /run/systemd/notify
  - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
  - update dhclient profile
  - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
  - and some other small updates
- drop upstreamed apparmor-winbindd-r3213.diff (included in the
  upstream-profile-updates patch)</changelog>
<changelog author="suse-beta@cboltz.de" date="1461326400">- update to AppArmor 2.10.1 (2.10 branch r3326):
  - fix incorrect output of child profile names (apparmor_parser -N) which
    caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
  - fix a crash in aa-logprof / logparser.py for change_hat log events
    (lp#1523297) and log events that look like file events, but aren't
    (lp#1540562, lp#1525119, lp#1466812)
  - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
  - several fixes for variable handling in aa-logprof
  - map c (create) log events to w instead of a
  - add python to the "no Px rule" list in logprof.conf
  - let aa-logprof check for duplicate profiles
  - let aa-status work without the apparmor.fail python module (boo#971917,
    lp#1480492)
  - add permissions in several profiles (including boo#948584, boo#948753,
    boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
    boo#921098#c15).
  - and many more fixes, see the full changelog at
    http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
  - fix-initscript-aa_log_end_msg.diff
  - syslog-ng-profile-boo948584.diff
  - upstream-profile-updates-r3205-3241.diff
- refresh patches:
  - apparmor-abstractions-no-multiline.diff
  - apparmor-samba-include-permissions-for-shares.diff
- drop libapparmor autogen.sh call (broke the build) and remove libtool BR</changelog>
<changelog author="suse-beta@cboltz.de" date="1464091200">- add profiles-ping-inet6-r3449.diff - latest ping also does IPv6 (boo#980596)</changelog>
<changelog author="suse-beta@cboltz.de" date="1472212800">- add changes-since-2.10.1--r3326..3346.diff with upstream changes and
  fixes since the 2.10.1 release, including
  - allow dac_override in winbindd profile (boo#990006#c5)
  - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
    Samba 4.4.x, boo#990006)
  - abstractions/nameservice: also support ConnMan-managed resolv.conf
  - let aa-genprof ask about profiles in extra dir (again)
  - fix aa-logprof "add hat" endless loop (lp#1538306)
  - honor 'chown' file events in logparser.py
  - ignore log file events with a request mask of 'send' or 'receive'
    because they are actually network events (lp#1577051, lp#1582374)
  - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
- fix python LibAppArmor import failures with swig &gt; 3.0.8 (boo#987607)
  (libapparmor-fix-import-path.diff)
- refresh apparmor-abstractions-no-multiline.diff
- drop upstreamed profiles-ping-inet6-r3449.diff
- add %check section - runs libapparmor (including swig bindings),
  parser and profiles tests
- add BuildRequires: perl(Locale::gettext) - needed for parser tests</changelog>
<changelog author="suse-beta@cboltz.de" date="1476360000">- add changes-since-2.10.1--r3347..3353.diff with upstream changes and
  fixes in the 2.10 branch, including
  - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
  - add several permissions to the dovecot profiles (deb#835826)
  - add a missing path in the traceroute profile</changelog>
<changelog author="suse-beta@cboltz.de" date="1477224000">- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
  abstractions/nameservice (path changed in latest nscd in Tumbleweed)</changelog>
<changelog author="suse-beta@cboltz.de" date="1484049600">- update to AppArmor 2.10.2 maintenance release
  - lots of bugfixes and profile updates (including boo#1000201,
    boo#1009964, boo#1014463)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
- add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
  in aa-unconfined
- drop upstream(ed) patches:
  - changes-since-2.10.1--r3326..3346.diff
  - changes-since-2.10.1--r3347..3353.diff
  - libapparmor-fix-import-path.diff (upstream fix is slightly different)
  - nscd-var-lib.diff
- refresh apparmor-abstractions-no-multiline.diff</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259200">- change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
  This is part of the root partition (at least with default partitioning)
  and should be available earlier than /var/cache/apparmor/
  (boo#1015249, boo#980081, bsc#1016259)
- add dependency on var-lib.mount to apparmor.service as safety net</changelog>
<changelog author="suse-beta@cboltz.de" date="1485259201">- package apparmor.service also in Leap where it was missing thanks to a
  wrong/outdated if statement (boo#1017260)
  Note: If you manually disabled AppArmor, this change will re-enable it.</changelog>
<changelog author="suse-beta@cboltz.de" date="1485777600">- add profile-updates-2.10r3381..3384.diff with updates for
  abstractions/base, abstractions/apache2-common and dovecot profiles</changelog>
<changelog author="suse-beta@cboltz.de" date="1485950400">- Recommend net-tools instead of net-tools-deprecated for 42.x (boo#1022963)</changelog>
<changelog author="suse-beta@cboltz.de" date="1490529600">- add upstream-changes-2.10-r3385..3390.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - remove deprecated re.LOCALE flag in Python UI as it was dropped from Python
    3.6 (lp#1661766)
  - fix a crash in aa-logprof on specific change_hat events
- migration to apparmor.service turned out to accidently disable AppArmor.
  Add a workaround to fix this (boo#1017260 starting at #c7)
  Note: This will re-enable AppArmor if it was disabled by the last update.
  You'll need to "rcapparmor reload" to actually load the profiles, and then
  check aa-status for programs that need to be restarted to apply the profiles.
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
<changelog author="suse-beta@cboltz.de" date="1509278400">- update to AppArmor 2.10.3
  changes since grabbing the last upstream patch:
  - add permissions to the dovecot, traceroute, samba and postfix profiles
    and several abstractions (including lp#1650827 and boo#1057900)
  - some fixes in the aa-* tools
  - fix downgrading/converting of 'unix' rules to 'network unix' rules
    in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_3 for
    upstream changelog
- drop upstream patches:
  - aa-unconfined-fix-netstat-call-2.10r3380.diff
  - profile-updates-2.10r3381..3384.diff
  - upstream-changes-2.10-r3385..3390.diff
- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>

</package>
<package pkgid="819cdf3cdea3cb64e6f535cb80de5d79f7b60e5c6e8f56e281ed0af19f6cca92" name="ruby-solv" arch="x86_64">
    <version epoch="0" ver="0.6.30" rel="3.1"/>

<changelog author="mls@suse.de" date="1450094400">- change product links to also look at timestamps [bnc#956443]
- rework multiversion orphaned handling [bnc#957606]
- support key type changes in repodata_internalize()
- allow serialization of REPOKEY_TYPE_DELETED
- improve appdata handling of installed packages
- improve performance when run under xen
- bump version to 0.6.15</changelog>
<changelog author="mls@suse.de" date="1450699200">- fix orphan handling for dup with keeporphans set [bnc#957606]
- bump version to 0.6.16</changelog>
<changelog author="mls@suse.de" date="1450785600">- fix update handling of multiversion packages [bnc#957606]
- bump version to 0.6.17</changelog>
<changelog author="mls@suse.de" date="1454068800">- fix rule generation for linked packages [bnc#961738]
- add hash method in bindings for some classes
- bump version to 0.6.18</changelog>
<changelog author="mls@suse.de" date="1455537600">- parse media number from baseurl
- support susedata.&lt;lang&gt;.xml language files
- bump version to 0.6.19</changelog>
<changelog author="mls@suse.de" date="1460116800">- Better support of complex deps in pool_match_dep and
  selection_make_matchdeps
- make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again
- make dep2str use rpm-like output if disttype is rpm
- implement filtering of Requires(pre,post) for installed packages
- simplify handling of pseudo package updates [bnc#967006]
- improve speed of rpmmd metadata parsing
- bump version to 0.6.20</changelog>
<changelog author="mls@suse.de" date="1463572800">- add pool-&gt;setdisttype to the bindings
- fix error in repo_deb that could lead to missing packages
- add reason testing to testcase code
- add pool_whatcontainsdep, selection_make_matchdepid, and
  SELECTION_MATCH_DEPSTR
- add SOLVER_FAVOR and SOLVER_DISFAVOR job types
- allow unknown archs in pool_setarch
- add the SOLVER_FLAG_URPM_REORDER solver flag
- fix segfault in cshash dedup code [bnc#980901]
- fix supplements handling when implicitobsoleteusescolors is set
- bump version to 0.6.21</changelog>
<changelog author="mls@suse.de" date="1465300800">- fix bug in ignoreinst logic [bnc#983141]</changelog>
<changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
<changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
<changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
<changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
<changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
<changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
<changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
<changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
<changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
<changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
<changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
<changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>

</package>
<package pkgid="09a9c9a05f7b6d99399c2415566dfaf89eefdebb88fa5f8f5f3a3c90c423bc6b" name="ruby2.1-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="7573a0ce1af2e22358ddc201c5d9dfb6ca4875eed6f1c3dea5b53d1a97c60898" name="ruby2.1-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1ce6f60ceba9e90fc9d02a532f3845269efe3eccde07d0e7d1467af2b36eb395" name="ruby2.1-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="474428d5c2d17433b64677716f329e02abefe5a434177006100948b6bae68a99" name="ruby2.1-rubygem-rubyzip" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="2de592dfb367a5aa64419e2aa3a73e7510548ee9610c2b3585d5c77eb4bcb888" name="ruby2.1-rubygem-rubyzip-doc" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="361c86329a42a00c197f3022b7524b0df56cdef3e5502393ef24c13f5d9b798b" name="ruby2.1-rubygem-rubyzip-testsuite" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="23190509b29c2a2ff0612520cc059635c4e194e24ad025c14bdcfa5714ca87b1" name="ruby2.2-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="eb63f2527774da721cccf6db088171b39f639bc3f43485f267e2a4fa3bc59e00" name="ruby2.2-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="be5af26dc3d3dc51ad42fb56dc23942fa8875db06a31179a98afdb9a3207f812" name="ruby2.2-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="2e2faca8541f6334bdf69ca6eac74357d128d4c1ac6d825c787e199df8750fe7" name="ruby2.2-rubygem-rubyzip" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="c1b0b2a2d7a9ff78bac8bee0c1fc681a58250d007bcc60dfc388a50a52ebe3e8" name="ruby2.2-rubygem-rubyzip-doc" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="d2db142fba12016459952de5138147d0e46facb07fdc490bee6ce6a62f1eaa27" name="ruby2.2-rubygem-rubyzip-testsuite" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="183205c254cbae95a49b4519b298f8fc21c8c0188a6283dc717a6bba64687968" name="ruby2.3-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="27b281f283c177909994f29aca39e29ccd1b0909023f07913850731532a41e68" name="ruby2.3-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="9e8b3eca21a86378c9eb4acd816685d33fa2da2be0d87ce8874daefc0552a214" name="ruby2.3-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="639b7cc046b620469f9c578c2caf62915d4faf840c83d2490d33593e1b96c7c2" name="ruby2.3-rubygem-rubyzip" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="24be2620075a40fe012b0d9c17490176e22790bc9e758ad6c45f59290e78802e" name="ruby2.3-rubygem-rubyzip-doc" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="e589d443af842d4ee967f88b5445a63da87840f1c621bee28d8591606d46e083" name="ruby2.3-rubygem-rubyzip-testsuite" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="1333f549397e7ed20e89b490878f0a66f4f3aae579748d325656027e83f40840" name="ruby2.4-rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="a1bce455b08cc762248ba8dfdb0f6c251cbbabcb92ebd8b4f5d97228b33de482" name="ruby2.4-rubygem-puppet-doc" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1f7f8ff08b49e365e1857caac6ce7825f1b99c30928baf4c31bc1b94286da52d" name="ruby2.4-rubygem-puppet-testsuite" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="0f8c752dc06f0197f5001ca190a179c80b42e04ec62845534db941f88dd3309d" name="ruby2.4-rubygem-rubyzip" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="41f06bb888a300b6225d76f57d4e5896e0a53bf18f0e5a55bce92a44314477f4" name="ruby2.4-rubygem-rubyzip-doc" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="8d045e3cf730d8eca2b79e38780486aaecbeea49cd09fc7c91e5bf5f26937b5c" name="ruby2.4-rubygem-rubyzip-testsuite" arch="x86_64">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="c3bc167835c6881678e622878dde5d1ec992a59079020d805b594d5659784f7a" name="rubygem-puppet" arch="src">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="1a80e331c6c4273523c203214008bc763a21a1bb6e07bf923dafd0a8ca423e31" name="rubygem-puppet" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="f77f0c6e08bd4323a3374d8b7d0d9a04b3b8767b17d05a45b495a643065c2d36" name="rubygem-puppet-emacs" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="f2db79e641ce607446e391444ce526083a3662d200f723bcc60524316c6d5bf5" name="rubygem-puppet-master" arch="x86_64">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="4e1f7e6b9a03abcb76c1b8f1eef09fff58c2a6b7b02c05c4a831cc23244e2dcc" name="rubygem-puppet-master-unicorn" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="190c4ed928512e1d687d9e36f0e96fa5f19f381727d906ec2f8ed8e3476aa914" name="rubygem-puppet-vim" arch="noarch">
    <version epoch="0" ver="3.8.7" rel="20.1"/>

<changelog author="boris@steki.net" date="1414497600">- updated buildrequires to use rubygem(xxx) syntax as that is correct syntax</changelog>
<changelog author="darin@darins.net" date="1415448000">- update to 3.7.3
  * PUP-3601: Bump facter dependency to 2.3.0
  * PUP-3471: Windows Puppet x86 Installer Expands Environment Variables in Path
  * PUP-3302: Puppet resource broken when directory environments enabled
  * PUP-3500: Adding a setting to puppet.conf that has a :hook handled on define preloads incorrect directory environment settings.
  * PUP-3505: Future parser handling undef?s incorrectly
  * PUP-3514: Future parser not showing line/column for error
  * PUP-3558: Future parser, square brackets in references cause syntax errors related to non-ASCII characters
  * PUP-3602: Do not convert strings that are on the form ?0e" to floating point
  * PUP-3555: introduce override-able factory pattern for constructing environment cache entries
  See release notes for update information:
    https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html
  For a full list of bugs fixes see:
    https://tickets.puppetlabs.com/secure/ReleaseNote.jspa?projectId=10102&amp;version=12001
- remove old .changelog
- fix invalid arg in init script for SLE</changelog>
<changelog author="tampakrap@opensuse.org" date="1417521600">- Switch installation from tarball to gem, using the new packaging schema
- Rename puppet to rubygem-puppet for the above reason
- Rename puppet-server to puppet-master / puppetmaster, since PuppetLabs has a
  new product out that is called Puppet Server
- Install more sample config files (auth.conf, fileserver.conf, tagmail.conf)
- Add rubygem(ruby-shadow) and rubygem(augeas) as Recommends
- Separate emacs syntax files to different subpkg</changelog>
<changelog author="tampakrap@opensuse.org" date="1418299200">- Install the master-related sample config files with puppetmaster package</changelog>
<changelog author="tampakrap@opensuse.org" date="1421841600">- Replace rubygem(augeas) with rubygem(ruby-augeas), since the former is not working with puppet, boo#911083</changelog>
<changelog author="tampakrap@opensuse.org" date="1431345600">- Update to 3.7.5
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-374
  * https://docs.puppetlabs.com/puppet/3.7/reference/release_notes.html#puppet-375
- Add upstream patch puppet-zypper-lu.patch to cache the output of zypper list-updates
  https://tickets.puppetlabs.com/browse/PUP-3968
- Add upstream patch puppet-systemd-default.patch to make systemd default on SLE12 and openSUSE &gt;12.x
  https://tickets.puppetlabs.com/browse/PUP-3338
- Add runtime dependency on tar, needed by the "puppet module" command to
  unpack tarballs that it fetches from the forge</changelog>
<changelog author="tampakrap@opensuse.org" date="1431432000">- Re-run g2r
- Fix the systemd patch to actually apply
- Remove the ext/{debian,gentoo} dirs for all ruby versions</changelog>
<changelog author="tampakrap@opensuse.org" date="1431604800">- Add puppet-ruby-2_2.patch that fixes the ruby 2.2 support</changelog>
<changelog author="dgutu@suse.com" date="1432814400">- Updated the change file</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441195200">- Added puppet-systemd-default-on-new-suse.patch, rebased from the
  master branch, that uses the systemd provider on a SuSE variants
  with version &gt;= 12 ( boo#931703 )</changelog>
<changelog author="robert.munteanu@gmail.com" date="1441281600">- Update to 3.8.2
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-382
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-381
  * https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-380</changelog>
<changelog author="tampakrap@opensuse.org" date="1448020800">- Update to 3.8.4
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-383
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-384</changelog>
<changelog author="tampakrap@opensuse.org" date="1449057600">- Do not touch /etc/sysconfig/puppet in systemd environments, boo#916005</changelog>
<changelog author="kstreitova@suse.com" date="1453464000">- Update to 3.8.5
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-385</changelog>
<changelog author="kstreitova@suse.com" date="1460376000">- add puppet-non_ASCII_user_comment.patch to fix non-ASCII
  user comment with ruby &gt;= 2.1 [bnc#971223]</changelog>
<changelog author="tampakrap@opensuse.org" date="1469448000">- Update to 3.8.7:
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-386
  https://docs.puppetlabs.com/puppet/3.8/reference/release_notes.html#puppet-387
- Add -master-unicorn subpackage with unicorn systemd unit file and config</changelog>
<changelog author="jengelh@inai.de" date="1469793600">- Run fdupes over practically everything that was installed,
  fixing "files-duplicate /usr/lib64/ruby/gems/2.2.0/doc/
  /puppet-3.8.7/ri/Puppet/Pops/Types/TypeFactory/any-c.ri" etc.</changelog>
<changelog author="tampakrap@opensuse.org" date="1470225600">- Replace the greps with fillup-template to update the sysconfig files.
  Fixes properly boo#916005</changelog>
<changelog author="tampakrap@opensuse.org" date="1471348800">- set the perms of the unicorn.conf to 644</changelog>
<changelog author="kstreitova@suse.com" date="1498219200">- add puppet-CVE-2017-2295.patch to fix a security vulnerability
  where an attacker could force YAML deserialization in an unsafe
  manner, which would lead to remote code execution
  [bsc#1040151], [CVE-2017-2295]</changelog>

</package>
<package pkgid="10e08a4a0db78ef6c69c644e4a9977ff2ae19e27f5ba90c66164b0363f4e8f04" name="rubygem-rubyzip" arch="src">
    <version epoch="0" ver="1.1.7" rel="8.1"/>

<changelog author="mrueckert@suse.de" date="1159790400">- Initial package of version 0.9.1</changelog>
<changelog author="mrueckert@suse.de" date="1276257600">- use rubygems_requires macro</changelog>
<changelog author="mrueckert@suse.de" date="1276516800">- update to version 0.9.4
  Changed ZipOutputStream.put_next_entry signature (API CHANGE!).
  Now allows comment, extra field and compression method to be
  specified.
- additional changes from version 0.9.3
  Fixed: Added ZipEntry::name_encoding which retrieves the
  character encoding of the name and comment of the entry. Also
  added convenience methods ZipEntry::name_in(enc) and
  ZipEntry::comment_in(enc) for getting zip entry names and
  comments in a specified character encoding.
- additional changes from version 0.9.2
  Fixed: Renaming an entry failed if the entry's new name was a
  different length than its old name. (Diego Barros)</changelog>
<changelog author="coolo@suse.com" date="1333540800">- update to 0.9.6.1, no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1333886400">- update to 0.9.7, still no upstream changelog</changelog>
<changelog author="coolo@suse.com" date="1335614400">- update to 0.9.8
  Fixed: "Unitialized constant NullInputStream" error</changelog>
<changelog author="coolo@suse.com" date="1340366400">- update to 0.9.9
  Added support for backslashes in zip files (generated by the default Windows
  zip packer for example) and comment sections with the comment length set to zero
  even though there is actually a comment.</changelog>
<changelog author="coolo@suse.com" date="1377864000">- updated to version 1.0.0
  Changed the API for gem. Now it can be used without require param in Gemfile.
  Added read-only support for Zip64 files.
  Added support for setting Unicode file names.</changelog>
<changelog author="coolo@suse.com" date="1385121600">- updated to version 1.1.0, found no changelog</changelog>
<changelog author="coolo@suse.com" date="1395144000">- updated to version 1.1.2, no changelog</changelog>
<changelog author="coolo@suse.com" date="1400414400">- updated to version 1.1.3, no changelog</changelog>
<changelog author="adrian@suse.de" date="1413201600">- adapt to new rubygem packaging style</changelog>
<changelog author="coolo@suse.com" date="1423569600">- updated to version 1.1.7</changelog>
<changelog author="idonmez@suse.com" date="1501675200">- Add CVE-2017-5946.patch to fix symlink traversal vulnerability
  bsc#1027050</changelog>

</package>
<package pkgid="2999b0b45e99749920e84dd387042044395203436692c7d9ea2585921d347fc0" name="runc" arch="src">
    <version epoch="0" ver="0.1.1+gitr2947_9c2d8d1" rel="13.2"/>

<changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126401">- Create a symlink /usr/sbin/docker-runc -&gt; /usr/sbin/docker
  Docker expects this symlink to exist bsc#978260</changelog>
<changelog author="asarai@suse.com" date="1472212800">- Remove docker-runc symlink because it's been fixed within the Docker
  package. bsc#978260</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
<changelog author="jengelh@inai.de" date="1474459200">- Run fdupes.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1476360000">- update to 02f8fa7 because that is the needed version for docker 1.12.1 (bsc#1004490)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version by adding a revision "counter" so that it will always
  increase
  fix bsc#1009961</changelog>
<changelog author="jmassaguerpla@suse.com" date="1481889600">- add the /usr/bin/docker-run symlink to partially fix bsc#1015661</changelog>
<changelog author="asarai@suse.com" date="1482148800">- For the moment, we have to switch to using Docker's fork of runC. This *will*
  be solved properly by creating a new package purely for Docker's runC fork,
  because it's quite silly to tie OCI project releases to Docker's vendoring
  scheme. Once this is fixed, this package will be switch to being purely-OCI.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1482148801">- update runc to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
<changelog author="jmassaguerpla@suse.com" date="1484308800">- fix CVE-2016-9962 bsc#1012568 and applying the patch
  CVE-2016-9962.patch, because 1.12.6 partially fixes it (it contains
  the first patch attached in bsc#1012568)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker-1.13.0 requirement</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490788800">- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints
  This is a backport of https://github.com/opencontainers/runc/pull/1266
  + ignore_cgroup2_mountpoint.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491912000">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998400">- Make sure this is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- update version to the one required by docker-17.04.0-ce (bsc#1034053)
  remove ignore_cgroup2_mountpoint.patch . This is already included in
  the upstream source code.</changelog>
<changelog author="jengelh@inai.de" date="1493380800">- Substitute %__-type macro indirections</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>

</package>
<package pkgid="2b0df8a655950eacb9ba9a947db57a592858d9d8be2ee97644fe15e0b960124c" name="runc" arch="x86_64">
    <version epoch="0" ver="0.1.1+gitr2947_9c2d8d1" rel="13.2"/>

<changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126401">- Create a symlink /usr/sbin/docker-runc -&gt; /usr/sbin/docker
  Docker expects this symlink to exist bsc#978260</changelog>
<changelog author="asarai@suse.com" date="1472212800">- Remove docker-runc symlink because it's been fixed within the Docker
  package. bsc#978260</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
<changelog author="jengelh@inai.de" date="1474459200">- Run fdupes.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1476360000">- update to 02f8fa7 because that is the needed version for docker 1.12.1 (bsc#1004490)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version by adding a revision "counter" so that it will always
  increase
  fix bsc#1009961</changelog>
<changelog author="jmassaguerpla@suse.com" date="1481889600">- add the /usr/bin/docker-run symlink to partially fix bsc#1015661</changelog>
<changelog author="asarai@suse.com" date="1482148800">- For the moment, we have to switch to using Docker's fork of runC. This *will*
  be solved properly by creating a new package purely for Docker's runC fork,
  because it's quite silly to tie OCI project releases to Docker's vendoring
  scheme. Once this is fixed, this package will be switch to being purely-OCI.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1482148801">- update runc to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
<changelog author="jmassaguerpla@suse.com" date="1484308800">- fix CVE-2016-9962 bsc#1012568 and applying the patch
  CVE-2016-9962.patch, because 1.12.6 partially fixes it (it contains
  the first patch attached in bsc#1012568)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker-1.13.0 requirement</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490788800">- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints
  This is a backport of https://github.com/opencontainers/runc/pull/1266
  + ignore_cgroup2_mountpoint.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491912000">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998400">- Make sure this is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- update version to the one required by docker-17.04.0-ce (bsc#1034053)
  remove ignore_cgroup2_mountpoint.patch . This is already included in
  the upstream source code.</changelog>
<changelog author="jengelh@inai.de" date="1493380800">- Substitute %__-type macro indirections</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>

</package>
<package pkgid="153fc088dacbe67df8807fb1b7e131dfae6af7827ca36fa16dd0b7f0510f4e73" name="runc-test" arch="noarch">
    <version epoch="0" ver="0.1.1+gitr2947_9c2d8d1" rel="13.2"/>

<changelog author="jmassaguerpla@suse.com" date="1472040000">- add go_arches in project configuration: this way, we can use the
  same spec file but decide in the project configuration if to
  use gc-go or gcc-go for some archs.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126400">- Remove GOPATH at the end of the GOPATH assignment
  cause GOPATH is empty and if we do that, we get the path ""
  appended, which causes gcc6-go to complain</changelog>
<changelog author="jmassaguerpla@suse.com" date="1472126401">- Create a symlink /usr/sbin/docker-runc -&gt; /usr/sbin/docker
  Docker expects this symlink to exist bsc#978260</changelog>
<changelog author="asarai@suse.com" date="1472212800">- Remove docker-runc symlink because it's been fixed within the Docker
  package. bsc#978260</changelog>
<changelog author="jmassaguerpla@suse.com" date="1474286400">- fix go_arches definition: use global instead of define, otherwise
  it fails to build</changelog>
<changelog author="jengelh@inai.de" date="1474459200">- Run fdupes.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1476360000">- update to 02f8fa7 because that is the needed version for docker 1.12.1 (bsc#1004490)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1479988800">- fix version by adding a revision "counter" so that it will always
  increase
  fix bsc#1009961</changelog>
<changelog author="jmassaguerpla@suse.com" date="1481889600">- add the /usr/bin/docker-run symlink to partially fix bsc#1015661</changelog>
<changelog author="asarai@suse.com" date="1482148800">- For the moment, we have to switch to using Docker's fork of runC. This *will*
  be solved properly by creating a new package purely for Docker's runC fork,
  because it's quite silly to tie OCI project releases to Docker's vendoring
  scheme. Once this is fixed, this package will be switch to being purely-OCI.</changelog>
<changelog author="jmassaguerpla@suse.com" date="1482148801">- update runc to the version used in docker 1.12.5 (bsc#1016307).
  This fixes bsc#1015661</changelog>
<changelog author="jmassaguerpla@suse.com" date="1484308800">- fix CVE-2016-9962 bsc#1012568 and applying the patch
  CVE-2016-9962.patch, because 1.12.6 partially fixes it (it contains
  the first patch attached in bsc#1012568)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1487937600">- update to docker-1.13.0 requirement</changelog>
<changelog author="jmassaguerpla@suse.com" date="1490788800">- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints
  This is a backport of https://github.com/opencontainers/runc/pull/1266
  + ignore_cgroup2_mountpoint.patch</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491912000">- remove the go_arches macro because we are using go1.7 which
  is available in all archs</changelog>
<changelog author="jmassaguerpla@suse.com" date="1491998400">- Make sure this is being built with go 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1492084800">- update version to the one required by docker-17.04.0-ce (bsc#1034053)
  remove ignore_cgroup2_mountpoint.patch . This is already included in
  the upstream source code.</changelog>
<changelog author="jengelh@inai.de" date="1493380800">- Substitute %__-type macro indirections</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirement to 1.7</changelog>
<changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>

</package>
<package pkgid="46847184a145b5f4e9090f36e87e1cc1ebf6998e1e3d743b988332597c6a3030" name="salt" arch="src">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="99caa8ca90b49b72d2e887675b9b9ff00c71f44f3202345149899f4c059f2eb7" name="salt" arch="src">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="3192eb90ebdc69d2e71e69538ac27a12a81364e8c05587ab2c84ed7d3bea0e81" name="salt" arch="src">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="f8e83a6515742bd0591fd59a64c90a1239f6c63491706612dedc13f1085a5ca9" name="salt" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="87de1d3d41b5a9cc489951d96946d47df3952186bf538173e540a862eebca942" name="salt" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="8185171bbb41e27fe6b4c302a518514cc0a346ead3501b3c315c85738970a8c1" name="salt" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="dae2263dc18db768cc97e4a42cc375f8f1bad09ca8225190555d491231068702" name="salt-api" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="0ffe5608c519654bb601d01008a109a902645099afe1bd3025ce149ba0105d0d" name="salt-api" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="6dd986bdceae80f057803335f4c8ee5b96065a8f8cf8d01d38155595d7b59552" name="salt-api" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="0b5957341d1bb2a9e54bbbe3966145c4f08db1ce26444ddfc593c34fa3f68819" name="salt-bash-completion" arch="noarch">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="6c36034d0228273c84fa3bc0e7cfb7b1b66291b9bbc8dc1a227a5b472e8fa8cc" name="salt-bash-completion" arch="noarch">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="aaad0386ca12654df04ca1a47bc2eef2e84818ed9af584cf520d502d1e8db0af" name="salt-bash-completion" arch="noarch">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="a84b5aea115667db771a4549863ced375b31b8d070df879015cf45ef86d1bac9" name="salt-cloud" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="1ce70d0347bc1fd430ca640acf96c94aa4d5aedf60b830d4f1f181840dfdee7a" name="salt-cloud" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="f040a46f886247bdaa1d2716324090e0eab7818eb5974dd31deb77da6d107c38" name="salt-cloud" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="f151a201d78af31f92ce907777ee920a6bcdd3560ec7bce14dbba48b31fb00d1" name="salt-doc" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="aead7c9d57059d3171f334141bd1d6b731eaa5d563f59d6d73929aadc9086a1b" name="salt-doc" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="8fd607e29c40f9188f9fa4783b5b70ca26c881619ad021bf643dfd9e18aa661f" name="salt-doc" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="bf4ef5b4011d1935eb539db9be1d62c801af4e0fa784ca3a3d7856e3ccb48354" name="salt-fish-completion" arch="noarch">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="35dc7207d70cc2c9fe596c9a4e68460358f722ffc23395f705d8e165d7c15328" name="salt-fish-completion" arch="noarch">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="35ddb57f5efec5da0857c6b7764c12527f04ea864b1910e85b6586e20ba6bdd5" name="salt-fish-completion" arch="noarch">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="87dcc22bb5efb4b9c96278740599c9b4438d225ae5e5d101e740b4f390e6ef65" name="salt-master" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="0b76178564292f43eb85c426216f08736fc5aff2b16591f6bea30048ffe1b72e" name="salt-master" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="d9f0dfcc7362ba203624cc6c667f022e668a512274810c6e00982bbb681ea7d0" name="salt-master" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="729f70f08b63a1818be6c2eddeab2dd31e1b1fa7b491a04a0f9820f5e7efa045" name="salt-minion" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="17f841cf90b8054d5e9b263afabcaf14c8c0bbd175e9fcd0c5914af91afb5968" name="salt-minion" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="8aafbce08e36333e34aa4243a6a02ec23032cfe775fb060f3c1ee6d630bd88c8" name="salt-minion" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="e1d71f4aec73ec1deb0e799ffe27869392bcaa55e5cab66e6d07eb2f1b4e3163" name="salt-proxy" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="6c98eb5c66036bd491fd47b06d50d6d0f2018bd57eb5b92a269be5ba95ce4c09" name="salt-proxy" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="ca689d93043e2de7acb33c4c529a0eed42369fd0d2606affb091bcd2a5b9e912" name="salt-proxy" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="0e6fe2fa0e1e241d6c1bde909099f3351c395c188df511a24c2b5e4cb094fd3d" name="salt-ssh" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="aff767c1c34bc5e3fc83f372b8723aa2cdda7a63ca45c84d7ac2fb9a45c2c156" name="salt-ssh" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="4854225d7927ee23e87bcbd01796b576555e28a20cd0bdfc57e9d14ce4230e9a" name="salt-ssh" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="954d411b1cad0b825ea6787c1d7ed63423e27f4fe58626650fbe6977349170c8" name="salt-syndic" arch="x86_64">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="5ed283185bed4ecbcc60c281c7b0aeb0952d2eb07e51a5fae237a6e414301ddc" name="salt-syndic" arch="x86_64">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="2ce4a0cb2c714ed4f933846ed9bed8dd74b7ffe356f54b037703072205c7580e" name="salt-syndic" arch="x86_64">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="efaa342b69d1d7e59dc7c54cffea8fe4bdbc96238be23cac6725bb69ae0fdae8" name="salt-zsh-completion" arch="noarch">
    <version epoch="0" ver="2016.11.4" rel="8.1"/>

<changelog author="mihai.dinca@suse.com" date="1477310400">- Fix-pkg.latest_version when latest already installed (bsc#1005329)
  Add:
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1477915200">- Including resolution parameters in the Zypper debug-solver
  call during a dry-run dist-upgrade.
  Add:
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="kkaempf@suse.com" date="1478088000">- Update to 2016.3.4
  see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
- Removed Patches, applied upstream
  * 0008-checksum-validation-when-zypper-pkg.download.patch
  * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
  * 0010-snapper-execution-module.patch
  * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Deprecate-status.uptime-one-version-later.patch
  * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
  * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
  * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
  * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
  * 0018-Unit-tests-fixes-for-2016.3.2.patch
  * 0019-Fix-snapper_test-for-python26.patch
  * 0020-Integration-tests-fixes-for-2016.3.2.patch
  * 0021-Fix-pkg.upgrade-for-zypper.patch
  * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
  * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
- Added patches
  * 0008-snapper-execution-module.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>

</package>
<package pkgid="d87af4abd87af9f7755be6f84b23a7626914ce4a4a330242110ec1f228f66b59" name="salt-zsh-completion" arch="noarch">
    <version epoch="0" ver="2017.7.1" rel="11.1"/>

<changelog author="bmaryniuk@suse.com" date="1487246400">- Update to 2016.11.2
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.2.html
  for full changelog
- Bugfixes:
  * keep fix for migrating salt home directory (bsc#1022562)
  * Fix salt-minion update on RHEL (bsc#1022841)
  * Prevents 'OSError' exception in case certain job cache path
    doesn't exist (bsc#1023535)
- Added:
  * add-a-salt-minion-service-control-file.patch
  * add-buildargs-option-to-dockerng.build.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-yum-plugin.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch
- Renamed:
  * 0001-tserong-suse.com-We-don-t-have-python-systemd-so-not.patch -&gt;
    tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * 0002-Run-salt-master-as-dedicated-salt-user.patch -&gt;
    run-salt-master-as-dedicated-salt-user.patch
  * 0003-Check-if-byte-strings-are-properly-encoded-in-UTF-8.patch -&gt;
    check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * 0004-do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch -&gt;
    do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * 0007-Add-zypp-notify-plugin.patch -&gt;
    add-zypp-notify-plugin.patch
  * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch -&gt;
    fix-salt-summary-to-count-not-responding-minions-cor.patch
  * 0010-Run-salt-api-as-user-salt-bsc-990029.patch -&gt;
    run-salt-api-as-user-salt-bsc-990029.patch
  * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch -&gt;
    setting-up-os-grains-for-sles-expanded-support-suse-.patch
- Removed:
  * 0005-Use-SHA256-hash-type-by-default.patch
  * 0006-Create-salt-proxy-instantiated-service-file.patch
  * 0008-snapper-execution-module.patch
  * 0011-Fix-snapper_test-for-python26.patch
  * 0012-Fix-pkg.upgrade-for-zypper.patch
  * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
  * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
  * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
  * 0017-Including-resolver-params-for-Zypper-debug-solver.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1488542400">- Update to 2016.11.3
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.3.html
  for full changelog
- Use correct package names for PyYAML and MarkupSafe (tbechtold@suse.com)
- Changed:
  * add-ssh-option-to-salt-ssh.patch
- Added:
  * add-options-for-dockerng.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
- Removed:
  * add-buildargs-option-to-dockerng.build.patch
  * docker-buildargs-require-minimal-dockerpy-1.6.0-and-.patch
  * fix-a-typo-for-master-comments.patch
  * fix-error-parsing.patch
  * fix-leading-dots-on-sanitized-hostname.patch
  * fix-timezone-handling-for-rpm-installtime-bsc-101707.patch
  * increasing-timeouts-for-running-integrations-tests.patch
  * prevent-crash-on-unknown-to-the-repo-package.patch
  * prevents-oserror-exception-in-case-path-doesn-t-exis.patch
  * snapper-module-improvements.patch
  * support-dryrun-for-dockerng.sls_build.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490011200">- Fix: /var/log/salt/minion fails logrotate (bsc#1030009)
- Fix: Result of master_tops extension is mutually overwritten
  (bsc#1030073)
- Allows to set 'timeout' and 'gather_job_timeout' via kwargs
- Allows to set custom timeouts for 'manage.up' and 'manage.status'
- Use salt's ordereddict for comparison (fixes failing tests)
- add special salt-minion.service file for RES7
- fix scripts for salt-proxy
- openscap module
- Changed:
  * run-salt-master-as-dedicated-salt-user.patch
- Added:
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="moio@suse.com" date="1490270400">- Fix: race condition on cache directory creation
- Added:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1490356800">- Cleanup salt user environment preparation (bsc#1027722)</changelog>
<changelog author="bmaryniuk@suse.com" date="1490961600">- Added test case for race conditions on cache directory creation
- Modified:
  * fix-race-condition-on-cache-directory-creation.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1490961601">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>

</package>
<package pkgid="7a4717d13cba3c701db8ed960bd186628ebc3a8c47ea8de4a5035564da1199e4" name="salt-zsh-completion" arch="noarch">
    <version epoch="0" ver="2017.7.2" rel="14.1"/>

<changelog author="pablo.suarezhernandez@suse.com" date="1490961600">- Adding "pkg.install downloadonly=True" support to yum/dnf
  execution module
- Makes sure "gather_job_timeout" is an Integer
- Adding "pkg.downloaded" state and support for installing
  patches/erratas
- Added:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * allows-using-downloadonly-in-a-pkg.installed-state.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307200">- Fix: add missing /var/cache/salt/cloud directory (bsc#1032213)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491307201">- raet protocol is no longer supported (bsc#1020831)</changelog>
<changelog author="bmaryniuk@suse.com" date="1491566400">- Add missing bootstrap script for Salt Cloud (bsc#1032452)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1491825600">- Fixes 'timeout' and 'gather_job_timeout' kwargs parameters
  for 'local_batch' client
- Added:
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1492430400">- Refactoring on Zypper and Yum execution and state modules to allow
  installation of patches/errata.
- Added:
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
- Removed:
  * allows-using-downloadonly-in-a-pkg.installed-state.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493208000">- Minor fixes on new pkg.list_downloaded
- Listing all type of advisory patches for Yum module
- Prevents zero length error on Python 2.6
- Fixes zypper test error after backporting
- Added:
  * search-the-entire-cache_dir-because-storage-paths-ch.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1493726400">- Adding "yum-plugin-security" as required for RHEL 6</changelog>
<changelog author="bmaryniuk@suse.com" date="1493899200">- Update to 2016.11.4
  See https://docs.saltstack.com/en/develop/topics/releases/2016.11.4.html
  for full changelog
- Changed:
  * add-options-for-dockerng.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
- Added:
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * fixing-beacons.list-integration-test-failure.patch
- Removed:
  * adding-downloadonly-support-to-yum-dnf-module.patch
  * adds-custom-timeout-and-gather_job_timeout-to-local_.patch
  * allows-to-set-timeout-and-gather_job_timeout-via-kwa.patch
  * fix-case-in-os_family-for-suse.patch
  * fix-race-condition-on-cache-directory-creation.patch
  * makes-sure-gather_job_timeout-is-an-integer.patch
  * merge-output-from-master_tops.patch
  * openscap-module.patch
  * use-salt-s-ordereddict-for-comparison.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1495454400">- Bugfix: orchestrate and batches returns false failed information
  https://github.com/saltstack/salt/issues/40635
- speed-up cherrypy by removing sleep call
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- fix setting the language on SUSE systems (bsc#1038855)
- Bugfix: unable to use hostname for minion ID as '127' (upstream)
- Bugfix: remove sleep call in CheppryPy API handler (upstream)
- Fix core grains constants for timezone (bsc#1032931)
- Added:
  * bugfix-unable-to-use-127-as-hostname.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * rest_cherrypy-remove-sleep-call.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1496750400">- Bugfix: clean up `change` attribute from interface dict (upstream)
  Issue: https://github.com/saltstack/salt/issues/41461
  PR: 1. https://github.com/saltstack/salt/pull/41487
    2. https://github.com/saltstack/salt/pull/41533
  Added:
  * clean-up-change-attribute-from-interface-dict.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1500638400">- Update to 2017.7.0
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html
  for full changelog
- fix ownership for whole master cache directory (bsc#1035914)
- fix setting the language on SUSE systems (bsc#1038855)
- wrong os_family grains on SUSE - fix unittests (bsc#1038855)
- speed-up cherrypy by removing sleep call
- Disable 3rd party runtime packages to be explicitly recommended.
  (bsc#1040886)
- fix format error (bsc#1043111)
- Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV)
  to restart salt-minion in case of crashes during upgrade.
- Add procps as dependency.
- Bugfix: jobs scheduled to run at a future time stay
  pending for Salt minions (bsc#1036125)
- All current patches has been removed as they were added upstream:
  * add-a-salt-minion-service-control-file.patch
  * add-options-for-dockerng.patch
  * add-ssh-option-to-salt-ssh.patch
  * add-unit-test-for-skip-false-values-from-preferred_i.patch
  * add-yum-plugin.patch
  * add-zypp-notify-plugin.patch
  * adding-support-for-installing-patches-in-yum-dnf-exe.patch
  * avoid-failures-on-sles-12-sp2-because-of-new-systemd.patch
  * bugfix-unable-to-use-127-as-hostname.patch
  * change-travis-configuration-file-to-use-salt-toaster.patch
  * check-if-byte-strings-are-properly-encoded-in-utf-8.patch
  * clean-up-change-attribute-from-interface-dict.patch
  * do-not-generate-a-date-in-a-comment-to-prevent-rebui.patch
  * fix-grain-for-os_family-on-suse-series.patch
  * fix-os_family-case-in-unittest.patch
  * fix-regression-in-file.get_managed-add-unit-tests.patch
  * fix-salt-summary-to-count-not-responding-minions-cor.patch
  * fix-setting-language-on-suse-systems.patch
  * fixed-issue-with-parsing-of-master-minion-returns-wh.patch
  * fixing-beacons.list-integration-test-failure.patch
  * rest_cherrypy-remove-sleep-call.patch
  * run-salt-api-as-user-salt-bsc-990029.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * search-the-entire-cache_dir-because-storage-paths-ch.patch
  * setting-up-os-grains-for-sles-expanded-support-suse-.patch
  * special-salt-minion.service-file-for-rhel7.patch
  * translate-variable-arguments-if-they-contain-hidden-.patch
  * tserong-suse.com-we-don-t-have-python-systemd-so-not.patch
  * use-correct-grain-constants-for-timezone.patch</changelog>
<changelog author="jengelh@inai.de" date="1502539200">- Run fdupes over all of /usr because it still warns about
  duplicate files. Remove ancient suse_version &gt; 1020 conditional.
- Replace unnecessary %__ indirections. Use grep -q in favor of
  &gt;/dev/null.
- Avoid bashisms in %pre.</changelog>
<changelog author="bmaryniuk@suse.com" date="1502884800">- Update to 2017.7.1
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html
  for full changelog
- Fix for CVE-2017-12791 (bsc#1053955)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1505217600">- list_pkgs: add parameter for returned attribute selection (bsc#1052264)
- Adding the leftover for zypper and yum list_pkgs functionality.
- Use $HOME to get the user home directory instead using '~' char (bsc#1042749)
- Added:
  * list_pkgs-add-parameter-for-returned-attribute-selec.patch
  * use-home-to-get-the-user-home-directory-instead-usin.patch</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507032000">- Fix wrong version reported by Salt (bsc#1061407)</changelog>
<changelog author="pablo.suarezhernandez@suse.com" date="1507204800">- Remove 'TasksTask' attribute from salt-master.service in older
  versions of systemd (bsc#985112)
- Provide custom SUSE salt-master.service file.</changelog>
<changelog author="bmaryniuk@suse.com" date="1507291200">- Fixed minion resource exhaustion when many functions are being
  executed in parallel (bsc#1059758)
- Added:
  * introduce-process_count_max-minion-configuration-par.patch
  * multiprocessing-minion-option-documentation-fixes.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507636800">- Update to 2017.7.2
  See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html
  for full changelog
- Fix for CVE-2017-14695 (bsc#1062462)
- Fix for CVE-2017-14696 (bsc#1062464)
- Fix salt target-type field returns "String" for existing
  jids but an empty "Array" for non existing jids. (issue #1711)
- Added:
  * bugfix-always-return-a-string-list-on-unknown-job-ta.patch</changelog>
<changelog author="bmaryniuk@suse.com" date="1507723200">- Add possibility to generate _version.py at the build time for
  raw builds: https://github.com/saltstack/salt/pull/43955
- Added:
  * enable-with-salt-version-parameter-for-setup.py-scri.patch</changelog>

</package>
<package pkgid="e4e173245229f91260f645ed6018e0b4c44336135fd0d5a6ea273d329c36d670" name="samba" arch="src">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="c75f8669c98cb9601897763ebea77f4409d277d6affc3eae17264984c9a3a108" name="samba" arch="src">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="87618d40b2064156d71bb8ef0d28fef8d2d67524b7d2cbaee000f2b025f44a10" name="samba" arch="src">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="cd2fe1475c4ae7657de5e87fe0aae82adaa6594c834d8155ac677579eba5d994" name="samba" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="6a3467faa5c9bcaa6b8e4d7af76f00cb06b578fe04e3207222106862c74155bc" name="samba" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="22d8afe1c0079e4c734e9e7510e17680e8a7fd40c364fe328df87caf09af340e" name="samba" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="a4b77547595c9b1139963d704e4d6310d9f801566164df4714081991dfba2c01" name="samba-ceph" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="b3a487e736dd5ace31a80ba50a5c629ebfc8de42f1fd4f3c5b27d9a2e307031e" name="samba-ceph" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="2d398c0631746562796d735aa698b18d482b3050beaec509dd6dcfe0b04b077f" name="samba-ceph" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="72ba3851f3f314415dd481ec53fa137a76ada12ccc6f6b0ca6efdf69ae44bc63" name="samba-client" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="7652592b565a2c111a570ddcd28eab056a383ab39163079391badd204126be40" name="samba-client" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="ce20a0621615b98e969f2e1386b387df49bec884aaaf170ef7fb58ee3214d24c" name="samba-client" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="c1efc429f0cee74322c8f422f1934c0549b965c54f67c05362a90ef4874fc97f" name="samba-client-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="c23afcf957c496d2523badb6fd9503bafad4003919c5df12ad41bfc373bceaad" name="samba-client-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="f3844438737b6e418cbaa47499cefae0960356f17f5a329a495d8ec79bf0a845" name="samba-client-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="a6e1b5ca6c480cf69eef5820ee5d1db07d181b9dc02f61e35facd242c5381617" name="samba-core-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="7f18601c5f41959456b587a6e87e815a0a7dc7fb536c8f7ef2681ae0e9e7b6d7" name="samba-core-devel" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="24ca5605ef03343ea7980b10b57651ceae064d571a8a37af565ce901e43a1946" name="samba-core-devel" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="91be98dfebf60f403e667e4a1c371f83f6597056ca29aa5488ba763b953acf3a" name="samba-doc" arch="noarch">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="0e2bef7b5f77a1a52df9b5432c333293d1612a5fd72d168264c998463872d2ff" name="samba-doc" arch="noarch">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="74955e0d2a6cb9ebb22d9b8a25c8654bd93d1990d042613000bcdb2f1ae198b5" name="samba-doc" arch="noarch">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="99b54d5a69222e1b4be29dd89245daffe51c453060fa10a1d349f964152ecec2" name="samba-libs" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="0cc344479a1d3d8064885bcd05364fcf63963b6bade9f7d905ee1a72f045ff79" name="samba-libs" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="4b596610b55311275ac7539cc76a9ae2a54f9382b9bd2642ead915dd7c6a0315" name="samba-libs" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="dca9becb919f31c233193274efedb27f04735a7d4135b4d286ddcb343b8b9d76" name="samba-libs-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="b38a1bbc9c875c9794cc5a478f15f618b68fcce3d235bb23b8f4afc7a669a495" name="samba-libs-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="e3b981b9b4c944aab52645cfa0a1d79a821600abcf1548f84ed5d70ced8be97b" name="samba-libs-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="086b991304e4feaf0a8dba5e8ad69238d3b26b2a2760c66d9241453c5e5d6ea0" name="samba-pidl" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="a4dd28f3cc8967efdd64d214e1acf4f6e18ece9b5d62c14e51818dbeef00d904" name="samba-pidl" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="e9e52977d861051178ef679136b9b1527f485c09349783e27710155ef3faf677" name="samba-pidl" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="ea333fc60daabdef91b783ef225eab55e55deb1fcd1ac6a75a2a490fea647f09" name="samba-python" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="7332a78ea5e70923963a167ec66309339e66087b53ed177a514c2769ae60dcd8" name="samba-python" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="edf0eeab0db9e34e11d1f92c0f20328d73c2758e83d7984ef5204fba9aa3efad" name="samba-python" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="24de093749308ba47d6c84a4ba29d4f080b4a3296ad33b659f05453958729f34" name="samba-test" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="98832e9d4c795d9915d8a55a0e67be0ebfe4225188eac64a58282ec330287101" name="samba-test" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="b0ee72edda9ffa9719ccb6f95996963cc985a644f0caeddc39696e6847a92e50" name="samba-test" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="77cd5658c48f5c13845bb7ee696baa888e605a161220a0fa247452364c42a16e" name="samba-winbind" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="7cab2451addc3fa27f9bc7dc9b97b6b6714651495762d48f1b5f66877bc023d4" name="samba-winbind" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="66512ae9563cdd0c258f8c814d4c62eb3b2676561fd8862ca61ffba36d1cda83" name="samba-winbind" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="a9b321131fd446e45ad5564f4c15c43c2ac91fb01b88445c78821527259aead0" name="samba-winbind-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.38.90b2cdb4f22" rel="3.1"/>

<changelog author="kukuk@suse.com" date="1489406400">- Don't call insserv if systemd is used</changelog>
<changelog author="aaptel@suse.com" date="1489579200">- Remove chkconfig requirements for systemd systems</changelog>
<changelog author="jmcdonough@suse.com" date="1490184000">- Update to 4.6.1
  + symlink race permits opening files outside share directory;
    CVE-2017-2619; (bso#12496); (bsc#1027147)
  + testparm checks for valid idmap parameters
  + add new krb client encryption types
  + support for printer driver upload from windows 10
  + inherit owner = 'unix only' for improved quota support
  + improved CTDB event support
  + new primary group support for idmap_ad
  + idmap_hash deprecated
  + mvxattr added to recursively rename extended attributes</changelog>
<changelog author="nopower@suse.com" date="1490875200">- Fix CVE-2017-2619 regression with "follow symlinks = no";
  (bso#12721).</changelog>
<changelog author="dmulder@suse.com" date="1490875201">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>

</package>
<package pkgid="c505225c0099cbb32cf36130fd7940bef2347401a300b21e0ad4d6106df952fa" name="samba-winbind-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.7+git.51.327af8d0a11" rel="6.1"/>

<changelog author="dmulder@suse.com" date="1490875200">- Build and install the html man pages (bsc#1021907).</changelog>
<changelog author="ddiss@suse.com" date="1491220800">- Enable librados CTDB lock helper for samba-ceph package; (fate#321622).</changelog>
<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>

</package>
<package pkgid="0e26a94bbd2aa133acb7ae6bde5461b345d9dda4baa6d92a568254d513af890d" name="samba-winbind-32bit" arch="x86_64">
    <version epoch="0" ver="4.6.9+git.59.c2cff9cea4c" rel="9.1"/>

<changelog author="ddiss@suse.com" date="1491566400">- Enable samba-ceph build for openSUSE and SLE12SP3+; (fate#321622).
  + x86-64 and aarch64</changelog>
<changelog author="ddiss@suse.com" date="1491825600">- Update to 4.6.2
  + remove bso#12721 patches now upstream</changelog>
<changelog author="ddiss@suse.com" date="1492516800">- Generate source tarball directly from Git using OBS tar_scm
  + use version string derived from parent Git tag and commit hash
  - remove obsolete vendor-files/tools/package-data version ID
  + explicitly generate ctdb manpages, needed without "make dist"</changelog>
<changelog author="ddiss@suse.com" date="1493121600">- Generate and update vendor-files tarball from Git
  + SuSEfirewall2 service samba-client only setup IPv4 rule; (bsc#1034416).</changelog>
<changelog author="ddiss@suse.com" date="1493121601">- Update to 4.6.3; (bsc#1036011)
  + s3:vfs:shadow_copy2: vfs_shadow_copy2 fails to list snapshots
    from shares with GlusterFS backend; (bso#12743).
  + Fix for Solaris C compiler; (bso#12559).
  + s3: locking: Update oplock optimization for the leases era; (bso#12628).
  + Make the Solaris C compiler happy; (bso#12693).
  + s3: libgpo: Allow skipping GPO objects that don't have the
    expected LDAP attributes; (bso#12695).
  + Fix buffer overflow caused by wrong use of getgroups; (bso#12747).
  + lib: debug: Avoid negative array access; (bso#12746).
  + cleanupdb: Fix a memory read error; (bso#12748).
  + streams_xattr and kernel oplocks results in
    NT_STATUS_NETWORK_BUSY; (bso#7537).
  + winbindd: idmap_autorid allocates ids for unknown SIDs from other
    backends; (bso#11961).
  + vfs_fruit: Resource fork open request with
    flags=O_CREAT|O_RDONLY; (bso#12565).
  + manpages/vfs_fruit: Document global options; (bso#12615).
  + lib/pthreadpool: Fix a memory leak; (bso#12624).
  + Lookup-domain for well-known SIDs on a DC; (bso#12727).
  + winbindd: Fix error handling in rpc_lookup_sids(); (bso#12728).
  + winbindd: Trigger possible passdb_dsdb initialisation; (bso#12729).
  + credentials_krb5: use gss_acquire_cred for client-side GSSAPI
    use case; (bso#12611).
  + lib/crypto: Implement samba.crypto Python module for RC4; (bso#12690).
  + ctdb-readonly: Avoid a tight loop waiting for revoke to
    complete; (bso#12697).
  + ctdb_event monitor command crashes if event is not specified;
    (bso#12723).
  + ctdb-docs: Fix documentation of "-n" option to 'ctdb tool'; (bso#12733).
  + smbd: Fix smb1 findfirst with DFS; (bso#12558).
  + smbd: Do an early exit on negprot failure; (bso#12610).
  + winbindd: Fix substitution for 'template homedir'; (bso#12699).
  + s4:kdc: Disable principal based autodetected referral detection;
    (bso#12554).
  + idmap_autorid: Allocate new domain range if the callers knows
    the sid is valid; (bso#12613).
  + LINKFLAGS_PYEMBED should not contain -L/some/path; (bso#12724).
  + PAM auth with WBFLAG_PAM_GET_PWD_POLICY returns wrong policy for
    trusted domain; (bso#12725).
  + rpcclient: Allow -U'OTHERDOMAIN\user' again; (bso#12731).
  + winbindd: Fix password policy for pam authentication; (bso#12725).
  + s3:gse: Correctly handle external trusts with MIT; (bso#12554).
  + auth/credentials: Always set the realm if we set the principal
    from the ccache; (bso#12611).
  + replace: Include sysmacros.h; (bso#12686).
  + s3:vfs_expand_msdfs: Do not open the remote address as a file;
    (bso#12687).
  + s3:libsmb: Only print error message if kerberos use is forced;
    (bso#12704).
  + winbindd: Child process crashes when kerberos-authenticating
    a user with wrong password; (bso#12708).
  + vfs_fruit: Office document opens as read-only on macOS due to
    CNID semantics; (bso#12715).
  + vfs_acl_xattr: Fix failure to get ACL on Linux if memory is
    fragmented; (bso#12737).</changelog>
<changelog author="ddiss@suse.com" date="1495454400">- Fix CVE-2017-7494 remote code execution from a writable share;
  (bso#12780); (bsc#1038231).</changelog>
<changelog author="ddiss@suse.com" date="1496059200">- Revert explicit winbind %{version}-%{release} dependency.
  + The ABI has stabilized since (bsc#936909), so remove to fix cross-media
    dependencies; (bsc#1037899).</changelog>
<changelog author="nopower@suse.com" date="1496836800">- s3: libsmb: Fix error where short name length was read as 2
  bytes, should be 1; (bso#11822); (bsc#1042419).</changelog>
<changelog author="ddiss@suse.com" date="1496836801">- Update to 4.6.5; (bsc#1040157)
  + Specifying CTDB_LOGGING=syslog:nonblocking causes ctdbd to crash at
    startup; (bso#12814).
  + vfs_expand_msdfs tries to open the remote address as a file path;
    (bso#12687).
  + PANIC (pid 1096): assert failed: lease_type_is_exclusive(e_lease_type);
    (bso#12798).
  + With clustering get update_num_read_oplocks failed and PANIC:
    num_share_modes == 1 assertion failure; (bso#11844).
  + contend_level2_oplocks_begin_default oplock optimisation doesn't carry
    over to leases; (bso#12766).
  + `ctdb nodestatus` incorrectly displays status for all nodes with wrong
    exit code; (bso#12802).
  + CTDB can spin hard on revoking readonly delegations if a node becomes
    disconnected; (bso#12697).
  + Printing a share mode entry with leases can crash in the ndr code;
    (bso#12793).
  + Fix flakey unit tests for eventd; (bso#12792).
  + CTDB daemon crashes if built with clang; (bso#12770).
  + smbcacls fails if no password is specified; (bso#12765).
  + idmap_rfc2307: Lookup of more than two SIDs fails; (bso#12757).
  + samba-tool user syncpasswords doesn't trigger the script when a user gets
    removed; (bso#12767).
  + systemd: fix detection of libsystemd; (bso#12764).
  + Notify subsystem only maps first inotify mask to Windows notify filter;
    (bso#12760).
  + Allow passing trusted domain password as plain-text to PASSDB layer;
    (bso#12751).
  + Can't case-rename files with vfs_fruit; (bso#12749).
  + wrong sid-&gt;uid mapping for SIDs residing in sIDHistory; (bso#12702).
  + vfs_acl_common should force "create mask = 0777", not 0666; (bso#12562).
  + Ordering of notify responses broken; (bso#12756).</changelog>
<changelog author="ddiss@suse.com" date="1499860800">- Fix inconsistent ctdb socket path; (bsc#1048352).
- Fix non-admin cephx authentication; (bsc#1048387).</changelog>
<changelog author="dmulder@suse.com" date="1499947200">- Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb; (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1500897600">- fix cephwrap_chdir(); (bsc#1048790).
- Update to 4.6.6
  + CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation;
    (bsc#1048278).</changelog>
<changelog author="dmulder@suse.com" date="1502193600">- Fix duplicate CTDB_LOGGING params when downgraded and upgraded again;
  (bsc#1048339).</changelog>
<changelog author="ddiss@suse.com" date="1502884800">- Update to 4.6.7; (bsc#1054017)
  + Joining a Huawai storage fails: empty CLDAP ping answer; (bso#11392).
  + smbcacls can fail against a directory on Windows using SMB2.; (bso#12937).
  + vfs_ceph provides inconsistent directory listings; (bso#12911).
  + Misused talloc context can cause a user to crash their smbd by chaining
    SMB1 commands.; (bso#12836).
  + Use-after free can crash libsmbclient code.; (bso#12927).
  + Server exit with active AIO can crash.; (bso#12925).
  + Ensure notifyd doesn't return from smbd_notifyd_init; (bso#12910).
  + fd leak to ctdb sub-processes leads to SELinux AVC denial in audit logs;
    (bso#12898).
  + vfs_fruit shouldn't send MS NFS ACEs to Windows clients; (bso#12897).
  + smbspool_krb5_wrapper does not tell CUPS that it requires negotiate for
    authentication; (bso#12886).
  + finder sidebar showing question mark instead of icon when using ip to
    connect with vfs_fruit; (bso#12840).
  + Winbind stops obtaining the 'unixHomeDirectory' &amp; 'loginShell' attributes
    from AD.; (bso#12720).
  + KCC run at selftest startup can fail spuriously due to a race;
    (bso#12869).
  + winbindd changes the local password and gets NT_STATUS_WRONG_PASSWORD for
    the remote change; (bso#12782).
  + rpc_pipe_client memory leaks due to long term memory context passed to
    rpc_pipe_open_interface(); (bso#12890).
  + CVE-2017-2619 breaks accessing previous versions of directories with
    snapshots in subdirectories of the share; (bso#12885).
  + dns_name_equal doing OOB read; (bso#12813).
  + replica_sync tests flap; (bso#12753).
  + Selftest should not call 'net cache flush' and wipe important winbind
    entries; (bso#12868).
  + Old Samba versions don't support using recent ldb versions (&gt;=1.1.30);
    (bso#12859).
  + pam_winbind fails with kerberos method = secrets and keytab; (bso#10490).
  + race starting winbindd against posixacl test; (bso#12843).
  + Crash in the reentrant smbd_smb2_create_send() if the something fails in
    the subsequent try; (bso#12832).
  + spnego.c passes the wrong argument order to gensec_update_ev() for the
    FALLBACK case; (bso#12788).
  + Clients with SMB3 support can't connect with
    "server max protocol = SMB2_02"; (bso#12772).
  + A log message of samb-tool user syncpasswords reverses string arguments in
    a debug message "Call Popen[...".; (bso#12768).
  + The smb tarmode tests kills the share dir contents; (bso#12867).
  + Fix for a bug in MacOS X Sierra NTLMv2 processing; (bso#12862).
  + CVE-2017-2619 regression with non-wide symlinks to directories; (bso#12860).
  + manpage/index.html lists links not in alphabetical order; (bso#12854).
  + smbcacls got error NT_STATUS_NETWORK_NAME_DELETED; (bso#12831).
  + If a record is locked in a database, then recovery does not complete;
    (bso#12857).
  + debug_locks.sh script does not log any information; (bso#12856).
  + SIGSEGV in cm_connect_lsa_tcp dereferencing conn-&gt;lsa_tcp_pipe-&gt;transport
    after error; (bso#12852).
  + smbclient can't parse DOMAIN+username if a different winbind separator is
    used; (bso#12849).
  + Related requests with SessionSetup fail with INTERNAL_ERROR; (bso#12845).
  + Related requests with TreeConnect fail with NETWORK_NAME_DELETED;
    (bso#12844).
  + cli-&gt;server_os not filled correctly; (bso#12779).
  + REGRESSION: smbclient doesn't print the session setup anymore;
    (bso#12824).
  + smblcient doesn't handle STATUS_NOT_SUPPORTED gracefully for
    FSCTL_VALIDATE_NEGOTIATE_INFO; (bso#12808).
  + CTDB NFS call-out failures do not cause event failures; (bso#12837).
  + net command fails due to incorrectly return code; (bso#12828).
  + Fix building Samba with GCC 7.1; (bso#12827).</changelog>
<changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
<changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
<changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
<changelog author="scabrero@suse.de" date="1506081600">- Fix GUID string format on GetPrinter info request; (bso#12993);
  (bsc#1050707).</changelog>
<changelog author="scabrero@suse.de" date="1509105600">- Update to 4.6.9; (bsc#1065066);
  + Reverse sense of 'clear all attributes', ignore attribute change in SMB2
    to match SMB1; (bso#12899);
  + SMBC_setatr() initially uses an SMB1 call before falling back;
    (bso#12913);
  + Fix segfault on MacOS 10.12.3 clients caused by SMB_VFS_GET_COMPRESSION;
    (bso#13003);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically; (bso#7909);
  + Honor SEC_STD_WRITE_OWNER bit; (bso#7933);
  + Kernel oplocks still have issues with named streams; (bso#12791);
  + Handle EACCES when fetching DOS attributes; (bso#12944);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Fix wrong Samba access checks when changing DOS attributes; (bso#12995);
  + Groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Match WS2016 ReFS set compression behaviour; (bso#12144);
  + Fix implementation of process_exists control; (bso#13012);
  + GET_DB_SEQNUM control can cause ctdb to deadlock when databases are
    frozen; (bso#13021);
  + Free up record data if a call request is deferred; (bso#13029);
  + Initialize ctdb_ltdb_header completely for empty record; (bso#13036);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + Ignore event scripts with multiple '.'s; (bso#13070);
  + Sort the GPOs in the correct order; (bso#13046);
  + 'smbd' uses a lot of CPU on startup of a connection; (bso#12973);
  + Fix str[n]casecmp_m() by comparing lower case values; (bso#13018);
  + Can't change password in Samba from a windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + Fix file change notification for renames; (bso#12903);
  + Avoid a socket leak after fork; (bso#13006);
  + Fix a potential memleak; (bso#13090);
  + Fix passing of errno from async calls; (bso#12983);
  + Fix segfault when running with log level 10; (bso#13032);
  + Do not report an invalid range for AD DC role; (bso#12629);
  + Print the kinit failed message with DBGLVL_NOTICE; (bso#12704);
  + Fix changing passwords with Kerberos; (bso#12956);
  + Fix changing the password with 'smbpasswd' as a local user on a domain
    member; (bso#12975);
  + Fix a read after free if a chained SMB1 call goes async; (bso#12836);
  + CVE-2017-12163: Prevent client short SMB1 write from writing server memory
    to file; (bso#13020);
  + Let non_widelink_open() chdir() to directories directly; (bso#12885);
  + CVE-2017-12151: Keep required encryption across SMB3 dfs redirects;
    (bso#12996);
  + CVE-2017-12150: Some code path don't enforce smb signing when they should;
    (bso#12997);</changelog>
<changelog author="scabrero@suse.de" date="1510142400">- CVE-2017-14746: Use-after-free vulnerability; (bso#13041);
  (bsc#1060427);
- CVE-2017-15275: Server heap memory information leak;
  (bso#13077); (bsc#1063008);</changelog>

</package>
<package pkgid="b0bb0a2f122b4e2eb0799d4589e8efe353fff64bfde8bf2f325adef6c65dfa38" name="sed" arch="src">
    <version epoch="0" ver="4.2.2" rel="11.1"/>

<changelog author="mmj@suse.de" date="1107172800">- Update to 4.1.4 including:
  o \B correctly means "not on a word boundary" rather than
    "inside a word"
  o bugfixes for platform without internationalization
  o more thorough testing framework for tarballs
    (`make full-distcheck')</changelog>
<changelog author="schwab@suse.de" date="1112356800">- Don't use included regex.</changelog>
<changelog author="agruen@suse.de" date="1137672000">- off-by-one.diff: Report the correct back-reference number if
  a substitution's left-hand side does not contain enough groups.</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="cthiel@suse.de" date="1151928000">- fix build</changelog>
<changelog author="jsmeix@suse.de" date="1153137600">- Fixed the "fix build" below for our current different build
  environments on our different architectures:
  On s390 and s390x the sed.html documentation is still installed
  into usr/share/doc/ but on the other architectures it is
  installed into usr/share/doc/sed/</changelog>
<changelog author="jsmeix@suse.de" date="1154952000">- Updated to version 4.1.5:
  Fix parsing of a negative character class not including a closed
  bracket, like [^]] or [^]a-z].
  Fix parsing of [ inside an y command, like y/[/A/.
  Output the result of commands a, r, R when a q command is found.
- off-by-one.diff: obsolete (fixed in the source).
- configure needs --enable-html to build sed.html (default=no)
  and it is installed into usr/share/doc/sed-4.1.5/</changelog>
<changelog author="mkoenig@suse.de" date="1173441600">- add --follow-symlinks option [#200082]
- fix 'used uninitialized' warnings [#248721]</changelog>
<changelog author="dmueller@suse.de" date="1203336000">- use %find_lang
- fix rpmlint warnings</changelog>
<changelog author="jengelh@medozas.de" date="1260273600">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="dimstar@opensuse.org" date="1281700800">- Update to version 4.2.1:
  + fix parsing of s/[[[[[[[[[]//
  + security contexts are preserved by -i too under SELinux
  + temporary files for sed -i are not made group/world-readable
    until they are complete
- Changes from version 4.2:
  + now released under GPLv3
  + added a new extension `z` to clear pattern space even in the
    presence of invalid multibyte sequences
  + a preexisting GNU gettext installation is needed in order to
    compile GNU sed with NLS support
  + new option --follow-symlinks, available when editing a file
    in-place.
  + hold-space is reset between different files in -i and -s modes.
  + multibyte processing fixed
  + fixed bug in 'i\' giving a segmentation violation if given
    alone.
  + much improved portability
  + much faster in UTF-8 locales
  + will correctly replace ACLs when using -i
  + will now accept NUL bytes for `.'
- Drop upstream included [atches:
  + sed-follow_symlinks.patch
  + sed-4.1.5-fix_warnings.patch
- Remove --enable-html from configure: the option is no longer
  supported and sed.html no longer created.</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1322827200">- license update: GPL-3.0+
  There are no "GPL-3.0 only" licenses in sed</changelog>
<changelog author="rschweikert@suse.com" date="1328270400">- keep binary in /usr tree (UsrMerge project)</changelog>
<changelog author="sbrabec@suse.cz" date="1358856000">- Update to version 4.2.2:
  * don't truncate input for lines of length 2^31 and longer
  * fix endless loop on incomplete multibyte sequences (bnc#743689)
  * -u also does unbuffered input
  * New command `F' to print current input file name
  * sed -i, s///w, and the `w' and `W' commands also obey the
  - -binary option
  * --posix fails for scripts that end in a backslash.
  * New option -z (--null-data) to separate lines by ASCII NUL.
  * \x26 (and similar escaped sequences) produces a literal &amp; in
    the replacement argument of the s/// command.
- Split lang package.
- Option to verify GPG signature.</changelog>
<changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="tcech@suse.cz" date="1401796800">- sed-dont_close_twice.patch (bnc#880817)
  when closing fails, file is attempted to be closed again
  patch based of Neil Brown's recommendation</changelog>
<changelog author="sbrabec@suse.com" date="1440417600">- Fix behavior of --follow-symlinks when reading from stdin
  (bnc#933029, gnu#20795, sed-follow-symlinks-stdin.patch).
- Make "sed --follow-symlinks -" consistent with "sed -" again,
  and process stdin instead of ./-, exactly as in SLE11
  (bnc#933029#c6, gnu#20796, sed-follow-symlinks-hyphen.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1447416000">- Don't crash if close of last file fails (bsc#954661,
  sed-dont_close_twice2.patch).</changelog>

</package>
<package pkgid="1fad1a224ace8ae18215ef27823aebd831a43022a794a09964b66379a855b0a0" name="sed" arch="x86_64">
    <version epoch="0" ver="4.2.2" rel="11.1"/>

<changelog author="jengelh@medozas.de" date="1260273600">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="dimstar@opensuse.org" date="1281700800">- Update to version 4.2.1:
  + fix parsing of s/[[[[[[[[[]//
  + security contexts are preserved by -i too under SELinux
  + temporary files for sed -i are not made group/world-readable
    until they are complete
- Changes from version 4.2:
  + now released under GPLv3
  + added a new extension `z` to clear pattern space even in the
    presence of invalid multibyte sequences
  + a preexisting GNU gettext installation is needed in order to
    compile GNU sed with NLS support
  + new option --follow-symlinks, available when editing a file
    in-place.
  + hold-space is reset between different files in -i and -s modes.
  + multibyte processing fixed
  + fixed bug in 'i\' giving a segmentation violation if given
    alone.
  + much improved portability
  + much faster in UTF-8 locales
  + will correctly replace ACLs when using -i
  + will now accept NUL bytes for `.'
- Drop upstream included [atches:
  + sed-follow_symlinks.patch
  + sed-4.1.5-fix_warnings.patch
- Remove --enable-html from configure: the option is no longer
  supported and sed.html no longer created.</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1322827200">- license update: GPL-3.0+
  There are no "GPL-3.0 only" licenses in sed</changelog>
<changelog author="rschweikert@suse.com" date="1328270400">- keep binary in /usr tree (UsrMerge project)</changelog>
<changelog author="sbrabec@suse.cz" date="1358856000">- Update to version 4.2.2:
  * don't truncate input for lines of length 2^31 and longer
  * fix endless loop on incomplete multibyte sequences (bnc#743689)
  * -u also does unbuffered input
  * New command `F' to print current input file name
  * sed -i, s///w, and the `w' and `W' commands also obey the
  - -binary option
  * --posix fails for scripts that end in a backslash.
  * New option -z (--null-data) to separate lines by ASCII NUL.
  * \x26 (and similar escaped sequences) produces a literal &amp; in
    the replacement argument of the s/// command.
- Split lang package.
- Option to verify GPG signature.</changelog>
<changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="tcech@suse.cz" date="1401796800">- sed-dont_close_twice.patch (bnc#880817)
  when closing fails, file is attempted to be closed again
  patch based of Neil Brown's recommendation</changelog>
<changelog author="sbrabec@suse.com" date="1440417600">- Fix behavior of --follow-symlinks when reading from stdin
  (bnc#933029, gnu#20795, sed-follow-symlinks-stdin.patch).
- Make "sed --follow-symlinks -" consistent with "sed -" again,
  and process stdin instead of ./-, exactly as in SLE11
  (bnc#933029#c6, gnu#20796, sed-follow-symlinks-hyphen.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1447416000">- Don't crash if close of last file fails (bsc#954661,
  sed-dont_close_twice2.patch).</changelog>

</package>
<package pkgid="94c315dec76a0e720e10cdc12ed84c06c22b873d2fd6426f28d10022f92f6033" name="sed-lang" arch="noarch">
    <version epoch="0" ver="4.2.2" rel="11.1"/>

<changelog author="jengelh@medozas.de" date="1260273600">- enable parallel building</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="dimstar@opensuse.org" date="1281700800">- Update to version 4.2.1:
  + fix parsing of s/[[[[[[[[[]//
  + security contexts are preserved by -i too under SELinux
  + temporary files for sed -i are not made group/world-readable
    until they are complete
- Changes from version 4.2:
  + now released under GPLv3
  + added a new extension `z` to clear pattern space even in the
    presence of invalid multibyte sequences
  + a preexisting GNU gettext installation is needed in order to
    compile GNU sed with NLS support
  + new option --follow-symlinks, available when editing a file
    in-place.
  + hold-space is reset between different files in -i and -s modes.
  + multibyte processing fixed
  + fixed bug in 'i\' giving a segmentation violation if given
    alone.
  + much improved portability
  + much faster in UTF-8 locales
  + will correctly replace ACLs when using -i
  + will now accept NUL bytes for `.'
- Drop upstream included [atches:
  + sed-follow_symlinks.patch
  + sed-4.1.5-fix_warnings.patch
- Remove --enable-html from configure: the option is no longer
  supported and sed.html no longer created.</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1322827200">- license update: GPL-3.0+
  There are no "GPL-3.0 only" licenses in sed</changelog>
<changelog author="rschweikert@suse.com" date="1328270400">- keep binary in /usr tree (UsrMerge project)</changelog>
<changelog author="sbrabec@suse.cz" date="1358856000">- Update to version 4.2.2:
  * don't truncate input for lines of length 2^31 and longer
  * fix endless loop on incomplete multibyte sequences (bnc#743689)
  * -u also does unbuffered input
  * New command `F' to print current input file name
  * sed -i, s///w, and the `w' and `W' commands also obey the
  - -binary option
  * --posix fails for scripts that end in a backslash.
  * New option -z (--null-data) to separate lines by ASCII NUL.
  * \x26 (and similar escaped sequences) produces a literal &amp; in
    the replacement argument of the s/// command.
- Split lang package.
- Option to verify GPG signature.</changelog>
<changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
<changelog author="tcech@suse.cz" date="1401796800">- sed-dont_close_twice.patch (bnc#880817)
  when closing fails, file is attempted to be closed again
  patch based of Neil Brown's recommendation</changelog>
<changelog author="sbrabec@suse.com" date="1440417600">- Fix behavior of --follow-symlinks when reading from stdin
  (bnc#933029, gnu#20795, sed-follow-symlinks-stdin.patch).
- Make "sed --follow-symlinks -" consistent with "sed -" again,
  and process stdin instead of ./-, exactly as in SLE11
  (bnc#933029#c6, gnu#20796, sed-follow-symlinks-hyphen.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1447416000">- Don't crash if close of last file fails (bsc#954661,
  sed-dont_close_twice2.patch).</changelog>

</package>
<package pkgid="e8e7ccd3750f6511218faddf04099724a070d6316aceafe9762fa5730b088a19" name="sendmail" arch="src">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="d8cd212ea6f8f8edda435057afcac72f34fb5cd505aa304d3bb7cebd8cad9087" name="sendmail" arch="x86_64">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="7a12d52852d2900d0f03c0861a04f5941991fe6d6df0ccf4c871afc377cf8936" name="sendmail-devel" arch="x86_64">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="48c3ce84c2275daf80310de738d0c6fe26fc7b9a9e49bdb3e0bd7036903fa527" name="sendmail-starttls" arch="noarch">
    <version epoch="0" ver="8.15.2" rel="6.1"/>

<changelog author="werner@suse.de" date="1396353600">- Update to sendmail 8.14.8 (bnc#871258)
  * Properly initialize all OpenSSL algorithms for versions before
    OpenSSL 0.9.8o. Without this SHA2 algorithms may not
    work properly, causing for example failures for certs
    that use sha256WithRSAEncryption as signature algorithm.
  * When looking up hostnames, ensure only to return those records
    for the requested family (AF_INET or AF_INET6).
    On system that have NEEDSGETIPNODE and NETINET6
    this may have failed and cause delivery problems.
    Problem noted by Kees Cook.
  * A new mailer flag '!' is available to suppress an MH hack
    that drops an explicit From: header if it is the
    same as what sendmail would generate.
  * Add an FFR (for future release) to use uncompressed IPv6 addresses,
    i.e., they will not contain "::".  For example, instead
    of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
    configuration data (including maps, files, classes,
    custom ruleset, etc) have to use the same format.
    This will be turned on in 8.15.  It can be enabled in 8.14
    by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
    in your devtools/Site/site.config.m4 file.
  * Add an additional case for the WorkAroundBrokenAAAA check when
    dealing with broken nameservers by ignoring SERVFAIL
    errors returned on T_AAAA (IPv6) lookups at delivery time.
    Problem noted by Pavel Timofeev of OCS.
  * If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
    setusercontext() on deliveries as a different user.
    Patch from Edward Tomasz Napierala from FreeBSD.
  * Add support for DHParameters 2048-bit primes.
  * CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
    in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  * LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
    Patch from Bill Parker.
  * LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
    fail.  Patch from John Beck of Oracle.
  * Portability:
    On Linux use socklen_t as the type for the 3rd argument
    for getsockname/getpeername if the glibc version is at
    least 2.1.
- Add patch sendmail-8.14.8-m4header.patch from upstream
- Update patch sendmail-8.14.7.dif to sendmail-8.14.8.dif
- Modify the service files to be able to restart if a reload fails
  as well as use sync targets nss-user-lookup.target and
  nss-lookup.target. Also propagate reload from main service to
  client service and install both</changelog>
<changelog author="werner@suse.de" date="1396440000">- In systemd mail-transfer-agent.target is gone even if there are
  MTAs around which will be started without socket/bus activation</changelog>
<changelog author="werner@suse.de" date="1400846400">- Update to sendmail 8.14.9
  * Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * Fix a misformed comment in conf.c: "/*" within comment
    which may cause a compilation error on some systems.
    Problem reported by John Beck of Oracle.
  * Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
- Modify patch sendmail-8.14.8.dif which is now sendmail-8.14.9.dif</changelog>
<changelog author="werner@suse.de" date="1401105600">- Add patch sendmail-fd-passing-libmilter.patch from Debian sendmail
  maintainer Mikhail Gusarov to support systemd socket activation
  support also in libmilter (bnc#879790)
- Be aware that /var/run is a symbolic link to /run a tmpfs file
  system</changelog>
<changelog author="werner@suse.de" date="1448971200">-  Do not enforce dependencies like for amavis and saslauthd</changelog>
<changelog author="werner@suse.de" date="1460635200">- Update to sendmail 8.15.2 (boo#975416)
  * If FEATURE(`nopercenthack') is used then some bogus input triggered
    a recursion which was caught and logged as
    SYSERR: rewrite: excessive recursion (max 50) ...
    Fix based on patch from Ondrej Holas.
  * DHParameters now by default uses an included 2048 bit prime.
    The value 'none' previously caused a log entry claiming
    there was an error "cannot read or set DH parameters".
    Also note that this option applies to the server side only.
  * The U= mailer field didn't accept group names containing hyphens,
    underbars, or periods.  Based on patch from David Gwynne
    of the University of Queensland.
  * CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
    Patch from Lars-Johan Liman of Netnod Internet Exchange.
  * CONFIG: New option UseCompressedIPv6Addresses to select between
    compressed and uncompressed IPv6 addresses.  The default
    value depends on the compile-time option IPV6_FULL:
    For 1 the default is False, for 0 it is True, thus
    preserving the current behaviour.  Based on patch from
    John Beck of Oracle.
  * CONFIG: Account for IPv6 localhost addresses in
    FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
    from FreeBSD and Robert Scheck from the Fedora Project.
  * CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
  * LIBMILTER: Deal with more invalid protocol data to avoid potential
    crashes.  Problem noted by Dimitri Kirchner.
  * LIBMILTER: Allow a milter to specify an empty macro list ("", not
    NULL) in smfi_setsymlist() so no macro is sent for the
    selected stage.
  * MAKEMAP: A change to check TrustedUser in fewer cases which was
    made in 2013 caused a potential regression when makemap
    was run as root (which should not be done anyway).
  * SECURITY: Properly set the close-on-exec flag for file descriptors
    (except stdin, stdout, and stderr) before executing mailers.
  * If header rewriting fails due to a temporary map lookup failure,
    queue the mail for later retry instead of sending it
    without rewriting the header.  Note: this is done
    while the mail is being sent and hence the transaction
    is aborted, which only works for SMTP/LMTP mailers
    hence the handling of temporary map failures is
    suppressed for other mailers. SMTP/LMTP servers may
    complain about aborted transactions when this problem
    occurs.
    See also "DNS Lookups" in sendmail/TUNING.
  * Incompatible Change: Use uncompressed IPv6 addresses by default,
    i.e., they will not contain "::".  For example,
    instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
    permits a zero subnet to have a more specific match,
    such as different map entries for IPv6:0:0 vs IPv6:0.
    This change requires that configuration data
    (including maps, files, classes, custom ruleset,
    etc) must use the same format, so make certain such
    configuration data is updated before using 8.15.
    As a very simple check search for patterns like
    'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
    the prior format can be retained by compiling with:
    APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
    in your devtools/Site/site.config.m4 file.
  * If a connection to the MTA is dropped by the client before its
    hostname can be validated, treat it as "may be forged",
    so that the unvalidated hostname is not passed to a
    milter in xxfi_connect().
  * Add a timeout for communication with socket map servers
    which can be specified using the -d option.
  * Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
    numeric logins even if HESIOD is enabled.
  - sendmail 8.15.1
  * The new option CertFingerprintAlgorithm specifies the finger-
    print algorithm (digest) to use for the presented cert.
    If the option is not set, md5 is used and the macro
    {cert_md5} contains the cert fingerprint.
    However, if the option is set, the specified algorithm
    (e.g., sha1) is used and the macro {cert_fp} contains
    the cert fingerprint.
    That is, as long as the option is not set, the behaviour
    does not change, but otherwise, {cert_md5} is superseded
    by {cert_fp} even if you set CertFingerprintAlgorithm
    to md5.
  * The options ServerSSLOptions and ClientSSLOptions can be used
    to set SSL options for the server and client side
    respectively. See SSL_CTX_set_options(3) for a list.
    Note: this change turns on SSL_OP_NO_SSLv2 and
    SSL_OP_NO_TICKET for the client. See doc/op/op.me
    for details.
  * The option CipherList sets the list of ciphers for STARTTLS.
    See ciphers(1) for possible values.
  * Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
    if a CRLFfile is in use (and LogLevel is 14 or higher.)
  * Store a more specific TLS protocol version in ${tls_version}
    instead of a generic one, e.g., TLSv1 instead of
    TLSv1/SSLv3.
  * Properly set {client_port} value on little endian machines.
    Patch from Kelsey Cummings of Sonic.net.
  * Per RFC 3848, indicate in the Received: header whether SSL or
    SMTP AUTH was negotiated by setting the protocol clause
    to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  * If the 'C' flag is listed as TLSSrvOptions the requirement for the
    TLS server to have a cert is removed.  This only works
    under very specific circumstances and should only be used
    if the consequences are understood, e.g., clients
    may not work with a server using this.
  * The options ClientCertFile, ClientKeyFile, ServerCertFile, and
    ServerKeyFile can take a second file name, which must be
    separated from the first with a comma (note: do not use
    any spaces) to set up a second cert/key pair. This can
    be used to have certs of different types, e.g., RSA
    and DSA.
  * A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
    address. It returns the string for the PTR lookup, but
    without trailing {ip6,in-addr}.arpa.
  * New operation mode  'C' just checks the configuration file, e.g.,
    sendmail -C new.cf -bC
    will perform a basic syntax/consistency check of new.cf.
  * The mailer flag 'I' is deprecated and will be removed in a
    future version.
  * Allow local (not just TCP) socket connections to the server, e.g.,
    O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
    can be used.
  * If the new option MaxQueueAge is set to a value greater than zero,
    entries in the queue will be retried during a queue run
    only if the individual retry time has been reached which
    is doubled for each attempt.  The maximum retry time is
    limited by the specified value.
  * New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
    to relax requirement for DefaultAuthInfo file.
  * Reset timeout after receiving a message to appropriate value if
    STARTTLS is in use.  Based on patch by Kelsey Cummings
    of Sonic.net.
  * Report correct error messages from the LDAP library for a range of
    small negative return values covering those used by OpenLDAP.
  * Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
    Allan E Johannesen of Worcester Polytechnic Institute.
  * CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
    nospecial which describes whether to disallow "%" in the
    local part of an address.
  * DEVTOOLS: Fix regression in auto-detection of libraries when only
    shared libraries are available.  Problem reported by
    Bryan Costales.
  * LIBMILTER: Mark communication socket as close-on-exec in case
    a user's filter starts other applications.
    Based on patch from Paul Howarth.
- Modified patches
  sendmail-8.14.9.dif becomes sendmail-8.15.2.dif
  sendmail-8.14.7-select.dif
  sendmail-8.14.8-m4header.patch
  sendmail-fd-passing-libmilter.patch
  Removed patches
  sendmail-db6.diff
  sendmail-8.14.7-warning.patch</changelog>
<changelog author="werner@suse.de" date="1460635201">- Avoid warning from chkstat due slash on directory path as last character</changelog>
<changelog author="werner@suse.de" date="1463659200">- Do not use http://license.opensuse.org/ as reference for the Sendmail
  license even if stated by rpmlint but https://spdx.org/licenses/Sendmail.html</changelog>
<changelog author="tchvatal@suse.com" date="1466078400">- Split uucp to separate package, no technical reason for it to not
  stand on its own
- Drop uucp related patches:
  + uucp-1.07-contrib.dif
  + uucp-1.07-cu.patch
  + uucp-1.07-grade.patch
  + uucp-1.07-lockdev.patch
  + uucp-1.07.dif
  + uucp-texinfo-5.0.patch
  + drop_ftime.patch</changelog>
<changelog author="tchvatal@suse.com" date="1466078401">- Drop unused patch:
  * sendmail-8.14.7-warning.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1468929600">- Fix License: Even https://spdx.org/licenses/Sendmail.html lists
  "Sendmail" as the valid identifier. Same as
  http://license.opensuse.org/ does. "Sendmail License" is in the
  column "Full Name". The License: tag requires the identifier.
- Fix some more rpmlint warnings:
  + sendmail: W: suse-missing-rclink sendmail:
  - Ship /usr/sbin/rcsendmail symlink to /usr/sbin/service
  + sendmail: W: suse-missing-rclink sendmail-client
  - Ship /usr/sbin/rcsendmail-client symlink to /usr/sbin/service
  + sendmail: W: suse-wrong-suse-capitalisation:
  - Rename README.SuSE to README.SUSE (fix spelling also inside
    the file).
  + sendmail: W: permissions-dir-without-slash
  - Fix permissions and permissions.paranoid inside
    sendmail-suse.tar.bz2.
  + sendmail: W: systemd-service-without-service_del_postun:
  - Add corresponding macros to postun script when not building
    with sysvinit support.
  + sendmail: W: systemd-service-without-service_add_pre:
  - Add corresponding macros to pre script when not building
    with sysvinit support.</changelog>
<changelog author="werner@suse.de" date="1474891200">- Use _unitdir macro instead asking pkg config of systemd</changelog>
<changelog author="kukuk@suse.de" date="1487592000">- Don't use insserv together with systemd</changelog>
<changelog author="werner@suse.de" date="1488801600">- Require m4 at build time</changelog>
<changelog author="werner@suse.de" date="1490270400">- New package libmilter1_0 for the shared library version of
  libmilter, the  Sendmail Content Management API
- Also new package libmilter-doc for the substantial documentation
  about Sendmail Content Management API (milter)
- Make sendmail-tls a noarch package</changelog>
<changelog author="jengelh@inai.de" date="1491912000">- Replace a find|xargs rm by -delete</changelog>
<changelog author="werner@suse.de" date="1491998400">- Change spec file name scheme used for getting soname down into
  libmilter</changelog>
<changelog author="werner@suse.de" date="1491998401">- Add bitdomain and uudomain to possible targets for refresh</changelog>
<changelog author="werner@suse.de" date="1494504000">- Require user and group mail</changelog>
<changelog author="werner@suse.de" date="1500465600">-  Change requirements for libmilter and sendmail-devel as
  the library is also used by other MTA like postfix (boo#1049188)</changelog>

</package>
<package pkgid="5697b48a2a62c9cb5945ef5ff4de0ee547c3b209d747c99cbf6f16e96116b3e7" name="sg3_utils" arch="src">
    <version epoch="0" ver="1.43" rel="12.1"/>

<changelog author="hare@suse.de" date="1393329600">- Update to inofficial release 1.38b12r556 (bnc#865494)
  * Add --inhex parameter to sg_inq
  * sg_inq: decode ASCII information vpd page
  * sg_inq: allow page=-1 to force std INQUIRY decoding
  * sg_inq: improve unit serial number display
  * sg_vpd: Add LTO and DDS vendor pages
  * sg_persist: add SOP transport ID
  * sg_lib_data: sync asc/ascq code with T10
  * rescan-scsi-bus.sh: check if FC driver exports issue_lip
  * Add man page for rescan-scsi-bus.sh
- Remove sg3_utils-check-if-hba-supports-issue-lip.patch,
  has been merged with upstream</changelog>
<changelog author="hare@suse.de" date="1393588800">- Add 59-scsi-sg3_utils.rules (bnc#865494)</changelog>
<changelog author="hare@suse.de" date="1394193600">- Fixup 59-scsi_sg3_utils.rules to provide compability links
  for ata_id (bnc#866933)</changelog>
<changelog author="hare@suse.de" date="1397131200">- Update to official release 1.38
  * Update documentation
  * Update to latest SPC
  * Minor fixes
  * Add: sg3_utils-1.38.tar.xz
  * Remove: sg3_utils-1.38b7r538.tar.xz
  * Remove: sg3_utils-1.38r546.patch
  * Remove: sg3_utils-1.38b12r556.patch
- Use 59-scsi-sg3_utils from the rpm
  Remove: 59-scsi-sg3_utils.rules
- Fixup 59-scsi-sg3_utils.rules to not provide symlinks
  on multipath device paths (bnc#872929)
  Add: 0001-59-scsi-sg_utils.rules-skip-symlinks-for-multipath-d.patch</changelog>
<changelog author="hare@suse.de" date="1397217600">- Split off 59-scsi-sg_utils.rules to properly support
  multipathing (bnc#873151)
  Remove:
  0001-59-scsi-sg_utils.rules-skip-symlinks-for-multipath-d.patch
  Add:
  0001-Split-59-scsi-sg_utils.rules-for-multipath-support.patch</changelog>
<changelog author="spargaonkar@suse.com" date="1397563200">- added patch sginfo-inq-fields-strip-blank.patch
  sg3_utils: Strip out trailing info from vendor info products fields in inq
  bnc#863357
- added patches:
  * sginfo-inq-fields-strip-blank.patch</changelog>
<changelog author="hare@suse.de" date="1400155200">- Create compability links for ATA devices (bnc#876344)
  Add:
  0003-sg_inq-compability-links-for-ata_id.patch
- Suppress warnings for sg_inq --export (bnc#876454)
  Add:
  0004-sg_inq-suppress-warning-messages-for-export.patch</changelog>
<changelog author="rmilasan@suse.com" date="1404734400">- Fix missing rule for generating links for partitions also (bnc#883032)
  Add:
  0005-sg3_utils-fix-missing-rule-for-scsi_serial-partitions.patch</changelog>
<changelog author="hare@suse.de" date="1409745600">- Fixup formatting of invalid VPD pages (bnc#884779)
  Add: 0006-Fixup-formatting-of-invalid-VPD-page-0x83.patch
- sg_inq: Do not export long identifiers (bnc#884779)
  Add: 0007-sg_inq-Do-not-export-long-identifiers.patch</changelog>
<changelog author="hare@suse.de" date="1440504000">- Update to sg3_utils-1.41 (FATE#318723)
  - New utilities sg_rep_zones, sg_reset_wp, sg_zone, sg_write_verify,
    sg_ses_microcode, sg_sat_read_gplog
  - Bugfixes to existing utilities
- Remove patches merged with upstream:
  * Remove: 0007-sg_inq-Do-not-export-long-identifiers.patch
  * Remove: 0006-Fixup-formatting-of-invalid-VPD-page-0x83.patch
  * Remove: 0005-sg3_utils-fix-missing-rule-for-scsi_serial-partitions.patch
  * Remove: 0004-sg_inq-suppress-warning-messages-for-export.patch
  * Remove: 0003-sg_inq-compability-links-for-ata_id.patch
  * Remove: sginfo-inq-fields-strip-blank.patch
  * Remove: 0001-Split-59-scsi-sg_utils.rules-for-multipath-support.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1444392000">- Fix udev rule (bsc#949315)
  * Add: remove-stray-comma-in-udev-rule.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1444651200">- Correct fix of udev rule (bsc#949315)
  * Refresh: remove-stray-comma-in-udev-rule.patch</changelog>
<changelog author="hare@suse.de" date="1448539200">- Rename patch remove-stray-comma-in-udev-rule.patch -&gt;
  0001-58-scsi-sg3_symlink.rules-fixup-typo.patch
- 55-scsi-sg3_id.rules: Always set ID_WWN_WITH_EXTENSION (bsc#949796)
  * Add 0002-55-scsi-sg3_id.rules-Always-set-ID_WWN_WITH_EXTENSIO.patch
- sg_inq: deal with invalid strings in inquiry data (bsc#956815)
  * Add: 0003-sg_inq-deal-with-invalid-strings-in-inquiry-data.patch
- 55-scsi-sg3_id.rules: read VPD pages from sysfs
  * Add: 0004-55-scsi-sg3_id.rules-read-VPD-pages-from-sysfs.patch
- rescan-scsi-bus.sh: Use safe temporary files (bsc#955856)
  * Add 0005-rescan-scsi-bus.sh-Use-safe-temporary-files.patch
- rescan-scsi-bus.sh: Correctly quote $MULTIPATH (bsc#955222)
  * Add 0006-rescan-scsi-bus.sh-Correctly-quote-MULTIPATH.patch
- rescan-scsi-bus.sh: Fixup syntax error
  * Add 0007-rescan-scsi-bus.sh-Fixup-syntax-error.patch</changelog>
<changelog author="hare@suse.de" date="1455796800">- Update to new upstream release 1.42:
  * sg_timestamp: new, to report or set timestamp
  * sg_read_attr: new, supported by tape drives
  * sg_stpg: fix truncation of target port field
  * sg_inq: cope with unicode strings, udev fixes
  - update version descriptor list to 20160125
  - '--export': new entries for UUID descriptor
  * sg_ses: add more field acronyms (ses3r11)
  8 sg_logs: add Utilization lpage (sbc4r07)
  - add Background operation lpage
  - add Pending defects lpage
  - add LPS misalignment lpage (sbc4r10)
  - document '--All' ('-A') option
  - rework lto tape vendor lpages
  * sg_vpd: add Block limits extension VPD page
  - add Device constituents VPD page
  - add LB Protection VPD page (ssc 15-296r1)
  - LB provisioning VPD page: expand LBPRZ, add
    Minimum and Threshold percentage fields
  - rework lto tape vendor VPD pages
  * sg_inq+sg_vpd+sg_xcopy: add support for locally
    assigned UUIDs in VPD page 0x83 (15-267r2)
  * sg_sanitize: add --znr option (sbc4r07)
  * sg_rep_zones: add --partial option (zbc-r04)
  * sg_format: add ffmt option (sbc4r10)
  - add support for FORMAT MEDIUM (for tape)
  * sg_raw: document length relationships
  * rescan-scsi-bus.sh: updates from Suse
  * sg_lib_data: sync asc/ascq codes with T10 20151126
  * sg_lib: add 'sense' categories for SCSI statuses:
    condition met, busy, task set full, ACA active and
    task aborted
  - add pr2serr() extern
  - change sg_get_sense_str() and dStrHexStr(), return
    chars written (returned void previously)
  - add sg_get_sense_descriptors_str() function
  - add sg_get_designation_descriptor_str() function
  - sg_get_desig_type_str()+sg_get_desig_assoc_str()
    and sg_get_desig_code_set_str() added
  - sg_get_opcode_sa_name() break out zoning in/out,
    read attribute and read position service actions
  * sg_cmds_extra: add sg_ll_format_unit2() for FFMT
  * sg_pr2serr.h: new, to shorten fprintf(stderr, ...)
  * sg_io_linux, sg_pt_linux: drop SUGGEST_* decoding
  * sg_unaligned.h: add 48 bit support and gets for
    variable length unsigned integers
- Remove patches merged with upstream:
  * 0001-58-scsi-sg3_symlink.rules-fixup-typo.patch
  * 0002-55-scsi-sg3_id.rules-Always-set-ID_WWN_WITH_EXTENSIO.patch
  * 0003-sg_inq-deal-with-invalid-strings-in-inquiry-data.patch
  * 0004-55-scsi-sg3_id.rules-read-VPD-pages-from-sysfs.patch;
  * 0005-rescan-scsi-bus.sh-Use-safe-temporary-files.patch
  * 0006-rescan-scsi-bus.sh-Correctly-quote-MULTIPATH.patch
  * 0007-rescan-scsi-bus.sh-Fixup-syntax-error.patch
- Added 40-usb-blacklist.rules (bsc#840054)</changelog>
<changelog author="hare@suse.de" date="1462881600">- Update to new upstream release 1.43:
  * sg_senddiag: add --timeout=SEC option
  * sg_sanitize: add --timeout=SEC option
  * sg_format: add --timeout=SEC option
  * sg_decode sense: add --cdb option
  * sg_ses: handle 2 bit EIIOE field in aes dpage
  - expand join handling of SAS connectors and others
  - expand join debug code
  * sg_logs: fix volume statistics lpage when subpage
    is zero (ssc5r02a); decode mount history log parameter
  - decode Requested recovery, TapeAlert response, and
    Service buffer information lpages for tape
  - add '--pdt=DT' option
  * sg_inq: fix potential unbounded loop in --export
  - update version descriptor list to 20160420
  * sg_inq+sg_vpd: update Extended inquiry data vpd
    page (spc5r09)
  - add --force option to bypass checking supported
    vpd pages page and fetch requested page directly
  * sg_reassign+sg_write_same: fix ULONG_MAX problem
  * sg_turs+sg_requests: make both accept '--num=NUM'
    and '--number=NUM' for mutual compatibility
  * sg_zone: fix debug cdb naming
  * sg_opcode: add '--enumerate' and '--pdt=' options
  * sg_raw: add '--enumerate' option
  * sg_lib: add SSC maintenance in/out sa names
  - add read buffer(16) command mode names
  - add sg_decode_transportid_str()
  * sg_lib_data: sync asc/ascq codes with T10 20160425
  * rescan-scsi-bus.sh: harden code
  * clang --analyze static checker clean ups
  * shellcheck cleanup on scripts
  * automake: add AM_PROG_AR to configure.ac
  - upgrade to version 1.15
  * sg_inq+sg_vpd: add --force option to bypass checking
    of supported vpd pages
  * sg_lib_data: add Bind and Unbind to service action out(16)
- Add lunmask.service (bsc#954600, FATE#319786)
- Removed 40-usb-blacklist.rules; superseded by patch to sg_inq
- rescan-scsi-bus.sh: Fixup scanning for non-existing LUNs
  (bsc#958369)</changelog>
<changelog author="hare@suse.de" date="1462968000">- 55-scsi_sg3_id.rules: skip sg_inq for recent kernels (bsc#979436)</changelog>
<changelog author="sparschauer@suse.de" date="1473249600">- using "--lun" now works correctly (bsc#981452), adding patch:
  * add-lunsearch-filter-to-searchexisting.patch</changelog>
<changelog author="hare@suse.de" date="1477569600">- Merge patch with git repository
  * remove add-lunsearch-filter-to-searchexisting.patch
- 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)</changelog>
<changelog author="martin.wilck@suse.com" date="1481889600">- Add udev rules to handle legacy CCISS devices (bsc#1006175)</changelog>
<changelog author="hare@suse.de" date="1501848000">- rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1025176)
- rescan-scsi-bus.sh: Fixup help text for --forcerescan
  (kb#7018624)
- 55-scsi-sg3_utils.rules: Fallback to sg_inq --page when VPD
  cannot be accessed (bsc#1012523)
- Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
- sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943)
- sg_vpd: struct opts_t misaligment (bsc#1050943)
- 55-scsi-sg3_id.rules: remove fallback again (bsc#1012523)
- sg_inq: export all NAA values (bsc#1050767)
- Add initrd rebuild macros (bsc#1009269)</changelog>

</package>
<package pkgid="f6ed11e19eb0399841ca99232c6bf9f99601b81642b29049d32b78792d5408db" name="sg3_utils" arch="x86_64">
    <version epoch="0" ver="1.43" rel="12.1"/>

<changelog author="hare@suse.de" date="1393329600">- Update to inofficial release 1.38b12r556 (bnc#865494)
  * Add --inhex parameter to sg_inq
  * sg_inq: decode ASCII information vpd page
  * sg_inq: allow page=-1 to force std INQUIRY decoding
  * sg_inq: improve unit serial number display
  * sg_vpd: Add LTO and DDS vendor pages
  * sg_persist: add SOP transport ID
  * sg_lib_data: sync asc/ascq code with T10
  * rescan-scsi-bus.sh: check if FC driver exports issue_lip
  * Add man page for rescan-scsi-bus.sh
- Remove sg3_utils-check-if-hba-supports-issue-lip.patch,
  has been merged with upstream</changelog>
<changelog author="hare@suse.de" date="1393588800">- Add 59-scsi-sg3_utils.rules (bnc#865494)</changelog>
<changelog author="hare@suse.de" date="1394193600">- Fixup 59-scsi_sg3_utils.rules to provide compability links
  for ata_id (bnc#866933)</changelog>
<changelog author="hare@suse.de" date="1397131200">- Update to official release 1.38
  * Update documentation
  * Update to latest SPC
  * Minor fixes
  * Add: sg3_utils-1.38.tar.xz
  * Remove: sg3_utils-1.38b7r538.tar.xz
  * Remove: sg3_utils-1.38r546.patch
  * Remove: sg3_utils-1.38b12r556.patch
- Use 59-scsi-sg3_utils from the rpm
  Remove: 59-scsi-sg3_utils.rules
- Fixup 59-scsi-sg3_utils.rules to not provide symlinks
  on multipath device paths (bnc#872929)
  Add: 0001-59-scsi-sg_utils.rules-skip-symlinks-for-multipath-d.patch</changelog>
<changelog author="hare@suse.de" date="1397217600">- Split off 59-scsi-sg_utils.rules to properly support
  multipathing (bnc#873151)
  Remove:
  0001-59-scsi-sg_utils.rules-skip-symlinks-for-multipath-d.patch
  Add:
  0001-Split-59-scsi-sg_utils.rules-for-multipath-support.patch</changelog>
<changelog author="spargaonkar@suse.com" date="1397563200">- added patch sginfo-inq-fields-strip-blank.patch
  sg3_utils: Strip out trailing info from vendor info products fields in inq
  bnc#863357
- added patches:
  * sginfo-inq-fields-strip-blank.patch</changelog>
<changelog author="hare@suse.de" date="1400155200">- Create compability links for ATA devices (bnc#876344)
  Add:
  0003-sg_inq-compability-links-for-ata_id.patch
- Suppress warnings for sg_inq --export (bnc#876454)
  Add:
  0004-sg_inq-suppress-warning-messages-for-export.patch</changelog>
<changelog author="rmilasan@suse.com" date="1404734400">- Fix missing rule for generating links for partitions also (bnc#883032)
  Add:
  0005-sg3_utils-fix-missing-rule-for-scsi_serial-partitions.patch</changelog>
<changelog author="hare@suse.de" date="1409745600">- Fixup formatting of invalid VPD pages (bnc#884779)
  Add: 0006-Fixup-formatting-of-invalid-VPD-page-0x83.patch
- sg_inq: Do not export long identifiers (bnc#884779)
  Add: 0007-sg_inq-Do-not-export-long-identifiers.patch</changelog>
<changelog author="hare@suse.de" date="1440504000">- Update to sg3_utils-1.41 (FATE#318723)
  - New utilities sg_rep_zones, sg_reset_wp, sg_zone, sg_write_verify,
    sg_ses_microcode, sg_sat_read_gplog
  - Bugfixes to existing utilities
- Remove patches merged with upstream:
  * Remove: 0007-sg_inq-Do-not-export-long-identifiers.patch
  * Remove: 0006-Fixup-formatting-of-invalid-VPD-page-0x83.patch
  * Remove: 0005-sg3_utils-fix-missing-rule-for-scsi_serial-partitions.patch
  * Remove: 0004-sg_inq-suppress-warning-messages-for-export.patch
  * Remove: 0003-sg_inq-compability-links-for-ata_id.patch
  * Remove: sginfo-inq-fields-strip-blank.patch
  * Remove: 0001-Split-59-scsi-sg_utils.rules-for-multipath-support.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1444392000">- Fix udev rule (bsc#949315)
  * Add: remove-stray-comma-in-udev-rule.patch</changelog>
<changelog author="jthumshirn@suse.com" date="1444651200">- Correct fix of udev rule (bsc#949315)
  * Refresh: remove-stray-comma-in-udev-rule.patch</changelog>
<changelog author="hare@suse.de" date="1448539200">- Rename patch remove-stray-comma-in-udev-rule.patch -&gt;
  0001-58-scsi-sg3_symlink.rules-fixup-typo.patch
- 55-scsi-sg3_id.rules: Always set ID_WWN_WITH_EXTENSION (bsc#949796)
  * Add 0002-55-scsi-sg3_id.rules-Always-set-ID_WWN_WITH_EXTENSIO.patch
- sg_inq: deal with invalid strings in inquiry data (bsc#956815)
  * Add: 0003-sg_inq-deal-with-invalid-strings-in-inquiry-data.patch
- 55-scsi-sg3_id.rules: read VPD pages from sysfs
  * Add: 0004-55-scsi-sg3_id.rules-read-VPD-pages-from-sysfs.patch
- rescan-scsi-bus.sh: Use safe temporary files (bsc#955856)
  * Add 0005-rescan-scsi-bus.sh-Use-safe-temporary-files.patch
- rescan-scsi-bus.sh: Correctly quote $MULTIPATH (bsc#955222)
  * Add 0006-rescan-scsi-bus.sh-Correctly-quote-MULTIPATH.patch
- rescan-scsi-bus.sh: Fixup syntax error
  * Add 0007-rescan-scsi-bus.sh-Fixup-syntax-error.patch</changelog>
<changelog author="hare@suse.de" date="1455796800">- Update to new upstream release 1.42:
  * sg_timestamp: new, to report or set timestamp
  * sg_read_attr: new, supported by tape drives
  * sg_stpg: fix truncation of target port field
  * sg_inq: cope with unicode strings, udev fixes
  - update version descriptor list to 20160125
  - '--export': new entries for UUID descriptor
  * sg_ses: add more field acronyms (ses3r11)
  8 sg_logs: add Utilization lpage (sbc4r07)
  - add Background operation lpage
  - add Pending defects lpage
  - add LPS misalignment lpage (sbc4r10)
  - document '--All' ('-A') option
  - rework lto tape vendor lpages
  * sg_vpd: add Block limits extension VPD page
  - add Device constituents VPD page
  - add LB Protection VPD page (ssc 15-296r1)
  - LB provisioning VPD page: expand LBPRZ, add
    Minimum and Threshold percentage fields
  - rework lto tape vendor VPD pages
  * sg_inq+sg_vpd+sg_xcopy: add support for locally
    assigned UUIDs in VPD page 0x83 (15-267r2)
  * sg_sanitize: add --znr option (sbc4r07)
  * sg_rep_zones: add --partial option (zbc-r04)
  * sg_format: add ffmt option (sbc4r10)
  - add support for FORMAT MEDIUM (for tape)
  * sg_raw: document length relationships
  * rescan-scsi-bus.sh: updates from Suse
  * sg_lib_data: sync asc/ascq codes with T10 20151126
  * sg_lib: add 'sense' categories for SCSI statuses:
    condition met, busy, task set full, ACA active and
    task aborted
  - add pr2serr() extern
  - change sg_get_sense_str() and dStrHexStr(), return
    chars written (returned void previously)
  - add sg_get_sense_descriptors_str() function
  - add sg_get_designation_descriptor_str() function
  - sg_get_desig_type_str()+sg_get_desig_assoc_str()
    and sg_get_desig_code_set_str() added
  - sg_get_opcode_sa_name() break out zoning in/out,
    read attribute and read position service actions
  * sg_cmds_extra: add sg_ll_format_unit2() for FFMT
  * sg_pr2serr.h: new, to shorten fprintf(stderr, ...)
  * sg_io_linux, sg_pt_linux: drop SUGGEST_* decoding
  * sg_unaligned.h: add 48 bit support and gets for
    variable length unsigned integers
- Remove patches merged with upstream:
  * 0001-58-scsi-sg3_symlink.rules-fixup-typo.patch
  * 0002-55-scsi-sg3_id.rules-Always-set-ID_WWN_WITH_EXTENSIO.patch
  * 0003-sg_inq-deal-with-invalid-strings-in-inquiry-data.patch
  * 0004-55-scsi-sg3_id.rules-read-VPD-pages-from-sysfs.patch;
  * 0005-rescan-scsi-bus.sh-Use-safe-temporary-files.patch
  * 0006-rescan-scsi-bus.sh-Correctly-quote-MULTIPATH.patch
  * 0007-rescan-scsi-bus.sh-Fixup-syntax-error.patch
- Added 40-usb-blacklist.rules (bsc#840054)</changelog>
<changelog author="hare@suse.de" date="1462881600">- Update to new upstream release 1.43:
  * sg_senddiag: add --timeout=SEC option
  * sg_sanitize: add --timeout=SEC option
  * sg_format: add --timeout=SEC option
  * sg_decode sense: add --cdb option
  * sg_ses: handle 2 bit EIIOE field in aes dpage
  - expand join handling of SAS connectors and others
  - expand join debug code
  * sg_logs: fix volume statistics lpage when subpage
    is zero (ssc5r02a); decode mount history log parameter
  - decode Requested recovery, TapeAlert response, and
    Service buffer information lpages for tape
  - add '--pdt=DT' option
  * sg_inq: fix potential unbounded loop in --export
  - update version descriptor list to 20160420
  * sg_inq+sg_vpd: update Extended inquiry data vpd
    page (spc5r09)
  - add --force option to bypass checking supported
    vpd pages page and fetch requested page directly
  * sg_reassign+sg_write_same: fix ULONG_MAX problem
  * sg_turs+sg_requests: make both accept '--num=NUM'
    and '--number=NUM' for mutual compatibility
  * sg_zone: fix debug cdb naming
  * sg_opcode: add '--enumerate' and '--pdt=' options
  * sg_raw: add '--enumerate' option
  * sg_lib: add SSC maintenance in/out sa names
  - add read buffer(16) command mode names
  - add sg_decode_transportid_str()
  * sg_lib_data: sync asc/ascq codes with T10 20160425
  * rescan-scsi-bus.sh: harden code
  * clang --analyze static checker clean ups
  * shellcheck cleanup on scripts
  * automake: add AM_PROG_AR to configure.ac
  - upgrade to version 1.15
  * sg_inq+sg_vpd: add --force option to bypass checking
    of supported vpd pages
  * sg_lib_data: add Bind and Unbind to service action out(16)
- Add lunmask.service (bsc#954600, FATE#319786)
- Removed 40-usb-blacklist.rules; superseded by patch to sg_inq
- rescan-scsi-bus.sh: Fixup scanning for non-existing LUNs
  (bsc#958369)</changelog>
<changelog author="hare@suse.de" date="1462968000">- 55-scsi_sg3_id.rules: skip sg_inq for recent kernels (bsc#979436)</changelog>
<changelog author="sparschauer@suse.de" date="1473249600">- using "--lun" now works correctly (bsc#981452), adding patch:
  * add-lunsearch-filter-to-searchexisting.patch</changelog>
<changelog author="hare@suse.de" date="1477569600">- Merge patch with git repository
  * remove add-lunsearch-filter-to-searchexisting.patch
- 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)</changelog>
<changelog author="martin.wilck@suse.com" date="1481889600">- Add udev rules to handle legacy CCISS devices (bsc#1006175)</changelog>
<changelog author="hare@suse.de" date="1501848000">- rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1025176)
- rescan-scsi-bus.sh: Fixup help text for --forcerescan
  (kb#7018624)
- 55-scsi-sg3_utils.rules: Fallback to sg_inq --page when VPD
  cannot be accessed (bsc#1012523)
- Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
- sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943)
- sg_vpd: struct opts_t misaligment (bsc#1050943)
- 55-scsi-sg3_id.rules: remove fallback again (bsc#1012523)
- sg_inq: export all NAA values (bsc#1050767)
- Add initrd rebuild macros (bsc#1009269)</changelog>

</package>
<package pkgid="38f9a9820d68a2adc149362463f4c83b6e5f5a841a9c84b5d228125a92558034" name="shadow" arch="src">
    <version epoch="0" ver="4.2.1" rel="10.1"/>

<changelog author="kukuk@suse.de" date="1348747200">- Implement CHARACTER_CLASS support
  (chkname-regex.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808000">- Fix default group value in /etc/default/useradd
  (useradd-default.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808001">- Fix getdef default variables (getdef-new-defs.diff)</changelog>
<changelog author="kukuk@suse.de" date="1360065600">- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]</changelog>
<changelog author="kukuk@suse.de" date="1379419200">- Add some fixes from Fedora:
  - shadow-4.1.5.1-backup-mode.patch: open backup file with correct
    permissions.
  - shadow-4.1.5.1-logmsg.patch: fix error message
  - shadow-4.1.5.1-errmsg.patch: print error reason
  - shadow-4.1.5.1-manfix.patch: fix manual page</changelog>
<changelog author="kukuk@suse.de" date="1384257600">- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)</changelog>
<changelog author="werner@suse.de" date="1385121600">- Stop any systemd user manager instance in case a user entry will
  be deleted (bnc#849870).  Nevertheless a running process requires
  the option --force for the userdel command.</changelog>
<changelog author="tbehrens@suse.com" date="1396267200">- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
  of the path</changelog>
<changelog author="jkeil@suse.de" date="1436961600">- Add systemd unit files to continuously check password &amp; groupfile integrity
  * Idea from Arch Linux
  * pending request to systemd-presets-branding-openSUSE to enable by default</changelog>
<changelog author="fvogt@suse.com" date="1452859200">- Moved call from %verifyscript into %post:
  * Caused call to %service_add_post shadow.service shadow.timer
    during rpm -qV shadow</changelog>
<changelog author="christian.brauner@mailbox.org" date="1463659200">- Update to shadow-4.2.1:
  - add support for subuids/subgids via newuidmap/newgidmap
- Rename chkname-regex.diff to chkname-regex.patch
- Rename encryption_method_nis.diff to encryption_method_nis.patch
- Rename getdef-new-defs.diff to getdef-new-defs.patch
- Rename shadow-login_defs.diff to shadow-login_defs.patch
- Rename userdel-scripts.diff to userdel-script.patch
- Rename useradd-script.diff to useradd-script.patch
- Rename useradd-default.diff to useradd-default.patch
- Rename useradd-mkdirs.diff to useradd-mkdirs.patch
- Add fixes from Red Hat/Fedora:
  - shadow-4.1.5.1-audit-owner.patch.patch:
  - log owner changes for home directory
  - shadow-4.1.5.1-userdel-helpfix.patch.patch:
  - give a hint about what happens when you force the removal of a user
  - shadow-4.2.1-defs-chroot.patch.patch:
  - initialize uid_t uid_min and uid_t uid_max not before we need them
  - shadow-4.2.1-merge-group.patch.patch:
  - simplify by using a single call to snprintf()
- Add upstream fix
  - Fix-user-busy-errors-at-userdel.patch:
  - call sub_uid_close()</changelog>
<changelog author="mvetter@suse.com" date="1464609600">- shadow 4.2.1 requested by fate#320422
- bsc#979069: Dont include shadow-4.1.5.1-bug935203-manpage.patch
- Dont set SUID bit yet. Once bsc#979282 is through, which will adapt the permissions package, we can enable the SUID bits.
  Remove the files used to circumvent the check.
- Remove:
  * shadow-rpmlintrc
  * shadow-subids
  * shadow-subids.easy
  * shadow-subids.secure
  * shadow-subids.paranoid</changelog>
<changelog author="mvetter@suse.com" date="1464696000">- Add package dependency for aaa_base, fixing bnc#899409
  (was done by tbehrens@suse.com but not submitted to Factory)</changelog>
<changelog author="mvetter@suse.com" date="1473854400">- boo#994486: Include shadow.5 manpage
  Previously this was provided by man-pages package in
  the man-pages-addons tarball which got removed later on.</changelog>
<changelog author="mvetter@suse.com" date="1476878400">- bsc#1002975: Use permissions according to permissions package
  and dont try to manipulate them in %files section.</changelog>
<changelog author="adam.majer@suse.de" date="1480507200">- bsc#1003978: shadow-4.1.5.1-id-alloc.patch
  useradd and groupadd performance fix when using SSSD
  Previously the entire possible UID/GID is iterated to find
  an available UID/GID. This can take long time over a network
  device. Instead, find available UID/GID locally, and then check
  only those values over network.</changelog>
<changelog author="adam.majer@suse.de" date="1491480000">- bsc#1031643: shadow-4.1.5.1-pam_group.patch
  dynamically added users via pam_group are not listed in groups
  databases but are still valid.</changelog>
<changelog author="mvetter@suse.com" date="1504180800">- bsc#980486: shadow-4.2.1-reset-tallylog.patch
  Reset user in /var/log/tallylog because we use
  pam_tally2 and not faillog anymore.</changelog>
<changelog author="mvetter@suse.com" date="1504267200">- bsc#1023895
  * man page contained invalid options because they depend
    on compile flags and we shipped pre built ones.
    New BuildRequires: docbook-xsl-stylesheets docbook_4 xml2po
    xsltproc
  * shadow-4.2.1-unknown-settings-if-pam.patch
    Additionally we need this patch, which is included from 4.3.0
    onward, so the tools don't complain about these options.</changelog>
<changelog author="mvetter@suse.com" date="1504872000">- bsc#1052261: shadow-4.2.1-CVE-2017-12424.patch
  Fix buffer overflow if NULL line is present in db</changelog>

</package>
<package pkgid="11ed0e625eafa7a59c7c275cbc4b7a2b30b8cdacc8406acd0c9cda1c7d4f666d" name="shadow" arch="x86_64">
    <version epoch="0" ver="4.2.1" rel="10.1"/>

<changelog author="kukuk@suse.de" date="1348747200">- Implement CHARACTER_CLASS support
  (chkname-regex.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808000">- Fix default group value in /etc/default/useradd
  (useradd-default.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808001">- Fix getdef default variables (getdef-new-defs.diff)</changelog>
<changelog author="kukuk@suse.de" date="1360065600">- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]</changelog>
<changelog author="kukuk@suse.de" date="1379419200">- Add some fixes from Fedora:
  - shadow-4.1.5.1-backup-mode.patch: open backup file with correct
    permissions.
  - shadow-4.1.5.1-logmsg.patch: fix error message
  - shadow-4.1.5.1-errmsg.patch: print error reason
  - shadow-4.1.5.1-manfix.patch: fix manual page</changelog>
<changelog author="kukuk@suse.de" date="1384257600">- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)</changelog>
<changelog author="werner@suse.de" date="1385121600">- Stop any systemd user manager instance in case a user entry will
  be deleted (bnc#849870).  Nevertheless a running process requires
  the option --force for the userdel command.</changelog>
<changelog author="tbehrens@suse.com" date="1396267200">- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
  of the path</changelog>
<changelog author="jkeil@suse.de" date="1436961600">- Add systemd unit files to continuously check password &amp; groupfile integrity
  * Idea from Arch Linux
  * pending request to systemd-presets-branding-openSUSE to enable by default</changelog>
<changelog author="fvogt@suse.com" date="1452859200">- Moved call from %verifyscript into %post:
  * Caused call to %service_add_post shadow.service shadow.timer
    during rpm -qV shadow</changelog>
<changelog author="christian.brauner@mailbox.org" date="1463659200">- Update to shadow-4.2.1:
  - add support for subuids/subgids via newuidmap/newgidmap
- Rename chkname-regex.diff to chkname-regex.patch
- Rename encryption_method_nis.diff to encryption_method_nis.patch
- Rename getdef-new-defs.diff to getdef-new-defs.patch
- Rename shadow-login_defs.diff to shadow-login_defs.patch
- Rename userdel-scripts.diff to userdel-script.patch
- Rename useradd-script.diff to useradd-script.patch
- Rename useradd-default.diff to useradd-default.patch
- Rename useradd-mkdirs.diff to useradd-mkdirs.patch
- Add fixes from Red Hat/Fedora:
  - shadow-4.1.5.1-audit-owner.patch.patch:
  - log owner changes for home directory
  - shadow-4.1.5.1-userdel-helpfix.patch.patch:
  - give a hint about what happens when you force the removal of a user
  - shadow-4.2.1-defs-chroot.patch.patch:
  - initialize uid_t uid_min and uid_t uid_max not before we need them
  - shadow-4.2.1-merge-group.patch.patch:
  - simplify by using a single call to snprintf()
- Add upstream fix
  - Fix-user-busy-errors-at-userdel.patch:
  - call sub_uid_close()</changelog>
<changelog author="mvetter@suse.com" date="1464609600">- shadow 4.2.1 requested by fate#320422
- bsc#979069: Dont include shadow-4.1.5.1-bug935203-manpage.patch
- Dont set SUID bit yet. Once bsc#979282 is through, which will adapt the permissions package, we can enable the SUID bits.
  Remove the files used to circumvent the check.
- Remove:
  * shadow-rpmlintrc
  * shadow-subids
  * shadow-subids.easy
  * shadow-subids.secure
  * shadow-subids.paranoid</changelog>
<changelog author="mvetter@suse.com" date="1464696000">- Add package dependency for aaa_base, fixing bnc#899409
  (was done by tbehrens@suse.com but not submitted to Factory)</changelog>
<changelog author="mvetter@suse.com" date="1473854400">- boo#994486: Include shadow.5 manpage
  Previously this was provided by man-pages package in
  the man-pages-addons tarball which got removed later on.</changelog>
<changelog author="mvetter@suse.com" date="1476878400">- bsc#1002975: Use permissions according to permissions package
  and dont try to manipulate them in %files section.</changelog>
<changelog author="adam.majer@suse.de" date="1480507200">- bsc#1003978: shadow-4.1.5.1-id-alloc.patch
  useradd and groupadd performance fix when using SSSD
  Previously the entire possible UID/GID is iterated to find
  an available UID/GID. This can take long time over a network
  device. Instead, find available UID/GID locally, and then check
  only those values over network.</changelog>
<changelog author="adam.majer@suse.de" date="1491480000">- bsc#1031643: shadow-4.1.5.1-pam_group.patch
  dynamically added users via pam_group are not listed in groups
  databases but are still valid.</changelog>
<changelog author="mvetter@suse.com" date="1504180800">- bsc#980486: shadow-4.2.1-reset-tallylog.patch
  Reset user in /var/log/tallylog because we use
  pam_tally2 and not faillog anymore.</changelog>
<changelog author="mvetter@suse.com" date="1504267200">- bsc#1023895
  * man page contained invalid options because they depend
    on compile flags and we shipped pre built ones.
    New BuildRequires: docbook-xsl-stylesheets docbook_4 xml2po
    xsltproc
  * shadow-4.2.1-unknown-settings-if-pam.patch
    Additionally we need this patch, which is included from 4.3.0
    onward, so the tools don't complain about these options.</changelog>
<changelog author="mvetter@suse.com" date="1504872000">- bsc#1052261: shadow-4.2.1-CVE-2017-12424.patch
  Fix buffer overflow if NULL line is present in db</changelog>

</package>
<package pkgid="30ad3c47294a983289accc79efc1a479d5c5c723b4db5936497b8387a8eff045" name="shadowsocks-libev" arch="src">
    <version epoch="0" ver="2.5.6" rel="3.1"/>

<changelog author="i@marguerite.su" date="1399032000">- initial version 1.4.5
  * Fix the compatibility issue of udprelay.
  * Enhance asyncns to reduce the latency.
- add shadowsocks-libev-config.json
  * random ports, random passwords.
  * strongest encryption method
- add systemd services</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 1.4.6
  * minor bugfix release</changelog>
<changelog author="i@marguerite.su" date="1414238400">- update version 1.4.8
  * Fix a bug of tcp fast open.
- changes in 1.4.7
  * Add a new encryptor rc4-md5</changelog>
<changelog author="i@marguerite.su" date="1420286400">- update version 1.6.2
  * minor bugfix
- changes in 1.5.0~1.6.1
  * Support to build static or shared library.
  * Refine the cache size of UDPRelay.
  * Fix a bug introduced by fast open.
  * Handle signals properly.
  * Fix log on Win32.
  * Add salsa20 and chacha20 support</changelog>
<changelog author="i@marguerite.su" date="1421496000">- update version 2.0.8
  * minor bug fixes
- changes in 1.6.3~2.0.7
  * refine documents
  * implement a real asyncchronous DNS resolver
  * fix some issues with MinGW
  * refine ss-local, ss-tunnel, and ss-redir
  * fix an issue in redir mode</changelog>
<changelog author="i@marguerite.su" date="1423828800">- update version 2.1.4
  * add acl support to server mode</changelog>
<changelog author="i@marguerite.su" date="1426420800">- systemd service:
  * restart on failure instead of abort
  * enable tcp fast open</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 2.2.1
  * fix an issue of UDF relay.
- changes in 2.2.0
  * add TPROXY support for redir mode.</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 2.2.2
  * fix the timer of UDP relay</changelog>
<changelog author="i@marguerite.su" date="1440244800">- update version 2.3.0
  * add manager mode to support multi-user and traffic stat
- changes in 2.2.3
  * Fix some issues for multi-destination UDP relay</changelog>
<changelog author="hillwood@linuxfans.org" date="1444564800">- Update to 2.4.0
  * Refine the one-time authentication.
- Changes of 2.3.3 and 2.3.2
  * Minor bug fixes.
- Changes of 2.3.1
  * Fix an issue of connection cache of UDP relay.
  * Add support of one time authentication for header verification.</changelog>
<changelog author="hillwood@opensuse.org" date="1480680000">- update to 2.4.8
  * Fix a security bug.
  * Refine memory management.
  * Minor bug fixes.
  * Fix a potential memory leak.
  * Fix some compiler related issues.
  * Fix build issues on OpenWRT.
  * Reduce the latency of redir mode.
  * Update manual pages by @kimw.
  * Enhance UDP relay mode by @wongsyrone.
  * Add ss-nat, a helper script to set up NAT rules for ss-redir,
    from @aa65535.
  * Fix several issues for debian package by @rogers0.
  * Update manual pages with asciidoc by @anonymous-contributor.
  * Fix issues of bind_address option by @tim-le.</changelog>
<changelog author="hillwood@opensuse.org" date="1480680001">- Update to 2.5.6
  * Add outbound ACL for server by @kimw.
  * Refine log format by @kimw.
  * Refine attack detection.
  * Fix a bug of auto blocking mechanism.
  * Fix TCP Fast Open on macOS.
  * Fix a bug of UDP relay mode of ss-local.
  * Refine ACL feature with hostname support.
  * Add HTTP/SNI parser for ss-local/ss-redir.
  * Fix several bugs of the command line interface.
  * Add aes-128/192/256-ctr ciphers.
  * Add option MTU for UDP relay.
  * Add MultiPath TCP support.
- Fix spec for Fedora.</changelog>
<changelog author="hillwood@opensuse.org" date="1480939200">- Add system scripts for ss-redir, ss-tunnel, ss-manager and ss-nat.
- Split doc package.</changelog>
<changelog author="hillwood@opensuse.org" date="1480939201">- Fix %pre, %post, %preun and %postun.</changelog>
<changelog author="jengelh@inai.de" date="1481025600">- Use a single call to %service_*</changelog>
<changelog author="hillwood@opensuse.org" date="1509451200">- Add fix-Command-Execution-in-ss-manager.patch
  * Fix boo#1065619 and CVE-2017-15924</changelog>

</package>
<package pkgid="9f41882ed1ff84fee1ca74dee1c820fb4f8ab9eaceed902ee1dda72947c7df1e" name="shadowsocks-libev" arch="x86_64">
    <version epoch="0" ver="2.5.6" rel="3.1"/>

<changelog author="i@marguerite.su" date="1399032000">- initial version 1.4.5
  * Fix the compatibility issue of udprelay.
  * Enhance asyncns to reduce the latency.
- add shadowsocks-libev-config.json
  * random ports, random passwords.
  * strongest encryption method
- add systemd services</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 1.4.6
  * minor bugfix release</changelog>
<changelog author="i@marguerite.su" date="1414238400">- update version 1.4.8
  * Fix a bug of tcp fast open.
- changes in 1.4.7
  * Add a new encryptor rc4-md5</changelog>
<changelog author="i@marguerite.su" date="1420286400">- update version 1.6.2
  * minor bugfix
- changes in 1.5.0~1.6.1
  * Support to build static or shared library.
  * Refine the cache size of UDPRelay.
  * Fix a bug introduced by fast open.
  * Handle signals properly.
  * Fix log on Win32.
  * Add salsa20 and chacha20 support</changelog>
<changelog author="i@marguerite.su" date="1421496000">- update version 2.0.8
  * minor bug fixes
- changes in 1.6.3~2.0.7
  * refine documents
  * implement a real asyncchronous DNS resolver
  * fix some issues with MinGW
  * refine ss-local, ss-tunnel, and ss-redir
  * fix an issue in redir mode</changelog>
<changelog author="i@marguerite.su" date="1423828800">- update version 2.1.4
  * add acl support to server mode</changelog>
<changelog author="i@marguerite.su" date="1426420800">- systemd service:
  * restart on failure instead of abort
  * enable tcp fast open</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 2.2.1
  * fix an issue of UDF relay.
- changes in 2.2.0
  * add TPROXY support for redir mode.</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 2.2.2
  * fix the timer of UDP relay</changelog>
<changelog author="i@marguerite.su" date="1440244800">- update version 2.3.0
  * add manager mode to support multi-user and traffic stat
- changes in 2.2.3
  * Fix some issues for multi-destination UDP relay</changelog>
<changelog author="hillwood@linuxfans.org" date="1444564800">- Update to 2.4.0
  * Refine the one-time authentication.
- Changes of 2.3.3 and 2.3.2
  * Minor bug fixes.
- Changes of 2.3.1
  * Fix an issue of connection cache of UDP relay.
  * Add support of one time authentication for header verification.</changelog>
<changelog author="hillwood@opensuse.org" date="1480680000">- update to 2.4.8
  * Fix a security bug.
  * Refine memory management.
  * Minor bug fixes.
  * Fix a potential memory leak.
  * Fix some compiler related issues.
  * Fix build issues on OpenWRT.
  * Reduce the latency of redir mode.
  * Update manual pages by @kimw.
  * Enhance UDP relay mode by @wongsyrone.
  * Add ss-nat, a helper script to set up NAT rules for ss-redir,
    from @aa65535.
  * Fix several issues for debian package by @rogers0.
  * Update manual pages with asciidoc by @anonymous-contributor.
  * Fix issues of bind_address option by @tim-le.</changelog>
<changelog author="hillwood@opensuse.org" date="1480680001">- Update to 2.5.6
  * Add outbound ACL for server by @kimw.
  * Refine log format by @kimw.
  * Refine attack detection.
  * Fix a bug of auto blocking mechanism.
  * Fix TCP Fast Open on macOS.
  * Fix a bug of UDP relay mode of ss-local.
  * Refine ACL feature with hostname support.
  * Add HTTP/SNI parser for ss-local/ss-redir.
  * Fix several bugs of the command line interface.
  * Add aes-128/192/256-ctr ciphers.
  * Add option MTU for UDP relay.
  * Add MultiPath TCP support.
- Fix spec for Fedora.</changelog>
<changelog author="hillwood@opensuse.org" date="1480939200">- Add system scripts for ss-redir, ss-tunnel, ss-manager and ss-nat.
- Split doc package.</changelog>
<changelog author="hillwood@opensuse.org" date="1480939201">- Fix %pre, %post, %preun and %postun.</changelog>
<changelog author="jengelh@inai.de" date="1481025600">- Use a single call to %service_*</changelog>
<changelog author="hillwood@opensuse.org" date="1509451200">- Add fix-Command-Execution-in-ss-manager.patch
  * Fix boo#1065619 and CVE-2017-15924</changelog>

</package>
<package pkgid="c83749cc398aa64a4a4bb5b7033dca44ef4b1301c511bf91876b3b4e265e0317" name="shadowsocks-libev-devel" arch="x86_64">
    <version epoch="0" ver="2.5.6" rel="3.1"/>

<changelog author="i@marguerite.su" date="1399032000">- initial version 1.4.5
  * Fix the compatibility issue of udprelay.
  * Enhance asyncns to reduce the latency.
- add shadowsocks-libev-config.json
  * random ports, random passwords.
  * strongest encryption method
- add systemd services</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 1.4.6
  * minor bugfix release</changelog>
<changelog author="i@marguerite.su" date="1414238400">- update version 1.4.8
  * Fix a bug of tcp fast open.
- changes in 1.4.7
  * Add a new encryptor rc4-md5</changelog>
<changelog author="i@marguerite.su" date="1420286400">- update version 1.6.2
  * minor bugfix
- changes in 1.5.0~1.6.1
  * Support to build static or shared library.
  * Refine the cache size of UDPRelay.
  * Fix a bug introduced by fast open.
  * Handle signals properly.
  * Fix log on Win32.
  * Add salsa20 and chacha20 support</changelog>
<changelog author="i@marguerite.su" date="1421496000">- update version 2.0.8
  * minor bug fixes
- changes in 1.6.3~2.0.7
  * refine documents
  * implement a real asyncchronous DNS resolver
  * fix some issues with MinGW
  * refine ss-local, ss-tunnel, and ss-redir
  * fix an issue in redir mode</changelog>
<changelog author="i@marguerite.su" date="1423828800">- update version 2.1.4
  * add acl support to server mode</changelog>
<changelog author="i@marguerite.su" date="1426420800">- systemd service:
  * restart on failure instead of abort
  * enable tcp fast open</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 2.2.1
  * fix an issue of UDF relay.
- changes in 2.2.0
  * add TPROXY support for redir mode.</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 2.2.2
  * fix the timer of UDP relay</changelog>
<changelog author="i@marguerite.su" date="1440244800">- update version 2.3.0
  * add manager mode to support multi-user and traffic stat
- changes in 2.2.3
  * Fix some issues for multi-destination UDP relay</changelog>
<changelog author="hillwood@linuxfans.org" date="1444564800">- Update to 2.4.0
  * Refine the one-time authentication.
- Changes of 2.3.3 and 2.3.2
  * Minor bug fixes.
- Changes of 2.3.1
  * Fix an issue of connection cache of UDP relay.
  * Add support of one time authentication for header verification.</changelog>
<changelog author="hillwood@opensuse.org" date="1480680000">- update to 2.4.8
  * Fix a security bug.
  * Refine memory management.
  * Minor bug fixes.
  * Fix a potential memory leak.
  * Fix some compiler related issues.
  * Fix build issues on OpenWRT.
  * Reduce the latency of redir mode.
  * Update manual pages by @kimw.
  * Enhance UDP relay mode by @wongsyrone.
  * Add ss-nat, a helper script to set up NAT rules for ss-redir,
    from @aa65535.
  * Fix several issues for debian package by @rogers0.
  * Update manual pages with asciidoc by @anonymous-contributor.
  * Fix issues of bind_address option by @tim-le.</changelog>
<changelog author="hillwood@opensuse.org" date="1480680001">- Update to 2.5.6
  * Add outbound ACL for server by @kimw.
  * Refine log format by @kimw.
  * Refine attack detection.
  * Fix a bug of auto blocking mechanism.
  * Fix TCP Fast Open on macOS.
  * Fix a bug of UDP relay mode of ss-local.
  * Refine ACL feature with hostname support.
  * Add HTTP/SNI parser for ss-local/ss-redir.
  * Fix several bugs of the command line interface.
  * Add aes-128/192/256-ctr ciphers.
  * Add option MTU for UDP relay.
  * Add MultiPath TCP support.
- Fix spec for Fedora.</changelog>
<changelog author="hillwood@opensuse.org" date="1480939200">- Add system scripts for ss-redir, ss-tunnel, ss-manager and ss-nat.
- Split doc package.</changelog>
<changelog author="hillwood@opensuse.org" date="1480939201">- Fix %pre, %post, %preun and %postun.</changelog>
<changelog author="jengelh@inai.de" date="1481025600">- Use a single call to %service_*</changelog>
<changelog author="hillwood@opensuse.org" date="1509451200">- Add fix-Command-Execution-in-ss-manager.patch
  * Fix boo#1065619 and CVE-2017-15924</changelog>

</package>
<package pkgid="db1ac2fa9d92c8b9f9909887a6b353505e909f1f2fd04378c951f6477ca6d5d4" name="shadowsocks-libev-doc" arch="noarch">
    <version epoch="0" ver="2.5.6" rel="3.1"/>

<changelog author="i@marguerite.su" date="1399032000">- initial version 1.4.5
  * Fix the compatibility issue of udprelay.
  * Enhance asyncns to reduce the latency.
- add shadowsocks-libev-config.json
  * random ports, random passwords.
  * strongest encryption method
- add systemd services</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 1.4.6
  * minor bugfix release</changelog>
<changelog author="i@marguerite.su" date="1414238400">- update version 1.4.8
  * Fix a bug of tcp fast open.
- changes in 1.4.7
  * Add a new encryptor rc4-md5</changelog>
<changelog author="i@marguerite.su" date="1420286400">- update version 1.6.2
  * minor bugfix
- changes in 1.5.0~1.6.1
  * Support to build static or shared library.
  * Refine the cache size of UDPRelay.
  * Fix a bug introduced by fast open.
  * Handle signals properly.
  * Fix log on Win32.
  * Add salsa20 and chacha20 support</changelog>
<changelog author="i@marguerite.su" date="1421496000">- update version 2.0.8
  * minor bug fixes
- changes in 1.6.3~2.0.7
  * refine documents
  * implement a real asyncchronous DNS resolver
  * fix some issues with MinGW
  * refine ss-local, ss-tunnel, and ss-redir
  * fix an issue in redir mode</changelog>
<changelog author="i@marguerite.su" date="1423828800">- update version 2.1.4
  * add acl support to server mode</changelog>
<changelog author="i@marguerite.su" date="1426420800">- systemd service:
  * restart on failure instead of abort
  * enable tcp fast open</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 2.2.1
  * fix an issue of UDF relay.
- changes in 2.2.0
  * add TPROXY support for redir mode.</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 2.2.2
  * fix the timer of UDP relay</changelog>
<changelog author="i@marguerite.su" date="1440244800">- update version 2.3.0
  * add manager mode to support multi-user and traffic stat
- changes in 2.2.3
  * Fix some issues for multi-destination UDP relay</changelog>
<changelog author="hillwood@linuxfans.org" date="1444564800">- Update to 2.4.0
  * Refine the one-time authentication.
- Changes of 2.3.3 and 2.3.2
  * Minor bug fixes.
- Changes of 2.3.1
  * Fix an issue of connection cache of UDP relay.
  * Add support of one time authentication for header verification.</changelog>
<changelog author="hillwood@opensuse.org" date="1480680000">- update to 2.4.8
  * Fix a security bug.
  * Refine memory management.
  * Minor bug fixes.
  * Fix a potential memory leak.
  * Fix some compiler related issues.
  * Fix build issues on OpenWRT.
  * Reduce the latency of redir mode.
  * Update manual pages by @kimw.
  * Enhance UDP relay mode by @wongsyrone.
  * Add ss-nat, a helper script to set up NAT rules for ss-redir,
    from @aa65535.
  * Fix several issues for debian package by @rogers0.
  * Update manual pages with asciidoc by @anonymous-contributor.
  * Fix issues of bind_address option by @tim-le.</changelog>
<changelog author="hillwood@opensuse.org" date="1480680001">- Update to 2.5.6
  * Add outbound ACL for server by @kimw.
  * Refine log format by @kimw.
  * Refine attack detection.
  * Fix a bug of auto blocking mechanism.
  * Fix TCP Fast Open on macOS.
  * Fix a bug of UDP relay mode of ss-local.
  * Refine ACL feature with hostname support.
  * Add HTTP/SNI parser for ss-local/ss-redir.
  * Fix several bugs of the command line interface.
  * Add aes-128/192/256-ctr ciphers.
  * Add option MTU for UDP relay.
  * Add MultiPath TCP support.
- Fix spec for Fedora.</changelog>
<changelog author="hillwood@opensuse.org" date="1480939200">- Add system scripts for ss-redir, ss-tunnel, ss-manager and ss-nat.
- Split doc package.</changelog>
<changelog author="hillwood@opensuse.org" date="1480939201">- Fix %pre, %post, %preun and %postun.</changelog>
<changelog author="jengelh@inai.de" date="1481025600">- Use a single call to %service_*</changelog>
<changelog author="hillwood@opensuse.org" date="1509451200">- Add fix-Command-Execution-in-ss-manager.patch
  * Fix boo#1065619 and CVE-2017-15924</changelog>

</package>
<package pkgid="833838447d0b1be3334940f23989c16c3ae42076844341a447eff36f62ce4a8b" name="shibboleth-sp" arch="src">
    <version epoch="0" ver="2.5.5" rel="9.2"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add shibboleth-sp-2.5.5-doxygen_timestamp.patch to remove
  timestamps in a documentation generated by Doxygen and avoid
  RPMLINT warnings (file-contains-date-and-time).
- add the macro %{realname} and change a name to "shibboleth-sp"
- fix Source address</changelog>
<changelog author="kstreitova@suse.com" date="1438257600">- fix some warnings
- add service as a separate file
- remove command line switches for conditional package builds
- remove *.dist files and unused *.config files
- remove unused conditionals
- move libraries to the subpackages</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="meissner@suse.com" date="1481025600">- buildrequire libmemcache-devel to ship the memcache-store plugin
  (fate#320800, bsc#1014173)</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add shibboleth-sp-2.5.5-CVE-2017-16852.patch to fix a critical
  security issue when shibsp/metadata/DynamicMetadataProvider.cpp
  in the Dynamic MetadataProvider plugin in Shibboleth Service
  Provider before 2.6.1 fails to properly configure itself with the
  MetadataFilter plugins and does not perform critical security
  checks [bsc#1068689] [CVE-2017-16852]</changelog>

</package>
<package pkgid="7b0330fadafcf7ab468c8d8542ab9dd8af2e46467991e45aeb2f9733c2f25eaa" name="shibboleth-sp" arch="x86_64">
    <version epoch="0" ver="2.5.5" rel="9.2"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add shibboleth-sp-2.5.5-doxygen_timestamp.patch to remove
  timestamps in a documentation generated by Doxygen and avoid
  RPMLINT warnings (file-contains-date-and-time).
- add the macro %{realname} and change a name to "shibboleth-sp"
- fix Source address</changelog>
<changelog author="kstreitova@suse.com" date="1438257600">- fix some warnings
- add service as a separate file
- remove command line switches for conditional package builds
- remove *.dist files and unused *.config files
- remove unused conditionals
- move libraries to the subpackages</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="meissner@suse.com" date="1481025600">- buildrequire libmemcache-devel to ship the memcache-store plugin
  (fate#320800, bsc#1014173)</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add shibboleth-sp-2.5.5-CVE-2017-16852.patch to fix a critical
  security issue when shibsp/metadata/DynamicMetadataProvider.cpp
  in the Dynamic MetadataProvider plugin in Shibboleth Service
  Provider before 2.6.1 fails to properly configure itself with the
  MetadataFilter plugins and does not perform critical security
  checks [bsc#1068689] [CVE-2017-16852]</changelog>

</package>
<package pkgid="e1952640a783eb60fd9a765cdfdba401453dd3d7dd378610fdad9fbe455a8756" name="shibboleth-sp-devel" arch="x86_64">
    <version epoch="0" ver="2.5.5" rel="9.2"/>

<changelog author="kstreitova@suse.com" date="1437739200">- initial revision</changelog>
<changelog author="kstreitova@suse.com" date="1437998400">- use spec-cleaner
- package cleaning
- add shibboleth-sp-2.5.5-doxygen_timestamp.patch to remove
  timestamps in a documentation generated by Doxygen and avoid
  RPMLINT warnings (file-contains-date-and-time).
- add the macro %{realname} and change a name to "shibboleth-sp"
- fix Source address</changelog>
<changelog author="kstreitova@suse.com" date="1438257600">- fix some warnings
- add service as a separate file
- remove command line switches for conditional package builds
- remove *.dist files and unused *.config files
- remove unused conditionals
- move libraries to the subpackages</changelog>
<changelog author="mpluskal@suse.com" date="1438776000">- Add gpg signature</changelog>
<changelog author="kstreitova@suse.com" date="1441713600">- sync Apache:Shibboleth packages with SLE12SP1 [bnc#944796]</changelog>
<changelog author="meissner@suse.com" date="1481025600">- buildrequire libmemcache-devel to ship the memcache-store plugin
  (fate#320800, bsc#1014173)</changelog>
<changelog author="kstreitova@suse.com" date="1511265600">- add shibboleth-sp-2.5.5-CVE-2017-16852.patch to fix a critical
  security issue when shibsp/metadata/DynamicMetadataProvider.cpp
  in the Dynamic MetadataProvider plugin in Shibboleth Service
  Provider before 2.6.1 fails to properly configure itself with the
  MetadataFilter plugins and does not perform critical security
  checks [bsc#1068689] [CVE-2017-16852]</changelog>

</package>
<package pkgid="3fae83168124d8ae4d03f2cdb60778a5075ea4f4e225d4e8cf9768bc52c7c45d" name="shorewall" arch="noarch">
    <version epoch="0" ver="5.1.5.2" rel="3.1"/>

<changelog author="toganm@opensuse.org" date="1423310400">- Update to version 4.6.6.2 For more details see changelog.txt and
  releasenotes.txt
  * The compiler failed to parse the construct +&lt;ipset&gt;[n] where n is
    an integer (e.g., +bad[2]).
  * Orion Paplawski has provided a patch that adds 'ko.xz' to the
    default MODULE_SUFFIX setting. This change deals with recent
    Fedora releases where the module names now end with ".ko.xz".
    In addition to Orion's patch, the sample configurations have
    been modified to specify MODULE_SUFFIX="ko ko.xz".</changelog>
<changelog author="toganm@opensuse.org" date="1426248000">- Update to version 4.6.7 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * The 'tunnels' file now supports 'tinc' tunnels.
  * Previously, the SAME action in the mangle file had a fixed
    timeout of 300 seconds (5 minutes). That action now allows
    specification of a different timeout.
  * It is now possible to add or delete addresses from an ipset
    with entries in the mangle file. The ADD and DEL actions have
    the same behavior in the mangle file as they do in the rules
    file.
- Added systemd_version macro in anticipation of detecting the
  correct service file when systemd version is &gt;= 214</changelog>
<changelog author="toganm@opensuse.org" date="1428148800">- Update to version 4.6.8 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * Previously, when the -n option was specified and NetworkManager
    was installed on the target system, the Shorewall-init installer
    would still create
    ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless
    of the setting of $CONFDIR. That has been corrected such that
    the directory
    ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall
    is created instead.
  * Previously, handling of the IPTABLES and IP6TABLES actions in
    the conntrack file was broken. nfw provided a fix on IRC.
  * The Shorewall-core and Shorewall6 installers would previously
    report incorrectly that the product release was not installed.
    Matt Darfeuille provided fixes.</changelog>
<changelog author="toganm@opensuse.org" date="1429012800">- Update to version 4.6.8.1 For more details see changnlog.txt and
  releasenotes.txt
  * Previously, when servicd was installed and there were one or
    more required interfaces, the firewall would fail to start at
    boot.This has been corrected by Tuomo Soini.
  * Some startup logic in lib.cli has been deleted. A bug prevented
    the code from working as intended, so there is no loss of
    functionality resulting from deletion of the code.</changelog>
<changelog author="toganm@opensuse.org" date="1431000000">- Update to version 4.6.9 For more details see changelog.txt and
  releasenotes.txt
  * This release contains defect repair from Shorewall 4.6.8.1 and
    earlier releases.
  * The means for preventing loading of helper modules has been
    clarified in the documentation.
  * The SetEvent and ResetEvent actions previously set/reset the
    event even if the packet did not match the other specified
    columns. This has been corrected.
  * Previously, the 'show capabilities' command was ignoring the
    HELPERS setting. This resulted in unwanted modules being
    autoloaded  and, when the -f option was given, an incorrect
    capabilities file was generated.
  * Previously, when 'wait' was specified for an interface, the
    generated script erroneously checked for required interfaces on
    all commands rather than just start, restart and restore.</changelog>
<changelog author="toganm@opensuse.org" date="1434542400">- Update to version 4.6.10.1 For more details see changelog.txt and
  releasenotes.txt
  * Indentation is now consistent in lib.core (Tuomo Soini).
  * The first problem corrected in 4.6.10 below was incomplete. It
    is now complete (Tuomo Soini).
  * Similarly, the second fix was also incomplete and is now
    completed  (Tuomo Soini).</changelog>
<changelog author="toganm@opensuse.org" date="1436875200">- Update to version 4.6.11 For more details see changelog.txt and
  releasenotes.txt
  * Previously, when the -c option was given to the 'compile'
    command, the progress message "Compiling..." was issued before
    it was determined if compilation was necessary.  Now, that message
    is suppressed when re-compilation is not required.
  * Previously, when the -c option was given to the 'compile'
    command, the 'postcompile' extension script was executed even when
    there was no (re-)compilation. Now, the 'postcompile' script is
    only invoked  when a new script is generated.
  * If CONFDIR was other than /etc, then ordinary users would not
    receive a clear error message when they attempted to execute
    one of the commands that change the firewall state.
  * Previously, IPv4 DHCP client broadcasts were blocked by the
    'rpfilter' interface option. That has been corrected.
  * The 'update' command incorrectly added the INLINE_MATCHES
    option to shorewall6.conf with a default value of 'Yes'. This
    caused 'start' to fail with invalid ip6tables rules when the alternate
    input format using ';' is used.
    Note: This last issue is not documented in the release notes
    included with the release.</changelog>
<changelog author="toganm@opensuse.org" date="1442318400">- Update to version 4.6.13 For more details see changelog.txt and
  realeasenotes.txt
  * The 'rules' file manpages have been corrected regarding the
    packets that are processed by rules in the NEW section.
  * Parsing of IPv6 address ranges has been corrected. Previously,
    use of ranges resulted in 'Invalid IPv6 Address' errors.
  * The shorewall6-hosts man page has been corrected to show the
    proper contents of the HOST(S) column.
  * Previously, INLINE statements in the mangle file were not
    recognized if a chain designator (:F, :P, etc.) followingowed
    INLINE(...). As a consequence, additional matches following
    a semicolon were interpreted as column/value pairs unless
    INLINE_MATCHES=Yes, resulting in compilation failure.
  * Inline matches on IP[6]TABLE rules could be ignored if
    INLINE_MATCHES=No. They are now recognized.
  * Specifying an action with a logging level in one of the
    _DEFAULT options in shorewall[6].conf
    (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error:
    ERROR: Invalid value (:info) for first Reject parameter
    /usr/share/shorewall/action.Rejectect (line 52)
    That has been corrected. Note, however, that specifying logging
    with a default action tends to defeat one of the main purposes
    of default actions which is to suppress logging.
  * Previously, it was necessary to set TC_EXPERT=Yes to have full
    access to the user mark in fw marks. That has been corrected so
    that any place that a mark or mask can be specified, both the
    TC mark and the User mark are accessible.</changelog>
<changelog author="bruno@ioda-net.ch" date="1457265600">- Update to last 4x bugfix version 4.6.13.4
  For details see changelog.txt and releasenotes.txt
  - 4.6.13.4
  * This release includes a couple of additional configure/install
    fixes from Matt Darfeuille.
  * The DROP command was previously rejected in the mangle file.
  That has been corrected.
  - 4.6.13.3
  * Previously, Shorewall6 rejected rules in which the SOURCE
  contained both an interface name and a MAC address (in
  Shorewall format). That defect has been corrected so that such
  rules are now accepted.
  * A number of corrections have been made to the install,
  uninstall and configure scripts (Matt Darfeuille).
  * Previously, optional interfaces were not enabled during 'start'
  and 'restart' unless there was at least one entry in the
  'providers' file.  This resulted in these interfaces not
  appearing in the output of 'shorewall[6] status -i'.
  * The check for use of a circular kernel log buffer (as opposed
  to a log file) has been improved.
  * Previously, if a circular log buffer was being used, the output
  of various commands still displayed '/var/log/messages' as the
  log file. Now, it is displayed as 'logread'.
  * When processing the 'dump' command, the CLI now uses 'netstat'
  to print socket information when the 'ss' utility is not
  installed.
  - 4.6.13.2
  * Previously, if statistical load balancing was used in the
  providers file, the default route in the main table was not
  deleted during firewall start/restart. That route is now
  correctly deleted.
  - 4.6.13.1
  * Previously, the 'reset' command would fail if chain names were
    included. Now, the command succeeds, provided that all of the
    specified chains exist in the filter table.
  * The TCP meta-connection is now supported by the Tinc macro and
    tunnel type. Previously, only the UDP data connection was
    supported.</changelog>
<changelog author="bruno@ioda-net.ch" date="1481112000">- Upgrade to last stable of 5.0.x version 5.0.15
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging :
  + Remove all non suse %if
  + Cleanup older non supported version
  + Remove upstream merged patch
  * 0001-remote_fs.patch
  * 0001-required-stop-fix.patch
  + Remove 0001-fillup-install.patch replaced by specific product
    patch for correct usage of var-fillup
  + Added patches for var-fillup when not specific %name6 is also
    supported
  * shorewall-fillup-install.patch
  * shorewall-init-fillup-install.patch
  * shorewall-lite-fillup-install.patch
  + spec-cleaner minimal</changelog>
<changelog author="bruno@ioda-net.ch" date="1486900800">- Upgrade to stable 5.1.1
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging:
  + use proper %{} syntax
  + Adjust year copyright
  + Remove attr on sbindir symlink
  + Move Samples and Contrib to doc package</changelog>
<changelog author="bruno@ioda-net.ch" date="1489579200">- Upgrade to last stable 5.1.3
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging Redone patches for var-fillup
  + shorewall-fillup-install.patch
  + shorewall-init-fillup-install.patch
  + shorewall-lite-fillup-install.patch</changelog>
<changelog author="bruno@ioda-net.ch" date="1489924800">- Update to last bugfix version 5.1.3.1
  Problems Corrected:
  There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3
  sample config files, which resulted in a compilation error.
  That typo has been corrected.
  There was also a typo in the two-interface IPv4 sample snat file;
  192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has
  been corrected.
  Previously, when processing the policy file, 'all+' was incorrectly
  treated the same as 'all'. That has been corrected so that 'all+'
  causes intra-zone traffic to be included in the policy.</changelog>
<changelog author="bruno@ioda-net.ch" date="1490443200">- Bugfix release 5.1.3.2
  Previously, if a Shorewall Variable (e.g., @chain) was the target
  of a conditional ?RESET directive (one that was enclosed in ?if.
  ?else...?endif logic), the compiler could incorrectly use an
  existing chain created from the action rather than creating a new
  (and different) chain. That has been corrected.
  Previously, if alternate input format specified a column that had
  already been specified, the contents of that column were silently
  overwritten. Now, a warning message is issued stating that the
  prior value has been replaced by the newer value.</changelog>
<changelog author="bruno@ioda-net.ch" date="1497441600">- Bugfix and enhancement release 5.1.4.2
  complete changelog is available
  http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt
- Main changes
  All IPv6 standard actions have been deleted and their logic
  has been added to their IPv4 counterparts who can now handle
  both address families.
  Previously, ?error and ?require messages as well as verbose ?info
  and ?warning messages (those that report the file and line numbers)
  generated from an action file would report the action file name and
  line number rather than the file and line number where the action
  was invoked. The file and line number where the action was invoked
  were listed second. Beginning with this release, the invoking file
  and line number are listed first and the action file and line number
  are not reported. This allows for creation of clearer messages.
  IPv6 UPnP support (including MINIUPNPD) is now available.
  A PERL_HASH_SEED option has been added to allow the Perl hash seed
  to be specified.  See shorewall.conf(5) and perlsec(1) for details.</changelog>
<changelog author="bruno@ioda-net.ch" date="1498046400">- This stable branch 5.1x will be the new default for Leap 42.3.
  Remember that each time you have an upgrade with changes in Major
  or Major,Minor it is mandatory you upgrade your configuration
  with shorewall(6) update -a /etc/shorewall(6) command.
- Packaging : use pretrans and posttrans to inform user about
  configuration upgrade.
- Bugfix release 5.1.4.3. Problem Corrected:
  When running on prior-generation distributions such as RHEL6,
  IPv6 multi-ISP configurations failed to start due to an error
  such as the following:
  ERROR: Command "ip -6 -6 route replace default scope global
    table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1"
    Failed
  Such configurations now start successfully.</changelog>
<changelog author="alarrosa@suse.com" date="1498737600">- Fix a typo in %posttrans that would remove the wrong file and could
  cause a problem depending on the execution order of the %pretrans
  and %posttrans scripts for the shorewall and shorewall6 packages.</changelog>
<changelog author="bruno@ioda-net.ch" date="1499860800">- bugfix release 5.1.4.4
  A defect in 5.1.4.3 caused a startup failure when two or more
  'fallback' providers were configured. That has been corrected.</changelog>
<changelog author="olaf@aepfle.de" date="1502539200">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
<changelog author="bruno@ioda-net.ch" date="1502798400">- Update to bugfix release 5.1.5.2
  + Make build reproducible boo#1047218
  + Fix upgrade from 4x version : dropBcast and dropBcasts are now
    supported boo#1053650
  + Perl 5.26 support
  + Fix for BASIC_FILTERS=Yes and tcfilters
  + Fix USER/GROUP messages
  + MAC address in OUTPUT col in accounting file error is raised
    at compile time
  + Fix port number 0 or &gt; 65535 perl execption</changelog>

</package>
<package pkgid="58d14553d68d0ed5976ca3857079502018dd4e10b80af25116418c4f391d2077" name="shorewall" arch="src">
    <version epoch="0" ver="5.1.5.2" rel="3.1"/>

<changelog author="toganm@opensuse.org" date="1423310400">- Update to version 4.6.6.2 For more details see changelog.txt and
  releasenotes.txt
  * The compiler failed to parse the construct +&lt;ipset&gt;[n] where n is
    an integer (e.g., +bad[2]).
  * Orion Paplawski has provided a patch that adds 'ko.xz' to the
    default MODULE_SUFFIX setting. This change deals with recent
    Fedora releases where the module names now end with ".ko.xz".
    In addition to Orion's patch, the sample configurations have
    been modified to specify MODULE_SUFFIX="ko ko.xz".</changelog>
<changelog author="toganm@opensuse.org" date="1426248000">- Update to version 4.6.7 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * The 'tunnels' file now supports 'tinc' tunnels.
  * Previously, the SAME action in the mangle file had a fixed
    timeout of 300 seconds (5 minutes). That action now allows
    specification of a different timeout.
  * It is now possible to add or delete addresses from an ipset
    with entries in the mangle file. The ADD and DEL actions have
    the same behavior in the mangle file as they do in the rules
    file.
- Added systemd_version macro in anticipation of detecting the
  correct service file when systemd version is &gt;= 214</changelog>
<changelog author="toganm@opensuse.org" date="1428148800">- Update to version 4.6.8 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * Previously, when the -n option was specified and NetworkManager
    was installed on the target system, the Shorewall-init installer
    would still create
    ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless
    of the setting of $CONFDIR. That has been corrected such that
    the directory
    ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall
    is created instead.
  * Previously, handling of the IPTABLES and IP6TABLES actions in
    the conntrack file was broken. nfw provided a fix on IRC.
  * The Shorewall-core and Shorewall6 installers would previously
    report incorrectly that the product release was not installed.
    Matt Darfeuille provided fixes.</changelog>
<changelog author="toganm@opensuse.org" date="1429012800">- Update to version 4.6.8.1 For more details see changnlog.txt and
  releasenotes.txt
  * Previously, when servicd was installed and there were one or
    more required interfaces, the firewall would fail to start at
    boot.This has been corrected by Tuomo Soini.
  * Some startup logic in lib.cli has been deleted. A bug prevented
    the code from working as intended, so there is no loss of
    functionality resulting from deletion of the code.</changelog>
<changelog author="toganm@opensuse.org" date="1431000000">- Update to version 4.6.9 For more details see changelog.txt and
  releasenotes.txt
  * This release contains defect repair from Shorewall 4.6.8.1 and
    earlier releases.
  * The means for preventing loading of helper modules has been
    clarified in the documentation.
  * The SetEvent and ResetEvent actions previously set/reset the
    event even if the packet did not match the other specified
    columns. This has been corrected.
  * Previously, the 'show capabilities' command was ignoring the
    HELPERS setting. This resulted in unwanted modules being
    autoloaded  and, when the -f option was given, an incorrect
    capabilities file was generated.
  * Previously, when 'wait' was specified for an interface, the
    generated script erroneously checked for required interfaces on
    all commands rather than just start, restart and restore.</changelog>
<changelog author="toganm@opensuse.org" date="1434542400">- Update to version 4.6.10.1 For more details see changelog.txt and
  releasenotes.txt
  * Indentation is now consistent in lib.core (Tuomo Soini).
  * The first problem corrected in 4.6.10 below was incomplete. It
    is now complete (Tuomo Soini).
  * Similarly, the second fix was also incomplete and is now
    completed  (Tuomo Soini).</changelog>
<changelog author="toganm@opensuse.org" date="1436875200">- Update to version 4.6.11 For more details see changelog.txt and
  releasenotes.txt
  * Previously, when the -c option was given to the 'compile'
    command, the progress message "Compiling..." was issued before
    it was determined if compilation was necessary.  Now, that message
    is suppressed when re-compilation is not required.
  * Previously, when the -c option was given to the 'compile'
    command, the 'postcompile' extension script was executed even when
    there was no (re-)compilation. Now, the 'postcompile' script is
    only invoked  when a new script is generated.
  * If CONFDIR was other than /etc, then ordinary users would not
    receive a clear error message when they attempted to execute
    one of the commands that change the firewall state.
  * Previously, IPv4 DHCP client broadcasts were blocked by the
    'rpfilter' interface option. That has been corrected.
  * The 'update' command incorrectly added the INLINE_MATCHES
    option to shorewall6.conf with a default value of 'Yes'. This
    caused 'start' to fail with invalid ip6tables rules when the alternate
    input format using ';' is used.
    Note: This last issue is not documented in the release notes
    included with the release.</changelog>
<changelog author="toganm@opensuse.org" date="1442318400">- Update to version 4.6.13 For more details see changelog.txt and
  realeasenotes.txt
  * The 'rules' file manpages have been corrected regarding the
    packets that are processed by rules in the NEW section.
  * Parsing of IPv6 address ranges has been corrected. Previously,
    use of ranges resulted in 'Invalid IPv6 Address' errors.
  * The shorewall6-hosts man page has been corrected to show the
    proper contents of the HOST(S) column.
  * Previously, INLINE statements in the mangle file were not
    recognized if a chain designator (:F, :P, etc.) followingowed
    INLINE(...). As a consequence, additional matches following
    a semicolon were interpreted as column/value pairs unless
    INLINE_MATCHES=Yes, resulting in compilation failure.
  * Inline matches on IP[6]TABLE rules could be ignored if
    INLINE_MATCHES=No. They are now recognized.
  * Specifying an action with a logging level in one of the
    _DEFAULT options in shorewall[6].conf
    (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error:
    ERROR: Invalid value (:info) for first Reject parameter
    /usr/share/shorewall/action.Rejectect (line 52)
    That has been corrected. Note, however, that specifying logging
    with a default action tends to defeat one of the main purposes
    of default actions which is to suppress logging.
  * Previously, it was necessary to set TC_EXPERT=Yes to have full
    access to the user mark in fw marks. That has been corrected so
    that any place that a mark or mask can be specified, both the
    TC mark and the User mark are accessible.</changelog>
<changelog author="bruno@ioda-net.ch" date="1457265600">- Update to last 4x bugfix version 4.6.13.4
  For details see changelog.txt and releasenotes.txt
  - 4.6.13.4
  * This release includes a couple of additional configure/install
    fixes from Matt Darfeuille.
  * The DROP command was previously rejected in the mangle file.
  That has been corrected.
  - 4.6.13.3
  * Previously, Shorewall6 rejected rules in which the SOURCE
  contained both an interface name and a MAC address (in
  Shorewall format). That defect has been corrected so that such
  rules are now accepted.
  * A number of corrections have been made to the install,
  uninstall and configure scripts (Matt Darfeuille).
  * Previously, optional interfaces were not enabled during 'start'
  and 'restart' unless there was at least one entry in the
  'providers' file.  This resulted in these interfaces not
  appearing in the output of 'shorewall[6] status -i'.
  * The check for use of a circular kernel log buffer (as opposed
  to a log file) has been improved.
  * Previously, if a circular log buffer was being used, the output
  of various commands still displayed '/var/log/messages' as the
  log file. Now, it is displayed as 'logread'.
  * When processing the 'dump' command, the CLI now uses 'netstat'
  to print socket information when the 'ss' utility is not
  installed.
  - 4.6.13.2
  * Previously, if statistical load balancing was used in the
  providers file, the default route in the main table was not
  deleted during firewall start/restart. That route is now
  correctly deleted.
  - 4.6.13.1
  * Previously, the 'reset' command would fail if chain names were
    included. Now, the command succeeds, provided that all of the
    specified chains exist in the filter table.
  * The TCP meta-connection is now supported by the Tinc macro and
    tunnel type. Previously, only the UDP data connection was
    supported.</changelog>
<changelog author="bruno@ioda-net.ch" date="1481112000">- Upgrade to last stable of 5.0.x version 5.0.15
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging :
  + Remove all non suse %if
  + Cleanup older non supported version
  + Remove upstream merged patch
  * 0001-remote_fs.patch
  * 0001-required-stop-fix.patch
  + Remove 0001-fillup-install.patch replaced by specific product
    patch for correct usage of var-fillup
  + Added patches for var-fillup when not specific %name6 is also
    supported
  * shorewall-fillup-install.patch
  * shorewall-init-fillup-install.patch
  * shorewall-lite-fillup-install.patch
  + spec-cleaner minimal</changelog>
<changelog author="bruno@ioda-net.ch" date="1486900800">- Upgrade to stable 5.1.1
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging:
  + use proper %{} syntax
  + Adjust year copyright
  + Remove attr on sbindir symlink
  + Move Samples and Contrib to doc package</changelog>
<changelog author="bruno@ioda-net.ch" date="1489579200">- Upgrade to last stable 5.1.3
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging Redone patches for var-fillup
  + shorewall-fillup-install.patch
  + shorewall-init-fillup-install.patch
  + shorewall-lite-fillup-install.patch</changelog>
<changelog author="bruno@ioda-net.ch" date="1489924800">- Update to last bugfix version 5.1.3.1
  Problems Corrected:
  There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3
  sample config files, which resulted in a compilation error.
  That typo has been corrected.
  There was also a typo in the two-interface IPv4 sample snat file;
  192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has
  been corrected.
  Previously, when processing the policy file, 'all+' was incorrectly
  treated the same as 'all'. That has been corrected so that 'all+'
  causes intra-zone traffic to be included in the policy.</changelog>
<changelog author="bruno@ioda-net.ch" date="1490443200">- Bugfix release 5.1.3.2
  Previously, if a Shorewall Variable (e.g., @chain) was the target
  of a conditional ?RESET directive (one that was enclosed in ?if.
  ?else...?endif logic), the compiler could incorrectly use an
  existing chain created from the action rather than creating a new
  (and different) chain. That has been corrected.
  Previously, if alternate input format specified a column that had
  already been specified, the contents of that column were silently
  overwritten. Now, a warning message is issued stating that the
  prior value has been replaced by the newer value.</changelog>
<changelog author="bruno@ioda-net.ch" date="1497441600">- Bugfix and enhancement release 5.1.4.2
  complete changelog is available
  http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt
- Main changes
  All IPv6 standard actions have been deleted and their logic
  has been added to their IPv4 counterparts who can now handle
  both address families.
  Previously, ?error and ?require messages as well as verbose ?info
  and ?warning messages (those that report the file and line numbers)
  generated from an action file would report the action file name and
  line number rather than the file and line number where the action
  was invoked. The file and line number where the action was invoked
  were listed second. Beginning with this release, the invoking file
  and line number are listed first and the action file and line number
  are not reported. This allows for creation of clearer messages.
  IPv6 UPnP support (including MINIUPNPD) is now available.
  A PERL_HASH_SEED option has been added to allow the Perl hash seed
  to be specified.  See shorewall.conf(5) and perlsec(1) for details.</changelog>
<changelog author="bruno@ioda-net.ch" date="1498046400">- This stable branch 5.1x will be the new default for Leap 42.3.
  Remember that each time you have an upgrade with changes in Major
  or Major,Minor it is mandatory you upgrade your configuration
  with shorewall(6) update -a /etc/shorewall(6) command.
- Packaging : use pretrans and posttrans to inform user about
  configuration upgrade.
- Bugfix release 5.1.4.3. Problem Corrected:
  When running on prior-generation distributions such as RHEL6,
  IPv6 multi-ISP configurations failed to start due to an error
  such as the following:
  ERROR: Command "ip -6 -6 route replace default scope global
    table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1"
    Failed
  Such configurations now start successfully.</changelog>
<changelog author="alarrosa@suse.com" date="1498737600">- Fix a typo in %posttrans that would remove the wrong file and could
  cause a problem depending on the execution order of the %pretrans
  and %posttrans scripts for the shorewall and shorewall6 packages.</changelog>
<changelog author="bruno@ioda-net.ch" date="1499860800">- bugfix release 5.1.4.4
  A defect in 5.1.4.3 caused a startup failure when two or more
  'fallback' providers were configured. That has been corrected.</changelog>
<changelog author="olaf@aepfle.de" date="1502539200">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
<changelog author="bruno@ioda-net.ch" date="1502798400">- Update to bugfix release 5.1.5.2
  + Make build reproducible boo#1047218
  + Fix upgrade from 4x version : dropBcast and dropBcasts are now
    supported boo#1053650
  + Perl 5.26 support
  + Fix for BASIC_FILTERS=Yes and tcfilters
  + Fix USER/GROUP messages
  + MAC address in OUTPUT col in accounting file error is raised
    at compile time
  + Fix port number 0 or &gt; 65535 perl execption</changelog>

</package>
<package pkgid="aaedd83bf539048e4eec785ef78bffffd91082380a841af957f322013c06a4d6" name="shorewall-core" arch="noarch">
    <version epoch="0" ver="5.1.5.2" rel="3.1"/>

<changelog author="toganm@opensuse.org" date="1423310400">- Update to version 4.6.6.2 For more details see changelog.txt and
  releasenotes.txt
  * The compiler failed to parse the construct +&lt;ipset&gt;[n] where n is
    an integer (e.g., +bad[2]).
  * Orion Paplawski has provided a patch that adds 'ko.xz' to the
    default MODULE_SUFFIX setting. This change deals with recent
    Fedora releases where the module names now end with ".ko.xz".
    In addition to Orion's patch, the sample configurations have
    been modified to specify MODULE_SUFFIX="ko ko.xz".</changelog>
<changelog author="toganm@opensuse.org" date="1426248000">- Update to version 4.6.7 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * The 'tunnels' file now supports 'tinc' tunnels.
  * Previously, the SAME action in the mangle file had a fixed
    timeout of 300 seconds (5 minutes). That action now allows
    specification of a different timeout.
  * It is now possible to add or delete addresses from an ipset
    with entries in the mangle file. The ADD and DEL actions have
    the same behavior in the mangle file as they do in the rules
    file.
- Added systemd_version macro in anticipation of detecting the
  correct service file when systemd version is &gt;= 214</changelog>
<changelog author="toganm@opensuse.org" date="1428148800">- Update to version 4.6.8 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * Previously, when the -n option was specified and NetworkManager
    was installed on the target system, the Shorewall-init installer
    would still create
    ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless
    of the setting of $CONFDIR. That has been corrected such that
    the directory
    ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall
    is created instead.
  * Previously, handling of the IPTABLES and IP6TABLES actions in
    the conntrack file was broken. nfw provided a fix on IRC.
  * The Shorewall-core and Shorewall6 installers would previously
    report incorrectly that the product release was not installed.
    Matt Darfeuille provided fixes.</changelog>
<changelog author="toganm@opensuse.org" date="1429012800">- Update to version 4.6.8.1 For more details see changnlog.txt and
  releasenotes.txt
  * Previously, when servicd was installed and there were one or
    more required interfaces, the firewall would fail to start at
    boot.This has been corrected by Tuomo Soini.
  * Some startup logic in lib.cli has been deleted. A bug prevented
    the code from working as intended, so there is no loss of
    functionality resulting from deletion of the code.</changelog>
<changelog author="toganm@opensuse.org" date="1431000000">- Update to version 4.6.9 For more details see changelog.txt and
  releasenotes.txt
  * This release contains defect repair from Shorewall 4.6.8.1 and
    earlier releases.
  * The means for preventing loading of helper modules has been
    clarified in the documentation.
  * The SetEvent and ResetEvent actions previously set/reset the
    event even if the packet did not match the other specified
    columns. This has been corrected.
  * Previously, the 'show capabilities' command was ignoring the
    HELPERS setting. This resulted in unwanted modules being
    autoloaded  and, when the -f option was given, an incorrect
    capabilities file was generated.
  * Previously, when 'wait' was specified for an interface, the
    generated script erroneously checked for required interfaces on
    all commands rather than just start, restart and restore.</changelog>
<changelog author="toganm@opensuse.org" date="1434542400">- Update to version 4.6.10.1 For more details see changelog.txt and
  releasenotes.txt
  * Indentation is now consistent in lib.core (Tuomo Soini).
  * The first problem corrected in 4.6.10 below was incomplete. It
    is now complete (Tuomo Soini).
  * Similarly, the second fix was also incomplete and is now
    completed  (Tuomo Soini).</changelog>
<changelog author="toganm@opensuse.org" date="1436875200">- Update to version 4.6.11 For more details see changelog.txt and
  releasenotes.txt
  * Previously, when the -c option was given to the 'compile'
    command, the progress message "Compiling..." was issued before
    it was determined if compilation was necessary.  Now, that message
    is suppressed when re-compilation is not required.
  * Previously, when the -c option was given to the 'compile'
    command, the 'postcompile' extension script was executed even when
    there was no (re-)compilation. Now, the 'postcompile' script is
    only invoked  when a new script is generated.
  * If CONFDIR was other than /etc, then ordinary users would not
    receive a clear error message when they attempted to execute
    one of the commands that change the firewall state.
  * Previously, IPv4 DHCP client broadcasts were blocked by the
    'rpfilter' interface option. That has been corrected.
  * The 'update' command incorrectly added the INLINE_MATCHES
    option to shorewall6.conf with a default value of 'Yes'. This
    caused 'start' to fail with invalid ip6tables rules when the alternate
    input format using ';' is used.
    Note: This last issue is not documented in the release notes
    included with the release.</changelog>
<changelog author="toganm@opensuse.org" date="1442318400">- Update to version 4.6.13 For more details see changelog.txt and
  realeasenotes.txt
  * The 'rules' file manpages have been corrected regarding the
    packets that are processed by rules in the NEW section.
  * Parsing of IPv6 address ranges has been corrected. Previously,
    use of ranges resulted in 'Invalid IPv6 Address' errors.
  * The shorewall6-hosts man page has been corrected to show the
    proper contents of the HOST(S) column.
  * Previously, INLINE statements in the mangle file were not
    recognized if a chain designator (:F, :P, etc.) followingowed
    INLINE(...). As a consequence, additional matches following
    a semicolon were interpreted as column/value pairs unless
    INLINE_MATCHES=Yes, resulting in compilation failure.
  * Inline matches on IP[6]TABLE rules could be ignored if
    INLINE_MATCHES=No. They are now recognized.
  * Specifying an action with a logging level in one of the
    _DEFAULT options in shorewall[6].conf
    (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error:
    ERROR: Invalid value (:info) for first Reject parameter
    /usr/share/shorewall/action.Rejectect (line 52)
    That has been corrected. Note, however, that specifying logging
    with a default action tends to defeat one of the main purposes
    of default actions which is to suppress logging.
  * Previously, it was necessary to set TC_EXPERT=Yes to have full
    access to the user mark in fw marks. That has been corrected so
    that any place that a mark or mask can be specified, both the
    TC mark and the User mark are accessible.</changelog>
<changelog author="bruno@ioda-net.ch" date="1457265600">- Update to last 4x bugfix version 4.6.13.4
  For details see changelog.txt and releasenotes.txt
  - 4.6.13.4
  * This release includes a couple of additional configure/install
    fixes from Matt Darfeuille.
  * The DROP command was previously rejected in the mangle file.
  That has been corrected.
  - 4.6.13.3
  * Previously, Shorewall6 rejected rules in which the SOURCE
  contained both an interface name and a MAC address (in
  Shorewall format). That defect has been corrected so that such
  rules are now accepted.
  * A number of corrections have been made to the install,
  uninstall and configure scripts (Matt Darfeuille).
  * Previously, optional interfaces were not enabled during 'start'
  and 'restart' unless there was at least one entry in the
  'providers' file.  This resulted in these interfaces not
  appearing in the output of 'shorewall[6] status -i'.
  * The check for use of a circular kernel log buffer (as opposed
  to a log file) has been improved.
  * Previously, if a circular log buffer was being used, the output
  of various commands still displayed '/var/log/messages' as the
  log file. Now, it is displayed as 'logread'.
  * When processing the 'dump' command, the CLI now uses 'netstat'
  to print socket information when the 'ss' utility is not
  installed.
  - 4.6.13.2
  * Previously, if statistical load balancing was used in the
  providers file, the default route in the main table was not
  deleted during firewall start/restart. That route is now
  correctly deleted.
  - 4.6.13.1
  * Previously, the 'reset' command would fail if chain names were
    included. Now, the command succeeds, provided that all of the
    specified chains exist in the filter table.
  * The TCP meta-connection is now supported by the Tinc macro and
    tunnel type. Previously, only the UDP data connection was
    supported.</changelog>
<changelog author="bruno@ioda-net.ch" date="1481112000">- Upgrade to last stable of 5.0.x version 5.0.15
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging :
  + Remove all non suse %if
  + Cleanup older non supported version
  + Remove upstream merged patch
  * 0001-remote_fs.patch
  * 0001-required-stop-fix.patch
  + Remove 0001-fillup-install.patch replaced by specific product
    patch for correct usage of var-fillup
  + Added patches for var-fillup when not specific %name6 is also
    supported
  * shorewall-fillup-install.patch
  * shorewall-init-fillup-install.patch
  * shorewall-lite-fillup-install.patch
  + spec-cleaner minimal</changelog>
<changelog author="bruno@ioda-net.ch" date="1486900800">- Upgrade to stable 5.1.1
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging:
  + use proper %{} syntax
  + Adjust year copyright
  + Remove attr on sbindir symlink
  + Move Samples and Contrib to doc package</changelog>
<changelog author="bruno@ioda-net.ch" date="1489579200">- Upgrade to last stable 5.1.3
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging Redone patches for var-fillup
  + shorewall-fillup-install.patch
  + shorewall-init-fillup-install.patch
  + shorewall-lite-fillup-install.patch</changelog>
<changelog author="bruno@ioda-net.ch" date="1489924800">- Update to last bugfix version 5.1.3.1
  Problems Corrected:
  There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3
  sample config files, which resulted in a compilation error.
  That typo has been corrected.
  There was also a typo in the two-interface IPv4 sample snat file;
  192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has
  been corrected.
  Previously, when processing the policy file, 'all+' was incorrectly
  treated the same as 'all'. That has been corrected so that 'all+'
  causes intra-zone traffic to be included in the policy.</changelog>
<changelog author="bruno@ioda-net.ch" date="1490443200">- Bugfix release 5.1.3.2
  Previously, if a Shorewall Variable (e.g., @chain) was the target
  of a conditional ?RESET directive (one that was enclosed in ?if.
  ?else...?endif logic), the compiler could incorrectly use an
  existing chain created from the action rather than creating a new
  (and different) chain. That has been corrected.
  Previously, if alternate input format specified a column that had
  already been specified, the contents of that column were silently
  overwritten. Now, a warning message is issued stating that the
  prior value has been replaced by the newer value.</changelog>
<changelog author="bruno@ioda-net.ch" date="1497441600">- Bugfix and enhancement release 5.1.4.2
  complete changelog is available
  http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt
- Main changes
  All IPv6 standard actions have been deleted and their logic
  has been added to their IPv4 counterparts who can now handle
  both address families.
  Previously, ?error and ?require messages as well as verbose ?info
  and ?warning messages (those that report the file and line numbers)
  generated from an action file would report the action file name and
  line number rather than the file and line number where the action
  was invoked. The file and line number where the action was invoked
  were listed second. Beginning with this release, the invoking file
  and line number are listed first and the action file and line number
  are not reported. This allows for creation of clearer messages.
  IPv6 UPnP support (including MINIUPNPD) is now available.
  A PERL_HASH_SEED option has been added to allow the Perl hash seed
  to be specified.  See shorewall.conf(5) and perlsec(1) for details.</changelog>
<changelog author="bruno@ioda-net.ch" date="1498046400">- This stable branch 5.1x will be the new default for Leap 42.3.
  Remember that each time you have an upgrade with changes in Major
  or Major,Minor it is mandatory you upgrade your configuration
  with shorewall(6) update -a /etc/shorewall(6) command.
- Packaging : use pretrans and posttrans to inform user about
  configuration upgrade.
- Bugfix release 5.1.4.3. Problem Corrected:
  When running on prior-generation distributions such as RHEL6,
  IPv6 multi-ISP configurations failed to start due to an error
  such as the following:
  ERROR: Command "ip -6 -6 route replace default scope global
    table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1"
    Failed
  Such configurations now start successfully.</changelog>
<changelog author="alarrosa@suse.com" date="1498737600">- Fix a typo in %posttrans that would remove the wrong file and could
  cause a problem depending on the execution order of the %pretrans
  and %posttrans scripts for the shorewall and shorewall6 packages.</changelog>
<changelog author="bruno@ioda-net.ch" date="1499860800">- bugfix release 5.1.4.4
  A defect in 5.1.4.3 caused a startup failure when two or more
  'fallback' providers were configured. That has been corrected.</changelog>
<changelog author="olaf@aepfle.de" date="1502539200">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
<changelog author="bruno@ioda-net.ch" date="1502798400">- Update to bugfix release 5.1.5.2
  + Make build reproducible boo#1047218
  + Fix upgrade from 4x version : dropBcast and dropBcasts are now
    supported boo#1053650
  + Perl 5.26 support
  + Fix for BASIC_FILTERS=Yes and tcfilters
  + Fix USER/GROUP messages
  + MAC address in OUTPUT col in accounting file error is raised
    at compile time
  + Fix port number 0 or &gt; 65535 perl execption</changelog>

</package>
<package pkgid="6b2a0141b068433157b1d7af4d316da98f8dc69159d08767847a86d2fee17e6f" name="shorewall-docs" arch="noarch">
    <version epoch="0" ver="5.1.5.2" rel="3.1"/>

<changelog author="toganm@opensuse.org" date="1423310400">- Update to version 4.6.6.2 For more details see changelog.txt and
  releasenotes.txt
  * The compiler failed to parse the construct +&lt;ipset&gt;[n] where n is
    an integer (e.g., +bad[2]).
  * Orion Paplawski has provided a patch that adds 'ko.xz' to the
    default MODULE_SUFFIX setting. This change deals with recent
    Fedora releases where the module names now end with ".ko.xz".
    In addition to Orion's patch, the sample configurations have
    been modified to specify MODULE_SUFFIX="ko ko.xz".</changelog>
<changelog author="toganm@opensuse.org" date="1426248000">- Update to version 4.6.7 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * The 'tunnels' file now supports 'tinc' tunnels.
  * Previously, the SAME action in the mangle file had a fixed
    timeout of 300 seconds (5 minutes). That action now allows
    specification of a different timeout.
  * It is now possible to add or delete addresses from an ipset
    with entries in the mangle file. The ADD and DEL actions have
    the same behavior in the mangle file as they do in the rules
    file.
- Added systemd_version macro in anticipation of detecting the
  correct service file when systemd version is &gt;= 214</changelog>
<changelog author="toganm@opensuse.org" date="1428148800">- Update to version 4.6.8 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * Previously, when the -n option was specified and NetworkManager
    was installed on the target system, the Shorewall-init installer
    would still create
    ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless
    of the setting of $CONFDIR. That has been corrected such that
    the directory
    ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall
    is created instead.
  * Previously, handling of the IPTABLES and IP6TABLES actions in
    the conntrack file was broken. nfw provided a fix on IRC.
  * The Shorewall-core and Shorewall6 installers would previously
    report incorrectly that the product release was not installed.
    Matt Darfeuille provided fixes.</changelog>
<changelog author="toganm@opensuse.org" date="1429012800">- Update to version 4.6.8.1 For more details see changnlog.txt and
  releasenotes.txt
  * Previously, when servicd was installed and there were one or
    more required interfaces, the firewall would fail to start at
    boot.This has been corrected by Tuomo Soini.
  * Some startup logic in lib.cli has been deleted. A bug prevented
    the code from working as intended, so there is no loss of
    functionality resulting from deletion of the code.</changelog>
<changelog author="toganm@opensuse.org" date="1431000000">- Update to version 4.6.9 For more details see changelog.txt and
  releasenotes.txt
  * This release contains defect repair from Shorewall 4.6.8.1 and
    earlier releases.
  * The means for preventing loading of helper modules has been
    clarified in the documentation.
  * The SetEvent and ResetEvent actions previously set/reset the
    event even if the packet did not match the other specified
    columns. This has been corrected.
  * Previously, the 'show capabilities' command was ignoring the
    HELPERS setting. This resulted in unwanted modules being
    autoloaded  and, when the -f option was given, an incorrect
    capabilities file was generated.
  * Previously, when 'wait' was specified for an interface, the
    generated script erroneously checked for required interfaces on
    all commands rather than just start, restart and restore.</changelog>
<changelog author="toganm@opensuse.org" date="1434542400">- Update to version 4.6.10.1 For more details see changelog.txt and
  releasenotes.txt
  * Indentation is now consistent in lib.core (Tuomo Soini).
  * The first problem corrected in 4.6.10 below was incomplete. It
    is now complete (Tuomo Soini).
  * Similarly, the second fix was also incomplete and is now
    completed  (Tuomo Soini).</changelog>
<changelog author="toganm@opensuse.org" date="1436875200">- Update to version 4.6.11 For more details see changelog.txt and
  releasenotes.txt
  * Previously, when the -c option was given to the 'compile'
    command, the progress message "Compiling..." was issued before
    it was determined if compilation was necessary.  Now, that message
    is suppressed when re-compilation is not required.
  * Previously, when the -c option was given to the 'compile'
    command, the 'postcompile' extension script was executed even when
    there was no (re-)compilation. Now, the 'postcompile' script is
    only invoked  when a new script is generated.
  * If CONFDIR was other than /etc, then ordinary users would not
    receive a clear error message when they attempted to execute
    one of the commands that change the firewall state.
  * Previously, IPv4 DHCP client broadcasts were blocked by the
    'rpfilter' interface option. That has been corrected.
  * The 'update' command incorrectly added the INLINE_MATCHES
    option to shorewall6.conf with a default value of 'Yes'. This
    caused 'start' to fail with invalid ip6tables rules when the alternate
    input format using ';' is used.
    Note: This last issue is not documented in the release notes
    included with the release.</changelog>
<changelog author="toganm@opensuse.org" date="1442318400">- Update to version 4.6.13 For more details see changelog.txt and
  realeasenotes.txt
  * The 'rules' file manpages have been corrected regarding the
    packets that are processed by rules in the NEW section.
  * Parsing of IPv6 address ranges has been corrected. Previously,
    use of ranges resulted in 'Invalid IPv6 Address' errors.
  * The shorewall6-hosts man page has been corrected to show the
    proper contents of the HOST(S) column.
  * Previously, INLINE statements in the mangle file were not
    recognized if a chain designator (:F, :P, etc.) followingowed
    INLINE(...). As a consequence, additional matches following
    a semicolon were interpreted as column/value pairs unless
    INLINE_MATCHES=Yes, resulting in compilation failure.
  * Inline matches on IP[6]TABLE rules could be ignored if
    INLINE_MATCHES=No. They are now recognized.
  * Specifying an action with a logging level in one of the
    _DEFAULT options in shorewall[6].conf
    (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error:
    ERROR: Invalid value (:info) for first Reject parameter
    /usr/share/shorewall/action.Rejectect (line 52)
    That has been corrected. Note, however, that specifying logging
    with a default action tends to defeat one of the main purposes
    of default actions which is to suppress logging.
  * Previously, it was necessary to set TC_EXPERT=Yes to have full
    access to the user mark in fw marks. That has been corrected so
    that any place that a mark or mask can be specified, both the
    TC mark and the User mark are accessible.</changelog>
<changelog author="bruno@ioda-net.ch" date="1457265600">- Update to last 4x bugfix version 4.6.13.4
  For details see changelog.txt and releasenotes.txt
  - 4.6.13.4
  * This release includes a couple of additional configure/install
    fixes from Matt Darfeuille.
  * The DROP command was previously rejected in the mangle file.
  That has been corrected.
  - 4.6.13.3
  * Previously, Shorewall6 rejected rules in which the SOURCE
  contained both an interface name and a MAC address (in
  Shorewall format). That defect has been corrected so that such
  rules are now accepted.
  * A number of corrections have been made to the install,
  uninstall and configure scripts (Matt Darfeuille).
  * Previously, optional interfaces were not enabled during 'start'
  and 'restart' unless there was at least one entry in the
  'providers' file.  This resulted in these interfaces not
  appearing in the output of 'shorewall[6] status -i'.
  * The check for use of a circular kernel log buffer (as opposed
  to a log file) has been improved.
  * Previously, if a circular log buffer was being used, the output
  of various commands still displayed '/var/log/messages' as the
  log file. Now, it is displayed as 'logread'.
  * When processing the 'dump' command, the CLI now uses 'netstat'
  to print socket information when the 'ss' utility is not
  installed.
  - 4.6.13.2
  * Previously, if statistical load balancing was used in the
  providers file, the default route in the main table was not
  deleted during firewall start/restart. That route is now
  correctly deleted.
  - 4.6.13.1
  * Previously, the 'reset' command would fail if chain names were
    included. Now, the command succeeds, provided that all of the
    specified chains exist in the filter table.
  * The TCP meta-connection is now supported by the Tinc macro and
    tunnel type. Previously, only the UDP data connection was
    supported.</changelog>
<changelog author="bruno@ioda-net.ch" date="1481112000">- Upgrade to last stable of 5.0.x version 5.0.15
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging :
  + Remove all non suse %if
  + Cleanup older non supported version
  + Remove upstream merged patch
  * 0001-remote_fs.patch
  * 0001-required-stop-fix.patch
  + Remove 0001-fillup-install.patch replaced by specific product
    patch for correct usage of var-fillup
  + Added patches for var-fillup when not specific %name6 is also
    supported
  * shorewall-fillup-install.patch
  * shorewall-init-fillup-install.patch
  * shorewall-lite-fillup-install.patch
  + spec-cleaner minimal</changelog>
<changelog author="bruno@ioda-net.ch" date="1486900800">- Upgrade to stable 5.1.1
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging:
  + use proper %{} syntax
  + Adjust year copyright
  + Remove attr on sbindir symlink
  + Move Samples and Contrib to doc package</changelog>
<changelog author="bruno@ioda-net.ch" date="1489579200">- Upgrade to last stable 5.1.3
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging Redone patches for var-fillup
  + shorewall-fillup-install.patch
  + shorewall-init-fillup-install.patch
  + shorewall-lite-fillup-install.patch</changelog>
<changelog author="bruno@ioda-net.ch" date="1489924800">- Update to last bugfix version 5.1.3.1
  Problems Corrected:
  There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3
  sample config files, which resulted in a compilation error.
  That typo has been corrected.
  There was also a typo in the two-interface IPv4 sample snat file;
  192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has
  been corrected.
  Previously, when processing the policy file, 'all+' was incorrectly
  treated the same as 'all'. That has been corrected so that 'all+'
  causes intra-zone traffic to be included in the policy.</changelog>
<changelog author="bruno@ioda-net.ch" date="1490443200">- Bugfix release 5.1.3.2
  Previously, if a Shorewall Variable (e.g., @chain) was the target
  of a conditional ?RESET directive (one that was enclosed in ?if.
  ?else...?endif logic), the compiler could incorrectly use an
  existing chain created from the action rather than creating a new
  (and different) chain. That has been corrected.
  Previously, if alternate input format specified a column that had
  already been specified, the contents of that column were silently
  overwritten. Now, a warning message is issued stating that the
  prior value has been replaced by the newer value.</changelog>
<changelog author="bruno@ioda-net.ch" date="1497441600">- Bugfix and enhancement release 5.1.4.2
  complete changelog is available
  http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt
- Main changes
  All IPv6 standard actions have been deleted and their logic
  has been added to their IPv4 counterparts who can now handle
  both address families.
  Previously, ?error and ?require messages as well as verbose ?info
  and ?warning messages (those that report the file and line numbers)
  generated from an action file would report the action file name and
  line number rather than the file and line number where the action
  was invoked. The file and line number where the action was invoked
  were listed second. Beginning with this release, the invoking file
  and line number are listed first and the action file and line number
  are not reported. This allows for creation of clearer messages.
  IPv6 UPnP support (including MINIUPNPD) is now available.
  A PERL_HASH_SEED option has been added to allow the Perl hash seed
  to be specified.  See shorewall.conf(5) and perlsec(1) for details.</changelog>
<changelog author="bruno@ioda-net.ch" date="1498046400">- This stable branch 5.1x will be the new default for Leap 42.3.
  Remember that each time you have an upgrade with changes in Major
  or Major,Minor it is mandatory you upgrade your configuration
  with shorewall(6) update -a /etc/shorewall(6) command.
- Packaging : use pretrans and posttrans to inform user about
  configuration upgrade.
- Bugfix release 5.1.4.3. Problem Corrected:
  When running on prior-generation distributions such as RHEL6,
  IPv6 multi-ISP configurations failed to start due to an error
  such as the following:
  ERROR: Command "ip -6 -6 route replace default scope global
    table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1"
    Failed
  Such configurations now start successfully.</changelog>
<changelog author="alarrosa@suse.com" date="1498737600">- Fix a typo in %posttrans that would remove the wrong file and could
  cause a problem depending on the execution order of the %pretrans
  and %posttrans scripts for the shorewall and shorewall6 packages.</changelog>
<changelog author="bruno@ioda-net.ch" date="1499860800">- bugfix release 5.1.4.4
  A defect in 5.1.4.3 caused a startup failure when two or more
  'fallback' providers were configured. That has been corrected.</changelog>
<changelog author="olaf@aepfle.de" date="1502539200">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
<changelog author="bruno@ioda-net.ch" date="1502798400">- Update to bugfix release 5.1.5.2
  + Make build reproducible boo#1047218
  + Fix upgrade from 4x version : dropBcast and dropBcasts are now
    supported boo#1053650
  + Perl 5.26 support
  + Fix for BASIC_FILTERS=Yes and tcfilters
  + Fix USER/GROUP messages
  + MAC address in OUTPUT col in accounting file error is raised
    at compile time
  + Fix port number 0 or &gt; 65535 perl execption</changelog>

</package>
<package pkgid="612be1de8cbe3be470e8e4fbdbca408068b1b68c5433e57e37f4e1800cf7405f" name="shorewall-init" arch="noarch">
    <version epoch="0" ver="5.1.5.2" rel="3.1"/>

<changelog author="toganm@opensuse.org" date="1423310400">- Update to version 4.6.6.2 For more details see changelog.txt and
  releasenotes.txt
  * The compiler failed to parse the construct +&lt;ipset&gt;[n] where n is
    an integer (e.g., +bad[2]).
  * Orion Paplawski has provided a patch that adds 'ko.xz' to the
    default MODULE_SUFFIX setting. This change deals with recent
    Fedora releases where the module names now end with ".ko.xz".
    In addition to Orion's patch, the sample configurations have
    been modified to specify MODULE_SUFFIX="ko ko.xz".</changelog>
<changelog author="toganm@opensuse.org" date="1426248000">- Update to version 4.6.7 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * The 'tunnels' file now supports 'tinc' tunnels.
  * Previously, the SAME action in the mangle file had a fixed
    timeout of 300 seconds (5 minutes). That action now allows
    specification of a different timeout.
  * It is now possible to add or delete addresses from an ipset
    with entries in the mangle file. The ADD and DEL actions have
    the same behavior in the mangle file as they do in the rules
    file.
- Added systemd_version macro in anticipation of detecting the
  correct service file when systemd version is &gt;= 214</changelog>
<changelog author="toganm@opensuse.org" date="1428148800">- Update to version 4.6.8 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * Previously, when the -n option was specified and NetworkManager
    was installed on the target system, the Shorewall-init installer
    would still create
    ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless
    of the setting of $CONFDIR. That has been corrected such that
    the directory
    ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall
    is created instead.
  * Previously, handling of the IPTABLES and IP6TABLES actions in
    the conntrack file was broken. nfw provided a fix on IRC.
  * The Shorewall-core and Shorewall6 installers would previously
    report incorrectly that the product release was not installed.
    Matt Darfeuille provided fixes.</changelog>
<changelog author="toganm@opensuse.org" date="1429012800">- Update to version 4.6.8.1 For more details see changnlog.txt and
  releasenotes.txt
  * Previously, when servicd was installed and there were one or
    more required interfaces, the firewall would fail to start at
    boot.This has been corrected by Tuomo Soini.
  * Some startup logic in lib.cli has been deleted. A bug prevented
    the code from working as intended, so there is no loss of
    functionality resulting from deletion of the code.</changelog>
<changelog author="toganm@opensuse.org" date="1431000000">- Update to version 4.6.9 For more details see changelog.txt and
  releasenotes.txt
  * This release contains defect repair from Shorewall 4.6.8.1 and
    earlier releases.
  * The means for preventing loading of helper modules has been
    clarified in the documentation.
  * The SetEvent and ResetEvent actions previously set/reset the
    event even if the packet did not match the other specified
    columns. This has been corrected.
  * Previously, the 'show capabilities' command was ignoring the
    HELPERS setting. This resulted in unwanted modules being
    autoloaded  and, when the -f option was given, an incorrect
    capabilities file was generated.
  * Previously, when 'wait' was specified for an interface, the
    generated script erroneously checked for required interfaces on
    all commands rather than just start, restart and restore.</changelog>
<changelog author="toganm@opensuse.org" date="1434542400">- Update to version 4.6.10.1 For more details see changelog.txt and
  releasenotes.txt
  * Indentation is now consistent in lib.core (Tuomo Soini).
  * The first problem corrected in 4.6.10 below was incomplete. It
    is now complete (Tuomo Soini).
  * Similarly, the second fix was also incomplete and is now
    completed  (Tuomo Soini).</changelog>
<changelog author="toganm@opensuse.org" date="1436875200">- Update to version 4.6.11 For more details see changelog.txt and
  releasenotes.txt
  * Previously, when the -c option was given to the 'compile'
    command, the progress message "Compiling..." was issued before
    it was determined if compilation was necessary.  Now, that message
    is suppressed when re-compilation is not required.
  * Previously, when the -c option was given to the 'compile'
    command, the 'postcompile' extension script was executed even when
    there was no (re-)compilation. Now, the 'postcompile' script is
    only invoked  when a new script is generated.
  * If CONFDIR was other than /etc, then ordinary users would not
    receive a clear error message when they attempted to execute
    one of the commands that change the firewall state.
  * Previously, IPv4 DHCP client broadcasts were blocked by the
    'rpfilter' interface option. That has been corrected.
  * The 'update' command incorrectly added the INLINE_MATCHES
    option to shorewall6.conf with a default value of 'Yes'. This
    caused 'start' to fail with invalid ip6tables rules when the alternate
    input format using ';' is used.
    Note: This last issue is not documented in the release notes
    included with the release.</changelog>
<changelog author="toganm@opensuse.org" date="1442318400">- Update to version 4.6.13 For more details see changelog.txt and
  realeasenotes.txt
  * The 'rules' file manpages have been corrected regarding the
    packets that are processed by rules in the NEW section.
  * Parsing of IPv6 address ranges has been corrected. Previously,
    use of ranges resulted in 'Invalid IPv6 Address' errors.
  * The shorewall6-hosts man page has been corrected to show the
    proper contents of the HOST(S) column.
  * Previously, INLINE statements in the mangle file were not
    recognized if a chain designator (:F, :P, etc.) followingowed
    INLINE(...). As a consequence, additional matches following
    a semicolon were interpreted as column/value pairs unless
    INLINE_MATCHES=Yes, resulting in compilation failure.
  * Inline matches on IP[6]TABLE rules could be ignored if
    INLINE_MATCHES=No. They are now recognized.
  * Specifying an action with a logging level in one of the
    _DEFAULT options in shorewall[6].conf
    (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error:
    ERROR: Invalid value (:info) for first Reject parameter
    /usr/share/shorewall/action.Rejectect (line 52)
    That has been corrected. Note, however, that specifying logging
    with a default action tends to defeat one of the main purposes
    of default actions which is to suppress logging.
  * Previously, it was necessary to set TC_EXPERT=Yes to have full
    access to the user mark in fw marks. That has been corrected so
    that any place that a mark or mask can be specified, both the
    TC mark and the User mark are accessible.</changelog>
<changelog author="bruno@ioda-net.ch" date="1457265600">- Update to last 4x bugfix version 4.6.13.4
  For details see changelog.txt and releasenotes.txt
  - 4.6.13.4
  * This release includes a couple of additional configure/install
    fixes from Matt Darfeuille.
  * The DROP command was previously rejected in the mangle file.
  That has been corrected.
  - 4.6.13.3
  * Previously, Shorewall6 rejected rules in which the SOURCE
  contained both an interface name and a MAC address (in
  Shorewall format). That defect has been corrected so that such
  rules are now accepted.
  * A number of corrections have been made to the install,
  uninstall and configure scripts (Matt Darfeuille).
  * Previously, optional interfaces were not enabled during 'start'
  and 'restart' unless there was at least one entry in the
  'providers' file.  This resulted in these interfaces not
  appearing in the output of 'shorewall[6] status -i'.
  * The check for use of a circular kernel log buffer (as opposed
  to a log file) has been improved.
  * Previously, if a circular log buffer was being used, the output
  of various commands still displayed '/var/log/messages' as the
  log file. Now, it is displayed as 'logread'.
  * When processing the 'dump' command, the CLI now uses 'netstat'
  to print socket information when the 'ss' utility is not
  installed.
  - 4.6.13.2
  * Previously, if statistical load balancing was used in the
  providers file, the default route in the main table was not
  deleted during firewall start/restart. That route is now
  correctly deleted.
  - 4.6.13.1
  * Previously, the 'reset' command would fail if chain names were
    included. Now, the command succeeds, provided that all of the
    specified chains exist in the filter table.
  * The TCP meta-connection is now supported by the Tinc macro and
    tunnel type. Previously, only the UDP data connection was
    supported.</changelog>
<changelog author="bruno@ioda-net.ch" date="1481112000">- Upgrade to last stable of 5.0.x version 5.0.15
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging :
  + Remove all non suse %if
  + Cleanup older non supported version
  + Remove upstream merged patch
  * 0001-remote_fs.patch
  * 0001-required-stop-fix.patch
  + Remove 0001-fillup-install.patch replaced by specific product
    patch for correct usage of var-fillup
  + Added patches for var-fillup when not specific %name6 is also
    supported
  * shorewall-fillup-install.patch
  * shorewall-init-fillup-install.patch
  * shorewall-lite-fillup-install.patch
  + spec-cleaner minimal</changelog>
<changelog author="bruno@ioda-net.ch" date="1486900800">- Upgrade to stable 5.1.1
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging:
  + use proper %{} syntax
  + Adjust year copyright
  + Remove attr on sbindir symlink
  + Move Samples and Contrib to doc package</changelog>
<changelog author="bruno@ioda-net.ch" date="1489579200">- Upgrade to last stable 5.1.3
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging Redone patches for var-fillup
  + shorewall-fillup-install.patch
  + shorewall-init-fillup-install.patch
  + shorewall-lite-fillup-install.patch</changelog>
<changelog author="bruno@ioda-net.ch" date="1489924800">- Update to last bugfix version 5.1.3.1
  Problems Corrected:
  There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3
  sample config files, which resulted in a compilation error.
  That typo has been corrected.
  There was also a typo in the two-interface IPv4 sample snat file;
  192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has
  been corrected.
  Previously, when processing the policy file, 'all+' was incorrectly
  treated the same as 'all'. That has been corrected so that 'all+'
  causes intra-zone traffic to be included in the policy.</changelog>
<changelog author="bruno@ioda-net.ch" date="1490443200">- Bugfix release 5.1.3.2
  Previously, if a Shorewall Variable (e.g., @chain) was the target
  of a conditional ?RESET directive (one that was enclosed in ?if.
  ?else...?endif logic), the compiler could incorrectly use an
  existing chain created from the action rather than creating a new
  (and different) chain. That has been corrected.
  Previously, if alternate input format specified a column that had
  already been specified, the contents of that column were silently
  overwritten. Now, a warning message is issued stating that the
  prior value has been replaced by the newer value.</changelog>
<changelog author="bruno@ioda-net.ch" date="1497441600">- Bugfix and enhancement release 5.1.4.2
  complete changelog is available
  http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt
- Main changes
  All IPv6 standard actions have been deleted and their logic
  has been added to their IPv4 counterparts who can now handle
  both address families.
  Previously, ?error and ?require messages as well as verbose ?info
  and ?warning messages (those that report the file and line numbers)
  generated from an action file would report the action file name and
  line number rather than the file and line number where the action
  was invoked. The file and line number where the action was invoked
  were listed second. Beginning with this release, the invoking file
  and line number are listed first and the action file and line number
  are not reported. This allows for creation of clearer messages.
  IPv6 UPnP support (including MINIUPNPD) is now available.
  A PERL_HASH_SEED option has been added to allow the Perl hash seed
  to be specified.  See shorewall.conf(5) and perlsec(1) for details.</changelog>
<changelog author="bruno@ioda-net.ch" date="1498046400">- This stable branch 5.1x will be the new default for Leap 42.3.
  Remember that each time you have an upgrade with changes in Major
  or Major,Minor it is mandatory you upgrade your configuration
  with shorewall(6) update -a /etc/shorewall(6) command.
- Packaging : use pretrans and posttrans to inform user about
  configuration upgrade.
- Bugfix release 5.1.4.3. Problem Corrected:
  When running on prior-generation distributions such as RHEL6,
  IPv6 multi-ISP configurations failed to start due to an error
  such as the following:
  ERROR: Command "ip -6 -6 route replace default scope global
    table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1"
    Failed
  Such configurations now start successfully.</changelog>
<changelog author="alarrosa@suse.com" date="1498737600">- Fix a typo in %posttrans that would remove the wrong file and could
  cause a problem depending on the execution order of the %pretrans
  and %posttrans scripts for the shorewall and shorewall6 packages.</changelog>
<changelog author="bruno@ioda-net.ch" date="1499860800">- bugfix release 5.1.4.4
  A defect in 5.1.4.3 caused a startup failure when two or more
  'fallback' providers were configured. That has been corrected.</changelog>
<changelog author="olaf@aepfle.de" date="1502539200">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
<changelog author="bruno@ioda-net.ch" date="1502798400">- Update to bugfix release 5.1.5.2
  + Make build reproducible boo#1047218
  + Fix upgrade from 4x version : dropBcast and dropBcasts are now
    supported boo#1053650
  + Perl 5.26 support
  + Fix for BASIC_FILTERS=Yes and tcfilters
  + Fix USER/GROUP messages
  + MAC address in OUTPUT col in accounting file error is raised
    at compile time
  + Fix port number 0 or &gt; 65535 perl execption</changelog>

</package>
<package pkgid="df6fe10f524af45e9655de5e5522fcb709504fc4c936bab71048acb952b71a80" name="shorewall-lite" arch="noarch">
    <version epoch="0" ver="5.1.5.2" rel="3.1"/>

<changelog author="toganm@opensuse.org" date="1423310400">- Update to version 4.6.6.2 For more details see changelog.txt and
  releasenotes.txt
  * The compiler failed to parse the construct +&lt;ipset&gt;[n] where n is
    an integer (e.g., +bad[2]).
  * Orion Paplawski has provided a patch that adds 'ko.xz' to the
    default MODULE_SUFFIX setting. This change deals with recent
    Fedora releases where the module names now end with ".ko.xz".
    In addition to Orion's patch, the sample configurations have
    been modified to specify MODULE_SUFFIX="ko ko.xz".</changelog>
<changelog author="toganm@opensuse.org" date="1426248000">- Update to version 4.6.7 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * The 'tunnels' file now supports 'tinc' tunnels.
  * Previously, the SAME action in the mangle file had a fixed
    timeout of 300 seconds (5 minutes). That action now allows
    specification of a different timeout.
  * It is now possible to add or delete addresses from an ipset
    with entries in the mangle file. The ADD and DEL actions have
    the same behavior in the mangle file as they do in the rules
    file.
- Added systemd_version macro in anticipation of detecting the
  correct service file when systemd version is &gt;= 214</changelog>
<changelog author="toganm@opensuse.org" date="1428148800">- Update to version 4.6.8 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * Previously, when the -n option was specified and NetworkManager
    was installed on the target system, the Shorewall-init installer
    would still create
    ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless
    of the setting of $CONFDIR. That has been corrected such that
    the directory
    ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall
    is created instead.
  * Previously, handling of the IPTABLES and IP6TABLES actions in
    the conntrack file was broken. nfw provided a fix on IRC.
  * The Shorewall-core and Shorewall6 installers would previously
    report incorrectly that the product release was not installed.
    Matt Darfeuille provided fixes.</changelog>
<changelog author="toganm@opensuse.org" date="1429012800">- Update to version 4.6.8.1 For more details see changnlog.txt and
  releasenotes.txt
  * Previously, when servicd was installed and there were one or
    more required interfaces, the firewall would fail to start at
    boot.This has been corrected by Tuomo Soini.
  * Some startup logic in lib.cli has been deleted. A bug prevented
    the code from working as intended, so there is no loss of
    functionality resulting from deletion of the code.</changelog>
<changelog author="toganm@opensuse.org" date="1431000000">- Update to version 4.6.9 For more details see changelog.txt and
  releasenotes.txt
  * This release contains defect repair from Shorewall 4.6.8.1 and
    earlier releases.
  * The means for preventing loading of helper modules has been
    clarified in the documentation.
  * The SetEvent and ResetEvent actions previously set/reset the
    event even if the packet did not match the other specified
    columns. This has been corrected.
  * Previously, the 'show capabilities' command was ignoring the
    HELPERS setting. This resulted in unwanted modules being
    autoloaded  and, when the -f option was given, an incorrect
    capabilities file was generated.
  * Previously, when 'wait' was specified for an interface, the
    generated script erroneously checked for required interfaces on
    all commands rather than just start, restart and restore.</changelog>
<changelog author="toganm@opensuse.org" date="1434542400">- Update to version 4.6.10.1 For more details see changelog.txt and
  releasenotes.txt
  * Indentation is now consistent in lib.core (Tuomo Soini).
  * The first problem corrected in 4.6.10 below was incomplete. It
    is now complete (Tuomo Soini).
  * Similarly, the second fix was also incomplete and is now
    completed  (Tuomo Soini).</changelog>
<changelog author="toganm@opensuse.org" date="1436875200">- Update to version 4.6.11 For more details see changelog.txt and
  releasenotes.txt
  * Previously, when the -c option was given to the 'compile'
    command, the progress message "Compiling..." was issued before
    it was determined if compilation was necessary.  Now, that message
    is suppressed when re-compilation is not required.
  * Previously, when the -c option was given to the 'compile'
    command, the 'postcompile' extension script was executed even when
    there was no (re-)compilation. Now, the 'postcompile' script is
    only invoked  when a new script is generated.
  * If CONFDIR was other than /etc, then ordinary users would not
    receive a clear error message when they attempted to execute
    one of the commands that change the firewall state.
  * Previously, IPv4 DHCP client broadcasts were blocked by the
    'rpfilter' interface option. That has been corrected.
  * The 'update' command incorrectly added the INLINE_MATCHES
    option to shorewall6.conf with a default value of 'Yes'. This
    caused 'start' to fail with invalid ip6tables rules when the alternate
    input format using ';' is used.
    Note: This last issue is not documented in the release notes
    included with the release.</changelog>
<changelog author="toganm@opensuse.org" date="1442318400">- Update to version 4.6.13 For more details see changelog.txt and
  realeasenotes.txt
  * The 'rules' file manpages have been corrected regarding the
    packets that are processed by rules in the NEW section.
  * Parsing of IPv6 address ranges has been corrected. Previously,
    use of ranges resulted in 'Invalid IPv6 Address' errors.
  * The shorewall6-hosts man page has been corrected to show the
    proper contents of the HOST(S) column.
  * Previously, INLINE statements in the mangle file were not
    recognized if a chain designator (:F, :P, etc.) followingowed
    INLINE(...). As a consequence, additional matches following
    a semicolon were interpreted as column/value pairs unless
    INLINE_MATCHES=Yes, resulting in compilation failure.
  * Inline matches on IP[6]TABLE rules could be ignored if
    INLINE_MATCHES=No. They are now recognized.
  * Specifying an action with a logging level in one of the
    _DEFAULT options in shorewall[6].conf
    (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error:
    ERROR: Invalid value (:info) for first Reject parameter
    /usr/share/shorewall/action.Rejectect (line 52)
    That has been corrected. Note, however, that specifying logging
    with a default action tends to defeat one of the main purposes
    of default actions which is to suppress logging.
  * Previously, it was necessary to set TC_EXPERT=Yes to have full
    access to the user mark in fw marks. That has been corrected so
    that any place that a mark or mask can be specified, both the
    TC mark and the User mark are accessible.</changelog>
<changelog author="bruno@ioda-net.ch" date="1457265600">- Update to last 4x bugfix version 4.6.13.4
  For details see changelog.txt and releasenotes.txt
  - 4.6.13.4
  * This release includes a couple of additional configure/install
    fixes from Matt Darfeuille.
  * The DROP command was previously rejected in the mangle file.
  That has been corrected.
  - 4.6.13.3
  * Previously, Shorewall6 rejected rules in which the SOURCE
  contained both an interface name and a MAC address (in
  Shorewall format). That defect has been corrected so that such
  rules are now accepted.
  * A number of corrections have been made to the install,
  uninstall and configure scripts (Matt Darfeuille).
  * Previously, optional interfaces were not enabled during 'start'
  and 'restart' unless there was at least one entry in the
  'providers' file.  This resulted in these interfaces not
  appearing in the output of 'shorewall[6] status -i'.
  * The check for use of a circular kernel log buffer (as opposed
  to a log file) has been improved.
  * Previously, if a circular log buffer was being used, the output
  of various commands still displayed '/var/log/messages' as the
  log file. Now, it is displayed as 'logread'.
  * When processing the 'dump' command, the CLI now uses 'netstat'
  to print socket information when the 'ss' utility is not
  installed.
  - 4.6.13.2
  * Previously, if statistical load balancing was used in the
  providers file, the default route in the main table was not
  deleted during firewall start/restart. That route is now
  correctly deleted.
  - 4.6.13.1
  * Previously, the 'reset' command would fail if chain names were
    included. Now, the command succeeds, provided that all of the
    specified chains exist in the filter table.
  * The TCP meta-connection is now supported by the Tinc macro and
    tunnel type. Previously, only the UDP data connection was
    supported.</changelog>
<changelog author="bruno@ioda-net.ch" date="1481112000">- Upgrade to last stable of 5.0.x version 5.0.15
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging :
  + Remove all non suse %if
  + Cleanup older non supported version
  + Remove upstream merged patch
  * 0001-remote_fs.patch
  * 0001-required-stop-fix.patch
  + Remove 0001-fillup-install.patch replaced by specific product
    patch for correct usage of var-fillup
  + Added patches for var-fillup when not specific %name6 is also
    supported
  * shorewall-fillup-install.patch
  * shorewall-init-fillup-install.patch
  * shorewall-lite-fillup-install.patch
  + spec-cleaner minimal</changelog>
<changelog author="bruno@ioda-net.ch" date="1486900800">- Upgrade to stable 5.1.1
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging:
  + use proper %{} syntax
  + Adjust year copyright
  + Remove attr on sbindir symlink
  + Move Samples and Contrib to doc package</changelog>
<changelog author="bruno@ioda-net.ch" date="1489579200">- Upgrade to last stable 5.1.3
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging Redone patches for var-fillup
  + shorewall-fillup-install.patch
  + shorewall-init-fillup-install.patch
  + shorewall-lite-fillup-install.patch</changelog>
<changelog author="bruno@ioda-net.ch" date="1489924800">- Update to last bugfix version 5.1.3.1
  Problems Corrected:
  There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3
  sample config files, which resulted in a compilation error.
  That typo has been corrected.
  There was also a typo in the two-interface IPv4 sample snat file;
  192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has
  been corrected.
  Previously, when processing the policy file, 'all+' was incorrectly
  treated the same as 'all'. That has been corrected so that 'all+'
  causes intra-zone traffic to be included in the policy.</changelog>
<changelog author="bruno@ioda-net.ch" date="1490443200">- Bugfix release 5.1.3.2
  Previously, if a Shorewall Variable (e.g., @chain) was the target
  of a conditional ?RESET directive (one that was enclosed in ?if.
  ?else...?endif logic), the compiler could incorrectly use an
  existing chain created from the action rather than creating a new
  (and different) chain. That has been corrected.
  Previously, if alternate input format specified a column that had
  already been specified, the contents of that column were silently
  overwritten. Now, a warning message is issued stating that the
  prior value has been replaced by the newer value.</changelog>
<changelog author="bruno@ioda-net.ch" date="1497441600">- Bugfix and enhancement release 5.1.4.2
  complete changelog is available
  http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt
- Main changes
  All IPv6 standard actions have been deleted and their logic
  has been added to their IPv4 counterparts who can now handle
  both address families.
  Previously, ?error and ?require messages as well as verbose ?info
  and ?warning messages (those that report the file and line numbers)
  generated from an action file would report the action file name and
  line number rather than the file and line number where the action
  was invoked. The file and line number where the action was invoked
  were listed second. Beginning with this release, the invoking file
  and line number are listed first and the action file and line number
  are not reported. This allows for creation of clearer messages.
  IPv6 UPnP support (including MINIUPNPD) is now available.
  A PERL_HASH_SEED option has been added to allow the Perl hash seed
  to be specified.  See shorewall.conf(5) and perlsec(1) for details.</changelog>
<changelog author="bruno@ioda-net.ch" date="1498046400">- This stable branch 5.1x will be the new default for Leap 42.3.
  Remember that each time you have an upgrade with changes in Major
  or Major,Minor it is mandatory you upgrade your configuration
  with shorewall(6) update -a /etc/shorewall(6) command.
- Packaging : use pretrans and posttrans to inform user about
  configuration upgrade.
- Bugfix release 5.1.4.3. Problem Corrected:
  When running on prior-generation distributions such as RHEL6,
  IPv6 multi-ISP configurations failed to start due to an error
  such as the following:
  ERROR: Command "ip -6 -6 route replace default scope global
    table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1"
    Failed
  Such configurations now start successfully.</changelog>
<changelog author="alarrosa@suse.com" date="1498737600">- Fix a typo in %posttrans that would remove the wrong file and could
  cause a problem depending on the execution order of the %pretrans
  and %posttrans scripts for the shorewall and shorewall6 packages.</changelog>
<changelog author="bruno@ioda-net.ch" date="1499860800">- bugfix release 5.1.4.4
  A defect in 5.1.4.3 caused a startup failure when two or more
  'fallback' providers were configured. That has been corrected.</changelog>
<changelog author="olaf@aepfle.de" date="1502539200">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
<changelog author="bruno@ioda-net.ch" date="1502798400">- Update to bugfix release 5.1.5.2
  + Make build reproducible boo#1047218
  + Fix upgrade from 4x version : dropBcast and dropBcasts are now
    supported boo#1053650
  + Perl 5.26 support
  + Fix for BASIC_FILTERS=Yes and tcfilters
  + Fix USER/GROUP messages
  + MAC address in OUTPUT col in accounting file error is raised
    at compile time
  + Fix port number 0 or &gt; 65535 perl execption</changelog>

</package>
<package pkgid="24475a78c83d8414f98f320339e10bbcad25b5c3a2fc135cbb3f26acd405a910" name="shorewall6" arch="noarch">
    <version epoch="0" ver="5.1.5.2" rel="3.1"/>

<changelog author="toganm@opensuse.org" date="1423310400">- Update to version 4.6.6.2 For more details see changelog.txt and
  releasenotes.txt
  * The compiler failed to parse the construct +&lt;ipset&gt;[n] where n is
    an integer (e.g., +bad[2]).
  * Orion Paplawski has provided a patch that adds 'ko.xz' to the
    default MODULE_SUFFIX setting. This change deals with recent
    Fedora releases where the module names now end with ".ko.xz".
    In addition to Orion's patch, the sample configurations have
    been modified to specify MODULE_SUFFIX="ko ko.xz".</changelog>
<changelog author="toganm@opensuse.org" date="1426248000">- Update to version 4.6.7 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * The 'tunnels' file now supports 'tinc' tunnels.
  * Previously, the SAME action in the mangle file had a fixed
    timeout of 300 seconds (5 minutes). That action now allows
    specification of a different timeout.
  * It is now possible to add or delete addresses from an ipset
    with entries in the mangle file. The ADD and DEL actions have
    the same behavior in the mangle file as they do in the rules
    file.
- Added systemd_version macro in anticipation of detecting the
  correct service file when systemd version is &gt;= 214</changelog>
<changelog author="toganm@opensuse.org" date="1428148800">- Update to version 4.6.8 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * Previously, when the -n option was specified and NetworkManager
    was installed on the target system, the Shorewall-init installer
    would still create
    ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless
    of the setting of $CONFDIR. That has been corrected such that
    the directory
    ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall
    is created instead.
  * Previously, handling of the IPTABLES and IP6TABLES actions in
    the conntrack file was broken. nfw provided a fix on IRC.
  * The Shorewall-core and Shorewall6 installers would previously
    report incorrectly that the product release was not installed.
    Matt Darfeuille provided fixes.</changelog>
<changelog author="toganm@opensuse.org" date="1429012800">- Update to version 4.6.8.1 For more details see changnlog.txt and
  releasenotes.txt
  * Previously, when servicd was installed and there were one or
    more required interfaces, the firewall would fail to start at
    boot.This has been corrected by Tuomo Soini.
  * Some startup logic in lib.cli has been deleted. A bug prevented
    the code from working as intended, so there is no loss of
    functionality resulting from deletion of the code.</changelog>
<changelog author="toganm@opensuse.org" date="1431000000">- Update to version 4.6.9 For more details see changelog.txt and
  releasenotes.txt
  * This release contains defect repair from Shorewall 4.6.8.1 and
    earlier releases.
  * The means for preventing loading of helper modules has been
    clarified in the documentation.
  * The SetEvent and ResetEvent actions previously set/reset the
    event even if the packet did not match the other specified
    columns. This has been corrected.
  * Previously, the 'show capabilities' command was ignoring the
    HELPERS setting. This resulted in unwanted modules being
    autoloaded  and, when the -f option was given, an incorrect
    capabilities file was generated.
  * Previously, when 'wait' was specified for an interface, the
    generated script erroneously checked for required interfaces on
    all commands rather than just start, restart and restore.</changelog>
<changelog author="toganm@opensuse.org" date="1434542400">- Update to version 4.6.10.1 For more details see changelog.txt and
  releasenotes.txt
  * Indentation is now consistent in lib.core (Tuomo Soini).
  * The first problem corrected in 4.6.10 below was incomplete. It
    is now complete (Tuomo Soini).
  * Similarly, the second fix was also incomplete and is now
    completed  (Tuomo Soini).</changelog>
<changelog author="toganm@opensuse.org" date="1436875200">- Update to version 4.6.11 For more details see changelog.txt and
  releasenotes.txt
  * Previously, when the -c option was given to the 'compile'
    command, the progress message "Compiling..." was issued before
    it was determined if compilation was necessary.  Now, that message
    is suppressed when re-compilation is not required.
  * Previously, when the -c option was given to the 'compile'
    command, the 'postcompile' extension script was executed even when
    there was no (re-)compilation. Now, the 'postcompile' script is
    only invoked  when a new script is generated.
  * If CONFDIR was other than /etc, then ordinary users would not
    receive a clear error message when they attempted to execute
    one of the commands that change the firewall state.
  * Previously, IPv4 DHCP client broadcasts were blocked by the
    'rpfilter' interface option. That has been corrected.
  * The 'update' command incorrectly added the INLINE_MATCHES
    option to shorewall6.conf with a default value of 'Yes'. This
    caused 'start' to fail with invalid ip6tables rules when the alternate
    input format using ';' is used.
    Note: This last issue is not documented in the release notes
    included with the release.</changelog>
<changelog author="toganm@opensuse.org" date="1442318400">- Update to version 4.6.13 For more details see changelog.txt and
  realeasenotes.txt
  * The 'rules' file manpages have been corrected regarding the
    packets that are processed by rules in the NEW section.
  * Parsing of IPv6 address ranges has been corrected. Previously,
    use of ranges resulted in 'Invalid IPv6 Address' errors.
  * The shorewall6-hosts man page has been corrected to show the
    proper contents of the HOST(S) column.
  * Previously, INLINE statements in the mangle file were not
    recognized if a chain designator (:F, :P, etc.) followingowed
    INLINE(...). As a consequence, additional matches following
    a semicolon were interpreted as column/value pairs unless
    INLINE_MATCHES=Yes, resulting in compilation failure.
  * Inline matches on IP[6]TABLE rules could be ignored if
    INLINE_MATCHES=No. They are now recognized.
  * Specifying an action with a logging level in one of the
    _DEFAULT options in shorewall[6].conf
    (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error:
    ERROR: Invalid value (:info) for first Reject parameter
    /usr/share/shorewall/action.Rejectect (line 52)
    That has been corrected. Note, however, that specifying logging
    with a default action tends to defeat one of the main purposes
    of default actions which is to suppress logging.
  * Previously, it was necessary to set TC_EXPERT=Yes to have full
    access to the user mark in fw marks. That has been corrected so
    that any place that a mark or mask can be specified, both the
    TC mark and the User mark are accessible.</changelog>
<changelog author="bruno@ioda-net.ch" date="1457265600">- Update to last 4x bugfix version 4.6.13.4
  For details see changelog.txt and releasenotes.txt
  - 4.6.13.4
  * This release includes a couple of additional configure/install
    fixes from Matt Darfeuille.
  * The DROP command was previously rejected in the mangle file.
  That has been corrected.
  - 4.6.13.3
  * Previously, Shorewall6 rejected rules in which the SOURCE
  contained both an interface name and a MAC address (in
  Shorewall format). That defect has been corrected so that such
  rules are now accepted.
  * A number of corrections have been made to the install,
  uninstall and configure scripts (Matt Darfeuille).
  * Previously, optional interfaces were not enabled during 'start'
  and 'restart' unless there was at least one entry in the
  'providers' file.  This resulted in these interfaces not
  appearing in the output of 'shorewall[6] status -i'.
  * The check for use of a circular kernel log buffer (as opposed
  to a log file) has been improved.
  * Previously, if a circular log buffer was being used, the output
  of various commands still displayed '/var/log/messages' as the
  log file. Now, it is displayed as 'logread'.
  * When processing the 'dump' command, the CLI now uses 'netstat'
  to print socket information when the 'ss' utility is not
  installed.
  - 4.6.13.2
  * Previously, if statistical load balancing was used in the
  providers file, the default route in the main table was not
  deleted during firewall start/restart. That route is now
  correctly deleted.
  - 4.6.13.1
  * Previously, the 'reset' command would fail if chain names were
    included. Now, the command succeeds, provided that all of the
    specified chains exist in the filter table.
  * The TCP meta-connection is now supported by the Tinc macro and
    tunnel type. Previously, only the UDP data connection was
    supported.</changelog>
<changelog author="bruno@ioda-net.ch" date="1481112000">- Upgrade to last stable of 5.0.x version 5.0.15
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging :
  + Remove all non suse %if
  + Cleanup older non supported version
  + Remove upstream merged patch
  * 0001-remote_fs.patch
  * 0001-required-stop-fix.patch
  + Remove 0001-fillup-install.patch replaced by specific product
    patch for correct usage of var-fillup
  + Added patches for var-fillup when not specific %name6 is also
    supported
  * shorewall-fillup-install.patch
  * shorewall-init-fillup-install.patch
  * shorewall-lite-fillup-install.patch
  + spec-cleaner minimal</changelog>
<changelog author="bruno@ioda-net.ch" date="1486900800">- Upgrade to stable 5.1.1
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging:
  + use proper %{} syntax
  + Adjust year copyright
  + Remove attr on sbindir symlink
  + Move Samples and Contrib to doc package</changelog>
<changelog author="bruno@ioda-net.ch" date="1489579200">- Upgrade to last stable 5.1.3
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging Redone patches for var-fillup
  + shorewall-fillup-install.patch
  + shorewall-init-fillup-install.patch
  + shorewall-lite-fillup-install.patch</changelog>
<changelog author="bruno@ioda-net.ch" date="1489924800">- Update to last bugfix version 5.1.3.1
  Problems Corrected:
  There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3
  sample config files, which resulted in a compilation error.
  That typo has been corrected.
  There was also a typo in the two-interface IPv4 sample snat file;
  192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has
  been corrected.
  Previously, when processing the policy file, 'all+' was incorrectly
  treated the same as 'all'. That has been corrected so that 'all+'
  causes intra-zone traffic to be included in the policy.</changelog>
<changelog author="bruno@ioda-net.ch" date="1490443200">- Bugfix release 5.1.3.2
  Previously, if a Shorewall Variable (e.g., @chain) was the target
  of a conditional ?RESET directive (one that was enclosed in ?if.
  ?else...?endif logic), the compiler could incorrectly use an
  existing chain created from the action rather than creating a new
  (and different) chain. That has been corrected.
  Previously, if alternate input format specified a column that had
  already been specified, the contents of that column were silently
  overwritten. Now, a warning message is issued stating that the
  prior value has been replaced by the newer value.</changelog>
<changelog author="bruno@ioda-net.ch" date="1497441600">- Bugfix and enhancement release 5.1.4.2
  complete changelog is available
  http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt
- Main changes
  All IPv6 standard actions have been deleted and their logic
  has been added to their IPv4 counterparts who can now handle
  both address families.
  Previously, ?error and ?require messages as well as verbose ?info
  and ?warning messages (those that report the file and line numbers)
  generated from an action file would report the action file name and
  line number rather than the file and line number where the action
  was invoked. The file and line number where the action was invoked
  were listed second. Beginning with this release, the invoking file
  and line number are listed first and the action file and line number
  are not reported. This allows for creation of clearer messages.
  IPv6 UPnP support (including MINIUPNPD) is now available.
  A PERL_HASH_SEED option has been added to allow the Perl hash seed
  to be specified.  See shorewall.conf(5) and perlsec(1) for details.</changelog>
<changelog author="bruno@ioda-net.ch" date="1498046400">- This stable branch 5.1x will be the new default for Leap 42.3.
  Remember that each time you have an upgrade with changes in Major
  or Major,Minor it is mandatory you upgrade your configuration
  with shorewall(6) update -a /etc/shorewall(6) command.
- Packaging : use pretrans and posttrans to inform user about
  configuration upgrade.
- Bugfix release 5.1.4.3. Problem Corrected:
  When running on prior-generation distributions such as RHEL6,
  IPv6 multi-ISP configurations failed to start due to an error
  such as the following:
  ERROR: Command "ip -6 -6 route replace default scope global
    table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1"
    Failed
  Such configurations now start successfully.</changelog>
<changelog author="alarrosa@suse.com" date="1498737600">- Fix a typo in %posttrans that would remove the wrong file and could
  cause a problem depending on the execution order of the %pretrans
  and %posttrans scripts for the shorewall and shorewall6 packages.</changelog>
<changelog author="bruno@ioda-net.ch" date="1499860800">- bugfix release 5.1.4.4
  A defect in 5.1.4.3 caused a startup failure when two or more
  'fallback' providers were configured. That has been corrected.</changelog>
<changelog author="olaf@aepfle.de" date="1502539200">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
<changelog author="bruno@ioda-net.ch" date="1502798400">- Update to bugfix release 5.1.5.2
  + Make build reproducible boo#1047218
  + Fix upgrade from 4x version : dropBcast and dropBcasts are now
    supported boo#1053650
  + Perl 5.26 support
  + Fix for BASIC_FILTERS=Yes and tcfilters
  + Fix USER/GROUP messages
  + MAC address in OUTPUT col in accounting file error is raised
    at compile time
  + Fix port number 0 or &gt; 65535 perl execption</changelog>

</package>
<package pkgid="4464c62f6ef4e42d95638a96bdef11ee22fc73879bcc23190ba98b3856b19ac9" name="shorewall6-lite" arch="noarch">
    <version epoch="0" ver="5.1.5.2" rel="3.1"/>

<changelog author="toganm@opensuse.org" date="1423310400">- Update to version 4.6.6.2 For more details see changelog.txt and
  releasenotes.txt
  * The compiler failed to parse the construct +&lt;ipset&gt;[n] where n is
    an integer (e.g., +bad[2]).
  * Orion Paplawski has provided a patch that adds 'ko.xz' to the
    default MODULE_SUFFIX setting. This change deals with recent
    Fedora releases where the module names now end with ".ko.xz".
    In addition to Orion's patch, the sample configurations have
    been modified to specify MODULE_SUFFIX="ko ko.xz".</changelog>
<changelog author="toganm@opensuse.org" date="1426248000">- Update to version 4.6.7 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * The 'tunnels' file now supports 'tinc' tunnels.
  * Previously, the SAME action in the mangle file had a fixed
    timeout of 300 seconds (5 minutes). That action now allows
    specification of a different timeout.
  * It is now possible to add or delete addresses from an ipset
    with entries in the mangle file. The ADD and DEL actions have
    the same behavior in the mangle file as they do in the rules
    file.
- Added systemd_version macro in anticipation of detecting the
  correct service file when systemd version is &gt;= 214</changelog>
<changelog author="toganm@opensuse.org" date="1428148800">- Update to version 4.6.8 For more details see changelog.txt and
  releasenotes.txt
  * This release includes defect repair from Shorewall 4.6.6.2 and
    earlier releases.
  * Previously, when the -n option was specified and NetworkManager
    was installed on the target system, the Shorewall-init installer
    would still create
    ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless
    of the setting of $CONFDIR. That has been corrected such that
    the directory
    ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall
    is created instead.
  * Previously, handling of the IPTABLES and IP6TABLES actions in
    the conntrack file was broken. nfw provided a fix on IRC.
  * The Shorewall-core and Shorewall6 installers would previously
    report incorrectly that the product release was not installed.
    Matt Darfeuille provided fixes.</changelog>
<changelog author="toganm@opensuse.org" date="1429012800">- Update to version 4.6.8.1 For more details see changnlog.txt and
  releasenotes.txt
  * Previously, when servicd was installed and there were one or
    more required interfaces, the firewall would fail to start at
    boot.This has been corrected by Tuomo Soini.
  * Some startup logic in lib.cli has been deleted. A bug prevented
    the code from working as intended, so there is no loss of
    functionality resulting from deletion of the code.</changelog>
<changelog author="toganm@opensuse.org" date="1431000000">- Update to version 4.6.9 For more details see changelog.txt and
  releasenotes.txt
  * This release contains defect repair from Shorewall 4.6.8.1 and
    earlier releases.
  * The means for preventing loading of helper modules has been
    clarified in the documentation.
  * The SetEvent and ResetEvent actions previously set/reset the
    event even if the packet did not match the other specified
    columns. This has been corrected.
  * Previously, the 'show capabilities' command was ignoring the
    HELPERS setting. This resulted in unwanted modules being
    autoloaded  and, when the -f option was given, an incorrect
    capabilities file was generated.
  * Previously, when 'wait' was specified for an interface, the
    generated script erroneously checked for required interfaces on
    all commands rather than just start, restart and restore.</changelog>
<changelog author="toganm@opensuse.org" date="1434542400">- Update to version 4.6.10.1 For more details see changelog.txt and
  releasenotes.txt
  * Indentation is now consistent in lib.core (Tuomo Soini).
  * The first problem corrected in 4.6.10 below was incomplete. It
    is now complete (Tuomo Soini).
  * Similarly, the second fix was also incomplete and is now
    completed  (Tuomo Soini).</changelog>
<changelog author="toganm@opensuse.org" date="1436875200">- Update to version 4.6.11 For more details see changelog.txt and
  releasenotes.txt
  * Previously, when the -c option was given to the 'compile'
    command, the progress message "Compiling..." was issued before
    it was determined if compilation was necessary.  Now, that message
    is suppressed when re-compilation is not required.
  * Previously, when the -c option was given to the 'compile'
    command, the 'postcompile' extension script was executed even when
    there was no (re-)compilation. Now, the 'postcompile' script is
    only invoked  when a new script is generated.
  * If CONFDIR was other than /etc, then ordinary users would not
    receive a clear error message when they attempted to execute
    one of the commands that change the firewall state.
  * Previously, IPv4 DHCP client broadcasts were blocked by the
    'rpfilter' interface option. That has been corrected.
  * The 'update' command incorrectly added the INLINE_MATCHES
    option to shorewall6.conf with a default value of 'Yes'. This
    caused 'start' to fail with invalid ip6tables rules when the alternate
    input format using ';' is used.
    Note: This last issue is not documented in the release notes
    included with the release.</changelog>
<changelog author="toganm@opensuse.org" date="1442318400">- Update to version 4.6.13 For more details see changelog.txt and
  realeasenotes.txt
  * The 'rules' file manpages have been corrected regarding the
    packets that are processed by rules in the NEW section.
  * Parsing of IPv6 address ranges has been corrected. Previously,
    use of ranges resulted in 'Invalid IPv6 Address' errors.
  * The shorewall6-hosts man page has been corrected to show the
    proper contents of the HOST(S) column.
  * Previously, INLINE statements in the mangle file were not
    recognized if a chain designator (:F, :P, etc.) followingowed
    INLINE(...). As a consequence, additional matches following
    a semicolon were interpreted as column/value pairs unless
    INLINE_MATCHES=Yes, resulting in compilation failure.
  * Inline matches on IP[6]TABLE rules could be ignored if
    INLINE_MATCHES=No. They are now recognized.
  * Specifying an action with a logging level in one of the
    _DEFAULT options in shorewall[6].conf
    (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error:
    ERROR: Invalid value (:info) for first Reject parameter
    /usr/share/shorewall/action.Rejectect (line 52)
    That has been corrected. Note, however, that specifying logging
    with a default action tends to defeat one of the main purposes
    of default actions which is to suppress logging.
  * Previously, it was necessary to set TC_EXPERT=Yes to have full
    access to the user mark in fw marks. That has been corrected so
    that any place that a mark or mask can be specified, both the
    TC mark and the User mark are accessible.</changelog>
<changelog author="bruno@ioda-net.ch" date="1457265600">- Update to last 4x bugfix version 4.6.13.4
  For details see changelog.txt and releasenotes.txt
  - 4.6.13.4
  * This release includes a couple of additional configure/install
    fixes from Matt Darfeuille.
  * The DROP command was previously rejected in the mangle file.
  That has been corrected.
  - 4.6.13.3
  * Previously, Shorewall6 rejected rules in which the SOURCE
  contained both an interface name and a MAC address (in
  Shorewall format). That defect has been corrected so that such
  rules are now accepted.
  * A number of corrections have been made to the install,
  uninstall and configure scripts (Matt Darfeuille).
  * Previously, optional interfaces were not enabled during 'start'
  and 'restart' unless there was at least one entry in the
  'providers' file.  This resulted in these interfaces not
  appearing in the output of 'shorewall[6] status -i'.
  * The check for use of a circular kernel log buffer (as opposed
  to a log file) has been improved.
  * Previously, if a circular log buffer was being used, the output
  of various commands still displayed '/var/log/messages' as the
  log file. Now, it is displayed as 'logread'.
  * When processing the 'dump' command, the CLI now uses 'netstat'
  to print socket information when the 'ss' utility is not
  installed.
  - 4.6.13.2
  * Previously, if statistical load balancing was used in the
  providers file, the default route in the main table was not
  deleted during firewall start/restart. That route is now
  correctly deleted.
  - 4.6.13.1
  * Previously, the 'reset' command would fail if chain names were
    included. Now, the command succeeds, provided that all of the
    specified chains exist in the filter table.
  * The TCP meta-connection is now supported by the Tinc macro and
    tunnel type. Previously, only the UDP data connection was
    supported.</changelog>
<changelog author="bruno@ioda-net.ch" date="1481112000">- Upgrade to last stable of 5.0.x version 5.0.15
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging :
  + Remove all non suse %if
  + Cleanup older non supported version
  + Remove upstream merged patch
  * 0001-remote_fs.patch
  * 0001-required-stop-fix.patch
  + Remove 0001-fillup-install.patch replaced by specific product
    patch for correct usage of var-fillup
  + Added patches for var-fillup when not specific %name6 is also
    supported
  * shorewall-fillup-install.patch
  * shorewall-init-fillup-install.patch
  * shorewall-lite-fillup-install.patch
  + spec-cleaner minimal</changelog>
<changelog author="bruno@ioda-net.ch" date="1486900800">- Upgrade to stable 5.1.1
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging:
  + use proper %{} syntax
  + Adjust year copyright
  + Remove attr on sbindir symlink
  + Move Samples and Contrib to doc package</changelog>
<changelog author="bruno@ioda-net.ch" date="1489579200">- Upgrade to last stable 5.1.3
  For details see changelog.txt and releasenotes.txt containing all
  informations for a correct upgrade path.
- Packaging Redone patches for var-fillup
  + shorewall-fillup-install.patch
  + shorewall-init-fillup-install.patch
  + shorewall-lite-fillup-install.patch</changelog>
<changelog author="bruno@ioda-net.ch" date="1489924800">- Update to last bugfix version 5.1.3.1
  Problems Corrected:
  There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3
  sample config files, which resulted in a compilation error.
  That typo has been corrected.
  There was also a typo in the two-interface IPv4 sample snat file;
  192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has
  been corrected.
  Previously, when processing the policy file, 'all+' was incorrectly
  treated the same as 'all'. That has been corrected so that 'all+'
  causes intra-zone traffic to be included in the policy.</changelog>
<changelog author="bruno@ioda-net.ch" date="1490443200">- Bugfix release 5.1.3.2
  Previously, if a Shorewall Variable (e.g., @chain) was the target
  of a conditional ?RESET directive (one that was enclosed in ?if.
  ?else...?endif logic), the compiler could incorrectly use an
  existing chain created from the action rather than creating a new
  (and different) chain. That has been corrected.
  Previously, if alternate input format specified a column that had
  already been specified, the contents of that column were silently
  overwritten. Now, a warning message is issued stating that the
  prior value has been replaced by the newer value.</changelog>
<changelog author="bruno@ioda-net.ch" date="1497441600">- Bugfix and enhancement release 5.1.4.2
  complete changelog is available
  http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt
- Main changes
  All IPv6 standard actions have been deleted and their logic
  has been added to their IPv4 counterparts who can now handle
  both address families.
  Previously, ?error and ?require messages as well as verbose ?info
  and ?warning messages (those that report the file and line numbers)
  generated from an action file would report the action file name and
  line number rather than the file and line number where the action
  was invoked. The file and line number where the action was invoked
  were listed second. Beginning with this release, the invoking file
  and line number are listed first and the action file and line number
  are not reported. This allows for creation of clearer messages.
  IPv6 UPnP support (including MINIUPNPD) is now available.
  A PERL_HASH_SEED option has been added to allow the Perl hash seed
  to be specified.  See shorewall.conf(5) and perlsec(1) for details.</changelog>
<changelog author="bruno@ioda-net.ch" date="1498046400">- This stable branch 5.1x will be the new default for Leap 42.3.
  Remember that each time you have an upgrade with changes in Major
  or Major,Minor it is mandatory you upgrade your configuration
  with shorewall(6) update -a /etc/shorewall(6) command.
- Packaging : use pretrans and posttrans to inform user about
  configuration upgrade.
- Bugfix release 5.1.4.3. Problem Corrected:
  When running on prior-generation distributions such as RHEL6,
  IPv6 multi-ISP configurations failed to start due to an error
  such as the following:
  ERROR: Command "ip -6 -6 route replace default scope global
    table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1"
    Failed
  Such configurations now start successfully.</changelog>
<changelog author="alarrosa@suse.com" date="1498737600">- Fix a typo in %posttrans that would remove the wrong file and could
  cause a problem depending on the execution order of the %pretrans
  and %posttrans scripts for the shorewall and shorewall6 packages.</changelog>
<changelog author="bruno@ioda-net.ch" date="1499860800">- bugfix release 5.1.4.4
  A defect in 5.1.4.3 caused a startup failure when two or more
  'fallback' providers were configured. That has been corrected.</changelog>
<changelog author="olaf@aepfle.de" date="1502539200">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
<changelog author="bruno@ioda-net.ch" date="1502798400">- Update to bugfix release 5.1.5.2
  + Make build reproducible boo#1047218
  + Fix upgrade from 4x version : dropBcast and dropBcasts are now
    supported boo#1053650
  + Perl 5.26 support
  + Fix for BASIC_FILTERS=Yes and tcfilters
  + Fix USER/GROUP messages
  + MAC address in OUTPUT col in accounting file error is raised
    at compile time
  + Fix port number 0 or &gt; 65535 perl execption</changelog>

</package>
<package pkgid="92c7f2c5d509177fc327cf9e7b28a21393064ab9ef16a2a858a82b846bb38ef7" name="shotwell" arch="src">
    <version epoch="0" ver="0.22.0+git.20160103" rel="11.1"/>

<changelog author="dimstar@opensuse.org" date="1391601600">- Update to version 0.17.0:
  + Include parent folder names for keyword search.
  + Tumblr publishing fixed.
  + Bug fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 0.17.1:
  + Parent folder names as search keywords rolled back
    (bgo#722756).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1393934400">- Update to version 0.17.2:
  + UNIX pipe unnecessarily left open for each imported video.
  + Improved searching for event comments and diacritics.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1395230400">- Update to version 0.18.0:
  + Compile and install translated help files.
  + Updated translations.
- Add pkgconfig(gnome-doc-utils) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1404302400">- Update to version 0.18.1:
  + Fix Flickr publishing errors due to Flickr moving to HTTPs-only.
  + Fix crash when updating photo data/time.
  + Fix crash due to nested tag and changing sidebar selection.
  + Corrected URLs to point to new gnome.org pages.</changelog>
<changelog author="mgorse@suse.com" date="1406116800">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348 bgo#732964).</changelog>
<changelog author="mgorse@suse.com" date="1406116801">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348, bgo#732964).</changelog>
<changelog author="dimstar@opensuse.org" date="1406203200">- Add shotwell-vala.patch: Fix build with vala 0.25.1 (bgo#733650).</changelog>
<changelog author="dimstar@opensuse.org" date="1408708800">- Update to version 0.19.0:
  + Support for Rajce.net and Gallery 3 photo services added.
  + Set background image for lock screen.
  + Better detection of corrupt images during import.
  + Various bug fixes.
  + Updated translations.
- Drop upstream fixed patches shotwell-vala.patch and
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1411214400">- Update to version 0.20.0:
  + Fix crash when deleting a photo in Shotwell Photo Viewer.
  + Fix crash when deleting a photo.
  + Better detection of corrupt files while importing.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1412337600">- Update to version 0.20.1:
  + Correct problems with navigating photos in full-screen mode
    (bgo#737092).
  + Better memory utilization via more conservative pixbuf cache
    (bgo#715198).
  + Fixes minor bugs detected by better Vala code analysis.</changelog>
<changelog author="mgorse@suse.com" date="1412769600">- Add
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  Fix a crash when updating the date/time of a photo (bnc#899715).</changelog>
<changelog author="zaitor@opensuse.org" date="1414756800">- Update to version 0.20.2:
  + Set Desktop Slideshow dialog resource now included in
    distribution (bgo#739095).
  + Check for rendering failure in video thumbnailer (bgo#738245).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1422964800">- Update to version 0.21.0:
  + User interface refresh (bgo#742326, bgo#742443).
  + Fix Shotwell Viewer .desktop file (bgo#743799).
  + Natural sorting of photo titles (bgo#717960).
  + Improved video thumbnailer (bgo#739396, bgo#741821).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 0.22.0:
  + Improved metadata support for Facebook upload (bgo#742163).
  + Saved search now properly supports text is-set, not-set
    (bgo#743924, bgo#743923).
  + Import title, exposure time when available.
  + User interface improvements (bgo#744291, bgo#719284, more).
  + Sort photos by filename (bgo#717878).
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1440763200">- Add 0001-Shotwell-flickr-api-change-fix.patch
  Flickr's API has gone to HTTPS only, this patch backport upstream fix for it.
  (bnc#943559 bgo#732432)</changelog>
<changelog author="dimstar@opensuse.org" date="1452081600">- Update to version 0.22.0+git.20160103 (based on source service):
  + Port to webkit2gtk-4.0.
  + Don't pack webview into a scrolled window.
  + Have all soup sessions validate TLS certificates (boo#958382).
  + facebook: Don't disable XSS auditor.
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-4.0), following upstreams port to WebKit2.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Shotwell-flickr-api-change-fix.patch and
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  fixed upstream.</changelog>
<changelog author="mgorse@suse.com" date="1495627200">- add shotwell-facebook-id.patch: update Facebook id (bsc#943556
  bgo#748991).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499169600">- Add shotwell-service-selector-null.patch: Check that a widget
  isn't NULL before using it. (bsc#1040047 bgo#783250)</changelog>

</package>
<package pkgid="25aa807c15a344ec82e67fba37791aa072cf61e5fe4bcf51a70dab10be1236f3" name="shotwell" arch="x86_64">
    <version epoch="0" ver="0.22.0+git.20160103" rel="11.1"/>

<changelog author="dimstar@opensuse.org" date="1391601600">- Update to version 0.17.0:
  + Include parent folder names for keyword search.
  + Tumblr publishing fixed.
  + Bug fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 0.17.1:
  + Parent folder names as search keywords rolled back
    (bgo#722756).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1393934400">- Update to version 0.17.2:
  + UNIX pipe unnecessarily left open for each imported video.
  + Improved searching for event comments and diacritics.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1395230400">- Update to version 0.18.0:
  + Compile and install translated help files.
  + Updated translations.
- Add pkgconfig(gnome-doc-utils) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1404302400">- Update to version 0.18.1:
  + Fix Flickr publishing errors due to Flickr moving to HTTPs-only.
  + Fix crash when updating photo data/time.
  + Fix crash due to nested tag and changing sidebar selection.
  + Corrected URLs to point to new gnome.org pages.</changelog>
<changelog author="mgorse@suse.com" date="1406116800">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348 bgo#732964).</changelog>
<changelog author="mgorse@suse.com" date="1406116801">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348, bgo#732964).</changelog>
<changelog author="dimstar@opensuse.org" date="1406203200">- Add shotwell-vala.patch: Fix build with vala 0.25.1 (bgo#733650).</changelog>
<changelog author="dimstar@opensuse.org" date="1408708800">- Update to version 0.19.0:
  + Support for Rajce.net and Gallery 3 photo services added.
  + Set background image for lock screen.
  + Better detection of corrupt images during import.
  + Various bug fixes.
  + Updated translations.
- Drop upstream fixed patches shotwell-vala.patch and
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1411214400">- Update to version 0.20.0:
  + Fix crash when deleting a photo in Shotwell Photo Viewer.
  + Fix crash when deleting a photo.
  + Better detection of corrupt files while importing.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1412337600">- Update to version 0.20.1:
  + Correct problems with navigating photos in full-screen mode
    (bgo#737092).
  + Better memory utilization via more conservative pixbuf cache
    (bgo#715198).
  + Fixes minor bugs detected by better Vala code analysis.</changelog>
<changelog author="mgorse@suse.com" date="1412769600">- Add
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  Fix a crash when updating the date/time of a photo (bnc#899715).</changelog>
<changelog author="zaitor@opensuse.org" date="1414756800">- Update to version 0.20.2:
  + Set Desktop Slideshow dialog resource now included in
    distribution (bgo#739095).
  + Check for rendering failure in video thumbnailer (bgo#738245).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1422964800">- Update to version 0.21.0:
  + User interface refresh (bgo#742326, bgo#742443).
  + Fix Shotwell Viewer .desktop file (bgo#743799).
  + Natural sorting of photo titles (bgo#717960).
  + Improved video thumbnailer (bgo#739396, bgo#741821).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 0.22.0:
  + Improved metadata support for Facebook upload (bgo#742163).
  + Saved search now properly supports text is-set, not-set
    (bgo#743924, bgo#743923).
  + Import title, exposure time when available.
  + User interface improvements (bgo#744291, bgo#719284, more).
  + Sort photos by filename (bgo#717878).
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1440763200">- Add 0001-Shotwell-flickr-api-change-fix.patch
  Flickr's API has gone to HTTPS only, this patch backport upstream fix for it.
  (bnc#943559 bgo#732432)</changelog>
<changelog author="dimstar@opensuse.org" date="1452081600">- Update to version 0.22.0+git.20160103 (based on source service):
  + Port to webkit2gtk-4.0.
  + Don't pack webview into a scrolled window.
  + Have all soup sessions validate TLS certificates (boo#958382).
  + facebook: Don't disable XSS auditor.
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-4.0), following upstreams port to WebKit2.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Shotwell-flickr-api-change-fix.patch and
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  fixed upstream.</changelog>
<changelog author="mgorse@suse.com" date="1495627200">- add shotwell-facebook-id.patch: update Facebook id (bsc#943556
  bgo#748991).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499169600">- Add shotwell-service-selector-null.patch: Check that a widget
  isn't NULL before using it. (bsc#1040047 bgo#783250)</changelog>

</package>
<package pkgid="17c38ba1f5e64b04c87070ed5c6231ec4569dc59d90611f8b5fcca6e9e1b39b9" name="shotwell-lang" arch="noarch">
    <version epoch="0" ver="0.22.0+git.20160103" rel="11.1"/>

<changelog author="dimstar@opensuse.org" date="1391601600">- Update to version 0.17.0:
  + Include parent folder names for keyword search.
  + Tumblr publishing fixed.
  + Bug fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 0.17.1:
  + Parent folder names as search keywords rolled back
    (bgo#722756).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1393934400">- Update to version 0.17.2:
  + UNIX pipe unnecessarily left open for each imported video.
  + Improved searching for event comments and diacritics.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1395230400">- Update to version 0.18.0:
  + Compile and install translated help files.
  + Updated translations.
- Add pkgconfig(gnome-doc-utils) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1404302400">- Update to version 0.18.1:
  + Fix Flickr publishing errors due to Flickr moving to HTTPs-only.
  + Fix crash when updating photo data/time.
  + Fix crash due to nested tag and changing sidebar selection.
  + Corrected URLs to point to new gnome.org pages.</changelog>
<changelog author="mgorse@suse.com" date="1406116800">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348 bgo#732964).</changelog>
<changelog author="mgorse@suse.com" date="1406116801">- Add
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch:
  fix possible crash after deleting photo (bnc#869348, bgo#732964).</changelog>
<changelog author="dimstar@opensuse.org" date="1406203200">- Add shotwell-vala.patch: Fix build with vala 0.25.1 (bgo#733650).</changelog>
<changelog author="dimstar@opensuse.org" date="1408708800">- Update to version 0.19.0:
  + Support for Rajce.net and Gallery 3 photo services added.
  + Set background image for lock screen.
  + Better detection of corrupt images during import.
  + Various bug fixes.
  + Updated translations.
- Drop upstream fixed patches shotwell-vala.patch and
  0001-Remove-photo-from-the-collection-when-deleting-in-si.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1411214400">- Update to version 0.20.0:
  + Fix crash when deleting a photo in Shotwell Photo Viewer.
  + Fix crash when deleting a photo.
  + Better detection of corrupt files while importing.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1412337600">- Update to version 0.20.1:
  + Correct problems with navigating photos in full-screen mode
    (bgo#737092).
  + Better memory utilization via more conservative pixbuf cache
    (bgo#715198).
  + Fixes minor bugs detected by better Vala code analysis.</changelog>
<changelog author="mgorse@suse.com" date="1412769600">- Add
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  Fix a crash when updating the date/time of a photo (bnc#899715).</changelog>
<changelog author="zaitor@opensuse.org" date="1414756800">- Update to version 0.20.2:
  + Set Desktop Slideshow dialog resource now included in
    distribution (bgo#739095).
  + Check for rendering failure in video thumbnailer (bgo#738245).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1422964800">- Update to version 0.21.0:
  + User interface refresh (bgo#742326, bgo#742443).
  + Fix Shotwell Viewer .desktop file (bgo#743799).
  + Natural sorting of photo titles (bgo#717960).
  + Improved video thumbnailer (bgo#739396, bgo#741821).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 0.22.0:
  + Improved metadata support for Facebook upload (bgo#742163).
  + Saved search now properly supports text is-set, not-set
    (bgo#743924, bgo#743923).
  + Import title, exposure time when available.
  + User interface improvements (bgo#744291, bgo#719284, more).
  + Sort photos by filename (bgo#717878).
  + Updated translations.</changelog>
<changelog author="cxiong@suse.com" date="1440763200">- Add 0001-Shotwell-flickr-api-change-fix.patch
  Flickr's API has gone to HTTPS only, this patch backport upstream fix for it.
  (bnc#943559 bgo#732432)</changelog>
<changelog author="dimstar@opensuse.org" date="1452081600">- Update to version 0.22.0+git.20160103 (based on source service):
  + Port to webkit2gtk-4.0.
  + Don't pack webview into a scrolled window.
  + Have all soup sessions validate TLS certificates (boo#958382).
  + facebook: Don't disable XSS auditor.
  + Updated translations.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-4.0), following upstreams port to WebKit2.</changelog>
<changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Drop 0001-Shotwell-flickr-api-change-fix.patch and
  0001-Shotwell-crashes-when-adjusting-date-time-Closes-bug.patch:
  fixed upstream.</changelog>
<changelog author="mgorse@suse.com" date="1495627200">- add shotwell-facebook-id.patch: update Facebook id (bsc#943556
  bgo#748991).</changelog>
<changelog author="adrien.plazas@suse.com" date="1499169600">- Add shotwell-service-selector-null.patch: Check that a widget
  isn't NULL before using it. (bsc#1040047 bgo#783250)</changelog>

</package>
<package pkgid="e42cea4930493bdb2e3715fd1967242363cf0832cbf1dcb9b3dd71477b6ddd14" name="shutter" arch="noarch">
    <version epoch="0" ver="0.93.1" rel="5.1"/>

<changelog author="swyear@gmail.com" date="1340798400">- try to minimize depensicies
- try fix files-duplicate warning</changelog>
<changelog author="swyear@gmail.com" date="1340798401">- fix depensicies by adding perl-Gnome2-* package</changelog>
<changelog author="swyear@gmail.com" date="1340798402">- fix incorrect fsf address issue</changelog>
<changelog author="swyear@gmail.com" date="1340884800">- add perl-Net-DBus-GLib for SUSE user's UbuntuOne support ^^</changelog>
<changelog author="swyear@gmail.com" date="1340884801">- perl-Net-Dropbox-API is not provided by oss, move to recommends</changelog>
<changelog author="swyear@gmail.com" date="1340884802">- add section in README.openSUSE about relative packages not in oss repository
- fix script-without-shebang</changelog>
<changelog author="swyear@gmail.com" date="1340884803">- remove script of fix script-without-shebang
  will cause ERROR: upload-plugin exists but is not executable - /usr/share/shutter/resources/system/upload_plugins/upload/Dropbox.pm...</changelog>
<changelog author="swyear@gmail.com" date="1340884804">- remove perl-Net-Dropbox-API dependency</changelog>
<changelog author="swyear@gmail.com" date="1340884805">- fix Provides: perl(Dropbox)
- re-add perl-Net-Dropbox-API as recommends</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1344081600">- updated to 0.89
  * Fixed bugs / minor improvements
  - - LP: #664292
    [Feature Request: Please make use of appindicators]
  - - LP: #1012235
    [Advanced Selection Capture entries do not work]
  - - LP: #1018791
    [Change fsf-address]
  * updated translations</changelog>
<changelog author="swyear@gmail.com" date="1357041600">- Update to 0.90
- version 0.90 removes Gnome2::GConf dependency
  * Fixed bugs / minor improvements
  - - LP: #1035259
    [No way to activate the main window when using the appindicator]
  - - LP: #1081917
    [Quicklist no more working]
  - - LP: #1083033
    [Needs a high contrast app icon]
  - - LP: #1083586
    [Remove keybinding code]
  - - LP: #1083588
    [Remove Simple Selection Tool]
  - - LP: #1087367
    [File extension .png]
  - - LP: #1092054
    [desktop-file-validate complains again]
  * updated translations
- Drop fsf-address-fix.diff, fixed upstream</changelog>
<changelog author="coolo@suse.com" date="1373889600">- don't hardcode perl package names (modules move into perl from time
  to time)</changelog>
<changelog author="coolo@suse.com" date="1374321600">- fix perl requires</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1377950400">- updated to 0.90.1
  * Fixed bugs / minor improvements
  - - LP: #1092522
    [Shutter doesn't recognize the command-line option "-d"]
  - - LP: #1191521
    [--delay=0 doesn't work from command-line]
  - - LP: #1216619
    [Drawing Tool: encoding problems when using chinese fonts]
  * updated translations</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post/postun scripts</changelog>
<changelog author="sfalken@opensuse.org" date="1422014400">- Update to version 0.93.1:
  + updated Dropbox.pm and XFIXES.pm
  + fixed deprecated code
  + updated translations
- Changes from 0.92
  + Dropbox plugin doesn't work since it uses an old version of
    the API (lp#1163251)
  + Error Dropbox Authentication and upload (lp#1250536)
  + vgy.me sypport (lp#1298878)
  + Dropbox upload plugin uses Public folder and does not create
    proper share link (lp#1349512)
  + Updated Translations
- Changes from 0.91
  + Launching a second instance causes a crash (lp#731874)
  + Segmentation Fault when trying to edit an image (lp#1034768)
  + Crashes after clicking "edit" while using certain icon
    themes (lp#1285287)
  + Shutter: ImageBanana no longer active... (lp#1334869)
  + Remove UbuntuOne (lp#1351015)
  + Updated translations
- Changes from 0.90.1
  + Add new icon (lp#1243649)
  + immio has been closed (lp#1308485)
  + Session tab no longer shows thumbnails after fresh install
    Kubuntu 14.04 (lp#1314893)
  + Updated translations
- Dropped:
  + shutter-0.90.1.tar.bz2
- Updated desktop-shortcut-fix.diff to clean up some rpmlint
  warnings</changelog>
<changelog author="mailaender@opensuse.org" date="1468670400">* spec file cleanup
  * moved contents of README.openSUSE to https://en.opensuse.org/Shutter
  * fix license</changelog>
<changelog author="mailaender@opensuse.org" date="1472990400">- add shutter-0.93.1-fix-send-email.patch to fix lp#1469840
- require perl(Gtk2::AppIndicator) to fix rh#1228973</changelog>
<changelog author="mailaender@opensuse.org" date="1474200000">- add an appdata.xml file for https://software.opensuse.org/appstore</changelog>
<changelog author="mailaender@opensuse.org" date="1483876800">- add CVE-2016-10081.patch to fix CVE-2016-10081 and close bnc#1017571</changelog>

</package>
<package pkgid="3b69e9ae2c24e93a5e6198eb1a0e280f74c9bf460f759cce6f69ffac579a62d8" name="shutter" arch="src">
    <version epoch="0" ver="0.93.1" rel="5.1"/>

<changelog author="swyear@gmail.com" date="1340798400">- try to minimize depensicies
- try fix files-duplicate warning</changelog>
<changelog author="swyear@gmail.com" date="1340798401">- fix depensicies by adding perl-Gnome2-* package</changelog>
<changelog author="swyear@gmail.com" date="1340798402">- fix incorrect fsf address issue</changelog>
<changelog author="swyear@gmail.com" date="1340884800">- add perl-Net-DBus-GLib for SUSE user's UbuntuOne support ^^</changelog>
<changelog author="swyear@gmail.com" date="1340884801">- perl-Net-Dropbox-API is not provided by oss, move to recommends</changelog>
<changelog author="swyear@gmail.com" date="1340884802">- add section in README.openSUSE about relative packages not in oss repository
- fix script-without-shebang</changelog>
<changelog author="swyear@gmail.com" date="1340884803">- remove script of fix script-without-shebang
  will cause ERROR: upload-plugin exists but is not executable - /usr/share/shutter/resources/system/upload_plugins/upload/Dropbox.pm...</changelog>
<changelog author="swyear@gmail.com" date="1340884804">- remove perl-Net-Dropbox-API dependency</changelog>
<changelog author="swyear@gmail.com" date="1340884805">- fix Provides: perl(Dropbox)
- re-add perl-Net-Dropbox-API as recommends</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1344081600">- updated to 0.89
  * Fixed bugs / minor improvements
  - - LP: #664292
    [Feature Request: Please make use of appindicators]
  - - LP: #1012235
    [Advanced Selection Capture entries do not work]
  - - LP: #1018791
    [Change fsf-address]
  * updated translations</changelog>
<changelog author="swyear@gmail.com" date="1357041600">- Update to 0.90
- version 0.90 removes Gnome2::GConf dependency
  * Fixed bugs / minor improvements
  - - LP: #1035259
    [No way to activate the main window when using the appindicator]
  - - LP: #1081917
    [Quicklist no more working]
  - - LP: #1083033
    [Needs a high contrast app icon]
  - - LP: #1083586
    [Remove keybinding code]
  - - LP: #1083588
    [Remove Simple Selection Tool]
  - - LP: #1087367
    [File extension .png]
  - - LP: #1092054
    [desktop-file-validate complains again]
  * updated translations
- Drop fsf-address-fix.diff, fixed upstream</changelog>
<changelog author="coolo@suse.com" date="1373889600">- don't hardcode perl package names (modules move into perl from time
  to time)</changelog>
<changelog author="coolo@suse.com" date="1374321600">- fix perl requires</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1377950400">- updated to 0.90.1
  * Fixed bugs / minor improvements
  - - LP: #1092522
    [Shutter doesn't recognize the command-line option "-d"]
  - - LP: #1191521
    [--delay=0 doesn't work from command-line]
  - - LP: #1216619
    [Drawing Tool: encoding problems when using chinese fonts]
  * updated translations</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms 